last executing test programs: 11.599768826s ago: executing program 0 (id=1676): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0), 0x0, 0x0) unshare(0x68040200) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r2, &(0x7f00000000c0)="510003000000", 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x83, &(0x7f00000001c0)="a027ceb1666cf1b5", 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0xf, 0x5}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x100, 0x202, 0x1584, 0xffffffff, r7}, 0x10) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 10.587655976s ago: executing program 0 (id=1683): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b1b, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x240640a5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @loopback, @empty}, 0xc) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r6, 0x9) write$bt_hci(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES64=r0], 0x5) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 9.49083576s ago: executing program 1 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095003200000000006916000000000000bf67000000000000350605000fff07206706000002000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d39d25991b085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e5671c888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e17417a249a2cd8ff62aa6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a122822bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c6310121ecb9029e7f835420f8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc12b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35349fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d3743a0be77b64961753faba6131c136fb14b1963960f2f7f118bc451a18b216bf26c3cec2575a059da60baede629711a5f11c347fcbca73440d27b1147b44fb15106c00669da23964fd9de079d1a9077848100f6e75d29b2d60016abc6ef1542bd3062f599676bb04e64decb6c843a407f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 9.400731645s ago: executing program 4 (id=1692): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) epoll_create1(0x3012f84903b37587) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x4, 0x81, 0x4, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x1, 0x40}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) 8.830263508s ago: executing program 1 (id=1696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x9, 0x92, {{0x1e, 0x4, 0x0, 0x1f, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x74, 0x1, 0x6, [{@remote, 0x4}, {@rand_addr=0x64010100, 0x2}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x8, [{@empty, 0x800}]}, @ssrr={0x89, 0xb, 0xac, [@rand_addr=0x64010101, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xa3, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x27, 0x1b, [@rand_addr=0x64010101, @loopback, @local, @rand_addr=0x64010101, @empty, @remote, @rand_addr=0x64010100, @multicast1, @loopback]}]}}}}}) 8.446962518s ago: executing program 4 (id=1697): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x34, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_PROBES={0x8, 0x4, 0x455}, @NDA_SRC_VNI={0x8}]}, 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 5.978255338s ago: executing program 2 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/251}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r3, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/221, 0xdd, 0x0, &(0x7f0000000a40)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x12, &(0x7f0000000600)=@raw=[@ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x0, 0x6, 0xf, 0x7fff, 0x8}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, &(0x7f00000006c0), 0x41000, 0x4, '\x00', r7, @sk_reuseport=0x27, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x9070, 0x4}, 0x10, r8, r3, 0x3, &(0x7f0000000c00)=[0xffffffffffffffff], &(0x7f0000000c40)=[{0x2, 0x5, 0x10, 0x5}, {0x5, 0x1, 0xe, 0x8}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0x4}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x81, &(0x7f0000000400)=""/129, 0x40f00, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xf, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0x10, 0x8}, {0x4, 0x2, 0x7, 0x7}, {0x0, 0x5, 0x5, 0xa}, {0x5, 0x4, 0x6, 0x8}], 0x10, 0x8}, 0x94) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff23}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0xaac, 0x1000, &(0x7f0000001500)=""/4096, 0x40f00, 0x0, '\x00', r1, @lsm=0x2b, r2, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x2, 0x8}, 0x10, r8, r9, 0x8, &(0x7f00000006c0)=[r10, r11], &(0x7f0000000700)=[{0x2, 0x1, 0xf, 0x7}, {0x4, 0x5, 0xd, 0x5}, {0x0, 0x4, 0xd, 0x2}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x2, 0xc, 0x6}, {0x1, 0x1, 0xf, 0xb}, {0x400, 0x3, 0x3, 0x4}, {0x3, 0x3, 0x7, 0x8}]}, 0x94) socket(0x10, 0x803, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.975946916s ago: executing program 4 (id=1700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00) 5.548695959s ago: executing program 4 (id=1703): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 5.478416497s ago: executing program 2 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa26d6e1d373a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, 0x0, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) shutdown(r2, 0x0) write$cgroup_devices(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="61202a3a2a207277007ac118d8cbb74c2da7d151f469d6ab5de05d8a31ceecacc80bf2e8220d1586e591a079bfb0"], 0x9) mkdirat$cgroup(r6, &(0x7f00000004c0)='syz0\x00', 0x1ff) write$cgroup_devices(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) accept4(r3, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.900860969s ago: executing program 2 (id=1705): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a", 0x6c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6], 0x6f4}}, 0x0) 4.679600665s ago: executing program 2 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 4.561071663s ago: executing program 3 (id=1707): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r3, 0x2000000, 0x14, 0x0, &(0x7f0000000000)="134345be218a82fe733e8c3f43303816b8567084637af22e", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x1000, 0xb9, &(0x7f0000001680)="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", &(0x7f0000000600)=""/185, 0x5, 0x0, 0x5f, 0x1000, &(0x7f0000000540)="51e86401b753649c95e21a0e42c079e364c324f9ff6765b8c5fb161825941f89d00a9c96aeca1cde313293c89eefa9ee1ca9244d0482b66f58bf7f7daa08863d74e336591c2ceca3fce1d2af3d38126a1664ddcc5f2e4bbc6d6e70b36367b9", &(0x7f0000002680)="2f40db0a59f756e4682788e021270383e749e46aa74f187c7576f9fe64fa8f0434032380012c1bbbd91b4f0de3fd40064c857c309bdb554fac83cc26e5009cae31eb7bcf749412b990c2825405307136013a4b10c5a65ea9eb5155ac7a739021bd6458c9e3a5ea52d3c080ac4b83173763e69ceae3a4049903debd5109856ca7ae56e9d1e05513e12ce02244ef4187b46d8488efbcf8de05161e8a8ea74859693bd2ae177d97b6b4181afa6800d61c9fa21ec82efad533da93cd0dd110b8d6f704a47ab0ef838258cefdb0cf2feb7a793e09acf3811ebd9913a7ff2c10ff059b1ed819a7b6e47d4b306fb3205ad19abb8782f5a0ea581975cc8c0647cb3e6aa00245be49c5725ac22691c53ec4568e3f08bed5f27e1bb228e208e96f729c489eda56bd16ccb8a5ca0e95b552234c37364f70de6bc0fc212ff1a7436923737b496d2ecc86b6ef9b6914482ae3d69bee78d0dea4e40a9c47d06c9bf854a3bc26f11925378fe6e9854f1492a813d5dd2682f57bef2276c06a94101718d6adcd258c1f28c11f55b868990dfadc7f12362839eb8b537cc80d20a5eaae58766b66b52f91b902ad27dfdc04987ec14fc180eac73f3c5c31c696acfa7086cbeefcfd8877ab700ba81e0e4938a403233d18378688ad3c3c90068720f67cfbcd2049c102eb20afc5a4eda8aa6e9818ec54e368f8eee55649382a6fa44bfad37fe580abb9ffbd3fd5593d7f3b34840e4d7f2a2f028e9a02ad24028b6e70da4c25e5c794602bd6b788f1d0b04e45f080f7935e8e466cebdfd8738625782548b99d3c9097306d8f6b9cca0ebdddf3df2fdf55d33ad75915cc5d1742235e0c1d78b0e31d61871db9ace8fedc6180aff7f57c197ca6400e3afd8fdedeff66fbc50e910d0d64e25a8619fcf14f917b44b05f24fcd4edd471129c595dfbaa08151dda21c180afe55924675bc811dbc6b1676c025ea6dc9db669ddc9c7548688c855ee2a3cc251a2a72b980540d7b1e97fbaf13316711334eb5e485bef4d23a84c1661542dc285de35de960e1de619694dd79e40bd62d0757070a99e819cccaec08c22a6939c3cd233c0946ec6d0e024bc66f53c80bb9c4b5b1e856dcf2e715ace0191e05e380027063314b39ca784e43c6d8a1b55d1420e9f3482ab090f8e4961ecf0ad0892632a644504878f570371a995fbdaf80d2b53b7f0840c87232833a97fe677ab943edada9fd415238a9ce5859de3b6743aaba090db8e9f671a8e8962b7e165eeb6c4441a64f7145c9784c975917b61b45a459b31cb6484bded70c16decf3c9486f503741a0de220f4d96141c5e47bef75d6e27b638c94c666458ab334d60c1a51acdcdb6dca06cb0b1d9d59d5bfe01001ae9d498231bba7c004245f997d3c7e0e497a054142068b0a7b5bcb647f3e16763ebbecac03113d62b07be53fc3015ab241700072a7257c66079d0473e4e7268148603116f1cc5345d7cda954232e4397d4314f7cc292e8bde78a9fed125cef995be89d44370a5b924c77b61383bab6416d42e2f4ef92698b2b9fce279d94490708b510fbb8e3db1fffb4f6b7d15e05aa3c72b10f6c5de49065e5cb7b7cd66a2da96cc74dc4cf818aff80cbfd1c3c87e099ad77748637f701768d47ae3af74c37dfd3130f93c6a9b8110a9122e2eb7f14c8ab32a9d672f927aca64a19ccb489c8347a94d0dfdf56533aba331940e2bdb59e58be16220c728c7e408a328ca7a3d4c5adc07b46c7f4aaf17d59aabed0c0f64fd445ab11f0c0a0e7b86f659bcd09cceb808b2f16d7d645bb0cada9068b561164945e2311bf924b1f2b826c0fe8ebc87c1cd6ae4f439ab4ce9422635698b35b9b72e2faa755d9ce546fc95867648564cb22f733f28197caf86c5c0602652917e73f4676b518d8bd28e15530078f90d358c449ed8ed7bc365607a88051f6de1cd42be12a429550d9123b7b561ba959cf7ef23499664950cba612d5d48972b9ea3029dff898fe99f9d93347a4aec1899c1183a0bf9f36c8ffe61cac16b90b70727a762763580ccc29ef2b93f0d0927c41d9f41a4afa9ee52baae73e4871476dcda5e21482123217f01193140144b836587fa75676f0287e1b75047c0848eb93101917540ffc9c816ce788c66160ca16655002f0fbe36dcf97acfe872e922053fec05faa890147dcbfb6fcc29214e6012d03eff7dac7e815e7d5d25068781a4a98a5478aa0a50a4eb8521869d253769a51e8e4f514a65f15dde2b4093694e562deded074393a8d9c0316c3c0cb3418db57d3c3eb4997f28b89291e2118315231d2435946e1130b3dc3d36a7b9d678888167d1542e2f695db28a6cb8fae745f313e00be6f073c5f07484635ffe821791c05d2cd6e06f2e490e6719f46db6f6512f6def478905208c1f49fa44439aaf21279279b71d057232cbbdee5e3654ee63ca8c48b0386a8ef2f5b117662ab1edb65173a7d2fe95193cd0780ed90203ddc98d005e71becaef729f4a8bcb2a6ff851362e32c16e7d6a644a27788abb94cdfeeef0092acc77eec857c3de70853e32bf8887965207a68679b1769ea161374d2ab9f75c1f629d73a7484285004ed001bef103665c2c168a9b53025abc328a3247cea363e80171566fffd965219a4f39ea24e5f59ff9b1110c3471fc46cd7568a3a3ffc21f70d093a4d9aa4bb8a21012d2aadef29f78624adbffc67f5cdd2361ae42399501fea38c0643f886023f71309b40c6107f25188c419ffa4a23c025d5a90f3351944232fcba1b9d7c6cf4e5af0387bcb28e207681e4f280c38349630791ee6a508b5b475a80c3ee75a3bff1ea8b5bbaaf91479cff9aac56de74aec2dc8c595310a65c8d7fb8d964ac8923ef1c778ba53b696bb2377e7000144d36ba270079de90a9f6ef492c033de0b798c4bc911b8e32adda756540830536c2f899b50f9ae6a8de732bc7067bcaa8deb6acbbb3b1b36dc38f6425555e998a4585dc8a32c08278a65cf5dea16acc8fc0d23f2c989cced272a7374e4feacec2d80bbc5479d729e09d300d2edc08a43d25681cd57b73e1fe3fccee52f12137cf523f24b5bb5cff569daac9073661214d1c82148c07cdd088e74b6394eae56e39196b8dc75d892dce5312cef24d730b3756d701b28b264c72062dc15ab44cad7f8ef00a09cc28bd50219f502a5d2128277d59c2eb89f8c0be7ebbc5a50d0a30a7708b05e4fe6b67a09f050d8c731f10b6ddf7c6539ce9862af0168ad78d1ff2591a3f19414be47becc46f8c3f57c76b4557e7e6db4e92f295aeae692114eaf19b170c8628871d633f6b1768685bf29a6c6174e550078241b9a6748d67987e8aa3abe2937648b40f252c8e7ed7c49fea65b4b57e2ec061f343e724c65a28c8e2574b559f3d1a89a6f99fe99500a613c93f47163d7cdd006d7ce844b787e053a6469e5db5468f72d00160dd40959b34a7371e2341e2a6bfc35c83b335645a39bbdd7fa7b45b5bab30b88a58a2d393c34a8fd369a477eb437ecdc70523da26be6f5105cb40a4568ae86ce2d6c065345f9866229f02dcb3ab1b5dc884ea2c2a23a08505a0bb702dc28ec1bd2247cbe8059032e6e1bca124c57be6c6b8914e2b6e69347602cc6f63d03a1a6d221245f32a9c5f4dffef1dc80797090c3bf07031d78bee8fbbef77cab9e37ef1f509e9e50360955b08f7128341cdf58607170315b1d00f1b245072a95a92e81634f34541fd2b13c79bfe0a01edef7990dec6fd48c5b3379b6edc7ea89ef29c3ad76df25d65a99aef10113159a9bc53d4154fd684ab498c37e1cc4d16c4a84bf0130cbe02aafb85fc4b1969f843e09390c50295f335beecbdfbad74a229386ab87991d6ce26c87bb0bed44df82a7ea260c1a6f2bd6285239b8fbd1d4e15231cfed534ffe2cbfc95b921a1bb1838882838d029b2876b2feaa54655be39b302b807928b208d4b71bd08192dc33dfe4b750d21b632b1563eaa9d73a9192a5293cff894aadfc137a6c00b78b45895af4241472e7dc792a0aa2b505808bc458557b8a95d654e925afe084851a7796f8a77623ab69a16f315aad02161edf57deae16dfb93948b232568ae07e178ec5b308583fea00c816533564553e1dc4aef7cdab3e81c1d1dc4b30a0b1f814a2b109a34a04ba3f881dd4f01c0a67638984fbde8276b3d7daac91f18ab001d31d3d0587d4fc07d7ba53c8c4ea6688fc1611d07680c210e9cc735de9a72a23b2a6dd6966c1f8e7ed4ba9eb17d14d150fceed79e241d8cf6c24c0586a1cc39d80c9b1dbb920b60b55c145289119af36f68302ee839e9057865c4e62ea34d0ee728fb7dfd0f866b3df6e55a4829f064bc75886e6db6d5cdb0f449f5fce6121342eb945da91f5bd51b6ed19e3188ac8b4c1c0be27e1c24180894b2272a06ccca5334bc6760e2203c94898f7232df03a804c1d53bfe4c34848181831c844891b2dd0211baf9d0a7258ce2c0fa8c59dfb0d451dbbc964af2a611e6ffac0293a34543ffa5528686e6eed98c4ff450a299c70ff914e4f3192596558cdd853de45dc99e88bbd91cb36e2f8241935c992f33cf508fdb2e63409384b3c3bca268a016426799c34f0c81f8eae70be58de91535e17eb9d20cc832a6f6fb713120474b6c24e281569894f2f932dbcd46f84f12d9ae0626225fc607821f6c735fbf4e0e0ee60dd860730f7bc9ae080e59faa41b6049bb5ccb25b567c8fffd13c50b23c4daaf380a6eb3ec10179774a3b1ac7a1f81a1d05f3aaa80c51d30091b519d9ac741ce2c0834436aa754f541ba1c1d5615ac121f116e706918eab2c7b517dbe3f0e71dd5c8ffd387735a553ab433d95b2ee6045bf62d634ec9c83bd06ca3f7a04c6557652ce78bfed7922124d9789f562de3fb4dff442baa3f304454271ea9f258ebeb6f88699f5b5653dc316b80f32f0d06beb69306a6bb8aae02c40e64b9c5473614483ceb0bb3e63e34903529f0f8adf4f71fb1893f29bf6a150804d09898f435b72ba9ca6d41697e4aef7d4e812108f2e35c7bd11380bb5e37b085966510fb12f6dfd9f67add16c8ff9a11b0eb0df5769da76ef568dc1b9dd84bd043379416bd9b7329326192d5f646d4b7b2768937962aac27e20cd80a9c0d59c1a8384d47585aae6b7df63c8c26d38c1d6edbaf35bbb1365d371c7c53accd5b06a04ac0a423943b1b8f6b7fef8427a9ad0f5f05d354a4935e366d8a5d400b4984a92fc06d4128f0f054d683a99ee4aaa10ad5804dd8b274700e65a823ef9bb5d600a2a623f836300a66a50eca7cc4cde4995188f601efad44c467ec90dad55eb488043cc0c0e3c1c84e007662af3be48508f113a4f80b6524f98156a58d4f1a8fe12c839cf337f6c40310c610ae43a258f8203b31bc44b0408dbe8667ffd3d6cd028b667fd1906b1855eec6efebe07844e22f9443ca6386ba0759bb709b7cc356b4188c2437dd376abe01e9d50685e4305d2c4dc9f83b554636fa9438ccf2b806d8fac2f65b79ac02bf76ffd23d78da9fbaf84a26f55e81d0cb43fdbfab9347ebddbce9bd1bc88997d046984602b5dcb400456521eddff0074045d348ef813b6fb93224df838daf0112237ea1f4b5aefb30234e420f12872a9bd49ba1d9a800fc3fa49dc21b05baa8b3790dfd183055d1f356b8533618489f7ad0bef87d447ae4bf7c417014d6b7ac174bda47e51589918de33222c51cdaee2c9cc93f9e7fa7887da93e78fc5e384daff858e8c6b129922f385a679841363bf0ad4ff654026bc101eb79261c2bcd1ae0e914da43313f56c132996c3d882472be107875f1afef", 0x4, 0x0, 0x5}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c0003000000000000000000140001"], 0x114}], 0x1}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = accept(r7, &(0x7f0000000200)=@ax25={{0x3, @default}, [@remote, @rose, @remote, @rose, @bcast, @default, @rose]}, &(0x7f0000000280)=0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe90, 0x2}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x18, 0x2d, 0x0, 0x1, [{0x12, 0x0, @random="30668eaf8f80193382fbad87c90d"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x80}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ff46dab7e938"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1410}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r12) sendmsg$NLBL_CALIPSO_C_ADD(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fddbdf25010000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040054) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES8=r13, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e28, @multicast2=0xe0000001}, 0x10, 0x0}, 0x20002880) 4.38009932s ago: executing program 4 (id=1708): socket(0x40000000015, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) 4.356013414s ago: executing program 3 (id=1709): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x34, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_PROBES={0x8, 0x4, 0x455}, @NDA_SRC_VNI={0x8}]}, 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4.276314058s ago: executing program 1 (id=1710): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x34, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_PROBES={0x8, 0x4, 0x455}, @NDA_SRC_VNI={0x8}]}, 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4.119530878s ago: executing program 2 (id=1711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$inet6(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x4, 0x40000000, 0x0) 4.111384645s ago: executing program 3 (id=1712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000400000000200000060000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e0308000240000000020800014000000001100001800b00010064796e73657400000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/180], 0xb4}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x484280, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x319) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$inet(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x1a, 0x7, 0x1}, 0x2c) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1}, 0x840) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$key(0xf, 0x3, 0x2) 4.074640294s ago: executing program 0 (id=1713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00) 3.976820768s ago: executing program 1 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/251}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r3, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/221, 0xdd, 0x0, &(0x7f0000000a40)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x12, &(0x7f0000000600)=@raw=[@ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x0, 0x6, 0xf, 0x7fff, 0x8}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, &(0x7f00000006c0), 0x41000, 0x4, '\x00', r7, @sk_reuseport=0x27, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x9070, 0x4}, 0x10, r8, r3, 0x3, &(0x7f0000000c00)=[0xffffffffffffffff], &(0x7f0000000c40)=[{0x2, 0x5, 0x10, 0x5}, {0x5, 0x1, 0xe, 0x8}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0x4}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x81, &(0x7f0000000400)=""/129, 0x40f00, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xf, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0x10, 0x8}, {0x4, 0x2, 0x7, 0x7}, {0x0, 0x5, 0x5, 0xa}, {0x5, 0x4, 0x6, 0x8}], 0x10, 0x8}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r11, 0x0, '\x00', 0x0, r10, 0x0, 0x80}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff23}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0xaac, 0x1000, &(0x7f0000001500)=""/4096, 0x40f00, 0x0, '\x00', r1, @lsm=0x2b, r2, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x2, 0x8}, 0x10, r8, r9, 0x8, &(0x7f00000006c0)=[0xffffffffffffffff, r11], &(0x7f0000000700)=[{0x2, 0x1, 0xf, 0x7}, {0x4, 0x5, 0xd, 0x5}, {0x0, 0x4, 0xd, 0x2}, {0x1, 0x1, 0x3, 0x5}, {0x4, 0x2, 0xc, 0x6}, {0x1, 0x1, 0xf, 0xb}, {0x400, 0x3, 0x3, 0x4}, {0x3, 0x3, 0x7, 0x8}]}, 0x94) socket(0x10, 0x803, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.73240434s ago: executing program 0 (id=1715): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.590199835s ago: executing program 1 (id=1716): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xfb}], 0x2, 0x40000102, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000007c0), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/89, 0x59}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f00000006c0)}, {&(0x7f0000000a80)=""/206, 0xce}, {&(0x7f0000000cc0)=""/143, 0x8f}], 0x8}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="7a0a00ff0000170071104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x38, "4d26768012e32aebcfd04983e65be50f7cee2e9a0197afd2fa0eafdcbac24ecfe110c450e683049cf6204ac6116cfd48e8263646672140de"}, &(0x7f0000000080)=0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x18, 0x0, 0x0) 3.534439763s ago: executing program 3 (id=1717): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000206010200"/19], 0x4c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x30, 0x61, 0x61, 0x4f]}}, &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000}, 0x28) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast2}, 0x10) close(0x3) 3.442996313s ago: executing program 4 (id=1718): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.232739102s ago: executing program 3 (id=1719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x29, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001900010000000000000000001d01090150001080"], 0x64}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5ce4bd41549865c6c72e0c106649ba7853c425bd70000000000007", @ANYRES32=r2, @ANYBLOB="00e900000243010024001a8009000100766c616e0000000014000480100004800c000100be2b00"], 0x44}}, 0x0) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) close(0x3) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x1ff, @remote, 0x9}, 0x1c) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280), 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 2.694007024s ago: executing program 1 (id=1720): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) unshare(0x6a040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) r5 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 2.491725961s ago: executing program 0 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 96.660451ms ago: executing program 3 (id=1722): socket(0x2a, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r1, 0x7, 0x0, 0x0, 0x9, 0x56, 0x5, 0x8002, 0xe4c9, 0xed, 0xd, 'syz1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="f2435f01000800850800b79633c22bba902b9c239cb55cf9d4db0016fe773cd90497495ef4820c2bb0c29f849f4711c0d184d2d7c57e6f6e2276521b7acba9552f6bccd0d6a360878d2b9dda47d2e349d72c9bf38e3631f388cb3aad3bac0076cf577cebcf4621456187502654ca33742ed791906011a124a5f8357738f7338b8d363257ccdce48a7bf5521e976436f60adb538e93be723534dd46d6", 0x9c, 0x0, &(0x7f0000000200)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x59}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x1}}, 0x4804) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="00060000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000340008803000008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000300531b0e81"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$rose(r8, &(0x7f00000007c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 24.803227ms ago: executing program 2 (id=1723): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x34, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_PROBES={0x8, 0x4, 0x455}, @NDA_SRC_VNI={0x8}]}, 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 0s ago: executing program 0 (id=1724): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x34, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x4}, @NDA_PROBES={0x8, 0x4, 0x455}, @NDA_SRC_VNI={0x8}]}, 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) kernel console output (not intermixed with test programs): veth0_to_hsr: entered allmulticast mode [ 281.381015][ T9869] hsr_slave_0: entered allmulticast mode [ 281.387266][ T9869] hsr0: entered allmulticast mode [ 281.392745][ T9869] veth1_virt_wifi: entered allmulticast mode [ 281.399211][ T9869] veth0_virt_wifi: entered allmulticast mode [ 281.405703][ T9869] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 281.413656][ T9869] veth1_vlan: entered allmulticast mode [ 281.419641][ T9869] veth0_vlan: entered allmulticast mode [ 281.425794][ T9869] vlan0: entered allmulticast mode [ 281.431421][ T9869] vlan1: entered allmulticast mode [ 281.437108][ T9869] macvlan0: entered allmulticast mode [ 281.443011][ T9869] macvlan1: entered allmulticast mode [ 281.449061][ T9869] ipvlan0: entered allmulticast mode [ 281.467659][ T9869] ipvlan1: entered allmulticast mode [ 281.473536][ T9869] veth1_macvtap: entered allmulticast mode [ 281.479893][ T9869] veth0_macvtap: entered allmulticast mode [ 281.486320][ T9869] macvtap0: entered allmulticast mode [ 281.492771][ T9869] macsec0: entered allmulticast mode [ 281.502308][ T9869] geneve0: entered allmulticast mode [ 281.509305][ T9869] geneve1: entered allmulticast mode [ 281.517055][ T9869] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 281.524455][ T9869] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 281.531817][ T9869] geneve2: entered allmulticast mode [ 281.537387][ T9869] bridge1: entered allmulticast mode [ 281.546873][ T9869] bridge2: entered allmulticast mode [ 281.552588][ T9869] bridge3: entered allmulticast mode [ 281.558431][ T9869] bridge4: entered allmulticast mode [ 281.564535][ T9869] bond1: entered allmulticast mode [ 281.571476][ T9869] bond2: entered allmulticast mode [ 281.577445][ T9869] devlink: entered allmulticast mode [ 281.583482][ T9869] bridge5: entered allmulticast mode [ 281.611957][ T9869] bond3: entered allmulticast mode [ 281.617517][ T9869] bond4: entered allmulticast mode [ 281.634458][ T9869] bridge6: entered allmulticast mode [ 281.640071][ T9869] bond5: entered allmulticast mode [ 281.653965][ T9869] bond6: entered allmulticast mode [ 281.659230][ T9869] syztnl1: entered allmulticast mode [ 281.674379][ T9869] bridge7: entered allmulticast mode [ 281.679845][ T9869] bridge8: entered allmulticast mode [ 281.685717][ T9869] bond7: entered allmulticast mode [ 281.691049][ T9869] bond8: entered allmulticast mode [ 281.716085][ T9869] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 281.723613][ T9869] bridge9: entered allmulticast mode [ 281.729116][ T9869] vlan3: entered allmulticast mode [ 281.734569][ T9869] veth2: entered allmulticast mode [ 281.739944][ T9869] veth3: entered allmulticast mode [ 281.751993][ T9869] bond9: entered allmulticast mode [ 281.763403][ T9869] bond10: entered allmulticast mode [ 281.773637][ T9869] bridge10: entered allmulticast mode [ 281.783135][ T9869] bond11: entered allmulticast mode [ 281.819808][ T9869] bond12: entered allmulticast mode [ 281.828024][ T9869] bond13: entered allmulticast mode [ 281.834470][ T9869] bond14: entered allmulticast mode [ 281.852046][ T9869] bond15: entered allmulticast mode [ 281.857470][ T9869] bridge11: entered allmulticast mode [ 281.863259][ T9869] bridge12: entered allmulticast mode [ 281.869003][ T9869] bond16: entered allmulticast mode [ 281.882028][ T9869] bond17: entered allmulticast mode [ 281.891366][ T9869] bridge13: entered allmulticast mode [ 281.912797][ T9869] bridge14: entered allmulticast mode [ 281.918993][ T9869] bond18: entered allmulticast mode [ 281.924626][ T9869] bond19: entered allmulticast mode [ 281.930004][ T9869] bond20: entered allmulticast mode [ 281.935582][ T9869] bond21: entered allmulticast mode [ 281.941047][ T9869] netdevsim netdevsim2 eth0: entered allmulticast mode [ 281.952118][ T9869] netdevsim netdevsim2 eth1: entered allmulticast mode [ 281.959406][ T9869] netdevsim netdevsim2 eth2: entered allmulticast mode [ 281.966818][ T9869] netdevsim netdevsim2 eth3: entered allmulticast mode [ 281.974476][ T9869] bridge15: entered allmulticast mode [ 281.981148][ T9869] bridge16: entered allmulticast mode [ 281.987942][ T9869] bridge17: entered allmulticast mode [ 281.993697][ T9869] bond22: entered allmulticast mode [ 281.999058][ T9869] bond23: entered allmulticast mode [ 282.004637][ T9869] ip6gretap1: entered allmulticast mode [ 282.010489][ T9869] bridge18: entered allmulticast mode [ 282.016165][ T9869] bridge19: entered allmulticast mode [ 282.021767][ T9869] bridge20: entered allmulticast mode [ 282.027265][ T9869] bridge21: entered allmulticast mode [ 282.033112][ T9869] bridge22: entered allmulticast mode [ 282.038738][ T9869] bridge23: entered allmulticast mode [ 282.044639][ T9869] bridge24: entered allmulticast mode [ 282.050169][ T9869] bond24: entered allmulticast mode [ 282.055775][ T9869] bond25: entered allmulticast mode [ 282.061240][ T9869] bond26: entered allmulticast mode [ 282.066701][ T9869] bond27: entered allmulticast mode [ 282.072259][ T9869] bridge25: entered allmulticast mode [ 282.077765][ T9869] bond28: entered allmulticast mode [ 282.083120][ T9869] bond29: entered allmulticast mode [ 282.088567][ T9869] : entered allmulticast mode [ 282.121915][ T9873] mpoa:mpoad_close: () going down [ 282.144655][ T9878] lo speed is unknown, defaulting to 1000 [ 282.221040][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 282.647223][ T9878] lo speed is unknown, defaulting to 1000 [ 282.648748][ T9885] lo speed is unknown, defaulting to 1000 [ 283.076013][ T9908] tipc: New replicast peer: 255.255.255.255 [ 283.112409][ T9908] tipc: Enabled bearer , priority 10 [ 283.142107][ T9898] lo speed is unknown, defaulting to 1000 [ 283.163531][ T9910] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 283.210082][ T9910] bond30: entered promiscuous mode [ 283.220330][ T9910] 8021q: adding VLAN 0 to HW filter on device bond30 [ 283.300091][ T9912] 8021q: adding VLAN 0 to HW filter on device bond31 [ 283.310879][ T9912] bond30: (slave bond31): making interface the new active one [ 283.318564][ T9912] bond31: entered promiscuous mode [ 283.324956][ T9912] bond30: (slave bond31): Enslaving as an active interface with an up link [ 283.448756][ T9898] lo speed is unknown, defaulting to 1000 [ 283.462407][ T9895] mpoa:mpoad_close: () going down [ 283.471357][ T9885] lo speed is unknown, defaulting to 1000 [ 284.435004][ T9930] pim6reg1: entered allmulticast mode [ 284.455567][ T9934] lo speed is unknown, defaulting to 1000 [ 284.537935][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 284.759417][ T9934] lo speed is unknown, defaulting to 1000 [ 285.021870][ T9948] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 285.042195][ T9952] x_tables: duplicate underflow at hook 1 [ 285.177314][ T9948] bond32: entered promiscuous mode [ 285.206252][ T9948] 8021q: adding VLAN 0 to HW filter on device bond32 [ 285.295017][ T9955] 8021q: adding VLAN 0 to HW filter on device bond33 [ 285.304641][ T9955] bond32: (slave bond33): making interface the new active one [ 285.312341][ T9955] bond33: entered promiscuous mode [ 285.318963][ T9955] bond32: (slave bond33): Enslaving as an active interface with an up link [ 285.630600][ T9959] lo speed is unknown, defaulting to 1000 [ 285.649668][ T9975] netlink: 160 bytes leftover after parsing attributes in process `syz.4.926'. [ 285.690081][ T9975] netlink: 'syz.4.926': attribute type 10 has an invalid length. [ 285.728958][ T9975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.081293][ T9987] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.143666][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 286.338642][ T9985] lo speed is unknown, defaulting to 1000 [ 286.361861][ T9959] lo speed is unknown, defaulting to 1000 [ 286.418487][ T9992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.931'. [ 286.579624][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 286.798982][T10004] xt_hashlimit: size too large, truncated to 1048576 [ 286.856059][ T9982] mpoa:mpoad_close: () going down [ 286.917701][T10007] xt_bpf: check failed: parse error [ 287.013432][T10012] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 287.118694][T10012] bond22: entered promiscuous mode [ 287.129556][T10012] 8021q: adding VLAN 0 to HW filter on device bond22 [ 287.137629][T10014] bridge0: port 2(syz_tun) entered blocking state [ 287.144910][T10014] bridge0: port 2(syz_tun) entered disabled state [ 287.151598][T10014] syz_tun: entered allmulticast mode [ 287.159534][T10014] syz_tun: entered promiscuous mode [ 287.167046][T10014] bridge0: port 2(syz_tun) entered blocking state [ 287.174127][T10014] bridge0: port 2(syz_tun) entered forwarding state [ 287.203930][T10015] 8021q: adding VLAN 0 to HW filter on device bond23 [ 287.213596][T10015] bond22: (slave bond23): making interface the new active one [ 287.221121][T10015] bond23: entered promiscuous mode [ 287.227269][T10015] bond22: (slave bond23): Enslaving as an active interface with an up link [ 287.237825][ T9985] lo speed is unknown, defaulting to 1000 [ 287.523044][T10022] netlink: 'syz.4.937': attribute type 4 has an invalid length. [ 287.540477][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 287.573842][T10027] netlink: 'syz.4.937': attribute type 4 has an invalid length. [ 287.603624][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 287.645561][ T8018] lo speed is unknown, defaulting to 1000 [ 287.651374][ T8018] syz0: Port: 1 Link ACTIVE [ 287.658670][ T8018] lo speed is unknown, defaulting to 1000 [ 287.918680][T10036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.941'. [ 288.110830][T10037] lo speed is unknown, defaulting to 1000 [ 288.204249][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'. [ 288.241867][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'. [ 288.406436][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 288.468183][T10046] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 288.703312][T10062] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 288.775788][T10062] bond17: entered promiscuous mode [ 288.783258][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 288.805586][T10062] 8021q: adding VLAN 0 to HW filter on device bond17 [ 288.824014][T10066] bridge0: port 1(erspan0) entered blocking state [ 288.841075][T10066] bridge0: port 1(erspan0) entered disabled state [ 288.876293][T10066] erspan0: entered promiscuous mode [ 288.937615][T10071] 8021q: adding VLAN 0 to HW filter on device bond18 [ 288.968863][T10071] bond17: (slave bond18): making interface the new active one [ 289.041818][T10071] bond18: entered promiscuous mode [ 289.047726][T10071] bond17: (slave bond18): Enslaving as an active interface with an up link [ 289.076838][T10070] erspan0: left promiscuous mode [ 289.082714][T10070] bridge0: port 1(erspan0) entered disabled state [ 289.171892][T10037] lo speed is unknown, defaulting to 1000 [ 289.324220][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 289.411004][T10085] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 289.421431][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.953'. [ 289.423139][T10087] netlink: 830 bytes leftover after parsing attributes in process `syz.0.951'. [ 289.491269][T10088] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 289.856259][T10088] bond34: entered promiscuous mode [ 289.902088][T10088] 8021q: adding VLAN 0 to HW filter on device bond34 [ 290.194117][T10092] 8021q: adding VLAN 0 to HW filter on device bond35 [ 290.217804][T10092] bond34: (slave bond35): making interface the new active one [ 290.232380][T10092] bond35: entered promiscuous mode [ 290.240983][T10092] bond34: (slave bond35): Enslaving as an active interface with an up link [ 290.336713][T10098] syzkaller0: entered promiscuous mode [ 290.342654][T10098] syzkaller0: entered allmulticast mode [ 290.859797][T10125] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 293.153342][T10125] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 293.154624][T10126] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 293.503229][T10150] __nla_validate_parse: 3 callbacks suppressed [ 293.503252][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 293.582017][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 293.677104][T10157] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 293.690690][T10159] lo speed is unknown, defaulting to 1000 [ 293.752279][T10157] bond36: entered promiscuous mode [ 293.766749][T10157] 8021q: adding VLAN 0 to HW filter on device bond36 [ 293.784450][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 293.885850][T10163] 8021q: adding VLAN 0 to HW filter on device bond37 [ 293.895601][T10163] bond36: (slave bond37): making interface the new active one [ 293.914414][T10163] bond37: entered promiscuous mode [ 293.925482][T10163] bond36: (slave bond37): Enslaving as an active interface with an up link [ 294.108042][T10159] lo speed is unknown, defaulting to 1000 [ 294.196469][T10154] mpoa:mpoad_close: () going down [ 294.341533][T10176] GUP no longer grows the stack in syz.1.972 (10176): 200000006000-20000000a000 (200000005000) [ 294.353103][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.1.972 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 294.353142][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.353160][T10176] Call Trace: [ 294.353172][T10176] [ 294.353182][T10176] dump_stack_lvl+0x189/0x250 [ 294.353231][T10176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.353257][T10176] ? __pfx__printk+0x10/0x10 [ 294.353273][T10176] ? find_vma+0xe7/0x160 [ 294.353304][T10176] __get_user_pages+0x2a60/0x30b0 [ 294.353366][T10176] ? __pfx___get_user_pages+0x10/0x10 [ 294.353389][T10176] ? __gup_longterm_locked+0xbf7/0x15b0 [ 294.353412][T10176] ? down_read_killable+0x1d1/0x350 [ 294.353432][T10176] ? try_get_folio+0x633/0x660 [ 294.353451][T10176] __gup_longterm_locked+0xd66/0x15b0 [ 294.353481][T10176] ? try_grab_folio_fast+0x1be/0x4f0 [ 294.353508][T10176] ? gup_fast_fallback+0x1afc/0x2260 [ 294.353536][T10176] gup_fast_fallback+0x1cd4/0x2260 [ 294.353593][T10176] ? __pfx_gup_fast_fallback+0x10/0x10 [ 294.353614][T10176] ? trace_contention_end+0x39/0x120 [ 294.353634][T10176] ? __mutex_lock+0x330/0xe80 [ 294.353651][T10176] ? futex_unqueue+0x22/0x240 [ 294.353669][T10176] ? futex_unqueue+0x22/0x240 [ 294.353683][T10176] ? futex_unqueue+0x22/0x240 [ 294.353699][T10176] ? is_valid_gup_args+0x11f/0x200 [ 294.353724][T10176] ? get_user_pages_fast+0x4d/0xb0 [ 294.353752][T10176] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 294.353778][T10176] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 294.353799][T10176] ? wait_for_space+0x24d/0x2d0 [ 294.353820][T10176] iov_iter_get_pages2+0x5e/0xa0 [ 294.353841][T10176] __se_sys_vmsplice+0x548/0x10d0 [ 294.353884][T10176] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 294.353903][T10176] ? __pfx_futex_wait+0x10/0x10 [ 294.353939][T10176] ? __lock_acquire+0xab9/0xd20 [ 294.354005][T10176] ? rcu_is_watching+0x15/0xb0 [ 294.354034][T10176] ? do_syscall_64+0xbe/0x3b0 [ 294.354062][T10176] do_syscall_64+0xfa/0x3b0 [ 294.354079][T10176] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.354097][T10176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.354123][T10176] ? clear_bhb_loop+0x60/0xb0 [ 294.354147][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.354165][T10176] RIP: 0033:0x7ff59438e929 [ 294.354196][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.354213][T10176] RSP: 002b:00007ff595285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 294.354240][T10176] RAX: ffffffffffffffda RBX: 00007ff5945b5fa0 RCX: 00007ff59438e929 [ 294.354255][T10176] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 294.354267][T10176] RBP: 00007ff594410b39 R08: 0000000000000000 R09: 0000000000000000 [ 294.354278][T10176] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 294.354290][T10176] R13: 0000000000000000 R14: 00007ff5945b5fa0 R15: 00007ffdc0f12368 [ 294.354321][T10176] [ 294.810015][T10179] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 294.842073][T10183] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 295.005740][T10183] bond19: entered promiscuous mode [ 295.022636][T10183] 8021q: adding VLAN 0 to HW filter on device bond19 [ 295.222291][T10187] 8021q: adding VLAN 0 to HW filter on device bond20 [ 295.273157][T10187] bond19: (slave bond20): making interface the new active one [ 295.280816][T10187] bond20: entered promiscuous mode [ 295.287836][T10187] bond19: (slave bond20): Enslaving as an active interface with an up link [ 295.428375][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 295.487539][T10197] syzkaller0: entered promiscuous mode [ 295.495635][T10197] syzkaller0: entered allmulticast mode [ 296.463836][T10229] xt_hashlimit: size too large, truncated to 1048576 [ 297.873449][ T5857] Bluetooth: hci4: link tx timeout [ 297.878697][ T5857] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 298.820233][T10202] !: renamed from dummy0 (while UP) [ 298.859882][T10214] lo speed is unknown, defaulting to 1000 [ 298.986995][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 299.116711][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 299.141174][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 299.196118][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 299.239659][T10267] netlink: 'syz.4.984': attribute type 21 has an invalid length. [ 299.249087][T10267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.984'. [ 299.264165][T10267] netlink: 'syz.4.984': attribute type 13 has an invalid length. [ 299.273068][T10267] netlink: 'syz.4.984': attribute type 17 has an invalid length. [ 299.423789][ T51] Bluetooth: hci4: link tx timeout [ 299.428962][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.445201][T10263] lo speed is unknown, defaulting to 1000 [ 299.453494][T10214] lo speed is unknown, defaulting to 1000 [ 299.501921][ T51] Bluetooth: hci4: link tx timeout [ 299.507159][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.562245][ T51] Bluetooth: hci4: link tx timeout [ 299.567675][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 299.753174][T10271] lo speed is unknown, defaulting to 1000 [ 299.787501][T10258] mpoa:mpoad_close: () going down [ 299.896070][T10263] lo speed is unknown, defaulting to 1000 [ 299.972459][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 299.995252][T10271] lo speed is unknown, defaulting to 1000 [ 300.417087][T10282] lo speed is unknown, defaulting to 1000 [ 300.954204][T10282] lo speed is unknown, defaulting to 1000 [ 300.995392][T10284] siw: device registration error -23 [ 301.367733][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 301.944290][T10321] bond24: (slave bond25): Releasing backup interface [ 302.066167][T10321] bond26: (slave bond27): Releasing backup interface [ 302.142452][T10321] bond28: (slave bond29): Releasing backup interface [ 302.194702][T10321] bond30: (slave bond31): Releasing backup interface [ 302.265993][T10321] bond31: left promiscuous mode [ 302.365582][T10321] bond32: (slave bond33): Releasing backup interface [ 302.401873][T10321] bond33: left promiscuous mode [ 302.463080][T10321] bond34: (slave bond35): Releasing backup interface [ 302.483655][T10321] bond35: left promiscuous mode [ 302.521970][T10321] bond36: (slave bond37): Releasing backup interface [ 302.543806][T10321] bond37: left promiscuous mode [ 302.819731][T10352] syzkaller0: entered promiscuous mode [ 302.826177][T10352] syzkaller0: entered allmulticast mode [ 302.954076][T10367] bond0: entered promiscuous mode [ 302.979975][T10367] batadv_slave_0: entered promiscuous mode [ 303.004951][T10367] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 303.046804][T10367] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.058558][T10367] hsr1: entered promiscuous mode [ 303.107993][T10381] veth0: entered promiscuous mode [ 303.121985][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 303.548459][T10381] veth0 (unregistering): left promiscuous mode [ 303.560648][T10400] IPVS: set_ctl: invalid protocol: 33 172.20.20.10:20004 [ 306.970157][T10394] !: renamed from dummy0 [ 306.999699][T10396] bridge9: entered promiscuous mode [ 307.031875][T10396] bridge9: entered allmulticast mode [ 307.064701][T10431] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 307.369234][T10458] netlink: 'syz.2.1006': attribute type 10 has an invalid length. [ 307.383198][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1006'. [ 307.396927][T10451] syzkaller0: entered promiscuous mode [ 307.431783][T10451] syzkaller0: entered allmulticast mode [ 307.446203][T10439] lo speed is unknown, defaulting to 1000 [ 307.455029][T10458] dummy0: left allmulticast mode [ 307.563540][T10458] bridge0: port 1(dummy0) entered blocking state [ 307.570066][T10458] bridge0: port 1(dummy0) entered disabled state [ 307.615819][T10458] dummy0: entered allmulticast mode [ 307.688605][T10458] dummy0: entered promiscuous mode [ 307.722886][T10464] lo: entered allmulticast mode [ 307.728243][T10464] tunl0: entered allmulticast mode [ 307.742014][T10464] gre0: entered allmulticast mode [ 307.747915][T10464] gretap0: entered allmulticast mode [ 307.758020][T10464] erspan0: entered allmulticast mode [ 307.787396][T10464] ip_vti0: entered allmulticast mode [ 307.805198][T10464] ip6_vti0: entered allmulticast mode [ 307.828327][T10464] sit0: entered allmulticast mode [ 307.850985][T10464] ip6tnl0: entered allmulticast mode [ 307.861174][T10464] ip6gre0: entered allmulticast mode [ 307.875308][T10464] syz_tun: entered allmulticast mode [ 307.910452][T10464] ip6gretap0: entered allmulticast mode [ 307.921995][T10464] bridge0: entered allmulticast mode [ 307.932217][T10464] vcan0: entered allmulticast mode [ 307.937552][T10464] bond0: entered allmulticast mode [ 307.981955][T10464] team0: entered allmulticast mode [ 307.987234][T10464] vlan0: entered allmulticast mode [ 308.031745][T10464] veth0_vlan: entered allmulticast mode [ 308.038179][T10464] !: entered allmulticast mode [ 308.070330][T10464] nlmon0: entered allmulticast mode [ 308.083393][T10464] caif0: entered allmulticast mode [ 308.089672][T10464] vxcan0: entered allmulticast mode [ 308.099186][T10464] vxcan1: entered allmulticast mode [ 308.109333][T10464] veth0: entered allmulticast mode [ 308.119490][T10464] veth1: entered allmulticast mode [ 308.129637][T10464] wg0: entered allmulticast mode [ 308.145130][T10464] wg1: entered allmulticast mode [ 308.161381][T10464] wg2: entered allmulticast mode [ 308.175098][T10464] veth0_to_bridge: entered allmulticast mode [ 308.192040][T10464] bridge_slave_0: entered allmulticast mode [ 308.198294][T10464] veth1_to_bridge: entered allmulticast mode [ 308.210251][T10464] bridge_slave_1: entered allmulticast mode [ 308.223284][T10464] veth0_to_bond: entered allmulticast mode [ 308.232864][T10464] bond_slave_0: entered allmulticast mode [ 308.242430][T10464] veth1_to_bond: entered allmulticast mode [ 308.254413][T10464] bond_slave_1: entered allmulticast mode [ 308.269021][T10464] veth0_to_team: entered allmulticast mode [ 308.287457][T10464] team_slave_0: entered allmulticast mode [ 308.305334][T10464] veth1_to_team: entered allmulticast mode [ 308.330306][T10464] team_slave_1: entered allmulticast mode [ 308.358757][T10464] veth0_to_batadv: entered allmulticast mode [ 308.380751][T10464] batadv_slave_0: entered allmulticast mode [ 308.388831][T10464] veth1_to_batadv: entered allmulticast mode [ 308.396078][T10464] batadv_slave_1: entered allmulticast mode [ 308.403644][T10464] xfrm0: entered allmulticast mode [ 308.409285][T10464] veth0_to_hsr: entered allmulticast mode [ 308.415834][T10464] hsr_slave_0: entered allmulticast mode [ 308.422315][T10464] veth1_to_hsr: entered allmulticast mode [ 308.428475][T10464] hsr_slave_1: entered allmulticast mode [ 308.435032][T10464] hsr0: entered allmulticast mode [ 308.440435][T10464] veth1_virt_wifi: entered allmulticast mode [ 308.447401][T10464] veth0_virt_wifi: entered allmulticast mode [ 308.454072][T10464] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 308.462246][T10464] veth1_vlan: entered allmulticast mode [ 308.468399][T10464] vlan1: entered allmulticast mode [ 308.474463][T10464] macvlan0: entered allmulticast mode [ 308.480294][T10464] macvlan1: entered allmulticast mode [ 308.506561][T10464] ipvlan0: entered allmulticast mode [ 308.522031][T10464] ipvlan1: entered allmulticast mode [ 308.533465][T10464] veth1_macvtap: entered allmulticast mode [ 308.542480][T10464] veth0_macvtap: entered allmulticast mode [ 308.548748][T10464] macvtap0: entered allmulticast mode [ 308.555549][T10464] macsec0: entered allmulticast mode [ 308.561183][T10464] geneve0: entered allmulticast mode [ 308.568406][T10464] geneve1: entered allmulticast mode [ 308.574379][T10464] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 308.582732][T10464] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 308.590238][T10464] syztnl0: entered allmulticast mode [ 308.596496][T10464] bond1: entered allmulticast mode [ 308.602184][T10464] bond2: entered allmulticast mode [ 308.607995][T10464] bond3: entered allmulticast mode [ 308.614131][T10464] bond4: entered allmulticast mode [ 308.619847][T10464] bond5: entered allmulticast mode [ 308.626492][T10464] bond6: entered allmulticast mode [ 308.632472][T10464] geneve2: entered allmulticast mode [ 308.638355][T10464] bridge1: entered allmulticast mode [ 308.644650][T10464] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 308.652412][T10464] bridge2: entered allmulticast mode [ 308.658318][T10464] bond7: entered allmulticast mode [ 308.664187][T10464] netdevsim netdevsim3 eth0: entered allmulticast mode [ 308.671589][T10464] netdevsim netdevsim3 eth1: entered allmulticast mode [ 308.679296][T10464] netdevsim netdevsim3 eth2: entered allmulticast mode [ 308.687153][T10464] netdevsim netdevsim3 eth3: entered allmulticast mode [ 308.694813][T10464] bond8: entered allmulticast mode [ 308.700250][T10464] bond9: entered allmulticast mode [ 308.706483][T10464] bridge3: entered allmulticast mode [ 308.712527][T10464] bond10: entered allmulticast mode [ 308.717924][T10464] bond11: entered allmulticast mode [ 308.724325][T10464] bridge4: entered allmulticast mode [ 308.729989][T10464] bridge5: entered allmulticast mode [ 308.737757][T10464] bridge6: entered allmulticast mode [ 308.748285][T10464] bridge7: entered allmulticast mode [ 308.758512][T10464] bridge8: entered allmulticast mode [ 308.770477][T10464] bridge9: entered allmulticast mode [ 308.789420][T10464] bond12: left promiscuous mode [ 308.795002][T10464] bond13: left promiscuous mode [ 308.800408][T10464] bond12: entered allmulticast mode [ 308.806622][T10464] bond13: entered allmulticast mode [ 308.820296][T10464] bridge10: entered allmulticast mode [ 308.831386][T10464] bridge11: entered allmulticast mode [ 308.847330][T10464] bond14: left promiscuous mode [ 308.853180][T10464] bond15: left promiscuous mode [ 308.864224][T10464] bond14: entered allmulticast mode [ 308.869492][T10464] bond15: entered allmulticast mode [ 308.879309][T10464] ip6tnl1: entered allmulticast mode [ 308.886098][T10464] bond16: left promiscuous mode [ 308.891181][T10464] bond16: entered allmulticast mode [ 308.907245][T10464] bond17: left promiscuous mode [ 308.912834][T10464] bond18: left promiscuous mode [ 308.917970][T10464] bond17: entered allmulticast mode [ 308.923400][T10464] bond18: entered allmulticast mode [ 308.934680][T10464] bridge12: entered allmulticast mode [ 308.953857][T10464] bond19: left promiscuous mode [ 308.959426][T10464] bond20: left promiscuous mode [ 308.965367][T10464] bond19: entered allmulticast mode [ 308.971508][T10464] bond20: entered allmulticast mode [ 308.993217][T10464] bridge13: entered allmulticast mode [ 309.318768][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 311.742513][T10474] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 311.754192][T10439] lo speed is unknown, defaulting to 1000 [ 311.814308][T10458] lo speed is unknown, defaulting to 1000 [ 311.897777][T10503] mpoa:mpoad_close: () going down [ 312.016869][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'. [ 312.219633][T10535] lo speed is unknown, defaulting to 1000 [ 312.476390][T10535] lo speed is unknown, defaulting to 1000 [ 312.482480][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 312.542568][T10458] lo speed is unknown, defaulting to 1000 [ 312.565643][T10551] lo speed is unknown, defaulting to 1000 [ 312.802330][T10531] mpoa:mpoad_close: () going down [ 313.071268][T10551] lo speed is unknown, defaulting to 1000 [ 313.164962][T10548] lo speed is unknown, defaulting to 1000 [ 313.800868][T10562] netlink: 'syz.0.1018': attribute type 303 has an invalid length. [ 313.851302][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 313.956746][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1019'. [ 313.974020][T10548] lo speed is unknown, defaulting to 1000 [ 314.049102][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1020'. [ 314.239366][T10580] syzkaller0: entered promiscuous mode [ 314.258784][T10580] syzkaller0: entered allmulticast mode [ 314.304204][T10578] lo speed is unknown, defaulting to 1000 [ 314.903259][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 315.350270][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 317.117572][T10578] lo speed is unknown, defaulting to 1000 [ 317.310639][T10600] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 317.321276][T10600] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 317.332143][T10600] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 317.384691][T10593] lo speed is unknown, defaulting to 1000 [ 317.500186][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 317.616216][T10615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.695513][T10613] lo speed is unknown, defaulting to 1000 [ 317.696138][T10593] lo speed is unknown, defaulting to 1000 [ 317.709451][T10616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.778602][T10615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.817420][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.161738][T10627] xt_hashlimit: size too large, truncated to 1048576 [ 318.194705][T10623] xfrm1: entered promiscuous mode [ 318.251783][T10623] xfrm1: entered allmulticast mode [ 318.410589][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 318.689811][T10613] lo speed is unknown, defaulting to 1000 [ 319.066238][T10653] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 319.074947][T10653] netlink: 'syz.1.1036': attribute type 2 has an invalid length. [ 319.639573][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 319.669872][T10664] lo speed is unknown, defaulting to 1000 [ 319.734627][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 320.197199][T10664] lo speed is unknown, defaulting to 1000 [ 320.209376][T10680] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 320.245472][T10681] lo: left allmulticast mode [ 320.250328][T10681] tunl0: left allmulticast mode [ 320.258599][T10681] gre0: left allmulticast mode [ 320.265527][T10681] gretap0: left allmulticast mode [ 320.272048][T10681] erspan0: left allmulticast mode [ 320.277689][T10681] ip_vti0: left allmulticast mode [ 320.284714][T10681] ip6_vti0: left allmulticast mode [ 320.290755][T10681] sit0: left allmulticast mode [ 320.297877][T10681] ip6tnl0: left allmulticast mode [ 320.332088][T10681] ip6gre0: left allmulticast mode [ 320.337744][T10681] syz_tun: left allmulticast mode [ 320.345597][T10681] ip6gretap0: left allmulticast mode [ 320.351451][T10681] bridge0: left allmulticast mode [ 320.369708][T10681] vcan0: left allmulticast mode [ 320.392559][T10681] bond0: left allmulticast mode [ 320.424365][T10681] nlmon0: left allmulticast mode [ 320.444086][T10681] caif0: left allmulticast mode [ 320.452889][T10681] vxcan0: left allmulticast mode [ 320.461952][T10681] vxcan1: left allmulticast mode [ 320.472286][T10681] wg0: left allmulticast mode [ 320.479869][T10681] wg1: left allmulticast mode [ 320.492511][T10681] wg2: left allmulticast mode [ 320.497823][T10681] veth0_to_bridge: left allmulticast mode [ 320.504952][T10681] bridge_slave_0: left allmulticast mode [ 320.511283][T10681] veth1_to_bridge: left allmulticast mode [ 320.517929][T10681] bridge_slave_1: left allmulticast mode [ 320.524336][T10681] veth0_to_bond: left allmulticast mode [ 320.531558][T10681] bond_slave_0: left allmulticast mode [ 320.542067][T10681] veth1_to_bond: left allmulticast mode [ 320.548423][T10681] bond_slave_1: left allmulticast mode [ 320.555642][T10681] veth0_to_team: left allmulticast mode [ 320.563092][T10681] team_slave_0: left allmulticast mode [ 320.570109][T10681] veth1_to_team: left allmulticast mode [ 320.576511][T10681] team_slave_1: left allmulticast mode [ 320.583645][T10681] veth0_to_batadv: left allmulticast mode [ 320.590177][T10681] batadv_slave_0: left allmulticast mode [ 320.596800][T10681] veth1_to_batadv: left allmulticast mode [ 320.603774][T10681] batadv_slave_1: left allmulticast mode [ 320.612770][T10681] xfrm0: left allmulticast mode [ 320.618870][T10681] hsr0: left allmulticast mode [ 320.624033][T10681] hsr_slave_0: left allmulticast mode [ 320.630182][T10681] veth1_virt_wifi: left allmulticast mode [ 320.637070][T10681] veth0_virt_wifi: left allmulticast mode [ 320.645079][T10681] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 320.653171][T10681] veth1_vlan: left allmulticast mode [ 320.660063][T10681] vlan0: left allmulticast mode [ 320.672560][T10681] vlan1: left allmulticast mode [ 320.678134][T10681] macvlan0: left allmulticast mode [ 320.683953][T10681] macvlan1: left allmulticast mode [ 320.689671][T10681] ipvlan0: left allmulticast mode [ 320.696320][T10681] ipvlan1: left allmulticast mode [ 320.701546][T10681] veth0_vlan: left allmulticast mode [ 320.708017][T10681] veth1_macvtap: left allmulticast mode [ 320.714443][T10681] veth0_macvtap: left allmulticast mode [ 320.720534][T10681] macvtap0: left allmulticast mode [ 320.734007][T10681] macsec0: left allmulticast mode [ 320.740437][T10681] geneve0: left allmulticast mode [ 320.749228][T10681] geneve1: left allmulticast mode [ 320.756349][T10681] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 320.765087][T10681] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 320.785392][T10681] geneve2: left allmulticast mode [ 320.797372][T10681] bridge1: left allmulticast mode [ 320.823556][T10681] bridge2: left allmulticast mode [ 320.840212][T10681] bridge3: left allmulticast mode [ 320.846194][T10681] bridge4: left allmulticast mode [ 320.853898][T10681] bond1: left allmulticast mode [ 320.884976][T10681] bond2: left allmulticast mode [ 320.890602][T10681] devlink: left allmulticast mode [ 320.896535][T10681] bridge5: left allmulticast mode [ 320.902646][T10681] bond3: left allmulticast mode [ 320.908098][T10681] bond4: left allmulticast mode [ 320.914151][T10681] bridge6: left allmulticast mode [ 320.919677][T10681] bond5: left allmulticast mode [ 320.925414][T10681] bond6: left allmulticast mode [ 320.930719][T10681] syztnl1: left allmulticast mode [ 320.936379][T10681] bridge7: left allmulticast mode [ 320.941892][T10681] bridge8: left allmulticast mode [ 320.947300][T10681] bond7: left allmulticast mode [ 320.953063][T10681] bond8: left allmulticast mode [ 320.958434][T10681] mac80211_hwsim hwsim15 wlan2: left allmulticast mode [ 320.965915][T10681] bridge9: left allmulticast mode [ 320.971739][T10681] vlan3: left allmulticast mode [ 320.976634][T10681] veth0_to_hsr: left allmulticast mode [ 320.982442][T10681] veth2: left allmulticast mode [ 320.987552][T10681] veth3: left allmulticast mode [ 320.992926][T10681] bond9: left allmulticast mode [ 320.998096][T10681] bond10: left allmulticast mode [ 321.003538][T10681] bridge10: left allmulticast mode [ 321.008905][T10681] bond11: left allmulticast mode [ 321.018549][T10681] bond12: left allmulticast mode [ 321.024224][T10681] bond13: left allmulticast mode [ 321.029356][T10681] bond14: left allmulticast mode [ 321.035135][T10681] bond15: left allmulticast mode [ 321.040375][T10681] bridge11: left allmulticast mode [ 321.045840][T10681] bridge12: left allmulticast mode [ 321.051157][T10681] bond16: left allmulticast mode [ 321.056457][T10681] bond17: left allmulticast mode [ 321.061737][T10681] bridge13: left allmulticast mode [ 321.067132][T10681] bridge14: left allmulticast mode [ 321.072502][T10681] bond18: left allmulticast mode [ 321.077925][T10681] bond19: left allmulticast mode [ 321.083308][T10681] bond20: left allmulticast mode [ 321.088687][T10681] bond21: left allmulticast mode [ 321.094119][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 321.094327][T10681] netdevsim netdevsim2 eth0: left allmulticast mode [ 321.107431][T10681] netdevsim netdevsim2 eth1: left allmulticast mode [ 321.114596][T10681] netdevsim netdevsim2 eth2: left allmulticast mode [ 321.121876][T10681] netdevsim netdevsim2 eth3: left allmulticast mode [ 321.128677][T10681] bridge15: left allmulticast mode [ 321.135225][T10681] bridge16: left allmulticast mode [ 321.140515][T10681] bridge17: left allmulticast mode [ 321.146813][T10681] bond22: left allmulticast mode [ 321.152186][T10681] bond23: left allmulticast mode [ 321.157366][T10681] ip6gretap1: left allmulticast mode [ 321.163454][T10681] bridge18: left allmulticast mode [ 321.168827][T10681] bridge19: left allmulticast mode [ 321.174240][T10681] bridge20: left allmulticast mode [ 321.179656][T10681] bridge21: left allmulticast mode [ 321.185143][T10681] bridge22: left allmulticast mode [ 321.190597][T10681] bridge23: left allmulticast mode [ 321.196061][T10681] bridge24: left allmulticast mode [ 321.202020][T10681] bond24: left allmulticast mode [ 321.207319][T10681] bond25: left allmulticast mode [ 321.212884][T10681] bond26: left allmulticast mode [ 321.218175][T10681] bond27: left allmulticast mode [ 321.233460][T10681] bridge25: left allmulticast mode [ 321.239341][T10681] bond28: left allmulticast mode [ 321.245208][T10681] bond29: left allmulticast mode [ 321.250350][T10681] : left allmulticast mode [ 321.257103][T10681] bond30: left promiscuous mode [ 321.271352][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 321.281249][T10681] bond32: left promiscuous mode [ 321.297450][T10681] bond34: left promiscuous mode [ 321.312204][T10681] bond36: left promiscuous mode [ 321.357067][T10659] mpoa:mpoad_close: () going down [ 321.602603][T10708] lo speed is unknown, defaulting to 1000 [ 321.728367][T10718] x_tables: duplicate underflow at hook 1 [ 321.771943][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 321.787149][T10714] netlink: 'syz.0.1053': attribute type 21 has an invalid length. [ 321.811862][T10714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1053'. [ 321.843607][T10714] netlink: 'syz.0.1053': attribute type 13 has an invalid length. [ 321.854288][T10714] netlink: 'syz.0.1053': attribute type 17 has an invalid length. [ 322.000198][T10717] lo speed is unknown, defaulting to 1000 [ 322.006116][T10708] lo speed is unknown, defaulting to 1000 [ 322.649304][T10719] lo speed is unknown, defaulting to 1000 [ 322.763976][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 322.866689][T10736] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1058'. [ 322.876421][T10736] openvswitch: netlink: Flow actions attr not present in new flow. [ 322.974372][T10719] lo speed is unknown, defaulting to 1000 [ 323.021363][T10717] lo speed is unknown, defaulting to 1000 [ 323.213838][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 323.344417][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'. [ 323.380648][T10745] Bluetooth: MGMT ver 1.23 [ 323.415831][T10748] xt_cgroup: path and classid specified [ 323.438655][T10748] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 323.527033][T10748] netlink: zone id is out of range [ 323.541608][T10748] netlink: zone id is out of range [ 323.547118][T10748] netlink: zone id is out of range [ 323.571959][T10748] netlink: zone id is out of range [ 323.577139][T10748] netlink: zone id is out of range [ 323.613357][T10748] netlink: zone id is out of range [ 323.622870][T10748] netlink: zone id is out of range [ 323.628031][T10748] netlink: zone id is out of range [ 323.713324][T10757] netlink: 'syz.2.1062': attribute type 4 has an invalid length. [ 323.731985][T10757] netlink: 'syz.2.1062': attribute type 2 has an invalid length. [ 323.787288][T10754] geneve3: entered promiscuous mode [ 323.799881][T10754] geneve3: entered allmulticast mode [ 323.827296][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 44576 - 0 [ 323.836819][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 41810 - 0 [ 323.847556][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 44576 - 0 [ 323.861523][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 41810 - 0 [ 323.870942][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 44576 - 0 [ 323.880615][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 41810 - 0 [ 323.890985][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 44576 - 0 [ 323.906147][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 41810 - 0 [ 324.741205][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 324.866685][T10803] netlink: 'syz.3.1072': attribute type 10 has an invalid length. [ 324.894323][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1072'. [ 324.922038][T10803] !: left allmulticast mode [ 325.107905][T10810] lo speed is unknown, defaulting to 1000 [ 325.446880][T10814] wireguard0: entered promiscuous mode [ 325.461868][T10814] wireguard0: entered allmulticast mode [ 325.700598][T10810] lo speed is unknown, defaulting to 1000 [ 325.860892][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 325.963215][T10825] x_tables: duplicate underflow at hook 1 [ 326.409517][T10829] lo speed is unknown, defaulting to 1000 [ 327.333632][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 327.373297][T10848] netlink: 'syz.3.1083': attribute type 21 has an invalid length. [ 327.412088][T10848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1083'. [ 327.440083][T10860] netlink: 'syz.3.1083': attribute type 13 has an invalid length. [ 327.468802][T10829] lo speed is unknown, defaulting to 1000 [ 327.482047][T10860] netlink: 'syz.3.1083': attribute type 17 has an invalid length. [ 327.597370][T10855] lo speed is unknown, defaulting to 1000 [ 327.626033][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 328.145021][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 328.286581][T10855] lo speed is unknown, defaulting to 1000 [ 328.304720][T10875] lo speed is unknown, defaulting to 1000 [ 328.573320][T10875] lo speed is unknown, defaulting to 1000 [ 328.665275][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 328.675367][T10886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1090'. [ 328.685657][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 328.698457][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 328.774524][T10872] mpoa:mpoad_close: () going down [ 329.087395][T10885] lo speed is unknown, defaulting to 1000 [ 329.445638][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 329.526026][T10895] netlink: 'syz.3.1092': attribute type 39 has an invalid length. [ 329.634433][T10885] lo speed is unknown, defaulting to 1000 [ 329.853903][T10897] bridge0: port 2(syz_tun) entered disabled state [ 329.875555][T10897] syz_tun: left allmulticast mode [ 329.880775][T10897] syz_tun: left promiscuous mode [ 329.886822][T10897] bridge0: port 2(syz_tun) entered disabled state [ 330.022669][T10897] bond15: (slave bond16): Releasing backup interface [ 330.035596][T10897] bond17: (slave gretap1): Releasing active interface [ 330.044782][T10897] bond18: (slave bond19): Releasing backup interface [ 330.054602][T10897] bond20: (slave bond21): Releasing backup interface [ 330.064167][T10897] bond22: (slave bond23): Releasing backup interface [ 330.074264][T10897] bond24: left allmulticast mode [ 330.079344][T10897] bond24: left promiscuous mode [ 330.085066][T10897] bridge0: port 1(bond24) entered disabled state [ 330.101385][T10897] bond25: left promiscuous mode [ 330.106637][T10897] bond26: left promiscuous mode [ 330.127440][T10897] bond25: (slave bond26): Releasing backup interface [ 330.150746][T10897] hsr1: left promiscuous mode [ 330.160464][T10897] bridge9: left promiscuous mode [ 330.165622][T10897] bridge9: left allmulticast mode [ 330.192820][T10897] geneve3: left promiscuous mode [ 330.198187][T10897] geneve3: left allmulticast mode [ 330.253335][ T1150] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 44576 - 0 [ 330.272708][ T1150] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 41810 - 0 [ 330.282239][ T1150] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 44576 - 0 [ 330.292394][ T1150] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 41810 - 0 [ 330.325907][ T1150] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 44576 - 0 [ 330.336191][ T1150] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 41810 - 0 [ 330.346755][ T1150] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 44576 - 0 [ 330.373426][ T1150] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 41810 - 0 [ 330.937427][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 330.942062][T10915] lo speed is unknown, defaulting to 1000 [ 331.597348][T10915] lo speed is unknown, defaulting to 1000 [ 331.881604][T10916] xt_CT: No such helper "snmp" [ 332.221165][T10947] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 332.229409][T10947] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 332.370406][T10950] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 332.410061][T10950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1107'. [ 332.427685][T10950] bridge0: port 3(dummy0) entered blocking state [ 332.447375][T10950] bridge0: port 3(dummy0) entered disabled state [ 332.454962][T10950] dummy0: entered allmulticast mode [ 332.466860][T10950] dummy0: entered promiscuous mode [ 332.665672][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 332.828957][T10950] lo speed is unknown, defaulting to 1000 [ 332.902300][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 333.008603][T10972] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 333.345273][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1116'. [ 333.363149][T10959] lo speed is unknown, defaulting to 1000 [ 333.375961][T10950] lo speed is unknown, defaulting to 1000 [ 333.382288][T10976] IPVS: Unknown mcast interface: batadv0 [ 333.577327][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1118'. [ 333.599579][T10980] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 333.671241][T10980] bond21: entered promiscuous mode [ 333.692330][T10980] 8021q: adding VLAN 0 to HW filter on device bond21 [ 333.746465][T10983] 8021q: adding VLAN 0 to HW filter on device bond22 [ 333.756097][T10983] bond21: (slave bond22): making interface the new active one [ 333.763993][T10983] bond22: entered promiscuous mode [ 333.770115][T10983] bond21: (slave bond22): Enslaving as an active interface with an up link [ 333.856819][T10967] lo speed is unknown, defaulting to 1000 [ 333.856829][T10959] lo speed is unknown, defaulting to 1000 [ 334.118542][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 334.228902][T10967] lo speed is unknown, defaulting to 1000 [ 334.236998][T10996] siw: device registration error -23 [ 334.889236][T11005] lo speed is unknown, defaulting to 1000 [ 335.491293][T11005] lo speed is unknown, defaulting to 1000 [ 335.910193][T11022] xt_cgroup: path and classid specified [ 335.954626][T11022] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 336.040481][T11022] net_ratelimit: 16 callbacks suppressed [ 336.040507][T11022] netlink: zone id is out of range [ 336.056066][T11022] netlink: zone id is out of range [ 336.061552][T11022] netlink: zone id is out of range [ 336.092045][T11022] netlink: zone id is out of range [ 336.102521][T11022] netlink: zone id is out of range [ 336.127929][T11022] netlink: zone id is out of range [ 336.138299][T11022] netlink: zone id is out of range [ 336.146950][T11022] netlink: zone id is out of range [ 336.159202][T11033] netlink: 'syz.0.1134': attribute type 4 has an invalid length. [ 336.187621][T11033] netlink: 'syz.0.1134': attribute type 2 has an invalid length. [ 336.193260][T11022] netlink: zone id is out of range [ 336.203438][T11022] netlink: zone id is out of range [ 336.283540][T11030] lo speed is unknown, defaulting to 1000 [ 336.419880][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 336.612690][T11046] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 336.656248][T11046] bond27: entered promiscuous mode [ 336.662985][T11046] 8021q: adding VLAN 0 to HW filter on device bond27 [ 336.670654][T11030] lo speed is unknown, defaulting to 1000 [ 336.711889][T11048] 8021q: adding VLAN 0 to HW filter on device bond28 [ 336.721149][T11048] bond27: (slave bond28): making interface the new active one [ 336.728990][T11048] bond28: entered promiscuous mode [ 336.736057][T11048] bond27: (slave bond28): Enslaving as an active interface with an up link [ 337.490539][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 337.508556][T11065] lo speed is unknown, defaulting to 1000 [ 337.752472][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 338.057905][T11058] mpoa:mpoad_close: () going down [ 338.304129][T11065] lo speed is unknown, defaulting to 1000 [ 338.381758][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 338.744054][ T30] audit: type=1800 audit(1750784776.302:6): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="memory.events" dev="tmpfs" ino=1049 res=0 errno=0 [ 339.164002][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 339.275093][T11106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.439456][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 339.448854][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 339.457962][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 339.478199][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 339.487933][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 339.575253][T11116] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 339.610413][T11116] bond24: entered promiscuous mode [ 339.619846][T11116] 8021q: adding VLAN 0 to HW filter on device bond24 [ 339.714489][T11116] 8021q: adding VLAN 0 to HW filter on device bond25 [ 339.744559][T11116] bond24: (slave bond25): making interface the new active one [ 339.777673][T11116] bond25: entered promiscuous mode [ 339.803099][T11116] bond24: (slave bond25): Enslaving as an active interface with an up link [ 339.877880][T11125] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 339.924599][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'. [ 339.952304][T11125] 8021q: adding VLAN 0 to HW filter on device bond24 [ 339.952345][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1148'. [ 339.970186][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'. [ 339.981855][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'. [ 340.006448][T11139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 340.060852][T11132] bond24: entered promiscuous mode [ 340.085298][T11131] lo speed is unknown, defaulting to 1000 [ 340.416957][T11131] lo speed is unknown, defaulting to 1000 [ 340.417183][T11139] lo speed is unknown, defaulting to 1000 [ 340.669217][T11139] lo speed is unknown, defaulting to 1000 [ 340.995866][T11154] lo speed is unknown, defaulting to 1000 [ 341.126709][T11170] net_ratelimit: 13 callbacks suppressed [ 341.126734][T11170] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 341.613341][T11178] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 341.693598][T11178] bond29: entered promiscuous mode [ 341.699577][T11178] 8021q: adding VLAN 0 to HW filter on device bond29 [ 341.820504][T11180] 8021q: adding VLAN 0 to HW filter on device bond30 [ 341.834828][T11180] bond29: (slave bond30): making interface the new active one [ 341.842640][T11180] bond30: entered promiscuous mode [ 341.848782][T11180] bond29: (slave bond30): Enslaving as an active interface with an up link [ 341.872132][T11154] lo speed is unknown, defaulting to 1000 [ 341.927287][T11187] bond18: left promiscuous mode [ 341.971950][T11187] bond19: left promiscuous mode [ 342.015460][T11187] bond20: left promiscuous mode [ 342.021239][T11187] bond21: left promiscuous mode [ 342.110480][T11187] erspan0: left allmulticast mode [ 342.127367][T11187] erspan0: left promiscuous mode [ 342.153865][T11187] macvtap1: left promiscuous mode [ 342.163691][T11187] macvtap1: left allmulticast mode [ 342.249915][T11187] bond22: left promiscuous mode [ 342.267668][T11187] bond23: left promiscuous mode [ 342.328767][T11187] xfrm1: left promiscuous mode [ 342.346585][T11187] xfrm1: left allmulticast mode [ 342.399445][T11187] bond24: left promiscuous mode [ 342.406382][T11187] bond25: left promiscuous mode [ 342.429111][ T5930] lo speed is unknown, defaulting to 1000 [ 342.435362][ T5930] syz0: Port: 1 Link DOWN [ 342.465511][ T5930] lo speed is unknown, defaulting to 1000 [ 343.337448][T11229] netlink: 'syz.0.1172': attribute type 39 has an invalid length. [ 343.529430][T11234] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 343.691266][T11234] bond38: entered promiscuous mode [ 343.773313][T11234] 8021q: adding VLAN 0 to HW filter on device bond38 [ 343.850655][T11233] 8021q: adding VLAN 0 to HW filter on device bond39 [ 343.923235][T11233] bond38: (slave bond39): making interface the new active one [ 343.966797][T11233] bond39: entered promiscuous mode [ 343.983030][T11233] bond38: (slave bond39): Enslaving as an active interface with an up link [ 344.053776][T11240] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 344.205810][T11240] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 344.339267][T11241] lo speed is unknown, defaulting to 1000 [ 344.649960][T11241] lo speed is unknown, defaulting to 1000 [ 344.689141][T11259] lo speed is unknown, defaulting to 1000 [ 344.697333][T11265] !: renamed from dummy0 [ 344.804749][T11271] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 345.226892][T11278] syz.2.1184 (11278) used obsolete PPPIOCDETACH ioctl [ 345.532208][T11271] lo speed is unknown, defaulting to 1000 [ 345.780955][T11295] __nla_validate_parse: 10 callbacks suppressed [ 345.780979][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 345.816731][T11295] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 345.858751][T11295] bond40: entered promiscuous mode [ 345.875324][T11295] 8021q: adding VLAN 0 to HW filter on device bond40 [ 345.988508][T11299] 8021q: adding VLAN 0 to HW filter on device bond41 [ 346.001358][T11299] bond40: (slave bond41): making interface the new active one [ 346.009777][T11299] bond41: entered promiscuous mode [ 346.017021][T11299] bond40: (slave bond41): Enslaving as an active interface with an up link [ 346.039768][T11271] lo speed is unknown, defaulting to 1000 [ 346.086652][T11259] lo speed is unknown, defaulting to 1000 [ 346.340000][T11307] netlink: 'syz.2.1189': attribute type 39 has an invalid length. [ 347.161139][T11309] lo speed is unknown, defaulting to 1000 [ 347.574656][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 348.043511][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 348.178811][T11352] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 348.198653][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 348.259617][T11352] bond25: entered promiscuous mode [ 348.266583][T11352] 8021q: adding VLAN 0 to HW filter on device bond25 [ 348.287200][T11354] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 348.387788][T11354] bond26: entered promiscuous mode [ 348.394519][T11354] 8021q: adding VLAN 0 to HW filter on device bond26 [ 348.474784][T11356] 8021q: adding VLAN 0 to HW filter on device bond27 [ 348.483144][T11369] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1203'. [ 348.490346][T11356] bond26: (slave bond27): making interface the new active one [ 348.506291][T11356] bond27: entered promiscuous mode [ 348.512849][T11356] bond26: (slave bond27): Enslaving as an active interface with an up link [ 348.636611][T11377] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 348.641802][T11309] lo speed is unknown, defaulting to 1000 [ 348.779972][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 349.464341][T11403] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1208'. [ 349.469926][T11398] lo speed is unknown, defaulting to 1000 [ 349.495689][ T30] audit: type=1107 audit(1750784787.052:7): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 350.039936][T11414] IPVS: Scheduler module ip_vs_sip not found [ 350.055176][T11398] lo speed is unknown, defaulting to 1000 [ 350.718157][T11425] lo speed is unknown, defaulting to 1000 [ 350.806958][T11429] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 350.965688][T11429] bond27: entered promiscuous mode [ 350.975358][T11429] 8021q: adding VLAN 0 to HW filter on device bond27 [ 351.064627][T11432] 8021q: adding VLAN 0 to HW filter on device bond28 [ 351.075271][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 351.087516][T11432] bond27: (slave bond28): making interface the new active one [ 351.095844][T11432] bond28: entered promiscuous mode [ 351.104298][T11432] bond27: (slave bond28): Enslaving as an active interface with an up link [ 351.456718][T11425] lo speed is unknown, defaulting to 1000 [ 351.480508][T11443] siw: device registration error -23 [ 351.487380][T11449] lo speed is unknown, defaulting to 1000 [ 351.959953][T11449] lo speed is unknown, defaulting to 1000 [ 352.387727][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 352.726897][T11472] lo speed is unknown, defaulting to 1000 [ 353.022258][T11468] mpoa:mpoad_close: () going down [ 353.238965][T11472] lo speed is unknown, defaulting to 1000 [ 353.737255][T11505] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 354.287685][T11513] bond22: left promiscuous mode [ 354.306769][T11513] bond23: left promiscuous mode [ 354.545770][T11513] bond24: left promiscuous mode [ 354.613682][T11513] bond25: left promiscuous mode [ 354.665934][T11516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.685220][T11513] bond27: left promiscuous mode [ 354.720654][T11513] bond28: left promiscuous mode [ 355.011004][T11519] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 355.028125][T11521] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 355.055106][T11519] bond42: entered promiscuous mode [ 355.066434][T11519] 8021q: adding VLAN 0 to HW filter on device bond42 [ 355.136908][T11521] bond31: entered promiscuous mode [ 355.153487][T11521] 8021q: adding VLAN 0 to HW filter on device bond31 [ 355.273676][T11523] 8021q: adding VLAN 0 to HW filter on device bond43 [ 355.286208][T11523] bond42: (slave bond43): making interface the new active one [ 355.294859][T11523] bond43: entered promiscuous mode [ 355.301264][T11523] bond42: (slave bond43): Enslaving as an active interface with an up link [ 355.368401][T11525] 8021q: adding VLAN 0 to HW filter on device bond32 [ 355.394242][T11525] bond31: (slave bond32): making interface the new active one [ 355.402273][T11525] bond32: entered promiscuous mode [ 355.409151][T11525] bond31: (slave bond32): Enslaving as an active interface with an up link [ 355.672668][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 355.999895][T11560] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 356.009164][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 356.020516][T11560] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 356.067053][T11560] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 356.088552][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 356.118742][T11560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1239'. [ 356.143536][T11565] lo: left allmulticast mode [ 356.148413][T11565] tunl0: left allmulticast mode [ 356.155463][T11565] gre0: left allmulticast mode [ 356.169417][T11565] gretap0: left allmulticast mode [ 356.181143][T11565] erspan0: left allmulticast mode [ 356.233402][T11565] ip_vti0: left allmulticast mode [ 356.239739][T11565] ip6_vti0: left allmulticast mode [ 356.249505][T11565] sit0: left allmulticast mode [ 356.260046][T11565] ip6tnl0: left allmulticast mode [ 356.279576][T11565] ip6gre0: left allmulticast mode [ 356.296849][T11565] ip6gretap0: left allmulticast mode [ 356.317970][T11565] vcan0: left allmulticast mode [ 356.332281][T11565] bond0: left allmulticast mode [ 356.345405][T11565] team0: left allmulticast mode [ 356.370998][T11565] nlmon0: left allmulticast mode [ 356.387057][T11565] caif0: left allmulticast mode [ 356.406465][T11565] vxcan0: left allmulticast mode [ 356.412300][T11565] vxcan1: left allmulticast mode [ 356.432248][T11565] veth0: left allmulticast mode [ 356.438251][T11565] veth1: left allmulticast mode [ 356.447318][T11565] wg0: left allmulticast mode [ 356.453133][T11565] wg1: left allmulticast mode [ 356.458581][T11565] wg2: left allmulticast mode [ 356.464996][T11565] veth0_to_bridge: left allmulticast mode [ 356.471531][T11565] bridge_slave_0: left allmulticast mode [ 356.478217][T11565] veth1_to_bridge: left allmulticast mode [ 356.485020][T11565] bridge_slave_1: left allmulticast mode [ 356.491593][T11565] veth0_to_bond: left allmulticast mode [ 356.498663][T11565] bond_slave_0: left allmulticast mode [ 356.505198][T11565] veth1_to_bond: left allmulticast mode [ 356.511475][T11565] bond_slave_1: left allmulticast mode [ 356.518081][T11565] veth0_to_team: left allmulticast mode [ 356.524498][T11565] team_slave_0: left allmulticast mode [ 356.530881][T11565] veth1_to_team: left allmulticast mode [ 356.537861][T11565] team_slave_1: left allmulticast mode [ 356.544359][T11565] veth0_to_batadv: left allmulticast mode [ 356.550809][T11565] batadv_slave_0: left allmulticast mode [ 356.558565][T11565] veth1_to_batadv: left allmulticast mode [ 356.572209][T11565] batadv_slave_1: left allmulticast mode [ 356.587192][T11565] xfrm0: left allmulticast mode [ 356.599560][T11565] veth0_to_hsr: left allmulticast mode [ 356.613922][T11565] veth1_to_hsr: left allmulticast mode [ 356.624886][T11570] netlink: 'syz.4.1241': attribute type 1 has an invalid length. [ 356.628647][T11565] hsr0: left allmulticast mode [ 356.644294][T11565] hsr_slave_0: left allmulticast mode [ 356.655243][T11565] hsr_slave_1: left allmulticast mode [ 356.661527][T11565] veth1_virt_wifi: left allmulticast mode [ 356.668159][T11565] veth0_virt_wifi: left allmulticast mode [ 356.674591][T11565] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 356.682918][T11565] veth1_vlan: left allmulticast mode [ 356.689446][T11565] vlan0: left allmulticast mode [ 356.695191][T11565] vlan1: left allmulticast mode [ 356.700748][T11565] macvlan0: left allmulticast mode [ 356.706494][T11565] macvlan1: left allmulticast mode [ 356.713027][T11565] ipvlan0: left allmulticast mode [ 356.718271][T11565] ipvlan1: left allmulticast mode [ 356.723576][T11565] veth0_vlan: left allmulticast mode [ 356.729344][T11565] veth1_macvtap: left allmulticast mode [ 356.735364][T11565] veth0_macvtap: left allmulticast mode [ 356.741178][T11565] macvtap0: left allmulticast mode [ 356.746754][T11565] macsec0: left allmulticast mode [ 356.752135][T11565] geneve0: left allmulticast mode [ 356.757400][T11565] geneve1: left allmulticast mode [ 356.762805][T11565] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 356.770023][T11565] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 356.777261][T11565] syztnl0: left allmulticast mode [ 356.782594][T11565] bond1: left allmulticast mode [ 356.787744][T11565] bond2: left allmulticast mode [ 356.792897][T11565] bond3: left allmulticast mode [ 356.797923][T11565] bond4: left allmulticast mode [ 356.803120][T11565] bond5: left allmulticast mode [ 356.808165][T11565] bond6: left allmulticast mode [ 356.813266][T11565] geneve2: left allmulticast mode [ 356.818451][T11565] bridge1: left allmulticast mode [ 356.824022][T11565] mac80211_hwsim hwsim17 wlan2: left allmulticast mode [ 356.831115][T11565] bridge2: left allmulticast mode [ 356.836525][T11565] bond7: left allmulticast mode [ 356.841836][T11565] netdevsim netdevsim3 eth0: left allmulticast mode [ 356.848605][T11565] netdevsim netdevsim3 eth1: left allmulticast mode [ 356.855959][T11565] netdevsim netdevsim3 eth2: left allmulticast mode [ 356.862983][T11565] netdevsim netdevsim3 eth3: left allmulticast mode [ 356.869850][T11565] bond8: left allmulticast mode [ 356.875004][T11565] bond9: left allmulticast mode [ 356.880035][T11565] bridge3: left allmulticast mode [ 356.885572][T11565] bond10: left allmulticast mode [ 356.890742][T11565] bond11: left allmulticast mode [ 356.896103][T11565] bridge4: left allmulticast mode [ 356.901318][T11565] bridge5: left allmulticast mode [ 356.906627][T11565] bridge6: left allmulticast mode [ 356.911871][T11565] bridge7: left allmulticast mode [ 356.917024][T11565] bridge8: left allmulticast mode [ 356.922337][T11565] bridge9: left allmulticast mode [ 356.927590][T11565] bond12: left allmulticast mode [ 356.932971][T11565] bond13: left allmulticast mode [ 356.938101][T11565] bridge10: left allmulticast mode [ 356.943762][T11565] bridge11: left allmulticast mode [ 356.949086][T11565] bond14: left allmulticast mode [ 356.954383][T11565] bond15: left allmulticast mode [ 356.959493][T11565] ip6tnl1: left allmulticast mode [ 356.964998][T11565] bond16: left allmulticast mode [ 356.970213][T11565] bond17: left allmulticast mode [ 356.975535][T11565] bond18: left allmulticast mode [ 356.980706][T11565] bridge12: left allmulticast mode [ 356.986298][T11565] bond19: left allmulticast mode [ 356.991415][T11565] bond20: left allmulticast mode [ 356.996650][T11565] bridge13: left allmulticast mode [ 357.018555][T11565] bond21: left promiscuous mode [ 357.024184][T11565] bond22: left promiscuous mode [ 357.084232][T11570] bond28: entered promiscuous mode [ 357.105354][T11570] 8021q: adding VLAN 0 to HW filter on device bond28 [ 357.143986][T11571] 8021q: adding VLAN 0 to HW filter on device bond29 [ 357.161106][T11571] bond28: (slave bond29): making interface the new active one [ 357.170309][T11571] bond29: entered promiscuous mode [ 357.183901][T11571] bond28: (slave bond29): Enslaving as an active interface with an up link [ 357.235598][T11579] tipc: Started in network mode [ 357.252071][T11579] tipc: Node identity ac14140f, cluster identity 4711 [ 357.259218][T11579] tipc: New replicast peer: 255.255.255.255 [ 357.299333][T11579] tipc: Enabled bearer , priority 10 [ 357.313782][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 357.433541][T11579] vxcan3: entered allmulticast mode [ 357.628440][T11594] lo speed is unknown, defaulting to 1000 [ 357.797996][T11600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1249'. [ 358.024685][T11595] lo speed is unknown, defaulting to 1000 [ 358.031856][T11594] lo speed is unknown, defaulting to 1000 [ 358.133891][T11606] x_tables: duplicate underflow at hook 3 [ 358.291833][ T8018] tipc: Node number set to 2886997007 [ 358.483494][T11612] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1253'. [ 358.515607][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1253'. [ 358.690159][T11595] lo speed is unknown, defaulting to 1000 [ 358.712022][T11620] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 358.894340][T11620] bond30: entered promiscuous mode [ 358.900609][T11620] 8021q: adding VLAN 0 to HW filter on device bond30 [ 358.967099][T11627] 8021q: adding VLAN 0 to HW filter on device bond31 [ 358.977330][T11627] bond30: (slave bond31): making interface the new active one [ 358.985774][T11627] bond31: entered promiscuous mode [ 358.992413][T11627] bond30: (slave bond31): Enslaving as an active interface with an up link [ 359.100622][T11622] lo speed is unknown, defaulting to 1000 [ 359.166713][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 359.281933][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1256'. [ 359.603181][T11622] lo speed is unknown, defaulting to 1000 [ 359.880338][T11648] tipc: Enabling of bearer rejected, failed to enable media [ 360.064000][T11649] vxcan3: entered allmulticast mode [ 360.596278][T11661] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 360.640049][T11661] bond33: entered promiscuous mode [ 360.656717][T11661] 8021q: adding VLAN 0 to HW filter on device bond33 [ 360.709265][T11666] 8021q: adding VLAN 0 to HW filter on device bond34 [ 360.719059][T11666] bond33: (slave bond34): making interface the new active one [ 360.732745][T11666] bond34: entered promiscuous mode [ 360.739776][T11666] bond33: (slave bond34): Enslaving as an active interface with an up link [ 360.851061][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 360.875555][T11659] tipc: Started in network mode [ 360.888285][T11659] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 360.901430][T11659] tipc: Enabling of bearer rejected, failed to enable media [ 360.926227][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 361.201948][T11680] __nla_validate_parse: 1 callbacks suppressed [ 361.201962][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 361.422792][T11683] netlink: 'syz.3.1273': attribute type 1 has an invalid length. [ 361.512226][T11683] bond23: entered promiscuous mode [ 361.518213][T11683] 8021q: adding VLAN 0 to HW filter on device bond23 [ 361.584914][T11685] 8021q: adding VLAN 0 to HW filter on device bond24 [ 361.605755][T11685] bond23: (slave bond24): making interface the new active one [ 361.614406][T11685] bond24: entered promiscuous mode [ 361.625688][T11685] bond23: (slave bond24): Enslaving as an active interface with an up link [ 361.679755][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 361.809138][T11694] lo speed is unknown, defaulting to 1000 [ 361.821445][T11702] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 361.843697][T11702] openvswitch: netlink: Flow key attr not present in new flow. [ 362.100191][T11705] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 362.234315][T11705] bond44: entered promiscuous mode [ 362.256656][T11705] 8021q: adding VLAN 0 to HW filter on device bond44 [ 362.345925][T11712] 8021q: adding VLAN 0 to HW filter on device bond45 [ 362.359565][T11712] bond44: (slave bond45): making interface the new active one [ 362.372918][T11712] bond45: entered promiscuous mode [ 362.381963][T11712] bond44: (slave bond45): Enslaving as an active interface with an up link [ 362.451095][T11694] lo speed is unknown, defaulting to 1000 [ 362.997012][T11742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.300483][T11756] syzkaller0: entered promiscuous mode [ 363.321262][T11756] syzkaller0: entered allmulticast mode [ 363.817929][T11763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 366.025587][T11770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.125252][T11770] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 366.159645][T11770] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 366.217637][T11770] lo speed is unknown, defaulting to 1000 [ 366.491286][T11770] lo speed is unknown, defaulting to 1000 [ 366.818882][T11794] netlink: 'syz.2.1297': attribute type 3 has an invalid length. [ 368.054664][T11802] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 368.097079][T11814] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1303'. [ 368.098056][T11805] syzkaller0: entered promiscuous mode [ 368.116021][T11805] syzkaller0: entered allmulticast mode [ 368.213754][T11802] bond29: entered promiscuous mode [ 368.220453][T11802] 8021q: adding VLAN 0 to HW filter on device bond29 [ 368.293018][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 368.459540][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 371.133151][T11824] lo speed is unknown, defaulting to 1000 [ 371.303099][T11820] mpoa:mpoad_close: () going down [ 371.518268][T11824] lo speed is unknown, defaulting to 1000 [ 371.702230][T11857] macsec1: entered promiscuous mode [ 371.707524][T11857] macsec1: entered allmulticast mode [ 371.781418][T11856] lo speed is unknown, defaulting to 1000 [ 371.980577][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 372.024486][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 372.055793][T11856] lo speed is unknown, defaulting to 1000 [ 372.304187][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 372.325027][T11871] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 372.333521][T11873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 372.383552][T11873] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.1316'. [ 372.393599][T11873] netlink: zone id is out of range [ 372.398746][T11873] netlink: zone id is out of range [ 372.405770][T11873] netlink: zone id is out of range [ 372.410937][T11873] netlink: zone id is out of range [ 372.416499][T11873] netlink: zone id is out of range [ 372.421729][T11873] netlink: zone id is out of range [ 372.427045][T11873] netlink: zone id is out of range [ 372.433232][T11873] netlink: zone id is out of range [ 372.443883][T11873] netlink: zone id is out of range [ 372.444176][T11871] bond31: entered promiscuous mode [ 372.449548][T11873] netlink: zone id is out of range [ 372.456028][T11871] 8021q: adding VLAN 0 to HW filter on device bond31 [ 372.683198][T11880] syzkaller0: entered promiscuous mode [ 372.691694][T11880] syzkaller0: entered allmulticast mode [ 373.119252][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 375.782524][T11904] netlink: 828 bytes leftover after parsing attributes in process `syz.1.1322'. [ 375.929362][T11914] lo speed is unknown, defaulting to 1000 [ 376.146125][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 376.315763][T11926] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 376.513129][T11926] bond25: entered promiscuous mode [ 376.520296][T11926] 8021q: adding VLAN 0 to HW filter on device bond25 [ 376.528164][T11914] lo speed is unknown, defaulting to 1000 [ 377.105029][T11945] lo speed is unknown, defaulting to 1000 [ 377.213265][T11948] tipc: Resetting bearer [ 377.439491][T11943] lo speed is unknown, defaulting to 1000 [ 377.453086][T11945] lo speed is unknown, defaulting to 1000 [ 378.035652][T11972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1341'. [ 378.045998][T11963] lo speed is unknown, defaulting to 1000 [ 378.094324][T11972] netlink: 'syz.4.1341': attribute type 29 has an invalid length. [ 378.489613][T11963] lo speed is unknown, defaulting to 1000 [ 378.588592][T11943] lo speed is unknown, defaulting to 1000 [ 378.673731][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 378.976391][T11995] dummy0: left allmulticast mode [ 378.981515][T11995] dummy0: left promiscuous mode [ 378.987747][T11995] bridge0: port 1(dummy0) entered disabled state [ 379.256193][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.055909][T12020] lo speed is unknown, defaulting to 1000 [ 380.094477][T12021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 380.119493][T12021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.148965][T12021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.190372][T12021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.333873][T12020] lo speed is unknown, defaulting to 1000 [ 380.475772][T12032] netlink: 'syz.3.1358': attribute type 72 has an invalid length. [ 380.484515][T12032] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.1358'. [ 381.020561][T12045] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 381.033196][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 381.060156][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1363'. [ 381.392124][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'. [ 381.410124][T12049] bond27: left promiscuous mode [ 381.415994][T12049] bond28: left promiscuous mode [ 381.445811][T12049] bond29: left promiscuous mode [ 381.450816][T12049] bond30: left promiscuous mode [ 381.479862][T12049] bond31: left promiscuous mode [ 381.485066][T12049] bond32: left promiscuous mode [ 381.523403][T12049] bond33: left promiscuous mode [ 381.528339][T12049] bond34: left promiscuous mode [ 381.703937][T12059] bond23: left promiscuous mode [ 381.711410][T12059] bond24: left promiscuous mode [ 381.763151][T12059] bond25: left promiscuous mode [ 381.895632][T12064] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1369'. [ 381.987763][T12069] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1371'. [ 381.999591][T12069] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1371'. [ 382.157009][T12075] netlink: 'syz.3.1374': attribute type 9 has an invalid length. [ 382.172847][T12075] netlink: 'syz.3.1374': attribute type 6 has an invalid length. [ 382.271307][T12083] lo speed is unknown, defaulting to 1000 [ 382.688734][T12083] lo speed is unknown, defaulting to 1000 [ 382.973969][T12097] net_ratelimit: 4058 callbacks suppressed [ 382.973994][T12097] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 383.132020][T12097] nbd2: detected capacity change from 0 to 63 [ 383.174885][T12099] block nbd2: NBD_DISCONNECT [ 383.186979][T12099] block nbd2: Disconnected due to user request. [ 383.239585][T12099] block nbd2: shutting down sockets [ 383.321806][ C1] blk_print_req_error: 138 callbacks suppressed [ 383.321832][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.337351][ C1] buffer_io_error: 138 callbacks suppressed [ 383.337375][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 383.351161][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.360277][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 383.368372][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.377524][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 383.385389][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.394568][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 383.402499][T11905] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.421758][T11905] Buffer I/O error on dev nbd2, logical block 0, async page read [ 383.434749][T11905] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.488531][T11905] Buffer I/O error on dev nbd2, logical block 1, async page read [ 383.490246][T12108] wireguard0: entered promiscuous mode [ 383.499471][T11905] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.505250][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 383.528370][T11905] Buffer I/O error on dev nbd2, logical block 2, async page read [ 383.536241][T12108] wireguard0: entered allmulticast mode [ 383.574469][T11905] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.587033][T11905] Buffer I/O error on dev nbd2, logical block 3, async page read [ 383.616310][T11905] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.617181][T12110] bond17: (slave bond18): Releasing backup interface [ 383.625706][T11905] Buffer I/O error on dev nbd2, logical block 0, async page read [ 383.649488][T12110] bond20: (slave bond21): Releasing backup interface [ 383.654241][T11905] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.665520][T11905] Buffer I/O error on dev nbd2, logical block 1, async page read [ 383.678738][T12110] bond22: (slave bond23): Releasing backup interface [ 383.689928][T12110] bond27: (slave bond28): Releasing backup interface [ 383.694448][T11905] ldm_validate_partition_table(): Disk read failed. [ 383.724431][T11905] Dev nbd2: unable to read RDB block 0 [ 383.741210][T11905] nbd2: unable to read partition table [ 383.758881][T11905] ldm_validate_partition_table(): Disk read failed. [ 383.768044][T11905] Dev nbd2: unable to read RDB block 0 [ 383.784211][T11905] nbd2: unable to read partition table [ 383.826126][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.838301][T12116] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 383.887427][ T5989] lo speed is unknown, defaulting to 1000 [ 383.894299][ T5989] syz1: Port: 1 Link ACTIVE [ 384.097489][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.177155][T12137] __nla_validate_parse: 1 callbacks suppressed [ 384.177178][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 384.198047][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.267597][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.456664][T12145] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 384.469787][T12143] lo speed is unknown, defaulting to 1000 [ 384.758851][T12143] lo speed is unknown, defaulting to 1000 [ 384.758868][T12145] lo speed is unknown, defaulting to 1000 [ 385.208569][T12161] netlink: 'syz.3.1394': attribute type 13 has an invalid length. [ 385.219255][T12161] netlink: 'syz.3.1394': attribute type 17 has an invalid length. [ 385.259555][T12159] lo speed is unknown, defaulting to 1000 [ 385.458600][T12155] bond46 (unregistering): Released all slaves [ 385.618084][T12161] gretap0: refused to change device tx_queue_len [ 385.704738][T12161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 385.793268][T12145] lo speed is unknown, defaulting to 1000 [ 385.843502][T12165] !: renamed from dummy0 [ 386.293555][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 386.596136][T12159] lo speed is unknown, defaulting to 1000 [ 386.732397][T12171] lo speed is unknown, defaulting to 1000 [ 386.749999][T12196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1402'. [ 387.153931][T12215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1404'. [ 387.208378][ T5980] IPVS: starting estimator thread 0... [ 387.221155][T12219] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 387.301742][T12222] IPVS: using max 34 ests per chain, 81600 per kthread [ 387.308635][T12219] bond27: entered promiscuous mode [ 387.308996][T12219] 8021q: adding VLAN 0 to HW filter on device bond27 [ 387.390423][T12225] 8021q: adding VLAN 0 to HW filter on device bond28 [ 387.420418][T12225] bond27: (slave bond28): making interface the new active one [ 387.446804][T12225] bond28: entered promiscuous mode [ 387.462875][T12225] bond27: (slave bond28): Enslaving as an active interface with an up link [ 387.741015][T12171] lo speed is unknown, defaulting to 1000 [ 388.644479][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1413'. [ 388.787859][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'. [ 388.945979][T12268] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 388.957843][T12270] netlink: 'syz.2.1415': attribute type 1 has an invalid length. [ 389.012414][T12270] bond46: entered promiscuous mode [ 389.018271][T12270] 8021q: adding VLAN 0 to HW filter on device bond46 [ 389.080954][T12268] bond29: entered promiscuous mode [ 389.087134][T12268] 8021q: adding VLAN 0 to HW filter on device bond29 [ 389.258150][T12272] 8021q: adding VLAN 0 to HW filter on device bond30 [ 389.290738][T12285] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 389.307190][T12272] bond29: (slave bond30): making interface the new active one [ 389.341760][T12272] bond30: entered promiscuous mode [ 389.347997][T12272] bond29: (slave bond30): Enslaving as an active interface with an up link [ 389.522547][T12274] 8021q: adding VLAN 0 to HW filter on device bond47 [ 389.546981][T12274] bond46: (slave bond47): making interface the new active one [ 389.592293][T12274] bond47: entered promiscuous mode [ 389.601901][T12274] bond46: (slave bond47): Enslaving as an active interface with an up link [ 390.264165][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 390.357383][T12302] syzkaller0: entered promiscuous mode [ 390.374039][T12302] syzkaller0: entered allmulticast mode [ 390.394475][T12314] netlink: 'syz.0.1423': attribute type 10 has an invalid length. [ 390.753161][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 391.334190][ T5857] Bluetooth: hci0: command tx timeout [ 392.854914][T12327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1428'. [ 392.931848][T12332] Bluetooth: MGMT ver 1.23 [ 393.136820][T12341] netlink: 'syz.4.1430': attribute type 1 has an invalid length. [ 393.206073][T12341] bond32: entered promiscuous mode [ 393.212389][T12341] 8021q: adding VLAN 0 to HW filter on device bond32 [ 393.219655][T12337] lo speed is unknown, defaulting to 1000 [ 393.298038][T12336] 8021q: adding VLAN 0 to HW filter on device bond33 [ 393.324607][T12336] bond32: (slave bond33): making interface the new active one [ 393.332433][T12347] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 393.342842][T12336] bond33: entered promiscuous mode [ 393.350518][T12336] bond32: (slave bond33): Enslaving as an active interface with an up link [ 393.368885][T12343] delete_channel: no stack [ 393.489280][T12355] netlink: 'syz.2.1432': attribute type 12 has an invalid length. [ 393.499371][T12355] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1432'. [ 393.826438][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 393.966682][T12337] lo speed is unknown, defaulting to 1000 [ 394.059972][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 394.083509][T12368] xt_TCPMSS: Only works on TCP SYN packets [ 394.382619][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 394.402109][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 394.444410][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 395.024503][T12393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1442'. [ 395.164507][T12396] netlink: 'syz.4.1443': attribute type 1 has an invalid length. [ 395.227635][T12396] bond34 (unregistering): Released all slaves [ 395.506180][T12408] netlink: 'syz.3.1445': attribute type 5 has an invalid length. [ 395.589924][T12410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'. [ 395.644084][T12407] syzkaller0: entered promiscuous mode [ 395.662580][T12407] syzkaller0: entered allmulticast mode [ 395.689982][T12413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1448'. [ 398.940710][T12457] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 398.952677][T12448] 8021q: adding VLAN 0 to HW filter on device bond48 [ 398.961891][T12457] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 398.975887][T12457] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1456'. [ 398.990175][T12448] bridge0: port 1(bond48) entered blocking state [ 399.030763][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 399.052265][T12448] bridge0: port 1(bond48) entered disabled state [ 399.064376][T12459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 399.074165][T12448] bond48: entered allmulticast mode [ 399.089337][T12448] bond48: entered promiscuous mode [ 399.098677][T12448] bridge0: port 1(bond48) entered blocking state [ 399.105678][T12448] bridge0: port 1(bond48) entered forwarding state [ 399.179351][T12468] bond27: left promiscuous mode [ 399.188517][T12468] bond28: left promiscuous mode [ 399.233821][T12468] bond29: left promiscuous mode [ 399.238747][T12468] bond30: left promiscuous mode [ 399.551362][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 399.665008][ T49] bridge0: port 1(bond48) entered disabled state [ 399.726946][T12484] lo speed is unknown, defaulting to 1000 [ 399.965882][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 400.108246][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 400.113562][T12484] lo speed is unknown, defaulting to 1000 [ 401.396771][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 401.483834][T12528] lo speed is unknown, defaulting to 1000 [ 401.773659][T12528] lo speed is unknown, defaulting to 1000 [ 401.780648][T12531] lo speed is unknown, defaulting to 1000 [ 402.214297][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 402.264921][T12531] lo speed is unknown, defaulting to 1000 [ 402.391905][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 403.369643][T12577] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 403.988421][T12591] netlink: 'syz.4.1492': attribute type 303 has an invalid length. [ 404.112353][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 404.276191][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1494'. [ 404.318167][T12593] syzkaller0: entered promiscuous mode [ 404.333206][T12593] syzkaller0: entered allmulticast mode [ 404.345473][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 405.112608][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 405.427314][ T5857] Bluetooth: hci0: command tx timeout [ 405.712775][T12622] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 405.720971][T12622] openvswitch: netlink: Flow key attr not present in new flow. [ 407.349282][T12628] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1502'. [ 407.362292][T12616] lo speed is unknown, defaulting to 1000 [ 407.835609][T12616] lo speed is unknown, defaulting to 1000 [ 407.890833][T12642] siw: device registration error -23 [ 408.088413][T12659] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1510'. [ 408.572755][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 408.720032][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 408.869663][T12678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.886007][T12678] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.013750][T12683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.059164][T12687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1519'. [ 409.086146][T12680] lo speed is unknown, defaulting to 1000 [ 409.115961][T12684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.195302][T12690] netlink: 'syz.1.1520': attribute type 27 has an invalid length. [ 409.283034][T12684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.653295][T12698] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 409.733003][T12698] wg1: entered promiscuous mode [ 409.738239][T12698] wg1: entered allmulticast mode [ 410.014074][T12687] lo speed is unknown, defaulting to 1000 [ 410.031113][T12680] lo speed is unknown, defaulting to 1000 [ 410.587678][T12732] veth0: entered promiscuous mode [ 410.676430][T12687] lo speed is unknown, defaulting to 1000 [ 410.676468][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 411.098473][T12716] veth0: left promiscuous mode [ 411.564071][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'. [ 411.916186][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 412.156781][T12760] lo speed is unknown, defaulting to 1000 [ 412.958920][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 413.094347][T12770] lo speed is unknown, defaulting to 1000 [ 413.119913][T12760] lo speed is unknown, defaulting to 1000 [ 413.296678][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 413.696116][T12770] lo speed is unknown, defaulting to 1000 [ 413.884391][T12791] lo speed is unknown, defaulting to 1000 [ 414.268261][T12791] lo speed is unknown, defaulting to 1000 [ 414.632132][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 415.143920][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 415.645073][T12830] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 415.689235][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 415.708758][T12827] syzkaller0: entered promiscuous mode [ 415.715906][T12827] syzkaller0: entered allmulticast mode [ 415.815449][T12833] bond31: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 415.834252][ T3022] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 415.835680][T12835] 8021q: adding VLAN 0 to HW filter on device bond31 [ 415.898863][T12830] veth3: entered promiscuous mode [ 415.909172][T12830] bond31: (slave veth3): Enslaving as a backup interface with a down link [ 415.959004][ T49] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.145156][T12830] team0: Port device vlan0 removed [ 416.152748][T12830] bond1: (slave bond2): Releasing backup interface [ 416.168696][T12830] bond3: (slave bond4): Releasing backup interface [ 416.203885][T12830] bond5: (slave bond6): Releasing backup interface [ 416.216582][T12830] bond8: (slave bond9): Releasing backup interface [ 416.243045][T12830] bond10: (slave bond11): Releasing backup interface [ 416.254945][T12830] bond12: (slave bond13): Releasing backup interface [ 416.265303][T12830] bond14: (slave bond15): Releasing backup interface [ 416.276200][T12830] bond17: (slave bond18): Releasing backup interface [ 416.288647][T12830] bond19: (slave bond20): Releasing backup interface [ 416.307698][T12830] bond21: (slave bond22): Releasing backup interface [ 416.318848][T12830] bond23: (slave bond24): Releasing backup interface [ 416.328391][T12830] bond27: (slave bond28): Releasing backup interface [ 416.337999][T12830] bond29: (slave bond30): Releasing backup interface [ 416.347402][T12830] bond31: (slave ip6gretap1): Removing an active aggregator [ 416.358328][T12854] netlink: 'syz.4.1557': attribute type 39 has an invalid length. [ 416.358608][T12830] bond31: (slave ip6gretap1): Releasing backup interface [ 416.375119][T12830] bond31: (slave ip6gretap1): the permanent HWaddr of slave - 3a:a2:9f:5c:47:61 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 416.397842][T12830] bond31: (slave veth3): Releasing backup interface [ 419.494460][T12844] lo speed is unknown, defaulting to 1000 [ 419.762790][T12868] lo speed is unknown, defaulting to 1000 [ 419.790610][T12844] lo speed is unknown, defaulting to 1000 [ 420.260387][T12868] lo speed is unknown, defaulting to 1000 [ 420.681732][T12886] Cannot find add_set index 4 as target [ 420.847176][T12890] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 420.929324][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 420.977415][T12890] wg1: entered promiscuous mode [ 420.985566][T12890] wg1: entered allmulticast mode [ 421.369322][T12906] sctp: [Deprecated]: syz.3.1571 (pid 12906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.369322][T12906] Use struct sctp_sack_info instead [ 421.513467][T12910] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 421.575911][T12910] bond33: entered promiscuous mode [ 421.581398][T12910] 8021q: adding VLAN 0 to HW filter on device bond33 [ 421.614416][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'. [ 421.661510][T12921] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:0 [ 421.696855][T12917] 8021q: adding VLAN 0 to HW filter on device bond34 [ 421.722347][T12912] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 421.732362][T12917] bond33: (slave bond34): making interface the new active one [ 421.739883][T12917] bond34: entered promiscuous mode [ 421.760102][T12917] bond33: (slave bond34): Enslaving as an active interface with an up link [ 421.886595][T12918] lo speed is unknown, defaulting to 1000 [ 421.930261][T12930] bond38: (slave bond39): Releasing backup interface [ 421.953869][T12930] bond39: left promiscuous mode [ 421.955269][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 422.102458][T12930] bond40: (slave bond41): Releasing backup interface [ 422.109216][T12930] bond41: left promiscuous mode [ 422.133014][T12939] nbd: socks must be embedded in a SOCK_ITEM attr [ 422.146133][T12939] block nbd0: shutting down sockets [ 422.299035][T12930] bond42: (slave bond43): Releasing backup interface [ 422.322071][T12930] bond43: left promiscuous mode [ 422.371829][T12930] bond44: (slave bond45): Releasing backup interface [ 422.382637][T12930] bond45: left promiscuous mode [ 422.406189][T12930] bond46: (slave bond47): Releasing backup interface [ 422.422283][T12930] bond47: left promiscuous mode [ 422.443769][T12930] bond48: left allmulticast mode [ 422.451078][T12930] bond48: left promiscuous mode [ 422.464818][T12930] bridge0: port 1(bond48) entered disabled state [ 422.606700][T12939] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 422.633224][T12939] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 422.887846][T12918] lo speed is unknown, defaulting to 1000 [ 423.235966][T12972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1585'. [ 423.246821][T12972] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1585'. [ 423.267437][T12972] netlink: 'syz.0.1585': attribute type 6 has an invalid length. [ 423.291732][T12972] netlink: 'syz.0.1585': attribute type 5 has an invalid length. [ 423.299513][T12972] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1585'. [ 423.445032][T12972] netlink: 'syz.0.1585': attribute type 16 has an invalid length. [ 423.453344][T12972] netlink: 'syz.0.1585': attribute type 17 has an invalid length. [ 423.570433][T12972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.694203][T12978] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1586'. [ 423.779777][T12983] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 423.968720][T12983] bond49: entered promiscuous mode [ 424.021974][T12983] 8021q: adding VLAN 0 to HW filter on device bond49 [ 424.171110][T12984] 8021q: adding VLAN 0 to HW filter on device bond50 [ 424.185478][T12984] bond49: (slave bond50): making interface the new active one [ 424.194907][T12984] bond50: entered promiscuous mode [ 424.201434][T12984] bond49: (slave bond50): Enslaving as an active interface with an up link [ 424.270209][T12986] syzkaller0: entered promiscuous mode [ 424.287056][T12986] syzkaller0: entered allmulticast mode [ 424.335599][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1591'. [ 424.432833][T12998] bond35 (unregistering): Released all slaves [ 424.516732][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1592'. [ 424.528620][T13006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.544038][T13006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.557273][T13006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.572703][T13010] syz.1.1593: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 424.581157][T13000] lo speed is unknown, defaulting to 1000 [ 424.593442][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.1.1593 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 424.593475][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.593488][T13010] Call Trace: [ 424.593495][T13010] [ 424.593504][T13010] dump_stack_lvl+0x189/0x250 [ 424.593543][T13010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.593569][T13010] ? __pfx__printk+0x10/0x10 [ 424.593588][T13010] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 424.593607][T13010] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 424.593624][T13010] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 424.593645][T13010] warn_alloc+0x214/0x310 [ 424.593666][T13010] ? stack_depot_save_flags+0x40/0x900 [ 424.593696][T13010] ? __pfx_warn_alloc+0x10/0x10 [ 424.593718][T13010] ? kasan_save_track+0x4f/0x80 [ 424.593745][T13010] ? xskq_create+0x56/0x170 [ 424.593770][T13010] ? xsk_init_queue+0xb0/0x110 [ 424.593793][T13010] ? xsk_setsockopt+0x43f/0x710 [ 424.593815][T13010] ? do_sock_setsockopt+0x257/0x3e0 [ 424.593836][T13010] ? __x64_sys_setsockopt+0x18b/0x220 [ 424.593857][T13010] ? do_syscall_64+0xfa/0x3b0 [ 424.593873][T13010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.593899][T13010] __vmalloc_node_range_noprof+0x125/0x12f0 [ 424.593949][T13010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 424.593975][T13010] ? __kasan_kmalloc+0x93/0xb0 [ 424.593995][T13010] vmalloc_user_noprof+0xad/0xf0 [ 424.594015][T13010] ? xskq_create+0xbf/0x170 [ 424.594032][T13010] xskq_create+0xbf/0x170 [ 424.594052][T13010] xsk_init_queue+0xb0/0x110 [ 424.594078][T13010] xsk_setsockopt+0x43f/0x710 [ 424.594104][T13010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 424.594126][T13010] ? __lock_acquire+0xab9/0xd20 [ 424.594160][T13010] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 424.594181][T13010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 424.594206][T13010] do_sock_setsockopt+0x257/0x3e0 [ 424.594231][T13010] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 424.594260][T13010] ? __fget_files+0x2a/0x420 [ 424.594288][T13010] __x64_sys_setsockopt+0x18b/0x220 [ 424.594317][T13010] do_syscall_64+0xfa/0x3b0 [ 424.594332][T13010] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.594349][T13010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.594365][T13010] ? clear_bhb_loop+0x60/0xb0 [ 424.594386][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.594402][T13010] RIP: 0033:0x7ff59438e929 [ 424.594420][T13010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.594434][T13010] RSP: 002b:00007ff595264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 424.594455][T13010] RAX: ffffffffffffffda RBX: 00007ff5945b6080 RCX: 00007ff59438e929 [ 424.594467][T13010] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 424.594478][T13010] RBP: 00007ff594410b39 R08: 0000000000000004 R09: 0000000000000000 [ 424.594489][T13010] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.594500][T13010] R13: 0000000000000000 R14: 00007ff5945b6080 R15: 00007ffdc0f12368 [ 424.594524][T13010] [ 424.594532][T13010] Mem-Info: [ 424.781293][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 424.821715][T13010] active_anon:9226 inactive_anon:0 isolated_anon:0 [ 424.821715][T13010] active_file:1411 inactive_file:39962 isolated_file:0 [ 424.821715][T13010] unevictable:768 dirty:511 writeback:0 [ 424.821715][T13010] slab_reclaimable:12266 slab_unreclaimable:134890 [ 424.821715][T13010] mapped:29335 shmem:1394 pagetables:996 [ 424.821715][T13010] sec_pagetables:0 bounce:0 [ 424.821715][T13010] kernel_misc_reclaimable:0 [ 424.821715][T13010] free:1279034 free_pcp:19412 free_cma:0 [ 425.022014][T13010] Node 0 active_anon:36804kB inactive_anon:0kB active_file:5644kB inactive_file:159648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121540kB dirty:2040kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:18168kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.066338][T13011] netlink: 'syz.3.1594': attribute type 2 has an invalid length. [ 425.161753][T13010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.270219][T13010] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.315654][T13011] : entered promiscuous mode [ 425.341305][T13000] lo speed is unknown, defaulting to 1000 [ 425.372509][T13010] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 425.378352][T13010] Node 0 DMA32 free:1201904kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41560kB inactive_anon:0kB active_file:5644kB inactive_file:157824kB unevictable:3536kB writepending:2040kB present:3129332kB managed:2561008kB mlocked:2100kB bounce:0kB free_pcp:45628kB local_pcp:24820kB free_cma:0kB [ 425.451832][T13010] lowmem_reserve[]: 0 0 1 1 1 [ 425.456606][T13010] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 425.489502][T13021] lo speed is unknown, defaulting to 1000 [ 425.556963][T13010] lowmem_reserve[]: 0 0 0 0 0 [ 425.565031][T13010] Node 1 Normal free:3898752kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24088kB local_pcp:3104kB free_cma:0kB [ 425.632343][T13010] lowmem_reserve[]: 0 0 0 0 0 [ 425.637240][T13010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 425.669459][T13010] Node 0 DMA32: 1636*4kB (UME) 637*8kB (UM) 423*16kB (UM) 859*32kB (UME) 415*64kB (UME) 149*128kB (UME) 34*256kB (UME) 29*512kB (UM) 13*1024kB (UME) 2*2048kB (UM) 261*4096kB (M) = 1201544kB [ 425.709242][T13010] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 425.773863][T13010] Node 1 Normal: 4*4kB (UME) 6*8kB (UME) 10*16kB (UME) 5*32kB (ME) 34*64kB (UME) 15*128kB (UME) 2*256kB (M) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (ME) = 3898752kB [ 425.801840][T13010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.814195][T13010] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 425.830360][T13010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.851463][T13010] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 425.901818][T13010] 46189 total pagecache pages [ 425.911752][T13010] 0 pages in swap cache [ 425.927654][T13010] Free swap = 124996kB [ 425.932077][T13010] Total swap = 124996kB [ 425.936249][T13010] 2097051 pages RAM [ 425.950967][T13010] 0 pages HighMem/MovableOnly [ 425.955785][T13010] 424693 pages reserved [ 425.971093][T13010] 0 pages cma reserved [ 426.078491][T13032] __nla_validate_parse: 2 callbacks suppressed [ 426.078514][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 426.148719][T13034] wireguard0: entered promiscuous mode [ 426.166155][T13034] wireguard0: entered allmulticast mode [ 426.251203][T13021] lo speed is unknown, defaulting to 1000 [ 426.371378][T13041] geneve0: entered allmulticast mode [ 426.458410][T13046] vxcan3: entered allmulticast mode [ 426.549515][T13036] lo speed is unknown, defaulting to 1000 [ 426.908662][T13054] netlink: 'syz.3.1602': attribute type 1 has an invalid length. [ 427.062457][T13060] can: request_module (can-proto-3) failed. [ 427.129942][T13054] bond32 (unregistering): Released all slaves [ 427.208005][T13066] tipc: Enabled bearer , priority 10 [ 427.386441][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'. [ 427.520357][T13036] lo speed is unknown, defaulting to 1000 [ 427.769740][T13073] lo speed is unknown, defaulting to 1000 [ 428.020298][T13088] netlink: 'syz.1.1608': attribute type 12 has an invalid length. [ 428.030787][T13088] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1608'. [ 428.132928][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 428.156272][T13084] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 428.335021][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 428.347997][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.361942][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.376907][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.464628][T13073] lo speed is unknown, defaulting to 1000 [ 428.476916][T13092] lo speed is unknown, defaulting to 1000 [ 428.495416][T13097] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1611'. [ 428.505171][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'. [ 428.851721][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 428.922823][T13092] lo speed is unknown, defaulting to 1000 [ 428.923133][T13089] lo speed is unknown, defaulting to 1000 [ 429.170673][T13089] lo speed is unknown, defaulting to 1000 [ 429.260264][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 429.678595][T13114] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 430.006766][T13117] bond35 (unregistering): Released all slaves [ 430.624351][T13137] ipt_ECN: cannot use operation on non-tcp rule [ 431.035811][T13130] geneve0: left allmulticast mode [ 431.400315][T13158] ip6t_srh: unknown srh invflags 4449 [ 431.410940][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 431.553974][T13162] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 431.598449][T13162] bond51 (unregistering): Released all slaves [ 431.808833][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1630'. [ 431.832861][T13170] wg1: left promiscuous mode [ 431.842222][T13170] wg1: left allmulticast mode [ 431.873259][T13170] bond38: left promiscuous mode [ 431.889733][T13170] bond40: left promiscuous mode [ 431.949392][T13170] bond42: left promiscuous mode [ 431.989203][T13170] bond44: left promiscuous mode [ 432.011052][T13170] bond46: left promiscuous mode [ 432.076907][T13170] bond49: left promiscuous mode [ 432.082361][T13170] bond50: left promiscuous mode [ 432.140723][T13172] lo speed is unknown, defaulting to 1000 [ 432.221153][ T30] audit: type=1800 audit(1750784869.782:8): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1633" name="memory.events" dev="tmpfs" ino=1809 res=0 errno=0 [ 432.247543][T13175] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1632'. [ 432.279682][ T30] audit: type=1804 audit(1750784869.842:9): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1633" name="memory.events" dev="tmpfs" ino=1809 res=1 errno=0 [ 432.369433][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 432.378980][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 432.475375][T13186] bridge_slave_0: entered promiscuous mode [ 432.483482][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1635'. [ 432.494458][T13186] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 432.760509][T13192] syzkaller1: entered promiscuous mode [ 432.777700][T13192] syzkaller1: entered allmulticast mode [ 432.791197][T13193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.813415][T13183] lo speed is unknown, defaulting to 1000 [ 432.820313][T13172] lo speed is unknown, defaulting to 1000 [ 432.855835][T13193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.926196][T13193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.555231][T13191] lo speed is unknown, defaulting to 1000 [ 433.677050][T13183] lo speed is unknown, defaulting to 1000 [ 433.697545][T13191] lo speed is unknown, defaulting to 1000 [ 434.649659][T13221] bond51 (unregistering): Released all slaves [ 434.757936][T13225] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 434.799930][T13225] bond35 (unregistering): Released all slaves [ 434.933086][T13230] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 434.996209][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 435.091432][T13230] bond35 (unregistering): Released all slaves [ 435.187559][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1647'. [ 435.237199][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 435.780163][T13258] lo speed is unknown, defaulting to 1000 [ 435.795174][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 435.872919][T13262] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 436.079131][T13266] bond35: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 436.094094][ T1114] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 436.114048][T13269] 8021q: adding VLAN 0 to HW filter on device bond35 [ 436.153511][T13268] bond32 (unregistering): Released all slaves [ 436.224316][ T1114] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 436.240830][T13258] lo speed is unknown, defaulting to 1000 [ 436.298492][T13272] veth7: entered promiscuous mode [ 436.322399][T13272] bond35: (slave veth7): Enslaving as a backup interface with a down link [ 436.345161][T13262] bond27: (slave bond28): Releasing backup interface [ 436.363971][T13262] bond29: (slave bond30): Releasing backup interface [ 436.377461][T13262] bond31: (slave bond32): Releasing backup interface [ 436.387963][T13262] bond33: (slave bond34): Releasing backup interface [ 436.398751][T13262] bond35: (slave ip6gretap1): Removing an active aggregator [ 436.409982][T13262] bond35: (slave ip6gretap1): Releasing backup interface [ 436.413329][T13281] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 436.426031][T13262] bond35: (slave ip6gretap1): the permanent HWaddr of slave - c2:ed:ba:1c:72:44 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 436.451995][T13262] bond35: (slave veth7): Releasing backup interface [ 436.556271][T13282] bond32 (unregistering): Released all slaves [ 436.645847][T13286] TCP: TCP_TX_DELAY enabled [ 436.675825][T13286] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1655'. [ 436.733194][T13290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1658'. [ 436.828094][T13299] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1656'. [ 436.931124][T13294] wg1: left promiscuous mode [ 436.942952][T13294] wg1: left allmulticast mode [ 437.022476][T13294] veth3: left promiscuous mode [ 437.220521][T13309] xt_cgroup: path and classid specified [ 437.232971][T13309] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 437.259433][T13309] netlink: zone id is out of range [ 437.274731][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 437.288406][T13309] netlink: zone id is out of range [ 437.302129][T13309] netlink: zone id is out of range [ 437.316788][T13309] netlink: zone id is out of range [ 437.334180][T13309] netlink: zone id is out of range [ 437.363242][T13309] netlink: zone id is out of range [ 437.381960][T13309] netlink: zone id is out of range [ 437.387040][T13315] netlink: 'syz.0.1661': attribute type 4 has an invalid length. [ 437.392325][T13309] netlink: zone id is out of range [ 437.420317][T13315] netlink: 'syz.0.1661': attribute type 2 has an invalid length. [ 437.475599][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1663'. [ 437.817443][T13323] lo speed is unknown, defaulting to 1000 [ 438.246820][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1669'. [ 438.247223][T13335] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 438.268812][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 438.279818][T13323] lo speed is unknown, defaulting to 1000 [ 438.279840][T13325] lo speed is unknown, defaulting to 1000 [ 438.437692][T13335] bond32 (unregistering): Released all slaves [ 438.565588][T13347] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20003 [ 439.057655][T13362] veth7: left promiscuous mode [ 439.083918][T13325] lo speed is unknown, defaulting to 1000 [ 439.149963][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'. [ 439.159820][T13365] netlink: 'syz.3.1675': attribute type 13 has an invalid length. [ 439.520511][T13368] lo speed is unknown, defaulting to 1000 [ 439.529811][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1679'. [ 439.579518][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 439.801230][T13368] lo speed is unknown, defaulting to 1000 [ 439.932051][T13386] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 440.450326][T13400] lo speed is unknown, defaulting to 1000 [ 440.697653][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.144944][T13424] Bluetooth: MGMT ver 1.23 [ 441.557707][T13400] lo speed is unknown, defaulting to 1000 [ 441.658803][T13413] xt_CT: No such helper "snmp" [ 441.746743][T13433] syzkaller0: entered promiscuous mode [ 441.789532][T13433] syzkaller0: entered allmulticast mode [ 441.851902][T13407] lo speed is unknown, defaulting to 1000 [ 441.901062][T13445] netlink: 'syz.4.1692': attribute type 303 has an invalid length. [ 441.971233][T13438] __nla_validate_parse: 4 callbacks suppressed [ 441.971255][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 442.231199][T13451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.303483][T13451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.394935][T13451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.768115][T13407] lo speed is unknown, defaulting to 1000 [ 444.823751][T13450] lo speed is unknown, defaulting to 1000 [ 444.878313][T13465] bond26: left promiscuous mode [ 444.884311][T13465] bond27: left promiscuous mode [ 444.915928][T13468] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 444.941719][T13465] bond28: left promiscuous mode [ 444.953475][T13465] bond29: left promiscuous mode [ 444.997581][T13465] bond30: left promiscuous mode [ 445.012119][T13465] bond31: left promiscuous mode [ 445.074860][T13465] bond32: left promiscuous mode [ 445.086583][T13465] bond33: left promiscuous mode [ 445.202136][T13450] lo speed is unknown, defaulting to 1000 [ 446.032527][T13498] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1705'. [ 446.200901][T13502] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 446.213416][T13502] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1707'. [ 446.233941][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 446.255503][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 446.322614][T13502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1707'. [ 446.773482][T13522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1712'. [ 446.786025][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1712'. [ 446.820684][T13524] tipc: Resetting bearer [ 446.861153][T13524] bridge_slave_0: left promiscuous mode [ 446.868885][T13524] bond29: left promiscuous mode [ 446.874943][T13524] bond31: left promiscuous mode [ 446.891437][T13524] bond33: left promiscuous mode [ 446.896698][T13524] bond34: left promiscuous mode [ 446.925034][ T981] lo speed is unknown, defaulting to 1000 [ 446.938937][ T981] syz1: Port: 1 Link DOWN [ 446.963137][T13522] netlink: 'syz.3.1712': attribute type 4 has an invalid length. [ 447.008161][T13530] syzkaller0: entered promiscuous mode [ 447.025173][T13530] syzkaller0: entered allmulticast mode [ 447.043389][T13529] netlink: 'syz.3.1712': attribute type 4 has an invalid length. [ 447.312969][T13547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1717'. [ 448.226765][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'. [ 448.371830][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 450.737633][T13580] lo speed is unknown, defaulting to 1000 [ 450.930851][T13604] ================================================================== [ 450.938980][T13604] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 450.946644][T13604] Read of size 1 at addr ffff88806e6d8430 by task syz.3.1722/13604 [ 450.954559][T13604] [ 450.956905][T13604] CPU: 0 UID: 0 PID: 13604 Comm: syz.3.1722 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 450.956931][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.956948][T13604] Call Trace: [ 450.956962][T13604] [ 450.956971][T13604] dump_stack_lvl+0x189/0x250 [ 450.957004][T13604] ? __virt_addr_valid+0x1c8/0x5c0 [ 450.957024][T13604] ? rcu_is_watching+0x15/0xb0 [ 450.957050][T13604] ? __kasan_check_byte+0x12/0x40 [ 450.957070][T13604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.957093][T13604] ? rcu_is_watching+0x15/0xb0 [ 450.957115][T13604] ? lock_release+0x4b/0x3e0 [ 450.957140][T13604] ? __virt_addr_valid+0x1c8/0x5c0 [ 450.957159][T13604] ? __virt_addr_valid+0x4a5/0x5c0 [ 450.957177][T13604] print_report+0xd2/0x2b0 [ 450.957201][T13604] ? rose_get_neigh+0x391/0x990 [ 450.957219][T13604] kasan_report+0x118/0x150 [ 450.957238][T13604] ? rose_get_neigh+0x391/0x990 [ 450.957260][T13604] rose_get_neigh+0x391/0x990 [ 450.957281][T13604] rose_connect+0x416/0x10a0 [ 450.957303][T13604] ? __pfx_current_check_access_socket+0x10/0x10 [ 450.957329][T13604] ? aa_sk_perm+0x81e/0x950 [ 450.957348][T13604] ? __might_fault+0xb0/0x130 [ 450.957364][T13604] ? __pfx_rose_connect+0x10/0x10 [ 450.957385][T13604] ? aa_af_perm+0x290/0x2b0 [ 450.957403][T13604] ? tomoyo_socket_connect_permission+0x164/0x290 [ 450.957429][T13604] ? bpf_lsm_socket_connect+0x9/0x20 [ 450.957452][T13604] __sys_connect+0x316/0x440 [ 450.957476][T13604] ? __pfx___sys_connect+0x10/0x10 [ 450.957501][T13604] ? rcu_is_watching+0x15/0xb0 [ 450.957527][T13604] __x64_sys_connect+0x7a/0x90 [ 450.957549][T13604] do_syscall_64+0xfa/0x3b0 [ 450.957567][T13604] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.957584][T13604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.957601][T13604] ? clear_bhb_loop+0x60/0xb0 [ 450.957621][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.957642][T13604] RIP: 0033:0x7fe3ac38e929 [ 450.957661][T13604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.957677][T13604] RSP: 002b:00007fe3ad235038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 450.957700][T13604] RAX: ffffffffffffffda RBX: 00007fe3ac5b6240 RCX: 00007fe3ac38e929 [ 450.957714][T13604] RDX: 000000000000001c RSI: 00002000000007c0 RDI: 000000000000000c [ 450.957726][T13604] RBP: 00007fe3ac410b39 R08: 0000000000000000 R09: 0000000000000000 [ 450.957738][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.957749][T13604] R13: 0000000000000000 R14: 00007fe3ac5b6240 R15: 00007ffd908ac9f8 [ 450.957770][T13604] [ 450.957776][T13604] [ 451.218411][T13604] Allocated by task 13272: [ 451.222810][T13604] kasan_save_track+0x3e/0x80 [ 451.227485][T13604] __kasan_kmalloc+0x93/0xb0 [ 451.232069][T13604] __kmalloc_cache_noprof+0x230/0x3d0 [ 451.237423][T13604] bond_enslave+0xc4e/0x3a20 [ 451.241996][T13604] do_set_master+0x533/0x6d0 [ 451.246574][T13604] rtnl_newlink_create+0x677/0xb00 [ 451.251669][T13604] rtnl_newlink+0x16d6/0x1c70 [ 451.256330][T13604] rtnetlink_rcv_msg+0x7cf/0xb70 [ 451.261249][T13604] netlink_rcv_skb+0x208/0x470 [ 451.266082][T13604] netlink_unicast+0x75b/0x8d0 [ 451.270834][T13604] netlink_sendmsg+0x805/0xb30 [ 451.275588][T13604] __sock_sendmsg+0x21c/0x270 [ 451.280247][T13604] ____sys_sendmsg+0x505/0x830 [ 451.284995][T13604] ___sys_sendmsg+0x21f/0x2a0 [ 451.289659][T13604] __x64_sys_sendmsg+0x19b/0x260 [ 451.294580][T13604] do_syscall_64+0xfa/0x3b0 [ 451.299064][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.304942][T13604] [ 451.307246][T13604] Freed by task 13262: [ 451.311290][T13604] kasan_save_track+0x3e/0x80 [ 451.315955][T13604] kasan_save_free_info+0x46/0x50 [ 451.320963][T13604] __kasan_slab_free+0x62/0x70 [ 451.325706][T13604] kfree+0x18e/0x440 [ 451.329691][T13604] slave_kobj_release+0x9d/0xd0 [ 451.334529][T13604] kobject_put+0x22b/0x480 [ 451.338948][T13604] __bond_release_one+0xe0d/0x10e0 [ 451.344044][T13604] do_set_master+0x30f/0x6d0 [ 451.348623][T13604] do_setlink+0xcf0/0x41c0 [ 451.353028][T13604] rtnl_newlink+0x149f/0x1c70 [ 451.357685][T13604] rtnetlink_rcv_msg+0x7cf/0xb70 [ 451.362602][T13604] netlink_rcv_skb+0x208/0x470 [ 451.367353][T13604] netlink_unicast+0x75b/0x8d0 [ 451.372099][T13604] netlink_sendmsg+0x805/0xb30 [ 451.376933][T13604] __sock_sendmsg+0x21c/0x270 [ 451.381593][T13604] ____sys_sendmsg+0x505/0x830 [ 451.386342][T13604] ___sys_sendmsg+0x21f/0x2a0 [ 451.391011][T13604] __x64_sys_sendmsg+0x19b/0x260 [ 451.395932][T13604] do_syscall_64+0xfa/0x3b0 [ 451.400417][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.406723][T13604] [ 451.409034][T13604] The buggy address belongs to the object at ffff88806e6d8400 [ 451.409034][T13604] which belongs to the cache kmalloc-512 of size 512 [ 451.423070][T13604] The buggy address is located 48 bytes inside of [ 451.423070][T13604] freed 512-byte region [ffff88806e6d8400, ffff88806e6d8600) [ 451.436762][T13604] [ 451.439071][T13604] The buggy address belongs to the physical page: [ 451.445471][T13604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806e6da400 pfn:0x6e6d8 [ 451.455536][T13604] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 451.464017][T13604] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 451.472508][T13604] page_type: f5(slab) [ 451.476474][T13604] raw: 00fff00000000240 ffff88801a441c80 ffffea0001b93810 ffffea0000cd7310 [ 451.485037][T13604] raw: ffff88806e6da400 000000000010000c 00000000f5000000 0000000000000000 [ 451.493601][T13604] head: 00fff00000000240 ffff88801a441c80 ffffea0001b93810 ffffea0000cd7310 [ 451.502259][T13604] head: ffff88806e6da400 000000000010000c 00000000f5000000 0000000000000000 [ 451.510914][T13604] head: 00fff00000000002 ffffea0001b9b601 00000000ffffffff 00000000ffffffff [ 451.519564][T13604] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 451.528211][T13604] page dumped because: kasan: bad access detected [ 451.534633][T13604] page_owner tracks the page as allocated [ 451.540377][T13604] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevd), ts 94482714864, free_ts 82551197600 [ 451.561133][T13604] post_alloc_hook+0x240/0x2a0 [ 451.565910][T13604] get_page_from_freelist+0x21e4/0x22c0 [ 451.571445][T13604] __alloc_frozen_pages_noprof+0x181/0x370 [ 451.577234][T13604] alloc_pages_mpol+0x232/0x4a0 [ 451.582070][T13604] allocate_slab+0x8a/0x3b0 [ 451.586574][T13604] ___slab_alloc+0xbfc/0x1480 [ 451.591375][T13604] __kmalloc_cache_noprof+0x296/0x3d0 [ 451.596748][T13604] kernfs_fop_open+0x397/0xca0 [ 451.601530][T13604] do_dentry_open+0xdf3/0x1970 [ 451.606309][T13604] vfs_open+0x3b/0x340 [ 451.610484][T13604] path_openat+0x2ee5/0x3830 [ 451.615094][T13604] do_filp_open+0x1fa/0x410 [ 451.619614][T13604] do_sys_openat2+0x121/0x1c0 [ 451.624285][T13604] __x64_sys_openat+0x138/0x170 [ 451.629145][T13604] do_syscall_64+0xfa/0x3b0 [ 451.633664][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.639563][T13604] page last free pid 5825 tgid 5825 stack trace: [ 451.645882][T13604] free_unref_folios+0xc66/0x14d0 [ 451.650919][T13604] folios_put_refs+0x559/0x640 [ 451.655686][T13604] free_pages_and_swap_cache+0x277/0x520 [ 451.661320][T13604] tlb_flush_mmu+0x3a0/0x680 [ 451.665919][T13604] tlb_finish_mmu+0xc3/0x1d0 [ 451.670528][T13604] vms_clear_ptes+0x42c/0x540 [ 451.675197][T13604] vms_complete_munmap_vmas+0x206/0x8a0 [ 451.680910][T13604] do_vmi_align_munmap+0x358/0x420 [ 451.686009][T13604] do_vmi_munmap+0x253/0x2e0 [ 451.690605][T13604] __vm_munmap+0x23b/0x3d0 [ 451.695049][T13604] __x64_sys_munmap+0x60/0x70 [ 451.699827][T13604] do_syscall_64+0xfa/0x3b0 [ 451.704329][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.710234][T13604] [ 451.712554][T13604] Memory state around the buggy address: [ 451.718200][T13604] ffff88806e6d8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.726275][T13604] ffff88806e6d8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.734352][T13604] >ffff88806e6d8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.742414][T13604] ^ [ 451.748033][T13604] ffff88806e6d8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.756085][T13604] ffff88806e6d8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.764236][T13604] ================================================================== [ 451.772498][T13604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 451.779718][T13604] CPU: 0 UID: 0 PID: 13604 Comm: syz.3.1722 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 451.791897][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 451.801991][T13604] Call Trace: [ 451.805282][T13604] [ 451.808219][T13604] dump_stack_lvl+0x99/0x250 [ 451.813004][T13604] ? __asan_memcpy+0x40/0x70 [ 451.817605][T13604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.822815][T13604] ? __pfx__printk+0x10/0x10 [ 451.827421][T13604] panic+0x2db/0x790 [ 451.831342][T13604] ? __pfx_panic+0x10/0x10 [ 451.835781][T13604] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 451.841739][T13604] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.847658][T13604] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 451.854015][T13604] ? print_memory_metadata+0x314/0x400 [ 451.859491][T13604] ? rose_get_neigh+0x391/0x990 [ 451.864435][T13604] check_panic_on_warn+0x89/0xb0 [ 451.869484][T13604] ? rose_get_neigh+0x391/0x990 [ 451.874359][T13604] end_report+0x78/0x160 [ 451.878609][T13604] kasan_report+0x129/0x150 [ 451.883120][T13604] ? rose_get_neigh+0x391/0x990 [ 451.887975][T13604] rose_get_neigh+0x391/0x990 [ 451.892676][T13604] rose_connect+0x416/0x10a0 [ 451.897303][T13604] ? __pfx_current_check_access_socket+0x10/0x10 [ 451.903658][T13604] ? aa_sk_perm+0x81e/0x950 [ 451.908177][T13604] ? __might_fault+0xb0/0x130 [ 451.912865][T13604] ? __pfx_rose_connect+0x10/0x10 [ 451.917903][T13604] ? aa_af_perm+0x290/0x2b0 [ 451.922407][T13604] ? tomoyo_socket_connect_permission+0x164/0x290 [ 451.928905][T13604] ? bpf_lsm_socket_connect+0x9/0x20 [ 451.934207][T13604] __sys_connect+0x316/0x440 [ 451.938811][T13604] ? __pfx___sys_connect+0x10/0x10 [ 451.943948][T13604] ? rcu_is_watching+0x15/0xb0 [ 451.948741][T13604] __x64_sys_connect+0x7a/0x90 [ 451.953881][T13604] do_syscall_64+0xfa/0x3b0 [ 451.958406][T13604] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.963609][T13604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.969694][T13604] ? clear_bhb_loop+0x60/0xb0 [ 451.974406][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.980324][T13604] RIP: 0033:0x7fe3ac38e929 [ 451.984756][T13604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.004378][T13604] RSP: 002b:00007fe3ad235038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 452.012824][T13604] RAX: ffffffffffffffda RBX: 00007fe3ac5b6240 RCX: 00007fe3ac38e929 [ 452.020801][T13604] RDX: 000000000000001c RSI: 00002000000007c0 RDI: 000000000000000c [ 452.028774][T13604] RBP: 00007fe3ac410b39 R08: 0000000000000000 R09: 0000000000000000 [ 452.036743][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.044725][T13604] R13: 0000000000000000 R14: 00007fe3ac5b6240 R15: 00007ffd908ac9f8 [ 452.052744][T13604] [ 452.055893][T13604] Kernel Offset: disabled [ 452.060200][T13604] Rebooting in 86400 seconds..