last executing test programs: 12.574748651s ago: executing program 2 (id=3181): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r3, &(0x7f0000001140), 0x74e, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) (async) sendmsg$key(r4, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090a00000028bd7000fcdbdf25030006003c00000002004e20ac1414340000000000000000030005003c00000002004e2264bbce0100000000000000000200130005"], 0x50}, 0x1, 0x7}, 0x2c04c840) 11.963701949s ago: executing program 2 (id=3185): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100f8ff00000007010000f8ffffffb702000008000000b703000000000008850000008800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.734966141s ago: executing program 2 (id=3186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x8, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) 10.5259102s ago: executing program 2 (id=3190): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @lsm=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @lsm=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 5.090890345s ago: executing program 1 (id=3225): r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst={0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) unshare(0x22020400) setsockopt(r1, 0xff, 0x1, 0x0, 0x57) write(r0, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 4.043427044s ago: executing program 1 (id=3228): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400000000000000ffffffffff", @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 3.86386576s ago: executing program 1 (id=3231): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f0000000180)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x339}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) r8 = socket$inet(0x2, 0x1, 0xffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000380)={0x77c, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf62b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x116f74fa}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x69}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf, @mcast1, 0xfffffff9}}}}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x19, 0x3, "62e7d46ae92be5b3d65a2ec3727eb8ac9e6a785c14"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ad7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x626}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e29}]}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f98aeda583d1db061db6b29879a0643316e7ef253745207e012f07dab154"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "8e161d77cb0e6c2d60848bede830190a939c8aa94e69f447c69751629c7ef6be322320c6f522009144fd55b064e8d601684a4698d7fda9bf175f824a3279cde8960559e44778552cdde9d1306ba607751c0898fd7da5b1f8c6b8bb8b3d0114285853139ed5aacfddffcaf4bccb7202c43f94e3f31cd921cdd33fc6c713899a354743959083cbf4ba7c19bc7b12a00599cc8a8da842ce6f4f4430d5ae6d250c2a22a6824994bc5c752bee43d66dea19342a24ebcd502fcab6dc0bf7ec"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d81ce268596ed0626957ccef972c4629b264db98340357c621"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b8321930fa931b8f147a1c5ab50cde2291ec98aa95be6a1f30218dfd0f4bcc4ab477c20ec112a006666b8df505a6e2a878d426ccac6f55967e83b47366dcbb9db9edb24e1c2a187f9d80ff5c6e624e5b04d02c2b8c6cb1d9729ce86544e291a995870e1848b6c694c7c113ff34183f10f0a102bc6f57ab6924767f645af5b55d2941ed963b7411d977bd641bcb81d1fa4a4bce4fd72a721b1461fe7fcc85b00e921758ebf2da897634753ecb8920d3aeff88f9d2c80a2766404e1d737fe5ac48d93a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "daca3d5f598c7488d357f07207bdaf8d97c951558da77cd374711b82e52f"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc63}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x558}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb45d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "e2a17e5e9e6a290c58877db56662613491eb87687ab84e37aca585e35723f3f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d26295916627d4d3313273e348b1465399a497713d326b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x178, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa77f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff30fd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa91}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8a7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x77c}, 0x1, 0x0, 0x0, 0x94}, 0x400c0) (async) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f0000000b80)={0x10, 0x2a, 0x9, 0x967f, 0x7}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83b4, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x6, 0x0, 0x5, 0x18, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x9, 0xa, 0x6, 0x18, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x1, 0x14, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x16}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={@fallback=r4, 0x32, 0x1, 0x3, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000f80)={0xa3f, 0x0}, 0x8) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex, r9, 0x2b, 0x202c, 0x0, @void, @void, @value=r12, @void, r11}, 0x20) (async) pselect6(0x40, &(0x7f0000000fc0)={0x400, 0x9, 0x1c00000, 0x80000000, 0x8, 0x6, 0x8e34, 0x5}, &(0x7f0000001000)={0xffff, 0x1, 0x456c, 0x0, 0x10001, 0x8, 0x0, 0x9}, &(0x7f0000001040)={0xb, 0x1, 0x7fffffffffffffff, 0x6, 0x0, 0x3, 0x10000, 0x59}, &(0x7f0000001080), &(0x7f0000001100)={&(0x7f00000010c0)={[0x2]}, 0x8}) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000001140)={0xe, 0x1}, 0xc) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000001200)={&(0x7f0000001180)=[{0xffff, 0x1, 0x0, {0x5, 0x3, 0x2}}, {0x9f37, 0x0, 0x0, {0xf, 0xffffa14d, 0x1}}, {0x5a, 0x2, 0x0, {0x4, 0x6, 0x1}}], 0x3, 0x20, 0x5, 0x360}) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001240)=r9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001280)=0x100, 0x4) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f00000012c0)=0x4a, &(0x7f0000001300)=0x4) sendmsg$inet(r1, &(0x7f0000001840)={&(0x7f0000001340)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001380)="5d8ac9dcf6d996d826539b6dd5ee1cacc608c137a7261ddd04a2da2ea7e394c649bfaff31d9882c98ca8a35d6794060148f4b40ce740cda067162be30331c22c021136a9ddf57e4022b074dbb4d6b0c95d8d53cd3ca5650ba260badc0afa5b6d14c6bc025eb84a2e03", 0x69}, {&(0x7f0000001400)="993be45dfc8e7a963f4936b7712eaa63584ffb0cfa31106c358b63f7361336843eac2614b41f5502", 0x28}, {&(0x7f0000001440)="c1a4acb751c15ed9df2b5976307865566082c1f67cdf74aa6ea05a7cb0e4dcc360e3d4bf19c69f063058d0feac46a8ace546b08e64611fc8dcd4eef1bc0ab80a5d6b0d7a58af31344630d849ffd7cf64b87973cfe1bd4e717cba562fa1b53bb4672ecc2cbbe538d0eb5b7c654f3cd7eeb542023a85c81f9c54d014831f2d704178cc23e31e081d800c0ba346e5a01a329bd8860795b044777d8dd1d9a05cd73612d4e43a808e40957db30376aa0095ff23cc64bd506d4e2b1d9c41d68f2f499fe03ffa389c85b6951b1d76", 0xcb}, {&(0x7f0000001540)="4d7b7ff441eca7efd5763073564e1cdd8cc9274d258e7b7f0ee2e2b569829d5bab463e2e85659fb36ad4d0adad079f19852ec2867689d5703887113e02a65931a15f83ae223b4b8f2d2080e13f0e92c534ecc16e6c3842f19615e6aa5bf14ea106c28dc14dfc7a51e3982a9b239c63f85169a11ebf64d70d3b4a5c583c9d155add82a998a5fa7fbda86f4682a9a3eaa16fb0446d485947b3a5a9ab8fcb6e46ece08478dcb0c04b22c3d4a8701f99fd07d73b19d462ee1884b7d8f7d41d87259647c254b23dfb29582caa43", 0xcb}, {&(0x7f0000001640)="cad4613e7f0ce8279daae0a8f132c5c92c0d8505f4ab8479296c8d065b7699da54239b5f9aba7eccb0c575b889a7651dcc69c621c634da680d8ba1635b23deadda18e92a8021cf6f948a849bbff023496bb5605555d0f182f60f86102ad6697569de294cad555a6868d17697d7e1e457e49597c55172fb513dab2002e49f92d0", 0x80}, {&(0x7f00000016c0)="ac01e368ff4645eb9b34479e416c4a1062ef0b4995d17ed6f4127525f23097d8bd34bc6cb154ca4cef935cac90d1ef5b489fb45543a384344fff7bad3e7879269f275550f6bbdd96889b9ff9d91c4ff8d0320664c539bb5d1349050b7c5222b040684c9cc987eb29f42c786ecbdfa5b4bd82ca62c650384d94ace6c5d991dda1a52d612d95ab5b8c73da1ca6685799381ab7f2dcc9e4eb", 0x97}], 0x6, &(0x7f0000001800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}, 0x1) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000001880)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 3.454716092s ago: executing program 1 (id=3235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000800)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 3.305210487s ago: executing program 3 (id=3237): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000b80)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c60000000000000000000000000b"}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.182996403s ago: executing program 1 (id=3238): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000100)={0x5, 0x0, 0xab77, 0x0, 0x81, 0x3f}) (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x1}, 0x1c) listen(r3, 0x0) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4880}, 0x40811) (async) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910", @ANYRES16=0x0], 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x3, 0x2}) (async) recvfrom(r4, &(0x7f0000000180)=""/60, 0x3c, 0x142, 0x0, 0x0) 3.104652321s ago: executing program 3 (id=3240): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400000000000000ffffffffff", @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 2.909759699s ago: executing program 3 (id=3242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x68}}], 0x2, 0x4040005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 2.35065081s ago: executing program 0 (id=3246): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfff8, 0xa000000}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x89}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780060005"], 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000000400000008000900640101013348c8d4a089c61674731d2fcee5f6fb8f54b49e0ef631019dc5edbfa16d2460539ca3cfa4a49aeeb44fdd715b73bed5c898ab7eadff9db38072b96c85e2bf394e8dcd7987875cbfd137db06af9a78778dadd043f658e3e8a4ac1d46681a8705f405fb7e87e81c773a3e4fb563e81560a67c4f58af44348048ca9bd385cb2d0094ca4684f489966a9963314a936c566a075a77e811cb"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0xfffffffffffffcb5, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r5, 0x519, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000040) 2.325507514s ago: executing program 4 (id=3247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x1f, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x144, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x335f070d, 0x4) 2.181327943s ago: executing program 4 (id=3248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0xfffffffe, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0, 0x2e, 0x0, 0xee01}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x5, 0x0, 0xffffffff, 0x8, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1.934792045s ago: executing program 3 (id=3249): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c54c65e", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x41001}, 0x8000) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) r9 = accept$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000000380)=@bcast) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x65, 0x0, 0x8, 0x8}, {0x7f, 0x3, 0x7f, 0x2}, {0x8, 0x0, 0x28, 0x81}]}, 0x10) 1.715281572s ago: executing program 0 (id=3250): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000001030007010000f8ffffffb702000008000000b703000000000008850000008800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.570432972s ago: executing program 4 (id=3251): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) 1.536470942s ago: executing program 0 (id=3252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001180)={r1}, &(0x7f00000011c0)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r2, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x6120000e}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4004}, 0x8051) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)=ANY=[@ANYBLOB="8329a6b1343839c69938a3fc4ff7e9c81400003d1000010000000000000100000200000a140000001100010000000000000000000a00000a"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001280)=@assoc_value, &(0x7f00000012c0)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf250800150000000000080001000000000008004b0013fffb00080003000400000008004f00"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 1.534978882s ago: executing program 3 (id=3253): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, r1, 0x1, 0x4, 0x2, 0x9, "c537b239b5eaedb2b838069ea678a343e60320cad57f1de756492290912c92c7fc18e4bb60ed22f450d7182b669de046a92e673e13523553c20eebe5c9c628", 0x22}, 0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x4, 'none\x00', 0x1b, 0xfffffffd, 0x2}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x10}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x10) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000280)="ce19ca9dc06493e6e67bfa5b6abe13a3e5d4c4db86d45a218e5dd1eebb8d394c03a659bed42c894dba5b371d1e2883f4cd69c03397dcaaf160ed86811377fc208995ad77556db1e13add7185f6cdb82cf2cbbd289b87efe1c28edebf7e1b236ec9927d4d85142bf932e961e1df65509fef95c7ba9ed5e88335070ce5fb32df27e1a122c78956e92fcad86cd246e3901925a20d5808daf4671f5eea33b961138ae3986514469dfb8d1bce45cd75f361fbe47f3ca98c5ca563e8b889512ca083f9b7e5eeca", 0xc4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x1) shutdown(r5, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket(0x1d, 0x2, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r11) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r12, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.39857783s ago: executing program 4 (id=3254): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000082c000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000bf6f3b00121f13ab0dbdf58f9df9"], 0x1d) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x5, 'syz1\x00', @default, 0x81, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) splice(r3, 0x0, r2, 0x0, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 1.398392419s ago: executing program 1 (id=3255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000380)={&(0x7f0000000040)=0x7, 0x100000, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000340)}) 1.311445147s ago: executing program 3 (id=3256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xa98}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004011}, 0x8040) unshare(0x62000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0400001800dd8d0000000000000000020000000000000600290000b25478a053219a62f872663550a77310dd9924f5e56a5a41edbf4630cba3d9c54b25a779a79c31fcbf5dfb0a87f422665eff3c9a27bf360d24e9e4f6987c629fc46594a78151bd1e182c31b35a53e849a9cfe8889dc0d634fb930527c27437c30d17e17dcf7ed91d509c6d0dd3646d06c5ad0279bada33183ccb5e88a93e366e503c908dcfe5ab9d4bb98bcc49523392309318b050"], 0x1c}}, 0x8c0) 1.206836196s ago: executing program 2 (id=3192): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0xa073, r1, 0x5450b000) 1.068656351s ago: executing program 2 (id=3258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r6, 0x1}, {0xffffffffffffffff, 0x502}, {r3, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x20000142, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x4, 0x480, [0x200000000bc0, 0x0, 0x0, 0x200000000d8c, 0x200000001010], 0x0, &(0x7f0000000200), &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, 0x4ec) write(0xffffffffffffffff, &(0x7f0000005c00)="2708000014000707030e", 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000340)=ANY=[@ANYRES64=r6], &(0x7f0000000380)='syzkaller\x00', 0x4, 0xce, &(0x7f0000000440)=""/206, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x4}) accept(r2, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060006000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.012651147s ago: executing program 4 (id=3259): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f0000000380)=@sco={0x1f, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)="5f19c4639cf23d17957a458a074ecd9f42b9aa44a41f94dfba16d7cc7a6a4d4e36d14d999acd70bcc73c206ab2ef49453e751508a6cb777ed43b038088851a7fc4ec047058aab33e431a8c0594b47156b049b5fc4e0c1dd1abef9dab9230ab8f6ade3deab3a06304df9c72a72cf2c9244c", 0x71}, {&(0x7f0000000480)="8266f090b28ecd12c04668f5e1ca428ae6407dd2878a8eb10a873f02989d71813be025e1a98c5abd3ef006d9c9daab590760b40c48e733ff3bf04664c14020066cd1c2a039be13b64f5ec14fe6549edff5f26a21cbc028d39083b7b59050eaebf73dae67dc0cee8bcb0f39f5d12399be7c7e5da226c6dcd5330f9044753638b24498cbd3996bea6f8e085664aa68b365f2", 0x91}, {&(0x7f0000000540)="b470954577b7ff72a95c1eb3e7084b96af069364a490b46e2e029a368fc67f7c49316a0cc98607462dcc00157361528acbe1bcd094192019d2d55c3ddd01a5ee35ac9401fd02b1aa1168031963e656285d91319e8efa3f9ecdb5500d2bfb848396f08f4ac1f9edddf6992bbf8b9f55a59b72bf6fa1c1fe7d98ae1823e1178a03b34b2790ea0c4554ce65208c3d0aa41c8a79102cf43fdd65d0dd82db06d26ec10053e351dd15cbb07f853ba1895ce6407d9a8b0e247d09192f5cee", 0xbb}, {&(0x7f0000000600)="0f2b495d4628df192a9bbb89ca58b0e2a24dfac7f97c9d29282e5e1348985bd35ba965e52c04334c57aef8d32f86473c5560eb36f4e1ef7993291f373d80eb7a2c6c66445733f7375f071252c766ae71b88880071b22935299314d5e01104be87a5527ddf6919d019d45284a2cac702e73ed42c597425af3b31b4cd3e9b9b8d9d4977b16956fe5e88d77fbbb0bdb404f1ec4725f0bf9291574", 0x99}, {&(0x7f00000006c0)="cca00ca0feeca3a31c39ed5c9a825778f9f42cbfda3e9a6dbd09b50e4823ae4333c68cfb5c1ce1bcdc715eea073cf2adb6bfef59965f3eb7ccaf15048c0a41d3d67836f048e836177fa5e066968eae86dad0e723a41ab19dff758288a5358ebc6fee41ed61c5ddf042b801eea2551ed2ed71d4982ac1ba176f066f480e0c65fd13b0992eb529d889790404dc2bc0cccf95837880b40435bfa36af43a262088a42d37e7fc499e481f352fd135dd546a3f3ea952ad1a652a79faa691b887455cb132bc5919928449a8daaca64a072982374af94efa5057", 0xd6}], 0x5, &(0x7f0000000980)=[{0x40, 0x103, 0x2, "ced199b41f9bcb51eb37295284862e5284ac6e03668523783b4d37dfae20fec2a00bd33508a582b128871d"}, {0xe0, 0x110, 0x86, "a1cac884f2ae89bbab3b2370057a8690bd5475f0ae59a627df8627fe9e8c718b7f04da124eeb93c09447cb0bd3b8c9b2c6ae9d7344ec395f8d19a67a68b60d9f20046344fe9305cc6ca73a0a40e8c06f6f659bceb97cfb8e9792fc379c5fe47aff6b3a0336f5ce895f9bdd0de1a75a13b59ddd72858951ba3d4b40a2e9b56d43e241fc9e4faa9c56e642b55818118080bfeaa5a5c445b793cd3cc639d42d59adda4f0cb059ade64361d964c370a2dabfbb5342cf2609e39ffb678d4b422578d5cf79653dcacfa5cca9"}], 0x120}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000002c0)={{r3, &(0x7f0000000040)=']$\\\'!\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x9]}, {0x3, 0xff00, 0xd}}, 0xf, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x101}, {[0x4, 0x37b2, 0x9]}, 0x400, 0x2d, &(0x7f0000000180)=""/45}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) 633.860502ms ago: executing program 4 (id=3260): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0xa, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)="c9b970a518ab", &(0x7f0000000140), 0x1003, r4, 0x0, 0x2000000}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r4}, 0x38) 364.89823ms ago: executing program 0 (id=3261): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000040007010000f8ffffffb702000008000000b703000000000008850000008800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 106.729679ms ago: executing program 0 (id=3262): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0xff, 0x8000, 0x400}, 0x10) 0s ago: executing program 0 (id=3263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) close(0x3) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0xa002a014}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@getqdisc={0x2c, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xb}, {0x2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c071}, 0x4008000) kernel console output (not intermixed with test programs): nknown, defaulting to 1000 [ 310.538706][T12969] __nla_validate_parse: 1 callbacks suppressed [ 310.538728][T12969] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2000'. [ 310.557503][T12970] netlink: 'syz.3.1998': attribute type 12 has an invalid length. [ 310.582718][T12950] wg1 speed is unknown, defaulting to 1000 [ 310.599058][T12950] wg1 speed is unknown, defaulting to 1000 [ 310.800112][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 310.820704][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 312.293036][T13031] syzkaller0: entered allmulticast mode [ 313.511796][T12969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.698613][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 313.798682][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 313.837155][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 314.017660][T13049] gre0 speed is unknown, defaulting to 1000 [ 314.064018][T13060] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 314.160506][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 314.255724][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 314.281684][T13067] syzkaller0: entered allmulticast mode [ 314.306922][T13060] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2024'. [ 314.346831][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 315.046687][T13049] lo speed is unknown, defaulting to 1000 [ 315.054679][T13094] gre0 speed is unknown, defaulting to 1000 [ 315.063367][T13049] wg1 speed is unknown, defaulting to 1000 [ 315.674730][ T3942] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.685770][ T3942] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.695334][ T3942] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.722477][ T3942] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.791548][T13094] lo speed is unknown, defaulting to 1000 [ 315.816084][T13094] wg1 speed is unknown, defaulting to 1000 [ 315.877505][T13124] __nla_validate_parse: 3 callbacks suppressed [ 315.877525][T13124] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2037'. [ 316.122670][T13127] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 316.203421][T13127] bond6: entered promiscuous mode [ 316.209207][T13127] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.448173][T13132] SET target dimension over the limit! [ 316.822995][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 317.321581][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.332258][T13163] : entered promiscuous mode [ 317.540145][T13171] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2051'. [ 317.587014][T13164] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2048'. [ 317.807626][T13176] gre0 speed is unknown, defaulting to 1000 [ 317.826129][T13183] ipt_ECN: cannot use operation on non-tcp rule [ 318.281187][T13187] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 318.322944][T13187] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.333391][T13187] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.343808][T13187] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.365600][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.391176][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 318.651646][T13201] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 318.769493][T13176] lo speed is unknown, defaulting to 1000 [ 318.783472][T13176] wg1 speed is unknown, defaulting to 1000 [ 319.132959][T13215] syzkaller0: entered allmulticast mode [ 319.499907][T13227] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 319.560668][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 319.565180][T13227] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.663082][T13227] bond7 (unregistering): Released all slaves [ 320.702594][T13274] gre0 speed is unknown, defaulting to 1000 [ 320.917942][T13281] syzkaller0: entered promiscuous mode [ 320.924493][T13281] syzkaller0: entered allmulticast mode [ 320.960449][T13281] pim6reg: entered allmulticast mode [ 320.992493][T13281] pim6reg: left allmulticast mode [ 321.508625][T13274] lo speed is unknown, defaulting to 1000 [ 321.526486][T13274] wg1 speed is unknown, defaulting to 1000 [ 322.029373][T13307] gre0 speed is unknown, defaulting to 1000 [ 322.074071][T13313] IPv6: sit2: Disabled Multicast RS [ 322.265468][T13322] syzkaller0: entered promiscuous mode [ 322.282619][T13322] syzkaller0: entered allmulticast mode [ 322.553103][T13307] lo speed is unknown, defaulting to 1000 [ 322.561086][T13307] wg1 speed is unknown, defaulting to 1000 [ 324.317201][T13375] gre0 speed is unknown, defaulting to 1000 [ 324.410116][T13381] sctp: [Deprecated]: syz.1.2105 (pid 13381) Use of int in max_burst socket option. [ 324.410116][T13381] Use struct sctp_assoc_value instead [ 324.586517][T13381] bond7: entered promiscuous mode [ 324.627317][T13381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.985808][T13375] lo speed is unknown, defaulting to 1000 [ 325.005408][T13375] wg1 speed is unknown, defaulting to 1000 [ 325.063354][T13389] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 325.491792][T13402] netlink: 'syz.4.2111': attribute type 13 has an invalid length. [ 325.500020][T13402] netlink: 'syz.4.2111': attribute type 17 has an invalid length. [ 325.868717][T13412] netlink: 'syz.1.2114': attribute type 13 has an invalid length. [ 325.888078][T13412] netlink: 'syz.1.2114': attribute type 17 has an invalid length. [ 326.036462][ T5884] gre0 speed is unknown, defaulting to 1000 [ 326.097038][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.109416][T13402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.227611][T13412] 8021q: adding VLAN 0 to HW filter on device .` [ 326.242070][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.254431][T13412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.272274][ T165] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.281916][ T165] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.296843][ T5884] gre0 speed is unknown, defaulting to 1000 [ 326.366189][T13416] bridge0: port 3(syz_tun) entered blocking state [ 326.393591][T13416] bridge0: port 3(syz_tun) entered disabled state [ 326.429112][T13416] syz_tun: entered promiscuous mode [ 326.435485][T13416] bridge0: port 3(syz_tun) entered blocking state [ 326.442139][T13416] bridge0: port 3(syz_tun) entered forwarding state [ 326.477267][ T165] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.526629][ T165] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.535806][ T24] gre0 speed is unknown, defaulting to 1000 [ 326.670677][T13422] __nla_validate_parse: 2 callbacks suppressed [ 326.670700][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 326.700348][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 326.975992][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 327.006907][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'. [ 328.073600][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'. [ 329.660902][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 329.755615][T13468] netlink: 'syz.1.2131': attribute type 30 has an invalid length. [ 330.083407][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2140'. [ 330.467486][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2145'. [ 330.546387][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2145'. [ 330.581193][T13515] gre0 speed is unknown, defaulting to 1000 [ 331.156131][T13531] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 331.244154][T13532] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 331.277733][T13515] lo speed is unknown, defaulting to 1000 [ 331.285582][T13515] wg1 speed is unknown, defaulting to 1000 [ 331.481379][T13547] netlink: 'syz.0.2154': attribute type 10 has an invalid length. [ 331.494253][T13547] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.510715][T13547] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.606176][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 331.999391][T13564] syzkaller0: entered promiscuous mode [ 332.012890][T13564] syzkaller0: entered allmulticast mode [ 332.032995][T13564] TC_ACT_REPEAT abuse ? [ 332.206458][T13571] netlink: 'syz.3.2160': attribute type 21 has an invalid length. [ 332.226780][T13571] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2160'. [ 332.354331][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 332.399795][T10399] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.400113][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 332.408449][T10399] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.442902][T10399] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.463100][T10399] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.292950][T13626] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2167'. [ 333.309693][T13626] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2167'. [ 333.319481][T13626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2167'. [ 335.437238][T13584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.990016][T13653] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 336.067399][T13659] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2184'. [ 336.092679][T13659] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 336.101002][T13659] netlink: 'syz.0.2184': attribute type 11 has an invalid length. [ 336.109023][T13659] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2184'. [ 336.196037][T13668] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 336.212605][T13669] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 336.282772][T13668] bond5: entered promiscuous mode [ 336.291805][T13668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.888072][T13708] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 338.109622][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 338.165030][T13733] netlink: 'syz.1.2209': attribute type 3 has an invalid length. [ 338.179797][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 338.243251][T13747] pimreg: entered allmulticast mode [ 338.334913][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'. [ 338.758986][T13768] dummy0: entered allmulticast mode [ 338.765082][T13767] dummy0: left allmulticast mode [ 338.788935][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 339.209924][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 339.339211][T13796] netlink: 840 bytes leftover after parsing attributes in process `syz.3.2229'. [ 339.681286][T13821] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 339.705162][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 339.731127][T10405] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.740565][T10405] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.750085][T10405] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.759600][T10405] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.919666][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'. [ 339.962417][T13826] gre0 speed is unknown, defaulting to 1000 [ 340.325702][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 340.401769][T13842] batadv_slave_0: entered promiscuous mode [ 340.424683][T13849] tipc: Enabled bearer , priority 0 [ 340.433191][T13849] syzkaller0: entered allmulticast mode [ 340.447699][T13849] tipc: Resetting bearer [ 340.478009][T13848] tipc: Resetting bearer [ 340.496393][T13848] tipc: Disabling bearer [ 340.528460][T13842] gretap1: entered promiscuous mode [ 340.534744][T13842] batman_adv: batadv0: Adding interface: gretap1 [ 340.542290][T13842] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 340.562654][T13842] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 340.596501][T13826] wg1 speed is unknown, defaulting to 1000 [ 340.778464][T13841] batadv_slave_0: left promiscuous mode [ 340.872115][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 340.928188][T13863] xt_TCPMSS: Only works on TCP SYN packets [ 341.835551][T13891] veth0_virt_wifi: entered allmulticast mode [ 342.567631][T13935] syz_tun: entered allmulticast mode [ 342.684288][T13935] syz_tun (unregistering): left allmulticast mode [ 342.862489][T13942] ipvlan2: entered promiscuous mode [ 343.270567][T13954] bond4: option packets_per_slave: invalid value (1668575341) [ 343.321626][T13954] bond4: option packets_per_slave: allowed values 0 - 65535 [ 343.370047][T13954] bond4 (unregistering): Released all slaves [ 343.715720][T13960] gre0 speed is unknown, defaulting to 1000 [ 344.437535][T13989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.511818][T13960] wg1 speed is unknown, defaulting to 1000 [ 364.432359][T14003] __nla_validate_parse: 10 callbacks suppressed [ 364.432384][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 364.491100][T14003] x_tables: duplicate underflow at hook 1 [ 364.624541][T14012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.631899][T14012] IPv6: NLM_F_CREATE should be set when creating new route [ 364.696844][T14012] lo: entered allmulticast mode [ 364.758524][T14012] tunl0: entered allmulticast mode [ 364.778412][T14012] gre0: entered allmulticast mode [ 364.799759][T14028] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 364.810715][T14012] gretap0: entered allmulticast mode [ 364.816210][T14028] netlink: 'syz.1.2288': attribute type 3 has an invalid length. [ 364.826325][T14028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2288'. [ 364.886778][T14012] erspan0: entered allmulticast mode [ 364.908488][T14012] ip_vti0: entered allmulticast mode [ 364.934828][T14012] ip6_vti0: entered allmulticast mode [ 364.962567][T14012] sit0: entered allmulticast mode [ 365.019026][T14012] ip6tnl0: entered allmulticast mode [ 365.060133][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2289'. [ 365.129791][T14012] ip6gre0: entered allmulticast mode [ 365.188550][T14012] bridge0: port 3(syz_tun) entered disabled state [ 365.207022][T14012] ip6gretap0: entered allmulticast mode [ 365.234505][T14012] bridge0: entered allmulticast mode [ 365.257112][T14012] vcan0: entered allmulticast mode [ 365.268456][T14012] team0: entered allmulticast mode [ 365.276733][T14012] team_slave_0: entered allmulticast mode [ 365.295000][T14012] team_slave_1: entered allmulticast mode [ 365.310068][T14012] dummy0: entered allmulticast mode [ 365.327961][T14012] nlmon0: entered allmulticast mode [ 365.353744][T14012] caif0: entered allmulticast mode [ 365.361349][T14012] batadv0: entered allmulticast mode [ 365.368064][T14012] veth0: entered allmulticast mode [ 365.380533][T14012] wg0: entered allmulticast mode [ 365.389791][T14012] wg1: entered allmulticast mode [ 365.417297][T14012] wg2: entered allmulticast mode [ 365.427375][T14012] veth0_to_bridge: entered allmulticast mode [ 365.434175][T14012] veth1_to_bridge: entered allmulticast mode [ 365.441069][T14012] veth0_to_bond: entered allmulticast mode [ 365.447419][T14012] bond_slave_0: entered allmulticast mode [ 365.453607][T14012] veth1_to_bond: entered allmulticast mode [ 365.460446][T14012] bond_slave_1: entered allmulticast mode [ 365.466691][T14012] veth0_to_team: entered allmulticast mode [ 365.473014][T14012] veth1_to_team: entered allmulticast mode [ 365.479587][T14012] veth0_to_batadv: entered allmulticast mode [ 365.493630][T14012] batadv_slave_0: entered allmulticast mode [ 365.500363][T14012] veth1_to_batadv: entered allmulticast mode [ 365.506813][T14012] batadv_slave_1: entered allmulticast mode [ 365.513114][T14012] xfrm0: entered allmulticast mode [ 365.519159][T14012] veth0_to_hsr: entered allmulticast mode [ 365.525260][T14012] hsr_slave_0: entered allmulticast mode [ 365.531255][T14012] veth1_to_hsr: entered allmulticast mode [ 365.538164][T14012] hsr_slave_1: entered allmulticast mode [ 365.544122][T14012] hsr0: entered allmulticast mode [ 365.549864][T14012] veth1_virt_wifi: entered allmulticast mode [ 365.556158][T14012] veth0_virt_wifi: entered allmulticast mode [ 365.562942][T14012] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 365.570905][T14012] veth1_macvtap: entered allmulticast mode [ 365.577336][T14012] veth0_macvtap: entered allmulticast mode [ 365.583579][T14012] macsec0: entered allmulticast mode [ 365.589238][T14012] geneve0: entered allmulticast mode [ 365.594960][T14012] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 365.603024][T14012] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 365.610752][T14012] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 365.618881][T14012] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 365.626619][T14012] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 365.634109][T14012] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 365.641904][T14012] vxlan0: entered allmulticast mode [ 365.647532][T14012] sit1: entered allmulticast mode [ 365.652876][T14012] ip6tnl1: entered allmulticast mode [ 365.658837][T14012] bridge_slave_1.: entered allmulticast mode [ 365.665136][T14012] geneve2: entered allmulticast mode [ 365.670921][T14012] ip6gre1: entered allmulticast mode [ 365.677925][T14012] ip6tnl2: entered allmulticast mode [ 365.683841][T14012] úÁàél24): entered allmulticast mode [ 365.689843][T14012] ip6tnl3: entered allmulticast mode [ 365.695478][T14012] ip6tnl4: entered allmulticast mode [ 365.701294][T14012] bond1: entered allmulticast mode [ 365.706884][T14012] vxlan1: entered allmulticast mode [ 365.712469][T14012] vxlan1: left promiscuous mode [ 365.718499][T14012] ip6tnl5: entered allmulticast mode [ 365.724039][T14012] bridge_slave_0.: entered allmulticast mode [ 365.730639][T14012] bond0: entered allmulticast mode [ 365.736157][T14012] geneve3: left promiscuous mode [ 365.741901][T14012] sit2: entered allmulticast mode [ 365.748375][T14012] bridge1: entered allmulticast mode [ 365.754059][T14012] bond2: entered allmulticast mode [ 365.759837][T14012] bond3: entered allmulticast mode [ 365.765287][T14012] syztnl0: entered allmulticast mode [ 365.771102][T14012] veth2: entered allmulticast mode [ 365.777185][T14012] veth3: entered allmulticast mode [ 365.782609][T14012] vlan0: left promiscuous mode [ 365.788080][T14012] geneve1: left promiscuous mode [ 365.793474][T14012] vxcan2: entered allmulticast mode [ 365.799471][T14012] sit3: left promiscuous mode [ 365.804342][T14012] sit3: entered allmulticast mode [ 365.810053][T14012] bridge2: entered allmulticast mode [ 365.815613][T14012] bridge3: entered allmulticast mode [ 365.821882][T14012] ip6gretap1: entered allmulticast mode [ 365.828438][T14012] !: entered allmulticast mode [ 365.833773][T14012] vxlan2: entered allmulticast mode [ 365.839499][T14012] ip6tnl6: entered allmulticast mode [ 365.845137][T14012] B: entered allmulticast mode [ 365.850376][T14012] macvlan0: entered allmulticast mode [ 365.865207][ T24] gre0 speed is unknown, defaulting to 1000 [ 365.879182][ T24] syz1: Port: 1 Link DOWN [ 365.887042][ T24] gre0 speed is unknown, defaulting to 1000 [ 366.031793][T14041] openvswitch: netlink: Missing key (keys=40, expected=80) [ 366.082708][T14041] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.469530][T14063] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2300'. [ 366.512305][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 366.764217][T14072] xt_CT: No such helper "netbios-ns" [ 367.030845][T14090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2305'. [ 367.265163][T14096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2310'. [ 367.342537][T14100] xt_hashlimit: max too large, truncated to 1048576 [ 367.360573][T14100] xt_bpf: check failed: parse error [ 367.383585][T14013] udevd[14013]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 367.543005][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 367.567372][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 368.000446][T14120] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 368.135358][T14120] bond6: entered promiscuous mode [ 368.157866][T14120] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.208614][T14123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.239048][T14123] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 368.280467][T14123] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 368.327243][T14123] bond6: (slave wireguard0): making interface the new active one [ 368.335040][T14123] wireguard0: entered promiscuous mode [ 368.358576][T14123] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 368.395499][T14134] vlan1: entered promiscuous mode [ 368.421468][T14134] gretap0: entered promiscuous mode [ 368.447124][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2321'. [ 368.527899][T14145] netlink: 'syz.2.2323': attribute type 39 has an invalid length. [ 368.911632][T14174] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 369.003026][T14174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.010428][T14168] gre0 speed is unknown, defaulting to 1000 [ 369.060755][T14163] bond7: (slave veth9): Enslaving as an active interface with a down link [ 369.176977][T14163] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 369.228649][T14163] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 369.240238][T14163] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 369.346161][T14168] wg1 speed is unknown, defaulting to 1000 [ 369.613618][T14190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2333'. [ 369.871473][T14194] vlan4: entered promiscuous mode [ 369.897112][T14194] gretap0: entered promiscuous mode [ 370.108022][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 370.154825][T14205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.181316][T14205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.195533][T14205] batman_adv: batadv0: Removing interface: vlan3 [ 370.914381][T14233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2348'. [ 370.970084][T14237] SET target dimension over the limit! [ 371.025838][T14239] netlink: 'syz.1.2351': attribute type 3 has an invalid length. [ 371.041391][T14239] netlink: 'syz.1.2351': attribute type 3 has an invalid length. [ 371.135050][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2354'. [ 371.183826][T14244] tipc: Enabled bearer , priority 0 [ 371.191964][T14244] syzkaller0: entered promiscuous mode [ 371.197552][T14244] syzkaller0: entered allmulticast mode [ 371.207086][T14244] tipc: Resetting bearer [ 371.238779][T14243] tipc: Resetting bearer [ 371.382134][T14243] tipc: Disabling bearer [ 371.465397][T14250] netlink: 'syz.4.2356': attribute type 27 has an invalid length. [ 371.474955][T14250] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 371.487880][T14257] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 371.648576][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 371.658633][T14269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2362'. [ 371.773574][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2364'. [ 371.925805][T14285] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2367'. [ 371.947911][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 372.271642][T14258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.285799][T14258] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 372.348094][T14258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.377295][T14258] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 372.414281][T14258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.542061][T14258] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 372.590830][T14258] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 372.796858][T14258] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 373.085928][T14302] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 373.153204][T14309] netlink: 'syz.4.2375': attribute type 9 has an invalid length. [ 373.176889][T14309] netlink: 'syz.4.2375': attribute type 6 has an invalid length. [ 373.189300][T14309] netlink: 'syz.4.2375': attribute type 7 has an invalid length. [ 373.197200][T14309] netlink: 'syz.4.2375': attribute type 8 has an invalid length. [ 373.381895][T14312] gre0 speed is unknown, defaulting to 1000 [ 373.666678][T14329] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 373.711135][T14329] syzkaller0: entered promiscuous mode [ 373.733028][T14329] syzkaller0: entered allmulticast mode [ 373.758031][T14333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.765501][T14333] IPv6: NLM_F_CREATE should be set when creating new route [ 373.772837][T14333] IPv6: NLM_F_CREATE should be set when creating new route [ 373.790697][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 373.832681][T14335] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.152273][T14312] wg1 speed is unknown, defaulting to 1000 [ 374.295033][T14352] bond8: entered promiscuous mode [ 374.310680][T14352] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.823875][T14370] __nla_validate_parse: 1 callbacks suppressed [ 374.823896][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 374.859804][T14370] team0 (unregistering): Port device C removed [ 374.868132][T14370] team0 (unregistering): Port device team_slave_1 removed [ 375.024008][T14380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2396'. [ 375.317005][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 375.350237][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 375.362471][T14394] netlink: 261 bytes leftover after parsing attributes in process `syz.4.2400'. [ 375.407910][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 375.530232][T14406] blkio.reset_stats is deprecated [ 375.810834][T14396] team1: entered promiscuous mode [ 375.816295][T14396] team1: entered allmulticast mode [ 375.823574][T14396] 8021q: adding VLAN 0 to HW filter on device team1 [ 375.883122][T14400] 8021q: adding VLAN 0 to HW filter on device .` [ 375.892073][T14400] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.905035][T14400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.924058][T14394] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 375.955370][T14394] team2: entered promiscuous mode [ 375.960998][T14394] team2: entered allmulticast mode [ 375.967218][T14394] 8021q: adding VLAN 0 to HW filter on device team2 [ 376.008635][T10396] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.027736][T10396] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.036177][T10396] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.060193][T10396] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.154286][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2411'. [ 376.189644][T14402] gre0 speed is unknown, defaulting to 1000 [ 376.338016][T14435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2408'. [ 376.548598][T14402] wg1 speed is unknown, defaulting to 1000 [ 376.548619][T14421] gre0 speed is unknown, defaulting to 1000 [ 376.678651][T14445] syz.1.2413: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 376.697452][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.1.2413 Not tainted syzkaller #0 PREEMPT(full) [ 376.697483][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.697502][T14445] Call Trace: [ 376.697511][T14445] [ 376.697522][T14445] dump_stack_lvl+0xe8/0x150 [ 376.697559][T14445] warn_alloc+0x249/0x340 [ 376.697585][T14445] ? stack_trace_save+0xa9/0x100 [ 376.697611][T14445] ? __pfx_warn_alloc+0x10/0x10 [ 376.697645][T14445] ? kasan_save_track+0x4f/0x80 [ 376.697668][T14445] ? kasan_save_track+0x3e/0x80 [ 376.697689][T14445] ? __kasan_kmalloc+0x93/0xb0 [ 376.697713][T14445] ? __kmalloc_cache_noprof+0x31c/0x660 [ 376.697737][T14445] ? xskq_create+0x56/0x170 [ 376.697764][T14445] ? xsk_setsockopt+0x54c/0x990 [ 376.697789][T14445] ? do_sock_setsockopt+0x17c/0x1b0 [ 376.697815][T14445] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 376.697839][T14445] ? do_syscall_64+0x14d/0xf80 [ 376.697875][T14445] __vmalloc_node_range_noprof+0x132/0x1730 [ 376.697934][T14445] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.697992][T14445] ? __kasan_kmalloc+0x93/0xb0 [ 376.698025][T14445] vmalloc_user_noprof+0xad/0xe0 [ 376.698050][T14445] ? xskq_create+0xbf/0x170 [ 376.698078][T14445] xskq_create+0xbf/0x170 [ 376.698111][T14445] xsk_init_queue+0x8a/0xe0 [ 376.698149][T14445] xsk_setsockopt+0x54c/0x990 [ 376.698179][T14445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 376.698206][T14445] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.698242][T14445] ? aa_sock_opt_perm+0xff/0x1a0 [ 376.698279][T14445] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 376.698304][T14445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 376.698333][T14445] do_sock_setsockopt+0x17c/0x1b0 [ 376.698365][T14445] __x64_sys_setsockopt+0x13d/0x1b0 [ 376.698400][T14445] do_syscall_64+0x14d/0xf80 [ 376.698432][T14445] ? trace_irq_disable+0x3b/0x150 [ 376.698452][T14445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.698475][T14445] ? clear_bhb_loop+0x40/0x90 [ 376.698502][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.698532][T14445] RIP: 0033:0x7f8daf59c799 [ 376.698556][T14445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.698576][T14445] RSP: 002b:00007f8db0376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.698599][T14445] RAX: ffffffffffffffda RBX: 00007f8daf816180 RCX: 00007f8daf59c799 [ 376.698615][T14445] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 376.698629][T14445] RBP: 00007f8daf632c99 R08: 0000000000000004 R09: 0000000000000000 [ 376.698643][T14445] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.698656][T14445] R13: 00007f8daf816218 R14: 00007f8daf816180 R15: 00007ffe67093698 [ 376.698691][T14445] [ 376.702257][T14445] Mem-Info: [ 377.025340][T14445] active_anon:5659 inactive_anon:12 isolated_anon:0 [ 377.025340][T14445] active_file:2715 inactive_file:40814 isolated_file:0 [ 377.025340][T14445] unevictable:768 dirty:157 writeback:0 [ 377.025340][T14445] slab_reclaimable:12263 slab_unreclaimable:150413 [ 377.025340][T14445] mapped:30728 shmem:1373 pagetables:1275 [ 377.025340][T14445] sec_pagetables:0 bounce:0 [ 377.025340][T14445] kernel_misc_reclaimable:0 [ 377.025340][T14445] free:1273542 free_pcp:10193 free_cma:0 [ 377.076108][T14451] geneve4: entered promiscuous mode [ 377.083068][T14445] Node 0 active_anon:22636kB inactive_anon:48kB active_file:10860kB inactive_file:163068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122912kB dirty:628kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14248kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.120419][T14445] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.128077][ T3942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.169587][ T3942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.183763][T14445] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.214810][T14445] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 377.221427][T14445] Node 0 DMA32 free:1144504kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22636kB inactive_anon:48kB active_file:10860kB inactive_file:163068kB unevictable:1536kB writepending:628kB zspages:0kB present:3129332kB managed:2552352kB mlocked:0kB bounce:0kB free_pcp:35928kB local_pcp:18448kB free_cma:0kB [ 377.256848][T14445] lowmem_reserve[]: 0 0 0 0 0 [ 377.261817][T14445] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 377.321094][T14445] lowmem_reserve[]: 0 0 0 0 0 [ 377.348537][T14445] Node 1 Normal free:3933960kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5348kB local_pcp:5348kB free_cma:0kB [ 377.390561][T14445] lowmem_reserve[]: 0 0 0 0 0 [ 377.396398][T14445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.410478][T14445] Node 0 DMA32: 5470*4kB (UME) 3244*8kB (UME) 1858*16kB (UME) 780*32kB (UME) 379*64kB (UME) 353*128kB (UME) 385*256kB (UME) 277*512kB (UME) 201*1024kB (UM) 97*2048kB (UME) 80*4096kB (UM) = 1144504kB [ 377.431104][T14445] Node 0 Normal: [ 377.445099][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2418'. [ 377.466726][T14445] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 377.479345][T14445] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 8*16kB (UM) 5*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3933960kB [ 377.515930][T14445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.525960][ T3942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.535103][T14445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.573250][T14445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.594435][T14445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.608830][T14445] 44883 total pagecache pages [ 377.616410][ T3942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.646365][T14445] 0 pages in swap cache [ 377.650947][T14445] Free swap = 124996kB [ 377.651033][T14460] validate_nla: 4 callbacks suppressed [ 377.651088][T14460] netlink: 'syz.3.2419': attribute type 3 has an invalid length. [ 377.655139][T14445] Total swap = 124996kB [ 377.663279][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 377.701818][T14445] 2097051 pages RAM [ 377.705946][T14445] 0 pages HighMem/MovableOnly [ 377.736352][T14445] 427129 pages reserved [ 377.743894][T14445] 0 pages cma reserved [ 377.878454][T14421] wg1 speed is unknown, defaulting to 1000 [ 378.621146][T14496] ip6gre2: entered promiscuous mode [ 378.627133][T14496] ip6gre2: entered allmulticast mode [ 378.644974][T10405] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.654572][T10405] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.673253][ T6816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.724120][ T6816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.861864][T14504] netlink: 'syz.1.2433': attribute type 1 has an invalid length. [ 378.973448][T14509] netlink: 'syz.4.2434': attribute type 3 has an invalid length. [ 378.984822][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.023701][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.030720][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.037663][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.044651][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.051685][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.058642][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.065515][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.072528][T14504] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 379.219338][T14517] raw_sendmsg: syz.0.2436 forgot to set AF_INET. Fix it! [ 379.266858][ T6816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.303417][T14526] syzkaller0: entered promiscuous mode [ 379.316830][T14526] syzkaller0: entered allmulticast mode [ 379.834027][T14544] __nla_validate_parse: 12 callbacks suppressed [ 379.834049][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2443'. [ 380.014830][T14549] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 380.051792][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2445'. [ 380.136996][T14554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2447'. [ 380.151890][T14551] netlink: 'syz.3.2446': attribute type 33 has an invalid length. [ 380.161450][T14551] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2446'. [ 380.173402][T14551] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2446'. [ 380.190590][T14551] vlan2 (unregistering): left allmulticast mode [ 380.201657][T14551] dummy0 (unregistering): left allmulticast mode [ 380.208633][T14551] vlan2 (unregistering): left promiscuous mode [ 380.214979][T14551] dummy0 (unregistering): left promiscuous mode [ 380.224581][T14551] bridge0: port 3(vlan2) entered disabled state [ 380.429437][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 380.453449][T14566] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 380.549533][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 380.568134][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2453'. [ 380.590389][T14572] vlan3: entered promiscuous mode [ 380.617199][T14572] syz_tun: entered promiscuous mode [ 380.672419][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 380.728140][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 381.171419][T14606] syzkaller1: entered promiscuous mode [ 381.177805][T14606] syzkaller1: entered allmulticast mode [ 381.211041][T14611] netlink: 'syz.3.2463': attribute type 16 has an invalid length. [ 381.259728][T14611] netlink: 'syz.3.2463': attribute type 17 has an invalid length. [ 381.307040][T14614] netlink: 'syz.2.2462': attribute type 13 has an invalid length. [ 381.335589][T14614] netlink: 'syz.2.2462': attribute type 17 has an invalid length. [ 381.427545][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 381.526182][T14614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.590705][T14614] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.631530][T14614] net_ratelimit: 2104 callbacks suppressed [ 381.631543][T14614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.720137][T14617] bond4: option mode: invalid value (254) [ 381.748892][T14617] bond4 (unregistering): Released all slaves [ 381.827283][T14635] syz_tun: entered promiscuous mode [ 381.839134][T14635] vlan2: entered promiscuous mode [ 382.000587][T14634] gre0 speed is unknown, defaulting to 1000 [ 382.436828][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 382.667404][T14634] wg1 speed is unknown, defaulting to 1000 [ 382.703645][T14676] validate_nla: 3 callbacks suppressed [ 382.703665][T14676] netlink: 'syz.2.2481': attribute type 13 has an invalid length. [ 382.723303][T14676] netlink: 'syz.2.2481': attribute type 17 has an invalid length. [ 382.787405][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.818504][T14676] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.840454][T14676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.916761][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.112388][T14695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.084558][T14739] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 384.234667][T14739] 8021q: adding VLAN 0 to HW filter on device bond13 [ 384.311120][T14750] vlan2: entered promiscuous mode [ 384.316493][T14750] bond13: entered promiscuous mode [ 384.322551][T14750] vlan2: entered allmulticast mode [ 384.328205][T14750] bond13: entered allmulticast mode [ 384.617679][T14759] netlink: 'syz.1.2505': attribute type 21 has an invalid length. [ 385.191215][T14784] netlink: 'syz.3.2512': attribute type 4 has an invalid length. [ 385.367650][T14791] __nla_validate_parse: 13 callbacks suppressed [ 385.367671][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2515'. [ 385.383960][T14791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2515'. [ 385.393396][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2515'. [ 385.404352][T14791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2515'. [ 385.471839][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'. [ 385.790589][T14808] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 385.800830][T14808] team0: left allmulticast mode [ 385.927241][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'. [ 385.937142][T14817] netlink: 'syz.4.2523': attribute type 30 has an invalid length. [ 385.945025][T14817] netlink: 'syz.4.2523': attribute type 29 has an invalid length. [ 385.953270][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 385.964768][T14817] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 386.299465][T14830] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2527'. [ 386.512517][T14841] gre0 speed is unknown, defaulting to 1000 [ 386.880829][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2535'. [ 386.907671][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2535'. [ 386.923446][T14852] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 386.936943][T14852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.039392][T14841] wg1 speed is unknown, defaulting to 1000 [ 387.061852][T14861] tipc: Enabled bearer , priority 0 [ 387.125638][T14861] syzkaller0: entered allmulticast mode [ 387.312550][T14860] tipc: Resetting bearer [ 387.375908][T14860] tipc: Disabling bearer [ 387.930991][T14908] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 388.116406][T14912] tipc: Enabled bearer , priority 0 [ 388.139924][T14912] syzkaller0: entered allmulticast mode [ 388.180445][T14918] syzkaller0: entered promiscuous mode [ 388.186073][T14918] syzkaller0: entered allmulticast mode [ 388.253512][T14912] tipc: Resetting bearer [ 388.299774][T14922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.356384][T14911] tipc: Resetting bearer [ 388.422377][T14911] tipc: Disabling bearer [ 388.858563][T14952] netlink: 'syz.4.2558': attribute type 13 has an invalid length. [ 388.871749][ T165] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.899220][T14952] netlink: 'syz.4.2558': attribute type 17 has an invalid length. [ 388.899225][ T165] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.899298][ T165] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.955887][T14952] lo: left allmulticast mode [ 388.968920][T14952] tunl0: left allmulticast mode [ 388.975521][T14952] gre0: left allmulticast mode [ 389.017408][T14952] gretap0: left allmulticast mode [ 389.024992][T14952] erspan0: left allmulticast mode [ 389.033832][T14952] ip_vti0: left allmulticast mode [ 389.044517][T14952] ip6_vti0: left allmulticast mode [ 389.054074][T14952] sit0: left allmulticast mode [ 389.065787][T14952] ip6tnl0: left allmulticast mode [ 389.075521][T14952] ip6gre0: left allmulticast mode [ 389.086024][T14952] ip6gretap0: left allmulticast mode [ 389.094564][T14952] bridge0: port 3(syz_tun) entered blocking state [ 389.101240][T14952] bridge0: port 3(syz_tun) entered forwarding state [ 389.110608][T14952] bridge0: left allmulticast mode [ 389.117062][T14952] vcan0: left allmulticast mode [ 389.124174][T14952] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.132618][T14952] dummy0: left allmulticast mode [ 389.140409][T14952] nlmon0: left allmulticast mode [ 389.148384][T14952] caif0: left allmulticast mode [ 389.153499][T14952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.171810][ T165] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.183402][ T5917] gre0 speed is unknown, defaulting to 1000 [ 389.191112][ T5917] syz1: Port: 1 Link ACTIVE [ 389.246632][ T5917] gre0 speed is unknown, defaulting to 1000 [ 389.652296][T14987] macsec2: entered promiscuous mode [ 389.771345][T14998] pim6reg1: entered promiscuous mode [ 389.788198][T14998] pim6reg1: entered allmulticast mode [ 390.014731][T15012] netlink: 'syz.1.2579': attribute type 13 has an invalid length. [ 390.024410][T15012] netlink: 'syz.1.2579': attribute type 17 has an invalid length. [ 390.673237][T15012] 8021q: adding VLAN 0 to HW filter on device .` [ 390.685941][T15012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.060219][T15037] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 391.263604][T15054] netlink: 'syz.3.2591': attribute type 25 has an invalid length. [ 391.272005][T15054] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 391.291208][T15042] netlink: 'syz.0.2587': attribute type 13 has an invalid length. [ 391.299429][T15042] netlink: 'syz.0.2587': attribute type 17 has an invalid length. [ 391.311518][T15042] gre0: left promiscuous mode [ 391.316298][T15042] gre0: left allmulticast mode [ 391.369338][T15042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.381488][T15042] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.396471][T15042] bridge0: port 1(vlan2) entered blocking state [ 391.403693][T15042] bridge0: port 1(vlan2) entered listening state [ 391.424297][T15042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.556720][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 391.598691][T15059] gre0 speed is unknown, defaulting to 1000 [ 392.129051][T15080] __nla_validate_parse: 5 callbacks suppressed [ 392.129071][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2598'. [ 392.355715][T15087] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 392.385810][T15087] netlink: 'syz.4.2601': attribute type 4 has an invalid length. [ 392.393808][T15087] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2601'. [ 392.525460][T15059] wg1 speed is unknown, defaulting to 1000 [ 392.587902][T15077] gre0 speed is unknown, defaulting to 1000 [ 392.929423][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 393.008863][T15110] : entered promiscuous mode [ 393.022987][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 393.272288][T15124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2611'. [ 393.351789][T15077] wg1 speed is unknown, defaulting to 1000 [ 393.897848][T15143] bond5: entered promiscuous mode [ 393.909097][T15143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.084218][T15144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.099741][T15144] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 394.111220][T15144] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 394.185001][T15144] bond5: (slave wireguard0): making interface the new active one [ 394.219442][T15144] wireguard0: entered promiscuous mode [ 394.233680][T15144] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 394.322335][T15157] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 394.404639][T15140] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 394.486246][T15140] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 394.945741][T15176] tipc: Enabled bearer , priority 0 [ 394.967611][T15172] syzkaller0: entered promiscuous mode [ 394.973271][T15172] syzkaller0: entered allmulticast mode [ 395.004003][T15174] syzkaller0: entered promiscuous mode [ 395.017048][T15174] syzkaller0: entered allmulticast mode [ 395.055703][T15174] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 395.079994][T15172] tipc: Resetting bearer [ 395.107888][T15168] tipc: Resetting bearer [ 395.127494][T15168] tipc: Disabling bearer [ 395.313818][T15190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2625'. [ 395.336825][T15190] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2625'. [ 395.586312][T15202] gre0 speed is unknown, defaulting to 1000 [ 395.600839][T15197] validate_nla: 2 callbacks suppressed [ 395.600870][T15197] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 396.013942][T15214] bond6: (slave veth5): Enslaving as an active interface with a down link [ 396.126075][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 396.174808][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 396.228634][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2634'. [ 396.480933][T15229] gre0 speed is unknown, defaulting to 1000 [ 396.489516][T15202] wg1 speed is unknown, defaulting to 1000 [ 397.316912][T15229] wg1 speed is unknown, defaulting to 1000 [ 397.399276][T15252] __nla_validate_parse: 1 callbacks suppressed [ 397.399300][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 397.460852][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 397.842609][T15267] netlink: 'syz.3.2644': attribute type 13 has an invalid length. [ 397.850827][T15267] netlink: 'syz.3.2644': attribute type 17 has an invalid length. [ 397.983661][T15267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.004911][T15267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.170173][T15281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2650'. [ 398.916385][T15310] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 398.957635][T15310] syzkaller0: entered allmulticast mode [ 399.233986][T15324] erspan0: entered promiscuous mode [ 399.311566][T15326] tipc: Enabled bearer , priority 0 [ 399.355689][T15326] syzkaller0: entered allmulticast mode [ 399.393755][T15326] tipc: Resetting bearer [ 399.407488][T15325] tipc: Resetting bearer [ 399.446833][T15325] tipc: Disabling bearer [ 399.492830][T15330] dvmrp12: entered allmulticast mode [ 399.569114][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2669'. [ 399.578456][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2669'. [ 400.107784][T15365] tipc: Enabled bearer , priority 0 [ 400.115254][T15365] syzkaller0: entered allmulticast mode [ 400.140760][T15365] FAULT_INJECTION: forcing a failure. [ 400.140760][T15365] name failslab, interval 1, probability 0, space 0, times 0 [ 400.154451][T15365] CPU: 1 UID: 0 PID: 15365 Comm: syz.2.2676 Not tainted syzkaller #0 PREEMPT(full) [ 400.154481][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.154494][T15365] Call Trace: [ 400.154502][T15365] [ 400.154511][T15365] dump_stack_lvl+0xe8/0x150 [ 400.154548][T15365] should_fail_ex+0x412/0x560 [ 400.154588][T15365] should_failslab+0xa8/0x100 [ 400.154619][T15365] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 400.154647][T15365] ? __alloc_skb+0x1d0/0x7d0 [ 400.154670][T15365] ? __local_bh_enable_ip+0xd0/0x130 [ 400.154705][T15365] __alloc_skb+0x1d0/0x7d0 [ 400.154736][T15365] ? inet6_rt_notify+0xaf/0x470 [ 400.154759][T15365] inet6_rt_notify+0x170/0x470 [ 400.154796][T15365] fib6_del+0x10af/0x15a0 [ 400.154844][T15365] ? __pfx_fib6_del+0x10/0x10 [ 400.154869][T15365] ? is_bpf_text_address+0x292/0x2b0 [ 400.154892][T15365] ? is_bpf_text_address+0x26/0x2b0 [ 400.154932][T15365] fib6_clean_node+0x29c/0x580 [ 400.154963][T15365] ? __pfx_fib6_clean_node+0x10/0x10 [ 400.154988][T15365] ? stack_trace_save+0xa9/0x100 [ 400.155011][T15365] ? __pfx_stack_trace_save+0x10/0x10 [ 400.155032][T15365] ? kfree+0x1c1/0x630 [ 400.155060][T15365] fib6_walk_continue+0x67b/0x910 [ 400.155100][T15365] __fib6_clean_all+0x35b/0x5a0 [ 400.155127][T15365] ? __fib6_clean_all+0xbd/0x5a0 [ 400.155151][T15365] ? __pfx_fib6_ifdown+0x10/0x10 [ 400.155176][T15365] ? __pfx___fib6_clean_all+0x10/0x10 [ 400.155203][T15365] ? __pfx_fib6_clean_node+0x10/0x10 [ 400.155226][T15365] ? __pfx_fib6_ifdown+0x10/0x10 [ 400.155251][T15365] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.155279][T15365] ? __mutex_trylock_common+0x158/0x260 [ 400.155317][T15365] rt6_disable_ip+0x128/0x730 [ 400.155345][T15365] ? rcu_is_watching+0x15/0xb0 [ 400.155384][T15365] ? trace_contention_end+0x3d/0x150 [ 400.155407][T15365] ? __pfx_rt6_disable_ip+0x10/0x10 [ 400.155443][T15365] addrconf_ifdown+0x161/0x1a40 [ 400.155478][T15365] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 400.155521][T15365] ? tls_dev_event+0x745/0xf00 [ 400.155546][T15365] ? __pfx_addrconf_ifdown+0x10/0x10 [ 400.155599][T15365] addrconf_notify+0x1bc/0x1050 [ 400.155630][T15365] notifier_call_chain+0x1be/0x400 [ 400.155675][T15365] netif_set_mtu_ext+0x5aa/0x800 [ 400.155711][T15365] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 400.155741][T15365] ? __mutex_trylock_common+0x158/0x260 [ 400.155798][T15365] netif_set_mtu+0xd7/0x1b0 [ 400.155829][T15365] ? __pfx_netif_set_mtu+0x10/0x10 [ 400.155875][T15365] ? __dev_get_by_name+0xe5/0x140 [ 400.155914][T15365] dev_set_mtu+0x126/0x260 [ 400.155947][T15365] dev_ioctl+0x7b4/0x1150 [ 400.155976][T15365] sock_do_ioctl+0x23e/0x320 [ 400.156013][T15365] ? __pfx_sock_do_ioctl+0x10/0x10 [ 400.156043][T15365] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 400.156092][T15365] sock_ioctl+0x5c6/0x7f0 [ 400.156141][T15365] ? __pfx_sock_ioctl+0x10/0x10 [ 400.156174][T15365] ? __fget_files+0x2a/0x420 [ 400.156206][T15365] ? __fget_files+0x3a0/0x420 [ 400.156237][T15365] ? __fget_files+0x2a/0x420 [ 400.156274][T15365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 400.156303][T15365] ? __pfx_sock_ioctl+0x10/0x10 [ 400.156335][T15365] __se_sys_ioctl+0xfc/0x170 [ 400.156365][T15365] do_syscall_64+0x14d/0xf80 [ 400.156403][T15365] ? trace_irq_disable+0x3b/0x150 [ 400.156421][T15365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.156444][T15365] ? clear_bhb_loop+0x40/0x90 [ 400.156471][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.156497][T15365] RIP: 0033:0x7f06e559c799 [ 400.156518][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.156538][T15365] RSP: 002b:00007f06e6397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.156560][T15365] RAX: ffffffffffffffda RBX: 00007f06e5815fa0 RCX: 00007f06e559c799 [ 400.156576][T15365] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 400.156591][T15365] RBP: 00007f06e6397090 R08: 0000000000000000 R09: 0000000000000000 [ 400.156603][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.156615][T15365] R13: 00007f06e5816038 R14: 00007f06e5815fa0 R15: 00007ffc55d0a718 [ 400.156652][T15365] [ 400.575065][T15365] tipc: Resetting bearer [ 400.604297][T15364] tipc: Resetting bearer [ 400.650174][T15364] tipc: Disabling bearer [ 400.668230][T15330] dvmrp12: left allmulticast mode [ 400.710210][T15371] lo: entered promiscuous mode [ 400.715549][T15371] tunl0: entered promiscuous mode [ 400.721422][T15371] gre0: entered promiscuous mode [ 400.727164][T15371] erspan0: entered promiscuous mode [ 400.732612][T15371] ip_vti0: entered promiscuous mode [ 400.740540][T15371] ip6_vti0: entered promiscuous mode [ 400.747387][T15371] sit0: entered promiscuous mode [ 400.752862][T15371] ip6tnl0: entered promiscuous mode [ 400.761759][T15371] ip6gre0: entered promiscuous mode [ 400.767573][T15371] ip6gretap0: entered promiscuous mode [ 400.773434][T15371] bridge0: entered promiscuous mode [ 400.779259][T15371] vcan0: entered promiscuous mode [ 400.785039][T15371] nlmon0: entered promiscuous mode [ 400.791134][T15371] caif0: entered promiscuous mode [ 400.796209][T15371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.058552][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 401.384633][T15395] 8021q: VLANs not supported on ip6gre0 [ 401.789780][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2694'. [ 401.799966][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 401.815695][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'. [ 401.827157][T15418] tipc: Enabled bearer , priority 0 [ 401.835100][T15418] syzkaller0: entered allmulticast mode [ 401.867075][T15418] tipc: Resetting bearer [ 401.876845][T15415] tipc: Resetting bearer [ 401.942735][T15415] tipc: Disabling bearer [ 402.051833][T15427] 8021q: VLANs not supported on ip6gre0 [ 402.439652][T15445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2705'. [ 402.487926][T15442] can: request_module (can-proto-0) failed. [ 402.876602][T15460] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 404.154429][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2720'. [ 404.166836][T15499] openvswitch: netlink: Flow actions attr not present in new flow. [ 404.199317][T15493] bridge0: port 3(syz_tun) entered disabled state [ 404.239267][ T29] gre0 speed is unknown, defaulting to 1000 [ 404.245329][ T29] syz1: Port: 1 Link DOWN [ 404.277966][ T6806] gre0 speed is unknown, defaulting to 1000 [ 404.442583][T15507] netlink: 'syz.0.2724': attribute type 9 has an invalid length. [ 404.451189][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 404.475442][T15508] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 404.485315][T15508] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 404.631402][T15507] erspan0: entered promiscuous mode [ 404.651332][T15507] macvlan0: entered promiscuous mode [ 404.657644][T15507] macvlan0: entered allmulticast mode [ 404.663287][T15507] erspan0: entered allmulticast mode [ 404.904576][T15527] tipc: Enabled bearer , priority 0 [ 404.916056][T15527] syzkaller0: entered allmulticast mode [ 404.984029][T15527] tipc: Resetting bearer [ 405.143820][T15523] tipc: Resetting bearer [ 405.165946][T15523] tipc: Disabling bearer [ 405.558650][T15549] netlink: 'syz.3.2734': attribute type 13 has an invalid length. [ 405.589650][T15549] netlink: 'syz.3.2734': attribute type 17 has an invalid length. [ 405.623749][T15554] xfrm1: entered allmulticast mode [ 405.641579][T15549] lo: left promiscuous mode [ 405.697930][T15549] tunl0: left promiscuous mode [ 405.702711][T15553] netlink: 'syz.2.2736': attribute type 4 has an invalid length. [ 405.702775][T15553] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2736'. [ 405.739405][T15549] gre0: left promiscuous mode [ 405.746383][T15549] erspan0: left promiscuous mode [ 405.755331][T15549] ip_vti0: left promiscuous mode [ 405.764094][T15549] ip6_vti0: left promiscuous mode [ 405.771088][T15549] sit0: left promiscuous mode [ 405.778492][T15549] ip6tnl0: left promiscuous mode [ 405.785030][T15549] ip6gre0: left promiscuous mode [ 405.794615][T15562] netlink: 'syz.2.2736': attribute type 2 has an invalid length. [ 405.814702][T15549] ip6gretap0: left promiscuous mode [ 405.822854][T15549] bridge0: left promiscuous mode [ 405.830360][T15549] vcan0: left promiscuous mode [ 405.854245][T15549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.872442][T15549] nlmon0: left promiscuous mode [ 405.884817][T15549] caif0: left promiscuous mode [ 405.895082][T15549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.939943][T15562] : entered promiscuous mode [ 405.955723][T15568] syz_tun: left promiscuous mode [ 405.985691][T15568] bridge0: port 3(syz_tun) entered disabled state [ 406.037999][T15568] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.058581][T15568] bridge_slave_1: left promiscuous mode [ 406.066163][T15568] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.089299][T15568] team0: Port device team_slave_0 removed [ 406.109752][T15568] team0: Port device team_slave_1 removed [ 406.116148][T15568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.135080][T15568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.153386][T15568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.202717][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'. [ 406.342832][T15589] netlink: 'syz.4.2743': attribute type 3 has an invalid length. [ 406.369047][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 406.450859][T15592] tipc: Enabled bearer , priority 0 [ 406.489866][T15592] syzkaller0: entered allmulticast mode [ 406.514035][T15592] tipc: Resetting bearer [ 406.533575][T15591] tipc: Resetting bearer [ 406.565209][T15591] tipc: Disabling bearer [ 406.845281][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 406.918191][ C1] bridge0: port 1(vlan2) entered learning state [ 407.073710][T15622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2755'. [ 407.286255][T15630] netlink: 'syz.0.2757': attribute type 3 has an invalid length. [ 407.298189][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2757'. [ 407.889244][T15664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2770'. [ 407.920526][T15670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2771'. [ 407.939377][T15666] gre0 speed is unknown, defaulting to 1000 [ 407.974944][T15674] netlink: 'syz.2.2772': attribute type 3 has an invalid length. [ 407.990304][T15674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'. [ 408.298713][T15681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2776'. [ 408.357372][T15681] vlan4: entered promiscuous mode [ 408.375840][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2776'. [ 408.547174][T15666] wg1 speed is unknown, defaulting to 1000 [ 408.576484][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.589980][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.599048][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.614612][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.627638][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.646363][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.654150][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.666929][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.679189][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.688185][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.748655][T15694] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 408.822662][T15700] syzkaller0: entered allmulticast mode [ 408.944645][ T5825] syz_tun (unregistering): left allmulticast mode [ 409.191765][T15692] gre0 speed is unknown, defaulting to 1000 [ 409.235311][T15715] netlink: 'syz.1.2785': attribute type 3 has an invalid length. [ 409.267525][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'. [ 409.590831][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 409.835348][T15727] tap0: tun_chr_ioctl cmd 1074025677 [ 409.854524][T15727] tap0: linktype set to 778 [ 409.860799][T15727] netlink: 'syz.0.2790': attribute type 4 has an invalid length. [ 409.901659][T15727] netlink: 'syz.0.2790': attribute type 4 has an invalid length. [ 409.936646][T15727] tap0: tun_chr_ioctl cmd 1074025677 [ 409.968398][T15727] tap0: linktype set to 778 [ 409.986678][T15692] wg1 speed is unknown, defaulting to 1000 [ 409.990114][T15735] tap0: tun_chr_ioctl cmd 1074025673 [ 410.169988][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'. [ 410.198253][T15749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2794'. [ 410.410989][T15692] chnl_net:caif_netlink_parms(): no params data found [ 410.671764][T15765] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 410.679996][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 410.757875][ T5145] Bluetooth: hci5: command tx timeout [ 411.007667][T15769] sctp: [Deprecated]: syz.0.2798 (pid 15769) Use of int in max_burst socket option. [ 411.007667][T15769] Use struct sctp_assoc_value instead [ 411.064494][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.074337][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.085159][T15692] bridge_slave_0: entered allmulticast mode [ 411.095803][T15692] bridge_slave_0: entered promiscuous mode [ 411.110068][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.117338][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.124605][T15692] bridge_slave_1: entered allmulticast mode [ 411.132737][T15692] bridge_slave_1: entered promiscuous mode [ 411.230216][T15692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.274212][T15692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.295365][T15780] No such timeout policy "syz1" [ 411.425234][T15788] netlink: 'syz.2.2804': attribute type 3 has an invalid length. [ 411.542436][T15692] team0: Port device team_slave_0 added [ 411.567882][T15692] team0: Port device team_slave_1 added [ 411.676828][T15692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.683937][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.737171][T15692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.758624][T15802] tipc: Enabled bearer , priority 0 [ 411.787854][T15692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.802518][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.904590][T15692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.973207][T15794] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 412.008854][T15794] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 412.018908][T15794] tipc: Resetting bearer [ 412.031368][T15813] tipc: Resetting bearer [ 412.090607][T15692] hsr_slave_0: entered promiscuous mode [ 412.097775][T15692] hsr_slave_1: entered promiscuous mode [ 412.104286][T15692] debugfs: 'hsr0' already exists in 'hsr' [ 412.110329][T15692] Cannot create hsr debugfs directory [ 412.312062][T15817] netlink: 'syz.0.2811': attribute type 30 has an invalid length. [ 412.345675][T15821] netlink: 'syz.1.2812': attribute type 3 has an invalid length. [ 412.609098][ T3942] tipc: Resetting bearer [ 412.636853][T15829] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 412.653913][T15829] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 412.669883][T15829] tipc: Resetting bearer [ 412.802435][T15843] tipc: Enabled bearer , priority 0 [ 412.822994][ T10] tipc: Node number set to 1181905253 [ 412.844873][ T5145] Bluetooth: hci5: command tx timeout [ 412.890109][T15843] syzkaller0: entered promiscuous mode [ 412.895702][T15843] syzkaller0: entered allmulticast mode [ 412.919985][T15849] __nla_validate_parse: 5 callbacks suppressed [ 412.920007][T15849] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2820'. [ 412.945985][T15843] syzkaller0: mtu less than device minimum [ 412.964595][T15842] tipc: Resetting bearer [ 413.003456][T15842] tipc: Disabling bearer [ 413.241083][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 413.270399][T15692] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.306414][T15692] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.348664][T15692] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.360710][T15867] netlink: 'syz.3.2826': attribute type 3 has an invalid length. [ 413.371022][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2826'. [ 413.408713][T15692] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.525847][T15884] netlink: 'syz.0.2831': attribute type 4 has an invalid length. [ 413.548709][T15884] netlink: 'syz.0.2831': attribute type 4 has an invalid length. [ 413.616360][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 413.750484][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.805637][T15692] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.865506][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.872759][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.889084][T15895] tipc: Enabled bearer , priority 0 [ 413.913389][T15895] syzkaller0: entered promiscuous mode [ 413.935208][T15895] syzkaller0: entered allmulticast mode [ 413.954050][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.961291][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.006113][T15904] tipc: Resetting bearer [ 414.147935][T15894] tipc: Resetting bearer [ 414.210966][T15894] tipc: Disabling bearer [ 414.430796][T15927] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.2843'. [ 414.473705][T15924] bond0: (slave bond_slave_1): Releasing backup interface [ 414.537090][T15921] netlink: 'syz.0.2841': attribute type 3 has an invalid length. [ 414.544912][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2841'. [ 414.769433][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.781341][T15942] 8021q: VLANs not supported on ip6gre0 [ 414.922600][T15948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2847'. [ 414.933354][ T5145] Bluetooth: hci5: command tx timeout [ 415.366062][T15692] veth0_vlan: entered promiscuous mode [ 415.398332][T15692] veth1_vlan: entered promiscuous mode [ 415.480138][T15692] veth0_macvtap: entered promiscuous mode [ 415.539611][T15692] veth1_macvtap: entered promiscuous mode [ 415.601277][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.652252][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.721882][ T147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.749977][ T165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.784227][T15977] netlink: 'syz.0.2855': attribute type 3 has an invalid length. [ 415.810938][ T165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.825438][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2855'. [ 415.857704][ T165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.107349][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.115242][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.236163][T10396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.248302][T10396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.347135][T15991] syzkaller1: entered promiscuous mode [ 416.363854][T15991] syzkaller1: entered allmulticast mode [ 416.987558][T16021] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2868'. [ 417.007404][ T5145] Bluetooth: hci5: command tx timeout [ 417.041257][T16024] netlink: 'syz.0.2867': attribute type 3 has an invalid length. [ 417.049577][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 417.057201][T16019] gre0 speed is unknown, defaulting to 1000 [ 417.548508][T16019] wg1 speed is unknown, defaulting to 1000 [ 417.946368][T16051] can: request_module (can-proto-0) failed. [ 418.083670][T16063] __nla_validate_parse: 2 callbacks suppressed [ 418.083691][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 418.268548][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 418.423396][T16078] netlink: 'syz.3.2881': attribute type 3 has an invalid length. [ 418.447029][T16078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 418.880815][T16084] netlink: 'syz.3.2883': attribute type 10 has an invalid length. [ 418.956835][T16084] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2883'. [ 419.020150][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.070488][T16089] tipc: Enabling of bearer rejected, failed to enable media [ 419.151984][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 419.227810][T16094] ip6tnl5: entered promiscuous mode [ 419.490831][T16101] netlink: 'syz.2.2889': attribute type 13 has an invalid length. [ 419.506584][T16101] netlink: 'syz.2.2889': attribute type 17 has an invalid length. [ 419.687624][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.697907][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.709523][T16101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.020263][T16117] netlink: 'syz.2.2892': attribute type 3 has an invalid length. [ 420.038488][T16117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 420.542512][T16137] openvswitch: netlink: IP tunnel dst address not specified [ 420.836864][ C0] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 420.958070][T16162] netlink: 'syz.0.2906': attribute type 3 has an invalid length. [ 420.965909][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2906'. [ 421.413643][T16185] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2913'. [ 421.743468][T16200] gre0 speed is unknown, defaulting to 1000 [ 421.901931][T16207] netlink: 'syz.2.2921': attribute type 10 has an invalid length. [ 421.942829][T16209] netlink: 'syz.1.2920': attribute type 3 has an invalid length. [ 421.950804][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 421.960287][T16207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2921'. [ 421.969969][T16207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.980675][T16207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.991278][T16207] hsr0: entered promiscuous mode [ 422.276621][ C1] bridge0: port 1(vlan2) entered forwarding state [ 422.283131][ C1] bridge0: topology change detected, propagating [ 422.428711][T16216] netlink: 'syz.2.2923': attribute type 13 has an invalid length. [ 422.455789][T16216] netlink: 'syz.2.2923': attribute type 17 has an invalid length. [ 422.818960][T16231] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 422.844071][T16200] wg1 speed is unknown, defaulting to 1000 [ 422.912260][T16232] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:3616 [ 424.075457][T16216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.084888][T16216] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.280100][T16216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.357282][T16220] team0: Port device team_slave_0 removed [ 424.396444][T16227] batman_adv: batadv0: Adding interface: ipvlan2 [ 424.408134][T16227] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.444629][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.456710][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.467947][T16227] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 424.544171][T16234] netlink: 'syz.2.2927': attribute type 3 has an invalid length. [ 424.575080][T16234] nbd: nbd2 already in use [ 424.580893][T16234] nbd: must specify an index to disconnect [ 424.622757][T16231] gre0 speed is unknown, defaulting to 1000 [ 424.672784][T16243] bond1 (unregistering): Released all slaves [ 424.982328][T16231] wg1 speed is unknown, defaulting to 1000 [ 424.989947][T16234] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 425.257833][T16256] netlink: 'syz.2.2935': attribute type 3 has an invalid length. [ 425.265772][T16256] __nla_validate_parse: 1 callbacks suppressed [ 425.265789][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'. [ 425.440824][T16262] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2937'. [ 425.660705][T16263] gre0 speed is unknown, defaulting to 1000 [ 425.819840][T16275] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 426.225550][T16296] tipc: Enabling of bearer rejected, failed to enable media [ 426.235266][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2945'. [ 426.278884][T16263] wg1 speed is unknown, defaulting to 1000 [ 426.352888][T16300] netlink: 'syz.3.2945': attribute type 3 has an invalid length. [ 426.361404][T16300] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 426.397685][T16300] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2945'. [ 426.525136][T16303] tipc: New replicast peer: 255.255.255.255 [ 426.549490][T16303] tipc: Enabled bearer , priority 10 [ 427.041938][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 427.062942][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 427.106207][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 427.126335][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 427.139112][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 427.155941][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 427.314886][T16328] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 427.326266][T16328] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 427.692316][T16343] team0: entered promiscuous mode [ 427.698825][T16343] team_slave_1: entered promiscuous mode [ 427.705801][T16343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 427.916153][T16350] openvswitch: netlink: IP tunnel dst address not specified [ 429.016377][T16389] openvswitch: netlink: IP tunnel dst address not specified [ 429.395981][T16406] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 429.466117][T16405] tipc: Enabling of bearer rejected, failed to enable media [ 429.476451][T16410] tipc: Cannot configure node identity twice [ 429.489090][T16405] tipc: Cannot configure node identity twice [ 429.554183][T16406] gre0 speed is unknown, defaulting to 1000 [ 429.681500][T16414] tipc: Resetting bearer [ 430.034470][T16406] wg1 speed is unknown, defaulting to 1000 [ 430.116415][T16428] netlink: 'syz.1.2984': attribute type 10 has an invalid length. [ 430.145775][T16428] bond2: (slave dummy0): Releasing active interface [ 430.167756][T16428] .`: (slave dummy0): Enslaving as an active interface with an up link [ 430.184817][T16426] gre0 speed is unknown, defaulting to 1000 [ 430.435768][ T49] .`: (slave dummy0): interface is now down [ 430.588688][ T49] .`: (slave dummy0): interface is now down [ 430.728279][T10403] .`: (slave dummy0): interface is now down [ 430.746070][T10403] .`: now running without any active interface! [ 430.855254][T16445] netlink: 'syz.4.2989': attribute type 83 has an invalid length. [ 431.133097][T16451] __nla_validate_parse: 13 callbacks suppressed [ 431.133118][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2991'. [ 431.169875][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2983'. [ 431.186359][T16426] wg1 speed is unknown, defaulting to 1000 [ 431.561981][T16455] bond14: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 431.599171][T16455] bond14 (unregistering): Released all slaves [ 431.698020][T16464] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 431.749325][T16464] netlink: 'syz.2.2994': attribute type 4 has an invalid length. [ 431.786034][T16464] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2994'. [ 431.814478][T16464] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 431.902109][T16464] netlink: 'syz.2.2994': attribute type 4 has an invalid length. [ 431.919043][T16464] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2994'. [ 432.211960][T16487] openvswitch: netlink: IP tunnel dst address not specified [ 432.501121][T16495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3003'. [ 432.784865][T16501] gre0 speed is unknown, defaulting to 1000 [ 433.152794][T16501] wg1 speed is unknown, defaulting to 1000 [ 433.372322][T16519] gre0 speed is unknown, defaulting to 1000 [ 433.688145][T16526] openvswitch: netlink: IP tunnel dst address not specified [ 433.885923][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 433.926165][T16522] netlink: 'syz.4.3012': attribute type 32 has an invalid length. [ 434.038733][T16519] wg1 speed is unknown, defaulting to 1000 [ 434.114784][T16549] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3017'. [ 434.171206][T16551] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3017'. [ 434.571267][T16540] syzkaller0: entered promiscuous mode [ 434.577069][T16540] syzkaller0: entered allmulticast mode [ 434.588480][T16551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3017'. [ 435.244141][T16581] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 435.245113][T16581] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3021'. [ 435.339497][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.350045][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.360669][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.370068][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.383075][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.676674][T16583] gre0 speed is unknown, defaulting to 1000 [ 435.823062][T16601] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 435.897876][T16603] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 436.123055][T16583] wg1 speed is unknown, defaulting to 1000 [ 436.503923][T16620] FAULT_INJECTION: forcing a failure. [ 436.503923][T16620] name failslab, interval 1, probability 0, space 0, times 0 [ 436.527662][T16620] CPU: 1 UID: 0 PID: 16620 Comm: syz.2.3031 Not tainted syzkaller #0 PREEMPT(full) [ 436.527692][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.527705][T16620] Call Trace: [ 436.527713][T16620] [ 436.527723][T16620] dump_stack_lvl+0xe8/0x150 [ 436.527759][T16620] should_fail_ex+0x412/0x560 [ 436.527798][T16620] should_failslab+0xa8/0x100 [ 436.527829][T16620] __kmalloc_noprof+0xe8/0x760 [ 436.527855][T16620] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 436.527884][T16620] tomoyo_realpath_from_path+0xe3/0x5d0 [ 436.527918][T16620] ? tomoyo_path_number_perm+0x219/0x630 [ 436.527948][T16620] tomoyo_path_number_perm+0x246/0x630 [ 436.527980][T16620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 436.528014][T16620] ? __lock_acquire+0x6b5/0x2cf0 [ 436.528056][T16620] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 436.528122][T16620] ? __fget_files+0x2a/0x420 [ 436.528159][T16620] ? __fget_files+0x2a/0x420 [ 436.528189][T16620] ? __fget_files+0x3a0/0x420 [ 436.528219][T16620] ? __fget_files+0x2a/0x420 [ 436.528256][T16620] security_file_ioctl+0xc3/0x2a0 [ 436.528287][T16620] __se_sys_ioctl+0x47/0x170 [ 436.528317][T16620] do_syscall_64+0x14d/0xf80 [ 436.528348][T16620] ? trace_irq_disable+0x3b/0x150 [ 436.528367][T16620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.528388][T16620] ? clear_bhb_loop+0x40/0x90 [ 436.528414][T16620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.528435][T16620] RIP: 0033:0x7f06e559c799 [ 436.528456][T16620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.528474][T16620] RSP: 002b:00007f06e6397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.528497][T16620] RAX: ffffffffffffffda RBX: 00007f06e5815fa0 RCX: 00007f06e559c799 [ 436.528513][T16620] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000004 [ 436.528527][T16620] RBP: 00007f06e6397090 R08: 0000000000000000 R09: 0000000000000000 [ 436.528540][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.528552][T16620] R13: 00007f06e5816038 R14: 00007f06e5815fa0 R15: 00007ffc55d0a718 [ 436.528586][T16620] [ 436.528595][T16620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.019110][ T6817] IPVS: starting estimator thread 0... [ 437.118137][T16628] IPVS: using max 29 ests per chain, 69600 per kthread [ 437.152526][T16636] netlink: 'syz.2.3034': attribute type 5 has an invalid length. [ 437.179913][T16583] chnl_net:caif_netlink_parms(): no params data found [ 437.207672][T16632] netlink: 'syz.2.3034': attribute type 5 has an invalid length. [ 437.349640][T16642] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 437.372376][T16647] __nla_validate_parse: 1 callbacks suppressed [ 437.372398][T16647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3038'. [ 437.384553][T16642] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 437.397323][T16642] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 437.431916][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.448713][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.474201][T16583] bridge_slave_0: entered allmulticast mode [ 437.488647][ T5837] Bluetooth: hci1: command tx timeout [ 437.509469][T16583] bridge_slave_0: entered promiscuous mode [ 437.570224][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.581563][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.589088][T16583] bridge_slave_1: entered allmulticast mode [ 437.597499][T16583] bridge_slave_1: entered promiscuous mode [ 437.621048][T16654] syzkaller0: entered promiscuous mode [ 437.636243][T16654] syzkaller0: entered allmulticast mode [ 437.715945][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.730625][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.812052][T16583] team0: Port device team_slave_0 added [ 437.822843][T16583] team0: Port device team_slave_1 added [ 437.893249][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.900649][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.942989][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.958263][T16664] x_tables: ip_tables: osf match: only valid for protocol 6 [ 437.994849][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.016266][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.045027][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.167333][T16583] hsr_slave_0: entered promiscuous mode [ 438.169868][T16666] FAULT_INJECTION: forcing a failure. [ 438.169868][T16666] name failslab, interval 1, probability 0, space 0, times 0 [ 438.177470][T16583] hsr_slave_1: entered promiscuous mode [ 438.192446][T16583] debugfs: 'hsr0' already exists in 'hsr' [ 438.201226][T16583] Cannot create hsr debugfs directory [ 438.228342][T16666] CPU: 1 UID: 0 PID: 16666 Comm: syz.2.3043 Not tainted syzkaller #0 PREEMPT(full) [ 438.228374][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.228389][T16666] Call Trace: [ 438.228398][T16666] [ 438.228407][T16666] dump_stack_lvl+0xe8/0x150 [ 438.228450][T16666] should_fail_ex+0x412/0x560 [ 438.228488][T16666] should_failslab+0xa8/0x100 [ 438.228551][T16666] __kmalloc_noprof+0xe8/0x760 [ 438.228577][T16666] ? tomoyo_encode+0x28b/0x550 [ 438.228605][T16666] tomoyo_encode+0x28b/0x550 [ 438.228633][T16666] tomoyo_realpath_from_path+0x58d/0x5d0 [ 438.228667][T16666] ? tomoyo_path_number_perm+0x219/0x630 [ 438.228697][T16666] tomoyo_path_number_perm+0x246/0x630 [ 438.228729][T16666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 438.228762][T16666] ? __lock_acquire+0x6b5/0x2cf0 [ 438.228805][T16666] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 438.228862][T16666] ? __fget_files+0x2a/0x420 [ 438.228897][T16666] ? __fget_files+0x2a/0x420 [ 438.228928][T16666] ? __fget_files+0x3a0/0x420 [ 438.228959][T16666] ? __fget_files+0x2a/0x420 [ 438.228996][T16666] security_file_ioctl+0xc3/0x2a0 [ 438.229027][T16666] __se_sys_ioctl+0x47/0x170 [ 438.229064][T16666] do_syscall_64+0x14d/0xf80 [ 438.229094][T16666] ? trace_irq_disable+0x3b/0x150 [ 438.229113][T16666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.229135][T16666] ? clear_bhb_loop+0x40/0x90 [ 438.229162][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.229183][T16666] RIP: 0033:0x7f06e559c799 [ 438.229205][T16666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.229225][T16666] RSP: 002b:00007f06e6397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.229247][T16666] RAX: ffffffffffffffda RBX: 00007f06e5815fa0 RCX: 00007f06e559c799 [ 438.229264][T16666] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000004 [ 438.229277][T16666] RBP: 00007f06e6397090 R08: 0000000000000000 R09: 0000000000000000 [ 438.229290][T16666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.229302][T16666] R13: 00007f06e5816038 R14: 00007f06e5815fa0 R15: 00007ffc55d0a718 [ 438.229336][T16666] [ 438.229390][T16666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.662673][T16671] syzkaller0: entered promiscuous mode [ 438.697659][T16671] syzkaller0: entered allmulticast mode [ 438.837621][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3050'. [ 438.997450][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 439.566632][ T5837] Bluetooth: hci1: command tx timeout [ 440.205345][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 441.198760][T16707] FAULT_INJECTION: forcing a failure. [ 441.198760][T16707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.225716][T16707] CPU: 1 UID: 0 PID: 16707 Comm: syz.1.3057 Not tainted syzkaller #0 PREEMPT(full) [ 441.225744][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.225757][T16707] Call Trace: [ 441.225765][T16707] [ 441.225774][T16707] dump_stack_lvl+0xe8/0x150 [ 441.225810][T16707] should_fail_ex+0x412/0x560 [ 441.225847][T16707] _copy_from_user+0x2d/0xb0 [ 441.225872][T16707] wext_handle_ioctl+0xc7/0x1d0 [ 441.225912][T16707] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 441.225938][T16707] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 441.225987][T16707] sock_ioctl+0x159/0x7f0 [ 441.226018][T16707] ? __pfx_sock_ioctl+0x10/0x10 [ 441.226047][T16707] ? __fget_files+0x2a/0x420 [ 441.226078][T16707] ? __fget_files+0x3a0/0x420 [ 441.226109][T16707] ? __fget_files+0x2a/0x420 [ 441.226144][T16707] ? bpf_lsm_file_ioctl+0x9/0x20 [ 441.226172][T16707] ? __pfx_sock_ioctl+0x10/0x10 [ 441.226203][T16707] __se_sys_ioctl+0xfc/0x170 [ 441.226233][T16707] do_syscall_64+0x14d/0xf80 [ 441.226262][T16707] ? trace_irq_disable+0x3b/0x150 [ 441.226281][T16707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.226303][T16707] ? clear_bhb_loop+0x40/0x90 [ 441.226329][T16707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.226350][T16707] RIP: 0033:0x7f8daf59c799 [ 441.226371][T16707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.226389][T16707] RSP: 002b:00007f8db03b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.226412][T16707] RAX: ffffffffffffffda RBX: 00007f8daf815fa0 RCX: 00007f8daf59c799 [ 441.226427][T16707] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000004 [ 441.226441][T16707] RBP: 00007f8db03b8090 R08: 0000000000000000 R09: 0000000000000000 [ 441.226453][T16707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.226464][T16707] R13: 00007f8daf816038 R14: 00007f8daf815fa0 R15: 00007ffe67093698 [ 441.226503][T16707] [ 441.459922][T16583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 441.480820][T16583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.571235][T16583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.578976][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3059'. [ 441.606236][T16583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.648500][ T5837] Bluetooth: hci1: command tx timeout [ 441.693244][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'. [ 441.750909][T16721] pim6reg: entered allmulticast mode [ 441.789768][T16729] pim6reg: left allmulticast mode [ 441.858939][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 442.023668][T16747] netlink: 'syz.1.3068': attribute type 10 has an invalid length. [ 442.060480][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.074760][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 442.103278][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.111464][T16749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3068'. [ 442.182857][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.190094][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.212710][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.219968][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.685797][T16780] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3078'. [ 442.880344][T16789] syzkaller1: entered promiscuous mode [ 442.906883][T16789] syzkaller1: entered allmulticast mode [ 443.005866][T16793] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3083'. [ 443.117380][T16583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.288069][T16583] veth0_vlan: entered promiscuous mode [ 443.307782][T16809] netlink: 'syz.4.3088': attribute type 3 has an invalid length. [ 443.339265][T16583] veth1_vlan: entered promiscuous mode [ 443.347720][T16810] netlink: 'syz.0.3087': attribute type 2 has an invalid length. [ 443.376237][T16810] l24): entered promiscuous mode [ 443.454868][T16583] veth0_macvtap: entered promiscuous mode [ 443.471390][T16583] veth1_macvtap: entered promiscuous mode [ 443.524917][T16583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.585585][T16583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.615530][T10396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.646776][ T3942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.663956][ T3942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.678021][T16821] netlink: 146872 bytes leftover after parsing attributes in process `syz.2.3092'. [ 443.683874][ T3942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.734238][ T5837] Bluetooth: hci1: command tx timeout [ 443.798457][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.840775][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.924922][T10403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.959089][T10403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.170260][T16843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3097'. [ 444.269402][T16843] netlink: 184020 bytes leftover after parsing attributes in process `syz.1.3097'. [ 444.279412][T16844] netlink: 184020 bytes leftover after parsing attributes in process `syz.1.3097'. [ 444.395497][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.412660][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.446892][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.466573][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.480685][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.542786][T16850] gre0 speed is unknown, defaulting to 1000 [ 444.558622][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3101'. [ 444.818650][T16864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3104'. [ 444.858182][T16866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3105'. [ 444.898991][T16866] netlink: zone id is out of range [ 444.909052][T16866] netlink: zone id is out of range [ 444.914276][T16866] netlink: zone id is out of range [ 444.946577][T16866] netlink: zone id is out of range [ 444.957282][T16866] netlink: zone id is out of range [ 444.979192][T16866] netlink: zone id is out of range [ 444.984476][T16866] netlink: zone id is out of range [ 444.991864][T16869] openvswitch: netlink: IP tunnel dst address not specified [ 445.020765][T16866] netlink: zone id is out of range [ 445.080040][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 445.303598][T16850] wg1 speed is unknown, defaulting to 1000 [ 445.351377][T16877] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 445.729226][T16898] net_ratelimit: 768 callbacks suppressed [ 445.729258][T16898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.882269][T16905] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 445.958376][T16905] hsr0: left promiscuous mode [ 445.963845][T16905] bond5: left promiscuous mode [ 445.969489][T16905] bond6: left promiscuous mode [ 445.974829][T16905] wireguard0: left promiscuous mode [ 445.982504][T16905] vlan4: left promiscuous mode [ 446.305040][T16922] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 446.342039][T16850] chnl_net:caif_netlink_parms(): no params data found [ 446.517148][ T5145] Bluetooth: hci2: command tx timeout [ 446.597971][T16850] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.605696][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.613590][T16850] bridge_slave_0: entered allmulticast mode [ 446.622286][T16850] bridge_slave_0: entered promiscuous mode [ 446.634455][T16850] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.642573][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.650694][T16850] bridge_slave_1: entered allmulticast mode [ 446.659094][T16850] bridge_slave_1: entered promiscuous mode [ 446.732507][T16850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.747091][T16850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.832856][T16850] team0: Port device team_slave_0 added [ 446.868494][T16850] team0: Port device team_slave_1 added [ 446.903759][T16850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.911445][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.938483][T16850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.951173][ T3942] vlan2: left allmulticast mode [ 446.958363][ T3942] dummy0: left allmulticast mode [ 446.964697][ T3942] vlan2: left promiscuous mode [ 446.970000][ T3942] dummy0: left promiscuous mode [ 446.977075][ T3942] bridge0: port 1(vlan2) entered disabled state [ 447.210051][ T3942] erspan0 (unregistering): left allmulticast mode [ 447.372877][ T3942] bond5 (unregistering): (slave gretap1): Releasing active interface [ 447.502880][ T3942] bond6 (unregistering): (slave bridge2): Releasing active interface [ 447.631389][ T3942] bond0 (unregistering): (slave team0): Releasing backup interface [ 447.645904][ T3942] bond0 (unregistering): Released all slaves [ 447.662974][ T3942] bond1 (unregistering): Released all slaves [ 447.682951][ T3942] bond2 (unregistering): Released all slaves [ 447.702053][ T3942] bond3 (unregistering): Released all slaves [ 447.719265][ T3942] bond4 (unregistering): Released all slaves [ 447.728728][T16975] netlink: 'syz.4.3131': attribute type 13 has an invalid length. [ 447.738311][T16975] netlink: 'syz.4.3131': attribute type 17 has an invalid length. [ 447.754956][ T3942] bond5 (unregistering): Released all slaves [ 447.770285][ T3942] bond6 (unregistering): Released all slaves [ 447.785566][ T3942] bond7 (unregistering): Released all slaves [ 447.826068][ T3942] bond8 (unregistering): Released all slaves [ 447.864437][ T3942] bond9 (unregistering): Released all slaves [ 447.883473][ T3942] bond10 (unregistering): Released all slaves [ 447.904121][T16850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.913074][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.942973][T16850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.998373][T16963] ÿÿÿÿÿÿ: renamed from erspan0 (while UP) [ 448.011370][T16966] netlink: 'syz.1.3129': attribute type 29 has an invalid length. [ 448.241161][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.248929][T16976] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.326825][T16991] __nla_validate_parse: 9 callbacks suppressed [ 448.326847][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 448.391941][T16976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.406197][T16976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.546834][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.554585][T16975] team0: left promiscuous mode [ 448.559845][T16975] team_slave_1: left promiscuous mode [ 448.566191][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.579453][T16975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.596821][ T5145] Bluetooth: hci2: command tx timeout [ 448.604918][T16967] netlink: 'syz.1.3129': attribute type 29 has an invalid length. [ 448.614558][ T3942] l24): left promiscuous mode [ 448.690736][T16991] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 448.697814][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.712793][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 448.722019][T16991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 448.755387][T16991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 448.840391][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.856924][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.923757][ T3942] tipc: Disabling bearer [ 448.957298][T17008] netlink: 'syz.1.3137': attribute type 8 has an invalid length. [ 448.978391][T10399] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.982391][ T3942] tipc: Left network mode [ 449.012187][T16850] hsr_slave_0: entered promiscuous mode [ 449.038935][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3138'. [ 449.063320][T16850] hsr_slave_1: entered promiscuous mode [ 449.070108][T16850] debugfs: 'hsr0' already exists in 'hsr' [ 449.077871][T16850] Cannot create hsr debugfs directory [ 449.475976][T17007] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.483850][T17007] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.852624][T17007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.867414][T17007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.191461][T10405] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.273215][T10405] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.307234][T10405] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.382317][T10405] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.677930][ T5145] Bluetooth: hci2: command tx timeout [ 450.719086][T17042] gre0 speed is unknown, defaulting to 1000 [ 450.810489][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'. [ 450.974538][T17071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3150'. [ 451.309937][T17087] netlink: 'syz.2.3154': attribute type 3 has an invalid length. [ 451.348146][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3154'. [ 451.399589][T17089] netlink: 'syz.3.3155': attribute type 2 has an invalid length. [ 451.514106][T17089] : entered promiscuous mode [ 451.533680][T17042] wg1 speed is unknown, defaulting to 1000 [ 451.599830][T17098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.740711][T17111] netlink: 'syz.2.3158': attribute type 7 has an invalid length. [ 452.020869][ T3942] hsr_slave_0: left promiscuous mode [ 452.037240][ T3942] hsr_slave_1: left promiscuous mode [ 452.225433][T17125] netlink: 'syz.4.3160': attribute type 1 has an invalid length. [ 452.575301][ T3942] team0 (unregistering): Port device dummy0 removed [ 452.766750][ T5145] Bluetooth: hci2: command tx timeout [ 452.890113][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3163'. [ 453.131593][T17145] openvswitch: netlink: IP tunnel dst address not specified [ 453.344526][T16850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.383676][T16850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.412253][T16850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.453734][T16850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.478954][T17152] netlink: 'syz.3.3167': attribute type 3 has an invalid length. [ 453.503395][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3167'. [ 453.521999][ T3942] IPVS: stop unused estimator thread 0... [ 453.539303][T17160] bond10: (slave vlan0): Opening slave failed [ 453.907860][T16850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.000033][T16850] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.045850][ T3942] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.053201][ T3942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.069847][T17187] netlink: 'syz.4.3169': attribute type 1 has an invalid length. [ 454.136201][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.143520][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.158933][T17193] openvswitch: netlink: IP tunnel dst address not specified [ 454.386753][T17207] xfrm1: left allmulticast mode [ 454.510592][T17203] gre0 speed is unknown, defaulting to 1000 [ 454.914377][T17223] netlink: 'syz.1.3179': attribute type 3 has an invalid length. [ 454.947983][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 455.132654][T16850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.274472][T17235] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 455.303110][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'. [ 455.400105][T16850] veth0_vlan: entered promiscuous mode [ 455.432439][T16850] veth1_vlan: entered promiscuous mode [ 455.669581][T16850] veth0_macvtap: entered promiscuous mode [ 455.700564][T16850] veth1_macvtap: entered promiscuous mode [ 455.793243][T17253] netlink: 'syz.1.3184': attribute type 30 has an invalid length. [ 455.846923][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3184'. [ 455.872128][T16850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.100800][T17253] bond14: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 456.167032][T17253] bond14 (unregistering): Released all slaves [ 456.325488][T16850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.524892][T10399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.556689][T10399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.584409][T10399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.616740][T10399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.923883][T17273] openvswitch: netlink: IP tunnel dst address not specified [ 456.970532][T10399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.990257][T10399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.143021][T10399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.171436][T10399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.458137][T17292] netlink: 'syz.1.3191': attribute type 3 has an invalid length. [ 457.535635][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3191'. [ 457.956190][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.970210][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.982654][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.995313][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.003206][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.346290][T17310] gre0 speed is unknown, defaulting to 1000 [ 458.748150][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3198'. [ 458.801404][ T147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.802750][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3198'. [ 458.829942][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3198'. [ 458.848750][ T147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.880031][ T147] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.905283][ T147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.937584][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3198'. [ 458.978538][T17304] gre0 speed is unknown, defaulting to 1000 [ 459.200774][T17346] openvswitch: netlink: IP tunnel dst address not specified [ 459.557207][T17364] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3202'. [ 459.694579][T17310] chnl_net:caif_netlink_parms(): no params data found [ 459.750560][T17367] xt_TCPMSS: Only works on TCP SYN packets [ 459.927715][T17370] netlink: 'syz.3.3203': attribute type 3 has an invalid length. [ 459.946047][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3203'. [ 460.037524][ T5145] Bluetooth: hci0: command tx timeout [ 460.364251][T17310] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.379375][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.420867][T17310] bridge_slave_0: entered allmulticast mode [ 460.429252][T17310] bridge_slave_0: entered promiscuous mode [ 460.455114][T17310] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.467750][T17388] netlink: 'syz.3.3205': attribute type 1 has an invalid length. [ 460.475888][T17388] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3205'. [ 460.486458][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.507171][T17310] bridge_slave_1: entered allmulticast mode [ 460.519550][T17310] bridge_slave_1: entered promiscuous mode [ 460.529878][T17386] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3205'. [ 460.627328][T17386] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 460.668490][T17310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.705616][T17310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.829339][T17310] team0: Port device team_slave_0 added [ 460.868576][T17310] team0: Port device team_slave_1 added [ 460.998115][T17310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.016992][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.076842][T17310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.106318][T17310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.120887][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.188995][T17310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.229892][T17406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3210'. [ 461.241986][T17406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3210'. [ 461.676181][T17310] hsr_slave_0: entered promiscuous mode [ 461.692120][T17310] hsr_slave_1: entered promiscuous mode [ 461.699741][T17310] debugfs: 'hsr0' already exists in 'hsr' [ 461.710251][T17310] Cannot create hsr debugfs directory [ 461.782983][T17424] netlink: 'syz.1.3212': attribute type 13 has an invalid length. [ 462.116631][ T5145] Bluetooth: hci0: command tx timeout [ 462.607032][ T147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.647493][ T147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.761087][T10405] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.777388][T10405] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.471921][T17471] netlink: 'syz.1.3225': attribute type 12 has an invalid length. [ 463.877722][T17489] __nla_validate_parse: 12 callbacks suppressed [ 463.877743][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3227'. [ 463.911692][T17310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.933884][T17310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.965462][T17310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.017789][T17310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.033225][T17493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3230'. [ 464.196624][ T5145] Bluetooth: hci0: command tx timeout [ 464.197183][T17506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3234'. [ 464.260367][T17506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3234'. [ 464.285085][T17310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.329122][T17310] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.343835][T10405] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.351290][T10405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.403212][T10405] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.410467][T10405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.669046][T17525] gre0 speed is unknown, defaulting to 1000 [ 464.675441][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3240'. [ 464.751862][T17533] ipip0: entered promiscuous mode [ 464.911295][T17310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.039439][T17310] veth0_vlan: entered promiscuous mode [ 465.140111][T17544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3244'. [ 465.249289][T17310] veth1_vlan: entered promiscuous mode [ 465.376806][T17310] veth0_macvtap: entered promiscuous mode [ 465.389921][T17310] veth1_macvtap: entered promiscuous mode [ 465.468010][T17310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.482522][T17548] netlink: 'syz.0.3246': attribute type 5 has an invalid length. [ 465.514887][T17310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.572303][T10396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.592420][T10396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.668293][T10396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.691068][T10396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.813610][ T6805] IPVS: starting estimator thread 0... [ 465.926697][T17562] IPVS: using max 35 ests per chain, 84000 per kthread [ 466.201560][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.235420][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.277153][ T5145] Bluetooth: hci0: command tx timeout [ 466.321726][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.349802][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.384392][T17579] netlink: 'syz.1.3255': attribute type 21 has an invalid length. [ 466.399378][T17579] netlink: 'syz.1.3255': attribute type 4 has an invalid length. [ 466.413526][T17579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3255'. [ 466.498673][T17576] netlink: 'syz.4.3254': attribute type 3 has an invalid length. [ 466.520224][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3254'. [ 466.560944][T17583] gre0 speed is unknown, defaulting to 1000 [ 466.769447][T17591] sctp: [Deprecated]: syz.4.3259 (pid 17591) Use of int in max_burst socket option. [ 466.769447][T17591] Use struct sctp_assoc_value instead [ 466.815515][T17591] netlink: 'syz.4.3259': attribute type 21 has an invalid length. [ 467.187927][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.322716][T17600] openvswitch: netlink: IP tunnel dst address not specified [ 467.336979][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.349967][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.378446][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.389738][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.437447][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3258'. [ 467.851514][T17593] ------------[ cut here ]------------ [ 467.857831][T17593] !rwb [ 467.857864][T17593] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.2.3258/17593 [ 467.871595][T17593] Modules linked in: [ 467.876162][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.2.3258 Not tainted syzkaller #0 PREEMPT(full) [ 467.885753][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.896145][T17593] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 467.902568][T17593] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 3d f0 24 fd eb 18 e8 36 f0 24 fd eb 0d e8 2f f0 24 fd 4c 89 ff e8 17 1e 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 1a 13 07 [ 467.922383][T17593] RSP: 0018:ffffc90004766e30 EFLAGS: 00010282 [ 467.928670][T17593] RAX: e47b8a8853028400 RBX: 1ffff11013c16b84 RCX: 0000000000000046 [ 467.936840][T17593] RDX: 0000000000000006 RSI: ffffffff8df28389 RDI: ffffffff8c27ca80 [ 467.944870][T17593] RBP: dffffc0000000000 R08: ffffffff901188b7 R09: 1ffffffff2023116 [ 467.953192][T17593] R10: dffffc0000000000 R11: fffffbfff2023117 R12: ffff88809e0b5c20 [ 467.961376][T17593] R13: 0000000000000000 R14: ffff888063b6a000 R15: ffff88809e0b5c00 [ 467.969463][T17593] FS: 00007f43baa1e6c0(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 467.978614][T17593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.985252][T17593] CR2: 00007f75eb5ad400 CR3: 000000003413e000 CR4: 00000000003526f0 [ 467.993511][T17593] Call Trace: [ 467.997487][T17593] [ 468.000476][T17593] blk_register_queue+0x382/0x430 [ 468.005576][T17593] __add_disk+0x677/0xd50 [ 468.010206][T17593] ? down_read+0x272/0x2e0 [ 468.014692][T17593] add_disk_fwnode+0xfb/0x480 [ 468.019622][T17593] nbd_dev_add+0x72c/0xb50 [ 468.024082][T17596] gre0 speed is unknown, defaulting to 1000 [ 468.024107][T17593] ? __pfx_nbd_dev_add+0x10/0x10 [ 468.035108][T17593] ? bpf_lsm_capable+0x9/0x20 [ 468.040557][T17593] ? security_capable+0x7e/0x2c0 [ 468.045575][T17593] ? radix_tree_lookup+0x25c/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 468.050849][T17593] nbd_genl_connect+0x962/0x1cf0 [ 468.055929][T17593] ? __pfx___nla_validate_parse+0x10/0x10 [ 468.061910][T17593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.067438][T17593] ? rcu_is_watching+0x15/0xb0 [ 468.072269][T17593] ? trace_kmalloc+0x2a/0x110 [ 468.077187][T17593] ? __nla_parse+0x40/0x60 [ 468.081669][T17593] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 468.088142][T17593] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 468.094549][T17593] genl_family_rcv_msg_doit+0x22a/0x330 [ 468.100270][T17593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.106462][T17593] ? __lock_acquire+0x6b5/0x2cf0 [ 468.111606][T17593] genl_rcv_msg+0x61c/0x7a0 [ 468.116195][T17593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.121778][T17593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.127297][T17593] ? __lock_acquire+0x6b5/0x2cf0 [ 468.132324][T17593] netlink_rcv_skb+0x232/0x4b0 [ 468.137299][T17593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.142390][T17593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.147831][T17593] ? down_read+0x272/0x2e0 [ 468.152294][T17593] ? genl_rcv+0xd/0x40 [ 468.156601][T17593] genl_rcv+0x28/0x40 [ 468.160643][T17593] netlink_unicast+0x80f/0x9b0 [ 468.165480][T17593] ? __pfx_netlink_unicast+0x10/0x10 [ 468.171057][T17593] ? netlink_sendmsg+0x650/0xb40 [ 468.176089][T17593] ? skb_put+0x11b/0x210 [ 468.180514][T17593] netlink_sendmsg+0x813/0xb40 [ 468.185350][T17593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.190799][T17593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.195811][T17593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.201252][T17593] ____sys_sendmsg+0x972/0x9f0 [ 468.206083][T17593] ? futex_unqueue+0x211/0x240 [ 468.210984][T17593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.216396][T17593] ? import_iovec+0x73/0xa0 [ 468.221053][T17593] ___sys_sendmsg+0x2a5/0x360 [ 468.225796][T17593] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.231202][T17593] ? futex_wait+0x29a/0x380 [ 468.235807][T17593] ? __fget_files+0x2a/0x420 [ 468.240539][T17593] ? __fget_files+0x3a0/0x420 [ 468.245293][T17593] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.250449][T17593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.255988][T17593] ? rcu_is_watching+0x15/0xb0 [ 468.260952][T17593] do_syscall_64+0x14d/0xf80 [ 468.265621][T17593] ? trace_irq_disable+0x3b/0x150 [ 468.270792][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.277453][T17593] ? clear_bhb_loop+0x40/0x90 [ 468.282203][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.288241][T17593] RIP: 0033:0x7f43b9b9c799 [ 468.292751][T17593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.312697][T17593] RSP: 002b:00007f43baa1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.321323][T17593] RAX: ffffffffffffffda RBX: 00007f43b9e16180 RCX: 00007f43b9b9c799 [ 468.329540][T17593] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 468.337685][T17593] RBP: 00007f43b9c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 468.345728][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.353862][T17593] R13: 00007f43b9e16218 R14: 00007f43b9e16180 R15: 00007ffc20cd7028 [ 468.365687][T17593] [ 468.369804][T17593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 468.377232][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.2.3258 Not tainted syzkaller #0 PREEMPT(full) [ 468.386695][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.396984][T17593] Call Trace: [ 468.400296][T17593] [ 468.403261][T17593] vpanic+0x56c/0xa60 [ 468.407280][T17593] ? __pfx__printk+0x10/0x10 [ 468.411899][T17593] ? __pfx_vpanic+0x10/0x10 [ 468.416437][T17593] ? is_bpf_text_address+0x292/0x2b0 [ 468.421754][T17593] ? is_bpf_text_address+0x26/0x2b0 [ 468.426992][T17593] panic+0xc5/0xd0 [ 468.430760][T17593] ? __pfx_panic+0x10/0x10 [ 468.435229][T17593] __warn+0x315/0x4f0 [ 468.439327][T17593] ? wbt_init_enable_default+0x18a/0x220 [ 468.445007][T17593] ? wbt_init_enable_default+0x18a/0x220 [ 468.450664][T17593] __report_bug+0x29a/0x540 [ 468.455311][T17593] ? netlink_rcv_skb+0x232/0x4b0 [ 468.460290][T17593] ? genl_rcv+0x28/0x40 [ 468.464481][T17593] ? netlink_unicast+0x80f/0x9b0 [ 468.469462][T17593] ? wbt_init_enable_default+0x18a/0x220 [ 468.475147][T17593] ? __pfx___report_bug+0x10/0x10 [ 468.480226][T17593] ? wbt_init_enable_default+0x18a/0x220 [ 468.485905][T17593] report_bug+0x16a/0x220 [ 468.490271][T17593] ? wbt_init_enable_default+0x18a/0x220 [ 468.495947][T17593] ? wbt_init_enable_default+0x18c/0x220 [ 468.501607][T17593] handle_bug+0x9c/0x200 [ 468.505968][T17593] exc_invalid_op+0x1a/0x50 [ 468.510681][T17593] asm_exc_invalid_op+0x1a/0x20 [ 468.515557][T17593] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 468.521825][T17593] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 3d f0 24 fd eb 18 e8 36 f0 24 fd eb 0d e8 2f f0 24 fd 4c 89 ff e8 17 1e 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 1a 13 07 [ 468.541659][T17593] RSP: 0018:ffffc90004766e30 EFLAGS: 00010282 [ 468.547767][T17593] RAX: e47b8a8853028400 RBX: 1ffff11013c16b84 RCX: 0000000000000046 [ 468.555767][T17593] RDX: 0000000000000006 RSI: ffffffff8df28389 RDI: ffffffff8c27ca80 [ 468.563769][T17593] RBP: dffffc0000000000 R08: ffffffff901188b7 R09: 1ffffffff2023116 [ 468.571779][T17593] R10: dffffc0000000000 R11: fffffbfff2023117 R12: ffff88809e0b5c20 [ 468.579959][T17593] R13: 0000000000000000 R14: ffff888063b6a000 R15: ffff88809e0b5c00 [ 468.587979][T17593] blk_register_queue+0x382/0x430 [ 468.593052][T17593] __add_disk+0x677/0xd50 [ 468.597431][T17593] ? down_read+0x272/0x2e0 [ 468.601869][T17593] add_disk_fwnode+0xfb/0x480 [ 468.606592][T17593] nbd_dev_add+0x72c/0xb50 [ 468.611131][T17593] ? __pfx_nbd_dev_add+0x10/0x10 [ 468.616114][T17593] ? bpf_lsm_capable+0x9/0x20 [ 468.620819][T17593] ? security_capable+0x7e/0x2c0 [ 468.625815][T17593] ? radix_tree_lookup+0x25c/0x290 [ 468.630990][T17593] nbd_genl_connect+0x962/0x1cf0 [ 468.635964][T17593] ? __pfx___nla_validate_parse+0x10/0x10 [ 468.641718][T17593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.647122][T17593] ? rcu_is_watching+0x15/0xb0 [ 468.651926][T17593] ? trace_kmalloc+0x2a/0x110 [ 468.656648][T17593] ? __nla_parse+0x40/0x60 [ 468.661285][T17593] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 468.667743][T17593] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 468.674119][T17593] genl_family_rcv_msg_doit+0x22a/0x330 [ 468.679978][T17593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.686207][T17593] ? __lock_acquire+0x6b5/0x2cf0 [ 468.691190][T17593] genl_rcv_msg+0x61c/0x7a0 [ 468.695730][T17593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.700811][T17593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 468.706386][T17593] ? __lock_acquire+0x6b5/0x2cf0 [ 468.711459][T17593] netlink_rcv_skb+0x232/0x4b0 [ 468.716258][T17593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.721320][T17593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.726654][T17593] ? down_read+0x272/0x2e0 [ 468.731105][T17593] ? genl_rcv+0xd/0x40 [ 468.735210][T17593] genl_rcv+0x28/0x40 [ 468.739232][T17593] netlink_unicast+0x80f/0x9b0 [ 468.744162][T17593] ? __pfx_netlink_unicast+0x10/0x10 [ 468.749493][T17593] ? netlink_sendmsg+0x650/0xb40 [ 468.754667][T17593] ? skb_put+0x11b/0x210 [ 468.758948][T17593] netlink_sendmsg+0x813/0xb40 [ 468.763759][T17593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.769078][T17593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.774062][T17593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.779398][T17593] ____sys_sendmsg+0x972/0x9f0 [ 468.784200][T17593] ? futex_unqueue+0x211/0x240 [ 468.789230][T17593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.794679][T17593] ? import_iovec+0x73/0xa0 [ 468.799257][T17593] ___sys_sendmsg+0x2a5/0x360 [ 468.804206][T17593] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.809473][T17593] ? futex_wait+0x29a/0x380 [ 468.814066][T17593] ? __fget_files+0x2a/0x420 [ 468.818713][T17593] ? __fget_files+0x3a0/0x420 [ 468.823605][T17593] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.828579][T17593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.834092][T17593] ? rcu_is_watching+0x15/0xb0 [ 468.838910][T17593] do_syscall_64+0x14d/0xf80 [ 468.843538][T17593] ? trace_irq_disable+0x3b/0x150 [ 468.848586][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.854714][T17593] ? clear_bhb_loop+0x40/0x90 [ 468.859424][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.865346][T17593] RIP: 0033:0x7f43b9b9c799 [ 468.869791][T17593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.889425][T17593] RSP: 002b:00007f43baa1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.897890][T17593] RAX: ffffffffffffffda RBX: 00007f43b9e16180 RCX: 00007f43b9b9c799 [ 468.905891][T17593] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 468.914104][T17593] RBP: 00007f43b9c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 468.922121][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.930117][T17593] R13: 00007f43b9e16218 R14: 00007f43b9e16180 R15: 00007ffc20cd7028 [ 468.938139][T17593] [ 468.941794][T17593] Kernel Offset: disabled [ 468.946129][T17593] Rebooting in 86400 seconds..