last executing test programs: 23.13563036s ago: executing program 4 (id=2148): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) bind$alg(r3, 0x0, 0x0) 20.853599436s ago: executing program 4 (id=2166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@remote, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0xfffffffffff}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2}}, 0xe8) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0) 20.558716032s ago: executing program 4 (id=2169): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ipvlan0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) unshare(0x22020400) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010027bd7800fbdbdfa500000000", @ANYRESOCT=r3, @ANYBLOB="892e0a001162050034001280110001f06172696467655f736c617665000000001c0005"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e23, 0x2, @private1, 0x9}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x82, &(0x7f0000000540)={0x0, 0x0, 0x3}, 0xfffffffffffffe8f) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0xb, 0xfffffffd, 0x2, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x7}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x14, 0x3, 0x2a}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4, 0x6, "54f25b3a808e9427dd4edf308e7ed3c189df6a254756db4edc0ece00fe1680a5ab035637ed3c82e67ec8dbc31c428e3653fe6d4b8393069e212d1bc52e1b4f7a3f80200abdde3707a5ffcbaae71b33c15896841c1b2d9ff0fb79bf833b85c87019e0ec46558fc9b1a16cc557261e9796b7"}, {0xfe46}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}}, 0x30000080) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000400)={r10, 0x39, "b1c18f70612939ec9920b77781b7addc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb802ff1c984d8d842d176fef210dee530c1"}, &(0x7f00000000c0)=0x41) socket$packet(0x11, 0x2, 0x300) 19.886284362s ago: executing program 3 (id=2179): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000bba300003b00000008000300", @ANYRES32=r5, @ANYBLOB="3200330000040500080211000001ffffffffffff080211000000ef001005f9ff00060202020202020100dd06bbeb24198dc400000600cd000000000004008e000800570096120000"], 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r8, @ANYRES16=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 19.627510112s ago: executing program 3 (id=2182): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02040e000e00000028bd70000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b0000000005000600000000000a"], 0x70}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$sock(r2, &(0x7f0000001840)=[{{&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x3ee933128afd4028, {0x3, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="c620728bcb28a45e", 0x8}], 0x1, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0xa8}}, {{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="5c9a3255d70814d3429539a62082de66", 0x10}, {&(0x7f0000000440)="97fb553d6e30c83641561c81b6c7d270679d58f000377f2b34bc7db1e5c9dba0820e02267e2b46e41afa8dcc823a341fa84915389118f926d91b6d44a5c3fafc0ccca9e31e8f3a7289bd2b1f952dd9f59da7ec5589cbc5a952af53192eb7056e29421511cddf26771b31f398673d794be8112aa0c84d5bc9c846603239ff36ed6f5853c945d643f4d200c7698a74829a813aadf2ca22af06acb461d06742f164edd65674b64b47b47f4069655e9b791b4343e7e6e9ecab56f07f447a31f6b9c1c8e83b6828d0d382bf8669791c7b4b6329559208a59e1453c92e9bb53be9cff9ca4085", 0xe3}], 0x2}}, {{&(0x7f0000000580)=@isdn={0x22, 0x8, 0x5, 0x80, 0x3}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000600)="27f933c488a8572ae3900cb4381658edda668e01f1c58d0452c3fde3832d", 0x1e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000640)="d7e45b26440c0988baff5cd7a588ba5803921b7f", 0x14}, {&(0x7f00000016c0)="639427d3bb4fe195210ba3fb7c3981289eba98f846b67b1324b6ff0b582d09f720999524d1e7fa65e5620e1b42443fcc84b4ab753cc16673996207958053848e094d3e8f747c2c2a5a99293bfab2c89f2087ad2b4c3256c0d3c8738527dd7204955989759c869e71fd5a94b361a59101ea93cf5cb9d1f18b5aa3fdac4a8d295a66df8a7de1a5abff7f8a9f58f3c138eefd44cb08ed0c3ec5300f8b973810d6548589be2afce9c990a1ecfada3dca87fc843dba", 0xb3}], 0x4, &(0x7f00000017c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x453}}], 0x48}}], 0x3, 0x40) (async) sendmmsg$sock(r2, &(0x7f0000001840)=[{{&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x3ee933128afd4028, {0x3, 0x4, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="c620728bcb28a45e", 0x8}], 0x1, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0xa8}}, {{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="5c9a3255d70814d3429539a62082de66", 0x10}, {&(0x7f0000000440)="97fb553d6e30c83641561c81b6c7d270679d58f000377f2b34bc7db1e5c9dba0820e02267e2b46e41afa8dcc823a341fa84915389118f926d91b6d44a5c3fafc0ccca9e31e8f3a7289bd2b1f952dd9f59da7ec5589cbc5a952af53192eb7056e29421511cddf26771b31f398673d794be8112aa0c84d5bc9c846603239ff36ed6f5853c945d643f4d200c7698a74829a813aadf2ca22af06acb461d06742f164edd65674b64b47b47f4069655e9b791b4343e7e6e9ecab56f07f447a31f6b9c1c8e83b6828d0d382bf8669791c7b4b6329559208a59e1453c92e9bb53be9cff9ca4085", 0xe3}], 0x2}}, {{&(0x7f0000000580)=@isdn={0x22, 0x8, 0x5, 0x80, 0x3}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000600)="27f933c488a8572ae3900cb4381658edda668e01f1c58d0452c3fde3832d", 0x1e}, {&(0x7f00000006c0)="5983f609eb04a5bda75f296ee7c81d13761fa6da8a7bcc13622437d285bfc20945dd1d4a3bde5273cdcb96d9711d1e1d981b0b491aad2c53a5a020b72af06b5fc6ec4c20ffd28507b9b1e01657ab77cf863a4d917f780bdb03a27a43264b5bb104258a778cfa960d1d3bf9f2d3f029819c15fb17040960494ae09cd574a592c314e49cb1c19afa7a5e759951f99bbf9d70f454ef6566a450510ddbaf9c2b5c2735f141226c999c881b057b85fd9f3fdffe753015ed8a7efff650976d30f3453075676c67071f479a309c7d68304fc5d5366b3176f9ebf8842f3419b8028ede39f5680c5233c0899822639e909ed2174a564412413977b1ccba47de342760c5812321a8fddc2b0725d1130a2e9334dd1156d7b2fd68f923cd61db8780db8c641f809242dca7bf61ad7c4335936db7149a1159b160e0748473f6ab31363c55b41973d68a3c1150ee83702757e8899a5809b8b7ec849f2b0742846b97aaf2f72e86d2acb879d864930669d025b57746f4a4c73db7a371b3d3b27b61e1bceccffcf62b80338b5176921e746a75c9ae6a4339af696e68776beca9cd78a3515768c402b382c13416dd82d643e9741929e8136e52d5b98f7d3562e3e94e3f7abbeb0f9833c7bb0758e15d7fc760db0bf0ca757fdd67328e170eccfcfc0003c05a943c9c2bab217cbead6b38ed9592b4311dd12121db51f9fe89b109dc9c9495495f9aff86be6de314bc3738353464597f8b8a1a142bc646122ff535c1864ef3fd8dff1d97a69879b14aa057cec577fb48011c0f26fdd1f99f1f6e3980e43ea84e8bdf0ecdd5e25ab80a57157faae3488f292f1ba875c74fc915a3b28054aa841e1886b28daec0d88845e8afa1aeda7e73100ba5a5788742f4a477f52ba0a2aa743a4f3982e587f282c427a07d113b52d90aec951237c94d397eca37bf95219fba1ac90925fc896e3afd72a65bae8ffbfdcf374b3c001441ad21b88678be2c9b6484991893dd4d46891442801ee341126ae46dabad2fdfbf10b92ba85f633650b1828e89647a19f32811892b719652fd5b1932ad917f9b87e362febc45c9452fdf8e44061263febd929b12cc0f58219135893f9875b7d35a6e93bb2e88cda2944dc5bbff828093ce665ac925d23eef7f42c3623688c81d9164a9ced08be87d7989273b1277325005b928b8909d1f74dd7b65d63652e0161cd26ad7125c5ede0ba855ab533d5073a37bd03b74c58a823db9fb2adc8940ac28d2ac124a8a292fb50bd82f8b37e7552e025651f33960330f6289d460933346676607371d4cae4878a88e24606b9c73da9e28013b5f167dab39132481c012802999423ff711f25982f32c5509f7f579eca6402821569e74a3e1592861554a80bef95dc6bee2ff9f2de167db982be0bb3036a3d7a012d42de5baf4bb3ef2d3e2905e15bb57a315e8aa651f1be53053b4b165653942a5bae36e17f3fc97dcccf27bf2f47efc1b4ed3dc7c4421726030be2c3ccb12838f63d8925fc3459867b40eaadd3356c626d6fe49147e5f8de1aa44db3fcfe2bc651e9caf975b495ceec82c4f8e6a31952d31b4be3c15655cf5bfc32bd809a20d46c0b85e963270bf7f049786d27006fcfb147d80cab919c18321b95d737203e10f022477b728e7558909e1f44e708fd2d77709829a4297a135758efe72be1cb7c72ff6d7a2d8aaccd532eb3def41db818f099b9cc3c0c5b23081eb086e82f1e1a6eb71cc92fed1fb827e376e901d3553c2f849e8de3092ab46dc3d038220fe43cf1d527938cefcedcff42ef4af01db96363374e70084fde13a7b421d8dd0bb16063310e57a9c6a57e5449461d31eecb201d25548f2b10b8f7429127c9035759cdf5c603dc1eaf0cea13ff0cee6687472e6c5b38a15ed4daa1380a837bc665ec85c79d35963462cf10d7c32273e3d8c2786ab4d7b3ddc615cbfec85beeaa13740ed4ec3e9477caedb14c91a31be94382bdae85505245132f23f12d2fde09c96d93aeb93c0432defa189a1b31e0742438fc98d7cad9ff23a5e88d90e9b1d06012cf14c5484e87078ea814c9260684ad17915a63a9f2d4d2be71d48d5670e2ab6a00c11475498ed9d4ef2dca9bdb581cc7c0ad5a17da4c28908e3d8ad3ac4e2116eb3f608ab71b29025df8d44a40aba3e4af21896fa085d2f688943cfcc1db03c3aacb4deaefb2406bef3baa5db5fccc8cd095fb50411d0a6624c5f303aa2fb404250757636a11b1360daf4e80cda56f4579c7f8a42a59d821baf5d702671bd09864713aa6e7ed02b3f7df511064c78bd02dd442338797e2b5c44c12e978d777f32e26a19656f39733e28b26878b3689d528ec02b402e68ef0e0bd2f557fdd117c78fb37bb4c969ea9aa74ebdb0303762bdaf3935a83fa3bad14cce7cf2eee9ffa9ad663c1308e84f2826b4299d054e9b2e5ea60a919a4ecd6daa44776b6a0b57183acd05d1d29d0caaebb4cea7d71527b1b48a92120db1ae2170ab3a1d30b863db7e2e4d59a58b181211c4cdfcaa54b5e9e6bc78a2ee0954c69b6d8bb7622771067ae9f038d3b22a059b7581bf0df832cb434750a16fc0d6363fdec3135d50ae6eb97a2c4802e2cb28e184cec158d74e023b9a5d546633c65a3d18f86b2cd89ac475eef8c211a28a5210dd521f274c543fbabbfbaaf27bb265bbbf129ed7088ec436ee2a9ed5e4d611a1d82301b5792a810437b20b177ac9e7683b2ff8ae28057dafeffeec2a1e37904efba0dcc07143fe8d433d90a21613fd1b50857a168fffbe36829398ee6b94c84e7ef5bb307a118554fbe17aef6a440e14ac73133e3d8f897d2290510d4829e136c4763500a236320190d32923058f4cbdbeb2af446eee619d484ad63ffd5338c223c9415f73482d69fadcec4ce0eaa1ec205fea03ac81a6353a40611366f3d6122ecef40133a087acb4881d85ff99474e70dc8feac4993fdd8a9ce88f0c0ec813e99c78952accb8435af8d10b8bebae008ebf93a4694601f84345cf07f759a6e782bc02256b238cdc0be90120400a1496e0a96fd0648601f3986af6cff83aa620609b726ba0d59824ebf23b6e7b462371d113c5fcf5bc7bf67b6d54272adba4dc5047094ea280a1fc3932a38aad39e6eebe221299c9f78a1238b1bb61cd5691f32c56d2f2d492dd035abb0c171ac8d8897c158233b0acf3ef6d6151b463a86dc17c25277cdc901e49a862bebafc5734b32c1c7307186ac5e67c449d930da0379a7b6ee2e6a62b9e9bd2f08979facf9f063e16b82b5f1cf693a60ee4d59b08105515bd65399fdbe04d3fccdbafe1d49d1b899938ff594bdb55b2865bba92a984fb1c18b4a511754ec9709caa993e2d7f744d07cc31f8064be791b39e5d239efc73cd8a69e759522dbe71e633d85cbef41372391e2997719d76cc44bdb34a45a58a179fb7680330ca48443ad9b6a52f7985e474f9c2190e8e135034f41e39a427a840936c9d4af7f71553cfd488ed8418bcd4bb74e2e967f590f5fc434515ff4ac440de4a5eee09b2460de3a4371333125106cb2edb8199c8cb2df891f0ee2c69b1ad7dcafc5d31b12aa27978cc7e4a10a8f074d44f81593f0e47958ddcf28da5305408dce44a16f808230ce6b3a60bbb8720f58572e56562212e6bdff50ec21d1dfcfa46323ce470f27520fd4f1aaa1dbdc928fca2c8285802dd91da23d9c20a6291bf9adb368c4c6b29dca9604adf6743adcc5c22937313961346dba7ed76f0a33e8e674079256f45c37e007e47c48a1cd3b88d1669008868ffd3f99acc32d022e2673b52ca1e1e52feeac9bc4d91931667a6897b01420e54e52ccae6c56e4263215c09238fd251e90b22408009e8a5b667d338d5e44cf03b5b23d7cbe1946b9a78d6e1df057643007af61c845029962a6dafaeaee5effc4bb104b29c71ba5372ec7836ceb119bdb4be69670c37129e3bc5727ac0b8d8272c98f7a0a3a7222661eff9c377cf23567840eb1f3b16d97b645266a2a6dcd52830badf6eb40938ffe8def3e75a04c368bcdc3a82f9bde74c9a337f2df6df30d4de53c6d560f7876b9ae3f0a4d832e77101659b4bd77b0e76377e04c6b246fc72c9b0c66fb7008179e2b190b2034e320ee5879dbfd5778c7c2eb9f6b9c65d70b91653a8539b87581a9fda38f12df14a4dc734da83da6e694e5abc1a67959ea574d0d859a45c66d18cb02f1c4c9bf14f0b7ef08fc6081444e28f6aee8e0129dabae39da97f631f055b7341d1ba9128110a61218efc3489d6a8ded497007850a2ec104437a966c9f6b4adca2418b1deaf3840868abb58cceb3f37e7e63b50dd402c0ee9b387a0b15fbbdecf310fc5b7b0ed7bfc6c808e27c0dffb1d64dbaddec5b34b758331343b619dbb429dc590af8e1c36135e1681e71c8905b40dcf68f3cd8e96b56d2b71262799f918fe7b8b27915b7758cc9353ab08305b0fb740263272f5b996f3773e64213fcb3f5be911c83e0496d5967916c3bc099ad737029868b0533d506692ce9894aa79290028f6aace622e3651f76d45a416e3c8d6dbba554a4c2a580efd5c9d79cbdf1a56f69d21ea119dad82baee3bcd15397d8c3edf0e04e61fc4cc37b37e04e8201ed12f082799207d619d28c728a9222e2bcfe72492b07909351b29c8665af98a460fe9ca976ef4eafa0ef4f7f85d0d1b5454a019f3ec031e6d507081c70e4e6194f009ca222e29373029349089561622b10707f311a8eb499ed3386122935b58d1fe43e02321c52e419108815ed18b0b6bf04baa80acd9cd3bc5fb883c3b8f767deadc8082b0814dff1c7a6383c4625e6b92be33634fbdf36ef86f3a75d16a1f54d22e104988ea36a5b62e8e17e0859232e102c5e7f16ebe75444b834ec2a5e78ebf91075bd16d2f78d3604fb5e42eddf856f608277facb6f50cb2eff5b03ff9d46dae0ea2c74bb2c5a4e6796a14b04ae4e0083c9994b3c1631d39bb70b5b0c6ca2f8f8c111dea6dbc84a2ae3ffb32a117d8978c78e1af7426b439b0204349fd671dfcd96edf78aee3b8f69731b5b5b5a4ada588700c3fcc449f6b5ac9840d3c37a0ef9169ff6af4ad335884c6a99eb95022f233a5dd12c7e1b08c5396e4c958f46c992f051c0a0dd89b07c138ca7230f0d27793830f320a66ebf8d178127e563083a2295ab9ed5f58f71ec7747b73765cb93bb9c0aebe6a0086bd2bc33fa232907b5775e451cab95fee8797fb55cd8784307f0dd5fdd35fb9d6eb69efb59cc72ff772b1540328811d8cc5339fd8c859f55d2884d5ea67229da34586764fdd46db73e11e9982f60482885f5df7250b4eb11494e1809781e2a63de34a9aa9dff0a6cdf2d17a9e2a8958dd33fd787a5087feccc8f83d655a3ad44f523a43ea745ca13fce425adb0fe6c51d227e55362712d342d85124bb0ad0bde1159411fd95cf0b9a4ac67282a9ec4eff8ea627debe8ac87680fe95501f2fc1e5e7d788aecabc8a7f2b1accc55b73650a78b5fdb913f527dc902be07e253f2901636e1c3155b83fda9d0f0277fa2d195ae2f02f852ed2aad09d95155ed75ab0c878e5d6c3dc076766835de8eae6ef9334164682d9625339986e681dcf9a698d9750aa2a56ad9f86c711a32f9b2b15f1c157493a7bc008b87aa2f35d2dd163471815016e2e4e4644d1deaa355637673f1807c94ad9ae49d99aa7456d577665fdf2c3d52f62456021df24dd696acd2699d4cbfa2b1f3b12d2a893d9c2e85da0cda46082bf1d62de478fd424c9aa94d20e349f081e72c86cb29848f6c1079105f2770c172e9430fb7f82507a19706ed075a35b80a8c147", 0x1000}, {&(0x7f0000000640)="d7e45b26440c0988baff5cd7a588ba5803921b7f", 0x14}, {&(0x7f00000016c0)="639427d3bb4fe195210ba3fb7c3981289eba98f846b67b1324b6ff0b582d09f720999524d1e7fa65e5620e1b42443fcc84b4ab753cc16673996207958053848e094d3e8f747c2c2a5a99293bfab2c89f2087ad2b4c3256c0d3c8738527dd7204955989759c869e71fd5a94b361a59101ea93cf5cb9d1f18b5aa3fdac4a8d295a66df8a7de1a5abff7f8a9f58f3c138eefd44cb08ed0c3ec5300f8b973810d6548589be2afce9c990a1ecfada3dca87fc843dba", 0xb3}], 0x4, &(0x7f00000017c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x453}}], 0x48}}], 0x3, 0x40) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) setsockopt(r2, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a0b04000000000000000002000000cc00048024000180090001006d65746100000000140002800800024000000020080001400000000c940001800a00010072616e676500000084000280380004803400028008000340000000080900020073797a32000000000900020073797a300000000008000180fffffffb0800034000000007480004804400028008000180fffffffc0900020073797a300000000008000340000000040900020073797a310000000008000180ffffffff08000340000000010800018000000003100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x120}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000001200)={0xffffffffffffffff}) splice(r5, &(0x7f00000064c0)=0x8, r4, 0x0, 0x10, 0x0) (async) splice(r5, &(0x7f00000064c0)=0x8, r4, 0x0, 0x10, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400030400000028bd700000fb00000200017f000000000000000b00000000"], 0x20}}, 0x0) getpeername(r0, 0x0, &(0x7f0000000100)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.514548619s ago: executing program 4 (id=2185): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3ff, 0x7, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0xeeec, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6db17e642b891263}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000400}, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x3, @local, 0x7}}, 0xf, 0x0, 0x77, 0x52ad, 0x4, 0x8, 0x2}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x7ff}, &(0x7f0000000340)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="72b0aa0a7eed"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000500), 0x9) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r0}, 0x4) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r1, 0x1d1, 0x40}, 0xc) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000005c0)={0x0, 0x3, 0x7, 0xffffffffffff282b}) (rerun: 64) r5 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r5, &(0x7f0000006700)=[{{&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/16, 0x10}], 0x1, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000980)=""/129, 0x81}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000bc0)=""/243, 0xf3}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/50, 0x32}, {&(0x7f0000001d00)=""/25, 0x19}], 0x4, &(0x7f0000001d80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001ec0)=""/250, 0xfa}, {&(0x7f0000001fc0)=""/41, 0x29}, {&(0x7f0000002000)=""/193, 0xc1}, {&(0x7f0000002100)=""/201, 0xc9}, {&(0x7f0000002200)=""/112, 0x70}, {&(0x7f0000002280)=""/34, 0x22}, {&(0x7f00000022c0)=""/58, 0x3a}, {&(0x7f0000002300)=""/45, 0x2d}, {&(0x7f0000002340)=""/5, 0x5}, {&(0x7f0000002380)=""/184, 0xb8}], 0xa, &(0x7f0000002500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002540)=""/61, 0x3d}, {&(0x7f0000002580)=""/183, 0xb7}], 0x2, &(0x7f0000002680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/13, 0xd}, {&(0x7f00000038c0)=""/113, 0x71}, {&(0x7f0000003940)=""/242, 0xf2}, {&(0x7f0000003a40)=""/239, 0xef}, {&(0x7f0000003b40)=""/216, 0xd8}, {&(0x7f0000003c40)=""/169, 0xa9}, {&(0x7f0000003d00)=""/203, 0xcb}, {&(0x7f0000003e00)=""/216, 0xd8}], 0x9, &(0x7f0000003fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004000)=""/22, 0x16}, {&(0x7f0000004040)=""/62, 0x3e}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/117, 0x75}, {&(0x7f0000005100)=""/34, 0x22}, {&(0x7f0000005140)=""/120, 0x78}, {&(0x7f00000051c0)=""/39, 0x27}, {&(0x7f0000005200)=""/251, 0xfb}], 0x8, &(0x7f0000005380)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000005480)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f0000005500)=""/27, 0x1b}, {&(0x7f0000005540)}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/21, 0x15}, {&(0x7f00000065c0)=""/143, 0x8f}], 0x5}}], 0x8, 0x10020, &(0x7f0000006900)={0x77359400}) socket$inet(0x2, 0xa, 0x3ff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000006a80)={r6, &(0x7f0000006940)="42463f44baa6e5a3a95e43f03841ebef0636a8f7c2626c2e2d2ac4dadc6aae43bc1dba01dacd836f3fe156c8404731139f28eb44797b82919468af6ef555360c84bb565a9f1a04ab5c9993769027acbec1135648b7ceecdc17ca05538a27ed24c45a36a1d66b438a688a8bcbfd4764afcbf386fdca1d562b47500f24532673ea337b0e23edb2c0afd11ab6ca2c8840649d79ab766c88f21f15ea75a30a494782f380f71a02d7960295483d2d0c162971e40f1b2fe5b55c1ece2d83bc3fc5", &(0x7f0000006a00)=""/116}, 0x20) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000006ac0)=[@window={0x3, 0x7, 0x9}, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x101}], 0x5) openat$cgroup_ro(r18, &(0x7f0000006b00)='blkio.bfq.io_queued\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r14, 0x6, 0x15, &(0x7f0000006b40)=0x8, 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000006bc0)={'ipvlan1\x00', &(0x7f0000006b80)=@ethtool_regs={0x4, 0x80000001, 0x6, "123105fdb1db"}}) (async) getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000006c00)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x0, 0x2, 0x4, 0x76, 0x800]}, &(0x7f0000006c80)=0x78) socket$unix(0x1, 0x5, 0x0) (async) sendmmsg$inet(r17, &(0x7f0000006e80)=[{{&(0x7f0000006cc0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000006dc0)=[{&(0x7f0000006d00)="7b85a65e6b491c2b858c76def4497b8077104944a56e1af051d48cc5fd90d2dc0ad24f524f9891ae87a9259cd77c501496e239092df548da0a31b0bd829d7917894808704fc6e2b2238ec2dfaf3f99ddaf7ef7ceb12ffc1d05e393722fa0b1c16e2da0e0e515ca694af5af7af6e86612ffa4bb5e5136", 0x76}, {&(0x7f0000006d80)="45b4ffd3efafcdfb3f00151e9deb117b69cddfcc5c1647b44da5298f636b3482a5ab83aebdecc38e49b76d8d81a236a4e7ba", 0x32}], 0x2, &(0x7f0000006e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x88, 0xa, "a6c6212c26d01df3"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x50}}], 0x1, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000006ec0)={r16, 0x8, 0x200, 0x6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000006f00)={r2, @in={{0x2, 0x4e21, @empty}}, 0x2, 0xff80, 0x8c7, 0x0, 0x91, 0x6, 0x81}, 0x9c) (async) setsockopt$inet_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000006fc0), 0x4) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000007040)={'erspan0\x00', &(0x7f0000007000)={'tunl0\x00', 0x0, 0x700, 0x7, 0x3, 0x201, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @loopback, {[@noop]}}}}}) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000007080)=@bloom_filter={0x1e, 0xd4afbc6, 0xa295, 0xf, 0x0, r10, 0xfe000000, '\x00', r19, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x7}, 0x50) 19.347548671s ago: executing program 4 (id=2186): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72076fdbd11017c1a40f6f56bd41d59dcbabc1440634b9c7d6c12128a25de47cd5f85b9eecdacf10621e9dafb7a304208d2a10a3c99837", 0x4d}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c617665"], 0x2c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, r8}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r9, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r10, r9, 0x6, 0x0, 0x0, @void, @value=r10, @void, @void, r11}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, r6, 0x29, 0x20, 0x0, @void, @void, @void, @value, r11}, 0x20) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 19.144806329s ago: executing program 2 (id=2187): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="2edc614772dd6e487fe6b8b51a12f1398ddc25", 0x13}], 0x1, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000003c0)="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", 0x182}, {&(0x7f0000000800)="3ec347663c099e51b14f69819afc92c21a425d8e9916373e6e3e341132090609d322970f842051be9cbd920891541ec975011ed4250b6124add2", 0x3a}, {&(0x7f0000000580)="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", 0x13c}], 0x4, 0x0, 0x0, 0x20000011}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)="ef3c13d0298e534f80c5946dadd252512eb2", 0x12}], 0x1, 0x0, 0x0, 0x4000000}}], 0x3, 0x40045) 19.132759573s ago: executing program 0 (id=2188): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 19.029662362s ago: executing program 0 (id=2190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "bd4a8e165ba29be8", "595786437e882122fba8132c60b2e265", "17ede429", "47f47ac2f711d652"}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0xd2, &(0x7f0000000200)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "feea4dd68b69576f1d4f8929b1f388f5c395fe9ab4ed2608fed9b7f3cc86e3af", "821cabc2685bd2ae1217833b5640bc2a75fd27176674b7b141fec00686ea8e2a3384770b7152030b6006db8226451bf4", "4613e9bcfb1dcca96ca9e01aa3f5dbb1e358e6e308cbace1fe246ff7", {"b44cb1a0a71b0525aaee74f04721494a", "aa1daf64cb8dbb4676b9c3b0631f32dc"}}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8008, 0x1, 0x80000000, 0x9, {{0x14, 0x4, 0x2, 0x7, 0x50, 0x67, 0x0, 0x9, 0x0, 0x0, @broadcast, @multicast1, {[@end, @noop, @rr={0x7, 0x23, 0xef, [@rand_addr=0x64010100, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @local]}, @rr={0x7, 0x17, 0xff, [@multicast1, @multicast2, @multicast2, @loopback, @empty]}]}}}}}) epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x9, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x7, @empty}, 0x1c) shutdown(r4, 0x1) 19.017675331s ago: executing program 2 (id=2191): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000340)={0x9, {{0xa, 0x4e24, 0x4, @mcast1, 0xffffffff}}, {{0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18.887599202s ago: executing program 2 (id=2192): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000100000000000003"], 0x0, 0x56, 0x0, 0x8}, 0x28) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0), 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x9, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40081) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x9}}, 0x2, 0x9, 0xe7, 0x2, 0x2}, &(0x7f00000004c0)=0x98) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='dlm_lock_end\x00'}, 0x18) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9e7}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @generic={0x4, 0x6, 0x6, 0x3, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffa}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f0000000640)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f0000003f80)) 18.880255375s ago: executing program 0 (id=2193): socket$inet(0x2, 0x6, 0x1d) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)={r3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x1, 0x3}, &(0x7f00000000c0)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a3200"], 0xd4}}, 0x40880) 18.839705627s ago: executing program 1 (id=2194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 18.8358242s ago: executing program 2 (id=2195): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@remote}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x9}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x23c}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 'vcan0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003b80)="87", 0x1}], 0x20}}], 0x1, 0x4080) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r3, &(0x7f0000000040)="05000000010000", 0x7) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$netlink(0x10, 0x3, 0x7) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e80000001200050929bd7000fdd9df252a0904004e254e26fdffffff24090000080000000900000003000000050000001000000000000000", @ANYRES32=0x0, @ANYBLOB="03000100000000000000000000fff7ff990001000d8b94"], 0xe8}, 0x1, 0x0, 0x0, 0x26004811}, 0x2004c080) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000480) r7 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000740)) 18.56766832s ago: executing program 1 (id=2196): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000000000)="0b7bff988a2b8e85b1e585c911c8c6b5e58d97b7e75c1531500b89a1343c57469a498c3db290fd5e2d581c4d49331ec3bac92d2dc7018af63de97f7ec693b1c2c8ec5c2c7bf214b432508cf60e071cf3e94c05f3bd7e7b6a164acbba111b74bdf4748041dbf516cceb48c524021a934599501508c89011e95df9d2d577b401853a1a0b1af01cd17a28722055ad0c7756b5bbc4380a909303812d7d95e4a897242f360871335416504e891fc8120a8b830355c827ab942c6f4460d05e05c4", 0xbe}, {&(0x7f0000000140)="e4115f2e362abeff22532b85fca3632be862c40458e6a94746abb128965c3122134e92b1a9ab6efa8d54", 0x2a}, {&(0x7f0000002140)="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", 0x1000}], 0x4, 0x7f, 0x4) 18.560489954s ago: executing program 3 (id=2197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) (rerun: 64) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x510, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x110, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8a}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1, 0x1, 0xb7}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x97, 0xa, "dd3880d0346528ed2d359c3d9a52bec4b518001302ae23bd58d1a36bf2e7bcc2671dce6bed053f859d9b6693cf3d36b7cf620d083f794c6052184ff57e13b6ebeb938b3e92abdbe6f5ef1aa3e6ff7add20f7199ae9cbab349cf9f64cf9e5df638699dd75646961a1d02aa24c45d7f32a5bf4106945cfffece56dad512b7f1f872e85cfc600785923c14c00072800133a20e4c6"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xc3}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x11, 0xb, "527a6b75a97dc1dd584b999754"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1b8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1a4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xd2, 0xa, "339d5d507c76d3f44fdbf2c4c8046017500bd6c68f38c39965f92f175fbb110c25acdb9ef7dc59605c692ef262166dc51b24a307a99fd3db215dfc52fcfc1463cfe1c2412a1c35fd7c5611348bca00b3fb0af3747e6ae1b9b34bb7d81ab71f3848df47aa222724559aaf42938a1f75ef95949d38ecd4318656fbbf6a57465e4cfd25ec700f305c79623cf0fea4f4414d014eb1fd773343db2cae4fd9c2384ce7b3ee58d574c15507efd27055e067011a9351019f7dab0de19f570833a548be1e5ba6212d69617c241bb07ccd4774"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xc4, 0xb, "0805c57c1b2336d38a0da97fca488a313aa47108d8a993be884d0b3b42e1ba2ec273563ed31ed37470e48a11027e4efba552c4836b34048ca0eb4dfff4931c9f7cb86e5b8d512d7082a9d5504b0c174832f84fb01f39e2c77e2453a7b0bc3c8d59bb1463c8b6ad001661529cb90febb60b3f6163f21039d10a6504f90318b587d025bffa4a4b9439cbdccf427b75df95119a87539e70cd75dfbe64bfa85873f8ac8b32779db952f60a8f3f236e12bd278725b24b513caa8a0b76c42bb799f3c0"}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1ec, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7f}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x120, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x91e, 0x2}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xf9, 0xa, "7547f8208b15d27fdd82ab16019088d89c59773cacb2431e54ce8d34d0c6d1aa48c851364d3cd6aa99d2ac144b60447d20bb8b28d30637d5cae5437dba6b7f94fb249b48687c5af08a3805987c9dc0bb63f8873ca6831f48cb8030a041a6211813fc182142adae38333ab3dfeb0e95004f60b648dd5a53d4f6dd7e8b303d1006201123718f76353cab8c3f5123a7acff790fc451391ec129d64ad60e1a514d9c41c0fc96dd6b60816a65ba249c89822c147dd5a641734082c8cd7e8b6066f88bbac32d6ef780dc0da6bbb4f38b87bfbdd939f775eae400eb4afd3ab0c2e8977f83777272c9fa4e0187e912d52bceba48742d5622b4"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x8}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x54, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xb9}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x3f, 0xb, "d622498e529a268873d5f3ee2177cb7532b2b272588627661a2008db8c6df93269cf348c60c4618bed48423787a3caceafa9f1e746a27abc72a90a"}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x60, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x3}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x50, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4b, 0x0, "e0c24153f3be37a0d3c6e6e2418ee9a4e1ce7d6664a491237d1a044a41d75de87a25706c2170fa85ff7b9266e5873aab3b775938509da34a5bb04420f38f093e3afc51ed3ccc4f"}]}]}]}]}, 0x510}, 0x1, 0x0, 0x0, 0x1}, 0xc880) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000007000000030000004500f4fffcffffff18000000060000040000000009000000bf91200000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000c80)={0x448, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x7}, {}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x8}, {0x1, 0xb}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x3, 0x3}, {0x3}, {0x1, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8000, 0x0, 0x6, 0x8, 0x8, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0xb, 0x48, 0xc, 0x24, 0xb, 0x16, 0x1b, 0x1, 0x3, 0x4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x5, 0x6, 0x47f5, 0xc, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x0, 0x5, 0x400, 0x1ff, 0x200, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x2, 0x2, 0x1b, 0xb, 0x3, 0x3, 0xd833ffa3129124bd, 0x4, 0x16, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x6, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x7}, {0x6}, {0x2, 0x5}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x3}, {0x2, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x16, 0x4, 0x36, 0x2, 0xa, 0x6c, 0xc, 0x12, 0x12, 0x24, 0x5, 0x6, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb4, 0x8, 0x2, 0x3, 0x4, 0xfbd9, 0x400]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x7}, {0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x7, 0x3}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x8}, {0x3}, {0x1, 0x5}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x70d, 0x3, 0xe000, 0x8, 0x1, 0x4918, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x209, 0x0, 0xd606, 0x8, 0x3, 0x81, 0xb5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0xffff, 0x6, 0x8, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x9}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x4, 0x9}, {}, {0x3, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x0, 0x24, 0x12, 0x60, 0x4, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff2, 0x6, 0x5, 0x6, 0xf9d, 0x9, 0x3, 0x40b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x3ff, 0x6, 0x2, 0x6, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x7, 0x0, 0x2, 0x401, 0x4, 0xd86, 0x81]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x6, 0x6, 0x6, 0x3ff, 0x401, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x80, 0x1ff, 0x80, 0x6, 0x7, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x81, 0x5, 0x645, 0x4, 0x5, 0x1, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x77, 0xfff, 0x3, 0x2, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x0, 0x3, 0x4, 0x7fff, 0x40, 0xfffc]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x6, 0xff, 0x7, 0xbe3, 0x1ff, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x4, 0x12, 0x18, 0x3, 0x48, 0x48, 0xc, 0x3, 0x12, 0x1b, 0x16, 0x24, 0x4]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x1, 0x8, 0x7a72, 0x87, 0x3, 0x7c48]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xa, 0x6, 0x6, 0xb7b7, 0x5, 0xa9, 0x26]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x8, 0x2, 0x6a, 0xe777, 0xcdb, 0x7]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x1b, 0x9, 0xc, 0x1, 0x1, 0x5, 0x16, 0x2, 0x1, 0x6, 0x9, 0xc145f656d7f1243e, 0x68, 0x1b, 0x2, 0x60, 0x6c, 0x2, 0x12, 0x6c, 0x60, 0x3, 0x0, 0x60, 0x6c, 0x3, 0x2, 0x1b, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb63, 0x4, 0x91c7, 0x6, 0x56, 0xb5a6, 0x4, 0x8]}}]}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000801) 18.382071674s ago: executing program 0 (id=2198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000002aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 18.327717235s ago: executing program 1 (id=2199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00004000000003ff02000000e400000000000000000001f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00004000000003ff02000000e400000000000000000001f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000000)="6a196d415dc5f34ceef8d05ff0443c5dd176345378354cb957a9289fd2a2d78b0866f79da988f12331f8f5e6c429dfb0ef5fc8aaa5301f78735dae64bb2105927e171b2c5ab867f33b9372f50d449ee3c7e935c89808a0651024022085fb9360bddb257b5cbdc5dc6d6cb21fd0294e2c50bce7c06fa40d43139b880b1e1fd5ca342546bd93020f8c51a68cd9e9d7e9d97480a60e", &(0x7f00000000c0)=""/159, &(0x7f0000000280)="470b29c788c1ea168a75e31282c761ecdca4bedd5b224a4673454c924a4a11fadcc862ef373c80f1cdd509880c17d4faa77270d756db3343db9aa70eaca5db127f155ae5b0c1dd53813fca43975dd495f799086ef5b1fd6c6e5e4248181f9cce68bf60bfcb088656667ec2d60c3a7974cf2a0e3cae73d6a468bb5556a8ba7bf3ad756a57eb9248cc59f95fc0607a4caf35eabbf28a3db60749967f11ba94fbc6134be88656f0180f1dd8403ae575b3a109fa9bfe239fbbad699d0b068c4b4dca6135652706245e5496a283dc531f917ef4cf3f09af5a2d6e16f71f", &(0x7f0000000540)="a8e2dc1a81b0226889b9b6b1fb367ce40a31f82578d506bd606f51627c1aa8da6d1d068d34bbd9f52fb40d0f38b03f445a41173bf6f20f4e7f00f855835f81bc97735e9f1b2ef9f186fac9007b23d5230c704d044107f99590396831578160886e6ab0ad0b49498e0b4921deb5fc071a9b4abfb5df1d0a81dff11816d84d45844b02eff1f4f39227306fefcd4bc477e951b23e040be518b789ae501214642d177d21f9f8015a8c7e73064a104c1c74a0b0cb206b7b1c123e3e8ebc8358588dc68a0a8c731c82060fe218205f1a1e9296c337cfce566d4720f66e5603f4fd77a011477c015cad938eb928eec762ff537b431d2a", 0xfffffffc, r0}, 0x38) 18.307403462s ago: executing program 2 (id=2200): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', 0x10000}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000b40)={r8, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f8", 0x5c}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r9], &(0x7f0000000240)='GPL\x00', 0x404, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18) sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000dbd625174bc93b"], 0x14}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000044d0ffff030000000d00000000020000", @ANYRES32, @ANYBLOB="ffffff9ea7d24b0d045c1300000091e50000000000009fac5c771eefabcd9db340", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000020000000900"/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r11, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r13, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f0000000980)=[r11, r12, r11, r11, r11, 0xffffffffffffffff, r11, r11, 0x1], 0x0, 0x10, 0x101}, 0x94) close(r5) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYBLOB="0df49af09208"], 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) 18.276845341s ago: executing program 3 (id=2201): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRESOCT=r1], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r4], 0x9c}}, 0x40) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x58, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000ccf85"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r10 = socket(0x10, 0x803, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x5a21, 0x2, 0x3, 0x2, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102", 0x8}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) sendmmsg$inet6(r12, &(0x7f0000001280)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf", 0x1f}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) socket$can_raw(0x1d, 0x3, 0x1) 18.215575193s ago: executing program 0 (id=2202): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x0, 0x6, 0xfc, &(0x7f00000002c0)="2101c0ef0311", &(0x7f00000003c0)=""/252, 0x27c, 0x0, 0x6d, 0xd9, &(0x7f0000000580)="003df934b8b8f4d152d1d631d137b922b506078636d553927bc51c7078d8a48e4e1d4d252cb8d845c20b6f36526922ef096864106163e53fce38f84e3b8fd5d15540eb45fbdb3f87076cce9ab2c43cea8cd9bac3bb4197f6fee2d22152e07175cfb8da28c50b9c652830eba11f", &(0x7f0000000680)="c4f173f72ab8e5fe0756f610d233ea96eed78c98560fa951510c5baaf2d3d298953db466be1fa01c0da922490f6d0ad7e6ba353b525a82240c32605293b02835db9a1a04e6b83597fdaa40f6baa044b3b0c44da465592319847b2a161bd793ca154a5aeb1ec6398ccdfccb0a1e26182342e9ae34a688fd85a0434402b810fd27aa4dcdb95c6e503096dc7bc032c69e2f908382006e63b8c218d37a3f9e1479cd5b193b5b9d7b153cda33634be9852ee38c4ab9bfdafbddcfacff55fcea748d31cf292a904035e9ea5737045cdd3d2db794e8be78b248ef033a", 0x2, 0x0, 0xd413}, 0x50) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0xb8, r9, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc90}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x400c012) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r6}, 0x38) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) 18.155862952s ago: executing program 1 (id=2203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "bd4a8e165ba29be8", "595786437e882122fba8132c60b2e265", "17ede429", "47f47ac2f711d652"}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0xd2, &(0x7f0000000200)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "feea4dd68b69576f1d4f8929b1f388f5c395fe9ab4ed2608fed9b7f3cc86e3af", "821cabc2685bd2ae1217833b5640bc2a75fd27176674b7b141fec00686ea8e2a3384770b7152030b6006db8226451bf4", "4613e9bcfb1dcca96ca9e01aa3f5dbb1e358e6e308cbace1fe246ff7", {"b44cb1a0a71b0525aaee74f04721494a", "aa1daf64cb8dbb4676b9c3b0631f32dc"}}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8008, 0x1, 0x80000000, 0x9, {{0x14, 0x4, 0x2, 0x7, 0x50, 0x67, 0x0, 0x9, 0x0, 0x0, @broadcast, @multicast1, {[@end, @noop, @rr={0x7, 0x23, 0xef, [@rand_addr=0x64010100, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @local]}, @rr={0x7, 0x17, 0xff, [@multicast1, @multicast2, @empty, @loopback, @empty]}]}}}}}) epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x9, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x7, @empty}, 0x1c) shutdown(r4, 0x1) 18.138965177s ago: executing program 3 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='dlm_ast\x00', r1, 0x0, 0x1}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) (async, rerun: 64) r2 = socket(0x10, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @loopback, 0x0, 0x10, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x15, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x0, 0xffffffff, 0x3}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000304266687adcb86dadebd7000dcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a3faa88801200500180012800e000100776972656775617264000000040002800800290093570700"], 0x40}}, 0x440088c4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r5}}], 0x20, 0xc005}], 0x1, 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x9c}, 0x8) 18.015707964s ago: executing program 0 (id=2205): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000d23e44fad5f6bc934526f415e800000000000000070000008202000008000000b2629bba48d82148667763da950bd26adb13"], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xaa}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffff, 0xd}, {0xffe0, 0xe}, {0xfff3, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000240)={0x11, 0x16, r5, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 18.014761391s ago: executing program 2 (id=2206): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(r7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x70bd25, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) 17.980313491s ago: executing program 1 (id=2207): recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40002001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x40082) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x15, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x117}]}, @generic='V']}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = socket(0x1, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f974c288a94d2dc0db0cc", 0x11}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 17.830393963s ago: executing program 3 (id=2208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x5e5, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @private=0x4}, 0x6}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r0}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000140)) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x158}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@caif=@rfm={0x25, 0x8, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10013, r4, 0x9a3ed000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000003140)="c4f5dde90d290241b1574bbcc5ad26606e65ca23cfe9b27ee0e312ee2111b7d39c72eeb12d03902fe40f85492970a92c4c74aeeb0b2e47feae71c8a9fc20c539a42720bb989d95b38de73cb784cd7af6d839952c0897ea696df0eea06a92cb96602abaaa6f7352eb29fe8d2f64c4fa4b25b34c1e298b6466d3f7d1ffda191764835b6c8e9648da2370f9c654bb3a001dd02a4bbc4d73a0d32beef8fec6d69c57f92e45d38c6422ef250f2887fccec0385a3b3ed04188b8b1cf91eb108123", 0xbe}, {0x0}], 0x3}, 0x40008c1) shutdown(r0, 0x1) 17.445680598s ago: executing program 4 (id=2209): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x76}, @jmp={0x5, 0x1, 0xc, 0xb, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x0, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x76}, @jmp={0x5, 0x1, 0xc, 0xb, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x23, 0x0, 0xe) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) (async) 16.999622487s ago: executing program 1 (id=2210): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08"], 0xd8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r2, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r2) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/3, 0x3}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4000000010901040000000000000000000000000900010073797a31000000000900010073797a310000000008000340000000000c00048008000140000000000c00048008000140000000070800054000000000740002001400018008000100ffffffff08000200ac1414bb"], 0xd4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) unshare(0x20400) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="01006f8f215304629366e104000000000000000077bf0b43059d9a58f354e73d20f2a54200000000fdfd0562dc07631e397d4a6182a641d5ea39f6", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01000000900000000000080000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004001d61018e798582ad4eecc09d70000ce2a4fa7a0aa108b"], 0x48}}, 0x40884) 2.665882407s ago: executing program 32 (id=2205): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000d23e44fad5f6bc934526f415e800000000000000070000008202000008000000b2629bba48d82148667763da950bd26adb13"], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xaa}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffff, 0xd}, {0xffe0, 0xe}, {0xfff3, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000240)={0x11, 0x16, r5, 0x1, 0x8, 0x6, @local}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 2.539652568s ago: executing program 33 (id=2206): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(r7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x70bd25, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) 2.290043711s ago: executing program 34 (id=2208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x5e5, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @private=0x4}, 0x6}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r0}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000140)) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x158}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@caif=@rfm={0x25, 0x8, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x10013, r4, 0x9a3ed000) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000003140)="c4f5dde90d290241b1574bbcc5ad26606e65ca23cfe9b27ee0e312ee2111b7d39c72eeb12d03902fe40f85492970a92c4c74aeeb0b2e47feae71c8a9fc20c539a42720bb989d95b38de73cb784cd7af6d839952c0897ea696df0eea06a92cb96602abaaa6f7352eb29fe8d2f64c4fa4b25b34c1e298b6466d3f7d1ffda191764835b6c8e9648da2370f9c654bb3a001dd02a4bbc4d73a0d32beef8fec6d69c57f92e45d38c6422ef250f2887fccec0385a3b3ed04188b8b1cf91eb108123", 0xbe}, {0x0}], 0x3}, 0x40008c1) shutdown(r0, 0x1) 799.118088ms ago: executing program 35 (id=2210): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08"], 0xd8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r2, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r2) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/3, 0x3}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4000000010901040000000000000000000000000900010073797a31000000000900010073797a310000000008000340000000000c00048008000140000000000c00048008000140000000070800054000000000740002001400018008000100ffffffff08000200ac1414bb"], 0xd4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) unshare(0x20400) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="01006f8f215304629366e104000000000000000077bf0b43059d9a58f354e73d20f2a54200000000fdfd0562dc07631e397d4a6182a641d5ea39f6", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01000000900000000000080000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004001d61018e798582ad4eecc09d70000ce2a4fa7a0aa108b"], 0x48}}, 0x40884) 0s ago: executing program 36 (id=2209): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x76}, @jmp={0x5, 0x1, 0xc, 0xb, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x0, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x76}, @jmp={0x5, 0x1, 0xc, 0xb, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x23, 0x0, 0xe) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) (async) kernel console output (not intermixed with test programs): [ T7272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.109014][ T7272] bridge0: port 2(bond2) entered blocking state [ 115.125886][ T7272] bridge0: port 2(bond2) entered disabled state [ 115.132332][ T7272] bond2: entered allmulticast mode [ 115.147670][ T7272] bond2: entered promiscuous mode [ 115.201433][ T7279] af_packet: tpacket_rcv: packet too big, clamped from 65336 to 3944. macoff=96 [ 115.451580][ T7285] netlink: 'syz.4.323': attribute type 2 has an invalid length. [ 115.459424][ T7285] netlink: 51 bytes leftover after parsing attributes in process `syz.4.323'. [ 115.737169][ T7292] vlan0: entered promiscuous mode [ 115.910639][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 115.950777][ T7300] macsec1: entered promiscuous mode [ 115.956537][ T7300] bridge0: entered promiscuous mode [ 115.980983][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 116.082725][ T7307] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.329'. [ 116.539302][ T7326] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 116.658443][ T7326] bridge_slave_0: left allmulticast mode [ 116.664137][ T7326] bridge_slave_0: left promiscuous mode [ 116.673626][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.686874][ T7326] bridge_slave_1: left allmulticast mode [ 116.692543][ T7326] bridge_slave_1: left promiscuous mode [ 116.703751][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.761360][ T7336] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 116.810649][ T7326] bond0: (slave bond_slave_0): Releasing backup interface [ 116.880152][ T7326] bond0: (slave bond_slave_1): Releasing backup interface [ 116.940899][ T7326] team0: Port device team_slave_0 removed [ 116.980357][ T7326] team0: Port device team_slave_1 removed [ 117.002171][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.036749][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.062965][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.092717][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.196015][ T7336] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 117.224657][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.253209][ T7336] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.499112][ T7344] netlink: 'syz.1.342': attribute type 16 has an invalid length. [ 117.516683][ T7344] netlink: 'syz.1.342': attribute type 3 has an invalid length. [ 117.531899][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 117.561742][ T7344] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.342'. [ 118.181605][ T7371] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 118.237438][ T7371] bridge0: entered promiscuous mode [ 118.259603][ T7371] bridge0: port 1(macvlan2) entered blocking state [ 118.296176][ T7371] bridge0: port 1(macvlan2) entered disabled state [ 118.323332][ T7371] macvlan2: entered allmulticast mode [ 118.335921][ T7371] bridge0: entered allmulticast mode [ 118.396824][ T7371] macvlan2: left allmulticast mode [ 118.401983][ T7371] bridge0: left allmulticast mode [ 118.437733][ T7371] bridge0: left promiscuous mode [ 118.854310][ T7385] 8021q: VLANs not supported on wg0 [ 119.664724][ T7419] __nla_validate_parse: 1 callbacks suppressed [ 119.664741][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.365'. [ 119.710317][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 119.743765][ T7418] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 119.827871][ T7418] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 119.908637][ T7425] netlink: 'syz.2.364': attribute type 13 has an invalid length. [ 119.960752][ T7425] netlink: 'syz.2.364': attribute type 17 has an invalid length. [ 120.084669][ T7425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.101756][ T7418] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 120.170508][ T7418] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.182721][ T7434] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 120.364520][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 120.404200][ T7443] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 120.463125][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 120.486610][ T7443] bond0: (slave wlan1): Releasing backup interface [ 120.551539][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 121.411189][ T7468] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 121.584492][ T7480] syzkaller0: entered promiscuous mode [ 121.617494][ T7480] syzkaller0: entered allmulticast mode [ 121.689467][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 122.098960][ T7316] Set syz1 is full, maxelem 65536 reached [ 122.176523][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 122.245466][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.388'. [ 122.459779][ T7521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.394'. [ 122.464604][ T7515] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 122.513406][ T7515] dummy0: entered promiscuous mode [ 122.544334][ T7515] team0: Port device dummy0 added [ 122.580401][ T7525] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 122.642047][ T7525] team0: Port device dummy0 removed [ 122.649070][ T7525] dummy0: left promiscuous mode [ 122.659137][ T7525] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.730124][ T30] audit: type=1800 audit(1753664335.338:3): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.396" name="blkio.bfq.time_recursive" dev="tmpfs" ino=461 res=0 errno=0 [ 122.799982][ T30] audit: type=1800 audit(1753664335.358:4): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.396" name="blkio.bfq.time_recursive" dev="tmpfs" ino=461 res=0 errno=0 [ 123.025258][ T7546] netlink: 1 bytes leftover after parsing attributes in process `syz.0.399'. [ 123.269726][ T7551] erspan0: entered promiscuous mode [ 123.275399][ T7551] vlan2: entered promiscuous mode [ 123.569759][ T7569] unknown channel width for channel at 909000KHz? [ 123.578049][ T7569] unknown channel width for channel at 909000KHz? [ 123.598009][ T7571] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 123.611081][ T7571] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 123.733411][ T7583] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 123.806254][ T7583] bond1: entered promiscuous mode [ 123.811795][ T7583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.880760][ T7585] batadv1: entered promiscuous mode [ 123.886759][ T7585] batadv1: entered allmulticast mode [ 123.893879][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.906797][ T7585] bond1: (slave batadv1): making interface the new active one [ 123.927161][ T7585] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 124.246858][ T7609] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 124.322889][ T7609] bond1: entered promiscuous mode [ 124.336961][ T7609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.467039][ T7623] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 124.488350][ T7622] tipc: Enabled bearer , priority 0 [ 124.532593][ T7622] tipc: Resetting bearer [ 124.584231][ T7621] tipc: Disabling bearer [ 124.614664][ T7636] openvswitch: netlink: Flow key attr not present in new flow. [ 124.728239][ T7647] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 124.837932][ T7653] __nla_validate_parse: 8 callbacks suppressed [ 124.837949][ T7653] netlink: 248 bytes leftover after parsing attributes in process `syz.0.430'. [ 124.994927][ T7658] netlink: 'syz.0.431': attribute type 8 has an invalid length. [ 125.018884][ T7658] netlink: 'syz.0.431': attribute type 8 has an invalid length. [ 125.029916][ T7658] netlink: 51 bytes leftover after parsing attributes in process `syz.0.431'. [ 125.160909][ T6928] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.203422][ T6928] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.220810][ T6928] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.270928][ T6928] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.273939][ T7668] netlink: 128 bytes leftover after parsing attributes in process `syz.2.435'. [ 125.521725][ T7676] geneve2: entered promiscuous mode [ 125.592438][ T7681] netlink: 'syz.1.441': attribute type 11 has an invalid length. [ 125.822539][ T7688] veth1_macvtap: left allmulticast mode [ 125.838910][ T7688] veth1_macvtap: left promiscuous mode [ 125.881103][ T7691] veth1_macvtap: entered promiscuous mode [ 125.894891][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'. [ 125.914246][ T7691] veth1_macvtap: entered allmulticast mode [ 126.006281][ T7697] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 126.083734][ T7699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 126.513982][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 126.525682][ T7718] IPv6: Can't replace route, no match found [ 126.532807][ T7715] lo: entered promiscuous mode [ 127.517477][ T7714] lo: left promiscuous mode [ 127.622467][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.460'. [ 127.774743][ T7758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.848583][ T7764] validate_nla: 1 callbacks suppressed [ 127.848602][ T7764] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 127.870196][ T7764] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.461'. [ 127.891740][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 128.068452][ T7775] netlink: 44 bytes leftover after parsing attributes in process `syz.4.465'. [ 128.080889][ T7775] netlink: 43 bytes leftover after parsing attributes in process `syz.4.465'. [ 128.108524][ T7758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.121794][ T7775] netlink: 'syz.4.465': attribute type 5 has an invalid length. [ 128.250153][ T7758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.277267][ T7784] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 128.502121][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.543754][ T6943] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.622220][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.633313][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.646658][ T7808] trusted_key: syz.3.473 sent an empty control message without MSG_MORE. [ 128.826379][ T7814] netlink: 'syz.3.476': attribute type 5 has an invalid length. [ 129.028944][ T7836] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 129.093523][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.130779][ T7836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.801070][ T7859] netlink: 'syz.1.489': attribute type 16 has an invalid length. [ 129.811185][ T7859] netlink: 'syz.1.489': attribute type 3 has an invalid length. [ 130.155250][ T7854] netlink: 'syz.0.487': attribute type 3 has an invalid length. [ 130.383716][ T7878] __nla_validate_parse: 5 callbacks suppressed [ 130.383733][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 130.412389][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.495'. [ 130.429591][ T7880] syzkaller0: entered promiscuous mode [ 130.435307][ T7880] syzkaller0: entered allmulticast mode [ 130.476828][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 130.605428][ T7887] syzkaller1: entered promiscuous mode [ 130.621476][ T7887] syzkaller1: entered allmulticast mode [ 130.832356][ T7893] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 130.864779][ T7897] netlink: 5 bytes leftover after parsing attributes in process `syz.1.500'. [ 130.876384][ T7893] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.501'. [ 131.222051][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 131.439675][ T7930] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 131.545050][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 131.614187][ T7936] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 131.622561][ T7936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.514'. [ 131.889985][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 131.928979][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.521'. [ 132.214318][ T5849] Bluetooth: hci4: link tx timeout [ 132.220841][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.412795][ T7996] sctp: [Deprecated]: syz.0.528 (pid 7996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.412795][ T7996] Use struct sctp_sack_info instead [ 132.582718][ T7999] syzkaller1: entered promiscuous mode [ 132.588683][ T7999] syzkaller1: entered allmulticast mode [ 132.850955][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.859164][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.883136][ T8026] pimreg: entered allmulticast mode [ 132.925543][ T8026] pimreg: left allmulticast mode [ 133.117306][ T8036] ipvlan2: entered promiscuous mode [ 133.123484][ T8036] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 133.203419][ T8038] syz_tun: entered allmulticast mode [ 133.222562][ T8038] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 133.289321][ T8038] C: renamed from team_slave_0 [ 133.309311][ T8038] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 133.324734][ T8038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 133.494992][ T8038] syzkaller0: entered promiscuous mode [ 133.504811][ T8038] syzkaller0: entered allmulticast mode [ 133.801530][ T8055] netlink: 'syz.3.542': attribute type 5 has an invalid length. [ 133.818800][ T8055] netlink: 'syz.3.542': attribute type 6 has an invalid length. [ 134.288430][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 135.192632][ T8066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.353337][ T8066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.421429][ T8084] __nla_validate_parse: 8 callbacks suppressed [ 135.421454][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 135.464755][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 135.488512][ T8066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.662023][ T8066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.817778][ T6935] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.888099][ T6943] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.953684][ T6935] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.971309][ T8109] netlink: 276 bytes leftover after parsing attributes in process `syz.3.559'. [ 135.994105][ T8102] delete_channel: no stack [ 136.022662][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 136.039109][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 136.043006][ T6935] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.306483][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 136.340407][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 136.506659][ T8137] batman_adv: batadv0: Adding interface: ip6gretap1 [ 136.522028][ T8137] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.575740][ T8137] batman_adv: batadv0: Interface activated: ip6gretap1 [ 137.053287][ T8170] netlink: 'syz.4.576': attribute type 10 has an invalid length. [ 137.075663][ T8171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.077023][ T8170] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.115568][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 137.266014][ T8180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.579'. [ 137.294098][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 137.321365][ T8173] bridge_slave_1: left allmulticast mode [ 137.337436][ T8173] bridge_slave_1: left promiscuous mode [ 137.343601][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.366695][ T8173] bridge_slave_0: left allmulticast mode [ 137.372368][ T8173] bridge_slave_0: left promiscuous mode [ 137.383101][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.610950][ T8190] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 137.769907][ T8191] pim6reg1: entered promiscuous mode [ 137.775255][ T8191] pim6reg1: entered allmulticast mode [ 137.836214][ T8199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.110624][ T8227] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 138.151956][ T8227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.185494][ T8230] bond2: (slave veth3): Enslaving as an active interface with a down link [ 138.203930][ T8231] netdevsim0: mtu less than device minimum [ 138.213131][ T8231] tipc: Started in network mode [ 138.218992][ T8231] tipc: Node identity f62538444ebb, cluster identity 4711 [ 138.224431][ T8226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.226604][ T8231] tipc: Enabled bearer , priority 0 [ 138.228179][ T8231] syzkaller0: entered promiscuous mode [ 138.249246][ T8231] syzkaller0: entered allmulticast mode [ 138.274088][ T8231] tipc: Resetting bearer [ 138.284370][ T8229] tipc: Resetting bearer [ 138.299610][ T8229] tipc: Disabling bearer [ 138.473147][ T8239] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 139.645253][ T8267] netlink: zone id is out of range [ 139.658010][ T8267] netlink: zone id is out of range [ 139.663241][ T8267] netlink: set zone limit has 4 unknown bytes [ 139.731594][ T8275] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 140.143297][ T8294] dvmrp8: entered allmulticast mode [ 140.151962][ T8293] dvmrp8: left allmulticast mode [ 140.211094][ T8306] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 140.232329][ T8307] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 140.271431][ T8308] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 140.451515][ T8327] __nla_validate_parse: 7 callbacks suppressed [ 140.451533][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'. [ 140.583494][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 140.626397][ T8329] 8021q: VLANs not supported on ipvlan1 [ 140.884987][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 141.093593][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 141.335158][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 141.664936][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 141.674899][ T8387] veth1_macvtap: default FDB implementation only supports local addresses [ 141.810343][ T8392] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 141.823578][ T8392] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 142.003295][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 142.074515][ T8406] netpci0: tun_chr_ioctl cmd 1074025673 [ 142.102022][ T8406] netpci0: tun_chr_ioctl cmd 1074025681 [ 142.419373][ T8430] netlink: 'syz.1.659': attribute type 83 has an invalid length. [ 142.431789][ T8429] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 142.438377][ T8428] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 143.071428][ T8478] netlink: 248 bytes leftover after parsing attributes in process `syz.4.670'. [ 143.228978][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 143.285275][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 143.502829][ T8501] netlink: 'syz.4.676': attribute type 4 has an invalid length. [ 143.695698][ T8505] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 144.150638][ T8535] Bluetooth: MGMT ver 1.23 [ 144.173624][ T8536] geneve2: entered promiscuous mode [ 144.368612][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 144.851085][ T8585] tipc: Started in network mode [ 144.856417][ T8585] tipc: Node identity 0e73443b9ede, cluster identity 4711 [ 144.874477][ T8585] tipc: Enabled bearer , priority 0 [ 144.910736][ T8576] tipc: Resetting bearer [ 144.975683][ T8586] syzkaller0: entered promiscuous mode [ 144.991139][ T8586] syzkaller0: entered allmulticast mode [ 145.063530][ T8574] tipc: Resetting bearer [ 145.095438][ T8574] tipc: Disabling bearer [ 145.131879][ T8599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.142806][ T8599] bond0: (slave bond2): Enslaving as an active interface with an up link [ 145.975181][ T8642] __nla_validate_parse: 15 callbacks suppressed [ 145.975200][ T8642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.713'. [ 146.038399][ T8645] tipc: Started in network mode [ 146.042251][ T8647] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.053990][ T8645] tipc: Node identity 66d40c802be5, cluster identity 4711 [ 146.077875][ T8645] tipc: Enabled bearer , priority 0 [ 146.097285][ T8644] tipc: Enabling of bearer rejected, already enabled [ 146.180674][ T8656] netlink: 48 bytes leftover after parsing attributes in process `syz.0.718'. [ 146.254468][ T8646] syzkaller0: entered promiscuous mode [ 146.260361][ T8646] syzkaller0: entered allmulticast mode [ 146.270482][ T8646] tipc: Resetting bearer [ 146.339176][ T8661] netlink: 'syz.3.720': attribute type 15 has an invalid length. [ 146.360500][ T8643] tipc: Resetting bearer [ 146.420482][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 146.448701][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 147.206966][ T5910] tipc: Node number set to 1295060096 [ 147.779173][ T8643] tipc: Disabling bearer [ 147.798423][ T8690] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.727'. [ 148.067017][ T8696] veth3: entered promiscuous mode [ 148.082859][ T8696] bond0: (slave veth3): Enslaving as an active interface with an up link [ 148.107467][ T8710] netlink: 844 bytes leftover after parsing attributes in process `syz.3.734'. [ 148.230505][ T8710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.734'. [ 148.284211][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 148.433471][ T8726] tipc: Cannot configure node identity twice [ 148.927618][ T8752] ieee802154 phy0 wpan0: encryption failed: -90 [ 148.941559][ T8752] tipc: Enabled bearer , priority 14 [ 149.150798][ T8765] netlink: 104 bytes leftover after parsing attributes in process `syz.1.751'. [ 149.241040][ T8770] tipc: Enabled bearer , priority 0 [ 149.249073][ T8770] syzkaller0: entered promiscuous mode [ 149.254552][ T8770] syzkaller0: entered allmulticast mode [ 149.277052][ T8770] tipc: Resetting bearer [ 149.284470][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 149.304078][ T8770] macvlan2: entered promiscuous mode [ 149.309499][ T8770] macvlan2: entered allmulticast mode [ 149.319333][ T8769] tipc: Resetting bearer [ 149.333236][ T8769] tipc: Disabling bearer [ 149.422995][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 149.602664][ T8784] netlink: 'syz.1.755': attribute type 21 has an invalid length. [ 149.621159][ T8784] netlink: 'syz.1.755': attribute type 21 has an invalid length. [ 149.712703][ T8792] netlink: 'syz.4.756': attribute type 13 has an invalid length. [ 149.712706][ T8791] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 150.366269][ T5931] tipc: Node number set to 3574388921 [ 150.841243][ T8863] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 150.931137][ T8868] netlink: 'syz.4.780': attribute type 12 has an invalid length. [ 151.006101][ T5861] Bluetooth: hci4: command 0x0405 tx timeout [ 151.074590][ T8875] netlink: 'syz.3.782': attribute type 3 has an invalid length. [ 151.361924][ T8893] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 151.417318][ T8895] netlink: 'syz.4.788': attribute type 3 has an invalid length. [ 151.425103][ T8895] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 151.449116][ T8895] __nla_validate_parse: 6 callbacks suppressed [ 151.449135][ T8895] netlink: 192 bytes leftover after parsing attributes in process `syz.4.788'. [ 151.451541][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'. [ 151.455316][ T8895] NCSI netlink: No device for ifindex 0 [ 151.494601][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 151.523827][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 151.565256][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 151.565936][ T8903] netlink: 'syz.3.791': attribute type 2 has an invalid length. [ 151.583469][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'. [ 151.600693][ T8909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.792'. [ 151.615728][ T8909] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.639537][ T8908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.792'. [ 151.651386][ T8908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.685592][ T8909] ipvlan3: entered promiscuous mode [ 151.699900][ T8912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.793'. [ 151.718686][ T8912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.793'. [ 152.009074][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 152.159270][ T8935] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 152.247195][ T8938] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.488969][ T8948] syzkaller0: entered promiscuous mode [ 152.494642][ T8948] syzkaller0: entered allmulticast mode [ 152.630451][ T8959] 8021q: VLANs not supported on nlmon0 [ 152.967691][ T8976] warn_alloc: 1 callbacks suppressed [ 152.967707][ T8976] syz.0.813: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 153.010465][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.0.813 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 153.010492][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.010502][ T8976] Call Trace: [ 153.010509][ T8976] [ 153.010517][ T8976] dump_stack_lvl+0x189/0x250 [ 153.010553][ T8976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.010572][ T8976] ? __pfx__printk+0x10/0x10 [ 153.010593][ T8976] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.010613][ T8976] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.010634][ T8976] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 153.010656][ T8976] warn_alloc+0x214/0x310 [ 153.010685][ T8976] ? __pfx_warn_alloc+0x10/0x10 [ 153.010717][ T8976] ? __get_vm_area_node+0x28f/0x300 [ 153.010740][ T8976] ? fq_pie_init+0x430/0x840 [ 153.010767][ T8976] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 153.010814][ T8976] ? up_write+0x1c4/0x420 [ 153.010833][ T8976] ? tcf_block_get_ext+0x8d4/0x17d0 [ 153.010860][ T8976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.010889][ T8976] ? rcu_is_watching+0x15/0xb0 [ 153.010908][ T8976] ? fq_pie_init+0x430/0x840 [ 153.010929][ T8976] ? fq_pie_init+0x430/0x840 [ 153.010963][ T8976] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 153.010984][ T8976] ? fq_pie_init+0x430/0x840 [ 153.011005][ T8976] ? tcf_block_get+0x67/0xa0 [ 153.011019][ T8976] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 153.011041][ T8976] fq_pie_init+0x430/0x840 [ 153.011066][ T8976] ? __pfx_fq_pie_init+0x10/0x10 [ 153.011088][ T8976] qdisc_create+0x7a9/0xea0 [ 153.011120][ T8976] tc_modify_qdisc+0x1538/0x20e0 [ 153.011157][ T8976] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 153.011212][ T8976] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 153.011232][ T8976] rtnetlink_rcv_msg+0x779/0xb70 [ 153.011254][ T8976] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 153.011270][ T8976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.011284][ T8976] ? ref_tracker_free+0x63a/0x7d0 [ 153.011302][ T8976] ? __asan_memcpy+0x40/0x70 [ 153.011320][ T8976] ? __pfx_ref_tracker_free+0x10/0x10 [ 153.011349][ T8976] netlink_rcv_skb+0x205/0x470 [ 153.011368][ T8976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.011387][ T8976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.011417][ T8976] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.011444][ T8976] netlink_unicast+0x82f/0x9e0 [ 153.011477][ T8976] ? __pfx_netlink_unicast+0x10/0x10 [ 153.011504][ T8976] ? netlink_sendmsg+0x642/0xb30 [ 153.011519][ T8976] ? skb_put+0x11b/0x210 [ 153.011549][ T8976] netlink_sendmsg+0x805/0xb30 [ 153.011577][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.011599][ T8976] ? aa_sock_msg_perm+0x94/0x160 [ 153.011619][ T8976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.011635][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.011654][ T8976] __sock_sendmsg+0x219/0x270 [ 153.011682][ T8976] ____sys_sendmsg+0x505/0x830 [ 153.011708][ T8976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.011739][ T8976] ? import_iovec+0x74/0xa0 [ 153.011764][ T8976] ___sys_sendmsg+0x21f/0x2a0 [ 153.011787][ T8976] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.011847][ T8976] ? __fget_files+0x2a/0x420 [ 153.011870][ T8976] ? __fget_files+0x3a0/0x420 [ 153.011904][ T8976] __x64_sys_sendmsg+0x19b/0x260 [ 153.011927][ T8976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.011959][ T8976] ? rcu_is_watching+0x15/0xb0 [ 153.011984][ T8976] ? do_syscall_64+0xbe/0x3b0 [ 153.012006][ T8976] do_syscall_64+0xfa/0x3b0 [ 153.012022][ T8976] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.012039][ T8976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.012056][ T8976] ? clear_bhb_loop+0x60/0xb0 [ 153.012077][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.012094][ T8976] RIP: 0033:0x7f65f918e9a9 [ 153.012117][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.012131][ T8976] RSP: 002b:00007f65f9f5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.012149][ T8976] RAX: ffffffffffffffda RBX: 00007f65f93b5fa0 RCX: 00007f65f918e9a9 [ 153.012162][ T8976] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000005 [ 153.012173][ T8976] RBP: 00007f65f9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 153.012183][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.012192][ T8976] R13: 0000000000000000 R14: 00007f65f93b5fa0 R15: 00007ffe7aad1348 [ 153.012220][ T8976] [ 153.012228][ T8976] Mem-Info: [ 153.511786][ T8976] active_anon:5711 inactive_anon:0 isolated_anon:0 [ 153.511786][ T8976] active_file:1491 inactive_file:39859 isolated_file:0 [ 153.511786][ T8976] unevictable:768 dirty:135 writeback:0 [ 153.511786][ T8976] slab_reclaimable:11319 slab_unreclaimable:124960 [ 153.511786][ T8976] mapped:34186 shmem:1440 pagetables:1004 [ 153.511786][ T8976] sec_pagetables:0 bounce:0 [ 153.511786][ T8976] kernel_misc_reclaimable:0 [ 153.511786][ T8976] free:1300278 free_pcp:14353 free_cma:0 [ 153.594833][ T8976] Node 0 active_anon:23544kB inactive_anon:0kB active_file:5964kB inactive_file:159232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137644kB dirty:536kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.656761][ T8976] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.716204][ T8976] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.773587][ T8976] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 153.791111][ T8976] Node 0 DMA32 free:1278804kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28996kB inactive_anon:0kB active_file:5964kB inactive_file:157664kB unevictable:1536kB writepending:536kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:40104kB local_pcp:22860kB free_cma:0kB [ 153.841846][ T9013] NCSI netlink: No device for ifindex 0 [ 153.896380][ T8976] lowmem_reserve[]: 0 0 1 1 1 [ 153.901149][ T8976] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 153.996303][ T8976] lowmem_reserve[]: 0 0 0 0 0 [ 154.001082][ T8976] Node 1 Normal free:3902436kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:8224kB free_cma:0kB [ 154.083641][ T8976] lowmem_reserve[]: 0 0 0 0 0 [ 154.095962][ T8976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.109262][ T8976] Node 0 DMA32: 515*4kB (UM) 469*8kB (UME) 395*16kB (UME) 403*32kB (UE) 162*64kB (UE) 92*128kB (UME) 79*256kB (UME) 37*512kB (UM) 21*1024kB (UM) 4*2048kB (ME) 281*4096kB (UM) = 1267012kB [ 154.128290][ T8976] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 154.140885][ T8976] Node 1 Normal: 155*4kB (UME) 31*8kB (UME) 34*16kB (UME) 105*32kB (UME) 33*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3902436kB [ 154.159532][ T8976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.169211][ T8976] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.178955][ T8976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.188634][ T8976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.198264][ T8976] 45583 total pagecache pages [ 154.203011][ T8976] 0 pages in swap cache [ 154.207304][ T8976] Free swap = 124996kB [ 154.211642][ T8976] Total swap = 124996kB [ 154.215987][ T8976] 2097051 pages RAM [ 154.219876][ T8976] 0 pages HighMem/MovableOnly [ 154.224718][ T8976] 425382 pages reserved [ 154.228967][ T8976] 0 pages cma reserved [ 154.623768][ T9020] tipc: Enabled bearer , priority 0 [ 154.705177][ T9029] syzkaller0: entered promiscuous mode [ 154.711467][ T9029] syzkaller0: entered allmulticast mode [ 154.866537][ T30] audit: type=1800 audit(1753664367.468:5): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.824" name="memory.events" dev="tmpfs" ino=787 res=0 errno=0 [ 154.978856][ T9029] tipc: Resetting bearer [ 155.055223][ T9018] tipc: Resetting bearer [ 155.083668][ T9018] tipc: Disabling bearer [ 155.875681][ T9066] bridge4: entered allmulticast mode [ 156.555544][ T9098] __nla_validate_parse: 33 callbacks suppressed [ 156.555562][ T9098] netlink: 176 bytes leftover after parsing attributes in process `syz.3.842'. [ 156.853649][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 156.897785][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.846'. [ 157.568621][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 157.721435][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.852'. [ 157.852575][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.856'. [ 157.896149][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'. [ 158.380708][ T9169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.422856][ T9169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.651122][ T9189] delete_channel: no stack [ 158.789139][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.865'. [ 158.847697][ T9197] validate_nla: 2 callbacks suppressed [ 158.847716][ T9197] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 159.445349][ T9235] netlink: 'syz.1.876': attribute type 9 has an invalid length. [ 159.492828][ T9235] netlink: 'syz.1.876': attribute type 6 has an invalid length. [ 159.512006][ T9240] tipc: Enabled bearer , priority 0 [ 159.525411][ T9240] syzkaller0: entered promiscuous mode [ 159.534704][ T9240] syzkaller0: entered allmulticast mode [ 159.597180][ T9240] tipc: Resetting bearer [ 159.612939][ T9239] tipc: Resetting bearer [ 159.766930][ T9239] tipc: Disabling bearer [ 160.098058][ T9253] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 160.114354][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 160.135200][ T9253] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 160.144706][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 160.170001][ T9253] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 160.211107][ T9253] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 160.256645][ T9260] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 160.479251][ T9261] bridge0: left promiscuous mode [ 160.499637][ T1102] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.521940][ T1102] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.543477][ T1102] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.575310][ T1102] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.824406][ T9284] bond0: (slave rose0): Error: Device can not be enslaved while up [ 160.866530][ T9286] bond0: (slave rose0): Error: Device can not be enslaved while up [ 161.153889][ T9290] bond2: entered promiscuous mode [ 161.164395][ T9290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.616960][ T9314] __nla_validate_parse: 8 callbacks suppressed [ 161.616979][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 161.747344][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.901'. [ 162.047050][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 162.249313][ T9332] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 162.704118][ T9362] veth5: entered promiscuous mode [ 162.831985][ T9371] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 162.976295][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 163.484131][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 163.730688][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 163.735549][ T9390] syzkaller0: entered promiscuous mode [ 163.776681][ T9390] syzkaller0: entered allmulticast mode [ 163.952663][ T9404] FAULT_INJECTION: forcing a failure. [ 163.952663][ T9404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.000206][ T9404] CPU: 1 UID: 0 PID: 9404 Comm: syz.1.927 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 164.000232][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.000242][ T9404] Call Trace: [ 164.000249][ T9404] [ 164.000257][ T9404] dump_stack_lvl+0x189/0x250 [ 164.000281][ T9404] ? __pfx____ratelimit+0x10/0x10 [ 164.000307][ T9404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.000324][ T9404] ? __pfx__printk+0x10/0x10 [ 164.000356][ T9404] should_fail_ex+0x414/0x560 [ 164.000384][ T9404] _copy_to_user+0x31/0xb0 [ 164.000408][ T9404] simple_read_from_buffer+0xe1/0x170 [ 164.000435][ T9404] proc_fail_nth_read+0x1df/0x250 [ 164.000474][ T9404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.000498][ T9404] ? rw_verify_area+0x258/0x650 [ 164.000516][ T9404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.000541][ T9404] vfs_read+0x200/0x980 [ 164.000565][ T9404] ? __pfx___mutex_lock+0x10/0x10 [ 164.000583][ T9404] ? __pfx_vfs_read+0x10/0x10 [ 164.000603][ T9404] ? __fget_files+0x2a/0x420 [ 164.000628][ T9404] ? __fget_files+0x3a0/0x420 [ 164.000648][ T9404] ? __fget_files+0x2a/0x420 [ 164.000678][ T9404] ksys_read+0x145/0x250 [ 164.000701][ T9404] ? __pfx_ksys_read+0x10/0x10 [ 164.000727][ T9404] ? do_syscall_64+0xbe/0x3b0 [ 164.000748][ T9404] do_syscall_64+0xfa/0x3b0 [ 164.000763][ T9404] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.000779][ T9404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.000795][ T9404] ? clear_bhb_loop+0x60/0xb0 [ 164.000815][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.000832][ T9404] RIP: 0033:0x7feb2978d3bc [ 164.000848][ T9404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.000861][ T9404] RSP: 002b:00007feb2a54f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.000879][ T9404] RAX: ffffffffffffffda RBX: 00007feb299b5fa0 RCX: 00007feb2978d3bc [ 164.000890][ T9404] RDX: 000000000000000f RSI: 00007feb2a54f0a0 RDI: 0000000000000004 [ 164.000899][ T9404] RBP: 00007feb2a54f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.000909][ T9404] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.000919][ T9404] R13: 0000000000000000 R14: 00007feb299b5fa0 R15: 00007fffff6386c8 [ 164.000947][ T9404] [ 165.620988][ T9446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.937'. [ 165.668806][ T9448] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.936'. [ 165.891411][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 165.919086][ T9455] netlink: 'syz.2.940': attribute type 4 has an invalid length. [ 166.101851][ T9462] netlink: 'syz.3.942': attribute type 14 has an invalid length. [ 166.249861][ T9484] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 166.257449][ T9484] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 166.426046][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 166.913154][ T9506] __nla_validate_parse: 1 callbacks suppressed [ 166.913170][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 166.940356][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 167.078844][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 167.228594][ T9523] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 167.247800][ T9523] netlink: 224 bytes leftover after parsing attributes in process `syz.4.959'. [ 167.266618][ T9528] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 167.303324][ T9528] team0: Port device dummy0 added [ 167.320656][ T9536] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 167.350028][ T9536] team0: Port device dummy0 removed [ 167.368163][ T9536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.567038][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 167.704199][ T5931] IPVS: starting estimator thread 0... [ 167.796073][ T9560] IPVS: using max 29 ests per chain, 69600 per kthread [ 168.379687][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 168.472021][ T9579] IPv6: Can't replace route, no match found [ 168.538066][ T9581] netlink: 'syz.2.975': attribute type 12 has an invalid length. [ 168.600102][ T9581] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.975'. [ 168.742409][ T9594] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 168.759061][ T9592] tipc: Enabling of bearer rejected, failed to enable media [ 169.045919][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 169.056841][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.983'. [ 169.481033][ T9629] netlink: 248 bytes leftover after parsing attributes in process `syz.2.988'. [ 169.501911][ T9631] netlink: 'syz.3.986': attribute type 25 has an invalid length. [ 169.555185][ T9629] lo speed is unknown, defaulting to 1000 [ 169.597169][ T9629] lo speed is unknown, defaulting to 1000 [ 169.759764][ T9630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.914958][ T9629] lo speed is unknown, defaulting to 1000 [ 170.274353][ T9653] netlink: 'syz.0.994': attribute type 15 has an invalid length. [ 170.346353][ T9656] tipc: Enabled bearer , priority 0 [ 170.377280][ T9656] syzkaller0: entered promiscuous mode [ 170.382771][ T9656] syzkaller0: entered allmulticast mode [ 170.635488][ T9629] infiniband syz0: set active [ 170.646861][ T9629] infiniband syz0: added lo [ 170.672881][ T9629] syz0: rxe_create_cq: returned err = -12 [ 170.695234][ T9629] infiniband syz0: Couldn't create ib_mad CQ [ 170.717638][ T9629] infiniband syz0: Couldn't open port 1 [ 170.828588][ T9629] RDS/IB: syz0: added [ 170.832995][ T9629] smc: adding ib device syz0 with port count 1 [ 170.866465][ T9629] smc: ib device syz0 port 1 has pnetid [ 170.893706][ T9662] veth0_to_hsr: left promiscuous mode [ 170.906538][ T9662] veth0_to_hsr: left allmulticast mode [ 171.171136][ T9662] gretap1: left promiscuous mode [ 171.177945][ T9662] gretap1: left allmulticast mode [ 171.190995][ T9662] macsec1: left promiscuous mode [ 171.199313][ T9662] macsec1: left allmulticast mode [ 171.207563][ T9662] bond1: left promiscuous mode [ 171.215352][ T9662] geneve2: left promiscuous mode [ 171.270768][ T9662] bond2: left promiscuous mode [ 171.277371][ T9662] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 171.285027][ T9662] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 171.294072][ T9656] syzkaller0: mtu greater than device maximum [ 171.318850][ T5931] lo speed is unknown, defaulting to 1000 [ 171.372694][ T9695] bond2: (slave veth3): Releasing active interface [ 171.389195][ T9679] tipc: Enabled bearer , priority 0 [ 171.401436][ T9680] syzkaller0: entered promiscuous mode [ 171.409533][ T9680] syzkaller0: entered allmulticast mode [ 171.419930][ T9654] tipc: Resetting bearer [ 171.446113][ T9654] tipc: Disabling bearer [ 171.506019][ T9692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.513351][ T6948] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.540541][ T6948] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.567124][ T9684] tipc: Resetting bearer [ 171.574547][ T10] lo speed is unknown, defaulting to 1000 [ 171.590956][ T9673] tipc: Resetting bearer [ 171.641619][ T9673] tipc: Disabling bearer [ 171.687700][ T6948] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.698659][ T9629] lo speed is unknown, defaulting to 1000 [ 171.707908][ T6948] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.884069][ T9712] syzkaller0: entered promiscuous mode [ 171.906270][ T9712] syzkaller0: entered allmulticast mode [ 172.499089][ T9731] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.575622][ T9629] lo speed is unknown, defaulting to 1000 [ 172.640927][ T9731] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.707223][ T9737] blkio.reset_stats is deprecated [ 172.757750][ T9731] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.214940][ T9731] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.235388][ T9729] lo speed is unknown, defaulting to 1000 [ 173.345709][ T6945] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.397451][ T6945] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.435587][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.504073][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.614849][ T9629] lo speed is unknown, defaulting to 1000 [ 173.762760][ T9754] __nla_validate_parse: 8 callbacks suppressed [ 173.762778][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 173.799754][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 174.144137][ T9629] lo speed is unknown, defaulting to 1000 [ 174.389551][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1025'. [ 174.436875][ T9748] lo speed is unknown, defaulting to 1000 [ 174.713101][ T9629] lo speed is unknown, defaulting to 1000 [ 175.166846][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 175.203028][ T9784] veth1_macvtap: left promiscuous mode [ 175.381449][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'. [ 175.484380][ T9792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.721281][ T9795] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1031'. [ 175.734492][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1031'. [ 175.754712][ T9795] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1031'. [ 175.853173][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 175.863878][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 176.263879][ T9812] netlink: 'syz.1.1037': attribute type 1 has an invalid length. [ 176.914049][ T9859] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 176.922390][ T9859] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 178.847365][ T9875] tipc: Enabled bearer , priority 0 [ 178.854912][ T9875] syzkaller0: entered promiscuous mode [ 178.865523][ T9875] syzkaller0: entered allmulticast mode [ 178.893678][ T9870] __nla_validate_parse: 11 callbacks suppressed [ 178.893694][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 178.999286][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1054'. [ 179.010771][ T9884] tipc: Resetting bearer [ 179.056068][ T9884] tipc: Enabling of bearer rejected, already enabled [ 179.109341][ T9882] netlink: 'syz.0.1057': attribute type 13 has an invalid length. [ 179.145970][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 179.155251][ T9873] tipc: Resetting bearer [ 179.179519][ T9873] tipc: Disabling bearer [ 179.183643][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 179.242614][ T9886] lo speed is unknown, defaulting to 1000 [ 179.307160][ T9894] IPv6: addrconf: prefix option has invalid lifetime [ 179.428174][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1063'. [ 179.662061][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 179.785337][ T9925] syzkaller0: entered promiscuous mode [ 179.792510][ T9925] syzkaller0: entered allmulticast mode [ 179.832671][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1067'. [ 179.877460][ T9933] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 180.077385][ T9939] netlink: 'syz.1.1071': attribute type 12 has an invalid length. [ 180.089237][ T9939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1071'. [ 180.192455][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1074'. [ 180.451333][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1080'. [ 180.656446][ T9971] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 180.664824][ T9971] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 180.691803][ T9974] syz.3.1083 uses old SIOCAX25GETINFO [ 180.698091][ T9973] rdma_rxe: rxe_newlink: failed to add lo [ 180.785326][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.810544][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.823717][ T9973] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.842448][ T9973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.897295][ T6945] bond0: (slave wlan1): link status definitely down, disabling slave [ 180.971483][ T9986] netlink: 'syz.4.1088': attribute type 4 has an invalid length. [ 181.020464][ T9988] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 181.060741][ T9988] team0: Port device geneve0 added [ 181.965893][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 194.293180][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299639][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.370674][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.370912][ T5167] Bluetooth: hci3: command 0x0406 tx timeout [ 196.377013][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 230.008443][T10020] __nla_validate_parse: 4 callbacks suppressed [ 230.008461][T10020] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1098'. [ 230.040934][T10023] tipc: Enabling of bearer rejected, failed to enable media [ 230.066847][T10026] netlink: 'syz.3.1100': attribute type 15 has an invalid length. [ 230.095898][T10026] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1100'. [ 230.104901][T10026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.148469][T10022] tipc: Enabling of bearer rejected, failed to enable media [ 230.315298][T10045] IPv6: NLM_F_REPLACE set, but no existing node found! [ 230.389755][T10032] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1103'. [ 230.482826][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1112'. [ 230.517995][T10057] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 230.521788][T10060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1112'. [ 230.541012][T10062] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 230.608762][T10062] team0: Device veth0_vlan failed to register rx_handler [ 230.673395][ T5910] IPVS: starting estimator thread 0... [ 230.774269][T10079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1117'. [ 230.783495][T10075] IPVS: using max 23 ests per chain, 55200 per kthread [ 230.792007][T10080] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 231.003620][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 231.570123][T10112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.575293][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 231.613902][T10117] syzkaller1: entered promiscuous mode [ 231.641227][T10117] syzkaller1: entered allmulticast mode [ 231.847847][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 231.872155][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1130'. [ 231.939742][T10125] geneve2: entered promiscuous mode [ 231.953379][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.003058][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.039382][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.080516][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.125886][T10140] lo speed is unknown, defaulting to 1000 [ 232.513193][T10167] openvswitch: netlink: Message has 8 unknown bytes. [ 232.724402][T10172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.252890][T10199] netlink: 'syz.3.1148': attribute type 29 has an invalid length. [ 233.408340][T10203] bridge_slave_1: left allmulticast mode [ 233.435295][T10203] bridge_slave_1: left promiscuous mode [ 233.483823][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.538416][T10203] bridge_slave_0: left allmulticast mode [ 233.551625][T10203] bridge_slave_0: left promiscuous mode [ 233.572072][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.643910][T10200] lo speed is unknown, defaulting to 1000 [ 233.747341][T10219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.288802][T10234] lo speed is unknown, defaulting to 1000 [ 235.500972][T10286] lo speed is unknown, defaulting to 1000 [ 235.534903][T10290] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 235.605838][T10290] __nla_validate_parse: 10 callbacks suppressed [ 235.608122][T10290] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1169'. [ 235.629081][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 236.018413][T10302] raw_sendmsg: syz.1.1173 forgot to set AF_INET. Fix it! [ 236.073467][T10297] lo speed is unknown, defaulting to 1000 [ 236.339387][T10314] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 236.371877][T10312] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 236.637324][T10320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1177'. [ 236.863405][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'. [ 237.137891][T10331] lo speed is unknown, defaulting to 1000 [ 237.150784][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 237.251575][T10340] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1181'. [ 237.657830][T10356] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 237.676853][T10356] batman_adv: batadv0: Removing interface: ip6gretap1 [ 237.748184][T10358] lo speed is unknown, defaulting to 1000 [ 237.774155][T10358] lo speed is unknown, defaulting to 1000 [ 237.822189][T10358] lo speed is unknown, defaulting to 1000 [ 237.854482][T10359] netlink: 'syz.1.1185': attribute type 5 has an invalid length. [ 237.872154][T10358] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 237.903366][T10358] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.116253][T10359] ipvlan2: entered promiscuous mode [ 238.205884][T10358] lo speed is unknown, defaulting to 1000 [ 238.246445][T10358] lo speed is unknown, defaulting to 1000 [ 238.274203][T10358] lo speed is unknown, defaulting to 1000 [ 238.285042][T10379] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1189'. [ 238.353789][T10358] lo speed is unknown, defaulting to 1000 [ 238.372602][T10358] lo speed is unknown, defaulting to 1000 [ 238.641356][T10392] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1193'. [ 238.716776][T10392] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 238.814842][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 239.331037][T10432] vlan3: entered allmulticast mode [ 239.339486][T10432] dummy0: entered allmulticast mode [ 239.537641][T10440] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.648178][T10440] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.771085][T10452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1210'. [ 239.793435][T10440] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.824576][T10454] tipc: Enabled bearer , priority 0 [ 239.834734][T10454] syzkaller0: entered promiscuous mode [ 239.844895][T10454] syzkaller0: entered allmulticast mode [ 239.866686][T10440] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.097997][T10454] tipc: Resetting bearer [ 240.150664][T10453] tipc: Resetting bearer [ 240.169438][T10453] tipc: Disabling bearer [ 240.238241][ T6948] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.271886][ T6948] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.440964][ T6948] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.471108][T10484] netlink: 'syz.0.1214': attribute type 2 has an invalid length. [ 240.635879][ T6948] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.272325][T10507] bridge_slave_1: entered promiscuous mode [ 241.285971][T10507] bridge_slave_1: left promiscuous mode [ 241.396681][T10525] __nla_validate_parse: 1 callbacks suppressed [ 241.396700][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 241.459568][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 241.532673][T10531] veth1_to_bond: entered allmulticast mode [ 241.948456][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 242.157911][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1235'. [ 242.209908][ T1165] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.237755][ T1165] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.252054][ T1165] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.262760][ T1165] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.380374][T10569] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 242.414904][T10569] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1239'. [ 242.466293][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1242'. [ 242.651337][T10596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1247'. [ 242.701328][T10595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.756752][T10597] netlink: 'syz.4.1246': attribute type 10 has an invalid length. [ 242.800481][T10597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1246'. [ 242.841281][T10597] dummy0: entered promiscuous mode [ 242.860279][T10597] bond0: (slave dummy0): Releasing backup interface [ 242.906787][T10597] bridge0: port 3(dummy0) entered blocking state [ 242.917021][T10597] bridge0: port 3(dummy0) entered disabled state [ 243.161024][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 243.181468][T10619] syzkaller0: entered promiscuous mode [ 243.190626][T10619] syzkaller0: entered allmulticast mode [ 243.214098][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 243.429102][T10633] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 243.605640][T10649] netlink: 'syz.4.1265': attribute type 3 has an invalid length. [ 243.752280][T10656] sctp: [Deprecated]: syz.1.1268 (pid 10656) Use of int in max_burst socket option. [ 243.752280][T10656] Use struct sctp_assoc_value instead [ 243.914993][T10669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.928173][T10667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.867356][T10700] bridge0: port 1(erspan0) entered blocking state [ 244.874113][T10700] bridge0: port 1(erspan0) entered disabled state [ 244.911141][T10700] erspan0: entered allmulticast mode [ 244.951073][T10700] bridge0: port 1(erspan0) entered blocking state [ 244.957883][T10700] bridge0: port 1(erspan0) entered forwarding state [ 244.977313][T10708] erspan0: left allmulticast mode [ 244.983920][T10708] bridge0: port 1(erspan0) entered disabled state [ 245.219968][T10726] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 245.374625][T10726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.383402][T10734] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 245.421820][T10740] bpq0: entered promiscuous mode [ 245.432298][T10740] bpq0: entered allmulticast mode [ 245.632932][T10734] bond3: entered promiscuous mode [ 245.646343][T10734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.725519][T10752] sctp: [Deprecated]: syz.1.1292 (pid 10752) Use of int in max_burst socket option. [ 245.725519][T10752] Use struct sctp_assoc_value instead [ 246.201958][ T5861] Bluetooth: hci4: link tx timeout [ 246.212158][ T5861] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 246.860255][T10799] __nla_validate_parse: 15 callbacks suppressed [ 246.860274][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1310'. [ 247.133931][T10812] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 247.176935][T10812] bond4: entered promiscuous mode [ 247.182080][T10812] bond4: entered allmulticast mode [ 247.192767][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 247.253631][T10819] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 247.298487][T10819] bond4: (slave bridge3): making interface the new active one [ 247.308731][T10819] bridge3: entered promiscuous mode [ 247.314205][T10819] bridge3: entered allmulticast mode [ 247.324814][T10819] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 247.483454][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1319'. [ 247.519470][T10830] netlink: 'syz.1.1319': attribute type 39 has an invalid length. [ 247.687181][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 247.698525][T10838] smc: net device bond0 applied user defined pnetid SYZ [ 247.853122][T10846] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 247.877417][T10846] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 247.886886][ T30] audit: type=1804 audit(1753664460.488:6): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1322" name="/newroot/272/cgroup.controllers" dev="tmpfs" ino=1418 res=1 errno=0 [ 247.930448][T10848] Bluetooth: MGMT ver 1.23 [ 247.956892][ T30] audit: type=1800 audit(1753664460.518:7): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1322" name="cgroup.controllers" dev="tmpfs" ino=1418 res=0 errno=0 [ 248.011823][ T30] audit: type=1800 audit(1753664460.518:8): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1322" name="cgroup.controllers" dev="tmpfs" ino=1418 res=0 errno=0 [ 248.146706][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 248.160563][T10870] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1329'. [ 248.183723][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 248.187355][T10870] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 248.291743][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 248.854701][T10891] lo speed is unknown, defaulting to 1000 [ 249.253368][T10912] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 249.453148][T10891] lo speed is unknown, defaulting to 1000 [ 249.455387][T10922] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 249.500458][T10922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1345'. [ 249.710702][T10937] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1348'. [ 249.860554][ T3626] lo speed is unknown, defaulting to 1000 [ 249.878962][T10942] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.978068][T10948] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 250.006419][T10948] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1353'. [ 250.192132][T10946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.289864][T10969] openvswitch: netlink: IP tunnel dst address not specified [ 250.350619][T10946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.479113][T10946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.506013][T10978] tipc: Can't bind to reserved service type 1 [ 250.583565][T10946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.825720][ T6945] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.859699][ T1165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.901184][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.937985][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.152398][T11011] lo speed is unknown, defaulting to 1000 [ 251.545391][T11011] lo speed is unknown, defaulting to 1000 [ 251.815734][T11023] lo speed is unknown, defaulting to 1000 [ 251.963557][T11030] __nla_validate_parse: 5 callbacks suppressed [ 251.963575][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 252.011638][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 252.210934][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1381'. [ 252.938020][T11026] lo speed is unknown, defaulting to 1000 [ 252.958733][T11023] lo speed is unknown, defaulting to 1000 [ 253.163227][T11073] veth1_to_bond: entered allmulticast mode [ 253.218040][T11073] bond0: entered promiscuous mode [ 253.224286][T11070] bond0: left promiscuous mode [ 253.231935][T11070] veth1_to_bond: left allmulticast mode [ 253.252554][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 253.363667][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 253.495105][T11087] netlink: 'syz.0.1392': attribute type 11 has an invalid length. [ 253.615448][T11054] lo speed is unknown, defaulting to 1000 [ 254.020054][T11105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1398'. [ 254.072715][T11054] lo speed is unknown, defaulting to 1000 [ 254.225526][T11026] lo speed is unknown, defaulting to 1000 [ 254.226444][T11093] lo speed is unknown, defaulting to 1000 [ 254.694277][T11115] bpq0: left promiscuous mode [ 254.703309][T11115] bpq0: left allmulticast mode [ 254.878944][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1402'. [ 254.893080][T11125] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1402'. [ 254.911141][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 255.007124][T11093] lo speed is unknown, defaulting to 1000 [ 255.048553][T11131] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 255.121284][T11131] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 255.181178][T11135] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1405'. [ 255.193885][T11134] ip6tnl2: entered promiscuous mode [ 255.246478][ T24] lo speed is unknown, defaulting to 1000 [ 255.252248][ T24] syz1: Port: 1 Link DOWN [ 255.736738][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972907][T11162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.204219][T11183] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 256.310965][T11183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.425696][T11186] bond5: (slave ip6gretap1): making interface the new active one [ 256.460366][T11186] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 256.520902][T11197] Unsupported ieee802154 address type: 0 [ 256.529318][T11183] veth7: entered promiscuous mode [ 256.545051][T11183] bond5: (slave veth7): Enslaving as an active interface with a down link [ 256.578606][T11189] erspan0: entered allmulticast mode [ 256.605264][T11189] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 256.694948][T11201] netlink: 'syz.1.1423': attribute type 9 has an invalid length. [ 256.770520][T11203] netlink: 'syz.0.1424': attribute type 30 has an invalid length. [ 256.814211][ T1165] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.815533][T11203] netlink: 'syz.0.1424': attribute type 30 has an invalid length. [ 256.837369][ T6948] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.862609][ T6948] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.878615][ T6948] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.255510][T11229] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 257.359069][T11238] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 257.380918][T11238] __nla_validate_parse: 6 callbacks suppressed [ 257.380937][T11238] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1429'. [ 257.445884][T11238] NCSI netlink: No device for ifindex 813332851 [ 257.527650][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 257.589352][T11248] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1437'. [ 257.605979][T11248] ip6gretap0: entered promiscuous mode [ 257.617280][T11244] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1435'. [ 257.623373][T11248] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1437'. [ 257.647040][T11250] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1436'. [ 257.656397][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1436'. [ 257.884562][T11260] lo speed is unknown, defaulting to 1000 [ 258.180144][T11278] veth0_virt_wifi: renamed from veth0_vlan [ 258.189895][T11282] netlink: 'syz.0.1446': attribute type 6 has an invalid length. [ 258.259808][T11282] 8021q: VLANs not supported on bond0 [ 258.386415][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 258.410415][T11260] lo speed is unknown, defaulting to 1000 [ 258.486431][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 258.771325][T11290] tipc: Enabled bearer , priority 0 [ 258.854413][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 258.946273][T11290] syzkaller0: entered promiscuous mode [ 258.960948][T11290] syzkaller0: entered allmulticast mode [ 259.110842][T11308] tipc: Resetting bearer [ 259.203070][T11325] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 259.388383][ T30] audit: type=1800 audit(1753664471.988:9): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1460" name="memory.events" dev="tmpfs" ino=1414 res=0 errno=0 [ 259.447044][ T30] audit: type=1804 audit(1753664472.028:10): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1460" name="/newroot/273/memory.events" dev="tmpfs" ino=1414 res=1 errno=0 [ 259.490574][T11339] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 259.581562][T11339] team1: entered promiscuous mode [ 259.587567][T11339] team1: entered allmulticast mode [ 259.596186][T11343] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 259.614475][T11289] tipc: Resetting bearer [ 259.637277][T11289] tipc: Disabling bearer [ 259.700545][T11346] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 259.813009][T11346] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 259.869125][T11363] netlink: 'syz.0.1468': attribute type 26 has an invalid length. [ 259.934272][T11363] veth1_to_bond: entered allmulticast mode [ 260.073724][T11363] veth1_to_bond (unregistering): left allmulticast mode [ 260.092770][T11380] veth1_macvtap: left promiscuous mode [ 260.169185][T11380] veth1_macvtap: entered promiscuous mode [ 260.185549][T11381] netlink: 'syz.3.1473': attribute type 11 has an invalid length. [ 260.209923][T11381] netlink: 'syz.3.1473': attribute type 11 has an invalid length. [ 260.469453][T11409] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 260.487800][T11411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.110502][T11429] bond0: (slave dummy0): Releasing backup interface [ 261.178545][T11429] bond0: (slave wlan1): Releasing backup interface [ 261.185083][T11429] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 261.280818][T11429] bond1: (slave batadv1): Releasing active interface [ 261.307718][T11429] bond0: (slave bond2): Releasing backup interface [ 261.326664][T11429] bond0: (slave veth3): Releasing backup interface [ 261.343742][ T6937] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.366152][ T6937] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.388378][ T6937] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.414110][ T6937] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.434205][ T24] lo speed is unknown, defaulting to 1000 [ 261.442201][T11440] bond0: (slave dummy0): Releasing backup interface [ 261.452052][T11440] bond0: (slave bond_slave_0): Releasing backup interface [ 261.462652][T11440] bond0: (slave bond_slave_1): Releasing backup interface [ 261.472171][T11440] team0: Port device team_slave_0 removed [ 261.480739][T11440] team0: Port device team_slave_1 removed [ 261.489029][T11440] bond4: (slave bridge3): Releasing active interface [ 261.497686][T11440] bridge3: left promiscuous mode [ 261.502794][T11440] bridge3: left allmulticast mode [ 261.543918][ T6937] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.566210][ T6937] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.592993][ T6937] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.606530][ T6937] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.634837][T11427] lo speed is unknown, defaulting to 1000 [ 261.948186][T11486] sctp: [Deprecated]: syz.3.1495 (pid 11486) Use of int in max_burst socket option deprecated. [ 261.948186][T11486] Use struct sctp_assoc_value instead [ 262.080251][T11427] lo speed is unknown, defaulting to 1000 [ 262.388470][T11513] netlink: 'syz.3.1503': attribute type 21 has an invalid length. [ 262.400419][T11511] __nla_validate_parse: 20 callbacks suppressed [ 262.400436][T11511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1502'. [ 262.400574][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 262.426876][T11511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1502'. [ 262.448334][T11515] netlink: 'syz.3.1503': attribute type 3 has an invalid length. [ 262.487351][T11515] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1503'. [ 262.613749][T11524] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 262.642261][ T6937] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 263.325709][T11546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1510'. [ 263.345941][T11546] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 263.348034][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 263.367480][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 263.382338][T11546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1510'. [ 263.386937][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 263.408897][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 263.487792][T11558] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 263.608477][T11571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.634759][T11575] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 263.950062][T11583] sctp: [Deprecated]: syz.0.1520 (pid 11583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.950062][T11583] Use struct sctp_sack_info instead [ 264.531619][T11608] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 264.697497][T11617] validate_nla: 4 callbacks suppressed [ 264.697514][T11617] netlink: 'syz.4.1528': attribute type 2 has an invalid length. [ 265.140921][T11644] gretap1: entered promiscuous mode [ 265.203391][T11645] lo speed is unknown, defaulting to 1000 [ 265.535981][T11645] lo speed is unknown, defaulting to 1000 [ 265.536339][T11642] lo speed is unknown, defaulting to 1000 [ 265.833720][T11659] netlink: 'syz.2.1538': attribute type 23 has an invalid length. [ 266.060869][T11664] tipc: Enabled bearer , priority 0 [ 266.084410][T11664] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 266.105536][T11664] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 266.153646][T11664] tipc: Resetting bearer [ 266.241555][T11642] lo speed is unknown, defaulting to 1000 [ 266.310940][T11672] sctp: [Deprecated]: syz.3.1544 (pid 11672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.310940][T11672] Use struct sctp_sack_info instead [ 267.147332][ T5931] tipc: Node number set to 2427274299 [ 267.905210][T11756] tipc: Enabled bearer , priority 0 [ 267.912881][T11756] syzkaller0: entered promiscuous mode [ 267.918571][T11756] syzkaller0: entered allmulticast mode [ 267.932619][T11756] tipc: Resetting bearer [ 267.953981][T11755] tipc: Resetting bearer [ 268.040789][T11755] tipc: Disabling bearer [ 268.189923][T11775] sctp: [Deprecated]: syz.2.1570 (pid 11775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.189923][T11775] Use struct sctp_sack_info instead [ 268.237280][T11779] bridge0: entered promiscuous mode [ 268.245049][T11779] batadv0: entered promiscuous mode [ 268.255990][T11779] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 268.283415][T11781] tipc: Enabled bearer , priority 0 [ 268.291982][T11779] netlink: 'syz.0.1569': attribute type 13 has an invalid length. [ 268.315280][T11779] netlink: 'syz.0.1569': attribute type 17 has an invalid length. [ 268.334991][T11784] __nla_validate_parse: 23 callbacks suppressed [ 268.335010][T11784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1572'. [ 268.390301][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 268.390908][T11779] erspan0: left allmulticast mode [ 268.429559][T11779] syz_tun: left allmulticast mode [ 268.536559][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1577'. [ 268.550478][T11800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1577'. [ 268.559923][T11779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.833002][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 268.927230][T11824] netlink: 'syz.2.1584': attribute type 21 has an invalid length. [ 268.942344][T11826] syzkaller1: entered promiscuous mode [ 268.942379][T11824] netlink: 'syz.2.1584': attribute type 22 has an invalid length. [ 268.951524][T11826] syzkaller1: entered allmulticast mode [ 268.960794][T11824] netlink: 'syz.2.1584': attribute type 23 has an invalid length. [ 268.981221][T11824] netlink: 'syz.2.1584': attribute type 25 has an invalid length. [ 269.006715][T11824] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1584'. [ 269.128438][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 269.148000][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 269.161105][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 269.202395][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 269.325423][T11847] lo speed is unknown, defaulting to 1000 [ 269.451511][T11854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.458881][T11854] IPv6: NLM_F_CREATE should be set when creating new route [ 269.466232][T11854] IPv6: NLM_F_CREATE should be set when creating new route [ 269.473463][T11854] IPv6: NLM_F_CREATE should be set when creating new route [ 269.537065][T11859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.076915][T11847] lo speed is unknown, defaulting to 1000 [ 271.017187][T11925] vti0: entered promiscuous mode [ 271.290020][ T30] audit: type=1800 audit(1753664483.898:11): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1616" name="memory.events" dev="tmpfs" ino=1664 res=0 errno=0 [ 271.319643][ T30] audit: type=1804 audit(1753664483.928:12): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1616" name="memory.events" dev="tmpfs" ino=1664 res=1 errno=0 [ 271.467965][T11960] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 271.524446][T11964] lo speed is unknown, defaulting to 1000 [ 272.015434][T11993] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 272.066739][T11997] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 272.330130][T12007] netlink: 'syz.3.1631': attribute type 10 has an invalid length. [ 272.373852][T12007] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 272.426995][T12007] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 272.530673][T11964] lo speed is unknown, defaulting to 1000 [ 273.033221][T12041] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.484244][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.524938][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.563041][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.596041][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.605132][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.645270][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.704518][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.730485][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.818564][T12084] __nla_validate_parse: 73 callbacks suppressed [ 273.818582][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 273.820014][T12082] tipc: Resetting bearer [ 273.852849][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 273.868077][T12088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1658'. [ 274.036686][T12093] netlink: 'syz.1.1659': attribute type 10 has an invalid length. [ 274.073114][T12093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1659'. [ 274.098246][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1661'. [ 274.108089][T12095] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1661'. [ 274.132863][T12093] team0: Port device geneve0 added [ 274.139197][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1661'. [ 274.400102][T12111] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 274.489266][T12106] netlink: zone id is out of range [ 274.522054][T12106] netlink: zone id is out of range [ 274.571059][T12111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.664026][T12106] netlink: zone id is out of range [ 274.678346][T12106] netlink: zone id is out of range [ 274.683517][T12106] netlink: zone id is out of range [ 274.690753][T12118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.698579][T12118] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.711064][T12118] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 274.741134][T12106] netlink: zone id is out of range [ 274.750690][T12106] netlink: zone id is out of range [ 274.768198][T12106] netlink: zone id is out of range [ 274.774705][T12120] veth5: entered promiscuous mode [ 274.781168][T12106] netlink: zone id is out of range [ 274.783296][T12120] bond5: (slave veth5): Enslaving as an active interface with a down link [ 274.803793][T12106] netlink: zone id is out of range [ 275.007882][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 275.051494][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'. [ 275.073369][T12140] block nbd0: not configured, cannot reconfigure [ 275.363367][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 275.832929][T12170] lo speed is unknown, defaulting to 1000 [ 276.064028][T12170] lo speed is unknown, defaulting to 1000 [ 276.483415][T12219] veth7: entered promiscuous mode [ 276.745274][T12240] lo speed is unknown, defaulting to 1000 [ 277.061048][T12253] netlink: 'syz.4.1707': attribute type 21 has an invalid length. [ 277.237900][T12239] lo speed is unknown, defaulting to 1000 [ 277.679933][T12262] lo speed is unknown, defaulting to 1000 [ 277.680285][T12240] lo speed is unknown, defaulting to 1000 [ 277.850195][T12239] lo speed is unknown, defaulting to 1000 [ 278.035132][T12262] lo speed is unknown, defaulting to 1000 [ 278.760378][T12302] lo speed is unknown, defaulting to 1000 [ 279.243716][T12302] lo speed is unknown, defaulting to 1000 [ 279.260156][T12328] __nla_validate_parse: 6 callbacks suppressed [ 279.260173][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1727'. [ 279.333888][T12328] IPv6: sit3: Disabled Multicast RS [ 279.341088][T12328] sit3: entered allmulticast mode [ 279.486864][T12331] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1729'. [ 279.817086][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'. [ 279.821402][T12360] sctp: [Deprecated]: syz.4.1734 (pid 12360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.821402][T12360] Use struct sctp_sack_info instead [ 280.090786][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 280.100215][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1737'. [ 280.498192][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 280.689764][T12406] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 280.714128][T12406] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1745'. [ 280.870806][T12412] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1747'. [ 280.990951][ T6948] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 281.133659][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1748'. [ 281.166709][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 281.690648][T12461] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 281.809461][ T5931] lo speed is unknown, defaulting to 1000 [ 281.815232][ T5931] syz0: Port: 1 Link DOWN [ 281.863275][ T5931] lo speed is unknown, defaulting to 1000 [ 281.906804][T12473] lo speed is unknown, defaulting to 1000 [ 281.927213][T12471] pim6reg1: entered promiscuous mode [ 281.932741][T12471] pim6reg1: entered allmulticast mode [ 282.472546][T12503] netlink: 'syz.1.1770': attribute type 4 has an invalid length. [ 282.519730][ T24] lo speed is unknown, defaulting to 1000 [ 282.538619][ T24] syz1: Port: 1 Link ACTIVE [ 282.564369][T12476] netlink: 'syz.0.1763': attribute type 13 has an invalid length. [ 282.634145][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.642585][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.661238][T12476] net_ratelimit: 96 callbacks suppressed [ 282.661250][T12476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.700490][T12473] lo speed is unknown, defaulting to 1000 [ 282.743878][T12516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.560679][T12546] tipc: Enabling of bearer rejected, already enabled [ 283.793789][T12552] veth1_macvtap (unregistering): left allmulticast mode [ 283.818284][T12559] netlink: set zone limit has 8 unknown bytes [ 283.866711][T12552] macsec0 (unregistering): left allmulticast mode [ 284.081074][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.121787][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.130853][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.472735][T12595] __nla_validate_parse: 11 callbacks suppressed [ 284.472753][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1797'. [ 284.599720][ T5917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.689987][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 284.718408][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 285.166879][ T5931] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.306775][T12640] !: renamed from dummy0 [ 285.333995][T12644] netlink: 'syz.4.1813': attribute type 66 has an invalid length. [ 285.465994][T12654] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 285.497728][T12643] lo speed is unknown, defaulting to 1000 [ 285.869360][T12666] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.878253][T12666] bond0: (slave bond7): Enslaving as an active interface with a down link [ 285.889860][T12643] lo speed is unknown, defaulting to 1000 [ 286.056785][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 286.130182][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1824'. [ 286.145215][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 286.154778][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1824'. [ 286.165926][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1824'. [ 286.199103][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 286.242564][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 286.299833][T12690] netlink: 'syz.2.1824': attribute type 12 has an invalid length. [ 286.308322][T12690] netlink: 'syz.2.1824': attribute type 14 has an invalid length. [ 286.334008][T12702] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 286.442723][T12702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.651470][T12710] vlan3: entered promiscuous mode [ 286.657366][T12710] batadv0: entered promiscuous mode [ 286.671731][T12715] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 286.705161][T12713] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 286.765426][T12702] gretap1: entered promiscuous mode [ 287.089264][T12729] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 287.101291][T12729] netlink: 'syz.2.1841': attribute type 2 has an invalid length. [ 287.193212][T12730] siw: device registration error -23 [ 287.435400][T12749] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 287.577340][T12753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.599148][T12753] bond5: (slave bond6): Enslaving as an active interface with a down link [ 287.806005][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.072284][T12778] lo speed is unknown, defaulting to 1000 [ 288.437625][T12778] lo speed is unknown, defaulting to 1000 [ 289.620212][T12835] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 289.661773][T12835] __nla_validate_parse: 12 callbacks suppressed [ 289.661789][T12835] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1871'. [ 289.710760][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 289.761737][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.859076][T12835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.221721][T12865] syzkaller0: entered promiscuous mode [ 290.239023][T12865] syzkaller0: entered allmulticast mode [ 290.724811][T12889] block nbd0: not configured, cannot reconfigure [ 291.896924][T12892] netlink: 'syz.3.1889': attribute type 4 has an invalid length. [ 292.053312][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 292.150200][T12916] netlink: 'syz.2.1894': attribute type 1 has an invalid length. [ 292.260390][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 292.358606][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 292.583032][T12934] lo speed is unknown, defaulting to 1000 [ 292.702266][T12937] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 292.778512][T12943] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 292.976587][T12958] netlink: 'syz.0.1904': attribute type 29 has an invalid length. [ 293.282900][T12973] lo speed is unknown, defaulting to 1000 [ 293.327539][T12934] lo speed is unknown, defaulting to 1000 [ 293.647488][T12973] lo speed is unknown, defaulting to 1000 [ 294.022860][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 294.176678][T12994] lo speed is unknown, defaulting to 1000 [ 294.457950][T13011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1917'. [ 294.688389][T13001] lo speed is unknown, defaulting to 1000 [ 294.706896][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1920'. [ 294.730677][T13018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1920'. [ 294.740125][T12994] lo speed is unknown, defaulting to 1000 [ 295.069664][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 295.120424][T13022] can: request_module (can-proto-3) failed. [ 295.405967][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.511056][T13001] lo speed is unknown, defaulting to 1000 [ 295.567843][T13040] netlink: 'syz.1.1925': attribute type 1 has an invalid length. [ 295.988532][T13069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1930'. [ 296.440987][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1935'. [ 296.511369][T13085] netlink: 'syz.4.1935': attribute type 7 has an invalid length. [ 296.605331][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 297.189023][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 297.511895][T13104] syzkaller0: entered promiscuous mode [ 297.539421][T13104] syzkaller0: entered allmulticast mode [ 297.785063][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 297.878378][T13120] vlan3: entered allmulticast mode [ 297.897378][T13124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1942'. [ 297.915384][T13120] bond6: entered allmulticast mode [ 297.916412][T13117] netlink: 676 bytes leftover after parsing attributes in process `syz.2.1943'. [ 299.915123][T13183] __nla_validate_parse: 4 callbacks suppressed [ 299.915143][T13183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1958'. [ 300.019609][T13205] netlink: zone id is out of range [ 300.028301][T13205] netlink: zone id is out of range [ 300.033522][T13205] netlink: set zone limit has 4 unknown bytes [ 300.121516][T13206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.154009][T13207] netlink: 'syz.4.1964': attribute type 11 has an invalid length. [ 300.685110][T13227] netlink: 'syz.3.1969': attribute type 29 has an invalid length. [ 300.702490][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 300.773166][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 300.852871][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 300.883018][ T30] audit: type=1800 audit(1753664513.488:13): pid=13233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1971" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1992 res=0 errno=0 [ 300.899992][T13096] Set syz1 is full, maxelem 65536 reached [ 301.155688][T13244] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1976'. [ 301.772544][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 301.782525][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'. [ 301.798135][T13285] tipc: Enabling of bearer rejected, already enabled [ 301.817423][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 301.829485][T13290] sctp: [Deprecated]: syz.0.1989 (pid 13290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.829485][T13290] Use struct sctp_sack_info instead [ 301.870868][T13286] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1989'. [ 302.089424][T13303] veth0_to_team: entered promiscuous mode [ 302.106471][T13303] veth0_to_team: entered allmulticast mode [ 302.145494][T13304] netlink: 'syz.3.1993': attribute type 11 has an invalid length. [ 302.236442][T13309] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1996'. [ 302.420947][T13318] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 302.432467][T13318] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.810735][T13327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.490951][T13338] FAULT_INJECTION: forcing a failure. [ 303.490951][T13338] name failslab, interval 1, probability 0, space 0, times 1 [ 303.511254][T13338] CPU: 1 UID: 0 PID: 13338 Comm: syz.3.2005 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 303.511282][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.511293][T13338] Call Trace: [ 303.511301][T13338] [ 303.511309][T13338] dump_stack_lvl+0x189/0x250 [ 303.511336][T13338] ? __pfx____ratelimit+0x10/0x10 [ 303.511362][T13338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.511381][T13338] ? __pfx__printk+0x10/0x10 [ 303.511409][T13338] ? __pfx___might_resched+0x10/0x10 [ 303.511426][T13338] ? fs_reclaim_acquire+0x7d/0x100 [ 303.511456][T13338] should_fail_ex+0x414/0x560 [ 303.511488][T13338] should_failslab+0xa8/0x100 [ 303.511511][T13338] __kmalloc_noprof+0xcb/0x4f0 [ 303.511533][T13338] ? bpf_test_init+0xc2/0x170 [ 303.511555][T13338] bpf_test_init+0xc2/0x170 [ 303.511575][T13338] bpf_prog_test_run_xdp+0x37c/0x1000 [ 303.511610][T13338] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.511634][T13338] ? __fget_files+0x2a/0x420 [ 303.511663][T13338] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.511682][T13338] bpf_prog_test_run+0x2c7/0x340 [ 303.511711][T13338] __sys_bpf+0x4a4/0x860 [ 303.511737][T13338] ? __pfx___sys_bpf+0x10/0x10 [ 303.511774][T13338] ? ksys_write+0x22a/0x250 [ 303.511798][T13338] ? __pfx_ksys_write+0x10/0x10 [ 303.511815][T13338] ? rcu_is_watching+0x15/0xb0 [ 303.511843][T13338] __x64_sys_bpf+0x7c/0x90 [ 303.511865][T13338] do_syscall_64+0xfa/0x3b0 [ 303.511882][T13338] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.511923][T13338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.511940][T13338] ? clear_bhb_loop+0x60/0xb0 [ 303.511962][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.511978][T13338] RIP: 0033:0x7fa37098e9a9 [ 303.511995][T13338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.512010][T13338] RSP: 002b:00007fa36e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.512030][T13338] RAX: ffffffffffffffda RBX: 00007fa370bb5fa0 RCX: 00007fa37098e9a9 [ 303.512043][T13338] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 303.512053][T13338] RBP: 00007fa36e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.512064][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.512075][T13338] R13: 0000000000000000 R14: 00007fa370bb5fa0 R15: 00007ffe12163d38 [ 303.512106][T13338] [ 303.918948][T13330] delete_channel: no stack [ 304.017080][T13349] tipc: Enabling of bearer rejected, already enabled [ 304.773650][T13390] netlink: 'syz.2.2023': attribute type 11 has an invalid length. [ 305.043427][T13403] ÿÿÿÿÿÿÿÿ: renamed from lo [ 305.098932][T13414] __nla_validate_parse: 6 callbacks suppressed [ 305.098949][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2030'. [ 305.143823][T13414] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2030'. [ 305.185738][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2030'. [ 305.468666][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2035'. [ 305.547501][T13435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2035'. [ 305.700043][T13452] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 305.753356][T13452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.778712][T13455] bond4: (slave gretap2): making interface the new active one [ 305.791019][T13455] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 305.894314][T13461] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2043'. [ 306.123019][T13468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.737972][T13509] rdma_rxe: rxe_newlink: failed to add lo [ 306.914252][T13514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.943664][T13514] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.962539][T13514] bridge0: port 3(dummy0) entered blocking state [ 306.969855][T13514] bridge0: port 3(dummy0) entered listening state [ 306.981505][T13514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.389128][T13537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2060'. [ 307.412213][T13538] netlink: 'syz.1.2061': attribute type 12 has an invalid length. [ 307.418102][T13537] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2060'. [ 307.457841][T13537] netlink: 'syz.0.2060': attribute type 6 has an invalid length. [ 307.465600][T13537] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2060'. [ 307.657407][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 307.881442][T13564] netlink: 'syz.1.2066': attribute type 1 has an invalid length. [ 308.759134][T13608] netlink: 'syz.2.2078': attribute type 15 has an invalid length. [ 308.854339][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 308.953012][T13599] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 309.214842][T13613] netlink: 'syz.3.2082': attribute type 8 has an invalid length. [ 309.486130][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.874774][T13643] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 309.892192][T13643] bond6: (slave vcan0): Error -95 calling set_mac_address [ 310.082365][T13648] lo speed is unknown, defaulting to 1000 [ 310.397361][T13662] netlink: 'syz.3.2096': attribute type 21 has an invalid length. [ 310.400623][T13663] netlink: 'syz.0.2094': attribute type 303 has an invalid length. [ 310.468725][T13664] __nla_validate_parse: 10 callbacks suppressed [ 310.468743][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 310.490527][T13662] netlink: 'syz.3.2096': attribute type 6 has an invalid length. [ 310.544040][T13662] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2096'. [ 310.556577][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 310.581068][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 310.643371][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 310.688075][T13663] tipc: Enabled bearer , priority 10 [ 310.860233][T13657] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 310.870490][T13657] nbd: error processing sock list [ 310.879716][T13657] block nbd0: shutting down sockets [ 310.943036][T13660] lo speed is unknown, defaulting to 1000 [ 311.038131][T13648] lo speed is unknown, defaulting to 1000 [ 311.251897][T13685] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 311.341989][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2102'. [ 311.562394][T13660] lo speed is unknown, defaulting to 1000 [ 311.578850][T13710] tipc: Enabling of bearer rejected, already enabled [ 311.685943][ T5917] tipc: Node number set to 1560360120 [ 311.779497][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2107'. [ 311.923466][T13726] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 311.959466][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2103'. [ 312.131500][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2110'. [ 312.230857][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 312.932318][T13760] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.145447][T13778] netlink: 'syz.1.2122': attribute type 2 has an invalid length. [ 313.172664][T13776] netlink: 'syz.4.2121': attribute type 10 has an invalid length. [ 313.327590][T13760] veth0_to_team: left promiscuous mode [ 313.327736][ T5861] Bluetooth: hci0: command tx timeout [ 313.341473][T13760] geneve2: left promiscuous mode [ 313.351790][T13760] ip6tnl2: left promiscuous mode [ 313.360178][T13760] veth7: left promiscuous mode [ 313.374381][T13778] bond0: entered promiscuous mode [ 313.385373][T13778] bond_slave_0: entered promiscuous mode [ 313.391721][T13778] bond_slave_1: entered promiscuous mode [ 313.399407][T13778] batadv0: entered promiscuous mode [ 313.406537][T13778] bond0: left promiscuous mode [ 313.425043][T13778] bond_slave_0: left promiscuous mode [ 313.447366][T13778] bond_slave_1: left promiscuous mode [ 313.465949][T13778] batadv0: left promiscuous mode [ 313.506751][T13776] bridge0: port 1(team0) entered disabled state [ 313.515686][T13776] team0: left allmulticast mode [ 313.523307][T13776] team0: left promiscuous mode [ 313.529962][T13776] bridge0: port 1(team0) entered disabled state [ 313.564836][T13776] batman_adv: batadv0: Adding interface: team0 [ 313.583481][T13776] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.626555][T13776] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 313.684323][T13798] FAULT_INJECTION: forcing a failure. [ 313.684323][T13798] name failslab, interval 1, probability 0, space 0, times 0 [ 313.687460][T13763] lo speed is unknown, defaulting to 1000 [ 313.714159][T13798] CPU: 0 UID: 0 PID: 13798 Comm: syz.1.2124 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 313.714194][T13798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.714215][T13798] Call Trace: [ 313.714222][T13798] [ 313.714230][T13798] dump_stack_lvl+0x189/0x250 [ 313.714255][T13798] ? __pfx____ratelimit+0x10/0x10 [ 313.714281][T13798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.714301][T13798] ? __pfx__printk+0x10/0x10 [ 313.714329][T13798] ? __pfx___might_resched+0x10/0x10 [ 313.714347][T13798] ? fs_reclaim_acquire+0x7d/0x100 [ 313.714376][T13798] should_fail_ex+0x414/0x560 [ 313.714409][T13798] should_failslab+0xa8/0x100 [ 313.714433][T13798] __kmalloc_cache_noprof+0x70/0x3d0 [ 313.714455][T13798] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 313.714480][T13798] __xdp_reg_mem_model+0x1d8/0x5a0 [ 313.714507][T13798] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 313.714530][T13798] ? page_pool_create_percpu+0x800/0xbe0 [ 313.714559][T13798] xdp_reg_mem_model+0x22/0x40 [ 313.714580][T13798] bpf_test_run_xdp_live+0x215/0x1b10 [ 313.714603][T13798] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 313.714628][T13798] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.714656][T13798] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 313.714672][T13798] ? bpf_dispatcher_xdp+0x800/0x1000 [ 313.714688][T13798] ? bpf_dispatcher_xdp+0x800/0x1000 [ 313.714753][T13798] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 313.714780][T13798] ? _copy_from_user+0x94/0xb0 [ 313.714803][T13798] ? bpf_test_init+0x133/0x170 [ 313.714816][T13798] ? xdp_convert_md_to_buff+0x5b/0x330 [ 313.714834][T13798] bpf_prog_test_run_xdp+0x713/0x1000 [ 313.714868][T13798] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.714891][T13798] ? __fget_files+0x2a/0x420 [ 313.714920][T13798] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.714938][T13798] bpf_prog_test_run+0x2c7/0x340 [ 313.714968][T13798] __sys_bpf+0x4a4/0x860 [ 313.714994][T13798] ? __pfx___sys_bpf+0x10/0x10 [ 313.715032][T13798] ? ksys_write+0x22a/0x250 [ 313.715054][T13798] ? __pfx_ksys_write+0x10/0x10 [ 313.715072][T13798] ? rcu_is_watching+0x15/0xb0 [ 313.715099][T13798] __x64_sys_bpf+0x7c/0x90 [ 313.715121][T13798] do_syscall_64+0xfa/0x3b0 [ 313.715138][T13798] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.715157][T13798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.715180][T13798] ? clear_bhb_loop+0x60/0xb0 [ 313.715201][T13798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.715216][T13798] RIP: 0033:0x7feb2978e9a9 [ 313.715231][T13798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.715245][T13798] RSP: 002b:00007feb2a54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.715264][T13798] RAX: ffffffffffffffda RBX: 00007feb299b5fa0 RCX: 00007feb2978e9a9 [ 313.715276][T13798] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 313.715288][T13798] RBP: 00007feb2a54f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.715299][T13798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.715308][T13798] R13: 0000000000000000 R14: 00007feb299b5fa0 R15: 00007fffff6386c8 [ 313.715338][T13798] [ 314.580001][T13763] lo speed is unknown, defaulting to 1000 [ 314.588647][T13771] lo speed is unknown, defaulting to 1000 [ 314.965264][T13771] lo speed is unknown, defaulting to 1000 [ 314.989207][T13815] siw: device registration error -23 [ 315.612145][T13855] lo speed is unknown, defaulting to 1000 [ 316.287604][T13865] __nla_validate_parse: 2 callbacks suppressed [ 316.287623][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 316.614313][T13864] lo speed is unknown, defaulting to 1000 [ 316.624587][T13855] lo speed is unknown, defaulting to 1000 [ 316.965170][T13890] netlink: 'syz.4.2142': attribute type 16 has an invalid length. [ 316.965173][T13891] netlink: 'syz.4.2142': attribute type 16 has an invalid length. [ 316.965197][T13891] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 316.982943][T13890] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 316.982964][T13890] netlink: 'syz.4.2142': attribute type 2 has an invalid length. [ 317.066432][T13891] netlink: 'syz.4.2142': attribute type 2 has an invalid length. [ 317.149267][T13894] IPVS: Scheduler module ip_vs_sip not found [ 317.176813][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.405661][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 317.415392][T13864] lo speed is unknown, defaulting to 1000 [ 317.966392][T13912] lo speed is unknown, defaulting to 1000 [ 318.453015][T13931] IPVS: persistence engine module ip_vs_pe_ not found [ 318.479949][ T10] IPVS: starting estimator thread 0... [ 318.565879][T13935] IPVS: using max 28 ests per chain, 67200 per kthread [ 318.598305][T13912] lo speed is unknown, defaulting to 1000 [ 319.037166][T13951] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 319.716630][T13963] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 319.755259][T13966] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 319.764277][T13963] netlink: 'syz.1.2162': attribute type 16 has an invalid length. [ 319.773995][T13963] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2162'. [ 319.864820][T13969] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2164'. [ 320.018001][T13979] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2166'. [ 320.027676][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2166'. [ 320.051091][T13979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 320.114744][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 320.241813][T13988] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2169'. [ 320.342212][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 320.359815][T13996] netlink: 'syz.4.2169': attribute type 3 has an invalid length. [ 321.282968][T14046] netlink: 'syz.3.2182': attribute type 2 has an invalid length. [ 321.772443][T14061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.814363][T14123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.837367][T14124] validate_nla: 2 callbacks suppressed [ 322.837386][T14124] netlink: 'syz.0.2205': attribute type 4 has an invalid length. [ 322.880261][T14124] netlink: 'syz.0.2205': attribute type 4 has an invalid length. [ 323.743677][T14141] __nla_validate_parse: 4 callbacks suppressed [ 323.743696][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2210'. [ 323.765000][T14141] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 323.773518][T14141] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2210'. [ 339.127418][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.138683][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.147620][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.155668][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.164101][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.253517][T14149] lo speed is unknown, defaulting to 1000 [ 339.607385][ T5858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.617950][ T5858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.626902][ T5858] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.634945][ T5858] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.643345][ T5858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.710775][T14149] lo speed is unknown, defaulting to 1000 [ 339.744817][T14153] lo speed is unknown, defaulting to 1000 [ 340.057597][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.068601][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.077292][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.085279][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.093675][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.233796][T14151] lo speed is unknown, defaulting to 1000 [ 340.242174][T14153] lo speed is unknown, defaulting to 1000 [ 341.247440][ T5861] Bluetooth: hci5: command tx timeout [ 341.552454][T14151] lo speed is unknown, defaulting to 1000 [ 341.730640][ T5858] Bluetooth: hci7: command tx timeout [ 341.781357][ T5858] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 341.795044][ T5858] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 341.803797][ T5858] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 341.817702][ T5858] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 341.825349][ T5858] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 341.885659][T14160] lo speed is unknown, defaulting to 1000 [ 341.908693][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 341.918758][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 341.927511][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 341.935515][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 341.944002][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 342.126559][ T5849] Bluetooth: hci6: command tx timeout [ 342.488589][T14161] lo speed is unknown, defaulting to 1000 [ 342.522037][T14160] lo speed is unknown, defaulting to 1000 [ 342.536940][T14153] chnl_net:caif_netlink_parms(): no params data found [ 342.582410][T14149] chnl_net:caif_netlink_parms(): no params data found [ 343.326496][ T5849] Bluetooth: hci5: command tx timeout [ 343.806505][ T5849] Bluetooth: hci7: command tx timeout [ 343.886082][ T5849] Bluetooth: hci9: command tx timeout [ 343.966556][ T5849] Bluetooth: hci8: command tx timeout [ 344.206570][ T5849] Bluetooth: hci6: command tx timeout [ 345.406896][ T5849] Bluetooth: hci5: command tx timeout [ 345.886596][ T5849] Bluetooth: hci7: command tx timeout [ 345.968394][ T5861] Bluetooth: hci9: command tx timeout [ 346.046519][ T5849] Bluetooth: hci8: command tx timeout [ 346.286498][ T5849] Bluetooth: hci6: command tx timeout [ 347.486484][ T5849] Bluetooth: hci5: command tx timeout [ 347.966556][ T5849] Bluetooth: hci7: command tx timeout [ 348.046533][ T5849] Bluetooth: hci9: command tx timeout [ 348.127282][ T5849] Bluetooth: hci8: command tx timeout [ 348.366457][ T5849] Bluetooth: hci6: command tx timeout [ 350.126549][ T5849] Bluetooth: hci9: command tx timeout [ 350.206463][ T5849] Bluetooth: hci8: command tx timeout [ 428.155797][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 428.162453][ C0] rcu: 0-...!: (1 GPs behind) idle=6df4/1/0x4000000000000000 softirq=62563/62564 fqs=1424 [ 428.173399][ C0] rcu: (t=10502 jiffies g=46181 q=4408 ncpus=2) [ 428.179741][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 7645 jiffies! g46181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 428.192002][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=26788 [ 428.199877][ C0] rcu: rcu_preempt kthread starved for 7648 jiffies! g46181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 428.211148][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 428.221128][ C0] rcu: RCU grace-period kthread stack dump: [ 428.227014][ C0] task:rcu_preempt state:I stack:26280 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 428.238912][ C0] Call Trace: [ 428.242194][ C0] [ 428.245113][ C0] __schedule+0x16fd/0x4cf0 [ 428.249615][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 428.254903][ C0] ? schedule+0x165/0x360 [ 428.259236][ C0] ? __lock_acquire+0xab9/0xd20 [ 428.264088][ C0] ? __pfx___schedule+0x10/0x10 [ 428.269019][ C0] ? schedule+0x91/0x360 [ 428.273245][ C0] schedule+0x165/0x360 [ 428.277386][ C0] schedule_timeout+0x12b/0x270 [ 428.282219][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 428.287660][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 428.293556][ C0] ? __pfx_process_timeout+0x10/0x10 [ 428.298841][ C0] ? prepare_to_swait_event+0x341/0x380 [ 428.304476][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 428.309320][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 428.315461][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 428.320746][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 428.326022][ C0] ? finish_swait+0xcd/0x1f0 [ 428.330691][ C0] rcu_gp_kthread+0x99/0x390 [ 428.335261][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 428.340437][ C0] ? __kthread_parkme+0x7b/0x200 [ 428.345357][ C0] ? __kthread_parkme+0x1a1/0x200 [ 428.350364][ C0] kthread+0x70e/0x8a0 [ 428.354417][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 428.359596][ C0] ? __pfx_kthread+0x10/0x10 [ 428.364170][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.369354][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.374599][ C0] ? __pfx_kthread+0x10/0x10 [ 428.379181][ C0] ret_from_fork+0x3fc/0x770 [ 428.383765][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 428.388856][ C0] ? __switch_to_asm+0x39/0x70 [ 428.393611][ C0] ? __switch_to_asm+0x33/0x70 [ 428.398369][ C0] ? __pfx_kthread+0x10/0x10 [ 428.402959][ C0] ret_from_fork_asm+0x1a/0x30 [ 428.407726][ C0] [ 428.410828][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 428.417140][ C0] Sending NMI from CPU 0 to CPUs 1: [ 428.422352][ C1] NMI backtrace for cpu 1 [ 428.422373][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 428.422411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.422431][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 428.422464][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 0d 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 428.422477][ C1] RSP: 0018:ffffc90000a08818 EFLAGS: 00000246 [ 428.422492][ C1] RAX: ffffffff81720d6d RBX: 0000000000000003 RCX: ffff88801d6a5a00 [ 428.422504][ C1] RDX: 0000000000000100 RSI: ffffffff8d9998d2 RDI: ffffffff8be28d00 [ 428.422515][ C1] RBP: ffffc90000a088f0 R08: ffffffff8fa1f6f7 R09: 1ffffffff1f43ede [ 428.422527][ C1] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: dffffc0000000000 [ 428.422539][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000141108 [ 428.422549][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 428.422562][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.422573][ C1] CR2: 00007f191c347e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 428.422586][ C1] Call Trace: [ 428.422595][ C1] [ 428.422601][ C1] kvm_wait+0x232/0x290 [ 428.422622][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.422637][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 428.422661][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 428.422681][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 428.422701][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.422715][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 428.422738][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 428.422759][ C1] do_raw_spin_lock+0x21f/0x290 [ 428.422778][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.422799][ C1] ? xfrm_policy_kill+0x240/0x440 [ 428.422819][ C1] xfrm_policy_kill+0x240/0x440 [ 428.422839][ C1] xfrm_policy_timer+0x353/0x630 [ 428.422859][ C1] call_timer_fn+0x17b/0x5f0 [ 428.422873][ C1] ? __pfx_xfrm_policy_timer+0x10/0x10 [ 428.422889][ C1] ? call_timer_fn+0xbe/0x5f0 [ 428.422902][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 428.422921][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.422940][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.422953][ C1] ? __pfx_xfrm_policy_timer+0x10/0x10 [ 428.422970][ C1] __run_timer_base+0x61a/0x860 [ 428.422990][ C1] ? ktime_get+0x3e/0x1f0 [ 428.423013][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 428.423031][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 428.423058][ C1] run_timer_softirq+0xb7/0x180 [ 428.423078][ C1] handle_softirqs+0x286/0x870 [ 428.423096][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 428.423114][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 428.423132][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 428.423153][ C1] __irq_exit_rcu+0xca/0x1f0 [ 428.423168][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 428.423188][ C1] irq_exit_rcu+0x9/0x30 [ 428.423201][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 428.423222][ C1] [ 428.423227][ C1] [ 428.423233][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.423250][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 428.423270][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 0d 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 428.423282][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 428.423294][ C1] RAX: 7c90926c83d3fa00 RBX: ffffffff81976a18 RCX: 7c90926c83d3fa00 [ 428.423306][ C1] RDX: 0000000000000001 RSI: ffffffff8d9998d2 RDI: ffffffff8be28d00 [ 428.423317][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 428.423335][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1f6f0 [ 428.423347][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad4b40 [ 428.423360][ C1] ? do_idle+0x1e8/0x510 [ 428.423381][ C1] default_idle+0x13/0x20 [ 428.423396][ C1] default_idle_call+0x74/0xb0 [ 428.423411][ C1] do_idle+0x1e8/0x510 [ 428.423430][ C1] ? __pfx_do_idle+0x10/0x10 [ 428.423455][ C1] cpu_startup_entry+0x44/0x60 [ 428.423472][ C1] start_secondary+0x101/0x110 [ 428.423491][ C1] common_startup_64+0x13e/0x147 [ 428.423518][ C1] [ 428.424352][ C0] CPU: 0 UID: 0 PID: 14116 Comm: syz.2.2206 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 428.424364][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.424370][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x83/0x90 [ 428.424383][ C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 428.424391][ C0] RSP: 0018:ffffc90003c2f598 EFLAGS: 00000293 [ 428.424399][ C0] RAX: ffffffff8a1566a5 RBX: 00000000ffffffff RCX: 0000000000000000 [ 428.424405][ C0] RDX: ffff88802fa81e00 RSI: 000000007eb0ea06 RDI: 00000000ffffffff [ 428.424412][ C0] RBP: ffffc90003c2f6f8 R08: 0000000000000000 R09: ffffffff8a156580 [ 428.424418][ C0] R10: dffffc0000000000 R11: fffff52000785ea4 R12: dffffc0000000000 [ 428.424424][ C0] R13: ffff888057f34438 R14: 000000007eb0ea06 R15: 0000000000000000 [ 428.424430][ C0] FS: 00007f84787676c0(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 428.424438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.424444][ C0] CR2: 00007f7991382890 CR3: 0000000034f2e000 CR4: 00000000003526f0 [ 428.424453][ C0] Call Trace: [ 428.424456][ C0] [ 428.424460][ C0] xfrm_alloc_spi+0x3c5/0xf30 [ 428.424472][ C0] ? xfrm_alloc_spi+0x2a0/0xf30 [ 428.424485][ C0] ? __local_bh_enable_ip+0x83/0x1c0 [ 428.424500][ C0] ? __pfx_xfrm_alloc_spi+0x10/0x10 [ 428.424511][ C0] ? xfrm_find_acq+0x87/0xa0 [ 428.424526][ C0] pfkey_getspi+0x7a8/0xee0 [ 428.424545][ C0] pfkey_sendmsg+0xbfe/0x1090 [ 428.424564][ C0] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 428.424592][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 428.424603][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.424612][ C0] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 428.424622][ C0] __sock_sendmsg+0x219/0x270 [ 428.424638][ C0] ____sys_sendmsg+0x505/0x830 [ 428.424652][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.424667][ C0] ? import_iovec+0x74/0xa0 [ 428.424681][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 428.424694][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.424723][ C0] ? __fget_files+0x2a/0x420 [ 428.424737][ C0] ? __fget_files+0x3a0/0x420 [ 428.424754][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 428.424767][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.424783][ C0] ? rcu_is_watching+0x15/0xb0 [ 428.424796][ C0] ? do_syscall_64+0xbe/0x3b0 [ 428.424807][ C0] do_syscall_64+0xfa/0x3b0 [ 428.424816][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.424824][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.424832][ C0] ? clear_bhb_loop+0x60/0xb0 [ 428.424843][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.424852][ C0] RIP: 0033:0x7f847798e9a9 [ 428.424862][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.424870][ C0] RSP: 002b:00007f8478767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.424879][ C0] RAX: ffffffffffffffda RBX: 00007f8477bb5fa0 RCX: 00007f847798e9a9 [ 428.424885][ C0] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 428.424890][ C0] RBP: 00007f8477a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 428.424896][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.424901][ C0] R13: 0000000000000000 R14: 00007f8477bb5fa0 R15: 00007ffe2f63f3a8 [ 428.424916][ C0]