last executing test programs: 3.23549576s ago: executing program 4 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000100)={0x20000001}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28030}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={0x0, @vsock={0x28, 0x0, 0x2710, @hyper}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='pim6reg0\x00', 0xe, 0x5, 0x9}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x6]}, @CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x50}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5a, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x9}}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0cadf048d99a1e219ab4c47447234375f917d766639e39d292a0695a4768ad919bb86e0ab3ffd4264660b92f9e94f2bd500ed2779f45525aa84d2f226aed5d911246fb8d8c9ca50eb043fd6c0d2000ad0578b3488d899b623632e1a94f8efc7fa4adc8851184e5adaa76bc63b7adf202a30a78b604af2eabc98508d3d70ad5a38583cecd242d78ca3850965b5aee97d4f647d08a80f65860fbbff83e0977ae892379524d", @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 2.927808652s ago: executing program 4 (id=1425): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a2400200000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000e36f7cbe00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.786139735s ago: executing program 4 (id=1427): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80000001e02000226bd7000fcdbdf2519000000910089800800810081000000040050800400f5805496a74860ca953973568b328ea0b9a2accfce7086b2fde89f15d078c34a727b1a82ff8fe8c4ac137ebcf5f21ea1e710709abc40c63421d926685ab7a7e72156f22aaa751ba8c97fdf754a85b196b959df14000c00fe88000000000000000000000000010104002c80040001800c0095006e6c383032313100", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0xffc7}, 0x1, 0x0, 0x0, 0x8094}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES64, @ANYRESHEX, @ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa467faaaaaaffffffffffffeceba701041c000000008002907800000000e000030000009078006400d2"], 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000340)={@loopback, 0x3, r12}) ppoll(&(0x7f0000000000)=[{r10, 0x8503}], 0x1, 0x0, 0x0, 0x0) close(r9) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) 2.144452957s ago: executing program 3 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x700, 0x0, 0x0, 0x2}, 0x50) 2.020330414s ago: executing program 3 (id=1439): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x16c1, @private2, 0x80000000}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002", @ANYRES64=r1, @ANYRES8=r2, @ANYRES8=r1, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES16=r1], 0x198}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 1.949721111s ago: executing program 1 (id=1440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x24000, 0x800, 0xf574, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x24000, 0x800, 0xf574, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.845543502s ago: executing program 1 (id=1441): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket(0x2b, 0x80801, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000580)=[{r2, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getpeername$ax25(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) socket$netlink(0x10, 0x3, 0x9) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) bind$bt_hci(r9, &(0x7f0000000280), 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 1.70022413s ago: executing program 4 (id=1442): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) (async) unshare(0x6a040000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f00000008200000040000", @ANYRES32, @ANYBLOB="ae55"], 0x20) socket(0x8, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9}}, 0x420}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="4b1af8ff03000000"], &(0x7f0000000280)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xc, 0x2d8, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)}, 0x94) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840), 0x0, 0x20044000) 1.691732809s ago: executing program 2 (id=1443): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x80047456, 0xf0ff1f00000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) 1.557307741s ago: executing program 2 (id=1444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000480)='wlan0\x00', &(0x7f00000004c0)=@random="6dd634d5a1d731e838", 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000100000000000000180100002020702500000000002002007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700d4ff00"/14, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x800}, 0x8010) 1.128289609s ago: executing program 3 (id=1446): r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffffffffffd0f) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468040000000400028007002000", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001007030400"/20, @ANYRES16=r7, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0) r9 = socket(0x26, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.112396226s ago: executing program 4 (id=1447): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x100}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="02100000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x7c9ce322e12d340) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0xe, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000000010101000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010018000000140005800e000100736e6d705f74726170000000"], 0x4c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x1, 0x1, 0x93, 0x0, {{0x23, 0x4, 0x1, 0x2f, 0x8c, 0x68, 0x0, 0xc, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x1b, 0x77, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}]}, @noop, @timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0x0, [{@local, 0xfffffff9}, {@private=0xa010101, 0x1}, {@remote, 0x5}]}, @generic={0x88, 0x7, "19e5528563"}, @timestamp={0x44, 0x8, 0x64, 0x0, 0x3, [0x81]}, @noop, @generic={0x82, 0x4, "ba90"}, @rr={0x7, 0x17, 0xac, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0x4, [{@private=0xa010100, 0x6}, {@multicast1, 0x7}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=@delqdisc={0x1ac, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x6d7aa0beaa740cd0, 0x5}, {0x8}, {0xc, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x174, 0x2, {{0x3, [0xb, 0x10, 0x5, 0x8, 0x6, 0x3, 0xf, 0xc, 0x9, 0xa, 0x4, 0xa, 0xd, 0xd, 0xd, 0x9], 0x1, [0x3a, 0x8000, 0x487c, 0x3, 0xec, 0x1, 0x3, 0x4, 0xfff6, 0x2, 0x0, 0x4, 0x7, 0x8, 0x4, 0x1], [0x8, 0x0, 0x3, 0x1400, 0x7, 0x5, 0x2, 0x0, 0x5, 0x4, 0x9, 0x5, 0x6, 0x7, 0xb, 0x4]}, [@TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xf}, {0xc, 0x3, 0xf}]}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x61e}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xbf}, {0xc, 0x4, 0x80000001}, {0xc, 0x4, 0x400}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xffff}, {0xc, 0x4, 0x2ae}]}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x3}, {0xc, 0x4, 0xf0b}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x9}, {0xc}, {0xc, 0x4, 0x52089118}, {0xc}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) (async, rerun: 64) socket$kcm(0x29, 0x4, 0x0) (rerun: 64) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x67}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.081739071s ago: executing program 3 (id=1448): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(r3) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 968.347106ms ago: executing program 4 (id=1449): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000004000000040000000206ba4c6e000000fedca423e8928782db672fcb674b6dd88b701469aea3a7a0c6c4453d863588ce38b97e70bda88d58c1dd6e33b34ae3e80c6075ed3e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000004000000040000000206ba4c6e000000fedca423e8928782db672fcb674b6dd88b701469aea3a7a0c6c4453d863588ce38b97e70bda88d58c1dd6e33b34ae3e80c6075ed3e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 960.920556ms ago: executing program 0 (id=1450): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x38, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @pid}]}, @nested={0x14, 0x4, 0x0, 0x1, [@nested={0xd, 0x65, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic='X']}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 825.869507ms ago: executing program 3 (id=1451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000200)={0x2c, 0x28, '\x00', [@enc_lim={0x4, 0x1, 0xd9}, @generic={0x70, 0x13c, "f31154ca5d1b80e2d5ed8b4e4303ffdb8d9df8404510c00f0b71a981c742b9315288d8d6b67673754e2e36232bfa095a657808619687c56f1816a2a53fbee54a9a977f28f7cd5afe322ee6deaca98ef9fb771b374a6dd88cafd7f3187a61c1def964b622e8f526146665d4b501edc303877ac40f350f333d1e08651dc0b4de38c9d8c4788646c878ef2dede13302ee3b76816adc3090300aeaae5803bbf081e3f3b0c6833cbeee0d8347a46766d6ff886eb9f6329d6c00ff886e8421f190871e8d6e67568ff106c43b29be1be3e2fda7797fc971ef00f0ad8ad554b9101f207e7986840beaa67978a5ea89153f1521030c01fbe3c38b8ee735952ccf3813b43aab0b9141152c51c0b998f089860bc063676d1c0df3c7836efae9f1ed3062f59adbafd04b0a596e812276e558ec2d8bb89f183c06112d8fcda2a97a6b"}]}, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 775.102898ms ago: executing program 0 (id=1452): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8000, 0x7820, 0x2, 0x8, {{0x16, 0x4, 0x1, 0x38, 0x58, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @empty, {[@timestamp_prespec={0x44, 0x44, 0x47, 0x3, 0x9, [{@broadcast, 0x200}, {@multicast2, 0xaa}, {@rand_addr=0x64010101, 0xa}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x26}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x2}, {@local, 0xffffae9e}]}]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x8}, [@cb_func={0x18, 0x8}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x22, 0xffffffffffffff83, 0x0, 0x0, 0xffffffffffffffc0, 0xba, 0x8, 0x2c, &(0x7f0000001380)}}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r7, &(0x7f0000001440)={&(0x7f0000000f40)=@caif=@rfm={0x25, 0xffffffa5, "3fe186535a40b5f740ed759cd38e2d33"}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f00000043c0)=[{0x48, 0x10d, 0x8, "aa11543cdad2b5d0c495442e0237ad8a6838befc9158b5273a6b91b0db742161a105bd5e065d954334a974a2a79ee3f4eb3e"}, {0x1010, 0x114, 0xf0, "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"}, {0xf8, 0x1, 0x800, "fcb4e84e4a65955d9462803c62243ea9f0adcf38c73c65cc5062c27cf23bad2b59b4c7864327c24673534d21a4058cf93a172ee2a4dacb222dff15c7f0bed72cfaebc71d53644fafdce5b1cd6a3a6f5f112bf3a0fb2f5f6ae1560dab1093fefb53ae58aae122470f8705386dcc8441e30cf57cffdb75ec419e7eeff162513924485bd9bfa9c2fe7bb67026d679d285255d076f420d24a70b7fa587807e4b33037c0842ce757240b51a19c3ff9f6c9037d70c1096fa9be23589b226b2b678832d113bc6a3149b9f46fa5b8c94c068994e127b51ef2d2ee3b6c9f95148c138224c5b2c47"}, {0x1010, 0x1, 0x58c, "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"}, {0x40, 0xff, 0x3, "ee5547ff7553a168e7a11a09d2d16882bb0ce487eab9b6aa3a6a2b937913ae98800096b578897e20a0852c6e2b1b00"}, {0xa8, 0x113, 0x9, "464688d595322a822fea156a0263d42e2638a6235cc084ce0cccb28228d88635300d1843f3138beb3110259cdc8591e33db4394e67d76c6247866048bf9ff5cc9b8baa2c7ed7a588e41e92e0e7de37f3dfc8b6a0f4961fa050d2bb8893f8b54b016946c6ba86c2defc8a345ca0b6a01f1a8d1fa4c79c0895281b3b277beb6080781b503c13ff40b03df082862d389e2c8c39bf2353"}], 0x2248}, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa8, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000041) (async) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0101000000000000000000000000ac1414aa00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000003c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000500000000"], 0x138}}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r9) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r8, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000280)={r7, 0x3, 0x14b, 0x1}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x7fffffff, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r10, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r10}, 0x20) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r5, r10, 0x4, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x19, 0x6, &(0x7f0000001500)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb57, 0x0, 0x0, 0x0, 0x689}, @map_fd={0x18, 0x4, 0x1, 0x0, r11}], &(0x7f0000001540)='GPL\x00', 0xa5ff, 0x0, 0x0, 0x40f00, 0x44, '\x00', r5, @fallback=0x32, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001580)={0x5, 0xc, 0x8000, 0x6}, 0x10, r6, r10, 0x3, &(0x7f0000001700)=[r10, r10, r10, r10, r12, r13], &(0x7f0000001740)=[{0x3, 0x2, 0x6}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x1, 0xa, 0xb}], 0x10, 0xd7d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x18, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x3, 0x1, 0x1, 0x7, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x35, &(0x7f00000001c0)=""/53, 0x0, 0x2, '\x00', r3, @sock_ops=0x3, r0, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x4, 0x9, 0xffff}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x7, 0xb}, {0x5, 0x3, 0x6, 0x3}], 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r14}, 0x10) (async) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) (async) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 687.170465ms ago: executing program 3 (id=1453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010100000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x38}}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80087601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006111920000000000851000000200000085000000a4000000950000001100"/48], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) 616.503081ms ago: executing program 0 (id=1454): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'veth1_to_bridge\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x4090) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000200)=@bpq0, 0x10) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="7920538b25c5f5ee8204060efa471107a827920363e04059fa634911935293a7564a10a00671ec7d394492584718b3bff932519a5d8374e54cb7e4119ae3e72be1b8e787c186d4a2f2e4573c5fe9cf0329ba998ee46a1bdc0f3aad0f8ee53cfbae7fa8512c715b9550596a15762d25907c277a947ac5bf3f3bc8a90d28d1e06b22887676dbc329470775c6329f5a1bb8bff95a565bdd5adc83ea75beb19b35de97dd054f4bba73d75888954aa9dd525fe3e0a3570f47b64e1d5ff8c588c3e2a125025b4757df8940498aeefa24afba7873ac0c56fd5a5e2fb6a61709a51d5c3a92d215c8529b040b22aa84ff17", 0xed}, {&(0x7f0000000340)="a18002d539d4264b49f1f91c7898cd2836005b7eda8a335d7af9799a03730c5658d5b627f9675d1b734d386e6e7391d4541f297366fe125263e56e756bd0eeff49671b4983e454ca486314ed94b735d6e03bbf40e57be3c5f2586579b7a82698381a0e5f4da6", 0x66}, {&(0x7f00000003c0)="5b0565db3ab685e4042ce55d0a8b10c6c975ff0d65c15418432c8fff6b891792c9fc952966cd175f64f037d51045c844b3de397a41c59fed35956d10b459701490c4cde4ca6c4e720dcc7578bc76a1642f648728955d91a03bf4677e22736c070da0e56594c11ec4f764e4005fd2221cb5c06c5b31627d6b9c35e33a25f12f5641dd5a", 0x83}], 0x3, &(0x7f00000004c0), 0x0, 0x48c3}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000500)="5823b3697a69e66c60d2243c9b409feec711e2367c9c842fc072229cdeaa558524a29d9a399ce43da0db9bf136215bba091d55c6fd86940f7f835d89689354d20dcf6e3b23a4060764967eda01a2d82ec8e6ce7e722544148795a0b88ca533254295a03f8a6900aded415fac770790c59d64867310da0852a10d189e29e43200ebe9c25b242244addc26c749b1ff4dbb4af6927f29c4781c616da658d5bd56f3e4574c556b", 0xa5}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="252f70d0bbb606529dcc6acffbfe7133d5f6c396dca17543f1c99afdb17de621bdb8d1968c99e26d66eb30ca0f0b4e7e0ced497c347b4b3c822559f1ea9d69129409c8953a9b813473dd5b8b767fd7c70fdaeabcb3f9", 0x56}, {&(0x7f0000001640)="beaf202c74507a4ddba90e8b6b0a0596d34055c560135aa390fdd5bab1a8735941ec18c783c45b343fbcb95f434c4793a536c25dc63d1196f33a2c7261913477956db764ee50f1032da453bc2f8f1c6316629155abfdd503fe71d3f7483e16a7c4d4119fe179c00241abff61b5b01b6c1a05e5f54a95c740fef22d6b4147ed3c2ddcd2e829f9633ff2333848e17775673c80caa1211317dbd0a4a3835f0cad709c202508da7a64750dda6199e4201a9009dbde3f0cbc6d060f583ea0e395224a970c1ec21cf6850be4a0ad6fdefb01b6062142422b035cd7a3bb922e6ce296eed3e437499abe5aa59926ecdf47be74ee547fb371e02b2707", 0xf8}, {&(0x7f0000001740)="8b5328954d165651ede7070d4f038314f14252e086ab19788c39bdcb9e14f810bdc285638261f72652994283e9f6c2abc94622b9a06da229ef6832de5649a36517d7cc8580b43baf4775bd7acfd8247ff21626ba7c27b439e2bc438b", 0x5c}], 0x5, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0xa8, 0x4008004}], 0x2, 0x40084) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x0, 0x23, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4003}, 0x8001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c0}, 0x885) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001c40)={@remote, @private, 0x0}, &(0x7f0000001c80)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001e00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xc4, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xa}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc6e3c9316e65cc70}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x20000091) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ec0)={0x1, 0x58, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001f00)={@empty, @dev={0xfe, 0x80, '\x00', 0x42}, @private2, 0x2, 0x1, 0x3, 0x280, 0x9, 0x0, r10}) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001f80)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000020c0)={@fallback=r4, 0x1f, 0x1, 0x4, &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000002000)=[0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0, 0x0], &(0x7f0000002080)=[0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002140)={0x1, 0xffffffffffffffff}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002180)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002100)={@map=r13, r11, 0x19, 0x2030, 0x0, @void, @void, @value=r14, @void, r12}, 0x20) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r15, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)=@ipv4_deladdr={0x44, 0x15, 0x400, 0x70bd27, 0x25dfdbfc, {0x2, 0x18, 0x0, 0xfe, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x9, 0x0, 0x7ff}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3b36}]}, 0x44}, 0x1, 0x0, 0x0, 0x28048020}, 0x44040) sendmsg$NBD_CMD_CONNECT(r15, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd26dc8ee0b5240c8}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x80) 551.800423ms ago: executing program 0 (id=1455): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c000392db2fafa46fe200e1070042"], 0x30}}, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a, 0x214c}}}], 0x30}, 0xc4) syz_open_procfs$namespace(r2, &(0x7f0000000040)) 436.455946ms ago: executing program 2 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x50) 435.729686ms ago: executing program 0 (id=1457): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x7, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x4, &(0x7f0000002100)=""/4096, 0x1000}, 0x10000) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="72e0a01e28ad594daa3163f87e", 0xd}, {&(0x7f0000000380)="a5c930d5a5636015aef4beb68f7af32d188f86812ecac8d3b912a66c9c036452fe9f2bd78b5ee8fe8d499777a52530fe688f35c829f4439d4e8bd3bee729de597178e0b664435e748673b46ee808e6a484fd32bacc2cf7256409d71307a8b4eb333da4ea713747c9e3e21b29a0c356", 0x6f}, {&(0x7f00000004c0)="c1d5e1172b0eb4973392171508f4e651548f988e829c9bef5ab39c418fc10f3616a9ae032258f5885d93c7467e7c23ce9764dff6d266063125e3108b5d81bab2604991952097b14590715b51d94a5d010ab825f38c33ce1687e2fa45f1bea945c6ad3f8fdc93daa2eca2ccd4a17e", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="604a898ae59fa212e8d63a63a6303d0102b3478f91dd7a802fe9e6d7cc0a7a72c0d9dc4311332f43d095af29b9e06c92471d7d43955a49041ecd1b96931d4afc80aa92c55514da4ecd960595e9f1c75fab0239e8", 0x54}, {&(0x7f00000007c0)="baa066016db9e67a3c69907322f95c6e9ed379e658ed82dc637fdcadb95d9a2e1ffa156eda30b96cdc64a60f49530cc6c7f9daeadb099ca81a2d715b3d099158fefced9bf7c09e9c98fea5dcfd4d6ded7cb4bdd0e04f2af19120f5cf234dbe4471385f107e56634444a28859a7d7b050c9256390cc78a38a0eb902a38a50d32ff3d8b96ef942a10a9325222c998903cf9a128ebae54ab42e754e089121962cc15b11c88552ae631e5f12", 0xaa}, {&(0x7f0000000880)="ece417fc7f96212e550d4ad27388f8e2d890d00641c588fa34890984e35a8629c26c0e7217e7ea557d953a5017243af2f106f1e6d24b88dd424966eec111e551fca801b6a122326e9533492287de9391539fab52f3f3c703fd78269088a045d737f8a268a1ca445bdf32c631a1adeee7a86c11dd86dc5f8bdcebb5962fabd3d21e67724127a3ca590e6d5d574e9cedd82d3628f068bd315a2d835e7dfb459c6af1a1c5eb1512f590de11f22b318d2879993cc7a018f54c", 0xb7}], 0x3}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)="043ebef0c4e9be0c1f44ae8902e00272f6e514f467f73aee0b0020878b9a08ddfbbbe73189ac63cff3f05820d019badf4ceb8aba782de8199b9d2516b5c30b6560a7920768d7cef6b62244b5b6eacfae9e281ff493618123129a02ced96eed241b223847ca27996331ba84f7358013560cb877ba9f28b6", 0x77}, {&(0x7f0000000980)="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", 0x142}, {&(0x7f0000000cc0)="1297ae593585c53da2d9ab7f016d73799ac8b458de9ab9362e13bbd0f646dd543f73dc932715477d024e63cfc37429a14b3b3f6a7fccb39d21c495977315e7c968b37bfb98b38d2c5d77cd65762ce82c1964d1ab07e811f680c1cb79e192492c23ab72063a111966fdfe17ea76ff5434c21a1d0f3b0dcd963ef367e43f1cd4399936ea72a8df30ff3533b9e6583a1cc020efea4d90e21d8b20482489dfe726d2b1f2e8d920219cf4a35d4a47b816db404ac3aa0863e1da9135a217e3059472a09bb0e71ed72641c6447d8d0a416b772090e1ba5f00674f9513720a61732e23", 0xdf}, {&(0x7f0000000c40)="a03a95a2c4774e048b320683232d0e74ade1aa9d9b05db336d35ad68", 0x1c}, {&(0x7f0000000080)="bf23010b2d05d776d6ce5a83cb637f092ceba712fd33c6cbdc1a7fb5c20f55832ff636f4a805", 0x26}, {&(0x7f0000000e00)="e5b5862970a93ac36cb456670c3f6deea03ae5cb4733480c5ffa9f0b02743e7d0589d4ec6a86aa53547467fb59d77e0a19fd91a6b1a5af82befc5ad6096c8d63314ab2155725edc200a8831e99e34b1cfd12ae03b2aa335a5f1f2d27d45a20c2857b85dbebe666bc6649282e0c1941c00307702e0816dbc15171f882c3f8c7a7ace486824386abc62116aecdfe85ff7995d8127f02b02936786529a70ca2698a550cfb4163ff8b48b5a3a49d32a488173b725773080dcd11321881b582311f8fba", 0xc1}], 0x6}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b99032700e9441b44d8ab573e390bfd6f1632a18f5a5217c53d98413d6ba747ba8bdde06ffde", 0x26}], 0x1}}], 0x5, 0x2000c044) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) getpeername(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000b00), 0x0, 0x14044058, 0x0, 0x0) 435.064439ms ago: executing program 1 (id=1458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000001b00000000000000000000000000000005000300f90000000e"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x26, 0x6}}], 0x18, 0x200008c0}, 0x6008045) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 388.023024ms ago: executing program 2 (id=1459): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={r0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYRESOCT=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x244043, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='vegas\x00', 0x6) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x1280, @loopback, 0x8}, 0x1c) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000000)=0x201, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) shutdown(0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x800}) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="31a68c000bea8cb530926c8b00c5"], 0x24e2) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000006c0)="83dbff7fe1ec68c55f69be455515cf7807b91e911085c734123b3ffd84ba628def710ea55a4b3051a92fc4c7fd20aae4595591dac4af042019892bc4d73400", 0xffffffffffffffe0}, {&(0x7f0000000400)="08000000000000001d0000", 0xb}], 0x3}, 0xc011) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8) splice(r1, 0x0, r7, 0x0, 0x47, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 324.316528ms ago: executing program 0 (id=1460): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0xb, 0x0, 0x1b}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000100)=0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00800032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000319ffc90400000000000000000000fcfffffffffffffffbffffffffffffff00000000000000000500000000000000000000000000000000004000"/117], 0xb8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x30, 0xa0}, {0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write(r3, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4000010, 0xffffffffffffffff, 0x100000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x20, 0x4) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r10, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r10, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r11, 0x28, 0x0, 0xfffffffffffffffc, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x492, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x4, 0x4a0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 323.696885ms ago: executing program 2 (id=1461): r0 = socket$inet6(0xa, 0x1, 0xfffffffd) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000500)="57c8", 0x2}, {&(0x7f0000000540)="02df1a4b87d5d0a4d911081f9f92a5fd13dac224f9dfd6", 0x17}], 0x2) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="00000200000008000007db29623b3ec1ba688c3ff0100402", 0x18) ioctl$FIONCLEX(r0, 0x5450) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x1c, 0x37, 0x61b, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x8d, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000d010}, 0x40884) r5 = gettid() r6 = getuid() sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3f0, 0x1a, 0x804, 0x70bd2a, 0x25dfdbfb, {0xa}, [@generic="72eea607cc522a32f33eab8de049b430db564c2fb6595c2953c148cce2b1f2a60517a12f30c226d2b49d0b7459d0240ce6939726704891d5cc44057b331c9be3aab3ae822756e6476ee764fcea1bcbc46d715b7089ed527a6f27572a2e7f8e1a0ff316a7d26dcbcc47b8fe3f9081ef4aca8ad62fb20c076cc8d79331051396b32d8c4e55ed0f3956f23a521da1cc9fa183188afdd0d1884c5da0c503f8a8e97b6ab6ea698fd50b77ebff7f0b455ea94e84d408bcd6d8705f7718211ef5c36b6e3d18b8a1d9db38d13789cb47babd69a96b", @nested={0x7a, 0x141, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x4, 0xd6}, @generic="4a2b37f17d24685e4e6a35c7768f2a9b24a7d64dc23a36481b593550a02d83cf6eab66483286ba0bea7b297e190b708af10b86d9848b21b4cf0a4212e97c2490bb3db16e7e2ffb15763523a735192e22742255dbbeeea936df1ca886d92c", @typed={0x8, 0x112, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x150}, @nested={0x4, 0x48}]}, @generic="1accb866fd448e4db9a285374baedce649795b6eeb3118021cec9abb4365b476bbcad99f7c54ec982dd76818f72c094281a74cf465ded4bd744c460b0b08dedf8fb447f7db21", @nested={0x43, 0x1d, 0x0, 0x1, [@nested={0x4, 0x1a}, @generic="f2c8fc604828c0150a6279b2c0984afbcb8a1cedc0bad6e4a5f077b0bf8578", @typed={0x8, 0x54, 0x0, 0x0, @str='!]$\x00'}, @nested={0x4, 0x13f}, @nested={0x4, 0x54}, @typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xd6}]}, @nested={0x180, 0xd1, 0x0, 0x1, [@nested={0x4, 0x79}, @nested={0x4, 0x100}, @nested={0x4, 0x64}, @generic="0e7a4510526c2e25a4bda00935e6294f1be711bee230612931635633ba7304c22db860c06ad54de3c68a5df62bcd5207f12af230caaad47bb23ccb7ec0c99ad50ec9604a34f560c4083fd71d3abd14e54c578cdb29e0357d5cb4dfef0fe255d9d1d9b7ff30880a011ff76b8360ed82006b4f68c26341d0a9917419631b4f6e5572b78a9cf8061980332ac47f6c955de844bf0d7232af410fb98c05793fd7bc520445e66aea364c4cd77f552a90018a524c", @generic="d46769d0b8c302de1c5402fd254cda2375ef76d6ac39c0167e4074773dc8cfc1fd30c3e0a9e56051d1e9c1a33cb8306d338a0fc26c6c32cc0351869e6226f38f8885f1a200f7b6c0c8bba829587e7aad63fe5f4d77a55e84f5c8ab70c784af68b787865c4819e0f6e5f4d5d385fa03b944bb5d76a1467b89c5e77c89ea8c9765a72bab1cc76991c4a373526fb0f973f2a8bdeef036985616314b05607d13a773a7358d37d17a4e", @typed={0x8, 0x108, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r6}]}, @generic="cdc48ecd7a35cf874a75ed9d8cb7e8931859c8625b46fabedf52a3ceb158cda84cb4c0a0d0e272db07207c1a49be3ad0947c73323275c377664fce8742399ade4cd41bc623e97f9cf625bd6c8ddb893fa17b12cd6a835e32eb1dce00db5bacfc16b823c996739fb0ce840719e1a85074f7211472d4e9d4dcdbfacd", @typed={0x8, 0x29, 0x0, 0x0, @fd=r0}]}, 0x3f0}}, 0xc000) 264.472711ms ago: executing program 1 (id=1462): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c010000100013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000540)={'veth0_vlan\x00', 0xfff}) 236.591358ms ago: executing program 2 (id=1463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1004}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x4c84c000) r11 = socket$kcm(0x10, 0x2, 0x10) r12 = socket$kcm(0x10, 0x400000002, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r13, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) write$cgroup_subtree(r13, &(0x7f00000004c0)=ANY=[@ANYBLOB="7589430e61392d895e45af4fb31142375fc843cbf7695bd302422148808b1785fa53aeaee7d3b0f7596fb2ebe9ad4278220b87986b8e6c214bcb98b97f7b9704b85153d8d9f590ce2f605903970552379c7671b8c5ed113ed66dfbd7b05a63f1b6a6ae2c1bb5e3483239da8f1ef75a7f77be4625fbeb1572f0e0be70b084db98b2d76d6476ca27a07c53409b7c85a8bcfb34024bd482f4fbfa737a97d27aea536ec3ce2ad68be892391d9ab0fdf71d73145b64905c6838546c4bd1dd1ecd6e4004344ac2409cc282b176ff5bfc9024f314834600"], 0xfe33) r14 = socket$l2tp(0x2, 0x2, 0x73) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffdef}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}}) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000740)=""/238, 0xee}, {&(0x7f0000000200)=""/55, 0x37}], 0x3}, 0x40000020) 84.474333ms ago: executing program 1 (id=1464): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="b42d5567db16") r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 0s ago: executing program 1 (id=1465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x8000, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) write$cgroup_int(r6, &(0x7f0000000600)=0x8000000000000001, 0x12) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000000)="0f88a8", 0x3}, {&(0x7f0000000200)="1df3655891", 0x5}], 0x3) kernel console output (not intermixed with test programs): _1 [ 79.728174][ T5854] veth0_macvtap: entered promiscuous mode [ 79.739774][ T5861] veth0_vlan: entered promiscuous mode [ 79.755619][ T5871] Bluetooth: hci2: command tx timeout [ 79.772462][ T5854] veth1_macvtap: entered promiscuous mode [ 79.780079][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.793678][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.810374][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.826279][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.835536][ T5871] Bluetooth: hci4: command tx timeout [ 79.837426][ T5861] veth1_vlan: entered promiscuous mode [ 79.855304][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.933534][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.968552][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.980733][ T5861] veth0_macvtap: entered promiscuous mode [ 80.007933][ T5861] veth1_macvtap: entered promiscuous mode [ 80.016442][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.025519][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.036093][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.045245][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.066266][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.078253][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.102715][ T5858] veth0_vlan: entered promiscuous mode [ 80.121087][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.131366][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.139831][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.166987][ T5858] veth1_vlan: entered promiscuous mode [ 80.180562][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.192448][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.213451][ T5866] veth0_vlan: entered promiscuous mode [ 80.259812][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.276704][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.288041][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.313558][ T5866] veth1_vlan: entered promiscuous mode [ 80.323675][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.339393][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.353449][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.411855][ T5858] veth0_macvtap: entered promiscuous mode [ 80.430018][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.443534][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.452321][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.466073][ T5858] veth1_macvtap: entered promiscuous mode [ 80.472338][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.521311][ T5866] veth0_macvtap: entered promiscuous mode [ 80.536853][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.551565][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.560616][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.585877][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.623709][ T5866] veth1_macvtap: entered promiscuous mode [ 80.638925][ T3519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.656710][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.679024][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.700414][ T3519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.709729][ T3519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.730020][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.739186][ T3519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.782529][ T5978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.860442][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.876102][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.876476][ C0] Illegal XDP return value 16128 on prog (id 2) dev bond0, expect packet loss! [ 80.900684][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.928446][ T5978] veth0_to_team: entered promiscuous mode [ 80.935108][ T5978] veth0_to_team: entered allmulticast mode [ 80.975887][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.260594][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.328458][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.340056][ T5993] syzkaller0: entered promiscuous mode [ 81.366274][ T5993] syzkaller0: entered allmulticast mode [ 81.384427][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.405732][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.478762][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.499856][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.523506][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.531055][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.593982][ T5997] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.755599][ T5871] Bluetooth: hci3: command tx timeout [ 81.761163][ T5871] Bluetooth: hci1: command tx timeout [ 81.767148][ T5857] Bluetooth: hci0: command tx timeout [ 81.835200][ T5871] Bluetooth: hci2: command tx timeout [ 81.915833][ T5871] Bluetooth: hci4: command tx timeout [ 81.939027][ T6006] syz_tun: entered allmulticast mode [ 81.999822][ T6009] pim6reg: entered allmulticast mode [ 82.041151][ T6006] dvmrp8: entered allmulticast mode [ 82.196407][ T6016] netlink: 'syz.0.11': attribute type 23 has an invalid length. [ 82.593861][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 82.641804][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 82.824186][ T1149] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.834808][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 82.898682][ T6002] syz_tun: left allmulticast mode [ 82.903809][ T6048] Zero length message leads to an empty skb [ 82.923188][ T6002] dvmrp8: left allmulticast mode [ 82.956958][ T1149] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.979671][ T1149] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.153211][ T1149] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.282516][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.611318][ T6062] netlink: 'syz.4.24': attribute type 12 has an invalid length. [ 83.619461][ T6062] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.24'. [ 83.816036][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 83.838264][ T5857] Bluetooth: hci1: command tx timeout [ 83.838390][ T5182] Bluetooth: hci0: command tx timeout [ 83.843757][ T5871] Bluetooth: hci3: command tx timeout [ 83.865692][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 83.876802][ T6073] netlink: 'syz.2.25': attribute type 11 has an invalid length. [ 83.915718][ T5871] Bluetooth: hci2: command tx timeout [ 83.995457][ T5871] Bluetooth: hci4: command tx timeout [ 84.047545][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 84.101495][ T6078] netlink: 64 bytes leftover after parsing attributes in process `syz.1.28'. [ 84.179124][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 84.201053][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 84.257553][ T6082] FAULT_INJECTION: forcing a failure. [ 84.257553][ T6082] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.298841][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT(full) [ 84.298883][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.298897][ T6082] Call Trace: [ 84.298906][ T6082] [ 84.298915][ T6082] dump_stack_lvl+0x189/0x250 [ 84.298949][ T6082] ? __pfx____ratelimit+0x10/0x10 [ 84.298982][ T6082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.299008][ T6082] ? __pfx__printk+0x10/0x10 [ 84.299043][ T6082] ? rcu_is_watching+0x15/0xb0 [ 84.299082][ T6082] should_fail_ex+0x414/0x560 [ 84.299116][ T6082] _copy_to_user+0x31/0xb0 [ 84.299145][ T6082] simple_read_from_buffer+0xe1/0x170 [ 84.299182][ T6082] proc_fail_nth_read+0x1b3/0x220 [ 84.299210][ T6082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.299238][ T6082] ? rw_verify_area+0x2a6/0x4d0 [ 84.299268][ T6082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.299294][ T6082] vfs_read+0x1fd/0xa30 [ 84.299323][ T6082] ? fdget_pos+0x247/0x320 [ 84.299345][ T6082] ? __pfx___mutex_lock+0x10/0x10 [ 84.299390][ T6082] ? __pfx_vfs_read+0x10/0x10 [ 84.299426][ T6082] ? __fget_files+0x3a0/0x420 [ 84.299445][ T6082] ? __fget_files+0x2a/0x420 [ 84.299470][ T6082] ksys_read+0x145/0x250 [ 84.299502][ T6082] ? __pfx_ksys_read+0x10/0x10 [ 84.299530][ T6082] ? fput+0xa0/0xd0 [ 84.299555][ T6082] ? rcu_is_watching+0x15/0xb0 [ 84.299580][ T6082] do_syscall_64+0xfa/0x3b0 [ 84.299602][ T6082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.299626][ T6082] ? clear_bhb_loop+0x60/0xb0 [ 84.299652][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.299675][ T6082] RIP: 0033:0x7fbb2f18d5fc [ 84.299711][ T6082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.299731][ T6082] RSP: 002b:00007fbb30089030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.299756][ T6082] RAX: ffffffffffffffda RBX: 00007fbb2f3b5fa0 RCX: 00007fbb2f18d5fc [ 84.299774][ T6082] RDX: 000000000000000f RSI: 00007fbb300890a0 RDI: 0000000000000006 [ 84.299788][ T6082] RBP: 00007fbb30089090 R08: 0000000000000000 R09: 0000000000000000 [ 84.299802][ T6082] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 84.299817][ T6082] R13: 00007fbb2f3b6038 R14: 00007fbb2f3b5fa0 R15: 00007ffcf00c0488 [ 84.299842][ T6082] [ 84.695757][ T6078] bridge_slave_0: left allmulticast mode [ 84.701854][ T6078] bridge_slave_0: left promiscuous mode [ 84.709733][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.732957][ T6078] bridge_slave_1: left allmulticast mode [ 84.740681][ T6078] bridge_slave_1: left promiscuous mode [ 84.748816][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.781275][ T6078] bond0: (slave bond_slave_0): Releasing backup interface [ 84.793855][ T6078] bond0: (slave bond_slave_1): Releasing backup interface [ 84.809869][ T6078] team0: Port device team_slave_0 removed [ 84.820742][ T6078] team0: Port device team_slave_1 removed [ 84.827641][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.836859][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.847774][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.858783][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.063930][ T6110] netlink: 'syz.4.36': attribute type 13 has an invalid length. [ 85.111678][ T6115] ieee802154 phy0 wpan0: encryption failed: -90 [ 85.239911][ T6121] team_slave_0: entered promiscuous mode [ 85.245713][ T6121] team_slave_1: entered promiscuous mode [ 85.264212][ T6121] macsec1: entered promiscuous mode [ 85.269829][ T6121] team0: entered promiscuous mode [ 85.387604][ T6128] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 85.473983][ T6130] syzkaller1: entered promiscuous mode [ 85.479703][ T6130] syzkaller1: entered allmulticast mode [ 85.539624][ T6135] warning: `syz.0.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.652228][ T6143] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 85.849692][ T6153] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 85.851360][ T6154] tipc: Started in network mode [ 85.890766][ T6154] tipc: Node identity 9eea6982b1d9, cluster identity 4711 [ 85.903199][ T6154] tipc: Enabled bearer , priority 0 [ 85.993115][ T6154] syzkaller0: entered promiscuous mode [ 86.010453][ T6154] syzkaller0: entered allmulticast mode [ 86.301902][ T6154] tipc: Resetting bearer [ 86.324304][ T6154] tipc: Disabling bearer [ 86.478469][ T6186] batadv1: entered promiscuous mode [ 86.512291][ T6186] batadv1: entered allmulticast mode [ 86.744551][ T6192] team_slave_0: entered promiscuous mode [ 86.750569][ T6192] team_slave_1: entered promiscuous mode [ 86.770844][ T6192] macsec1: entered promiscuous mode [ 86.783489][ T6192] team0: entered promiscuous mode [ 86.853230][ T6195] ip6gretap0: entered promiscuous mode [ 86.866971][ T6195] ip6gretap0: left promiscuous mode [ 87.176244][ T6221] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 87.348549][ T6226] dummy0: Caught tx_queue_len zero misconfig [ 87.466770][ T6238] netlink: 'syz.2.64': attribute type 29 has an invalid length. [ 87.502786][ T6235] batadv1: entered promiscuous mode [ 87.523118][ T6235] batadv1: entered allmulticast mode [ 87.802116][ T6252] netlink: 'syz.2.67': attribute type 13 has an invalid length. [ 87.817480][ T6252] __nla_validate_parse: 9 callbacks suppressed [ 87.817502][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 87.848588][ T6252] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 87.876568][ T6257] netlink: 320 bytes leftover after parsing attributes in process `syz.2.67'. [ 87.893573][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 87.923033][ T6258] macsec0: entered allmulticast mode [ 87.945159][ T6258] veth1_macvtap: entered allmulticast mode [ 88.071015][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 88.381990][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 88.424555][ T6285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.437364][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.553431][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.883840][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 88.940944][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.81'. [ 89.192369][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 89.207106][ T6334] netlink: 96 bytes leftover after parsing attributes in process `syz.1.84'. [ 89.239879][ T6336] IPv6: Can't replace route, no match found [ 89.306346][ T6344] netlink: 68 bytes leftover after parsing attributes in process `syz.4.88'. [ 89.483492][ T6357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 90.271174][ T6402] netlink: 'syz.3.99': attribute type 6 has an invalid length. [ 90.501005][ T3519] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.511485][ T3519] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.547049][ T3519] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.577541][ T3519] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.644307][ T6431] bridge: RTM_NEWNEIGH with invalid ether address [ 90.655255][ T6431] netlink: 'syz.4.107': attribute type 15 has an invalid length. [ 90.774308][ T6438] veth1_macvtap: left promiscuous mode [ 90.789640][ T6438] macsec0: entered promiscuous mode [ 90.800901][ T6438] macsec0: entered allmulticast mode [ 90.830120][ T6438] veth1_macvtap: entered promiscuous mode [ 90.851618][ T6438] veth1_macvtap: entered allmulticast mode [ 90.863634][ T6438] macsec0: left promiscuous mode [ 90.871304][ T6438] macsec0: left allmulticast mode [ 90.881817][ T6438] veth1_macvtap: left allmulticast mode [ 90.936847][ T6446] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 91.246569][ T6472] openvswitch: netlink: Missing valid actions attribute. [ 91.258358][ T6472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.271685][ T978] IPVS: starting estimator thread 0... [ 91.278694][ T6472] tipc: Failed to remove unknown binding: 66,1,1/0:1923981817/1923981819 [ 91.365129][ T6474] IPVS: using max 36 ests per chain, 86400 per kthread [ 91.467684][ T6487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.484376][ T6487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.554609][ T6487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.565506][ T6487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.639421][ T6487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.650106][ T6487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.670444][ T6495] team_slave_0: entered promiscuous mode [ 91.676245][ T6495] team_slave_1: entered promiscuous mode [ 91.684657][ T6495] macsec1: entered promiscuous mode [ 91.690075][ T6495] team0: entered promiscuous mode [ 91.723136][ T6487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.739825][ T6487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.768482][ T6497] tipc: Enabled bearer , priority 10 [ 91.835358][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 91.859180][ T1028] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.876456][ T1028] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.937348][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.947600][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.975796][ T1028] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.999078][ T1028] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.093868][ T6515] Bluetooth: MGMT ver 1.23 [ 92.098783][ T6510] syzkaller0: entered promiscuous mode [ 92.104750][ T6510] syzkaller0: entered allmulticast mode [ 92.106059][ T6516] Bluetooth: MGMT ver 1.23 [ 92.122243][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.132343][ T6512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.132518][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.165708][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.189109][ T1210] cfg80211: failed to load regulatory.db [ 92.233352][ T6512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.771013][ T30] audit: type=1107 audit(1756409730.127:2): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ùºŽSõ&Ô«Zï&“Åá:­{ÂlDØ å”â¸`m¢µmÇêî ]]Ö®¥7dÃ:l°%…„8c€L›ut To5Yœö™‡4s"îÀÝ£™ôŒÀï#­± åY¡ðÍ'Š—š¿;Îôu1¾¾ðèüü’+ÛÖ©!åÇíYßô_ò‘ò>>Ę“þ0]ø¿HniÔÎx ™V›z–ý¢œÆÕº0oMä¤O× ?×H‰ªFã' [ 92.858348][ T6595] sctp: [Deprecated]: syz.4.141 (pid 6595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.858348][ T6595] Use struct sctp_sack_info instead [ 92.884182][ T6596] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.885389][ T5924] tipc: Node number set to 791898498 [ 93.324010][ T6618] netlink: 'syz.1.149': attribute type 5 has an invalid length. [ 93.462042][ T6627] __nla_validate_parse: 20 callbacks suppressed [ 93.462064][ T6627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.151'. [ 93.506396][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 93.542423][ T6623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.546034][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 93.571818][ T6490] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.582284][ T6490] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.666066][ T6490] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.683354][ T6490] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.769083][ T6490] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.783149][ T6490] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.831279][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 93.986037][ T6652] netlink: 'syz.1.157': attribute type 6 has an invalid length. [ 94.652109][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 94.722640][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.730335][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.763719][ T6690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.166'. [ 94.833519][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.847432][ T5924] IPVS: starting estimator thread 0... [ 94.848792][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.945230][ T6694] IPVS: using max 34 ests per chain, 81600 per kthread [ 94.946472][ T6673] team0: left promiscuous mode [ 94.976778][ T6673] team_slave_0: left promiscuous mode [ 94.982511][ T6673] team_slave_1: left promiscuous mode [ 95.041628][ T6582] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.050704][ T6582] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.109166][ T6582] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.124609][ T6699] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 95.134812][ T6582] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.150405][ T6699] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.417743][ T6710] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.679280][ T6577] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.692984][ T6577] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728796][ T6576] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.748421][ T6576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790495][ T6576] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.799532][ T6576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.823580][ T6576] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.858801][ T6576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.958801][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.178'. [ 96.252468][ T6758] netlink: 'syz.1.183': attribute type 6 has an invalid length. [ 96.278303][ T6758] netlink: 'syz.1.183': attribute type 12 has an invalid length. [ 96.286180][ T6758] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.183'. [ 96.307523][ T6761] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 96.449048][ T6770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.187'. [ 96.705749][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 97.168868][ T6812] batman_adv: batadv0: Adding interface: ip6gretap1 [ 97.204043][ T6812] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.253039][ T6812] batman_adv: batadv0: Interface activated: ip6gretap1 [ 97.361170][ T6820] tc_dump_action: action bad kind [ 97.492893][ T6832] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 97.585395][ T6838] bridge_slave_0: left allmulticast mode [ 97.591992][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.607557][ T6838] bridge_slave_1: left allmulticast mode [ 97.613327][ T6838] bridge_slave_1: left promiscuous mode [ 97.619881][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.632217][ T6838] bond0: (slave bond_slave_0): Releasing backup interface [ 97.643618][ T6838] bond0: (slave bond_slave_1): Releasing backup interface [ 97.658864][ T6838] team0: Port device team_slave_0 removed [ 97.668135][ T6838] team0: Port device team_slave_1 removed [ 97.675557][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.683965][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.762411][ T6849] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 97.772959][ T6847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.783221][ T6849] team0: Port device dummy0 added [ 97.792969][ T6849] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 97.806158][ T6849] team0: Port device dummy0 removed [ 97.817041][ T6849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.423325][ T6875] batman_adv: batadv0: Adding interface: dummy0 [ 98.433376][ T6875] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.459793][ T6875] batman_adv: batadv0: Interface activated: dummy0 [ 98.494206][ T6876] batadv0: mtu less than device minimum [ 98.501478][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.512687][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.523936][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.535191][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.546411][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.557621][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.568878][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.680718][ T6895] __nla_validate_parse: 4 callbacks suppressed [ 98.680738][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.216'. [ 98.700294][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 98.898876][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.220'. [ 98.938863][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 98.948395][ T6911] 8021q: VLANs not supported on ip6_vti0 [ 99.066996][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 99.083993][ T6918] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 99.240919][ T6925] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 99.248888][ T6925] netlink: 236 bytes leftover after parsing attributes in process `syz.3.225'. [ 99.265864][ T6925] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 99.288103][ T6925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.389308][ T6934] tipc: Started in network mode [ 99.394246][ T6934] tipc: Node identity 6e24fe77a3b5, cluster identity 4711 [ 99.404506][ T6934] tipc: Enabled bearer , priority 0 [ 100.051463][ T6934] syzkaller0: entered promiscuous mode [ 100.071466][ T6934] syzkaller0: entered allmulticast mode [ 100.079003][ T6934] tipc: Resetting bearer [ 100.121735][ T6941] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 100.140070][ T6581] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.167611][ T6581] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.273776][ T6581] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.295401][ T6579] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.380600][ T6934] tipc: Resetting bearer [ 100.497458][ T6959] netlink: 'syz.1.234': attribute type 5 has an invalid length. [ 100.535630][ T5994] tipc: Node number set to 3448897143 [ 100.724385][ T6934] tipc: Disabling bearer [ 100.741197][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 100.804689][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 102.503778][ T6899] net_ratelimit: 13 callbacks suppressed [ 102.503797][ T6899] Set syz1 is full, maxelem 65536 reached [ 102.986149][ T7034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.042375][ T7035] tipc: Enabled bearer , priority 0 [ 103.197872][ T7035] syzkaller0: entered promiscuous mode [ 103.210373][ T7035] syzkaller0: entered allmulticast mode [ 103.277392][ T7034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.410637][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 103.685648][ T7034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.798696][ T7033] tipc: Resetting bearer [ 103.920120][ T7033] tipc: Disabling bearer [ 103.949736][ T7034] bond0: (slave netdevsim0): Releasing backup interface [ 103.969249][ T7034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.180244][ T6581] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.197071][ T6581] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.244038][ T7056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.267873][ T6581] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.305012][ T6581] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.534570][ T7073] tipc: Started in network mode [ 104.545021][ T7073] tipc: Node identity 0e41b7992a92, cluster identity 4711 [ 104.555309][ T7073] tipc: Enabled bearer , priority 0 [ 104.671423][ T7075] syzkaller0: entered promiscuous mode [ 104.677161][ T7075] syzkaller0: entered allmulticast mode [ 104.683392][ T7075] tipc: Resetting bearer [ 104.700227][ T7072] tipc: Resetting bearer [ 104.890398][ T7072] tipc: Disabling bearer [ 104.987238][ T7090] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.274'. [ 105.242128][ T7094] netlink: 72 bytes leftover after parsing attributes in process `syz.4.276'. [ 106.173207][ T7119] tipc: Enabling of bearer rejected, failed to enable media [ 106.331797][ T7130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.284'. [ 106.457872][ T7138] netlink: 'syz.1.286': attribute type 11 has an invalid length. [ 106.494665][ T7138] netlink: 'syz.1.286': attribute type 4 has an invalid length. [ 106.513704][ T7138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.286'. [ 106.663812][ T7149] vlan2: entered allmulticast mode [ 106.685314][ T7151] netlink: 100 bytes leftover after parsing attributes in process `syz.0.290'. [ 106.767920][ T7154] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 106.785654][ T7154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.821939][ T7039] Set syz1 is full, maxelem 65536 reached [ 106.917714][ T7166] netlink: 'syz.3.294': attribute type 54 has an invalid length. [ 106.984816][ T7175] ip6tnl0: Caught tx_queue_len zero misconfig [ 107.012531][ T7176] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.022770][ T7176] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.033032][ T7176] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.043924][ T7178] netlink: zone id is out of range [ 107.049982][ T7178] netlink: zone id is out of range [ 107.055911][ T7178] netlink: zone id is out of range [ 107.061282][ T7178] netlink: zone id is out of range [ 107.066864][ T7178] netlink: zone id is out of range [ 107.072656][ T7178] netlink: zone id is out of range [ 107.082090][ T7178] netlink: zone id is out of range [ 107.121170][ T7176] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.132997][ T7176] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.144709][ T7176] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.264113][ T7176] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.274295][ T7176] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.294287][ T7176] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.403760][ T7176] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.435845][ T7176] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.446739][ T7176] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.469884][ T7201] netlink: 11 bytes leftover after parsing attributes in process `syz.4.302'. [ 107.768338][ T6583] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.817754][ T6583] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.837857][ T6583] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.864157][ T6583] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.879372][ T6583] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.944089][ T6583] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.964123][ T6583] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.976291][ T6583] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 108.020272][ T6583] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 108.054475][ T6583] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.077465][ T6583] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 108.107252][ T6583] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 108.312943][ T7235] GUP no longer grows the stack in syz.2.312 (7235): 200000006000-20000000a000 (200000005000) [ 108.350423][ T7235] CPU: 1 UID: 0 PID: 7235 Comm: syz.2.312 Not tainted syzkaller #0 PREEMPT(full) [ 108.350455][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.350469][ T7235] Call Trace: [ 108.350478][ T7235] [ 108.350487][ T7235] dump_stack_lvl+0x189/0x250 [ 108.350521][ T7235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.350546][ T7235] ? __pfx__printk+0x10/0x10 [ 108.350574][ T7235] ? find_vma+0xe7/0x160 [ 108.350601][ T7235] ? mas_next_slot+0xc27/0xcf0 [ 108.350630][ T7235] ? __dequeue_entity+0x4e/0xc60 [ 108.350662][ T7235] __get_user_pages+0x24d0/0x2ce0 [ 108.350690][ T7235] ? __gup_longterm_locked+0xc68/0x1660 [ 108.350724][ T7235] ? __gup_longterm_locked+0xc68/0x1660 [ 108.350754][ T7235] __gup_longterm_locked+0xde9/0x1660 [ 108.350783][ T7235] ? try_grab_folio_fast+0x1be/0x4f0 [ 108.350812][ T7235] ? rcu_is_watching+0x15/0xb0 [ 108.350836][ T7235] ? rcu_is_watching+0x15/0xb0 [ 108.350857][ T7235] gup_fast_fallback+0x1e6a/0x2010 [ 108.350908][ T7235] ? __pfx_gup_fast_fallback+0x10/0x10 [ 108.350933][ T7235] ? __mutex_lock+0x335/0x1350 [ 108.350957][ T7235] ? is_valid_gup_args+0x11f/0x200 [ 108.350984][ T7235] ? get_user_pages_fast+0x4d/0xb0 [ 108.351010][ T7235] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 108.351039][ T7235] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 108.351072][ T7235] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 108.351100][ T7235] ? wait_for_space+0x24d/0x2d0 [ 108.351132][ T7235] iov_iter_get_pages2+0x5e/0xa0 [ 108.351158][ T7235] __se_sys_vmsplice+0x548/0x10d0 [ 108.351207][ T7235] ? futex_private_hash_put+0x4b/0x280 [ 108.351233][ T7235] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 108.351266][ T7235] ? __pfx_futex_wake+0x10/0x10 [ 108.351326][ T7235] ? rcu_is_watching+0x15/0xb0 [ 108.351349][ T7235] ? rcu_is_watching+0x15/0xb0 [ 108.351371][ T7235] do_syscall_64+0xfa/0x3b0 [ 108.351392][ T7235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.351414][ T7235] ? clear_bhb_loop+0x60/0xb0 [ 108.351438][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.351460][ T7235] RIP: 0033:0x7f7b6858ebe9 [ 108.351480][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.351496][ T7235] RSP: 002b:00007f7b693f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 108.351519][ T7235] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858ebe9 [ 108.351534][ T7235] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000012 [ 108.351547][ T7235] RBP: 00007f7b68611e19 R08: 0000000000000000 R09: 0000000000000000 [ 108.351560][ T7235] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 108.351573][ T7235] R13: 00007f7b687b6038 R14: 00007f7b687b5fa0 R15: 00007ffd56c73ec8 [ 108.351596][ T7235] [ 108.622396][ T7233] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 108.632624][ T7233] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.843727][ T7245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 108.855249][ T7241] netlink: 'syz.1.313': attribute type 7 has an invalid length. [ 108.863070][ T7241] netlink: 'syz.1.313': attribute type 8 has an invalid length. [ 108.870845][ T7241] netlink: 'syz.1.313': attribute type 15 has an invalid length. [ 108.970958][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.978617][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.046196][ T7254] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.317'. [ 109.099921][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.117574][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.270042][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.277706][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.301252][ T7250] batman_adv: batadv0: Interface deactivated: dummy0 [ 109.418304][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.447782][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.546571][ T7250] team0: left promiscuous mode [ 109.552291][ T7250] team_slave_0: left promiscuous mode [ 109.559195][ T7250] team_slave_1: left promiscuous mode [ 109.569505][ T7250] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 109.633581][ T6579] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.664531][ T6579] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.681342][ T6579] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.690144][ T6579] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.713039][ T6579] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.745681][ T6579] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.772530][ T6579] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.781692][ T6579] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.797659][ T6579] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.818715][ T6579] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.870441][ T6579] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 109.886913][ T6579] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 109.911517][ T6579] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.936733][ T6579] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.951270][ T6579] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.962866][ T6579] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.005689][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 110.031647][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.325'. [ 110.276926][ T7288] netlink: 'syz.0.327': attribute type 13 has an invalid length. [ 110.316848][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 110.754508][ T7314] pimreg: entered allmulticast mode [ 110.847483][ T7311] netlink: 84 bytes leftover after parsing attributes in process `syz.1.329'. [ 110.897304][ T30] audit: type=1800 audit(1756409748.247:3): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.332" name="memory.events" dev="tmpfs" ino=352 res=0 errno=0 [ 138.237272][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.243686][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.937101][ T7326] net_ratelimit: 20 callbacks suppressed [ 165.937126][ T7326] Set syz0 is full, maxelem 0 reached [ 165.940755][ T7333] netlink: 'syz.1.340': attribute type 4 has an invalid length. [ 165.962266][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 166.007414][ T7333] netlink: 25 bytes leftover after parsing attributes in process `syz.1.340'. [ 166.247686][ T7352] netlink: 'syz.2.343': attribute type 5 has an invalid length. [ 166.262430][ T7352] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.318868][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 166.719054][ T7366] sctp: [Deprecated]: syz.2.348 (pid 7366) Use of int in max_burst socket option deprecated. [ 166.719054][ T7366] Use struct sctp_assoc_value instead [ 166.877341][ T7372] netlink: 3 bytes leftover after parsing attributes in process `syz.1.350'. [ 166.969030][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 166.988408][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.351'. [ 167.033118][ T7372] batadv1: entered promiscuous mode [ 167.079145][ T7372] batadv1: entered allmulticast mode [ 167.577299][ T7388] netlink: 72 bytes leftover after parsing attributes in process `syz.4.354'. [ 168.193146][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 168.232863][ T7378] netlink: 'syz.2.352': attribute type 13 has an invalid length. [ 168.261358][ T7378] netlink: 'syz.2.352': attribute type 17 has an invalid length. [ 168.329309][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 168.361828][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.371218][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.379939][ T7378] batman_adv: batadv0: Interface activated: dummy0 [ 168.395320][ T7378] batadv0: mtu less than device minimum [ 168.415993][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.427297][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.438382][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.449608][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.460940][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.472196][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.483474][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.494691][ T7378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.901514][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.909054][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.088666][ T7397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.207307][ T7397] veth1_macvtap: left allmulticast mode [ 169.348808][ T7397] team0: left promiscuous mode [ 169.388639][ T7397] team_slave_0: left promiscuous mode [ 169.430795][ T7397] team_slave_1: left promiscuous mode [ 169.826998][ T7416] netlink: 'syz.2.360': attribute type 13 has an invalid length. [ 169.845473][ T7416] netlink: 'syz.2.360': attribute type 17 has an invalid length. [ 170.040420][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.126073][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.361'. [ 170.503334][ T7410] tipc: Resetting bearer [ 170.594095][ T6583] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.612778][ T6583] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.718035][ T6578] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.763786][ T6578] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.794151][ T6578] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.807490][ T6578] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.844560][ T6578] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.873268][ T6578] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.936954][ T6578] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.955492][ T6578] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.982500][ T6578] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.002031][ T6578] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.082535][ T7445] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 171.144841][ T7448] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.199839][ T7448] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 171.286633][ T7445] gretap1: entered promiscuous mode [ 171.669497][ T7476] tipc: Enabling of bearer rejected, failed to enable media [ 171.850867][ T7491] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 171.890276][ T7491] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.906471][ T7491] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 171.918368][ T7491] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 172.182099][ T7515] syzkaller1: entered promiscuous mode [ 172.215049][ T7515] syzkaller1: entered allmulticast mode [ 172.440857][ T7526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.534796][ T7543] pimreg: entered allmulticast mode [ 172.546438][ T7543] pimreg: left allmulticast mode [ 172.610836][ T7547] syzkaller1: entered promiscuous mode [ 172.617313][ T7547] syzkaller1: entered allmulticast mode [ 172.661941][ T7551] netlink: 'syz.0.388': attribute type 13 has an invalid length. [ 172.734452][ T5994] IPVS: starting estimator thread 0... [ 172.760650][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 172.817329][ T7556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.826268][ T7556] bond3: (slave bond4): Enslaving as an active interface with an up link [ 172.855183][ T7553] IPVS: using max 34 ests per chain, 81600 per kthread [ 172.861873][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 172.876757][ T7564] netlink: 'syz.3.394': attribute type 6 has an invalid length. [ 172.902389][ T7566] netlink: 'syz.4.395': attribute type 11 has an invalid length. [ 172.909409][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 172.910407][ T7566] netlink: 'syz.4.395': attribute type 11 has an invalid length. [ 172.928791][ T7556] bond3 (unregistering): (slave bond4): Releasing backup interface [ 172.928935][ T7566] netlink: 224 bytes leftover after parsing attributes in process `syz.4.395'. [ 172.949957][ T7556] bond3 (unregistering): Released all slaves [ 172.976090][ T7567] netlink: 56 bytes leftover after parsing attributes in process `syz.2.392'. [ 173.008707][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 173.021096][ T7564] bond5: entered promiscuous mode [ 173.039178][ T7561] syz_tun: entered allmulticast mode [ 173.046855][ T7559] bridge_slave_1: left allmulticast mode [ 173.082595][ T7559] bridge_slave_1: left promiscuous mode [ 173.117531][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.144853][ T7559] bridge_slave_0: left allmulticast mode [ 173.152832][ T7559] bridge_slave_0: left promiscuous mode [ 173.159700][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.212134][ T7587] Bluetooth: MGMT ver 1.23 [ 173.255951][ T7569] dvmrp8: entered allmulticast mode [ 173.274832][ T7572] geneve2: entered promiscuous mode [ 173.284224][ T7572] geneve2: entered allmulticast mode [ 173.345995][ T6575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.356023][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 173.370295][ T6575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.414039][ T6575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.432987][ T6575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.539933][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 173.629489][ T7560] syz_tun: left allmulticast mode [ 173.641823][ T7560] dvmrp8: left allmulticast mode [ 173.668356][ T7612] netlink: 'syz.1.404': attribute type 11 has an invalid length. [ 173.979197][ T7643] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 174.084692][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.413'. [ 174.152159][ T7647] bond1: (slave veth3): Enslaving as an active interface with a down link [ 174.190896][ T7653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.210418][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 174.294340][ T7665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.301649][ T7665] IPv6: NLM_F_CREATE should be set when creating new route [ 174.308964][ T7665] IPv6: NLM_F_CREATE should be set when creating new route [ 174.337162][ T7668] nbd: socks must be embedded in a SOCK_ITEM attr [ 174.658597][ T30] audit: type=1800 audit(1756409812.017:4): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.424" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=434 res=0 errno=0 [ 174.847069][ T7701] bond0: Device is already in use. [ 174.861284][ T7697] bond0: (slave dummy0): Releasing backup interface [ 174.885031][ T7697] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 174.939851][ T7697] bond0: (slave wlan1): Releasing backup interface [ 174.951919][ T7697] bond1: (slave veth3): Releasing active interface [ 174.992857][ T7688] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 175.004490][ T7688] net_ratelimit: 13 callbacks suppressed [ 175.004509][ T7688] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 175.029475][ T7697] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 175.376273][ T7733] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 175.583520][ T7697] syz.0.426 (7697) used greatest stack depth: 17992 bytes left [ 175.759315][ T7753] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 175.766520][ T7753] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002 [ 175.970267][ T7768] tap0: tun_chr_ioctl cmd 35108 [ 176.067910][ T7774] syz_tun: entered allmulticast mode [ 176.084086][ T7774] syz_tun: left allmulticast mode [ 176.238131][ T7790] netlink: 'syz.0.453': attribute type 16 has an invalid length. [ 176.478336][ T7804] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 176.623163][ T7816] bridge0: entered promiscuous mode [ 176.638928][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.650690][ T7816] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.662890][ T7816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.709976][ T7821] bridge_slave_0: entered allmulticast mode [ 177.009154][ T7838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.012286][ T7840] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 177.092097][ T7843] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 177.107610][ T7840] team0: Port device dummy0 added [ 177.161607][ T7843] team0: Port device dummy0 removed [ 177.172472][ T7843] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.360886][ T7859] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 177.678100][ T7875] dummy0: entered promiscuous mode [ 177.683413][ T7875] vlan0: entered promiscuous mode [ 177.826029][ T7883] netlink: 'syz.0.474': attribute type 21 has an invalid length. [ 177.833957][ T7883] __nla_validate_parse: 16 callbacks suppressed [ 177.833978][ T7883] netlink: 128 bytes leftover after parsing attributes in process `syz.0.474'. [ 177.847832][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 177.855826][ T7883] netlink: 'syz.0.474': attribute type 4 has an invalid length. [ 177.867224][ T7883] netlink: 'syz.0.474': attribute type 5 has an invalid length. [ 177.876321][ T7883] netlink: 3 bytes leftover after parsing attributes in process `syz.0.474'. [ 177.959605][ T7885] tunl0: Caught tx_queue_len zero misconfig [ 178.289495][ T7865] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 178.424327][ T7926] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 178.457143][ T7929] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 178.465836][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.492420][ T7926] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 178.498157][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'. [ 178.543323][ T7929] batadv0: entered promiscuous mode [ 178.586969][ T7929] batadv0: entered allmulticast mode [ 178.603673][ T7929] bond0: (slave batadv0): Releasing backup interface [ 178.617106][ T7946] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.626842][ T7929] bridge0: port 1(batadv0) entered blocking state [ 178.642696][ T7929] bridge0: port 1(batadv0) entered disabled state [ 178.726922][ T6582] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 178.736455][ T6582] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 178.784177][ T7955] netlink: 830 bytes leftover after parsing attributes in process `syz.0.493'. [ 178.798351][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 178.850680][ T7960] ip6erspan0: entered promiscuous mode [ 178.937649][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 178.994239][ T7968] netlink: 112 bytes leftover after parsing attributes in process `syz.2.494'. [ 179.234661][ T7979] tipc: Started in network mode [ 179.242213][ T7979] tipc: Node identity 7ef1d66b554e, cluster identity 4711 [ 179.250526][ T7979] tipc: Enabled bearer , priority 0 [ 179.259145][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 179.287772][ T7979] syzkaller0: entered promiscuous mode [ 179.293394][ T7979] syzkaller0: entered allmulticast mode [ 179.322499][ T7977] tipc: Resetting bearer [ 179.331143][ T7977] tipc: Disabling bearer [ 179.515176][ T5871] Bluetooth: hci2: command 0x0401 tx timeout [ 179.842623][ T8012] netlink: 'syz.1.507': attribute type 2 has an invalid length. [ 179.849101][ T8010] netlink: 'syz.3.506': attribute type 6 has an invalid length. [ 179.909893][ T8010] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.506'. [ 180.294577][ T8034] pim6reg: left allmulticast mode [ 180.320034][ T8037] syzkaller0: entered promiscuous mode [ 180.335269][ T8037] syzkaller0: entered allmulticast mode [ 180.605532][ T8049] block nbd1: server does not support multiple connections per device. [ 180.616972][ T8049] block nbd1: shutting down sockets [ 180.756846][ T8063] ip6gre1: entered allmulticast mode [ 182.179821][ T8168] validate_nla: 2 callbacks suppressed [ 182.179842][ T8168] netlink: 'syz.4.548': attribute type 9 has an invalid length. [ 182.234134][ T8168] netlink: 'syz.4.548': attribute type 7 has an invalid length. [ 182.272876][ T8168] netlink: 'syz.4.548': attribute type 8 has an invalid length. [ 182.426901][ T8186] netlink: 'syz.4.552': attribute type 28 has an invalid length. [ 182.438116][ T8185] netlink: 'syz.4.552': attribute type 28 has an invalid length. [ 182.629722][ T8206] bond0: (slave dummy0): Releasing backup interface [ 182.641514][ T8206] bridge_slave_0: left promiscuous mode [ 182.648128][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.657338][ T8206] bridge_slave_1: left allmulticast mode [ 182.663245][ T8206] bridge_slave_1: left promiscuous mode [ 182.670370][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.683146][ T8206] bond0: (slave bond_slave_0): Releasing backup interface [ 182.692400][ T8206] bond0: (slave bond_slave_1): Releasing backup interface [ 182.707165][ T8206] team0: Port device team_slave_0 removed [ 182.714720][ T8206] team0: Port device team_slave_1 removed [ 182.728334][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.024294][ T8233] __nla_validate_parse: 13 callbacks suppressed [ 183.024316][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 183.097831][ T8238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.561'. [ 183.117310][ T6566] wlan1: Trigger new scan to find an IBSS to join [ 183.264616][ T8247] vlan0: entered promiscuous mode [ 183.280081][ T8247] macvtap0: entered promiscuous mode [ 183.301885][ T8246] vlan0: entered promiscuous mode [ 183.323605][ T8253] netlink: 'syz.4.563': attribute type 10 has an invalid length. [ 183.351696][ T8253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.563'. [ 183.417351][ T8253] team0: Port device geneve0 added [ 183.813292][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 183.825055][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 184.057299][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.067518][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.077195][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.087802][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.097344][ T8286] netlink: 5 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.149497][ T8286] netlink: 'syz.0.574': attribute type 16 has an invalid length. [ 184.158540][ T8286] netlink: 'syz.0.574': attribute type 17 has an invalid length. [ 184.451540][ T8299] tipc: Invalid UDP bearer configuration [ 184.451583][ T8299] tipc: Enabling of bearer rejected, failed to enable media [ 184.982455][ T8319] netlink: 'syz.3.587': attribute type 21 has an invalid length. [ 185.182359][ T8338] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 185.264073][ T8344] netlink: 'syz.1.593': attribute type 83 has an invalid length. [ 186.156446][ T6573] wlan1: Trigger new scan to find an IBSS to join [ 186.577391][ T8418] macvtap1: entered promiscuous mode [ 186.590676][ T8418] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 186.615907][ T8418] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 186.842585][ T8419] syzkaller0: entered promiscuous mode [ 186.849396][ T8419] syzkaller0: entered allmulticast mode [ 186.858422][ T6579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.864727][ T8430] team0: Caught tx_queue_len zero misconfig [ 186.873316][ T6579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.060710][ T8437] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 187.105693][ T8443] xfrm0: Caught tx_queue_len zero misconfig [ 187.136012][ T8436] tipc: Started in network mode [ 187.140955][ T8436] tipc: Node identity 080211000001, cluster identity 4711 [ 187.156073][ T8436] tipc: Enabled bearer , priority 0 [ 187.172078][ T8436] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 187.203002][ T8436] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 187.216586][ T8436] tipc: Resetting bearer [ 187.725639][ T8489] tipc: Enabled bearer , priority 0 [ 187.733333][ T8489] syzkaller0: entered promiscuous mode [ 187.738926][ T8489] syzkaller0: entered allmulticast mode [ 187.749683][ T8489] tipc: Resetting bearer [ 187.759936][ T8488] tipc: Resetting bearer [ 187.769219][ T8488] tipc: Disabling bearer [ 187.811910][ T8495] tipc: Enabling of bearer rejected, failed to enable media [ 188.138825][ T8513] ip6erspan0: left promiscuous mode [ 188.205253][ T5994] tipc: Node number set to 134418688 [ 188.261004][ T8522] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 188.272253][ T8522] __nla_validate_parse: 18 callbacks suppressed [ 188.272274][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 188.426174][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 188.490954][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.643'. [ 188.505296][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'. [ 188.518121][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.643'. [ 188.528324][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.643'. [ 188.634115][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 188.981840][ T8568] netlink: 248 bytes leftover after parsing attributes in process `syz.1.657'. [ 188.995132][ T8568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.657'. [ 189.026560][ T8568] lo speed is unknown, defaulting to 1000 [ 189.032928][ T8568] lo speed is unknown, defaulting to 1000 [ 189.042116][ T8568] lo speed is unknown, defaulting to 1000 [ 189.177421][ T8568] infiniband syz0: set down [ 189.182233][ T5994] lo speed is unknown, defaulting to 1000 [ 189.188151][ T8568] infiniband syz0: added lo [ 189.197958][ T6566] wlan1: Trigger new scan to find an IBSS to join [ 189.228553][ T8568] RDS/IB: syz0: added [ 189.232875][ T8568] smc: adding ib device syz0 with port count 1 [ 189.239640][ T8568] smc: ib device syz0 port 1 has pnetid [ 189.246776][ T8568] lo speed is unknown, defaulting to 1000 [ 189.253026][ T5994] lo speed is unknown, defaulting to 1000 [ 189.339788][ T8580] validate_nla: 2 callbacks suppressed [ 189.339809][ T8580] netlink: 'syz.4.659': attribute type 6 has an invalid length. [ 189.387273][ T8568] lo speed is unknown, defaulting to 1000 [ 189.392117][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 189.587162][ T8568] lo speed is unknown, defaulting to 1000 [ 189.720701][ T8568] lo speed is unknown, defaulting to 1000 [ 189.903877][ T8568] lo speed is unknown, defaulting to 1000 [ 190.100131][ T6566] wlan1: Creating new IBSS network, BSSID ca:18:6a:45:12:a6 [ 190.277957][ T8620] tc_dump_action: action bad kind [ 190.553317][ T8648] tap0: tun_chr_ioctl cmd 1074025680 [ 190.610121][ T8652] geneve2: entered promiscuous mode [ 190.616287][ T8652] geneve2: entered allmulticast mode [ 190.622932][ T6566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.637923][ T6566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.659385][ T6566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.681696][ T6566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.765796][ T8666] lo speed is unknown, defaulting to 1000 [ 191.093581][ T8681] hsr_slave_1 (unregistering): left promiscuous mode [ 191.558251][ T8725] lo speed is unknown, defaulting to 1000 [ 191.856423][ T8739] bridge0: port 1(erspan0) entered blocking state [ 191.863041][ T8739] bridge0: port 1(erspan0) entered disabled state [ 191.870216][ T8739] erspan0: entered allmulticast mode [ 191.878270][ T8739] erspan0: entered promiscuous mode [ 193.030536][ T8793] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 193.038862][ T8795] !: renamed from dummy0 [ 193.086018][ T8799] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 193.171533][ T9] lo speed is unknown, defaulting to 1000 [ 193.185089][ T9] syz0: Port: 1 Link ACTIVE [ 193.193590][ T9] lo speed is unknown, defaulting to 1000 [ 193.261139][ T6583] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.280856][ T6583] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.300846][ T6583] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.335166][ T6583] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.418736][ T8814] lo speed is unknown, defaulting to 1000 [ 193.439397][ T8817] __nla_validate_parse: 14 callbacks suppressed [ 193.439421][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 193.644558][ T8834] IPVS: set_ctl: invalid protocol: 1 172.30.0.2:20003 [ 193.655508][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 193.880237][ T8848] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 193.897831][ T8847] netlink: 92 bytes leftover after parsing attributes in process `syz.3.739'. [ 193.924384][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 193.955150][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 193.995607][ T8856] lo speed is unknown, defaulting to 1000 [ 194.148722][ T8864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.743'. [ 194.440722][ T8882] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.524506][ T8883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 194.563310][ T8883] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 194.573205][ T8883] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 194.902957][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 194.971208][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 195.081485][ T8850] syzkaller0: entered promiscuous mode [ 195.095941][ T8850] syzkaller0: entered allmulticast mode [ 195.332764][ T8923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.758'. [ 195.389352][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 195.535746][ T8925] macsec1: entered promiscuous mode [ 195.541216][ T8925] team0: entered promiscuous mode [ 195.573360][ T8927] lo speed is unknown, defaulting to 1000 [ 195.849862][ T8935] netlink: 'syz.3.762': attribute type 30 has an invalid length. [ 195.945946][ T8941] batadv_slave_1: entered promiscuous mode [ 195.957302][ T8942] netlink: 'syz.3.762': attribute type 21 has an invalid length. [ 195.957302][ T8936] netlink: 'syz.3.762': attribute type 21 has an invalid length. [ 195.957370][ T8936] netlink: 'syz.3.762': attribute type 5 has an invalid length. [ 195.997849][ T8942] netlink: 'syz.3.762': attribute type 5 has an invalid length. [ 196.179719][ T8947] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 196.269428][ T8940] batadv_slave_1: left promiscuous mode [ 196.289087][ T8950] ip6gretap0: entered promiscuous mode [ 196.297088][ T8950] macsec3: entered promiscuous mode [ 196.302462][ T8950] macsec3: entered allmulticast mode [ 196.330453][ T8950] ip6gretap0: entered allmulticast mode [ 196.418061][ T8956] lo speed is unknown, defaulting to 1000 [ 196.643781][ T8965] bridge0: port 3(vlan2) entered blocking state [ 196.675735][ T8965] bridge0: port 3(vlan2) entered disabled state [ 196.682343][ T8965] vlan2: entered allmulticast mode [ 196.723015][ T8965] bridge0: entered allmulticast mode [ 196.734313][ T8965] vlan2: left allmulticast mode [ 196.739661][ T8965] bridge0: left allmulticast mode [ 197.294585][ T8980] lo speed is unknown, defaulting to 1000 [ 197.445683][ T9001] FAULT_INJECTION: forcing a failure. [ 197.445683][ T9001] name failslab, interval 1, probability 0, space 0, times 1 [ 197.486461][ T9001] CPU: 1 UID: 0 PID: 9001 Comm: syz.2.779 Not tainted syzkaller #0 PREEMPT(full) [ 197.486491][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.486504][ T9001] Call Trace: [ 197.486512][ T9001] [ 197.486521][ T9001] dump_stack_lvl+0x189/0x250 [ 197.486558][ T9001] ? __pfx____ratelimit+0x10/0x10 [ 197.486595][ T9001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.486618][ T9001] ? __pfx__printk+0x10/0x10 [ 197.486648][ T9001] ? fs_reclaim_acquire+0x7d/0x100 [ 197.486679][ T9001] ? rcu_is_watching+0x15/0xb0 [ 197.486700][ T9001] ? __pfx___might_resched+0x10/0x10 [ 197.486718][ T9001] ? lock_acquire+0x5f/0x360 [ 197.486749][ T9001] should_fail_ex+0x414/0x560 [ 197.486778][ T9001] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 197.486810][ T9001] should_failslab+0xa8/0x100 [ 197.486848][ T9001] __kvmalloc_node_noprof+0x161/0x5f0 [ 197.486878][ T9001] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 197.486913][ T9001] bpf_test_run_xdp_live+0x18e/0x1b10 [ 197.486948][ T9001] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 197.486984][ T9001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.487022][ T9001] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 197.487053][ T9001] ? bpf_dispatcher_xdp+0x800/0x1000 [ 197.487075][ T9001] ? bpf_dispatcher_xdp+0x800/0x1000 [ 197.487116][ T9001] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 197.487140][ T9001] ? _copy_from_user+0x94/0xb0 [ 197.487164][ T9001] ? bpf_test_init+0x133/0x170 [ 197.487193][ T9001] ? xdp_convert_md_to_buff+0x5b/0x330 [ 197.487225][ T9001] bpf_prog_test_run_xdp+0x713/0x1000 [ 197.487279][ T9001] ? rcu_is_watching+0x15/0xb0 [ 197.487301][ T9001] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 197.487334][ T9001] ? __fget_files+0x2a/0x420 [ 197.487354][ T9001] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 197.487386][ T9001] bpf_prog_test_run+0x2c7/0x340 [ 197.487417][ T9001] __sys_bpf+0x581/0x870 [ 197.487445][ T9001] ? __pfx___sys_bpf+0x10/0x10 [ 197.487478][ T9001] ? ksys_write+0x22a/0x250 [ 197.487511][ T9001] ? __pfx_ksys_write+0x10/0x10 [ 197.487536][ T9001] ? rcu_is_watching+0x15/0xb0 [ 197.487559][ T9001] __x64_sys_bpf+0x7c/0x90 [ 197.487582][ T9001] do_syscall_64+0xfa/0x3b0 [ 197.487601][ T9001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.487622][ T9001] ? clear_bhb_loop+0x60/0xb0 [ 197.487645][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.487665][ T9001] RIP: 0033:0x7f7b6858ebe9 [ 197.487681][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.487698][ T9001] RSP: 002b:00007f7b693f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.487724][ T9001] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858ebe9 [ 197.487740][ T9001] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 197.487752][ T9001] RBP: 00007f7b693f0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.487764][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.487775][ T9001] R13: 00007f7b687b6038 R14: 00007f7b687b5fa0 R15: 00007ffd56c73ec8 [ 197.487799][ T9001] [ 198.118169][ T9011] lo speed is unknown, defaulting to 1000 [ 198.376988][ T9033] syzkaller0: entered promiscuous mode [ 198.382555][ T9033] syzkaller0: entered allmulticast mode [ 198.689832][ T9040] __nla_validate_parse: 13 callbacks suppressed [ 198.689853][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 198.734567][ T9040] netlink: 830 bytes leftover after parsing attributes in process `syz.3.790'. [ 198.745985][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 198.764731][ T9043] netlink: 'syz.2.791': attribute type 10 has an invalid length. [ 198.842627][ T9047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 198.899715][ T9043] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.907180][ T9043] batman_adv: batadv0: Removing interface: dummy0 [ 198.914151][ T9043] team0: Device dummy0 is up. Set it down before adding it as a team port [ 199.066297][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.794'. [ 199.233485][ T9063] tipc: Enabled bearer , priority 0 [ 199.257391][ T9063] syzkaller0: entered promiscuous mode [ 199.278615][ T9066] netlink: 48 bytes leftover after parsing attributes in process `syz.3.799'. [ 199.309715][ T9063] syzkaller0: entered allmulticast mode [ 199.358832][ T9066] macsec4: entered promiscuous mode [ 199.364198][ T9066] team0: entered promiscuous mode [ 199.369770][ T9066] team_slave_0: entered promiscuous mode [ 199.376337][ T9066] team_slave_1: entered promiscuous mode [ 199.385721][ T9063] tipc: Resetting bearer [ 199.404780][ T9061] tipc: Resetting bearer [ 199.419431][ T9061] tipc: Disabling bearer [ 199.430430][ T9077] lo speed is unknown, defaulting to 1000 [ 199.618668][ T9089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.807'. [ 199.639155][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 199.667551][ T9092] bridge_slave_0: left allmulticast mode [ 199.681515][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.688789][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.709006][ T9092] veth0_to_team: left promiscuous mode [ 199.714546][ T9092] veth0_to_team: left allmulticast mode [ 199.766169][ T9092] macsec1: left promiscuous mode [ 199.786211][ T9092] tipc: Resetting bearer [ 199.798439][ T9092] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 199.806385][ T9092] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 199.828545][ T9096] tipc: Enabling of bearer rejected, failed to enable media [ 200.056062][ T9114] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 200.102349][ T9114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.114058][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 200.124285][ T9114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.813'. [ 200.181928][ T9114] bond2: (slave ip6gretap1): making interface the new active one [ 200.212814][ T9114] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 200.298610][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.814'. [ 200.503582][ T9136] tipc: Enabled bearer , priority 0 [ 200.577070][ T9136] syzkaller0: entered promiscuous mode [ 200.589778][ T9136] syzkaller0: entered allmulticast mode [ 200.598504][ T9136] tipc: Resetting bearer [ 200.646896][ T9135] tipc: Resetting bearer [ 200.799266][ T9135] tipc: Disabling bearer [ 200.879262][ T9156] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 200.888950][ T9156] dummy0: entered allmulticast mode [ 200.894532][ T9156] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 200.948019][ T9163] trusted_key: syz.4.829 sent an empty control message without MSG_MORE. [ 201.050105][ T9169] netlink: 'syz.4.831': attribute type 4 has an invalid length. [ 201.062263][ T9169] netlink: 'syz.4.831': attribute type 4 has an invalid length. [ 201.088905][ T9173] netlink: 'syz.2.833': attribute type 5 has an invalid length. [ 201.769317][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 201.769332][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 201.769367][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 201.775462][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.049164][ T9240] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 202.131016][ T9240] nbd: must specify a size in bytes for the device [ 202.415371][ T9248] lo speed is unknown, defaulting to 1000 [ 202.442153][ T9245] sctp: [Deprecated]: syz.4.854 (pid 9245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.442153][ T9245] Use struct sctp_sack_info instead [ 202.805337][ T9268] lo speed is unknown, defaulting to 1000 [ 202.885944][ T9274] netlink: 'syz.0.859': attribute type 1 has an invalid length. [ 202.905124][ T9274] NCSI netlink: No device for ifindex 0 [ 203.028133][ T9286] batadv_slave_0: entered promiscuous mode [ 203.077633][ T9288] batadv_slave_0: left promiscuous mode [ 203.441869][ T9301] syzkaller1: entered promiscuous mode [ 203.448332][ T9301] syzkaller1: entered allmulticast mode [ 203.893823][ T9326] __nla_validate_parse: 17 callbacks suppressed [ 203.893845][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 203.940863][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 204.292521][ T9364] netlink: 'syz.2.888': attribute type 11 has an invalid length. [ 204.398873][ T9376] FAULT_INJECTION: forcing a failure. [ 204.398873][ T9376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.434341][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.2.890 Not tainted syzkaller #0 PREEMPT(full) [ 204.434371][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.434384][ T9376] Call Trace: [ 204.434392][ T9376] [ 204.434401][ T9376] dump_stack_lvl+0x189/0x250 [ 204.434431][ T9376] ? __pfx____ratelimit+0x10/0x10 [ 204.434462][ T9376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.434486][ T9376] ? __pfx__printk+0x10/0x10 [ 204.434518][ T9376] ? rcu_is_watching+0x15/0xb0 [ 204.434541][ T9376] should_fail_ex+0x414/0x560 [ 204.434569][ T9376] _copy_to_user+0x31/0xb0 [ 204.434593][ T9376] bpf_test_finish+0x56f/0x700 [ 204.434628][ T9376] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 204.434647][ T9376] ? __pfx_bpf_test_finish+0x10/0x10 [ 204.434682][ T9376] ? bpf_test_init+0x133/0x170 [ 204.434720][ T9376] bpf_prog_test_run_xdp+0x79a/0x1000 [ 204.434755][ T9376] ? rcu_is_watching+0x15/0xb0 [ 204.434775][ T9376] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 204.434809][ T9376] ? __fget_files+0x2a/0x420 [ 204.434830][ T9376] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 204.434862][ T9376] bpf_prog_test_run+0x2c7/0x340 [ 204.434898][ T9376] __sys_bpf+0x581/0x870 [ 204.434925][ T9376] ? __pfx___sys_bpf+0x10/0x10 [ 204.434959][ T9376] ? ksys_write+0x22a/0x250 [ 204.434986][ T9376] ? __pfx_ksys_write+0x10/0x10 [ 204.435012][ T9376] ? rcu_is_watching+0x15/0xb0 [ 204.435036][ T9376] __x64_sys_bpf+0x7c/0x90 [ 204.435060][ T9376] do_syscall_64+0xfa/0x3b0 [ 204.435079][ T9376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.435099][ T9376] ? clear_bhb_loop+0x60/0xb0 [ 204.435122][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.435142][ T9376] RIP: 0033:0x7f7b6858ebe9 [ 204.435160][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.435178][ T9376] RSP: 002b:00007f7b693f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.435200][ T9376] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858ebe9 [ 204.435215][ T9376] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 204.435228][ T9376] RBP: 00007f7b693f0090 R08: 0000000000000000 R09: 0000000000000000 [ 204.435240][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.435253][ T9376] R13: 00007f7b687b6038 R14: 00007f7b687b5fa0 R15: 00007ffd56c73ec8 [ 204.435276][ T9376] [ 204.958377][ T9395] netlink: 'syz.3.893': attribute type 83 has an invalid length. [ 205.169475][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 205.178645][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 205.187853][ T9407] netlink: 'syz.3.899': attribute type 6 has an invalid length. [ 205.191757][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 205.371169][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 205.403158][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 205.418405][ T9420] tipc: Enabled bearer , priority 0 [ 205.438425][ T9421] netlink: 'syz.4.904': attribute type 29 has an invalid length. [ 205.465393][ T9420] syzkaller0: entered promiscuous mode [ 205.475753][ T9420] syzkaller0: entered allmulticast mode [ 205.497078][ T9418] tipc: Resetting bearer [ 205.536736][ T9418] tipc: Disabling bearer [ 205.698427][ T9423] FAULT_INJECTION: forcing a failure. [ 205.698427][ T9423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.745666][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.2.906 Not tainted syzkaller #0 PREEMPT(full) [ 205.745697][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.745710][ T9423] Call Trace: [ 205.745724][ T9423] [ 205.745734][ T9423] dump_stack_lvl+0x189/0x250 [ 205.745765][ T9423] ? __pfx____ratelimit+0x10/0x10 [ 205.745796][ T9423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.745820][ T9423] ? __pfx__printk+0x10/0x10 [ 205.745853][ T9423] ? rcu_is_watching+0x15/0xb0 [ 205.745875][ T9423] should_fail_ex+0x414/0x560 [ 205.745904][ T9423] _copy_to_user+0x31/0xb0 [ 205.745946][ T9423] simple_read_from_buffer+0xe1/0x170 [ 205.745978][ T9423] proc_fail_nth_read+0x1b3/0x220 [ 205.746003][ T9423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.746028][ T9423] ? rw_verify_area+0x2a6/0x4d0 [ 205.746054][ T9423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.746077][ T9423] vfs_read+0x1fd/0xa30 [ 205.746102][ T9423] ? fdget_pos+0x247/0x320 [ 205.746122][ T9423] ? __pfx___mutex_lock+0x10/0x10 [ 205.746155][ T9423] ? __pfx_vfs_read+0x10/0x10 [ 205.746186][ T9423] ? __fget_files+0x3a0/0x420 [ 205.746202][ T9423] ? __fget_files+0x2a/0x420 [ 205.746224][ T9423] ksys_read+0x145/0x250 [ 205.746252][ T9423] ? __pfx_ksys_read+0x10/0x10 [ 205.746284][ T9423] ? rcu_is_watching+0x15/0xb0 [ 205.746306][ T9423] ? rcu_is_watching+0x15/0xb0 [ 205.746327][ T9423] do_syscall_64+0xfa/0x3b0 [ 205.746347][ T9423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.746367][ T9423] ? clear_bhb_loop+0x60/0xb0 [ 205.746391][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.746412][ T9423] RIP: 0033:0x7f7b6858d5fc [ 205.746430][ T9423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.746447][ T9423] RSP: 002b:00007f7b693f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.746471][ T9423] RAX: ffffffffffffffda RBX: 00007f7b687b5fa0 RCX: 00007f7b6858d5fc [ 205.746486][ T9423] RDX: 000000000000000f RSI: 00007f7b693f00a0 RDI: 0000000000000005 [ 205.746499][ T9423] RBP: 00007f7b693f0090 R08: 0000000000000000 R09: 0000000000000000 [ 205.746512][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.746524][ T9423] R13: 00007f7b687b6038 R14: 00007f7b687b5fa0 R15: 00007ffd56c73ec8 [ 205.746549][ T9423] [ 206.156567][ T9427] netlink: 'syz.3.909': attribute type 178 has an invalid length. [ 206.194354][ T9428] batadv0: left allmulticast mode [ 206.202859][ T9428] batadv0: left promiscuous mode [ 206.213028][ T9431] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 206.220723][ T9428] bridge0: port 1(batadv0) entered disabled state [ 206.221823][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.910'. [ 206.261548][ T9429] syzkaller0: entered promiscuous mode [ 206.268176][ T9429] syzkaller0: entered allmulticast mode [ 206.281358][ T9431] geneve0: entered promiscuous mode [ 206.288542][ T9431] team0: Port device geneve0 added [ 206.299574][ T6572] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.317426][ T6572] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.334119][ T6572] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.347177][ T6572] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.429221][ T9445] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 206.496557][ T9449] pim6reg1: entered promiscuous mode [ 206.507613][ T9449] pim6reg1: entered allmulticast mode [ 206.520477][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 206.536362][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 206.566668][ T9453] openvswitch: netlink: Message has 7 unknown bytes. [ 206.622609][ T9455] bridge2: port 1(bond2) entered blocking state [ 206.629604][ T9455] bridge2: port 1(bond2) entered disabled state [ 206.638144][ T9455] bond2: entered allmulticast mode [ 206.652379][ T9455] bond2: entered promiscuous mode [ 206.668049][ T9462] batadv_slave_1: entered promiscuous mode [ 206.675062][ T9462] batadv_slave_1: left promiscuous mode [ 206.807310][ T30] audit: type=1800 audit(1756409844.157:5): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.925" name="blkio.bfq.time_recursive" dev="tmpfs" ino=930 res=0 errno=0 [ 206.817596][ T9474] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 206.842613][ T9474] team0: Port device geneve0 added [ 206.851330][ T9466] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.855620][ T5859] IPVS: starting estimator thread 0... [ 206.896295][ T6572] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.935185][ T6572] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.945750][ T9477] IPVS: using max 43 ests per chain, 103200 per kthread [ 206.963687][ T6572] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.980580][ T9475] netlink: 'syz.4.924': attribute type 13 has an invalid length. [ 206.992406][ T6572] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.009136][ T9475] netlink: 'syz.4.924': attribute type 17 has an invalid length. [ 207.030007][ T9475] netlink: 'syz.4.924': attribute type 27 has an invalid length. [ 207.061355][ T9485] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 207.072701][ T9485] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 207.107405][ T6572] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.117789][ T6572] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.138647][ T6572] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.159528][ T6572] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.188173][ T9489] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 207.580000][ T9516] lo speed is unknown, defaulting to 1000 [ 208.229917][ T9542] lo speed is unknown, defaulting to 1000 [ 208.706158][ T9560] lo speed is unknown, defaulting to 1000 [ 214.547039][ T9582] netlink: 'syz.2.954': attribute type 21 has an invalid length. [ 214.554867][ T9582] __nla_validate_parse: 12 callbacks suppressed [ 214.631679][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 214.977206][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 215.023673][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 215.056665][ T9594] sctp: [Deprecated]: syz.4.959 (pid 9594) Use of int in max_burst socket option deprecated. [ 215.056665][ T9594] Use struct sctp_assoc_value instead [ 215.169342][ T9598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.960'. [ 215.350855][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 215.480872][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 215.533162][ T9617] netlink: 'syz.0.966': attribute type 21 has an invalid length. [ 215.541098][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 215.553271][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 215.668903][ T9624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.682334][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 215.904472][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 216.048396][ T9646] lo speed is unknown, defaulting to 1000 [ 216.332611][ T9650] lo speed is unknown, defaulting to 1000 [ 216.460219][ T9656] block nbd1: server does not support multiple connections per device. [ 216.477125][ T9656] block nbd1: shutting down sockets [ 217.211682][ T9679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.238220][ T9679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.256833][ T9679] bond0 (unregistering): Released all slaves [ 217.405237][ T9692] lo speed is unknown, defaulting to 1000 [ 217.711651][ T9704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.921485][ T9719] netlink: 'syz.2.998': attribute type 29 has an invalid length. [ 217.968874][ T9723] syzkaller0: entered promiscuous mode [ 217.986323][ T9723] syzkaller0: entered allmulticast mode [ 218.107037][ T9728] xt_socket: unknown flags 0xfc [ 218.215764][ T9726] lo speed is unknown, defaulting to 1000 [ 218.709634][ T9739] lo speed is unknown, defaulting to 1000 [ 219.210793][ T9768] bond0 (unregistering): Released all slaves [ 219.579995][ T9787] __nla_validate_parse: 14 callbacks suppressed [ 219.580015][ T9787] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1017'. [ 219.681403][ T9782] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.147851][ T9820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1023'. [ 220.201400][ T9822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1023'. [ 220.237085][ T9827] netlink: 73 bytes leftover after parsing attributes in process `syz.0.1027'. [ 220.260497][ T9825] macsec0: entered promiscuous mode [ 220.276819][ T9825] dummy0: entered promiscuous mode [ 220.292374][ T9825] macsec0: entered allmulticast mode [ 220.302330][ T9825] dummy0: entered allmulticast mode [ 220.327043][ T9825] dummy0: left allmulticast mode [ 220.356781][ T9825] dummy0: left promiscuous mode [ 220.433560][ T9823] lo speed is unknown, defaulting to 1000 [ 220.513939][ T9837] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 220.674529][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1031'. [ 220.684495][ T9749] IPVS: starting estimator thread 0... [ 220.707440][ T9850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1033'. [ 220.725237][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 220.747247][ T9842] sctp: [Deprecated]: syz.0.1031 (pid 9842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.747247][ T9842] Use struct sctp_sack_info instead [ 220.795205][ T9851] IPVS: using max 34 ests per chain, 81600 per kthread [ 220.900176][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1037'. [ 221.032865][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1037'. [ 221.333978][ T9875] lo speed is unknown, defaulting to 1000 [ 221.379804][ T9883] macvtap0: entered allmulticast mode [ 221.392024][ T9883] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 221.412852][ T9883] batman_adv: batadv0: Adding interface: macvtap0 [ 221.430554][ T9883] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.495103][ T9883] batman_adv: batadv0: Interface activated: macvtap0 [ 221.647394][ T9878] lo speed is unknown, defaulting to 1000 [ 221.706913][ T9892] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 221.883859][ T9897] batman_adv: batadv0: Adding interface: vxlan1 [ 221.894743][ T9892] netlink: 'syz.3.1045': attribute type 2 has an invalid length. [ 221.910173][ T9897] batman_adv: batadv0: The MTU of interface vxlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.945992][ T9897] batman_adv: batadv0: Interface activated: vxlan1 [ 222.003928][ T9901] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 222.004334][ T9892] veth5: entered promiscuous mode [ 222.069134][ T9905] lo: Caught tx_queue_len zero misconfig [ 222.176155][ T9892] bridge_slave_0: left allmulticast mode [ 222.181995][ T9892] bridge_slave_0: left promiscuous mode [ 222.197738][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.233212][ T9892] bridge_slave_1: left allmulticast mode [ 222.239319][ T9892] bridge_slave_1: left promiscuous mode [ 222.245500][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.260257][ T9892] bond0: (slave bond_slave_0): Releasing backup interface [ 222.270475][ T9892] bond0: (slave bond_slave_1): Releasing backup interface [ 222.281253][ T9892] team_slave_0: left promiscuous mode [ 222.290101][ T9892] team0: Port device team_slave_0 removed [ 222.296822][ T9892] team_slave_1: left promiscuous mode [ 222.303760][ T9892] team0: Port device team_slave_1 removed [ 222.310770][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.320250][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.330058][ T9892] geneve0: left promiscuous mode [ 222.340143][ T9892] team0: Port device geneve0 removed [ 222.347534][ T9892] bond3: (slave geneve2): Releasing backup interface [ 222.378788][ T6583] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.394344][ T6583] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.457999][ T9925] netlink: 'syz.1.1054': attribute type 5 has an invalid length. [ 222.492963][ T9927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.513272][ T6583] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.536402][ T6583] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.549863][ T9925] geneve3: entered promiscuous mode [ 222.556073][ T9925] geneve3: entered allmulticast mode [ 222.566723][ T6583] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 222.646950][ T6583] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 222.669375][ T6583] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 222.729007][ T6583] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 222.910360][ T9936] geneve2: left promiscuous mode [ 222.918626][ T9936] geneve2: left allmulticast mode [ 222.967147][ T9936] team0: left promiscuous mode [ 222.990648][ T9936] macsec1: left promiscuous mode [ 223.038149][ T9936] geneve3: left promiscuous mode [ 223.043181][ T9936] geneve3: left allmulticast mode [ 223.051751][ T9749] lo speed is unknown, defaulting to 1000 [ 223.057732][ T6566] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.085021][ T9749] syz1: Port: 1 Link DOWN [ 223.090211][ T6566] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 223.119551][ T9749] lo speed is unknown, defaulting to 1000 [ 223.125599][ T6566] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.134594][ T6566] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 223.151606][ T6566] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.160841][ T6566] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 223.172614][ T6566] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.182517][ T6566] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 223.382640][ T9969] pim6reg1: entered promiscuous mode [ 223.399232][ T9969] pim6reg1: entered allmulticast mode [ 223.722445][ T9988] tipc: Enabled bearer , priority 0 [ 223.734752][ T9988] tipc: Resetting bearer [ 223.759428][ T9987] tipc: Disabling bearer [ 223.937689][T10007] netlink: 'syz.4.1078': attribute type 4 has an invalid length. [ 223.950808][T10007] Ã: renamed from bond0 [ 224.136330][ T5182] block nbd1: Receive control failed (result -32) [ 224.288399][T10036] lo speed is unknown, defaulting to 1000 [ 224.329872][ T6572] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 224.490126][T10031] lo speed is unknown, defaulting to 1000 [ 224.877340][T10077] __nla_validate_parse: 20 callbacks suppressed [ 224.877363][T10077] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1098'. [ 224.973603][T10090] netlink: 826 bytes leftover after parsing attributes in process `syz.0.1102'. [ 224.997108][T10091] netlink: 'syz.1.1098': attribute type 13 has an invalid length. [ 225.009567][T10091] netlink: 'syz.1.1098': attribute type 17 has an invalid length. [ 225.140753][T10091] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.164451][T10091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.187441][ T5994] lo speed is unknown, defaulting to 1000 [ 225.194477][ T5994] syz1: Port: 1 Link ACTIVE [ 225.226774][ T978] lo speed is unknown, defaulting to 1000 [ 225.453017][T10102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1104'. [ 225.506174][T10102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1104'. [ 225.519881][T10104] batadv_slave_1: entered promiscuous mode [ 225.560117][T10104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'. [ 225.708894][T10103] batadv_slave_1: left promiscuous mode [ 225.776167][T10112] lo speed is unknown, defaulting to 1000 [ 225.876845][T10120] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 225.923774][T10120] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 225.943562][T10120] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 226.028944][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 226.038899][T10128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1113'. [ 226.044842][T10125] gretap2: entered promiscuous mode [ 226.089971][T10125] bond3: (slave gretap2): making interface the new active one [ 226.099426][T10125] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 226.112652][T10128] bridge0: port 2(vlan3) entered blocking state [ 226.120856][T10128] bridge0: port 2(vlan3) entered disabled state [ 226.128759][T10128] vlan3: entered allmulticast mode [ 226.134079][T10128] bridge0: entered allmulticast mode [ 226.141638][T10128] vlan3: left allmulticast mode [ 226.147460][T10128] bridge0: left allmulticast mode [ 226.190329][T10130] lo speed is unknown, defaulting to 1000 [ 226.712840][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 226.959701][T10166] lo speed is unknown, defaulting to 1000 [ 227.321457][T10168] lo speed is unknown, defaulting to 1000 [ 227.692637][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 228.064706][T10206] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 228.077937][T10210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1132'. [ 228.475509][T10224] lo speed is unknown, defaulting to 1000 [ 228.563359][T10238] netlink: 'syz.2.1139': attribute type 7 has an invalid length. [ 228.608172][T10238] netlink: 'syz.2.1139': attribute type 7 has an invalid length. [ 229.075923][T10268] lo speed is unknown, defaulting to 1000 [ 229.881938][T10306] tipc: Enabled bearer , priority 0 [ 229.911736][T10309] __nla_validate_parse: 10 callbacks suppressed [ 229.911755][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 229.971292][T10306] syzkaller0: entered promiscuous mode [ 229.979570][T10306] syzkaller0: entered allmulticast mode [ 229.985806][T10306] tipc: Resetting bearer [ 229.993211][ T6569] tipc: Resetting bearer [ 230.039894][T10306] lo speed is unknown, defaulting to 1000 [ 230.240400][T10318] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1160'. [ 230.384184][T10322] netlink: 'syz.4.1161': attribute type 10 has an invalid length. [ 230.396575][T10302] tipc: Resetting bearer [ 230.462239][T10302] tipc: Disabling bearer [ 230.474731][T10322] Ã: (slave dummy0): Enslaving as an active interface with an up link [ 230.546297][T10301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.723128][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 230.823333][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 230.840873][T10349] pim6reg: entered allmulticast mode [ 230.850147][T10349] pim6reg: left allmulticast mode [ 230.951952][T10358] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1174'. [ 230.978508][T10363] sctp: [Deprecated]: syz.0.1172 (pid 10363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.978508][T10363] Use struct sctp_sack_info instead [ 230.983298][T10358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1174'. [ 230.998052][T10353] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 231.013840][T10353] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1171'. [ 231.030518][T10363] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1172'. [ 231.137677][T10366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1176'. [ 231.152084][T10369] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1177'. [ 231.207356][T10375] atomic_op ffff88807b7b1998 conn xmit_atomic 0000000000000000 [ 231.258704][T10379] tipc: Enabled bearer , priority 0 [ 231.276000][T10369] netlink: 'syz.1.1177': attribute type 7 has an invalid length. [ 231.279031][T10379] syzkaller0: entered promiscuous mode [ 231.293588][T10379] syzkaller0: entered allmulticast mode [ 231.361715][T10379] tipc: Resetting bearer [ 231.384543][T10379] tipc: Disabling bearer [ 231.469502][T10396] gretap3: entered promiscuous mode [ 231.835959][ T5182] Bluetooth: hci0: command 0x0406 tx timeout [ 232.288831][T10433] lo speed is unknown, defaulting to 1000 [ 232.481778][T10447] vlan0: entered promiscuous mode [ 232.490060][T10447] bond0: entered promiscuous mode [ 232.547149][T10452] tipc: Enabled bearer , priority 0 [ 232.561554][T10452] syzkaller0: entered promiscuous mode [ 232.568028][T10452] syzkaller0: entered allmulticast mode [ 232.580838][T10452] tipc: Resetting bearer [ 232.589666][T10451] tipc: Resetting bearer [ 232.603370][T10451] tipc: Disabling bearer [ 232.653108][T10456] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 232.733729][T10456] bond5: (slave gretap3): making interface the new active one [ 232.742474][T10456] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 232.764054][T10456] bond5: (slave gretap4): Enslaving as an active interface with an up link [ 232.917555][T10472] lo speed is unknown, defaulting to 1000 [ 232.948786][T10480] geneve3: entered promiscuous mode [ 233.014454][T10487] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 233.027980][T10480] geneve3: entered allmulticast mode [ 233.131372][T10482] veth3: entered promiscuous mode [ 233.495672][ T6572] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.527129][ T6572] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.560694][ T6572] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.605697][ T6572] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.698498][T10523] tipc: Enabled bearer , priority 0 [ 233.719151][T10523] syzkaller0: entered promiscuous mode [ 233.731147][T10523] syzkaller0: entered allmulticast mode [ 233.749985][T10523] tipc: Resetting bearer [ 233.762391][T10525] lo speed is unknown, defaulting to 1000 [ 234.073952][T10546] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 234.113645][T10549] netlink: 'syz.4.1225': attribute type 4 has an invalid length. [ 234.350277][T10529] netlink: 'syz.1.1220': attribute type 13 has an invalid length. [ 234.359016][T10529] netlink: 'syz.1.1220': attribute type 17 has an invalid length. [ 234.422662][T10529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.482907][T10516] tipc: Resetting bearer [ 234.519726][T10516] tipc: Disabling bearer [ 234.734069][T10574] lo speed is unknown, defaulting to 1000 [ 234.842401][T10580] syzkaller1: entered promiscuous mode [ 234.852108][T10580] syzkaller1: entered allmulticast mode [ 235.664773][T10624] __nla_validate_parse: 15 callbacks suppressed [ 235.664796][T10624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1245'. [ 235.723617][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 235.761341][T10629] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1247'. [ 235.927659][T10638] lo speed is unknown, defaulting to 1000 [ 236.040882][T10655] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 236.075750][T10655] bond0: (slave geneve3): making interface the new active one [ 236.084365][T10655] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 236.098227][ T6573] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.110317][T10636] lo speed is unknown, defaulting to 1000 [ 236.111117][T10655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1254'. [ 236.141789][ T6573] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.157181][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.183673][ T6573] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.197327][ T6573] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.331848][T10663] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1256'. [ 236.739202][T10677] lo speed is unknown, defaulting to 1000 [ 236.889903][T10695] netlink: 'syz.2.1264': attribute type 4 has an invalid length. [ 236.903461][T10701] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.927245][T10698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.951303][T10703] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1266'. [ 237.008958][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1266'. [ 237.447493][T10720] netlink: 'syz.1.1270': attribute type 13 has an invalid length. [ 237.533892][T10717] netlink: 'syz.1.1270': attribute type 13 has an invalid length. [ 237.578791][T10717] netlink: 'syz.1.1270': attribute type 17 has an invalid length. [ 237.579983][T10723] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 237.931332][ T9749] lo speed is unknown, defaulting to 1000 [ 237.943312][ T9749] syz1: Port: 1 Link DOWN [ 238.073093][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.091879][T10717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.112679][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1275'. [ 238.133031][ T9748] lo speed is unknown, defaulting to 1000 [ 238.163949][ T978] lo speed is unknown, defaulting to 1000 [ 238.200770][ T978] syz1: Port: 1 Link ACTIVE [ 238.242105][T10726] lo speed is unknown, defaulting to 1000 [ 238.263527][T10743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1276'. [ 238.474259][T10752] veth1_to_team: entered allmulticast mode [ 238.792238][T10779] lo speed is unknown, defaulting to 1000 [ 238.906212][T10791] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1288'. [ 239.120854][T10792] lo speed is unknown, defaulting to 1000 [ 239.797101][T10826] netlink: 'syz.3.1299': attribute type 3 has an invalid length. [ 240.100485][T10847] netlink: 'syz.1.1302': attribute type 16 has an invalid length. [ 240.386414][T10861] netlink: 'syz.4.1309': attribute type 30 has an invalid length. [ 240.479269][T10870] vlan3: entered promiscuous mode [ 240.488541][T10870] bond0: entered promiscuous mode [ 240.493764][T10870] geneve3: entered promiscuous mode [ 240.500952][T10870] vlan3: entered allmulticast mode [ 240.506873][T10870] bond0: entered allmulticast mode [ 240.512066][T10870] geneve3: entered allmulticast mode [ 240.571818][T10874] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 240.654053][T10876] lo speed is unknown, defaulting to 1000 [ 240.712838][T10882] netlink: 'syz.0.1315': attribute type 2 has an invalid length. [ 240.757941][T10882] þ: entered promiscuous mode [ 240.879325][T10892] __nla_validate_parse: 12 callbacks suppressed [ 240.879344][T10892] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1317'. [ 241.026922][T10901] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1319'. [ 241.090394][T10901] lo speed is unknown, defaulting to 1000 [ 241.100560][T10905] tipc: Enabled bearer , priority 0 [ 241.135850][T10905] syzkaller0: entered promiscuous mode [ 241.143849][T10905] syzkaller0: entered allmulticast mode [ 241.265852][T10905] tipc: Resetting bearer [ 241.297040][T10905] tipc: Disabling bearer [ 241.317523][T10918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1322'. [ 241.445320][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 241.454300][T10902] lo speed is unknown, defaulting to 1000 [ 241.528835][T10925] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 241.546743][T10925] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 241.571593][T10925] tipc: Enabling of bearer rejected, already enabled [ 241.589722][T10925] sch_tbf: peakrate 9 is lower than or equals to rate 131 ! [ 241.600839][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 242.026780][T10949] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 242.253937][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 242.263185][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 242.349691][T10973] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 242.401293][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 242.415587][T10968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1339'. [ 242.457117][T10968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 242.468162][T10968] gretap3: entered promiscuous mode [ 242.510004][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 242.587170][T10978] lo speed is unknown, defaulting to 1000 [ 242.988255][T11002] batman_adv: batadv0: Interface deactivated: macvtap0 [ 243.008800][T11002] batman_adv: batadv0: Removing interface: macvtap0 [ 243.024532][T11002] batman_adv: batadv0: Interface deactivated: vxlan1 [ 243.076272][T11002] batman_adv: batadv0: Removing interface: vxlan1 [ 243.186135][T11000] lo speed is unknown, defaulting to 1000 [ 243.324637][T11015] bond0: (slave gretap0): Opening slave failed [ 243.522693][T11022] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 243.536387][T11019] lo speed is unknown, defaulting to 1000 [ 243.677547][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 243.806579][T11027] lo speed is unknown, defaulting to 1000 [ 244.059695][T11041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1355'. [ 244.604184][T11069] delete_channel: no stack [ 244.610766][T11068] netlink: 'syz.2.1364': attribute type 4 has an invalid length. [ 244.628784][T11066] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 244.661789][T11073] netlink: 'syz.2.1364': attribute type 4 has an invalid length. [ 244.760808][T11077] lo speed is unknown, defaulting to 1000 [ 245.003132][T11084] lo speed is unknown, defaulting to 1000 [ 245.220717][T11104] netlink: 'syz.3.1375': attribute type 8 has an invalid length. [ 245.240698][T11104] nbd: must specify a size in bytes for the device [ 245.389521][T11118] lo speed is unknown, defaulting to 1000 [ 245.609153][T11131] netlink: 'syz.4.1381': attribute type 10 has an invalid length. [ 245.641907][T11131] 8021q: adding VLAN 0 to HW filter on device à [ 245.661038][T11131] team0: Port device à added [ 245.683887][T11133] syzkaller1: entered promiscuous mode [ 245.691301][T11133] syzkaller1: entered allmulticast mode [ 245.706001][T11133] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 245.713312][T11133] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 245.780819][T11136] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 245.962552][T11142] __nla_validate_parse: 10 callbacks suppressed [ 245.962575][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1385'. [ 246.030197][T11142] pim6reg: entered allmulticast mode [ 246.063200][T11142] pim6reg: left allmulticast mode [ 246.174365][T11149] lo speed is unknown, defaulting to 1000 [ 246.214548][T11152] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1386'. [ 246.296766][T11157] dvmrp8: entered allmulticast mode [ 246.520391][T11157] lo speed is unknown, defaulting to 1000 [ 246.547232][T11166] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1391'. [ 247.030999][T11178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1394'. [ 247.053429][T11184] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.078187][T11187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1396'. [ 247.115897][T11188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 247.160440][T11184] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.202384][T11197] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.1399'. [ 247.208313][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 247.251332][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 247.284485][T11184] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.352792][T11184] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.474082][ T6572] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.500223][ T6572] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.536350][ T6572] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.554699][ T6572] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.684221][T11207] IPVS: Scheduler module ip_vs_ not found [ 247.766308][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 247.880402][T11214] lo speed is unknown, defaulting to 1000 [ 248.013493][T11220] lo speed is unknown, defaulting to 1000 [ 248.827809][T11249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.946309][T11254] lo speed is unknown, defaulting to 1000 [ 249.285276][T11255] lo speed is unknown, defaulting to 1000 [ 249.760931][T11288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.793446][T11288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.835753][T11288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.913489][T11295] syz_tun: entered allmulticast mode [ 249.969760][T11300] veth0: entered promiscuous mode [ 249.988229][T11288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.016102][T11288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.028016][T11288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.128631][T11288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.141631][T11288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.161654][T11288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.228342][T11288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.261186][T11288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.289273][T11288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.304746][T11326] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 250.397971][T11326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.441385][ T6566] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.465161][ T6566] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.479789][ T6566] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.490150][T11342] netlink: 'syz.3.1439': attribute type 58 has an invalid length. [ 250.491265][ T6566] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.510564][ T6566] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.519851][ T6566] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.571484][T11285] syz_tun: left allmulticast mode [ 250.583896][ T6573] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.592425][ T6573] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.602040][ T6573] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.620911][ T6573] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.631798][ T6573] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 250.647654][ T6573] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.661391][T11346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.753561][T11349] lo speed is unknown, defaulting to 1000 [ 250.877035][T11355] tipc: Enabled bearer , priority 0 [ 250.884744][T11355] syzkaller0: entered promiscuous mode [ 250.893207][T11355] syzkaller0: entered allmulticast mode [ 250.923292][T11355] tipc: Resetting bearer [ 251.297283][T11361] netlink: 'syz.3.1446': attribute type 32 has an invalid length. [ 251.456643][T11372] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.505291][T11372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.577531][T11372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.691922][T11372] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.692306][T11384] __nla_validate_parse: 9 callbacks suppressed [ 251.692325][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 251.722508][T11372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.741528][T11386] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1452'. [ 251.752959][T11372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.789355][T11354] tipc: Resetting bearer [ 251.818307][T11354] tipc: Disabling bearer [ 251.838436][T11372] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.858990][T11372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.885044][T11372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 251.983055][T11372] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.983773][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'. [ 252.006501][T11372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.030588][T11372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.047461][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'. [ 252.118913][ T6573] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.132076][ T6573] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.144306][ T6573] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.154606][T11409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1462'. [ 252.168796][T11409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1462'. [ 252.183755][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 252.197537][ T6573] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.206815][ T6573] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.217053][ T6573] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.227298][ T6573] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.237468][ T6573] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.248937][T11415] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1460'. [ 252.261855][ T6573] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.280269][ T6573] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.289677][ T6573] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 252.299228][ T6573] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.317647][T11373] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.351341][T11373] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.370985][T11373] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.396656][ T6573] ================================================================== [ 252.404804][ T6573] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 252.412400][ T6573] Read of size 8 at addr ffff888055e8deb0 by task kworker/u8:44/6573 [ 252.420508][ T6573] [ 252.422866][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(full) [ 252.422893][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.422909][ T6573] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 252.422966][ T6573] Call Trace: [ 252.422975][ T6573] [ 252.422984][ T6573] dump_stack_lvl+0x189/0x250 [ 252.423015][ T6573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.423041][ T6573] ? lock_release+0x4b/0x3e0 [ 252.423077][ T6573] ? __virt_addr_valid+0x4a5/0x5c0 [ 252.423106][ T6573] print_report+0xca/0x240 [ 252.423125][ T6573] ? __mutex_lock+0x147/0x1350 [ 252.423143][ T6573] kasan_report+0x118/0x150 [ 252.423172][ T6573] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 252.423201][ T6573] ? __mutex_lock+0x147/0x1350 [ 252.423223][ T6573] __mutex_lock+0x147/0x1350 [ 252.423243][ T6573] ? __mutex_lock+0x5bb/0x1350 [ 252.423261][ T6573] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 252.423293][ T6573] ? __pfx___mutex_lock+0x10/0x10 [ 252.423324][ T6573] ? do_raw_spin_unlock+0x122/0x240 [ 252.423352][ T6573] ? rcu_is_watching+0x15/0xb0 [ 252.423386][ T6573] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 252.423422][ T6573] ? process_scheduled_works+0x9ef/0x17b0 [ 252.423442][ T6573] ? process_scheduled_works+0x9ef/0x17b0 [ 252.423464][ T6573] process_scheduled_works+0xae1/0x17b0 [ 252.423501][ T6573] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.423531][ T6573] worker_thread+0x8a0/0xda0 [ 252.423569][ T6573] kthread+0x70e/0x8a0 [ 252.423596][ T6573] ? __pfx_worker_thread+0x10/0x10 [ 252.423616][ T6573] ? __pfx_kthread+0x10/0x10 [ 252.423642][ T6573] ? rcu_is_watching+0x15/0xb0 [ 252.423663][ T6573] ? __pfx_kthread+0x10/0x10 [ 252.423689][ T6573] ret_from_fork+0x3f9/0x770 [ 252.423713][ T6573] ? __pfx_ret_from_fork+0x10/0x10 [ 252.423738][ T6573] ? __switch_to_asm+0x39/0x70 [ 252.423766][ T6573] ? __switch_to_asm+0x33/0x70 [ 252.423793][ T6573] ? __pfx_kthread+0x10/0x10 [ 252.423819][ T6573] ret_from_fork_asm+0x1a/0x30 [ 252.423855][ T6573] [ 252.423863][ T6573] [ 252.442224][T11408] netlink: 'syz.0.1460': attribute type 13 has an invalid length. [ 252.443484][ T6573] Allocated by task 11372: [ 252.443500][ T6573] kasan_save_track+0x3e/0x80 [ 252.639376][ T6573] __kasan_kmalloc+0x93/0xb0 [ 252.644019][ T6573] __kmalloc_noprof+0x27a/0x4f0 [ 252.648888][ T6573] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 252.655057][ T6573] notifier_call_chain+0x1b3/0x3e0 [ 252.660174][ T6573] register_netdevice+0x1608/0x1ae0 [ 252.665381][ T6573] nsim_create+0xae8/0xf10 [ 252.669813][ T6573] __nsim_dev_port_add+0x6b6/0xb10 [ 252.674952][ T6573] nsim_dev_port_add_all+0x37/0xf0 [ 252.680094][ T6573] nsim_dev_reload_up+0x451/0x780 [ 252.685132][ T6573] devlink_reload+0x4ec/0x8d0 [ 252.689820][ T6573] devlink_nl_reload_doit+0xb35/0xd50 [ 252.695204][ T6573] genl_family_rcv_msg_doit+0x215/0x300 [ 252.700757][ T6573] genl_rcv_msg+0x60e/0x790 [ 252.705266][ T6573] netlink_rcv_skb+0x205/0x470 [ 252.710075][ T6573] genl_rcv+0x28/0x40 [ 252.714061][ T6573] netlink_unicast+0x82c/0x9e0 [ 252.718835][ T6573] netlink_sendmsg+0x805/0xb30 [ 252.723603][ T6573] __sock_sendmsg+0x21c/0x270 [ 252.728288][ T6573] ____sys_sendmsg+0x505/0x830 [ 252.733116][ T6573] ___sys_sendmsg+0x21f/0x2a0 [ 252.737901][ T6573] __x64_sys_sendmsg+0x19b/0x260 [ 252.742858][ T6573] do_syscall_64+0xfa/0x3b0 [ 252.747375][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.753436][ T6573] [ 252.755781][ T6573] Freed by task 11373: [ 252.759857][ T6573] kasan_save_track+0x3e/0x80 [ 252.764579][ T6573] kasan_save_free_info+0x46/0x50 [ 252.769645][ T6573] __kasan_slab_free+0x5b/0x80 [ 252.774448][ T6573] kfree+0x18e/0x440 [ 252.778371][ T6573] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 252.784640][ T6573] notifier_call_chain+0x1b3/0x3e0 [ 252.789762][ T6573] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 252.796194][ T6573] unregister_netdevice_queue+0x33c/0x380 [ 252.801925][ T6573] nsim_destroy+0x1dd/0x670 [ 252.806443][ T6573] __nsim_dev_port_del+0x14d/0x1b0 [ 252.811570][ T6573] nsim_dev_reload_destroy+0x288/0x490 [ 252.817040][ T6573] nsim_dev_reload_down+0x8a/0xc0 [ 252.822084][ T6573] devlink_reload+0x1b3/0x8d0 [ 252.826769][ T6573] devlink_nl_reload_doit+0xb35/0xd50 [ 252.832148][ T6573] genl_family_rcv_msg_doit+0x215/0x300 [ 252.837704][ T6573] genl_rcv_msg+0x60e/0x790 [ 252.842213][ T6573] netlink_rcv_skb+0x205/0x470 [ 252.846991][ T6573] genl_rcv+0x28/0x40 [ 252.851160][ T6573] netlink_unicast+0x82c/0x9e0 [ 252.855936][ T6573] netlink_sendmsg+0x805/0xb30 [ 252.860704][ T6573] __sock_sendmsg+0x21c/0x270 [ 252.865399][ T6573] ____sys_sendmsg+0x505/0x830 [ 252.870167][ T6573] ___sys_sendmsg+0x21f/0x2a0 [ 252.874847][ T6573] __x64_sys_sendmsg+0x19b/0x260 [ 252.879797][ T6573] do_syscall_64+0xfa/0x3b0 [ 252.884317][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.890217][ T6573] [ 252.892542][ T6573] Last potentially related work creation: [ 252.898253][ T6573] kasan_save_stack+0x3e/0x60 [ 252.902944][ T6573] kasan_record_aux_stack+0xbd/0xd0 [ 252.908151][ T6573] insert_work+0x3d/0x330 [ 252.912509][ T6573] __queue_work+0xbaf/0xfb0 [ 252.917019][ T6573] queue_work_on+0x181/0x270 [ 252.921631][ T6573] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 252.927453][ T6573] udp_tunnel_push_rx_port+0x17d/0x200 [ 252.932924][ T6573] geneve_offload_rx_ports+0xd7/0x160 [ 252.938306][ T6573] geneve_netdevice_event+0x6a/0x80 [ 252.943516][ T6573] notifier_call_chain+0x1b3/0x3e0 [ 252.948669][ T6573] call_netdevice_notifiers+0x88/0xc0 [ 252.954061][ T6573] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 252.960316][ T6573] notifier_call_chain+0x1b3/0x3e0 [ 252.965433][ T6573] register_netdevice+0x1608/0x1ae0 [ 252.970657][ T6573] nsim_create+0xae8/0xf10 [ 252.975084][ T6573] __nsim_dev_port_add+0x6b6/0xb10 [ 252.980207][ T6573] nsim_dev_port_add_all+0x37/0xf0 [ 252.985333][ T6573] nsim_dev_reload_up+0x451/0x780 [ 252.990377][ T6573] devlink_reload+0x4ec/0x8d0 [ 252.995066][ T6573] devlink_nl_reload_doit+0xb35/0xd50 [ 253.000447][ T6573] genl_family_rcv_msg_doit+0x215/0x300 [ 253.006021][ T6573] genl_rcv_msg+0x60e/0x790 [ 253.010536][ T6573] netlink_rcv_skb+0x205/0x470 [ 253.015314][ T6573] genl_rcv+0x28/0x40 [ 253.019334][ T6573] netlink_unicast+0x82c/0x9e0 [ 253.024108][ T6573] netlink_sendmsg+0x805/0xb30 [ 253.028871][ T6573] __sock_sendmsg+0x21c/0x270 [ 253.033556][ T6573] ____sys_sendmsg+0x505/0x830 [ 253.038330][ T6573] ___sys_sendmsg+0x21f/0x2a0 [ 253.043018][ T6573] __x64_sys_sendmsg+0x19b/0x260 [ 253.047967][ T6573] do_syscall_64+0xfa/0x3b0 [ 253.052476][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.058375][ T6573] [ 253.060701][ T6573] Second to last potentially related work creation: [ 253.067286][ T6573] kasan_save_stack+0x3e/0x60 [ 253.071976][ T6573] kasan_record_aux_stack+0xbd/0xd0 [ 253.077205][ T6573] insert_work+0x3d/0x330 [ 253.081549][ T6573] __queue_work+0xcd2/0xfb0 [ 253.086059][ T6573] queue_work_on+0x181/0x270 [ 253.090650][ T6573] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 253.096298][ T6573] udp_tunnel_push_rx_port+0x17d/0x200 [ 253.101768][ T6573] vxlan_offload_rx_ports+0x139/0x200 [ 253.107153][ T6573] vxlan_netdevice_event+0x111/0x470 [ 253.112451][ T6573] notifier_call_chain+0x1b3/0x3e0 [ 253.117572][ T6573] call_netdevice_notifiers+0x88/0xc0 [ 253.122978][ T6573] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 253.129236][ T6573] notifier_call_chain+0x1b3/0x3e0 [ 253.134365][ T6573] register_netdevice+0x1608/0x1ae0 [ 253.139573][ T6573] nsim_create+0xae8/0xf10 [ 253.144007][ T6573] __nsim_dev_port_add+0x6b6/0xb10 [ 253.149135][ T6573] nsim_dev_port_add_all+0x37/0xf0 [ 253.154260][ T6573] nsim_dev_reload_up+0x451/0x780 [ 253.159297][ T6573] devlink_reload+0x4ec/0x8d0 [ 253.163983][ T6573] devlink_nl_reload_doit+0xb35/0xd50 [ 253.169389][ T6573] genl_family_rcv_msg_doit+0x215/0x300 [ 253.174950][ T6573] genl_rcv_msg+0x60e/0x790 [ 253.179466][ T6573] netlink_rcv_skb+0x205/0x470 [ 253.184246][ T6573] genl_rcv+0x28/0x40 [ 253.188241][ T6573] netlink_unicast+0x82c/0x9e0 [ 253.193039][ T6573] netlink_sendmsg+0x805/0xb30 [ 253.197803][ T6573] __sock_sendmsg+0x21c/0x270 [ 253.202490][ T6573] ____sys_sendmsg+0x505/0x830 [ 253.207256][ T6573] ___sys_sendmsg+0x21f/0x2a0 [ 253.211939][ T6573] __x64_sys_sendmsg+0x19b/0x260 [ 253.216886][ T6573] do_syscall_64+0xfa/0x3b0 [ 253.221390][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.227290][ T6573] [ 253.229615][ T6573] The buggy address belongs to the object at ffff888055e8de00 [ 253.229615][ T6573] which belongs to the cache kmalloc-256 of size 256 [ 253.243680][ T6573] The buggy address is located 176 bytes inside of [ 253.243680][ T6573] freed 256-byte region [ffff888055e8de00, ffff888055e8df00) [ 253.257483][ T6573] [ 253.259812][ T6573] The buggy address belongs to the physical page: [ 253.266237][ T6573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55e8c [ 253.275017][ T6573] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 253.283524][ T6573] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 253.291523][ T6573] page_type: f5(slab) [ 253.295513][ T6573] raw: 00fff00000000040 ffff88801a441b40 0000000000000000 0000000000000001 [ 253.304105][ T6573] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 253.312697][ T6573] head: 00fff00000000040 ffff88801a441b40 0000000000000000 0000000000000001 [ 253.321377][ T6573] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 253.330054][ T6573] head: 00fff00000000001 ffffea000157a301 00000000ffffffff 00000000ffffffff [ 253.338730][ T6573] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 253.347405][ T6573] page dumped because: kasan: bad access detected [ 253.353832][ T6573] page_owner tracks the page as allocated [ 253.359548][ T6573] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9308, tgid 9306 (syz.4.872), ts 204244785826, free_ts 203663356236 [ 253.380838][ T6573] post_alloc_hook+0x240/0x2a0 [ 253.385621][ T6573] get_page_from_freelist+0x21e4/0x22c0 [ 253.391187][ T6573] __alloc_frozen_pages_noprof+0x181/0x370 [ 253.397025][ T6573] alloc_pages_mpol+0x232/0x4a0 [ 253.401888][ T6573] allocate_slab+0x8a/0x370 [ 253.406398][ T6573] ___slab_alloc+0xbeb/0x1410 [ 253.411086][ T6573] __kmalloc_noprof+0x305/0x4f0 [ 253.415950][ T6573] iter_file_splice_write+0x1c6/0x10e0 [ 253.421425][ T6573] direct_splice_actor+0xfe/0x160 [ 253.426466][ T6573] splice_direct_to_actor+0x5a8/0xcc0 [ 253.431856][ T6573] do_splice_direct+0x181/0x270 [ 253.436719][ T6573] do_sendfile+0x4da/0x7e0 [ 253.441141][ T6573] __se_sys_sendfile64+0x13e/0x190 [ 253.446270][ T6573] do_syscall_64+0xfa/0x3b0 [ 253.450778][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.456675][ T6573] page last free pid 5924 tgid 5924 stack trace: [ 253.463013][ T6573] __free_frozen_pages+0xbc4/0xd30 [ 253.468148][ T6573] kasan_depopulate_vmalloc_pte+0x74/0xa0 [ 253.473894][ T6573] __apply_to_page_range+0xb8f/0x1380 [ 253.479270][ T6573] kasan_release_vmalloc+0xa2/0xd0 [ 253.484390][ T6573] purge_vmap_node+0x214/0x8f0 [ 253.489158][ T6573] __purge_vmap_area_lazy+0x7a4/0xb40 [ 253.494537][ T6573] drain_vmap_area_work+0x27/0x40 [ 253.499568][ T6573] process_scheduled_works+0xae1/0x17b0 [ 253.505140][ T6573] worker_thread+0x8a0/0xda0 [ 253.509806][ T6573] kthread+0x70e/0x8a0 [ 253.513891][ T6573] ret_from_fork+0x3f9/0x770 [ 253.518491][ T6573] ret_from_fork_asm+0x1a/0x30 [ 253.523273][ T6573] [ 253.525603][ T6573] Memory state around the buggy address: [ 253.531323][ T6573] ffff888055e8dd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.539395][ T6573] ffff888055e8de00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.547462][ T6573] >ffff888055e8de80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.555535][ T6573] ^ [ 253.561217][ T6573] ffff888055e8df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.569388][ T6573] ffff888055e8df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.577479][ T6573] ================================================================== [ 253.613759][ T6573] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.621029][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(full) [ 253.630600][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.640666][ T6573] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 253.647987][ T6573] Call Trace: [ 253.651277][ T6573] [ 253.654208][ T6573] dump_stack_lvl+0x99/0x250 [ 253.658812][ T6573] ? __asan_memcpy+0x40/0x70 [ 253.663406][ T6573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.668693][ T6573] ? __pfx__printk+0x10/0x10 [ 253.673295][ T6573] vpanic+0x281/0x750 [ 253.677305][ T6573] ? preempt_schedule+0xae/0xc0 [ 253.682174][ T6573] ? __pfx_vpanic+0x10/0x10 [ 253.686713][ T6573] ? preempt_schedule_common+0x83/0xd0 [ 253.692219][ T6573] ? preempt_schedule+0xae/0xc0 [ 253.697080][ T6573] ? __pfx_preempt_schedule+0x10/0x10 [ 253.702466][ T6573] panic+0xb9/0xc0 [ 253.706199][ T6573] ? __pfx_panic+0x10/0x10 [ 253.710644][ T6573] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 253.716549][ T6573] ? __mutex_lock+0x147/0x1350 [ 253.721313][ T6573] check_panic_on_warn+0x89/0xb0 [ 253.726278][ T6573] ? __mutex_lock+0x147/0x1350 [ 253.731082][ T6573] end_report+0x78/0x160 [ 253.735372][ T6573] kasan_report+0x129/0x150 [ 253.739917][ T6573] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.745859][ T6573] ? __mutex_lock+0x147/0x1350 [ 253.750732][ T6573] __mutex_lock+0x147/0x1350 [ 253.755325][ T6573] ? __mutex_lock+0x5bb/0x1350 [ 253.760102][ T6573] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 253.766396][ T6573] ? __pfx___mutex_lock+0x10/0x10 [ 253.771446][ T6573] ? do_raw_spin_unlock+0x122/0x240 [ 253.776741][ T6573] ? rcu_is_watching+0x15/0xb0 [ 253.781511][ T6573] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 253.787685][ T6573] ? process_scheduled_works+0x9ef/0x17b0 [ 253.793414][ T6573] ? process_scheduled_works+0x9ef/0x17b0 [ 253.799149][ T6573] process_scheduled_works+0xae1/0x17b0 [ 253.804840][ T6573] ? __pfx_process_scheduled_works+0x10/0x10 [ 253.810872][ T6573] worker_thread+0x8a0/0xda0 [ 253.815527][ T6573] kthread+0x70e/0x8a0 [ 253.819648][ T6573] ? __pfx_worker_thread+0x10/0x10 [ 253.824804][ T6573] ? __pfx_kthread+0x10/0x10 [ 253.829437][ T6573] ? rcu_is_watching+0x15/0xb0 [ 253.834330][ T6573] ? __pfx_kthread+0x10/0x10 [ 253.838973][ T6573] ret_from_fork+0x3f9/0x770 [ 253.843613][ T6573] ? __pfx_ret_from_fork+0x10/0x10 [ 253.848770][ T6573] ? __switch_to_asm+0x39/0x70 [ 253.853593][ T6573] ? __switch_to_asm+0x33/0x70 [ 253.858398][ T6573] ? __pfx_kthread+0x10/0x10 [ 253.863052][ T6573] ret_from_fork_asm+0x1a/0x30 [ 253.867875][ T6573] [ 253.871243][ T6573] Kernel Offset: disabled [ 253.875580][ T6573] Rebooting in 86400 seconds..