last executing test programs: 4.312388501s ago: executing program 2 (id=1342): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0x20000000) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x20, 0x7, 0xff, 0x4cab74e, 0x12000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xc, 0xb, 0xb, 0xc, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x96, &(0x7f0000000200)=""/150, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r4], 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x5b}, 0x94) 3.940674108s ago: executing program 2 (id=1348): unshare(0x2c020400) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) bind$xdp(r0, &(0x7f0000000d40)={0x2c, 0x3, 0x0, 0x2f}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 3.695531802s ago: executing program 2 (id=1352): setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) 3.445361786s ago: executing program 2 (id=1355): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB="0003abf2f60001002f0000020000000093e3", @ANYRES32, @ANYBLOB="2000178004000500040005"], 0x9c}}, 0x4004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) connect$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000040)={r12, 0x8788, 0x20}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="ff652123872e624afc9003335e02cf00a23d3ce44602e1666807a6c9981391d724555d957aa273dc4e7b6e2a60e6ddc6d067c3149544217e2ac97ee4353c7a30d93631b1c01dc803b65b6dfe429df2d0b4d02139666c75d312ca9dab60bcf6eda63dd65f02069d0367eee875c7433e04cca6233b1f5621d8c63a663fcb839f36ee3d280648a5afa948ddf9c38231bfa7a2af82fc242b402ad2301e471cd8e99c95963aeb12edc9dc17b44624b8ecdc44633a41bf653c036b246eab6208c3f40c24d32d934593773071a2809d7c354bcdd8", @ANYRES8=r4, @ANYRES32=r13, @ANYRES32, @ANYRES16=r13], 0xfdef) close(r4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0xfdef) 2.500360198s ago: executing program 1 (id=1360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xffff}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x888, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) 2.293212213s ago: executing program 1 (id=1364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000001302"], &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r0) 2.177836123s ago: executing program 4 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3ea}}, 0x420}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000900000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) 2.115117522s ago: executing program 1 (id=1367): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0x9}}, 0x4, 0xd, 0x0, 0xd, 0x4f331e06}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580)={r0, 0x1000, 0x3, 0xffff89d4, 0x5, 0x2}, &(0x7f0000000600)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000006c0)={r1, 0x2827}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0x6}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0xff, 0x6, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000180)={{r4}, 0x1, &(0x7f00000000c0)=[0x8], 0x6, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/245, 0xf5}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) sendto$inet6(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) recvfrom(r3, &(0x7f0000000700)=""/189, 0xbd, 0x0, &(0x7f00000007c0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x85) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r5, @ANYRES16=r3, @ANYRESHEX, @ANYRESOCT=r4, @ANYRES32=r7, @ANYRES32, @ANYRESOCT=r5, @ANYRESDEC=r2], 0x28}}, 0x40440c4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a14010000000000fc000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000055}, 0x0) 2.056286993s ago: executing program 4 (id=1368): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x1, 0x0, 0x3}, 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x1, 0x0, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x7, 0x7, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x80, 0x5, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/97, 0x61, 0x0, &(0x7f00000003c0)=""/224, 0xe0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xb, 0x200, 0x7, 0x20002, r0, 0x5, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @generic={0x6, 0x8, 0x6, 0x1, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x67}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ldst={0x3, 0x2, 0x1, 0x9, 0x3, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, @fallback=0x11, r0, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x1, &(0x7f00000005c0)=[r0, r0, 0x1, r4], &(0x7f0000000600)=[{0x5, 0x3}], 0x10, 0x5d}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @generic={0x6, 0x8, 0x6, 0x1, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x67}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ldst={0x3, 0x2, 0x1, 0x9, 0x3, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3ff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, @fallback=0x11, r0, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x1, &(0x7f00000005c0)=[r0, r0, 0x1, r4], &(0x7f0000000600)=[{0x5, 0x3}], 0x10, 0x5d}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x44, 0x0, "1ac5be248a12e2d5511ec220a981113cc57439c8c62ca100b3293c0b9e426f52c8a15cd791462df4c2628efd4d5905f2298afb57afe324c29d7e05e85179e6af26cb4e83b2867ffcac86047af5c57c79"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x44, 0x0, "1ac5be248a12e2d5511ec220a981113cc57439c8c62ca100b3293c0b9e426f52c8a15cd791462df4c2628efd4d5905f2298afb57afe324c29d7e05e85179e6af26cb4e83b2867ffcac86047af5c57c79"}, 0xd8) recvmsg$can_raw(r0, &(0x7f0000001d80)={&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000880)=""/84, 0x54}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/32, 0x20}, {&(0x7f0000001b00)=""/112, 0x70}, {&(0x7f0000001b80)=""/215, 0xd7}], 0x7, &(0x7f0000001d00)=""/121, 0x79}, 0x100) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000001dc0)={'lo\x00', 0x7, 0x2}) (async) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000001dc0)={'lo\x00', 0x7, 0x2}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002100)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x1e, 0x9, &(0x7f0000001ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @generic={0x3, 0x1, 0x6, 0x8, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x5, 0x9, 0x50, 0xfffffffffffffffc}]}, &(0x7f0000001f40)='GPL\x00', 0x7, 0xf1, &(0x7f0000001f80)=""/241, 0x40f00, 0x0, '\x00', r2, @sk_lookup=0x24, r0, 0x8, &(0x7f0000002080)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000020c0)={0x4, 0x8, 0x5}, 0x10, r6, r0, 0x1, &(0x7f0000002140)=[r4, r1, r0, r1, r1, r4, r0], &(0x7f0000002180)=[{0x3, 0x4, 0xd, 0x9}], 0x10, 0x20000}, 0x94) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x13e6000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000002280), 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000022c0)=r3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', r2, r7, 0x3, 0x2, 0x5}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', r2, r7, 0x3, 0x2, 0x5}, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000002380)={'veth1_macvtap\x00', 0x600}) syz_genetlink_get_family_id$nl802154(&(0x7f00000023c0), 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000002400), &(0x7f0000002440)=0x4) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000002400), &(0x7f0000002440)=0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000002480)={0x0, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x0, 'ovf\x00', 0x2, 0x7f, 0x64}, 0x2c) syz_emit_ethernet(0x4ae, &(0x7f00000024c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e808a2", 0x478, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, {[@fragment={0x5c, 0x0, 0x0, 0x1, 0x0, 0x8, 0x68}, @hopopts={0x3b, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0x86d}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xd, 0xe2, "7058ece16c97c70326744fa5112ac298c59d574d128efbe07750fa7de8913ddcb8aad1e1a2ac1db554012bb0447afdd0546077fd9941a62c49a84b5146d2bca2e2a668ff3e0f6e2d2b2032c6558518e3dcb83c2bbccc5f39bf3034e8180ecbbbdb5b5d9ac439f73ad537183db6fd89c8499b679b3a9deedc5b5b3a0bab9db974e18e112d8f90d5f71666acbbf076c6487efbbe3fbe83fca486bc14dbb730b3b270086ecfff8daf22959e73de759522306ebf180e227f3e9c28a7b1781c17737c7fd080d2d3a4cbb2b3541f87ecc1757012ad43d4b943e125f8186cb7c72e9e97bf1a"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xb}, @pad1]}, @dstopts={0x2e, 0x1e, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x40, [0x6, 0x6]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x9, [0xb9, 0x2, 0x6e40000000000000]}}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0xc54, [0x10, 0x3, 0x1, 0x7, 0x10001, 0x7ff, 0x3, 0x8, 0x722]}}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfd}, @calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0x100, [0x3, 0x7, 0x3, 0x1ff, 0x3, 0x2, 0x81]}}]}, @fragment={0x0, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}, @routing={0x21, 0x14, 0x0, 0x3, 0x0, [@private2, @remote, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @empty, @empty, @private0, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x3c, 0x12, 0x1, 0x43, 0x0, [@private0, @mcast1, @remote, @mcast2, @empty, @private1, @local, @rand_addr=' \x01\x00', @local]}, @srh={0x62, 0xc, 0x4, 0x6, 0x10, 0x48, 0xffad, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @empty]}, @fragment={0x2e, 0x0, 0x5, 0x0, 0x0, 0x5, 0x67}, @fragment={0x2, 0x0, 0x5, 0x1, 0x0, 0x15, 0x67}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x21, 0x0, 0x0, 0x60, 0xfff8, 0x1, 0x4e21, 0x4e23, 0x2, 0x1, 0x0, 0x0, 0x1}, [{0x1, 0x3, 0x3ff, 0x8000, 0xd, 0x80000000, 0x6, 0x8001}, {0xfbd8, 0xfff, 0x0, 0x91f3, 0x1, 0x4, 0x5, 0x2}, {0x80000001, 0x1, 0x3, 0x6, 0xf813, 0x9, 0x9, 0xa7}, {0x4, 0xfffffff9, 0x8, 0xe, 0x748, 0x0, 0xa, 0x9}]}}}}}}, &(0x7f0000002980)={0x1, 0x4, [0xaf0, 0xb75, 0xf0f, 0x9b3]}) (async) syz_emit_ethernet(0x4ae, &(0x7f00000024c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e808a2", 0x478, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, {[@fragment={0x5c, 0x0, 0x0, 0x1, 0x0, 0x8, 0x68}, @hopopts={0x3b, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0x86d}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xd, 0xe2, "7058ece16c97c70326744fa5112ac298c59d574d128efbe07750fa7de8913ddcb8aad1e1a2ac1db554012bb0447afdd0546077fd9941a62c49a84b5146d2bca2e2a668ff3e0f6e2d2b2032c6558518e3dcb83c2bbccc5f39bf3034e8180ecbbbdb5b5d9ac439f73ad537183db6fd89c8499b679b3a9deedc5b5b3a0bab9db974e18e112d8f90d5f71666acbbf076c6487efbbe3fbe83fca486bc14dbb730b3b270086ecfff8daf22959e73de759522306ebf180e227f3e9c28a7b1781c17737c7fd080d2d3a4cbb2b3541f87ecc1757012ad43d4b943e125f8186cb7c72e9e97bf1a"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xb}, @pad1]}, @dstopts={0x2e, 0x1e, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x40, [0x6, 0x6]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x9, [0xb9, 0x2, 0x6e40000000000000]}}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0xc54, [0x10, 0x3, 0x1, 0x7, 0x10001, 0x7ff, 0x3, 0x8, 0x722]}}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfd}, @calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0x100, [0x3, 0x7, 0x3, 0x1ff, 0x3, 0x2, 0x81]}}]}, @fragment={0x0, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}, @routing={0x21, 0x14, 0x0, 0x3, 0x0, [@private2, @remote, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @empty, @empty, @private0, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x3c, 0x12, 0x1, 0x43, 0x0, [@private0, @mcast1, @remote, @mcast2, @empty, @private1, @local, @rand_addr=' \x01\x00', @local]}, @srh={0x62, 0xc, 0x4, 0x6, 0x10, 0x48, 0xffad, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @empty]}, @fragment={0x2e, 0x0, 0x5, 0x0, 0x0, 0x5, 0x67}, @fragment={0x2, 0x0, 0x5, 0x1, 0x0, 0x15, 0x67}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x21, 0x0, 0x0, 0x60, 0xfff8, 0x1, 0x4e21, 0x4e23, 0x2, 0x1, 0x0, 0x0, 0x1}, [{0x1, 0x3, 0x3ff, 0x8000, 0xd, 0x80000000, 0x6, 0x8001}, {0xfbd8, 0xfff, 0x0, 0x91f3, 0x1, 0x4, 0x5, 0x2}, {0x80000001, 0x1, 0x3, 0x6, 0xf813, 0x9, 0x9, 0xa7}, {0x4, 0xfffffff9, 0x8, 0xe, 0x748, 0x0, 0xa, 0x9}]}}}}}}, &(0x7f0000002980)={0x1, 0x4, [0xaf0, 0xb75, 0xf0f, 0x9b3]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000029c0)=0x40, 0x4) bind$llc(r0, &(0x7f0000002a00)={0x1a, 0xfffe, 0x5, 0x8, 0x2, 0xce, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) (async) bind$llc(r0, &(0x7f0000002a00)={0x1a, 0xfffe, 0x5, 0x8, 0x2, 0xce, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002a40)={'veth0_to_bridge\x00'}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002ac0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000002c40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0xc4, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x59, 0xa8, @random="d28834e8e2a2cc118be07a9e1f3480d5b346edbd34fb3c812108180f57cd0bdd8e0f5415d25f1da813654a084b3f140e703bf2f931e5898dc66353055ce53141fc8069d99b6f2b403a8d1dd09397c427144221ea94"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa9, 0x41}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4812}, 0x41) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa9, 0x41}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4812}, 0x41) 1.997744654s ago: executing program 4 (id=1369): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 1.84933033s ago: executing program 4 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000800000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000700000000b70300"/88], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.319818341s ago: executing program 0 (id=1375): sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c00)={0x184, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x580, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x550, 0x2, [@TCA_ROUTE4_ACT={0x54c, 0x6, [@m_police={0x548, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x64a9, 0x10, 0xfffffffe, 0x7fffffff, 0x8, 0x3, 0x1, 0xfffff45b, 0xf3, 0x2, 0x9, 0xa, 0x8, 0x9, 0x1a3b, 0x7fff, 0x464, 0x800, 0x7fff, 0x9, 0x8, 0x4, 0x0, 0x3, 0x605, 0x9, 0xc, 0x2, 0x13, 0x8001, 0x10000, 0x8, 0x8, 0xdb7, 0x51b, 0x5, 0x8472, 0x240, 0xffff8001, 0x2, 0xb54, 0xfc7, 0x7, 0x9, 0x8000, 0x3, 0x6e, 0x5, 0x4, 0xa45, 0x3, 0xd7b9, 0xde, 0x1, 0x40, 0x6c, 0x6, 0x6f81636b, 0x0, 0x8bda, 0xb020, 0xaae, 0x1, 0xffffffef, 0x4, 0x1, 0x3, 0x8, 0x9, 0x5, 0x6, 0x1, 0x401, 0x7, 0x5, 0x6, 0x3, 0x5, 0x2, 0x3, 0x7, 0x200, 0xffffffff, 0x80000001, 0x3, 0xd, 0x58b, 0x3, 0x100, 0xe59, 0xfa, 0x80000000, 0x3a6, 0x1, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0xa00, 0x0, 0x5, 0x0, 0x8, 0xea1, 0xb57, 0x9, 0x6, 0x5, 0x24, 0x9, 0x5, 0x4, 0x6, 0x9a, 0x1, 0x9, 0x5, 0x0, 0x7fffffff, 0xb641, 0x2, 0x3, 0xffffffc2, 0x8, 0xfffffff5, 0x31a0, 0x18000000, 0x6, 0x80000000, 0xd, 0x1, 0x7, 0x2, 0x9, 0x4, 0xa4, 0x0, 0x1, 0x9, 0x4bc6, 0x1000, 0x8, 0x40, 0x6, 0x1, 0x1, 0x0, 0x3, 0x2, 0x8000, 0xfffffff9, 0x101, 0x602, 0xfffffffe, 0x5, 0x4, 0x4, 0xffff0001, 0x93af, 0x53b8, 0x1, 0x419, 0x9, 0x9, 0x3, 0x4, 0x7000, 0x4, 0xb, 0x6, 0x97, 0x3, 0x0, 0x401, 0x0, 0x7, 0xffff3bc8, 0x2, 0xffff0001, 0x6, 0x643, 0xf, 0x1000, 0x6, 0x7, 0xfffff9ad, 0x6, 0x7ff, 0x60, 0x1, 0x7, 0x0, 0x3, 0x8, 0x2, 0x3, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x4, 0xfffffff8, 0xd4ba, 0x1, 0x658, 0xa47, 0x32, 0xfffffffe, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0xc191, 0x7, 0x8000, 0x6, 0x1ff, 0x9, 0xfffff800, 0x2c800000, 0x1, 0xe, 0x50, 0x8, 0x100, 0x6b, 0x7, 0xa, 0x80000000, 0x65, 0x79, 0x10, 0x7, 0x13f, 0x2, 0x0, 0x3, 0x4c, 0x9, 0xfffffff9, 0x0, 0x19a8, 0x10001, 0x9]}]]}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x800}, 0x20844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60000090}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) write$cgroup_devices(r6, &(0x7f0000000840)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffa}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004890}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 1.101704072s ago: executing program 1 (id=1377): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r2, 0x0, 0x0, 0x4008044, 0x0, 0x0) 1.00119978s ago: executing program 1 (id=1379): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)='0}', 0x2}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}], 0x1}, 0x2}], 0x1, 0x100, 0x0) 933.496589ms ago: executing program 0 (id=1380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000a00)='syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8}, 0x28) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000580)={@empty}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@can_newroute={0x8c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0xfffffffffffffff7, 0x5, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "70d2e33a169edf4d"}, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x5, 0xf7, 0xe2}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0x4, 0x80}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1, 0x1}, 0x92, 0x0, 0x0, 0x0, "6c7cf2346f5b8a9a"}, 0x3}}, @CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x1, 0x0, 0x0, "9b209279017df261"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x2, 0xfffffffffffffffa, 0x92}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) recvmsg$can_raw(r9, &(0x7f0000000240)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c00018014000300fe80000000000000000000000000002d140004"], 0x1e8}}, 0x0) 932.606655ms ago: executing program 3 (id=1381): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @local}, &(0x7f0000000240)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000007b8af8ff00000000bc82000000000000a6020000f8ffff030000000008000000b703000000000800850000003303000095", @ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r2, @ANYRESHEX=r2], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 348.720943ms ago: executing program 4 (id=1382): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2c, 0x3, 0xe7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x4, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r1, 0x7f, 0x6, 0xd, 0xc, 0x1000}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x800000000000d}, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x5d28}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0xfffffffffffffd20}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_int(r9, 0x6, 0x1d, &(0x7f0000000000)=0xfff, 0x4) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x45, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x18, 0x800, 0xfffffff4) 345.411774ms ago: executing program 3 (id=1383): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdb) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r9, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8c7745c1141ad", 0x6e, 0x6000c804, 0x0, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7fff, 0x20, 0xdfffe}, 0x2f) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000000)={@private0}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="25000000280000ff108018d57d5ffa1bd60000000000adcd8a8c553747e9107eab2822b00e79d9ce377ac239ded56d4a943d", @ANYRES32=r6, @ANYRES64=0x0], 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000110000000000000000000000000000eb000000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r11, &(0x7f0000000040)}, 0x20) r13 = socket(0x10, 0x3, 0x0) getpeername$packet(r13, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0xff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x1a, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000001000100000000000600000018110000f7fb401f415f6bf3ad295e07ed373bcbcd380aa78e3098d68b5dcb77110952", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000100000000015430c0000000000c285f4ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0xe9fc5bd9, 0x89, &(0x7f0000000700)=""/137, 0x41100, 0x2, '\x00', r14, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0x4, 0x401}, 0x10, r15, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[r12, r11, r2, r2, r2, r2], &(0x7f0000000880)=[{0x1, 0x2, 0x5, 0x2}, {0x4, 0x5, 0x86, 0x8}, {0x5, 0x2, 0x7, 0x1}, {0x2, 0x5, 0xa, 0x7}, {0x3, 0x4, 0xd, 0xb}], 0x10, 0x81}, 0x94) getsockopt$IP6T_SO_GET_INFO(r13, 0x29, 0x40, &(0x7f0000000280)={'nat\x00', 0x0, [0xf165, 0x1, 0xf43, 0x3ff, 0x7ff]}, &(0x7f0000000340)=0x54) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="a0", 0x1}], 0x1}, 0x801) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x4) 341.238909ms ago: executing program 0 (id=1384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 340.444355ms ago: executing program 3 (id=1385): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2800000010000100010000000000000000000000a228eeb9c355e67434a5574ac3e83b044a0b57c916c199b8217697beb411ed0ebd68251fb68b3729d8ffad", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) 337.853636ms ago: executing program 0 (id=1386): unshare(0x400) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080) 335.994057ms ago: executing program 4 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0x80, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 334.834718ms ago: executing program 0 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x424, 0x3f4, 0x300, 0x70bd2c, 0x25dfdbfb, {0x5, 0x1, 0xc, [0xffff25e4, 0xfe000000, 0x2, 0x8, 0x1, 0x1ff, 0x200, 0x4, 0xff90000, 0x0, 0xb7ca, 0xa353, 0x306, 0x9, 0x7, 0x9, 0x4, 0x4, 0x7fffffff, 0x79, 0x9, 0x7b5, 0x100, 0x10000, 0x2, 0x3, 0x0, 0x9, 0x3, 0x9bf7, 0x7, 0x0, 0x4, 0x4, 0x9, 0x40, 0x0, 0x4, 0x2, 0x1800000, 0x7, 0x3, 0x72, 0xe, 0x9, 0x8, 0xb, 0x0, 0x6, 0x8, 0x200, 0x8c88, 0x2, 0x2, 0x6, 0x0, 0x4, 0xd1, 0xc7, 0x7fffffff, 0x0, 0xdc2, 0x9, 0xdd], [0x4, 0xe4, 0x10, 0x8, 0xf, 0x3, 0x8, 0x6, 0x4, 0x3ff, 0xf, 0x4, 0xe6, 0x2, 0x1, 0x8, 0xfffff668, 0x7, 0x2, 0x7, 0x5c, 0x100, 0x5, 0x5f0, 0xa, 0x1, 0xffffff01, 0xfffffc01, 0x9, 0x0, 0x25, 0x8, 0x4, 0x8, 0x6, 0x4, 0xfff, 0xfffffff8, 0x4, 0x0, 0x640, 0x4, 0x10000, 0x657, 0xa2, 0x10, 0x0, 0x1, 0x1, 0x8ff, 0x0, 0xe, 0x0, 0x0, 0x40, 0xc, 0x7d, 0x80f1, 0x4, 0xe, 0x8001, 0x1, 0x60000000, 0x6], [0xffffffff, 0x8, 0xfffffffb, 0xf, 0x9, 0x1f, 0x4, 0x479, 0x6, 0x80, 0xe, 0x2d, 0x7b13, 0xf1e2, 0x3, 0xd7, 0xfc22, 0x8, 0xf307, 0x7, 0x5, 0x401, 0xd, 0x4, 0x6d7, 0x87, 0x7, 0xb3e2, 0x2, 0x6, 0x786, 0x9, 0x2, 0x1, 0x6, 0x400, 0xffffffff, 0x9, 0x9, 0xffffffef, 0x30000, 0x2, 0xfff, 0x25ab, 0xbbef, 0x8, 0x6, 0xb5c0, 0x47b3, 0xec, 0x4, 0x9, 0x6, 0xe4d2, 0x0, 0xe, 0x2, 0x3, 0x8, 0x9, 0x9, 0x8000, 0xfffffff4, 0x9], [0x6, 0xde, 0x1, 0x4b, 0xfffffff9, 0x3, 0x3, 0xa84, 0x7, 0xcf18, 0x9, 0x5, 0x6, 0x6, 0xe, 0x8, 0x634, 0x8, 0x4, 0x1, 0x6, 0x1, 0xce56, 0x6, 0x72d3df81, 0xff, 0x9, 0xfffffff8, 0xa, 0x0, 0x4, 0xb2, 0x3696, 0xa, 0x40c, 0xb4f, 0x2, 0x94, 0xa, 0x6992, 0x8, 0x1, 0x94, 0x3b7, 0x2, 0xb9e4, 0x74e1adc5, 0x9, 0x9, 0xffffffff, 0x0, 0x8, 0x4, 0x1ec432e0, 0x18c, 0x1, 0x4, 0x400, 0x8, 0x1, 0x6, 0xb, 0x3, 0x7], 0x3, ['\x00', ')\x00']}}, 0x424}, 0x1, 0x0, 0x0, 0x4004045}, 0x4885) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 332.918951ms ago: executing program 3 (id=1389): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x86, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@multicast2, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@broadcast, 0x5}, {@broadcast, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r6, r2, 0x0, &(0x7f0000000780)=[r3, r1, r3, r3, r3, r3, r3], 0x0, 0x10, 0x48}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b019f0000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c400000095"], &(0x7f0000000500)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) 331.872871ms ago: executing program 0 (id=1390): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) shutdown(r4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001480)={r9, 0x65, "c38d58f316cfb1e050a05e45def314115479b42b422aa3700e14b9b555e4c13ba61e68ec25fc30ea0d76727827e3f59c64a75adea656269dce1c9a643f81cb459206bfaf8e4eb784c2bdca40b8e202c59ccc58b203696645bfefd98d2a3ba1589d13b9864d"}, &(0x7f0000001500)=0x6d) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x800) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x5, 0xa5, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_address={0x5, 0x5, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x7}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x50}}, 0x40) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 310.043699ms ago: executing program 2 (id=1391): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x40000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0xfffffffffffffeff) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x322, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r4, r6, 0x2, 0x4, 0x1}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000003c0)={'xfrm0\x00'}) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000400), 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d5ae34d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x81c0}, 0x4000001) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x7b}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8004) (async) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000680)=0x1, 0x4) r10 = openat$cgroup_type(r6, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000700), 0x9) setsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f0000000740)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r9, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x51, 0xb}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc001) (async) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f00000009c0)={0x5c, "28f662f0916c2c0183e5431d74d6091fb82c35143dd99afa4a96424ed4caab33eb4ce5f675d30d5dbfbf85bd01848e961f25d850c68217755f242b498126825164571b042f1b4acd38deb7b3c2f59dce4413683bfdbc80073ab816be8e503bc845475209ffb7d1cb9e1551bb5407b128d5aa0a0132a505cfc79d40621b729050"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000e80)={0x0}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000002080)={0x7fffffff000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "e1c287c01c52ef"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000010d600)={0x100000001, [{r12, r13}, {r14}], 0x0, "ddbfa054fec686"}) 302.754374ms ago: executing program 3 (id=1392): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080004000800800000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000f916036fa81bdd639b513c2a5ec354438d0c3c2556e0e8aabbf64355d7bc8c3bcbf336608cf3c81e4653ad437e34e4b9d240715eb6407a4d3e18ed9683b48a8cb4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async, rerun: 32) r3 = socket(0xa, 0x3, 0x2) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x50, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x40410c0}, 0x0) (async, rerun: 32) close(r4) (async, rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0) (async) socket$netlink(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r6, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8c7745c", 0x6b, 0x6000c804, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x2c060000) (async) unshare(0x24020400) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 110.111832ms ago: executing program 2 (id=1393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="988bd29c9bff7da4519a12ccaec1178fbcddd1cf2ac0dc239713af79eec0899feb101bce7f861f9b26d4b82793d78735325ec2a8b9de6be9c3faa1ef6982ff97fea42e091076dc823720eef6dbfd1d054d2cf80bb8571e58eccd40d747fe84e96ee793d0737b1e0e033f30c1129b409af987d751aa845c82c099e834f0882891686608db55cc1987a6e5e3", @ANYRES16=r1, @ANYBLOB="0100fdffff000000000003000000200001800d0001006574683a67726530000000000c00028008000300ff0f0000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e1e, @loopback}}) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, 0x21, 0x100, 0x70bd2b, 0x25dfdbfd, {0x16}, [@generic="2020c85dbb794299727d83febd63046c1f8c0285c78486cb5b27caf0cc8f75406fe5156f2180"]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRESDEC, @ANYBLOB="000000a921000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000057fa80fb46cb034efc6c740e93a46caad", @ANYRES32=r5, @ANYBLOB="000000000010000085000000a5888cc20bdef48300000000b7020000d93a90e349318d3355c2513e4b6901000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000800005bc60ddf01aca19400070000000000180604000000003000002e006c00"], 0x0, 0x2c, 0x0, 0x1, 0x5}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x814) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000540)=0x9, &(0x7f0000000580)=0x4) 1.558832ms ago: executing program 1 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f00000004c0)={&(0x7f0000000340)={0x1d, r10}, 0x10, &(0x7f0000000440)={&(0x7f0000000400)=@can={{0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "04278adde678b357"}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 3 (id=1395): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001fbb1ff007f435ae552721239c8af99fecd41142c18990515bc982b35b8ffaf79140c520af17166b43851c25462862d7b4b48f36009440a99175093b2cc4195dbb75d85444801de41d61330acb0cb654a50f6f7190956a5a5ed0f0f412e2c851d445011ec2d6099ea94557f3e7125b2ba4d136963189a4a91f71a5e233eb03bb1148c"], 0x38}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000200)={r4, 0x81, 0x20, 0x6, 0xfffffffffffffffb}, &(0x7f0000000240)=0x18) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={r5, 0x64}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000480)={r9, 0xfffffffa}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r11 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r12, &(0x7f00000028c0)={@void, @val={0x0, 0x3, 0x101, 0xfff, 0x0, 0xe22}, @ipv6=@gre_packet={0x0, 0x6, "7dcfd9", 0x11f9, 0x2f, 0x0, @private2, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb5, 0x0, [0x2, 0x9d], "c56eadba51f4d51b6e554498d5a81c0bef565a0cb0447ed1ad2a6d584118b5b5b5f174b1fa738663559a422060e138c6d0402be5499855569a34fa6cb99a4bcea46cb169b235af4f70f3ad0f8376303ddbbbf4265f70d31d121bd3209b07aeb7d8391c08986409b5e40b2f56b2556de165dd886f9ccc6484e2c382413b2aecba37c3e1ed6a0cc13e90fbbec788c97d137a64fcb539d1314775132a6e02478ef565616235468592e8eea6cda8aebd4c268f50debe1e"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "45431eab89191c8d63c0ba5b7cf7e9fa2d32595e79fb8d3bc858256788661e9dab2b88b401c5623e701161e3cffccb9b3e7213b3e9e5245e84e4355e9f131b8636583305c711aa79b0cde5275b33bead24611dac07edf0c34aacd9ed4164ba783cff8c45d07a18d08b3518bfb26415b184f436487fea6bc553be36b782e44357bd4d756c23d9b33cd54e585e9939bf4c5bf3bd39f5d0edb642767ef080320571b7904b93b2b54419727984cc7edf43e761760fac9e1aecb8f3f94efbda5abe20d03f83d53a39ab84af562b"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8, 0xfffc, 0x3], "1d6012ae5a92e5f3df18335de70e0e7bf1d60c3a6a15c4438c17cfb076aee4016b3b264283a2c962f48bf7"}, {0x8, 0x88be, 0x400, {{0x5, 0x1, 0x5, 0x0, 0x1, 0x3, 0x6, 0x8}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0xd, 0x1, 0x1, 0x3, 0x1, 0x40}, 0x2, {0x100, 0xfffb, 0x0, 0x13, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x80000001, "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"}}}}}, 0x122b) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) getsockopt(r6, 0x111, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) kernel console output (not intermixed with test programs): sing interface batadv_slave_0 (retrying later): interface not active [ 89.095403][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.102467][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.128500][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.140529][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.147501][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.174242][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.188073][ T5865] team0: Port device team_slave_0 added [ 89.200238][ T5860] hsr_slave_0: entered promiscuous mode [ 89.206887][ T5860] hsr_slave_1: entered promiscuous mode [ 89.216916][ T5869] team0: Port device team_slave_0 added [ 89.231838][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.238912][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.265314][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.278218][ T5865] team0: Port device team_slave_1 added [ 89.285883][ T5869] team0: Port device team_slave_1 added [ 89.323983][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.331367][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.357832][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.411172][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.418535][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.445214][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.551003][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.558099][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.584320][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.598272][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.605289][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.631431][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.683185][ T5873] hsr_slave_0: entered promiscuous mode [ 89.690514][ T5873] hsr_slave_1: entered promiscuous mode [ 89.696751][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 89.702695][ T5873] Cannot create hsr debugfs directory [ 89.737710][ T5875] hsr_slave_0: entered promiscuous mode [ 89.744252][ T5875] hsr_slave_1: entered promiscuous mode [ 89.750773][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 89.756991][ T5875] Cannot create hsr debugfs directory [ 89.869411][ T5869] hsr_slave_0: entered promiscuous mode [ 89.876377][ T5869] hsr_slave_1: entered promiscuous mode [ 89.882932][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 89.888895][ T5869] Cannot create hsr debugfs directory [ 90.005526][ T5865] hsr_slave_0: entered promiscuous mode [ 90.012316][ T5865] hsr_slave_1: entered promiscuous mode [ 90.018782][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 90.024544][ T5865] Cannot create hsr debugfs directory [ 90.457865][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.493924][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.506766][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.530191][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.588881][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.602189][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.617232][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.631322][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.764077][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.771405][ T5868] Bluetooth: hci0: command tx timeout [ 90.771448][ T5877] Bluetooth: hci4: command tx timeout [ 90.777383][ T5182] Bluetooth: hci1: command tx timeout [ 90.784032][ T51] Bluetooth: hci2: command tx timeout [ 90.839163][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.852377][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.859202][ T5877] Bluetooth: hci3: command tx timeout [ 90.883973][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.967427][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.980133][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.991988][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.004148][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.141826][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.164341][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.174598][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.192320][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.217081][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.232369][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.256437][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.316781][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.336191][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.343481][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.370202][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.377451][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.392394][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.399586][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.411380][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.418618][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.523296][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.545707][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.643397][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.664907][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.690863][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.698095][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.722027][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.729281][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.793077][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.800284][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.873816][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.881087][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.005551][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.065803][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.090818][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.109980][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.117168][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.135475][ T44] cfg80211: failed to load regulatory.db [ 92.194171][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.201425][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.218663][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.433853][ T5873] veth0_vlan: entered promiscuous mode [ 92.473312][ T5873] veth1_vlan: entered promiscuous mode [ 92.580392][ T5860] veth0_vlan: entered promiscuous mode [ 92.632989][ T5860] veth1_vlan: entered promiscuous mode [ 92.673921][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.695668][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.722847][ T5873] veth0_macvtap: entered promiscuous mode [ 92.754481][ T5873] veth1_macvtap: entered promiscuous mode [ 92.849766][ T5877] Bluetooth: hci4: command tx timeout [ 92.855235][ T5877] Bluetooth: hci2: command tx timeout [ 92.860897][ T51] Bluetooth: hci0: command tx timeout [ 92.861041][ T5868] Bluetooth: hci1: command tx timeout [ 92.880667][ T5860] veth0_macvtap: entered promiscuous mode [ 92.911692][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.926385][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.939623][ T5868] Bluetooth: hci3: command tx timeout [ 92.953380][ T5860] veth1_macvtap: entered promiscuous mode [ 92.989960][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.004217][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.030357][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.054340][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.093170][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.116792][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.136510][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.146087][ T5875] veth0_vlan: entered promiscuous mode [ 93.188287][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215092][ T5875] veth1_vlan: entered promiscuous mode [ 93.227383][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.281070][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.298691][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.405349][ T5875] veth0_macvtap: entered promiscuous mode [ 93.426636][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.432712][ T5869] veth0_vlan: entered promiscuous mode [ 93.440988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.499178][ T5869] veth1_vlan: entered promiscuous mode [ 93.520324][ T5875] veth1_macvtap: entered promiscuous mode [ 93.534372][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.545694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.608217][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.622671][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.631375][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.652899][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.663199][ T5865] veth0_vlan: entered promiscuous mode [ 93.676732][ T5869] veth0_macvtap: entered promiscuous mode [ 93.679252][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.691320][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.708477][ T3496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.728495][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.744536][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.762449][ T5869] veth1_macvtap: entered promiscuous mode [ 93.780397][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.794635][ T5865] veth1_vlan: entered promiscuous mode [ 93.824029][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.853572][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.887210][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.997643][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.006486][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.056070][ T5988] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 94.082291][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.092173][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.135660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.156496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.157337][ T5987] tipc: Started in network mode [ 94.170844][ T5987] tipc: Node identity 921c1eea66d9, cluster identity 4711 [ 94.179898][ T5987] tipc: Enabled bearer , priority 0 [ 94.203583][ T5986] syzkaller0: entered promiscuous mode [ 94.209407][ T5986] syzkaller0: entered allmulticast mode [ 94.242750][ T5865] veth0_macvtap: entered promiscuous mode [ 94.294463][ T5989] tipc: Resetting bearer [ 94.325318][ T5989] tipc: Disabling bearer [ 94.386532][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.388384][ T5865] veth1_macvtap: entered promiscuous mode [ 94.397327][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.533002][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.566344][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.580455][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.587680][ T30] audit: type=1800 audit(1757240287.451:2): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.616087][ T30] audit: type=1800 audit(1757240287.481:3): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.638139][ T30] audit: type=1800 audit(1757240287.481:4): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.673726][ T30] audit: type=1800 audit(1757240287.481:5): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.702540][ T30] audit: type=1800 audit(1757240287.481:6): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.728725][ T30] audit: type=1800 audit(1757240287.481:7): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.750226][ T30] audit: type=1800 audit(1757240287.481:8): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0 [ 94.785497][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.916154][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.934318][ T5182] Bluetooth: hci2: command tx timeout [ 94.934373][ T5877] Bluetooth: hci0: command tx timeout [ 94.939912][ T5182] Bluetooth: hci4: command tx timeout [ 94.951193][ T5868] Bluetooth: hci1: command tx timeout [ 94.958419][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.991054][ T3496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.008541][ T5182] Bluetooth: hci3: command tx timeout [ 95.021803][ T3496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.052761][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.079984][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.378085][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.398685][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.502847][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 95.588043][ T6033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.598146][ T6030] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 95.613344][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.647442][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.792507][ T6033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.347511][ T1005] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 97.210840][ T6080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.395969][ T6079] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 97.543120][ T6086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'. [ 97.552074][ T6086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'. [ 97.798691][ T24] IPVS: starting estimator thread 0... [ 97.810506][ T6097] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 97.922072][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 97.937953][ T6099] IPVS: using max 32 ests per chain, 76800 per kthread [ 98.169770][ T6114] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 98.316104][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.337444][ T6123] netlink: 64 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.355239][ T6114] veth3: entered promiscuous mode [ 98.365073][ T6123] trusted_key: syz.1.35 sent an empty control message without MSG_MORE. [ 98.637138][ T6132] sctp: [Deprecated]: syz.3.38 (pid 6132) Use of int in maxseg socket option. [ 98.637138][ T6132] Use struct sctp_assoc_value instead [ 98.914675][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.973905][ T6147] Zero length message leads to an empty skb [ 99.147321][ T6155] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 99.268973][ T6162] netlink: 844 bytes leftover after parsing attributes in process `syz.1.45'. [ 99.289456][ T6158] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.825878][ T6180] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.48'. [ 99.863022][ T6183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.47'. [ 100.153274][ T6192] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 100.171987][ T6192] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 100.375931][ T6195] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 100.441555][ T6195] macsec1: entered promiscuous mode [ 100.466434][ T6195] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 100.523955][ T6197] netlink: 'syz.4.55': attribute type 22 has an invalid length. [ 100.544605][ T6197] __nla_validate_parse: 2 callbacks suppressed [ 100.544623][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 100.575403][ T6197] netlink: 'syz.4.55': attribute type 22 has an invalid length. [ 100.583416][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 100.588470][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.616994][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.731447][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.746370][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.827302][ T6219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.57'. [ 100.926013][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.944215][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 101.326358][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 102.441423][ T6260] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.64'. [ 102.597856][ T6262] netlink: 'syz.3.64': attribute type 10 has an invalid length. [ 102.607073][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.615769][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.627450][ T6232] syz.2.60: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 102.672282][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: syz.2.60 Not tainted syzkaller #0 PREEMPT(full) [ 102.672312][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.672332][ T6232] Call Trace: [ 102.672340][ T6232] [ 102.672349][ T6232] dump_stack_lvl+0x189/0x250 [ 102.672386][ T6232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.672412][ T6232] ? __pfx__printk+0x10/0x10 [ 102.672441][ T6232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 102.672466][ T6232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 102.672492][ T6232] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 102.672520][ T6232] warn_alloc+0x214/0x310 [ 102.672559][ T6232] ? __pfx_warn_alloc+0x10/0x10 [ 102.672600][ T6232] ? __get_vm_area_node+0x28f/0x300 [ 102.672630][ T6232] ? nf_tables_newset+0x132b/0x2530 [ 102.672661][ T6232] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 102.672725][ T6232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.672761][ T6232] ? rcu_is_watching+0x15/0xb0 [ 102.672783][ T6232] ? nf_tables_newset+0x132b/0x2530 [ 102.672807][ T6232] ? nf_tables_newset+0x132b/0x2530 [ 102.672830][ T6232] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 102.672860][ T6232] ? nf_tables_newset+0x132b/0x2530 [ 102.672886][ T6232] ? nft_table_lookup+0x211/0x230 [ 102.672910][ T6232] ? nft_set_lookup+0x128/0x150 [ 102.672937][ T6232] ? nft_hash_privsize+0xbf/0xf0 [ 102.672963][ T6232] nf_tables_newset+0x132b/0x2530 [ 102.673002][ T6232] ? __pfx_nf_tables_newset+0x10/0x10 [ 102.673051][ T6232] ? __nla_parse+0x40/0x60 [ 102.673076][ T6232] nfnetlink_rcv+0x112f/0x2520 [ 102.673143][ T6232] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 102.673193][ T6232] ? ref_tracker_free+0x63a/0x7d0 [ 102.673265][ T6232] ? __netlink_deliver_tap+0x807/0x850 [ 102.673286][ T6232] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.673328][ T6232] netlink_unicast+0x82f/0x9e0 [ 102.673368][ T6232] ? __pfx_netlink_unicast+0x10/0x10 [ 102.673401][ T6232] ? netlink_sendmsg+0x642/0xb30 [ 102.673419][ T6232] ? skb_put+0x11b/0x210 [ 102.673446][ T6232] netlink_sendmsg+0x805/0xb30 [ 102.673479][ T6232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.673505][ T6232] ? aa_sock_msg_perm+0xf1/0x1d0 [ 102.673527][ T6232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.673550][ T6232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.673573][ T6232] __sock_sendmsg+0x21c/0x270 [ 102.673607][ T6232] ____sys_sendmsg+0x505/0x830 [ 102.673639][ T6232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.673675][ T6232] ? import_iovec+0x74/0xa0 [ 102.673704][ T6232] ___sys_sendmsg+0x21f/0x2a0 [ 102.673732][ T6232] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.673799][ T6232] ? __fget_files+0x2a/0x420 [ 102.673817][ T6232] ? __fget_files+0x3a0/0x420 [ 102.673848][ T6232] __x64_sys_sendmsg+0x19b/0x260 [ 102.673876][ T6232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.673913][ T6232] ? rcu_is_watching+0x15/0xb0 [ 102.673940][ T6232] ? do_syscall_64+0xbe/0x3b0 [ 102.673968][ T6232] do_syscall_64+0xfa/0x3b0 [ 102.673989][ T6232] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.674010][ T6232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.674030][ T6232] ? clear_bhb_loop+0x60/0xb0 [ 102.674056][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.674075][ T6232] RIP: 0033:0x7f967c58ebe9 [ 102.674100][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.674117][ T6232] RSP: 002b:00007f967a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.674139][ T6232] RAX: ffffffffffffffda RBX: 00007f967c7c5fa0 RCX: 00007f967c58ebe9 [ 102.674154][ T6232] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.674166][ T6232] RBP: 00007f967c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.674178][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.674190][ T6232] R13: 00007f967c7c6038 R14: 00007f967c7c5fa0 R15: 00007ffd14b3e678 [ 102.674230][ T6232] [ 102.676517][ T6232] Mem-Info: [ 102.834158][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.857715][ T6232] active_anon:5856 inactive_anon:0 isolated_anon:0 [ 102.857715][ T6232] active_file:2948 inactive_file:39843 isolated_file:0 [ 102.857715][ T6232] unevictable:768 dirty:1613 writeback:0 [ 102.857715][ T6232] slab_reclaimable:10747 slab_unreclaimable:95410 [ 102.857715][ T6232] mapped:31293 shmem:1457 pagetables:1151 [ 102.857715][ T6232] sec_pagetables:0 bounce:0 [ 102.857715][ T6232] kernel_misc_reclaimable:0 [ 102.857715][ T6232] free:1323679 free_pcp:23205 free_cma:0 [ 102.858620][ T6262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.863727][ T6232] Node 0 active_anon:23424kB inactive_anon:0kB active_file:11792kB inactive_file:159172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125172kB dirty:6440kB writeback:0kB shmem:4292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11996kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.869835][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.887677][ T6232] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.888322][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.893861][ T6232] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.915791][ T6262] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.266617][ T6232] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 103.308342][ T6232] Node 0 DMA32 free:1403184kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23296kB inactive_anon:0kB active_file:11792kB inactive_file:157592kB unevictable:1536kB writepending:6432kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:68316kB local_pcp:35212kB free_cma:0kB [ 103.356760][ T6232] lowmem_reserve[]: 0 0 1 1 1 [ 103.380882][ T6232] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 103.505086][ T6232] lowmem_reserve[]: 0 0 0 0 0 [ 103.606200][ T6232] Node 1 Normal free:3876332kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24928kB local_pcp:11424kB free_cma:0kB [ 103.767709][ T6232] lowmem_reserve[]: 0 0 0 0 0 [ 103.790342][ T6232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.879662][ T6232] Node 0 DMA32: 211*4kB (UME) 374*8kB (UME) 79*16kB (UM) 61*32kB (UME) 24*64kB (UME) 19*128kB (UME) 13*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (M) 336*4096kB (M) = 1403916kB [ 103.987749][ T6232] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 104.024471][ T6232] Node 1 Normal: 207*4kB (UME) 64*8kB (UME) 39*16kB (UME) 62*32kB (UME) 22*64kB (UME) 6*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 943*4096kB (M) = 3876332kB [ 104.158329][ T6232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.189823][ T6232] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.258785][ T6232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.280990][ T6282] syz.4.73 uses old SIOCAX25GETINFO [ 104.307653][ T6232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.354486][ T6232] 44246 total pagecache pages [ 104.362680][ T6232] 0 pages in swap cache [ 104.377310][ T6232] Free swap = 124996kB [ 104.386897][ T6232] Total swap = 124996kB [ 104.406096][ T6232] 2097051 pages RAM [ 104.437795][ T6232] 0 pages HighMem/MovableOnly [ 104.442555][ T6232] 425673 pages reserved [ 104.448742][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 104.484537][ T6232] 0 pages cma reserved [ 104.532883][ T6289] netlink: 112 bytes leftover after parsing attributes in process `syz.4.77'. [ 104.810375][ T6299] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 105.178224][ T6313] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 105.300017][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'. [ 105.458052][ T6324] tipc: Started in network mode [ 105.498794][ T6331] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 105.525454][ T6324] tipc: Node identity , cluster identity 4711 [ 105.550612][ T6324] tipc: Failed to obtain node identity [ 105.576546][ T6324] tipc: Enabling of bearer rejected, failed to enable media [ 105.644265][ T6328] syzkaller0: entered promiscuous mode [ 105.663984][ T6328] syzkaller0: entered allmulticast mode [ 105.927508][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 106.010418][ T6353] tun0: tun_chr_ioctl cmd 1074025675 [ 106.054599][ T6353] tun0: persist enabled [ 106.158401][ T6358] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 106.193862][ T6353] IPVS: persistence engine module ip_vs_pe_ not found [ 106.224113][ T6345] tun0: tun_chr_ioctl cmd 1074025675 [ 106.243434][ T6345] tun0: persist enabled [ 106.267419][ T5232] udevd[5232]: worker [6261] terminated by signal 33 (Unknown signal 33) [ 106.694794][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 106.813141][ T6404] netlink: 104 bytes leftover after parsing attributes in process `syz.2.105'. [ 106.943433][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 106.955735][ T6411] bond1: (slave ip6gretap1): making interface the new active one [ 106.966170][ T6411] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.358087][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.113'. [ 107.482971][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 107.491390][ T6446] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 107.504487][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 107.580001][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 107.626194][ T6453] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 107.642583][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 107.900528][ T6469] netlink: 'syz.2.125': attribute type 3 has an invalid length. [ 107.924226][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 108.238905][ T6481] IPVS: persistence engine module ip_vs_pe_ not found [ 108.504443][ T6507] netlink: 'syz.1.137': attribute type 13 has an invalid length. [ 108.512780][ T6507] netlink: 'syz.1.137': attribute type 17 has an invalid length. [ 108.590337][ T6507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.128095][ T6537] netlink: 'syz.4.144': attribute type 322 has an invalid length. [ 109.166940][ T6540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 109.400890][ T6546] vlan2: entered promiscuous mode [ 109.428570][ T6546] bridge0: entered promiscuous mode [ 110.620544][ T6592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.628164][ T6592] IPv6: NLM_F_CREATE should be set when creating new route [ 110.635492][ T6592] IPv6: NLM_F_CREATE should be set when creating new route [ 110.642794][ T6592] IPv6: NLM_F_CREATE should be set when creating new route [ 110.669942][ T6582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.730054][ T6593] warning: `syz.1.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.865370][ T6582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.124812][ T6582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.177136][ T6617] __nla_validate_parse: 11 callbacks suppressed [ 111.177158][ T6617] netlink: 3 bytes leftover after parsing attributes in process `syz.4.167'. [ 111.197134][ T6605] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 111.212547][ T6608] bridge0: port 3(syz_tun) entered blocking state [ 111.225158][ T6608] bridge0: port 3(syz_tun) entered disabled state [ 111.227314][ T6605] netlink: 'syz.1.164': attribute type 10 has an invalid length. [ 111.241780][ T6608] syz_tun: entered allmulticast mode [ 111.254072][ T6608] syz_tun: entered promiscuous mode [ 111.260663][ T6608] bridge0: port 3(syz_tun) entered blocking state [ 111.267783][ T6608] bridge0: port 3(syz_tun) entered forwarding state [ 111.269511][ T6620] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.288099][ T5939] IPVS: starting estimator thread 0... [ 111.299019][ T6617] batadv1: entered promiscuous mode [ 111.305683][ T6617] batadv1: entered allmulticast mode [ 111.329984][ T6618] netlink: 'syz.3.166': attribute type 5 has an invalid length. [ 111.377933][ T6621] IPVS: using max 24 ests per chain, 57600 per kthread [ 111.401196][ T6582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.433574][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.459505][ T6605] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.594647][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 111.603775][ T6625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.168'. [ 111.623859][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 111.706951][ T1161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.752379][ T1161] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.832793][ T1161] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.856118][ T1161] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.899179][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'. [ 112.040724][ T6650] Illegal XDP return value 312150351 on prog (id 71) dev N/A, expect packet loss! [ 112.088805][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 112.872373][ T6679] Bluetooth: MGMT ver 1.23 [ 112.892347][ T6678] vlan3: entered promiscuous mode [ 112.921585][ T6678] vlan3: entered allmulticast mode [ 112.941567][ T6678] hsr_slave_1: entered allmulticast mode [ 113.037459][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 113.680886][ T6701] bond1 (unregistering): Released all slaves [ 113.723622][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'. [ 113.938184][ T6730] netlink: 56 bytes leftover after parsing attributes in process `syz.0.195'. [ 114.677730][ T6742] infiniband !yz!: set active [ 114.682713][ T6742] infiniband !yz!: added team_slave_0 [ 114.769317][ T6742] RDS/IB: !yz!: added [ 114.774125][ T6742] smc: adding ib device !yz! with port count 1 [ 114.780719][ T6742] smc: ib device !yz! port 1 has no pnetid [ 118.353364][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 118.570190][ T6786] tipc: Started in network mode [ 118.575475][ T6786] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 118.629540][ T6786] tipc: Enabling of bearer rejected, failed to enable media [ 119.803112][ T6842] netlink: 'syz.4.226': attribute type 10 has an invalid length. [ 119.827967][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.226'. [ 119.897436][ T6842] team0: Port device geneve0 added [ 120.099688][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 121.143918][ T6884] tipc: Started in network mode [ 121.149066][ T6884] tipc: Node identity , cluster identity 4711 [ 121.165534][ T6884] tipc: Failed to obtain node identity [ 121.175694][ T6884] tipc: Enabling of bearer rejected, failed to enable media [ 121.292574][ T6886] syzkaller0: entered promiscuous mode [ 121.298410][ T6886] syzkaller0: entered allmulticast mode [ 121.323381][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.994394][ T6904] tipc: Enabling of bearer rejected, failed to enable media [ 123.026388][ T6905] syz_tun: entered allmulticast mode [ 123.085784][ T6906] dvmrp1: entered allmulticast mode [ 123.130829][ T6905] syz_tun: left allmulticast mode [ 123.541803][ T6941] geneve0: entered allmulticast mode [ 123.728098][ T6954] sctp: [Deprecated]: syz.2.265 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.728098][ T6954] Use struct sctp_sack_info instead [ 123.796589][ T6956] netlink: 224 bytes leftover after parsing attributes in process `syz.1.269'. [ 123.867502][ T6961] tipc: Enabling of bearer rejected, failed to enable media [ 124.336053][ T6975] ip6gre0: Master is either lo or non-ether device [ 124.599325][ T6989] macvtap1: entered allmulticast mode [ 124.605117][ T6989] veth0_macvtap: entered allmulticast mode [ 124.617974][ T6983] netlink: 'syz.4.276': attribute type 2 has an invalid length. [ 124.684320][ T6983] þ: entered promiscuous mode [ 124.898820][ T6996] netlink: 100 bytes leftover after parsing attributes in process `syz.0.280'. [ 124.908892][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'. [ 124.921810][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'. [ 125.041297][ T7006] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 125.092151][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.283'. [ 125.191674][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 125.244622][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.252091][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.427456][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.449264][ T7004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.662138][ T7004] veth0_macvtap: left allmulticast mode [ 125.676153][ T7004] macvtap1: left allmulticast mode [ 125.684880][ T7006] dummy0: entered promiscuous mode [ 125.692306][ T7006] bridge0: port 4(dummy0) entered blocking state [ 125.699108][ T7006] bridge0: port 4(dummy0) entered disabled state [ 125.705671][ T7006] dummy0: entered allmulticast mode [ 125.714718][ T7006] bridge0: port 4(dummy0) entered blocking state [ 125.721921][ T7006] bridge0: port 4(dummy0) entered forwarding state [ 125.766753][ T7018] netlink: 'syz.0.285': attribute type 282 has an invalid length. [ 125.802143][ T7021] tipc: Started in network mode [ 125.837064][ T7021] tipc: Node identity 5a8fb8e99886, cluster identity 4711 [ 125.877309][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 125.881966][ T7021] tipc: Enabled bearer , priority 0 [ 125.907446][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.922507][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.938960][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 125.963645][ T7021] tipc: Resetting bearer [ 126.003992][ T7044] veth1_macvtap: left promiscuous mode [ 126.092400][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.107404][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.140968][ T7013] tipc: Disabling bearer [ 126.464473][ T7071] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 126.477825][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 126.495477][ T7071] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 126.497430][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 126.515924][ T7071] dummy0: entered promiscuous mode [ 126.523279][ T7071] bridge0: port 3(dummy0) entered blocking state [ 126.533579][ T7061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.542498][ T7071] bridge0: port 3(dummy0) entered disabled state [ 126.562045][ T7071] dummy0: entered allmulticast mode [ 126.587056][ T7071] bridge0: port 3(dummy0) entered blocking state [ 126.593672][ T7071] bridge0: port 3(dummy0) entered forwarding state [ 127.134184][ T7108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.160964][ T7108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.297399][ T7118] syzkaller1: entered promiscuous mode [ 127.318612][ T7118] syzkaller1: entered allmulticast mode [ 128.442282][ T7149] netlink: 'syz.3.315': attribute type 13 has an invalid length. [ 129.584333][ T7193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.707955][ T7198] __nla_validate_parse: 10 callbacks suppressed [ 129.707978][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 129.880797][ T7203] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.924006][ T7209] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 129.932294][ T7209] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 129.945851][ T7209] netlink: 160 bytes leftover after parsing attributes in process `syz.0.333'. [ 129.955797][ T7209] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 129.963784][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 130.000756][ T7203] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.075365][ T7203] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.158602][ T7203] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.323073][ T1161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.360388][ T1005] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.511275][ T7227] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 130.551622][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.597924][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.745331][ T7237] 8021q: VLANs not supported on wg0 [ 130.854884][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 130.866756][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 130.876200][ T7239] netlink: 'syz.2.341': attribute type 15 has an invalid length. [ 130.926367][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 130.958313][ T3496] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.966740][ T3496] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.975165][ T3496] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.984015][ T3496] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.992337][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 131.001510][ T7239] netlink: 'syz.2.341': attribute type 15 has an invalid length. [ 131.222716][ T7247] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.344'. [ 131.246285][ T7247] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.344'. [ 131.254151][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 131.266695][ T7249] netlink: 'syz.1.343': attribute type 6 has an invalid length. [ 131.576211][ T7263] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 131.584475][ T7263] netlink: 'syz.2.346': attribute type 2 has an invalid length. [ 131.751609][ T7271] netlink: zone id is out of range [ 132.123483][ T7282] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.254167][ T7288] netlink: 'syz.1.355': attribute type 7 has an invalid length. [ 132.456486][ T7298] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 132.544055][ T7301] netlink: 'syz.3.359': attribute type 8 has an invalid length. [ 132.832167][ T7307] bridge0: port 3(syz_tun) entered disabled state [ 132.849526][ T7307] bridge0: port 4(dummy0) entered disabled state [ 132.856186][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.864035][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.185590][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.220327][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.377429][ T7336] vlan0: entered promiscuous mode [ 133.411300][ T1161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.459006][ T1161] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.525573][ T1161] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.550904][ T7355] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 133.566426][ T1161] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.601187][ T7355] team0: Device bond0 is already an upper device of the team interface [ 133.662321][ T7359] ip6gretap1: entered allmulticast mode [ 133.872820][ T7378] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 133.966791][ T7378] bond2: entered promiscuous mode [ 133.988046][ T7378] bond2: entered allmulticast mode [ 134.023272][ T7385] pimreg: entered allmulticast mode [ 134.064306][ T7386] bridge1: entered promiscuous mode [ 134.070333][ T7386] bridge1: entered allmulticast mode [ 134.080761][ T7386] bond2: (slave bridge1): making interface the new active one [ 134.091032][ T7386] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 134.114228][ T7380] pimreg: left allmulticast mode [ 134.740125][ T7419] netlink: 'syz.3.388': attribute type 5 has an invalid length. [ 134.826328][ T7424] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 134.977493][ T7419] syzkaller0: entered promiscuous mode [ 134.983366][ T7419] syzkaller0: entered allmulticast mode [ 135.111806][ T7430] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 135.285102][ T7450] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.313355][ T7450] __nla_validate_parse: 11 callbacks suppressed [ 135.313376][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 135.453623][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 136.624978][ T7443] geneve2: entered promiscuous mode [ 136.640781][ T7443] geneve2: entered allmulticast mode [ 136.713693][ T7454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.398'. [ 136.723274][ T7461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.730568][ T7461] IPv6: NLM_F_CREATE should be set when creating new route [ 136.755102][ T7457] tap0: tun_chr_ioctl cmd 1074025677 [ 136.760757][ T7457] tap0: linktype set to 774 [ 136.862218][ T7462] lo: entered allmulticast mode [ 136.903782][ T7462] tunl0: entered allmulticast mode [ 136.973198][ T7462] gre0: entered allmulticast mode [ 137.033187][ T7462] gretap0: entered allmulticast mode [ 137.075638][ T7462] erspan0: entered allmulticast mode [ 137.092570][ T7462] ip_vti0: entered allmulticast mode [ 137.119015][ T7475] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 137.119567][ T7462] ip6_vti0: entered allmulticast mode [ 137.140935][ T7475] netlink: 'syz.1.401': attribute type 2 has an invalid length. [ 137.164656][ T7462] sit0: entered allmulticast mode [ 137.179027][ T7462] ip6tnl0: entered allmulticast mode [ 137.208171][ T7462] ip6gre0: entered allmulticast mode [ 137.232818][ T7462] syz_tun: entered allmulticast mode [ 137.268800][ T7462] ip6gretap0: entered allmulticast mode [ 137.288589][ T7462] bridge0: port 3(dummy0) entered disabled state [ 137.295288][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.303009][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.311518][ T7462] bridge0: entered allmulticast mode [ 137.334829][ T7462] vcan0: entered allmulticast mode [ 137.352036][ T7462] bond0: entered allmulticast mode [ 137.357244][ T7462] bond_slave_0: entered allmulticast mode [ 137.365826][ T7462] bond_slave_1: entered allmulticast mode [ 137.382685][ T7462] team0: entered allmulticast mode [ 137.388235][ T7462] team_slave_0: entered allmulticast mode [ 137.399175][ T7462] team_slave_1: entered allmulticast mode [ 137.487515][ T7462] nlmon0: entered allmulticast mode [ 137.495807][ T7462] caif0: entered allmulticast mode [ 137.502173][ T7462] batadv0: entered allmulticast mode [ 137.512491][ T7462] vxcan0: entered allmulticast mode [ 137.521641][ T7462] vxcan1: entered allmulticast mode [ 137.528987][ T7462] veth0: entered allmulticast mode [ 137.571016][ T7462] veth1: entered allmulticast mode [ 137.598494][ T7462] wg0: entered allmulticast mode [ 137.668889][ T7462] wg1: entered allmulticast mode [ 137.688186][ T7462] wg2: entered allmulticast mode [ 137.702121][ T7462] veth0_to_bridge: entered allmulticast mode [ 137.724820][ T7462] veth1_to_bridge: entered allmulticast mode [ 137.750527][ T7462] veth0_to_bond: entered allmulticast mode [ 137.766352][ T7462] veth1_to_bond: entered allmulticast mode [ 137.790291][ T7462] veth0_to_team: entered allmulticast mode [ 137.830227][ T7462] veth1_to_team: entered allmulticast mode [ 137.866849][ T7462] veth0_to_batadv: entered allmulticast mode [ 137.898345][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.906464][ T7462] batadv_slave_0: entered allmulticast mode [ 137.960892][ T7462] veth1_to_batadv: entered allmulticast mode [ 137.971804][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.983871][ T7462] batadv_slave_1: entered allmulticast mode [ 137.998291][ T7462] xfrm0: entered allmulticast mode [ 138.065169][ T7462] veth0_to_hsr: entered allmulticast mode [ 138.083516][ T7462] hsr_slave_0: entered allmulticast mode [ 138.102109][ T7462] veth1_to_hsr: entered allmulticast mode [ 138.111571][ T7462] hsr_slave_1: entered allmulticast mode [ 138.121992][ T7462] hsr0: entered allmulticast mode [ 138.131260][ T7462] veth1_virt_wifi: entered allmulticast mode [ 138.144502][ T7462] veth0_virt_wifi: entered allmulticast mode [ 138.160462][ T7462] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 138.172308][ T7462] veth1_vlan: entered allmulticast mode [ 138.189389][ T7462] veth0_vlan: entered allmulticast mode [ 138.211415][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.218359][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.240713][ T7462] vlan0: entered allmulticast mode [ 138.246201][ T7462] vlan1: entered allmulticast mode [ 138.252563][ T7462] macvlan0: entered allmulticast mode [ 138.267928][ T7462] macvlan1: entered allmulticast mode [ 138.282393][ T7462] ipvlan0: entered allmulticast mode [ 138.288682][ T7462] ipvlan1: entered allmulticast mode [ 138.295061][ T7462] veth1_macvtap: entered allmulticast mode [ 138.305387][ T7462] veth0_macvtap: entered allmulticast mode [ 138.319986][ T7462] macvtap0: entered allmulticast mode [ 138.332554][ T7462] macsec0: entered allmulticast mode [ 138.344428][ T7462] geneve0: entered allmulticast mode [ 138.360208][ T7462] geneve1: entered allmulticast mode [ 138.383551][ T7462] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 138.403695][ T7462] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 138.422057][ T7462] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 138.474451][ T7462] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 138.495257][ T7462] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 138.521724][ T7462] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 138.540524][ T7462] syztnl0: entered allmulticast mode [ 138.546093][ T7462] erspan0.1: entered allmulticast mode [ 138.553769][ T7462] syztnl2: entered allmulticast mode [ 138.662584][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.692666][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.741549][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.761628][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.970765][ T7505] netlink: 'syz.1.406': attribute type 21 has an invalid length. [ 138.984539][ T7508] dummy0: left promiscuous mode [ 138.989868][ T7508] bridge0: port 3(dummy0) entered disabled state [ 139.006948][ T7508] bridge_slave_0: left promiscuous mode [ 139.022218][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.049588][ T7508] bridge_slave_1: left promiscuous mode [ 139.073744][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.122052][ T7508] bond0: (slave bond_slave_0): Releasing backup interface [ 139.146595][ T7508] bond0: (slave bond_slave_1): Releasing backup interface [ 139.182366][ T7508] team0: Port device team_slave_0 removed [ 139.193583][ T7508] team0: Port device team_slave_1 removed [ 139.203940][ T7508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.214272][ T7508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.675519][ T7526] team0: Mode changed to "broadcast" [ 139.688696][ T7531] tipc: Enabled bearer , priority 0 [ 139.711235][ T7523] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 139.727933][ T7523] netlink: 'syz.0.411': attribute type 2 has an invalid length. [ 139.760178][ T7528] vlan0: entered promiscuous mode [ 139.767090][ T7528] vlan0: left allmulticast mode [ 140.072322][ T30] audit: type=1800 audit(1757240332.941:9): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="memory.events" dev="tmpfs" ino=482 res=0 errno=0 [ 140.190582][ T7544] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 140.204649][ T7544] netlink: 224 bytes leftover after parsing attributes in process `syz.2.415'. [ 140.555693][ T7550] syzkaller0: entered promiscuous mode [ 140.595804][ T7550] syzkaller0: entered allmulticast mode [ 140.760648][ T7553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.780312][ T7553] bond0: (slave bond3): Enslaving as an active interface with an up link [ 140.811178][ T7491] tipc: Node number set to 3255417065 [ 140.977849][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.420'. [ 141.002782][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 141.017790][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 141.193559][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 141.330614][ T7584] @ÿ: renamed from veth0_vlan (while UP) [ 141.469042][ T7587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.428'. [ 141.602182][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 141.697648][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 141.786648][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 141.796908][ T7608] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.433'. [ 141.814560][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 142.070067][ T7621] syz_tun: mtu less than device minimum [ 142.696121][ T7648] ªªªªªª: renamed from wg2 (while UP) [ 142.849809][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 143.073829][ T7656] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 143.090016][ T7656] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 143.951928][ T7692] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 144.130637][ T7697] sctp: [Deprecated]: syz.1.457 (pid 7697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.130637][ T7697] Use struct sctp_sack_info instead [ 144.675207][ T7718] geneve2: entered promiscuous mode [ 145.022583][ T7722] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 145.378938][ T7747] tipc: Enabling not permitted [ 145.387148][ T7747] tipc: Enabling of bearer rejected, failed to enable media [ 146.662988][ T7775] netlink: 'syz.3.476': attribute type 4 has an invalid length. [ 146.770670][ T7777] __nla_validate_parse: 5 callbacks suppressed [ 146.770693][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 146.887687][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 146.887949][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 147.016907][ T7796] netlink: 3 bytes leftover after parsing attributes in process `syz.2.484'. [ 147.049688][ T7796] 0ªX¹¦À: renamed from caif0 [ 147.088457][ T7796] 0ªX¹¦À: entered allmulticast mode [ 147.100531][ T7796] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 147.144004][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 148.103678][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 148.182668][ T7815] netlink: 76 bytes leftover after parsing attributes in process `syz.2.489'. [ 148.206214][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'. [ 148.423041][ T7836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 148.515646][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 148.817327][ T7860] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 149.502070][ T7885] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.510994][ T7885] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.035362][ T7955] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 151.118271][ T7955] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.189253][ T7959] tipc: Enabling of bearer rejected, failed to enable media [ 151.376804][ T7969] bond_slave_0: entered promiscuous mode [ 151.382844][ T7969] bond_slave_1: entered promiscuous mode [ 151.388659][ T7969] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 151.424152][ T7969] macvlan3: entered promiscuous mode [ 151.434593][ T7969] bond0: entered promiscuous mode [ 151.440713][ T7969] bond3: entered promiscuous mode [ 151.456559][ T7969] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.528571][ T7978] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 151.631779][ T7985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.661547][ T7985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.883873][ T8011] __nla_validate_parse: 10 callbacks suppressed [ 151.883898][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 152.808855][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 152.862468][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 152.903861][ T8042] netlink: 'syz.1.542': attribute type 20 has an invalid length. [ 152.977011][ T8047] can: request_module (can-proto-0) failed. [ 152.996741][ T8049] openvswitch: netlink: IP tunnel dst address not specified [ 153.203917][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 153.296060][ T8059] netlink: 14 bytes leftover after parsing attributes in process `syz.3.544'. [ 153.571011][ T8059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.590003][ T8059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.620052][ T8059] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 153.641962][ T8059] bond0 (unregistering): Released all slaves [ 154.017033][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 154.054539][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.553'. [ 154.414819][ T8110] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.557'. [ 154.976312][ T8122] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 154.996138][ T8122] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 155.278824][ T8132] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 155.433950][ T8132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.751363][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 155.774192][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 156.895799][ T8186] netlink: 'syz.2.576': attribute type 8 has an invalid length. [ 158.253333][ T8182] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 158.459992][ T8209] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 158.680086][ T8212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.773690][ T8217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.880720][ T8217] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 159.083700][ T8234] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 159.137928][ T8234] __nla_validate_parse: 2 callbacks suppressed [ 159.137949][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 159.211071][ T8236] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 159.234481][ T8236] syzkaller1: linktype set to 823 [ 159.249410][ T8235] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 159.261250][ T8235] syzkaller1: linktype set to 823 [ 159.484747][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 159.614924][ T8257] 8021q: VLANs not supported on tunl0 [ 160.769368][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.777202][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.895211][ T8310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.601'. [ 160.918359][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.601'. [ 161.041805][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.060053][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.231283][ T8296] bond0: left promiscuous mode [ 161.236119][ T8296] bond_slave_0: left promiscuous mode [ 161.242060][ T8296] bond_slave_1: left promiscuous mode [ 161.248880][ T8296] bond3: left promiscuous mode [ 161.253869][ T8296] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 161.271232][ T8304] tipc: Enabling of bearer rejected, failed to enable media [ 161.339507][ T37] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.372805][ T37] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.399966][ T37] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.421470][ T37] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.459172][ T37] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.479627][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.512598][ T37] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.546645][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.585371][ T8328] syz_tun: entered allmulticast mode [ 161.604763][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 161.635121][ T8335] netlink: 'syz.0.607': attribute type 6 has an invalid length. [ 161.650095][ T8328] dvmrp8: entered allmulticast mode [ 161.663526][ T8328] syz_tun: left allmulticast mode [ 161.674591][ T8328] dvmrp8: left allmulticast mode [ 161.756602][ T8337] netlink: 'syz.2.606': attribute type 23 has an invalid length. [ 161.903746][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 161.940195][ T8345] netlink: 56 bytes leftover after parsing attributes in process `syz.4.610'. [ 161.989970][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.610'. [ 162.001979][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 162.007342][ T8345] netlink: 56 bytes leftover after parsing attributes in process `syz.4.610'. [ 162.154657][ T8354] netlink: 'syz.0.613': attribute type 32 has an invalid length. [ 162.185169][ T8355] netlink: 'syz.4.612': attribute type 2 has an invalid length. [ 162.202386][ T8354] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.312174][ T7491] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 162.355862][ T7491] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 162.446886][ T8362] syzkaller0: entered promiscuous mode [ 162.463223][ T8362] syzkaller0: entered allmulticast mode [ 163.149569][ T8381] netlink: zone id is out of range [ 163.165209][ T8381] netlink: zone id is out of range [ 163.172847][ T8381] netlink: zone id is out of range [ 163.179365][ T8381] netlink: zone id is out of range [ 163.184613][ T8381] netlink: zone id is out of range [ 163.190202][ T8381] netlink: zone id is out of range [ 163.196504][ T8381] netlink: zone id is out of range [ 163.218541][ T8381] netlink: zone id is out of range [ 163.223724][ T8381] netlink: zone id is out of range [ 163.230914][ T8381] netlink: zone id is out of range [ 163.420486][ T8384] netlink: 'syz.4.623': attribute type 7 has an invalid length. [ 163.429146][ T8384] netlink: 'syz.4.623': attribute type 8 has an invalid length. [ 163.876054][ T8410] bond1 (unregistering): Released all slaves [ 163.997195][ T8418] batadv_slave_1: entered promiscuous mode [ 164.019730][ T8423] dummy0: left allmulticast mode [ 164.044804][ T8423] bridge0: port 4(dummy0) entered disabled state [ 164.067332][ T8423] syz_tun: left allmulticast mode [ 164.074428][ T8423] syz_tun: left promiscuous mode [ 164.082326][ T8423] bridge0: port 3(syz_tun) entered disabled state [ 164.093822][ T8423] bridge_slave_1: left allmulticast mode [ 164.103358][ T8423] bridge_slave_1: left promiscuous mode [ 164.111985][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.126760][ T8423] bridge_slave_0: left allmulticast mode [ 164.147789][ T8423] bridge_slave_0: left promiscuous mode [ 164.164014][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.168481][ T8433] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 164.321373][ T8413] smc: net device bond0 applied user defined pnetid SYZ [ 164.487126][ T8433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.523138][ T8444] __nla_validate_parse: 12 callbacks suppressed [ 164.523158][ T8444] netlink: 88 bytes leftover after parsing attributes in process `syz.2.641'. [ 164.560731][ T8451] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 164.582531][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 164.615186][ T8442] netlink: 96 bytes leftover after parsing attributes in process `syz.4.639'. [ 164.689664][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 164.702451][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'. [ 164.736814][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'. [ 164.756291][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 164.830151][ T8417] batadv_slave_1: left promiscuous mode [ 164.947478][ T8469] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 165.162236][ T8469] netlink: 156 bytes leftover after parsing attributes in process `syz.4.646'. [ 165.805324][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 166.835646][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 167.185998][ T8526] netlink: 'syz.2.662': attribute type 13 has an invalid length. [ 167.199982][ T8526] netlink: 'syz.2.662': attribute type 17 has an invalid length. [ 167.270465][ T8528] netlink: 'syz.4.663': attribute type 2 has an invalid length. [ 167.305523][ T8528] netlink: 'syz.4.663': attribute type 7 has an invalid length. [ 167.353736][ T8530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.420653][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.441164][ T8526] 0ªX¹¦À: left allmulticast mode [ 167.474651][ T8528] : entered promiscuous mode [ 168.071280][ T8545] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 168.156491][ T8545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.367285][ T8547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.379373][ T8547] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.403339][ T8547] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 168.622145][ T8545] veth7: entered promiscuous mode [ 168.634890][ T8545] bond3: (slave veth7): Enslaving as an active interface with a down link [ 168.860367][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.868562][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.266059][ T8579] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 169.299230][ T8579] bond0: Device is already in use. [ 169.748750][ T8583] __nla_validate_parse: 3 callbacks suppressed [ 169.748772][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 169.797830][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 170.038001][ T8589] net_ratelimit: 28 callbacks suppressed [ 170.038022][ T8589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.572114][ T8452] Set syz1 is full, maxelem 65536 reached [ 170.684324][ T8613] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 170.695354][ T8613] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 170.718480][ T8611] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 170.730511][ T9] IPVS: starting estimator thread 0... [ 170.818325][ T8617] IPVS: using max 24 ests per chain, 57600 per kthread [ 171.699863][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 171.740920][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 171.754711][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 171.783188][ T8663] bridge0: entered promiscuous mode [ 171.789344][ T8663] macsec0: entered promiscuous mode [ 171.794776][ T8663] macsec0: entered allmulticast mode [ 171.800253][ T8663] bridge0: entered allmulticast mode [ 172.033967][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 172.046414][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 172.062211][ T8669] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 172.074904][ T8669] netlink: 224 bytes leftover after parsing attributes in process `syz.4.695'. [ 172.288511][ T8683] netlink: 'syz.2.703': attribute type 15 has an invalid length. [ 172.296444][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 172.732869][ T8698] tipc: Started in network mode [ 172.739825][ T8698] tipc: Node identity 06a182a8e19b, cluster identity 4711 [ 172.747256][ T8698] tipc: Enabled bearer , priority 0 [ 172.762125][ T8698] tipc: Resetting bearer [ 172.844271][ T8698] tipc: Disabling bearer [ 173.087471][ T8723] nbd: couldn't find device at index 536870912 [ 173.250924][ T8739] netlink: 3 bytes leftover after parsing attributes in process `syz.1.716'. [ 173.291360][ T8741] netlink: 'syz.4.720': attribute type 10 has an invalid length. [ 173.396824][ T8752] netlink: 'syz.0.722': attribute type 3 has an invalid length. [ 173.403772][ T8739] 0ªX¹¦À: renamed from caif0 [ 173.438537][ T8739] 0ªX¹¦À: entered allmulticast mode [ 173.460287][ T8739] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 173.718756][ T8762] tipc: Enabled bearer , priority 0 [ 173.732781][ T8762] syzkaller0: entered promiscuous mode [ 173.738735][ T8762] syzkaller0: entered allmulticast mode [ 173.765414][ T8762] tipc: Resetting bearer [ 173.834155][ T8762] tipc: Resetting bearer [ 173.869602][ T8762] tipc: Disabling bearer [ 174.182146][ T8776] dummy0: left promiscuous mode [ 174.202647][ T8776] 0ªX¹¦À: left allmulticast mode [ 174.226283][ T8776] geneve0: left allmulticast mode [ 174.331954][ T8776] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 174.440968][ T8776] veth7: left promiscuous mode [ 174.475075][ T8776] bridge0: left allmulticast mode [ 174.494247][ T8776] macsec0: left promiscuous mode [ 174.506784][ T8776] macsec0: left allmulticast mode [ 174.657869][ T8790] tipc: Enabled bearer , priority 0 [ 174.664709][ T8794] bridge_slave_1: left allmulticast mode [ 174.670987][ T8794] bridge_slave_1: left promiscuous mode [ 174.676960][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.703115][ T8794] bridge_slave_0: left allmulticast mode [ 174.734752][ T8794] bridge_slave_0: left promiscuous mode [ 174.768782][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.781926][ T8808] __nla_validate_parse: 2 callbacks suppressed [ 174.781947][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.736'. [ 175.034439][ T8793] syzkaller0: entered promiscuous mode [ 175.040411][ T8793] syzkaller0: entered allmulticast mode [ 175.126502][ T8813] tipc: Resetting bearer [ 175.164461][ T8789] tipc: Resetting bearer [ 175.208394][ T8789] tipc: Disabling bearer [ 175.396056][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 175.431248][ T8837] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 175.441642][ T8837] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 175.650257][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 175.937791][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 175.991374][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 176.035859][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 176.074261][ T8865] netlink: 'syz.0.757': attribute type 15 has an invalid length. [ 176.467253][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.759'. [ 176.717115][ T8863] bridge_slave_1: left allmulticast mode [ 176.725659][ T8863] bridge_slave_1: left promiscuous mode [ 176.732358][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.752069][ T8863] bridge_slave_0: left allmulticast mode [ 176.758647][ T8863] bridge_slave_0: left promiscuous mode [ 176.764846][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.835493][ T8894] netlink: 68 bytes leftover after parsing attributes in process `syz.4.760'. [ 176.946822][ T8870] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 177.160542][ T8898] tipc: Failed to remove unknown binding: 66,1,1/0:361372685/361372687 [ 177.274731][ T8903] tipc: Failed to remove unknown binding: 66,1,1/0:361372685/361372687 [ 177.318837][ T8903] tipc: Failed to remove unknown binding: 66,1,1/0:361372685/361372687 [ 177.599570][ T8915] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 178.957208][ T8954] !: renamed from dummy0 [ 179.754289][ T8972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.808467][ T8971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.986134][ T8980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.775'. [ 182.037215][ T9022] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 182.669820][ T9043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.586875][ T9072] lo: left allmulticast mode [ 184.266102][ T9086] netlink: 'syz.0.793': attribute type 6 has an invalid length. [ 184.360192][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 184.482795][ T9090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.795'. [ 184.500762][ T9090] netlink: 34 bytes leftover after parsing attributes in process `syz.4.795'. [ 185.257458][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.284908][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.328598][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.400877][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.438024][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.464778][ T9141] netlink: 'syz.0.804': attribute type 21 has an invalid length. [ 185.479354][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.501382][ T9137] wireguard0: entered promiscuous mode [ 185.515908][ T9142] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.806'. [ 185.517481][ T9141] netlink: 128 bytes leftover after parsing attributes in process `syz.0.804'. [ 185.532458][ T9137] wireguard0: entered allmulticast mode [ 185.548262][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.581728][ T9142] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 185.610981][ T9141] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 185.629601][ T9142] openvswitch: netlink: Message has 1 unknown bytes. [ 185.630022][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.651666][ T9143] netlink: 'syz.3.806': attribute type 20 has an invalid length. [ 185.659543][ T9143] netlink: 'syz.3.806': attribute type 21 has an invalid length. [ 185.684608][ T9141] netlink: 'syz.0.804': attribute type 5 has an invalid length. [ 185.930138][ T9154] erspan0: entered promiscuous mode [ 186.922635][ T9187] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.976105][ T9191] tipc: Enabled bearer , priority 0 [ 187.004982][ T9191] syzkaller0: entered promiscuous mode [ 187.025560][ T9191] syzkaller0: entered allmulticast mode [ 187.086541][ T9191] tipc: Resetting bearer [ 187.200052][ T9190] tipc: Resetting bearer [ 187.289338][ T9190] tipc: Disabling bearer [ 187.990225][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 188.190138][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.281252][ T9232] ieee802154 phy0 wpan0: encryption failed: -90 [ 188.701549][ T9252] vlan2: entered promiscuous mode [ 188.707182][ T9252] macvtap0: entered promiscuous mode [ 188.807319][ T9260] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 190.041964][ T9289] geneve2: entered promiscuous mode [ 190.748399][ T9297] __nla_validate_parse: 41 callbacks suppressed [ 190.748419][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.847'. [ 190.983948][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'. [ 191.151784][ T9304] bond0: entered promiscuous mode [ 191.156882][ T9304] bond_slave_0: entered promiscuous mode [ 191.166822][ T9304] bond_slave_1: entered promiscuous mode [ 191.206903][ T9304] bond0: left promiscuous mode [ 191.215349][ T9304] bond_slave_0: left promiscuous mode [ 191.234397][ T9304] bond_slave_1: left promiscuous mode [ 191.382893][ T9311] netlink: 256 bytes leftover after parsing attributes in process `syz.4.851'. [ 191.716650][ T9319] netlink: 460 bytes leftover after parsing attributes in process `syz.4.854'. [ 192.344542][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 192.534205][ T30] audit: type=1800 audit(1757240385.381:10): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.861" name="memory.events" dev="tmpfs" ino=867 res=0 errno=0 [ 192.655105][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 192.822032][ T9363] vlan2: entered promiscuous mode [ 192.828150][ T9363] dummy0: entered promiscuous mode [ 192.864793][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 192.890909][ T9359] tipc: Enabled bearer , priority 0 [ 192.917229][ T9361] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 192.941079][ T9361] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 192.992264][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 193.512186][ T9401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.523156][ T9401] gretap1: entered promiscuous mode [ 193.707612][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 193.781643][ T9408] tipc: Enabled bearer , priority 0 [ 193.802347][ T9408] syzkaller0: entered promiscuous mode [ 193.812794][ T9410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.880'. [ 193.829605][ T9408] syzkaller0: entered allmulticast mode [ 193.862671][ T9405] tipc: Resetting bearer [ 193.930543][ T9405] tipc: Disabling bearer [ 194.017833][ T9] tipc: Node number set to 4106559210 [ 194.048479][ T9417] netlink: 'syz.1.882': attribute type 49 has an invalid length. [ 194.072795][ T9417] netlink: 'syz.1.882': attribute type 10 has an invalid length. [ 194.109998][ T9417] bond0: (slave 0!): Enslaving as an active interface with an up link [ 194.281068][ T9428] tipc: Enabled bearer , priority 0 [ 194.291973][ T9428] syzkaller0: entered promiscuous mode [ 194.300233][ T9428] syzkaller0: entered allmulticast mode [ 194.335048][ T9428] tipc: Resetting bearer [ 194.350049][ T9427] tipc: Resetting bearer [ 194.386754][ T9427] tipc: Disabling bearer [ 194.818460][ T9451] netlink: 'syz.3.895': attribute type 21 has an invalid length. [ 196.474242][ T9501] __nla_validate_parse: 12 callbacks suppressed [ 196.474284][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 197.708124][ T9516] syzkaller1: entered promiscuous mode [ 197.733671][ T9516] syzkaller1: entered allmulticast mode [ 197.837691][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 197.861657][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 197.946920][ T9526] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.907'. [ 197.968230][ T9538] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 197.989818][ T9538] team0: Device ipvlan1 failed to register rx_handler [ 198.019076][ T9530] ieee802154 phy0 wpan0: encryption failed: -90 [ 198.026694][ T9531] netlink: 96 bytes leftover after parsing attributes in process `syz.0.907'. [ 198.077621][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.086402][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.143859][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.167310][ T9546] ip_vti0: entered promiscuous mode [ 198.193458][ T9546] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 198.295215][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.435083][ T9552] netlink: 64 bytes leftover after parsing attributes in process `syz.3.919'. [ 198.478598][ T9554] netlink: 'syz.4.918': attribute type 15 has an invalid length. [ 198.670481][ T9570] openvswitch: netlink: IP tunnel dst address not specified [ 198.681824][ T9569] syzkaller1: entered promiscuous mode [ 198.687358][ T9569] syzkaller1: entered allmulticast mode [ 198.757232][ T9565] can: request_module (can-proto-0) failed. [ 198.844753][ T9577] bridge_slave_0: default FDB implementation only supports local addresses [ 199.654384][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.662183][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.770837][ T9604] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 199.799178][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 199.997216][ T9613] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 200.165275][ T9613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.217018][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 200.614815][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 201.016296][ T9657] openvswitch: netlink: IP tunnel TTL not specified. [ 201.239018][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.807811][ T5182] Bluetooth: hci0: command tx timeout [ 201.885244][ T9679] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 201.899163][ T9679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.235204][ T9701] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 202.252763][ T9700] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 203.042594][ T9715] __nla_validate_parse: 2 callbacks suppressed [ 203.042616][ T9715] netlink: 76 bytes leftover after parsing attributes in process `syz.3.959'. [ 203.608286][ T9748] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.966'. [ 203.624357][ T5182] Bluetooth: hci4: link tx timeout [ 203.630972][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.632666][ T9748] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 204.318950][ T9759] "syz.3.968" (9759) uses obsolete ecb(arc4) skcipher [ 204.646977][ T9774] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 204.658101][ T9774] NCSI netlink: No device for ifindex 0 [ 205.068687][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 205.104445][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.974'. [ 205.107935][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 205.290123][ T9780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.973'. [ 205.307187][ T9780] syz_tun: refused to change device tx_queue_len [ 205.316012][ T9780] netlink: 'syz.3.973': attribute type 9 has an invalid length. [ 205.323926][ T9780] netlink: 'syz.3.973': attribute type 7 has an invalid length. [ 205.337741][ T9780] netlink: 'syz.3.973': attribute type 8 has an invalid length. [ 205.727698][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 205.935772][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 206.416397][ T9827] netlink: 'syz.4.985': attribute type 21 has an invalid length. [ 206.466303][ T9827] netlink: 128 bytes leftover after parsing attributes in process `syz.4.985'. [ 206.468137][ T9831] netlink: 'syz.4.985': attribute type 21 has an invalid length. [ 206.533180][ T9831] netlink: 128 bytes leftover after parsing attributes in process `syz.4.985'. [ 206.779379][ T9827] netlink: 'syz.4.985': attribute type 5 has an invalid length. [ 206.813447][ T9827] netlink: 3 bytes leftover after parsing attributes in process `syz.4.985'. [ 206.878418][ T9831] netlink: 'syz.4.985': attribute type 5 has an invalid length. [ 208.521685][ T9874] netlink: 'syz.0.994': attribute type 2 has an invalid length. [ 208.551945][ T9874] __nla_validate_parse: 3 callbacks suppressed [ 208.551964][ T9874] netlink: 64 bytes leftover after parsing attributes in process `syz.0.994'. [ 208.670854][ T9884] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 209.216806][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1007'. [ 209.594676][ T9924] @0Ù: renamed from bond_slave_1 (while UP) [ 210.099396][ T9944] lo: entered allmulticast mode [ 210.105862][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 210.393751][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 210.403285][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 210.950262][ T9973] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 211.022367][ T9973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.075751][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 211.223806][ T9993] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1022'. [ 211.366943][T10000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1024'. [ 211.437647][T10000] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1024'. [ 211.446743][T10000] netlink: 'syz.2.1024': attribute type 5 has an invalid length. [ 211.560503][T10000] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1024'. [ 211.972227][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 211.972246][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.972290][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.242869][T10029] netlink: 'syz.0.1032': attribute type 12 has an invalid length. [ 212.481029][T10038] pim6reg: entered allmulticast mode [ 212.499009][T10039] pim6reg: left allmulticast mode [ 212.779293][T10057] macvlan1: entered promiscuous mode [ 212.786164][T10057] ipvlan0: entered promiscuous mode [ 212.793927][T10057] ipvlan0: left promiscuous mode [ 212.821499][T10057] macvlan1: left promiscuous mode [ 212.832567][T10059] netlink: 'syz.0.1040': attribute type 13 has an invalid length. [ 212.859660][T10059] gretap0: refused to change device tx_queue_len [ 212.877572][T10059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.728970][T10092] syz.0.1048 (10092) used greatest stack depth: 17864 bytes left [ 213.962401][T10105] lo speed is unknown, defaulting to 1000 [ 213.996642][T10105] lo speed is unknown, defaulting to 1000 [ 214.023798][T10105] lo speed is unknown, defaulting to 1000 [ 214.079510][T10105] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 214.108925][T10105] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 214.252718][T10105] lo speed is unknown, defaulting to 1000 [ 214.273566][T10105] lo speed is unknown, defaulting to 1000 [ 214.313574][T10105] lo speed is unknown, defaulting to 1000 [ 214.340672][T10105] lo speed is unknown, defaulting to 1000 [ 214.356591][T10105] lo speed is unknown, defaulting to 1000 [ 214.550695][T10131] Unsupported ieee802154 address type: 0 [ 214.822519][T10125] lo speed is unknown, defaulting to 1000 [ 215.210936][T10167] lo speed is unknown, defaulting to 1000 [ 215.224569][T10167] lo speed is unknown, defaulting to 1000 [ 215.253708][T10167] lo speed is unknown, defaulting to 1000 [ 215.265515][T10168] __nla_validate_parse: 4 callbacks suppressed [ 215.265533][T10168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1068'. [ 215.746810][T10178] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 215.754435][T10178] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 215.762818][T10178] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.932025][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 215.945727][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 215.945801][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 215.987164][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 216.008263][T10183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.044086][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 216.147418][T10183] hsr_slave_1 (unregistering): left promiscuous mode [ 216.176901][T10185] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 216.193709][T10175] lo speed is unknown, defaulting to 1000 [ 216.202886][T10167] infiniband syz0: set down [ 216.207613][ T979] lo speed is unknown, defaulting to 1000 [ 216.221393][T10167] infiniband syz0: added lo [ 216.229214][T10167] syz0: rxe_create_cq: returned err = -12 [ 216.235443][T10167] infiniband syz0: Couldn't create ib_mad CQ [ 216.252410][T10167] infiniband syz0: Couldn't open port 1 [ 216.332344][T10167] RDS/IB: syz0: added [ 216.336454][T10167] smc: adding ib device syz0 with port count 1 [ 216.387187][T10167] smc: ib device syz0 port 1 has no pnetid [ 216.419940][ T979] lo speed is unknown, defaulting to 1000 [ 216.426850][T10167] lo speed is unknown, defaulting to 1000 [ 216.535239][T10196] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1078'. [ 216.578162][T10196] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1078'. [ 216.634167][T10196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1078'. [ 216.673515][T10196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1078'. [ 216.892685][T10203] netlink: 'syz.3.1080': attribute type 5 has an invalid length. [ 217.116207][T10167] lo speed is unknown, defaulting to 1000 [ 217.668865][T10167] lo speed is unknown, defaulting to 1000 [ 217.947304][T10256] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 217.999733][T10256] team0: Port device macvlan1 added [ 218.247432][T10271] tunl0: left allmulticast mode [ 218.254309][T10271] gre0: left allmulticast mode [ 218.259455][T10271] gretap0: left allmulticast mode [ 218.264938][T10271] ip_vti0: left allmulticast mode [ 218.270668][T10271] ip6_vti0: left allmulticast mode [ 218.278386][T10271] sit0: left allmulticast mode [ 218.287443][T10271] ip6tnl0: left allmulticast mode [ 218.295872][T10271] ip6gre0: left allmulticast mode [ 218.302757][T10271] syz_tun: left allmulticast mode [ 218.312597][T10271] ip6gretap0: left allmulticast mode [ 218.318852][T10271] bridge0: left allmulticast mode [ 218.325200][T10271] vcan0: left allmulticast mode [ 218.332264][T10271] bond0: left allmulticast mode [ 218.337816][T10271] team0: left allmulticast mode [ 218.343046][T10271] dummy0: left allmulticast mode [ 218.348604][T10271] nlmon0: left allmulticast mode [ 218.353919][T10271] caif0: left allmulticast mode [ 218.360451][T10271] batadv0: left allmulticast mode [ 218.374056][T10271] vxcan0: left allmulticast mode [ 218.379380][T10271] vxcan1: left allmulticast mode [ 218.384667][T10271] veth0: left allmulticast mode [ 218.394819][T10271] veth1: left allmulticast mode [ 218.401949][T10271] wg0: left allmulticast mode [ 218.407415][T10271] wg1: left allmulticast mode [ 218.412777][T10271] wg2: left allmulticast mode [ 218.418300][T10271] veth0_to_bridge: left allmulticast mode [ 218.426305][T10271] bridge_slave_0: left allmulticast mode [ 218.432533][T10271] veth0_to_bond: left allmulticast mode [ 218.439308][T10271] bond_slave_0: left allmulticast mode [ 218.445774][T10271] veth1_to_bond: left allmulticast mode [ 218.452235][T10271] bond_slave_1: left allmulticast mode [ 218.461373][T10271] veth0_to_team: left allmulticast mode [ 218.471435][T10271] team_slave_0: left allmulticast mode [ 218.484503][T10271] veth1_to_team: left allmulticast mode [ 218.490626][T10271] team_slave_1: left allmulticast mode [ 218.496544][T10271] veth0_to_batadv: left allmulticast mode [ 218.503080][T10271] batadv_slave_0: left allmulticast mode [ 218.509803][T10271] veth1_to_batadv: left allmulticast mode [ 218.516908][T10271] batadv_slave_1: left allmulticast mode [ 218.523493][T10271] xfrm0: left allmulticast mode [ 218.531796][T10271] veth0_to_hsr: left allmulticast mode [ 218.540996][T10271] veth1_to_hsr: left allmulticast mode [ 218.547185][T10271] hsr0: left allmulticast mode [ 218.552822][T10271] hsr_slave_0: left allmulticast mode [ 218.561516][T10271] hsr_slave_1: left allmulticast mode [ 218.567347][T10271] veth1_virt_wifi: left allmulticast mode [ 218.574075][T10271] veth0_virt_wifi: left allmulticast mode [ 218.582973][T10271] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 218.590727][T10271] vlan0: left promiscuous mode [ 218.596740][T10271] vlan1: left allmulticast mode [ 218.602464][T10271] macvlan0: left allmulticast mode [ 218.609926][T10271] veth1_vlan: left allmulticast mode [ 218.615715][T10271] macvlan1: left allmulticast mode [ 218.622860][T10271] ipvlan0: left allmulticast mode [ 218.628349][T10271] ipvlan1: left allmulticast mode [ 218.633609][T10271] veth0_vlan: left allmulticast mode [ 218.639361][T10271] veth1_macvtap: left allmulticast mode [ 218.645398][T10271] veth0_macvtap: left allmulticast mode [ 218.652137][T10271] macvtap0: left allmulticast mode [ 218.657892][T10271] macsec0: left allmulticast mode [ 218.663347][T10271] geneve0: left allmulticast mode [ 218.669135][T10271] geneve1: left allmulticast mode [ 218.674558][T10271] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 218.682161][T10271] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 218.690204][T10271] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 218.698014][T10271] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 218.705352][T10271] syztnl0: left allmulticast mode [ 218.711268][T10271] erspan0.1: left allmulticast mode [ 218.717060][T10271] erspan0: left allmulticast mode [ 218.722623][T10271] syztnl2: left allmulticast mode [ 218.728359][T10271] ip6gretap1: left allmulticast mode [ 218.746462][T10167] lo speed is unknown, defaulting to 1000 [ 219.111694][T10294] Can't find ip_set type hash:ip$mec [ 219.126886][T10167] lo speed is unknown, defaulting to 1000 [ 219.405466][T10311] netlink: 'syz.0.1106': attribute type 3 has an invalid length. [ 219.469899][T10315] .70·: renamed from hsr0 [ 219.504141][T10315] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.530042][T10315] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.540778][T10315] .70·: entered allmulticast mode [ 219.545867][T10315] hsr_slave_0: entered allmulticast mode [ 219.567407][T10315] hsr_slave_1: entered allmulticast mode [ 219.575045][T10315] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 219.591212][T10167] lo speed is unknown, defaulting to 1000 [ 219.973690][T10167] lo speed is unknown, defaulting to 1000 [ 220.007173][T10330] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 220.324425][T10167] lo speed is unknown, defaulting to 1000 [ 220.473597][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.484623][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.584308][T10167] lo speed is unknown, defaulting to 1000 [ 221.513901][T10354] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 221.524976][T10354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.118101][T10282] lo speed is unknown, defaulting to 1000 [ 222.283773][T10366] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 222.444884][T10378] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 222.513368][T10378] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 222.526375][T10378] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 222.684519][T10395] __nla_validate_parse: 15 callbacks suppressed [ 222.684542][T10395] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1125'. [ 222.711164][T10395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.946684][T10325] lo speed is unknown, defaulting to 1000 [ 223.100072][T10324] lo speed is unknown, defaulting to 1000 [ 224.539021][T10448] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1137'. [ 224.649574][T10448] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 224.952121][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 224.984238][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 225.343912][T10468] raw_sendmsg: syz.2.1141 forgot to set AF_INET. Fix it! [ 225.401190][T10462] vlan0: left promiscuous mode [ 225.441100][T10462] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 225.452652][T10462] bond2: left promiscuous mode [ 225.460058][T10462] bond2: left allmulticast mode [ 225.466971][T10462] bridge1: left promiscuous mode [ 225.472448][T10462] bridge1: left allmulticast mode [ 225.478754][T10462] macvlan3: left promiscuous mode [ 225.484587][T10462] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 225.496385][T10462] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 225.516228][T10462] wireguard0: left promiscuous mode [ 225.523543][T10462] wireguard0: left allmulticast mode [ 226.171581][T10492] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 226.572330][T10501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 226.778306][T10512] Bluetooth: MGMT ver 1.23 [ 226.862027][T10477] lo speed is unknown, defaulting to 1000 [ 226.913407][T10477] lo speed is unknown, defaulting to 1000 [ 227.218775][T10520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1155'. [ 227.273944][T10522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1155'. [ 227.519016][T10525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.665546][T10534] tipc: Enabling of bearer rejected, already enabled [ 227.773506][T10534] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 227.801428][T10534] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 227.828821][T10534] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 227.854676][T10534] tipc: Resetting bearer [ 227.974672][T10541] veth1_to_batadv: mtu less than device minimum [ 228.322897][T10553] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 228.344689][T10504] lo speed is unknown, defaulting to 1000 [ 228.392197][T10504] lo speed is unknown, defaulting to 1000 [ 228.509311][T10556] bond0: (slave gretap0): Opening slave failed [ 229.797311][T10590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1176'. [ 230.660567][T10607] netlink: 'syz.0.1180': attribute type 10 has an invalid length. [ 230.722394][T10611] netlink: 'syz.0.1180': attribute type 10 has an invalid length. [ 230.818540][T10607] team0: Port device dummy0 added [ 230.879597][T10611] team0: Port device dummy0 removed [ 231.072049][T10611] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.635647][T10626] !: renamed from dummy0 (while UP) [ 231.698128][T10619] nbd4: detected capacity change from 0 to 63 [ 231.724796][T10623] block nbd4: NBD_DISCONNECT [ 231.730202][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 231.740965][T10623] block nbd4: Disconnected due to user request. [ 231.770245][T10623] block nbd4: shutting down sockets [ 231.818389][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1188'. [ 232.186912][T10640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.212961][T10643] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 232.354627][T10643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.459208][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 232.484166][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1191'. [ 232.567051][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1190'. [ 232.670800][T10645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.695225][T10645] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.846316][T10645] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 233.075707][T10643] veth5: entered promiscuous mode [ 233.118421][T10643] bond1: (slave veth5): Enslaving as an active interface with a down link [ 233.143999][T10652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.306561][T10670] netlink: 'syz.3.1194': attribute type 3 has an invalid length. [ 233.753833][T10633] lo speed is unknown, defaulting to 1000 [ 233.764938][T10633] lo speed is unknown, defaulting to 1000 [ 234.689656][T10654] lo speed is unknown, defaulting to 1000 [ 234.762320][T10654] lo speed is unknown, defaulting to 1000 [ 235.299945][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'. [ 235.330611][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'. [ 235.376225][T10735] vlan0: entered promiscuous mode [ 235.464123][T10738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1205'. [ 235.490960][T10691] lo speed is unknown, defaulting to 1000 [ 235.510710][T10691] lo speed is unknown, defaulting to 1000 [ 236.366926][T10754] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 236.378710][T10754] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 236.414457][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'. [ 236.454684][T10757] team0: No ports can be present during mode change [ 237.206559][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 238.201012][T10802] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 238.396668][T10808] netlink: 'syz.4.1228': attribute type 6 has an invalid length. [ 238.422140][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1228'. [ 238.488355][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 238.519151][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 238.520610][T10816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1226'. [ 238.703850][T10816] hsr_slave_0: left promiscuous mode [ 238.711039][T10816] hsr_slave_1: left promiscuous mode [ 238.775152][T10823] netlink: 'syz.4.1231': attribute type 12 has an invalid length. [ 238.834748][T10823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.842114][T10823] IPv6: NLM_F_CREATE should be set when creating new route [ 238.862055][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 239.044511][T10842] tipc: Enabled bearer , priority 0 [ 239.084134][T10847] syzkaller0: entered promiscuous mode [ 239.118702][T10847] syzkaller0: entered allmulticast mode [ 239.223290][T10848] tipc: Resetting bearer [ 239.274182][T10848] tipc: Disabling bearer [ 240.000401][T10889] openvswitch: netlink: Duplicate or invalid key (type 0). [ 240.029117][T10889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.064678][T10858] lo speed is unknown, defaulting to 1000 [ 240.102555][T10858] lo speed is unknown, defaulting to 1000 [ 241.248763][T10904] lo speed is unknown, defaulting to 1000 [ 241.256650][T10904] lo speed is unknown, defaulting to 1000 [ 241.304230][T10932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.519777][T10934] __nla_validate_parse: 6 callbacks suppressed [ 241.519798][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1261'. [ 241.535510][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 241.728190][T10934] bond2: entered promiscuous mode [ 241.733635][T10934] bond2: entered allmulticast mode [ 241.740460][T10934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.920349][T10944] netlink: 'syz.4.1263': attribute type 10 has an invalid length. [ 241.928456][T10944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1263'. [ 242.004729][T10943] bond0: (slave bond_slave_0): Releasing backup interface [ 242.041623][T10943] bond0: (slave c@0Ù): Releasing backup interface [ 242.142021][T10943] team0: Port device team_slave_0 removed [ 242.186255][T10943] team0: Port device team_slave_1 removed [ 242.198852][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.211923][T10943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.224920][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.233073][T10943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.270630][T10943] team0: Port device geneve0 removed [ 242.332403][T10943] bond1: (slave veth5): Releasing active interface [ 242.370961][T10944] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 242.443822][T10940] lo speed is unknown, defaulting to 1000 [ 242.476970][T10940] lo speed is unknown, defaulting to 1000 [ 242.563068][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 242.679005][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1266'. [ 242.711150][T10959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.733174][T10959] bond5: (slave bond6): Enslaving as an active interface with an up link [ 242.767794][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 242.794436][T10956] bond5 (unregistering): (slave bond6): Releasing backup interface [ 242.822320][T10956] bond5 (unregistering): Released all slaves [ 242.842732][T10969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1270'. [ 243.256598][T10992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1276'. [ 243.397435][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 243.682398][T11007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1281'. [ 244.229509][T11025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.681537][T11053] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 245.553143][T11067] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 245.785063][T11090] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 245.946159][T11099] FAULT_INJECTION: forcing a failure. [ 245.946159][T11099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 245.976793][T11099] CPU: 0 UID: 0 PID: 11099 Comm: syz.3.1311 Not tainted syzkaller #0 PREEMPT(full) [ 245.976824][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.976838][T11099] Call Trace: [ 245.976846][T11099] [ 245.976856][T11099] dump_stack_lvl+0x189/0x250 [ 245.976886][T11099] ? __pfx____ratelimit+0x10/0x10 [ 245.976908][T11099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.976933][T11099] ? __pfx__printk+0x10/0x10 [ 245.976960][T11099] ? __might_fault+0xb0/0x130 [ 245.977002][T11099] should_fail_ex+0x414/0x560 [ 245.977036][T11099] _copy_from_user+0x2d/0xb0 [ 245.977062][T11099] sctp_getsockopt_pr_assocstatus+0xca/0x690 [ 245.977089][T11099] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.977111][T11099] ? __pfx_sctp_getsockopt_pr_assocstatus+0x10/0x10 [ 245.977133][T11099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 245.977171][T11099] sctp_getsockopt+0xb06/0xb60 [ 245.977194][T11099] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 245.977230][T11099] do_sock_getsockopt+0x36f/0x450 [ 245.977258][T11099] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 245.977281][T11099] ? write_ibpb+0x30/0x40 [ 245.977303][T11099] ? __fget_files+0x3a0/0x420 [ 245.977321][T11099] ? __fget_files+0x2a/0x420 [ 245.977348][T11099] __x64_sys_getsockopt+0x1a5/0x250 [ 245.977371][T11099] ? write_ibpb+0x30/0x40 [ 245.977395][T11099] ? write_ibpb+0x30/0x40 [ 245.977421][T11099] do_syscall_64+0xfa/0x3b0 [ 245.977442][T11099] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.977462][T11099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.977487][T11099] ? clear_bhb_loop+0x60/0xb0 [ 245.977522][T11099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.977542][T11099] RIP: 0033:0x7fefaa98ebe9 [ 245.977561][T11099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.977577][T11099] RSP: 002b:00007fefab8b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 245.977599][T11099] RAX: ffffffffffffffda RBX: 00007fefaabc5fa0 RCX: 00007fefaa98ebe9 [ 245.977614][T11099] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 245.977625][T11099] RBP: 00007fefab8b2090 R08: 0000200000000140 R09: 0000000000000000 [ 245.977637][T11099] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 245.977649][T11099] R13: 00007fefaabc6038 R14: 00007fefaabc5fa0 R15: 00007ffecf72c788 [ 245.977682][T11099] [ 246.547011][T11113] __nla_validate_parse: 8 callbacks suppressed [ 246.547033][T11113] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1314'. [ 248.392791][T11115] tipc: Enabling of bearer rejected, already enabled [ 248.605852][T11144] FAULT_INJECTION: forcing a failure. [ 248.605852][T11144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.625287][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.645895][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 248.654848][T11144] CPU: 1 UID: 0 PID: 11144 Comm: syz.3.1323 Not tainted syzkaller #0 PREEMPT(full) [ 248.654878][T11144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.654892][T11144] Call Trace: [ 248.654901][T11144] [ 248.654910][T11144] dump_stack_lvl+0x189/0x250 [ 248.654939][T11144] ? __pfx____ratelimit+0x10/0x10 [ 248.654961][T11144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.654986][T11144] ? __pfx__printk+0x10/0x10 [ 248.655029][T11144] should_fail_ex+0x414/0x560 [ 248.655061][T11144] _copy_to_user+0x31/0xb0 [ 248.655097][T11144] sctp_getsockopt_pr_assocstatus+0x594/0x690 [ 248.655128][T11144] ? __pfx_sctp_getsockopt_pr_assocstatus+0x10/0x10 [ 248.655150][T11144] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.655185][T11144] sctp_getsockopt+0xb06/0xb60 [ 248.655208][T11144] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 248.655246][T11144] do_sock_getsockopt+0x36f/0x450 [ 248.655277][T11144] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 248.655305][T11144] ? write_ibpb+0x30/0x40 [ 248.655330][T11144] ? __fget_files+0x3a0/0x420 [ 248.655347][T11144] ? __fget_files+0x2a/0x420 [ 248.655384][T11144] __x64_sys_getsockopt+0x1a5/0x250 [ 248.655411][T11144] ? write_ibpb+0x30/0x40 [ 248.655436][T11144] ? write_ibpb+0x30/0x40 [ 248.655466][T11144] do_syscall_64+0xfa/0x3b0 [ 248.655489][T11144] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.655513][T11144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.655536][T11144] ? clear_bhb_loop+0x60/0xb0 [ 248.655564][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.655588][T11144] RIP: 0033:0x7fefaa98ebe9 [ 248.655609][T11144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.655628][T11144] RSP: 002b:00007fefab8b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 248.655653][T11144] RAX: ffffffffffffffda RBX: 00007fefaabc5fa0 RCX: 00007fefaa98ebe9 [ 248.655671][T11144] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003 [ 248.655684][T11144] RBP: 00007fefab8b2090 R08: 0000200000000140 R09: 0000000000000000 [ 248.655699][T11144] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 248.655713][T11144] R13: 00007fefaabc6038 R14: 00007fefaabc5fa0 R15: 00007ffecf72c788 [ 248.655751][T11144] [ 248.806678][T11152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1324'. [ 248.872042][T11148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1322'. [ 249.270784][T11168] IPVS: stopping backup sync thread 7298 ... [ 249.332129][T11172] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1332'. [ 249.549981][T11181] FAULT_INJECTION: forcing a failure. [ 249.549981][T11181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.575617][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1335'. [ 249.595048][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 249.601602][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.2.1334 Not tainted syzkaller #0 PREEMPT(full) [ 249.601635][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.601651][T11181] Call Trace: [ 249.601660][T11181] [ 249.601670][T11181] dump_stack_lvl+0x189/0x250 [ 249.601705][T11181] ? __pfx____ratelimit+0x10/0x10 [ 249.601730][T11181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.601759][T11181] ? __pfx__printk+0x10/0x10 [ 249.601807][T11181] should_fail_ex+0x414/0x560 [ 249.601846][T11181] _copy_to_user+0x31/0xb0 [ 249.601876][T11181] simple_read_from_buffer+0xe1/0x170 [ 249.601918][T11181] proc_fail_nth_read+0x1b3/0x220 [ 249.601948][T11181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.601980][T11181] ? rw_verify_area+0x2a6/0x4d0 [ 249.602009][T11181] ? __lock_acquire+0xab9/0xd20 [ 249.602041][T11181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.602069][T11181] vfs_read+0x200/0xa30 [ 249.602097][T11181] ? fdget_pos+0x247/0x320 [ 249.602123][T11181] ? __pfx___mutex_lock+0x10/0x10 [ 249.602151][T11181] ? __pfx_vfs_read+0x10/0x10 [ 249.602181][T11181] ? __fget_files+0x2a/0x420 [ 249.602208][T11181] ? __fget_files+0x3a0/0x420 [ 249.602227][T11181] ? __fget_files+0x2a/0x420 [ 249.602270][T11181] ksys_read+0x145/0x250 [ 249.602304][T11181] ? __pfx_ksys_read+0x10/0x10 [ 249.602331][T11181] ? fput+0xa0/0xd0 [ 249.602361][T11181] ? do_syscall_64+0xbe/0x3b0 [ 249.602391][T11181] do_syscall_64+0xfa/0x3b0 [ 249.602416][T11181] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.602438][T11181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.602462][T11181] ? clear_bhb_loop+0x60/0xb0 [ 249.602491][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.602512][T11181] RIP: 0033:0x7f967c58d5fc [ 249.602534][T11181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.602557][T11181] RSP: 002b:00007f967a7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.602582][T11181] RAX: ffffffffffffffda RBX: 00007f967c7c5fa0 RCX: 00007f967c58d5fc [ 249.602599][T11181] RDX: 000000000000000f RSI: 00007f967a7f60a0 RDI: 0000000000000006 [ 249.602612][T11181] RBP: 00007f967a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.602627][T11181] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 249.602640][T11181] R13: 00007f967c7c6038 R14: 00007f967c7c5fa0 R15: 00007ffd14b3e678 [ 249.602677][T11181] [ 249.808119][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 249.868361][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'. [ 249.893660][T11189] netlink: 'syz.0.1335': attribute type 18 has an invalid length. [ 250.495230][T11215] tipc: Enabled bearer , priority 0 [ 250.652857][T11215] tipc: Disabling bearer [ 250.733689][T11226] pim6reg: entered allmulticast mode [ 250.750393][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1349'. [ 251.128759][T11245] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 251.150586][T11199] lo speed is unknown, defaulting to 1000 [ 251.224514][T11250] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 251.233826][T11250] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 251.254847][T11199] lo speed is unknown, defaulting to 1000 [ 251.667625][T11259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.717424][T11262] __nla_validate_parse: 1 callbacks suppressed [ 251.717445][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 251.861929][T11264] syzkaller0: entered promiscuous mode [ 251.882551][T11264] syzkaller0: entered allmulticast mode [ 251.912476][T11262] tipc: Enabled bearer , priority 0 [ 251.962326][T11261] tipc: Resetting bearer [ 252.018299][T11261] tipc: Disabling bearer [ 252.040056][T11268] tipc: Failed to remove unknown binding: 66,1,1/3255417065:2251394156/2251394159 [ 252.052556][T11267] tipc: Failed to remove unknown binding: 66,1,1/3255417065:2251394156/2251394159 [ 252.062356][ T9] IPVS: starting estimator thread 0... [ 252.157698][T11271] IPVS: using max 26 ests per chain, 62400 per kthread [ 252.443235][T11286] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 253.051702][T11311] syzkaller0: entered allmulticast mode [ 253.486495][T11321] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1378'. [ 253.602716][T11326] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 253.630839][T11326] Bluetooth: MGMT ver 1.23 [ 253.648277][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'. [ 253.668069][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'. [ 253.701789][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 253.727384][T11334] ieee802154 phy0 wpan0: encryption failed: -90 [ 253.769422][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 253.914561][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 254.274294][T11363] team0: Port device team_slave_0 removed [ 254.302186][T11363] team0: Port device team_slave_1 removed [ 254.326627][T11363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.359247][T11363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.606079][T11377] macvtap2: entered promiscuous mode [ 254.614428][T11377] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 254.628036][T11377] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 254.640705][T11379] netlink: 'syz.1.1394': attribute type 13 has an invalid length. [ 254.660980][T11380] ================================================================== [ 254.669115][T11380] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 254.677051][T11380] Read of size 1 at addr ffff8880754d4ff0 by task syz.3.1395/11380 [ 254.684978][T11380] [ 254.687335][T11380] CPU: 1 UID: 0 PID: 11380 Comm: syz.3.1395 Not tainted syzkaller #0 PREEMPT(full) [ 254.687365][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.687379][T11380] Call Trace: [ 254.687388][T11380] [ 254.687398][T11380] dump_stack_lvl+0x189/0x250 [ 254.687427][T11380] ? __kasan_check_byte+0x12/0x40 [ 254.687459][T11380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.687484][T11380] ? lock_release+0x4b/0x3e0 [ 254.687516][T11380] ? __virt_addr_valid+0x4a5/0x5c0 [ 254.687543][T11380] print_report+0xca/0x240 [ 254.687562][T11380] ? xfrm_state_find+0x2cf2/0x5400 [ 254.687583][T11380] kasan_report+0x118/0x150 [ 254.687612][T11380] ? xfrm_state_find+0x2cf2/0x5400 [ 254.687641][T11380] xfrm_state_find+0x2cf2/0x5400 [ 254.687672][T11380] ? __pfx___find_rr_leaf+0x10/0x10 [ 254.687700][T11380] ? xfrm_state_find+0x1da/0x5400 [ 254.687726][T11380] ? __pfx_xfrm_state_find+0x10/0x10 [ 254.687748][T11380] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 254.687782][T11380] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 254.687816][T11380] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 254.687855][T11380] ? ip6_pol_route+0x162/0x1180 [ 254.687886][T11380] ? __pfx_ip6_pol_route+0x10/0x10 [ 254.687914][T11380] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 254.687945][T11380] ? __lock_acquire+0xab9/0xd20 [ 254.687985][T11380] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 254.688022][T11380] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 254.688053][T11380] ? xfrm_expand_policies+0x41f/0x6a0 [ 254.688084][T11380] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 254.688115][T11380] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 254.688147][T11380] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 254.688176][T11380] ? txopt_get+0x335/0x3f0 [ 254.688197][T11380] ? aa_label_sk_perm+0x4cd/0x630 [ 254.688227][T11380] ? __pfx_txopt_get+0x10/0x10 [ 254.688247][T11380] ? save_fpregs_to_fpstate+0xa3/0x210 [ 254.688276][T11380] xfrm_lookup_route+0x3c/0x1c0 [ 254.688306][T11380] rawv6_sendmsg+0xdab/0x1820 [ 254.688337][T11380] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 254.688362][T11380] ? finish_task_switch+0x266/0x950 [ 254.688395][T11380] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.688427][T11380] ? sock_rps_record_flow+0x19/0x410 [ 254.688457][T11380] ? inet_sendmsg+0x2f4/0x370 [ 254.688484][T11380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.688506][T11380] __sock_sendmsg+0x19c/0x270 [ 254.688531][T11380] ____sys_sendmsg+0x52d/0x830 [ 254.688553][T11380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.688576][T11380] ? import_iovec+0x74/0xa0 [ 254.688597][T11380] ___sys_sendmsg+0x21f/0x2a0 [ 254.688617][T11380] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.688653][T11380] ? __fget_files+0x2a/0x420 [ 254.688667][T11380] ? __fget_files+0x3a0/0x420 [ 254.688686][T11380] __sys_sendmmsg+0x227/0x430 [ 254.688707][T11380] ? __pfx___sys_sendmmsg+0x10/0x10 [ 254.688725][T11380] ? do_futex+0x395/0x420 [ 254.688769][T11380] ? rcu_is_watching+0x15/0xb0 [ 254.688788][T11380] __x64_sys_sendmmsg+0xa0/0xc0 [ 254.688810][T11380] do_syscall_64+0xfa/0x3b0 [ 254.688829][T11380] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.688847][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.688863][T11380] ? clear_bhb_loop+0x60/0xb0 [ 254.688882][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.688899][T11380] RIP: 0033:0x7fefaa98ebe9 [ 254.688915][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.688930][T11380] RSP: 002b:00007fefab891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.688949][T11380] RAX: ffffffffffffffda RBX: 00007fefaabc6090 RCX: 00007fefaa98ebe9 [ 254.688961][T11380] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000a [ 254.688972][T11380] RBP: 00007fefaaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 254.688983][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.688993][T11380] R13: 00007fefaabc6128 R14: 00007fefaabc6090 R15: 00007ffecf72c788 [ 254.689014][T11380] [ 254.689021][T11380] [ 255.079515][T11380] Allocated by task 8713: [ 255.083965][T11380] kasan_save_track+0x3e/0x80 [ 255.088677][T11380] __kasan_slab_alloc+0x6c/0x80 [ 255.093552][T11380] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 255.099030][T11380] xfrm_state_alloc+0x24/0x2f0 [ 255.103804][T11380] __find_acq_core+0x8a7/0x1c00 [ 255.108670][T11380] xfrm_find_acq+0x78/0xa0 [ 255.113116][T11380] xfrm_alloc_userspi+0x6b3/0xc90 [ 255.118157][T11380] xfrm_user_rcv_msg+0x7a0/0xab0 [ 255.123115][T11380] netlink_rcv_skb+0x208/0x470 [ 255.127891][T11380] xfrm_netlink_rcv+0x79/0x90 [ 255.132580][T11380] netlink_unicast+0x82f/0x9e0 [ 255.137367][T11380] netlink_sendmsg+0x805/0xb30 [ 255.142147][T11380] __sock_sendmsg+0x21c/0x270 [ 255.146938][T11380] ____sys_sendmsg+0x505/0x830 [ 255.151717][T11380] ___sys_sendmsg+0x21f/0x2a0 [ 255.156399][T11380] __x64_sys_sendmsg+0x19b/0x260 [ 255.161370][T11380] do_syscall_64+0xfa/0x3b0 [ 255.165909][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.171816][T11380] [ 255.174148][T11380] Freed by task 7487: [ 255.178302][T11380] kasan_save_track+0x3e/0x80 [ 255.182992][T11380] kasan_save_free_info+0x46/0x50 [ 255.188110][T11380] __kasan_slab_free+0x5b/0x80 [ 255.192882][T11380] kmem_cache_free+0x18f/0x400 [ 255.197785][T11380] xfrm_state_gc_task+0x52d/0x6b0 [ 255.202945][T11380] process_scheduled_works+0xae1/0x17b0 [ 255.208595][T11380] worker_thread+0x8a0/0xda0 [ 255.213398][T11380] kthread+0x70e/0x8a0 [ 255.217497][T11380] ret_from_fork+0x3fc/0x770 [ 255.222102][T11380] ret_from_fork_asm+0x1a/0x30 [ 255.226902][T11380] [ 255.229228][T11380] The buggy address belongs to the object at ffff8880754d4cc0 [ 255.229228][T11380] which belongs to the cache xfrm_state of size 928 [ 255.243202][T11380] The buggy address is located 816 bytes inside of [ 255.243202][T11380] freed 928-byte region [ffff8880754d4cc0, ffff8880754d5060) [ 255.257191][T11380] [ 255.259536][T11380] The buggy address belongs to the physical page: [ 255.265958][T11380] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880754d5dc0 pfn:0x754d4 [ 255.276045][T11380] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 255.284567][T11380] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 255.293164][T11380] page_type: f5(slab) [ 255.297158][T11380] raw: 00fff00000000240 ffff888143284280 ffff8880222e7708 ffffea000150e210 [ 255.305753][T11380] raw: ffff8880754d5dc0 00000000000f0002 00000000f5000000 0000000000000000 [ 255.314427][T11380] head: 00fff00000000240 ffff888143284280 ffff8880222e7708 ffffea000150e210 [ 255.323139][T11380] head: ffff8880754d5dc0 00000000000f0002 00000000f5000000 0000000000000000 [ 255.331992][T11380] head: 00fff00000000002 ffffea0001d53501 00000000ffffffff 00000000ffffffff [ 255.340845][T11380] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 255.349515][T11380] page dumped because: kasan: bad access detected [ 255.355960][T11380] page_owner tracks the page as allocated [ 255.361760][T11380] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6672, tgid 6671 (syz.1.184), ts 112819436119, free_ts 97656540962 [ 255.381499][T11380] post_alloc_hook+0x240/0x2a0 [ 255.386404][T11380] get_page_from_freelist+0x21e4/0x22c0 [ 255.391955][T11380] __alloc_frozen_pages_noprof+0x181/0x370 [ 255.397766][T11380] alloc_pages_mpol+0x232/0x4a0 [ 255.402639][T11380] allocate_slab+0x8a/0x370 [ 255.407149][T11380] ___slab_alloc+0xbeb/0x1420 [ 255.411841][T11380] kmem_cache_alloc_noprof+0x283/0x3c0 [ 255.417396][T11380] xfrm_state_alloc+0x24/0x2f0 [ 255.422165][T11380] pfkey_add+0x6e4/0x2e00 [ 255.426675][T11380] pfkey_sendmsg+0xbfb/0x1090 [ 255.431357][T11380] __sock_sendmsg+0x21c/0x270 [ 255.436219][T11380] ____sys_sendmsg+0x505/0x830 [ 255.441074][T11380] ___sys_sendmsg+0x21f/0x2a0 [ 255.445788][T11380] __x64_sys_sendmsg+0x19b/0x260 [ 255.450733][T11380] do_syscall_64+0xfa/0x3b0 [ 255.455249][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.461148][T11380] page last free pid 5985 tgid 5985 stack trace: [ 255.467471][T11380] __free_frozen_pages+0xbc4/0xd30 [ 255.472717][T11380] __slab_free+0x303/0x3c0 [ 255.477161][T11380] qlist_free_all+0x97/0x140 [ 255.481782][T11380] kasan_quarantine_reduce+0x148/0x160 [ 255.487248][T11380] __kasan_slab_alloc+0x22/0x80 [ 255.492108][T11380] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 255.497598][T11380] getname_flags+0xb8/0x540 [ 255.502100][T11380] __x64_sys_unlink+0x3a/0x50 [ 255.507065][T11380] do_syscall_64+0xfa/0x3b0 [ 255.511591][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.517536][T11380] [ 255.519897][T11380] Memory state around the buggy address: [ 255.525539][T11380] ffff8880754d4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.533711][T11380] ffff8880754d4f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.541804][T11380] >ffff8880754d4f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.550043][T11380] ^ [ 255.557849][T11380] ffff8880754d5000: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 255.565916][T11380] ffff8880754d5080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.573990][T11380] ================================================================== [ 255.592783][T11379] netlink: 'syz.1.1394': attribute type 17 has an invalid length. [ 255.656622][T11380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.664067][T11380] CPU: 1 UID: 0 PID: 11380 Comm: syz.3.1395 Not tainted syzkaller #0 PREEMPT(full) [ 255.673454][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.683526][T11380] Call Trace: [ 255.686813][T11380] [ 255.689753][T11380] dump_stack_lvl+0x99/0x250 [ 255.694371][T11380] ? __asan_memcpy+0x40/0x70 [ 255.699617][T11380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.704941][T11380] ? __pfx__printk+0x10/0x10 [ 255.709571][T11380] vpanic+0x281/0x750 [ 255.713575][T11380] ? preempt_schedule+0xae/0xc0 [ 255.718525][T11380] ? __pfx_vpanic+0x10/0x10 [ 255.723040][T11380] ? preempt_schedule_common+0x83/0xd0 [ 255.728513][T11380] ? preempt_schedule+0xae/0xc0 [ 255.733383][T11380] ? __pfx_preempt_schedule+0x10/0x10 [ 255.738946][T11380] panic+0xb9/0xc0 [ 255.742811][T11380] ? __pfx_panic+0x10/0x10 [ 255.747264][T11380] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 255.753189][T11380] ? xfrm_state_find+0x2cf2/0x5400 [ 255.758324][T11380] check_panic_on_warn+0x89/0xb0 [ 255.763285][T11380] ? xfrm_state_find+0x2cf2/0x5400 [ 255.768448][T11380] end_report+0x78/0x160 [ 255.772733][T11380] kasan_report+0x129/0x150 [ 255.777291][T11380] ? xfrm_state_find+0x2cf2/0x5400 [ 255.782442][T11380] xfrm_state_find+0x2cf2/0x5400 [ 255.787406][T11380] ? __pfx___find_rr_leaf+0x10/0x10 [ 255.792634][T11380] ? xfrm_state_find+0x1da/0x5400 [ 255.797808][T11380] ? __pfx_xfrm_state_find+0x10/0x10 [ 255.803220][T11380] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 255.809071][T11380] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 255.815172][T11380] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 255.821376][T11380] ? ip6_pol_route+0x162/0x1180 [ 255.826274][T11380] ? __pfx_ip6_pol_route+0x10/0x10 [ 255.831427][T11380] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 255.838217][T11380] ? __lock_acquire+0xab9/0xd20 [ 255.843104][T11380] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 255.848509][T11380] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 255.853902][T11380] ? xfrm_expand_policies+0x41f/0x6a0 [ 255.859302][T11380] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 255.864710][T11380] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 255.870369][T11380] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 255.876204][T11380] ? txopt_get+0x335/0x3f0 [ 255.880721][T11380] ? aa_label_sk_perm+0x4cd/0x630 [ 255.885771][T11380] ? __pfx_txopt_get+0x10/0x10 [ 255.890552][T11380] ? save_fpregs_to_fpstate+0xa3/0x210 [ 255.896042][T11380] xfrm_lookup_route+0x3c/0x1c0 [ 255.900980][T11380] rawv6_sendmsg+0xdab/0x1820 [ 255.905687][T11380] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 255.910821][T11380] ? finish_task_switch+0x266/0x950 [ 255.916141][T11380] ? __pfx_aa_sk_perm+0x10/0x10 [ 255.921051][T11380] ? sock_rps_record_flow+0x19/0x410 [ 255.926363][T11380] ? inet_sendmsg+0x2f4/0x370 [ 255.931070][T11380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.936421][T11380] __sock_sendmsg+0x19c/0x270 [ 255.941138][T11380] ____sys_sendmsg+0x52d/0x830 [ 255.945932][T11380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.951848][T11380] ? import_iovec+0x74/0xa0 [ 255.956442][T11380] ___sys_sendmsg+0x21f/0x2a0 [ 255.961140][T11380] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.966371][T11380] ? __fget_files+0x2a/0x420 [ 255.971055][T11380] ? __fget_files+0x3a0/0x420 [ 255.975761][T11380] __sys_sendmmsg+0x227/0x430 [ 255.980505][T11380] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.985736][T11380] ? do_futex+0x395/0x420 [ 255.990112][T11380] ? rcu_is_watching+0x15/0xb0 [ 255.994974][T11380] __x64_sys_sendmmsg+0xa0/0xc0 [ 255.999836][T11380] do_syscall_64+0xfa/0x3b0 [ 256.004408][T11380] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.009808][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.015885][T11380] ? clear_bhb_loop+0x60/0xb0 [ 256.020662][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.026584][T11380] RIP: 0033:0x7fefaa98ebe9 [ 256.031014][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.050799][T11380] RSP: 002b:00007fefab891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.059320][T11380] RAX: ffffffffffffffda RBX: 00007fefaabc6090 RCX: 00007fefaa98ebe9 [ 256.067318][T11380] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000a [ 256.075305][T11380] RBP: 00007fefaaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.083286][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.091267][T11380] R13: 00007fefaabc6128 R14: 00007fefaabc6090 R15: 00007ffecf72c788 [ 256.099346][T11380] [ 256.102723][T11380] Kernel Offset: disabled [ 256.107064][T11380] Rebooting in 86400 seconds..