last executing test programs: 18.949559615s ago: executing program 1 (id=1722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x83280, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000080)="ac3d", &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000000c0), &(0x7f00000001c0)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000001200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x83280, 0x0) (async) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000080)="ac3d", &(0x7f0000000000), 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000000c0), &(0x7f00000001c0)=r3}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000001200)) (async) 18.561900068s ago: executing program 1 (id=1727): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0xf30, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x73e2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd1de}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x22, 0x5b, "86d1d1d095552acb2a806d7c462be6fd32f0e1a2452e80169ddef45643db"}]}, 0x58}, 0x1, 0x0, 0x0, 0xc845}, 0x4800) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r8, &(0x7f00000000c0)="4b00030000", 0x5) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 17.218083609s ago: executing program 1 (id=1739): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x0) r3 = socket(0x2, 0x3, 0x40) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16.544961151s ago: executing program 1 (id=1745): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'pimreg\x00', {0xb2f}, 0x101}) setsockopt(r1, 0x4, 0x7fff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'pimreg\x00', {0xb2f}, 0x101}) (async) setsockopt(r1, 0x4, 0x7fff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000001c0)) (async) 16.362593706s ago: executing program 1 (id=1746): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001c00)=[{&(0x7f0000002000)="f8", 0x1}], 0x1, 0x9) (async) close(r4) (async) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x8, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000b00)}}], 0x1, 0x24000045) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) recvfrom$inet6(r10, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0xa, 0x4e29, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0) 15.254614888s ago: executing program 1 (id=1760): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x9, 0x2, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d586b2ac8a95d29e5b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x7, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x2000d000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 14.972031553s ago: executing program 32 (id=1760): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x9, 0x2, 0x3, 0x0, 0xff, "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", 0x2, "5c8d586b2ac8a95d29e5b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x7, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x2000d000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 3.008179784s ago: executing program 2 (id=1898): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast2, @empty, @mcast1, 0x9, 0x5, 0x1, 0x0, 0xea43, 0x900003}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000300a1406b56119676f52009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x626fdb7928f1e3ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="d2ff03076003088cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.800461291s ago: executing program 2 (id=1901): unshare(0x22020600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x401) 2.388077406s ago: executing program 3 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0x10}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r12, {}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r13 = socket(0x1a, 0x80000, 0x0) sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80002, 0x18001, 0x83}}}}]}, 0x44}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x10}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) 2.258069657s ago: executing program 4 (id=1904): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) 1.960185146s ago: executing program 3 (id=1907): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)=@generic, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/53, 0x35}], 0x1}, 0x2040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000020}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x100, 0x20040}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x41}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008884}, 0x8800) (async) gettid() (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0xb, 0x4, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x68, 0x8, 0xfd, 0x29, 0x0, @broadcast, @remote, {[@end, @timestamp_prespec={0x44, 0x54, 0xdb, 0x3, 0x3, [{@loopback, 0xfffffffc}, {@rand_addr=0x64010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x1}, {@private=0xa010102, 0x3}, {@local}, {@loopback, 0xffff}, {@remote, 0x235}, {@empty}, {@private=0xa010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3}]}]}}}}}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x80000000, 0x1}}, 0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2, @remote}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="e8000000180000082abd7000fcdbdf251c201400fc020102002e000005001a000900000084001300000000000000000000000000000000000000000000000800000000000000040000000f00000f0f0000000100000009000000000000000900000003000000000000000000000000000000000000000700000f0f0000000000000109000000000000000000000000a80000080000000000000000000000000000000700000000000c000900050000015c0f43", @ANYRES32=r4, @ANYBLOB="0800010000000000080001000000070005001a000400000014001200030090d6bb6e134e69b58641869c808008000400", @ANYRES32=r6, @ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1.854127459s ago: executing program 4 (id=1908): syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "104000", 0x8, 0x0, 0x0, @ipv4, @local, {[], "1ce302d74f6ae54b"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x244, 0x0, 0x1, 0x2, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x140a}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa4a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x139}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x613}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc6}]}, @CTA_TUPLE_MASTER={0xcc, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_NAT_SRC={0xa0, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x952}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x18d, 0xb99]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x19}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xa, 0xff}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x8}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x10}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x2000c030}, 0x0) 1.848202267s ago: executing program 2 (id=1909): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="3f031c164b1f889799dec870fae1ff7786dd", 0x12, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r4, 0x1, 0x7, 0x6, @remote}, 0x14) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) connect$ax25(r5, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) 1.832083452s ago: executing program 3 (id=1910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x38, r2, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4886, 0x42}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r7, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) (async) sendto$inet6(r7, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000200)={r10, 0x4}, &(0x7f0000000280)=0x8) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001003500000008000a00", @ANYRES32, @ANYBLOB="c5d1b8ad43b6f5cee00d8a8fd4828136df5a76ed713aa60f2e5b14e3d9353269e25016c0ef46efb8548ff1f0c9837c8d821cf1cafea28acb70541cab888c6561b9c862c233d2c46c8874ee2d3bc4b1"], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060104000000000000000000f6ff040500010007000000050005000a000000050005000300000016000300686173683a6e65742c706f72742c6e65740000000500040000000000471b2a52c184fcbf6e57454bf0ab9aa5fbc9fd6891623803feccaf80f1ce47052fe2159a1b66f90c51edeb02e3b4ca7a0ef8bb5bc179d1f27f68b60ff1214f59c224a02a967bca72cee4e235faa0b23ee848a7a065064ea89fff98f94d95ecdef1013d0bdff5c3cabf1a128f5520ff5758cc25396d27c0f67213258457db080b097b8d84c3ae384a70c1d3"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) (async) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060104000000000000000000f6ff040500010007000000050005000a000000050005000300000016000300686173683a6e65742c706f72742c6e65740000000500040000000000471b2a52c184fcbf6e57454bf0ab9aa5fbc9fd6891623803feccaf80f1ce47052fe2159a1b66f90c51edeb02e3b4ca7a0ef8bb5bc179d1f27f68b60ff1214f59c224a02a967bca72cee4e235faa0b23ee848a7a065064ea89fff98f94d95ecdef1013d0bdff5c3cabf1a128f5520ff5758cc25396d27c0f67213258457db080b097b8d84c3ae384a70c1d3"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) 1.574348555s ago: executing program 4 (id=1912): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000e4ff630400000000000007000000000f00009500000400000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 1.574022733s ago: executing program 0 (id=1913): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=""/4090, 0x4}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10) 1.53785781s ago: executing program 5 (id=1914): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r1, r2, 0x2f, 0x18, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x400000, 0xffffffff, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x7e, 0x2, {{0x0, 0x95}, 0x3}}]}, {0x4, 0x6, "92071845d6598d86adf0bba1e99fc2388593376292557f1c130d6d1e2f4f4ea1d81990021a68e260143472d287f74ebc8e2c8057067e897c349f601d8be5effe32666309e7fdf1c0fb3dd1794b6c1be9a1a6259fea012eb1868660af8a4b4079981571d1cbca5dde29a2fbf2963a734a9504df68f00d0b3cd58778fe011596a458351a15660106d50a51647c9ce940a08dff3c32b23437094e27fcd94cfba4b404acaee76eab8486dad8c3b937fbf067cc7c9f8a6747cacd9f2588b1f957359736e25150112ba3325cde6c03ac2ff823b5a699e20a66dc2b93bd054e06b779a69a65d6e89e47977bc164b9dabb6c710d699a7bb058d4aaabef4b73d53227da57202bf5ea57ef62f4cd28794e42a560cc012797dc1de45030a7bb3ced757bd9ae35116c18646dea99e2b809919f6979744ef1addab576e719b9ad5deca5a589fadbffff762d44d0b06a42f0e378522a3ffcfd9164b6599088536e898258099f96c08cdcd0bf9bf3c7ec76082fb536ee1503ae2579a956a05027604b508f2a87c47c4c09750b65e3dd67dc728511f8b3efa18a4cfb3c5bc71cba9a1bb54c1baf179ebdc0d0c272cd0b266f213b415da419733e1f64822cea2fd742906924730cd8bbffba574a6fd7e1178606b3d08468cccce3b3ae6c534e1058f97e34b8a55ab78706e4b8ea0e71ecf8402436a247c4530fcd8b977648e84ecf44ed05a8e16e0e3106bf91ec77fe10ba761443d92960c0ccec97d9ba90a61ef3bdd3c13980889837a61ad50297a7f3ea29d2a926"}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x84) 1.528289936s ago: executing program 3 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000640)) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000025751b98ba1c933c4979f5f988d2bb724e9433fb4fbd47f404dbf62f90522b1f2e5b0a63f3f76497d77bd83c369bd9f82fe3c1340744747d9b53283ebe2ff7a1c705c02522c7eaefc68aadec4c9800e93ae1c20fe46602217cd76dcb754e2d1296096599c8e65de5028b33db9c1ae790100619a3a49fe58a35f2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f0000000300)="88c3d37eb61215d82ab0cb4a1d248b204e502a62280fce76f7e16df2c09a3dc2e0543de02f2d08c9ea355a918f8f4b861ccd4f76b977251ff8ed1a2e442e0499ab17e540987f2de936c0d6f8ad04e0b658e29e5785dc373f8a6276d9ea71ed7d3f263159494723c28a0497a232a8a9a37269391ebf110d3788e51231916ef61e25502161f2a4da221aa1b5a879182c348072f4bab35d15e364a32506147f2738d2bfc3e265", &(0x7f00000000c0)=@udp=r5, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001d0001002abd7000fddbdf0000000000", @ANYRES32=r1, @ANYBLOB="00000d0614000100fc02000000000000000000000000000108000b000800000005000c00030000000a000100bbbbbbbbbbbb000005000c000d000000"], 0x54}}, 0x0) 1.459874105s ago: executing program 2 (id=1916): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xffffffff) (async) listen(r0, 0xffffffff) recvmmsg(r0, &(0x7f0000005980)=[{{&(0x7f0000000140), 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000200)=""/255, 0xff}], 0x2, &(0x7f0000000380)=""/232, 0xe8}, 0xa73}, {{&(0x7f0000000480)=@l2, 0x80, &(0x7f0000001680)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f00000015c0)=""/192, 0xc0}], 0x3, &(0x7f00000016c0)=""/215, 0xd7}, 0x9}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000017c0)=""/75, 0x4b}, {&(0x7f0000001840)=""/20, 0x14}, {&(0x7f0000001880)=""/28, 0x1c}, {&(0x7f00000018c0)=""/214, 0xd6}, {&(0x7f00000019c0)=""/243, 0xf3}], 0x5, &(0x7f0000001b40)=""/165, 0xa5}, 0x1ff}, {{&(0x7f0000001c00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001c80)=""/240, 0xf0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/155, 0x9b}, {&(0x7f0000003e40)=""/97, 0x61}, {&(0x7f0000003ec0)=""/41, 0x29}], 0x6, &(0x7f0000003f80)=""/115, 0x73}, 0x9}, {{&(0x7f0000004000)=@pppoe, 0x80, &(0x7f0000004240)=[{&(0x7f0000004080)=""/139, 0x8b}, {&(0x7f0000004140)=""/63, 0x3f}, {&(0x7f0000004180)=""/145, 0x91}], 0x3, &(0x7f0000004280)=""/234, 0xea}, 0x9}, {{&(0x7f0000004380)=@ax25={{0x3, @default}, [@netrom, @bcast, @remote, @rose, @remote, @default, @default, @rose]}, 0x80, &(0x7f0000005580)=[{&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/180, 0xb4}, {&(0x7f00000054c0)=""/129, 0x81}], 0x3, &(0x7f00000055c0)=""/195, 0xc3}, 0xf493}, {{&(0x7f00000056c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005740)=""/117, 0x75}, {&(0x7f00000057c0)=""/248, 0xf8}], 0x2, &(0x7f0000005900)=""/66, 0x42}, 0xf}], 0x7, 0x1, &(0x7f0000005b40)={0x77359400}) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xfe61}}], 0x2, 0xc88c4) 1.45959407s ago: executing program 0 (id=1917): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x7a, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="5597dc6a8564"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x2, 0x80000000, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x1764c23d4f1b34d8, 0x3, 0xa4d}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xc, 0x6, 0x6, 0x20, 0x1ff, 0x8]}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4810) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) 1.378069822s ago: executing program 4 (id=1918): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100002019500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x68}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xb3486000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async, rerun: 64) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="9610dabc9faf3e977f158162eb949442935bc4535e3e7e8517b802e00b2967e075d527f2330a55a0a097a764ee313ab141e5b4032792e7196eed8f5ef9b9053f2fbcd02ce382b769e4ecac3b073e353cfc44e907393c5d3bd7d8791bb91282f6a80253018daccac7732625524167df0395de", 0x72}], 0x1, &(0x7f0000000440)}}], 0x1, 0x4048894) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002I\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000180)}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000500)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f39}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) (async) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) (async, rerun: 32) close(0x3) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1.356700851s ago: executing program 0 (id=1919): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r1, 0xac9d4000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x32) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.335102787s ago: executing program 3 (id=1920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x8010) r2 = accept(r1, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1.278204782s ago: executing program 5 (id=1921): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$inet6_buf(r1, 0x29, 0x4, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x6, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x2, 0x54, 0x0, @local, @private=0xa010100}}}}) sendmsg$nl_route(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x1, 0x6, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000140)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x1, @random="3fc270e99682", 'ip6_vti0\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}, 0x0) 1.066519819s ago: executing program 5 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x4a8b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x40000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', r5, 0x80, 0x40, 0xb, 0xf7ff, {{0xa, 0x4, 0x1, 0x31, 0x28, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast1, @local, {[@end, @cipso={0x86, 0x10, 0x1, [{0x2, 0xa, "b0965abecb306491"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0xd8, 0xbd, 0x2, 0x8, @loopback, @loopback, 0x700, 0x1, 0xa, 0xfffffc01}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_DELMDB={0x58, 0x55, 0x8, 0x70bd25, 0x25dfdbfb, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x4001) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4000804) sendmmsg(r9, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x110, 0x2}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 854.465591ms ago: executing program 0 (id=1923): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="a98ed6e3408b7b6c288cd5fa84172ebd063cc54b53f3650e02d77f4dc8b823cd744421a1e126626f455023b2cacc2e0675e3f1317a8a892e9fe54f400f15a6fd4fa1675f57912e6c07114538547e83ca8cd03a8b06b8f93de78b020d89da90a4c3b5303a", @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000600)="0d759ce4dbaeecbb6f045fe9a63d", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6ef22ada003c3afffc010000000000000000000000000001fe8000000000000000000000000000aa03019078010000000000000000000001000000000000000000000000000000002b2888be413cf7a9c75964b900"/114], 0x0) 733.905235ms ago: executing program 0 (id=1924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="4809f8ad0cf8c29c95ae15a5acb552666c5f3a6ae85430bf191604c062b523588c3c013a3e29c9463a239688a1b1dbe96e2b63d097b37b32763e705f1d4d5f088e56175941d47ed1c0589527819917d20ca80fa5907ce1b0eaee04e65ff30aa3eca5ea20", @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x38}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4000000, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) (async, rerun: 32) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000056000000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="2c385aa3d49106dc6626c892b6bc436a88f85ba3bebc3c3a12763def993af296838db80f65bd5887fda37d5470d56b3f1743ac1c7f5c5959568560d4697350", 0x3f) (async, rerun: 64) accept4(r5, 0x0, 0x0, 0x80000) (async, rerun: 64) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000c40)="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", 0x427}, {&(0x7f0000000380)="3c8ca6e2b508e02021562b5a6ed6d4ae4cb3b6e5f44b21250e0d3e9756893ba770a233", 0x23}], 0x2, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x38}, 0x4) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ff09ffb702000000000000b74f8f1943ebc7fa776a2ac61b45ac", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r8, 0x0, 0x9}, 0x18) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5c}}, 0x0) (async) r10 = socket(0x0, 0x80006, 0x5af) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (rerun: 32) 731.668142ms ago: executing program 4 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10004) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x1, 0x3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x5, 0x4) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x4003fc, 0x3, 0x5, 0xffffffff}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000001200), 0x0, 0x20000004) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x8, 0x400000, 0xfffffffe, {{}, {}, {0x8}}}, 0x24}}, 0x20040001) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x4, 0x6, 0x2, 0x3, 0x3, 0x2, 0x2}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4004880) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @mcast1, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 654.263185ms ago: executing program 5 (id=1926): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff014}]}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 569.292939ms ago: executing program 0 (id=1927): pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1801000021000000000000004bc3de8584c1311d00a700000008000000951483b90e44cef9a3b58ff3fc3df4d358e9c881bf55dd9513cc35d2418222fcfa222404760d4e976485801d16115f0d30e3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"/264], 0x44}, 0x1, 0x0, 0x0, 0x88d3}, 0x4080) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r8, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r12}]}}}]}, 0x40}}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r13, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) getsockopt$inet6_opts(r13, 0x29, 0x37, 0x0, &(0x7f00000002c0)=0x50) sendto$packet(r9, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x4, 0x6, @local}, 0x14) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@delchain={0x44, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xf, 0xffff}, {0x0, 0x9}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) 517.997055ms ago: executing program 2 (id=1928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x80, 0x7800, 0xffffafb7, 0x3, {{0x18, 0x4, 0x2, 0xb, 0x60, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, {[@ssrr={0x89, 0x1f, 0x78, [@remote, @rand_addr=0x64010101, @loopback, @private=0xa010102, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp={0x44, 0x8, 0x7, 0x0, 0x7, [0xb]}, @ssrr={0x89, 0xb, 0x27, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x7e, 0x0, 0x6, [0x5]}, @ssrr={0x89, 0xf, 0x8f, [@remote, @local, @multicast2]}]}}}}}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x10, 0x0, 0xfe, 0xb, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x1, 0x1, 0xb40, 0x202, r4, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000280), &(0x7f0000000340)='%ps \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x13, 0x20090, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x5}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x9, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000540)=@raw=[@tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_fd={0x18, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}], &(0x7f00000005c0)='GPL\x00', 0x1, 0x5f, &(0x7f0000000600)=""/95, 0x40f00, 0x21, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x8, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r5, r6, r7, r8, r9, 0xffffffffffffffff, r10, r11, r12, r13], &(0x7f0000000bc0)=[{0x2, 0x1, 0x5, 0x1}, {0x0, 0x4, 0x10, 0x9}, {0x5, 0x4, 0x4, 0xc}], 0x10, 0xcf4}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r16}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r1}, 0x18) r17 = socket(0x10, 0x2, 0x0) write(r17, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) ioctl$SIOCAX25ADDFWD(r17, 0x89ea, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) recvmmsg(r17, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 517.51715ms ago: executing program 5 (id=1929): ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0x6}) r0 = socket$key(0xf, 0x3, 0x2) ioctl$FITHAW(r0, 0xc0045878) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x44, 0x29, 0x2, 0xf, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0xa, 0xa}, {0xd}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x40804}, 0x4010) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000180)=0xb, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x200, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x1ec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xad0b}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xc8, 0xc, "c7c991bfdf6934191607b014a236e7034e7ff86d78532fb4ca0976cca5bf27a93cc2ef92922d93b5e6432380bcff52ca3c9ff461ad09b67f63faf52fed78681caf5a24d91f1049fff9aafad7a5318b4c4e3f07d6c7f3027bebe186a155074ba15a4646377a6d43cf8eddecc5cb02c019af70e9753cefda3d7241eccdc6040c1246635d785c726a978aa3b7dfd0453e84b0ebb48420aa5a7fe477dbe1a3dc49a46c5c81027a4e9d23d26505100a3e33c19b7e76bb137c9b68312a7b3fa62b61487ebcc06c"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x374}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000008c0)={0x2, 0xffffffffffff8bd3, 0xa7, &(0x7f0000000800)=""/167}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) getsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000940)=""/4096, &(0x7f0000001940)=0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001980)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000001a00)=0x40, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001b40)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001b80)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x4, 0x4e23, 0x6b, 0x2, 0xa0, 0x10, 0x73, 0x0, r3}, {0x9, 0x8000000000000000, 0x1, 0x7, 0x5, 0xfffffffffffffffa, 0x6, 0x7}, {0x7, 0xffffffffffff0000, 0x34a1, 0x4}, 0x8, 0x6e6bb9, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x2, 0x3a, 0x5, 0x6}}, 0xe8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) recvfrom$unix(r1, &(0x7f0000001d00)=""/84, 0x54, 0x4022, &(0x7f0000001d80)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@newtaction={0x54, 0x30, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{0x40, 0x1, [@m_bpf={0x3c, 0x1c, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5, 0x6, '4'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4006}, 0x48000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001f40)={0x0, 0x4}, &(0x7f0000001f80)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001fc0)={r4, @in={{0x2, 0x4e23, @remote}}}, 0x84) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000002080)=0xf3, &(0x7f00000020c0)=0x4) r5 = accept4$x25(r1, &(0x7f0000002100), &(0x7f0000002140)=0x12, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000002180)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000e, 0x12, r0, 0xe4e6b000) syz_genetlink_get_family_id$ipvs(&(0x7f00000021c0), r0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000002200)={0xffffffffffffffff, 0x9, 0xa100000, 0x20}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002280), r1) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0xb8, r7, 0x100, 0x70bd27, 0xfff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd516}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x832}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8335}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8040000}, 0x4000000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002400)) 379.739742ms ago: executing program 4 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780180001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x101, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@private, @remote, 0x0}, &(0x7f0000000340)=0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1, {[@ssrr={0x89, 0x3, 0xfe}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xffff, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}, 0x42) sendmsg$nl_route(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getaddr={0x68, 0x16, 0x200, 0x70bd27, 0x25dfdbfb, {0xa, 0x3f, 0xa, 0xfe, r8}, [@IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80}, @IFA_FLAGS={0x8, 0x8, 0x12}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 367.460038ms ago: executing program 5 (id=1931): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048060}], 0x1, 0x40048b0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xfd, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000018dc175b0988dc03c103534892acf8940665299fa5a962225dc12025c06e3fd1dba7893158444654ad03db5de97e2b0c13a48b8a3eb68c9362102522cbd60bb42f2334d6b30475"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28996798c8bea1b676c74a75000000", @ANYRES16=r9, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280), 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r4], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x96, &(0x7f00000015c0)=""/150, 0x40f00}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200d90417010c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280040001"], 0x138}}, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000002280)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@srh={0x0, 0x4, 0x4, 0x2, 0x80, 0x38, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1]}]}}}}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r11, 0x4004662b, &(0x7f0000000080)=0x3) 174.213468ms ago: executing program 3 (id=1932): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x78, 0x25, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x4, 0x5}, {0x6, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000000}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044844}, 0x4000080) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @local}, &(0x7f0000000200)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x200000000000025b, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x0, r1}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e26, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)}, 0x240448c4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRESHEX=r4, @ANYRES32, @ANYRESHEX, @ANYRES64=r4, @ANYBLOB="ec45afccd4d21d6ba587dae68869471003a7773e682ac7db688b266fb35090f0bb9e8a948a8e72b6131e4cc4156788fc128458707cdaa9de7ec0580b9277db710c180e29ab23417ff295364f338788b0c0ec"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x5}, 0x8) 0s ago: executing program 2 (id=1933): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x74, 0x1c, 0x222, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0xd, 0x1, 0x8}, [@NDA_NH_ID={0x8, 0xd, 0x77}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_VNI={0x8, 0x7, 0x8}, @NDA_MASTER={0x8, 0x9, 0x7}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NDA_DST_MAC={0xa}, @NDA_FLAGS_EXT={0x8}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_PROTOCOL={0x5, 0xc, 0x5}]}, 0x74}}, 0x20000004) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): abling bearer [ 123.692521][ T7897] __nla_validate_parse: 3 callbacks suppressed [ 123.692540][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 123.761875][ T7893] tipc: Enabled bearer , priority 0 [ 123.827798][ T7893] syzkaller0: entered promiscuous mode [ 123.833303][ T7893] syzkaller0: entered allmulticast mode [ 123.839577][ T7893] tipc: Resetting bearer [ 123.952682][ T7892] tipc: Resetting bearer [ 124.799755][ T5960] tipc: Node number set to 4278255617 [ 125.376353][ T7892] tipc: Disabling bearer [ 125.575938][ T7923] FAULT_INJECTION: forcing a failure. [ 125.575938][ T7923] name failslab, interval 1, probability 0, space 0, times 1 [ 125.610999][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT(full) [ 125.611023][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.611033][ T7923] Call Trace: [ 125.611040][ T7923] [ 125.611048][ T7923] dump_stack_lvl+0x189/0x250 [ 125.611070][ T7923] ? __pfx____ratelimit+0x10/0x10 [ 125.611088][ T7923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.611106][ T7923] ? __pfx__printk+0x10/0x10 [ 125.611132][ T7923] ? __pfx___might_resched+0x10/0x10 [ 125.611146][ T7923] ? fs_reclaim_acquire+0x7d/0x100 [ 125.611165][ T7923] should_fail_ex+0x414/0x560 [ 125.611188][ T7923] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.611202][ T7923] should_failslab+0xa8/0x100 [ 125.611224][ T7923] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.611237][ T7923] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 125.611258][ T7923] ? sock_alloc_inode+0x28/0xc0 [ 125.611276][ T7923] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.611291][ T7923] sock_alloc_inode+0x28/0xc0 [ 125.611305][ T7923] alloc_inode+0x6a/0x1b0 [ 125.611328][ T7923] __sock_create+0x12d/0x9f0 [ 125.611343][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611373][ T7923] mptcp_subflow_create_socket+0xf0/0x7d0 [ 125.611396][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611420][ T7923] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 125.611448][ T7923] __mptcp_nmpc_sk+0x148/0x760 [ 125.611468][ T7923] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.611485][ T7923] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 125.611515][ T7923] mptcp_getsockopt+0xe7a/0x1be0 [ 125.611547][ T7923] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 125.611565][ T7923] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 125.611586][ T7923] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 125.611617][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611644][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611677][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611714][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611750][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611782][ T7923] ? __might_fault+0xb0/0x130 [ 125.611806][ T7923] ? _parse_integer_limit+0x1ae/0x1f0 [ 125.611825][ T7923] ? aa_label_sk_perm+0x4cd/0x630 [ 125.611852][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611874][ T7923] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 125.611934][ T7923] ? __lock_acquire+0xab9/0xd20 [ 125.611967][ T7923] ? __might_fault+0xb0/0x130 [ 125.612003][ T7923] ? sock_common_getsockopt+0x2d/0xb0 [ 125.612020][ T7923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 125.612040][ T7923] do_sock_getsockopt+0x36f/0x450 [ 125.612064][ T7923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 125.612084][ T7923] ? write_ibpb+0x30/0x40 [ 125.612101][ T7923] ? __fget_files+0x3a0/0x420 [ 125.612115][ T7923] ? __fget_files+0x2a/0x420 [ 125.612137][ T7923] __x64_sys_getsockopt+0x1a5/0x250 [ 125.612157][ T7923] ? write_ibpb+0x30/0x40 [ 125.612175][ T7923] ? write_ibpb+0x30/0x40 [ 125.612196][ T7923] do_syscall_64+0xfa/0x3b0 [ 125.612213][ T7923] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.612230][ T7923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.612246][ T7923] ? clear_bhb_loop+0x60/0xb0 [ 125.612267][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.612283][ T7923] RIP: 0033:0x7f7be2d8eec9 [ 125.612298][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.612311][ T7923] RSP: 002b:00007f7be3bb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 125.612330][ T7923] RAX: ffffffffffffffda RBX: 00007f7be2fe5fa0 RCX: 00007f7be2d8eec9 [ 125.612342][ T7923] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 125.612352][ T7923] RBP: 00007f7be3bb1090 R08: 00002000000000c0 R09: 0000000000000000 [ 125.612363][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.612373][ T7923] R13: 00007f7be2fe6038 R14: 00007f7be2fe5fa0 R15: 00007ffce6272538 [ 125.612402][ T7923] [ 125.612412][ T7923] socket: no more sockets [ 125.791273][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 126.028636][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 126.249998][ T7953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.428'. [ 126.286745][ T7953] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 126.323668][ T7958] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 126.347103][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 126.348404][ T7958] netlink: 'syz.2.430': attribute type 2 has an invalid length. [ 126.365776][ T7953] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 126.383280][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 126.521549][ T30] audit: type=1107 audit(1758561383.018:2): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°{©úmuëû]ÆРKN×' [ 126.605447][ T7970] FAULT_INJECTION: forcing a failure. [ 126.605447][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 126.681024][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) [ 126.681047][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.681056][ T7970] Call Trace: [ 126.681063][ T7970] [ 126.681070][ T7970] dump_stack_lvl+0x189/0x250 [ 126.681094][ T7970] ? __pfx____ratelimit+0x10/0x10 [ 126.681113][ T7970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.681131][ T7970] ? __pfx__printk+0x10/0x10 [ 126.681156][ T7970] ? __pfx___might_resched+0x10/0x10 [ 126.681170][ T7970] ? fs_reclaim_acquire+0x7d/0x100 [ 126.681189][ T7970] should_fail_ex+0x414/0x560 [ 126.681214][ T7970] should_failslab+0xa8/0x100 [ 126.681237][ T7970] kmem_cache_alloc_noprof+0x73/0x3c0 [ 126.681257][ T7970] ? security_inode_alloc+0x39/0x330 [ 126.681279][ T7970] security_inode_alloc+0x39/0x330 [ 126.681297][ T7970] inode_init_always_gfp+0x9ed/0xdc0 [ 126.681324][ T7970] ? __pfx_sock_alloc_inode+0x10/0x10 [ 126.681357][ T7970] alloc_inode+0x82/0x1b0 [ 126.681377][ T7970] __sock_create+0x12d/0x9f0 [ 126.681393][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681421][ T7970] mptcp_subflow_create_socket+0xf0/0x7d0 [ 126.681441][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681464][ T7970] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 126.681501][ T7970] __mptcp_nmpc_sk+0x148/0x760 [ 126.681522][ T7970] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.681538][ T7970] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 126.681568][ T7970] mptcp_getsockopt+0xe7a/0x1be0 [ 126.681600][ T7970] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 126.681618][ T7970] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 126.681640][ T7970] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 126.681675][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681700][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681731][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681768][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681803][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681835][ T7970] ? __might_fault+0xb0/0x130 [ 126.681857][ T7970] ? _parse_integer_limit+0x1ae/0x1f0 [ 126.681876][ T7970] ? aa_label_sk_perm+0x4cd/0x630 [ 126.681902][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.681926][ T7970] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 126.681976][ T7970] ? __lock_acquire+0xab9/0xd20 [ 126.682004][ T7970] ? __might_fault+0xb0/0x130 [ 126.682039][ T7970] ? sock_common_getsockopt+0x2d/0xb0 [ 126.682054][ T7970] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 126.682074][ T7970] do_sock_getsockopt+0x36f/0x450 [ 126.682097][ T7970] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 126.682115][ T7970] ? write_ibpb+0x30/0x40 [ 126.682132][ T7970] ? __fget_files+0x3a0/0x420 [ 126.682145][ T7970] ? __fget_files+0x2a/0x420 [ 126.682167][ T7970] __x64_sys_getsockopt+0x1a5/0x250 [ 126.682185][ T7970] ? write_ibpb+0x30/0x40 [ 126.682201][ T7970] ? write_ibpb+0x30/0x40 [ 126.682220][ T7970] do_syscall_64+0xfa/0x3b0 [ 126.682236][ T7970] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.682253][ T7970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.682270][ T7970] ? clear_bhb_loop+0x60/0xb0 [ 126.682289][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.682303][ T7970] RIP: 0033:0x7fb20b58eec9 [ 126.682319][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.682330][ T7970] RSP: 002b:00007fb20c377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 126.682348][ T7970] RAX: ffffffffffffffda RBX: 00007fb20b7e5fa0 RCX: 00007fb20b58eec9 [ 126.682361][ T7970] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 126.682370][ T7970] RBP: 00007fb20c377090 R08: 00002000000000c0 R09: 0000000000000000 [ 126.682381][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.682391][ T7970] R13: 00007fb20b7e6038 R14: 00007fb20b7e5fa0 R15: 00007fff44bb2b68 [ 126.682419][ T7970] [ 126.682634][ T7970] socket: no more sockets [ 127.071393][ T7971] "syz.3.434" (7971) uses obsolete ecb(arc4) skcipher [ 127.411134][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.419572][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.508289][ T7965] batman_adv: batadv0: Interface deactivated: dummy0 [ 127.657862][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.679281][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.819963][ T7975] geneve4: entered promiscuous mode [ 127.826463][ T7975] geneve4: entered allmulticast mode [ 127.859188][ T8000] wireguard0: entered promiscuous mode [ 127.865649][ T8000] wireguard0: entered allmulticast mode [ 127.899296][ T8007] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 127.992801][ T1151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.003474][ T1151] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 128.100600][ T1151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.118738][ T1151] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 128.276815][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.0.447'. [ 129.382142][ T1151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.391551][ T1151] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.401845][ T1151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.411378][ T1151] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.551557][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 129.570277][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 129.581508][ T8059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.448'. [ 129.597719][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'. [ 129.607194][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 129.832723][ T8071] can: request_module (can-proto-5) failed. [ 129.850867][ T8076] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 129.858737][ T8076] netlink: 224 bytes leftover after parsing attributes in process `syz.4.452'. [ 129.979412][ T8082] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 130.065655][ T8086] bridge_slave_0: left allmulticast mode [ 130.071329][ T8086] bridge_slave_0: left promiscuous mode [ 130.078769][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.100911][ T8086] bridge_slave_1: left allmulticast mode [ 130.125827][ T8086] bridge_slave_1: left promiscuous mode [ 130.132032][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.152166][ T8086] bond0: (slave bond_slave_0): Releasing backup interface [ 130.204451][ T8086] bond0: (slave bond_slave_1): Releasing backup interface [ 130.248292][ T8086] team0: Port device team_slave_0 removed [ 130.268175][ T8086] team0: Port device team_slave_1 removed [ 130.289142][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.311816][ T8086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.336096][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.343919][ T8086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.361143][ T8086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.537639][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 130.549335][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 131.438582][ T8146] sctp: [Deprecated]: syz.0.466 (pid 8146) Use of int in max_burst socket option deprecated. [ 131.438582][ T8146] Use struct sctp_assoc_value instead [ 131.569498][ T8154] FAULT_INJECTION: forcing a failure. [ 131.569498][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 131.640821][ T8159] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 131.649340][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.1.469 Not tainted syzkaller #0 PREEMPT(full) [ 131.649363][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.649373][ T8154] Call Trace: [ 131.649381][ T8154] [ 131.649388][ T8154] dump_stack_lvl+0x189/0x250 [ 131.649412][ T8154] ? __pfx____ratelimit+0x10/0x10 [ 131.649431][ T8154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.649450][ T8154] ? __pfx__printk+0x10/0x10 [ 131.649477][ T8154] ? __pfx___might_resched+0x10/0x10 [ 131.649497][ T8154] should_fail_ex+0x414/0x560 [ 131.649521][ T8154] should_failslab+0xa8/0x100 [ 131.649544][ T8154] __kmalloc_cache_noprof+0x70/0x3d0 [ 131.649566][ T8154] ? subflow_ulp_init+0xd0/0x5c0 [ 131.649592][ T8154] subflow_ulp_init+0xd0/0x5c0 [ 131.649612][ T8154] ? tcp_set_ulp+0xb1/0x5f0 [ 131.649634][ T8154] tcp_set_ulp+0x539/0x5f0 [ 131.649656][ T8154] mptcp_subflow_create_socket+0x348/0x7d0 [ 131.649684][ T8154] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 131.649716][ T8154] __mptcp_nmpc_sk+0x148/0x760 [ 131.649738][ T8154] ? __local_bh_enable_ip+0x12d/0x1c0 [ 131.649755][ T8154] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 131.649787][ T8154] mptcp_getsockopt+0xe7a/0x1be0 [ 131.649819][ T8154] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 131.649837][ T8154] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 131.649859][ T8154] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 131.649894][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.649922][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.649955][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.649994][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.650029][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.650059][ T8154] ? __might_fault+0xb0/0x130 [ 131.650079][ T8154] ? _parse_integer_limit+0x1ae/0x1f0 [ 131.650099][ T8154] ? aa_label_sk_perm+0x4cd/0x630 [ 131.650126][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.650148][ T8154] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 131.650200][ T8154] ? __lock_acquire+0xab9/0xd20 [ 131.650233][ T8154] ? __might_fault+0xb0/0x130 [ 131.650272][ T8154] ? sock_common_getsockopt+0x2d/0xb0 [ 131.650290][ T8154] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 131.650318][ T8154] do_sock_getsockopt+0x36f/0x450 [ 131.650341][ T8154] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 131.650359][ T8154] ? write_ibpb+0x30/0x40 [ 131.650374][ T8154] ? __fget_files+0x3a0/0x420 [ 131.650388][ T8154] ? __fget_files+0x2a/0x420 [ 131.650409][ T8154] __x64_sys_getsockopt+0x1a5/0x250 [ 131.650428][ T8154] ? write_ibpb+0x30/0x40 [ 131.650446][ T8154] ? write_ibpb+0x30/0x40 [ 131.650467][ T8154] do_syscall_64+0xfa/0x3b0 [ 131.650482][ T8154] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.650499][ T8154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.650515][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 131.650534][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.650550][ T8154] RIP: 0033:0x7fb20b58eec9 [ 131.650567][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.650580][ T8154] RSP: 002b:00007fb20c377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 131.650597][ T8154] RAX: ffffffffffffffda RBX: 00007fb20b7e5fa0 RCX: 00007fb20b58eec9 [ 131.650610][ T8154] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 131.650620][ T8154] RBP: 00007fb20c377090 R08: 00002000000000c0 R09: 0000000000000000 [ 131.650631][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.650641][ T8154] R13: 00007fb20b7e6038 R14: 00007fb20b7e5fa0 R15: 00007fff44bb2b68 [ 131.650667][ T8154] [ 131.653713][ T8159] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 132.259641][ T8180] tipc: Enabling of bearer rejected, failed to enable media [ 132.271440][ T8180] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 132.279360][ T8180] netlink: 224 bytes leftover after parsing attributes in process `syz.2.473'. [ 132.354764][ T8190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.477'. [ 132.378565][ T8159] vlan2: entered allmulticast mode [ 132.396600][ T8159] veth1: entered allmulticast mode [ 132.437342][ T8190] netlink: 'syz.1.477': attribute type 12 has an invalid length. [ 132.645864][ T8206] tipc: Enabled bearer , priority 10 [ 132.788454][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.008692][ T8236] netlink: 'syz.2.489': attribute type 7 has an invalid length. [ 133.062301][ T8238] syzkaller0: entered promiscuous mode [ 133.068250][ T8238] syzkaller0: entered allmulticast mode [ 133.774889][ T8022] tipc: Node number set to 2200182606 [ 134.514533][ T8254] bridge0: port 3(batadv0) entered disabled state [ 134.550652][ T8254] bridge_slave_1: left allmulticast mode [ 134.557671][ T8254] bridge_slave_1: left promiscuous mode [ 134.564033][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.576717][ T8254] bridge_slave_0: left allmulticast mode [ 134.582628][ T8254] bridge_slave_0: left promiscuous mode [ 134.588740][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.895940][ T8282] IPv6: NLM_F_REPLACE set, but no existing node found! [ 135.430267][ T8300] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.463049][ T8300] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.652719][ T8302] FAULT_INJECTION: forcing a failure. [ 135.652719][ T8302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.670622][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.1.507 Not tainted syzkaller #0 PREEMPT(full) [ 135.670648][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.670658][ T8302] Call Trace: [ 135.670665][ T8302] [ 135.670673][ T8302] dump_stack_lvl+0x189/0x250 [ 135.670697][ T8302] ? __pfx____ratelimit+0x10/0x10 [ 135.670715][ T8302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.670734][ T8302] ? __pfx__printk+0x10/0x10 [ 135.670766][ T8302] should_fail_ex+0x414/0x560 [ 135.670790][ T8302] ? __pfx_dctcp_get_info+0x10/0x10 [ 135.670810][ T8302] _copy_to_user+0x31/0xb0 [ 135.670831][ T8302] ? __pfx_dctcp_get_info+0x10/0x10 [ 135.670848][ T8302] copy_to_sockptr+0x5e/0xa0 [ 135.670870][ T8302] do_tcp_getsockopt+0x1bef/0x2680 [ 135.670901][ T8302] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 135.670929][ T8302] ? call_rcu+0x6ff/0x9c0 [ 135.670946][ T8302] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.670981][ T8302] ? fsnotify_grab_connector+0x42/0x240 [ 135.671004][ T8302] ? __pfx_call_rcu+0x10/0x10 [ 135.671020][ T8302] ? fsnotify_destroy_marks+0x81/0x330 [ 135.671041][ T8302] ? locks_free_lock_context+0x42/0x70 [ 135.671059][ T8302] ? __destroy_inode+0x487/0x670 [ 135.671079][ T8302] ? _raw_spin_unlock_irq+0x2e/0x50 [ 135.671100][ T8302] ? evict+0x847/0x9c0 [ 135.671129][ T8302] ? __pfx_evict+0x10/0x10 [ 135.671146][ T8302] ? do_raw_spin_unlock+0x122/0x240 [ 135.671169][ T8302] ? _raw_spin_unlock+0x28/0x50 [ 135.671190][ T8302] ? iput+0x6d8/0x9d0 [ 135.671214][ T8302] ? __mptcp_nmpc_sk+0x5da/0x760 [ 135.671241][ T8302] tcp_getsockopt+0x83/0x130 [ 135.671270][ T8302] mptcp_getsockopt+0xeac/0x1be0 [ 135.671306][ T8302] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 135.671324][ T8302] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 135.671347][ T8302] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 135.671381][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671407][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671440][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671480][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671516][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671549][ T8302] ? __might_fault+0xb0/0x130 [ 135.671573][ T8302] ? _parse_integer_limit+0x1ae/0x1f0 [ 135.671592][ T8302] ? aa_label_sk_perm+0x4cd/0x630 [ 135.671619][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671643][ T8302] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 135.671697][ T8302] ? __lock_acquire+0xab9/0xd20 [ 135.671729][ T8302] ? __might_fault+0xb0/0x130 [ 135.671767][ T8302] ? sock_common_getsockopt+0x2d/0xb0 [ 135.671784][ T8302] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 135.671804][ T8302] do_sock_getsockopt+0x36f/0x450 [ 135.671828][ T8302] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 135.671847][ T8302] ? write_ibpb+0x30/0x40 [ 135.671864][ T8302] ? __fget_files+0x3a0/0x420 [ 135.671878][ T8302] ? __fget_files+0x2a/0x420 [ 135.671902][ T8302] __x64_sys_getsockopt+0x1a5/0x250 [ 135.671921][ T8302] ? write_ibpb+0x30/0x40 [ 135.671940][ T8302] ? write_ibpb+0x30/0x40 [ 135.671968][ T8302] do_syscall_64+0xfa/0x3b0 [ 135.671985][ T8302] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.672001][ T8302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.672017][ T8302] ? clear_bhb_loop+0x60/0xb0 [ 135.672038][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.672054][ T8302] RIP: 0033:0x7fb20b58eec9 [ 135.672071][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.672084][ T8302] RSP: 002b:00007fb20c377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 135.672103][ T8302] RAX: ffffffffffffffda RBX: 00007fb20b7e5fa0 RCX: 00007fb20b58eec9 [ 135.672115][ T8302] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 135.672125][ T8302] RBP: 00007fb20c377090 R08: 00002000000000c0 R09: 0000000000000000 [ 135.672137][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.672147][ T8302] R13: 00007fb20b7e6038 R14: 00007fb20b7e5fa0 R15: 00007fff44bb2b68 [ 135.672178][ T8302] [ 136.148817][ T8298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.155271][ T8298] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 136.233245][ T8298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.256693][ T8298] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 136.306348][ T8298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.327566][ T8298] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 136.343467][ T8314] netlink: 'syz.3.510': attribute type 13 has an invalid length. [ 136.378575][ T8298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.403831][ T8314] netlink: 'syz.3.510': attribute type 17 has an invalid length. [ 136.422458][ T8298] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 136.465037][ T8298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.492238][ T8298] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.509808][ T8318] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 136.632500][ T8314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.643366][ T8314] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.657043][ T8314] batman_adv: batadv0: Interface activated: dummy0 [ 136.667668][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.145764][ T8342] __nla_validate_parse: 2 callbacks suppressed [ 137.145781][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 137.398859][ T8346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.444940][ T8346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.467822][ T8352] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 137.491983][ T8352] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 137.824262][ T8373] FAULT_INJECTION: forcing a failure. [ 137.824262][ T8373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.897786][ T8373] CPU: 1 UID: 0 PID: 8373 Comm: syz.1.519 Not tainted syzkaller #0 PREEMPT(full) [ 137.897817][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.897827][ T8373] Call Trace: [ 137.897834][ T8373] [ 137.897841][ T8373] dump_stack_lvl+0x189/0x250 [ 137.897865][ T8373] ? __pfx____ratelimit+0x10/0x10 [ 137.897883][ T8373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.897902][ T8373] ? __pfx__printk+0x10/0x10 [ 137.897934][ T8373] should_fail_ex+0x414/0x560 [ 137.897958][ T8373] ? __pfx_dctcp_get_info+0x10/0x10 [ 137.897977][ T8373] _copy_to_user+0x31/0xb0 [ 137.897997][ T8373] ? __pfx_dctcp_get_info+0x10/0x10 [ 137.898015][ T8373] copy_to_sockptr+0x5e/0xa0 [ 137.898037][ T8373] do_tcp_getsockopt+0x1c62/0x2680 [ 137.898069][ T8373] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 137.898097][ T8373] ? call_rcu+0x6ff/0x9c0 [ 137.898114][ T8373] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.898144][ T8373] ? fsnotify_grab_connector+0x42/0x240 [ 137.898166][ T8373] ? __pfx_call_rcu+0x10/0x10 [ 137.898182][ T8373] ? fsnotify_destroy_marks+0x81/0x330 [ 137.898203][ T8373] ? locks_free_lock_context+0x42/0x70 [ 137.898220][ T8373] ? __destroy_inode+0x487/0x670 [ 137.898239][ T8373] ? _raw_spin_unlock_irq+0x2e/0x50 [ 137.898259][ T8373] ? evict+0x847/0x9c0 [ 137.898285][ T8373] ? __pfx_evict+0x10/0x10 [ 137.898302][ T8373] ? do_raw_spin_unlock+0x122/0x240 [ 137.898326][ T8373] ? _raw_spin_unlock+0x28/0x50 [ 137.898346][ T8373] ? iput+0x6d8/0x9d0 [ 137.898370][ T8373] ? __mptcp_nmpc_sk+0x5da/0x760 [ 137.898397][ T8373] tcp_getsockopt+0x83/0x130 [ 137.898427][ T8373] mptcp_getsockopt+0xeac/0x1be0 [ 137.898459][ T8373] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 137.898479][ T8373] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 137.898502][ T8373] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 137.898539][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898566][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898601][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898641][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898678][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898710][ T8373] ? __might_fault+0xb0/0x130 [ 137.898733][ T8373] ? _parse_integer_limit+0x1ae/0x1f0 [ 137.898751][ T8373] ? aa_label_sk_perm+0x4cd/0x630 [ 137.898778][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898808][ T8373] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 137.898866][ T8373] ? __lock_acquire+0xab9/0xd20 [ 137.898898][ T8373] ? __might_fault+0xb0/0x130 [ 137.898937][ T8373] ? sock_common_getsockopt+0x2d/0xb0 [ 137.898954][ T8373] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 137.898974][ T8373] do_sock_getsockopt+0x36f/0x450 [ 137.898998][ T8373] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 137.899017][ T8373] ? write_ibpb+0x30/0x40 [ 137.899032][ T8373] ? __fget_files+0x3a0/0x420 [ 137.899045][ T8373] ? __fget_files+0x2a/0x420 [ 137.899066][ T8373] __x64_sys_getsockopt+0x1a5/0x250 [ 137.899085][ T8373] ? write_ibpb+0x30/0x40 [ 137.899104][ T8373] ? write_ibpb+0x30/0x40 [ 137.899125][ T8373] do_syscall_64+0xfa/0x3b0 [ 137.899142][ T8373] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.899159][ T8373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.899176][ T8373] ? clear_bhb_loop+0x60/0xb0 [ 137.899197][ T8373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.899213][ T8373] RIP: 0033:0x7fb20b58eec9 [ 137.899229][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.899243][ T8373] RSP: 002b:00007fb20c377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 137.899261][ T8373] RAX: ffffffffffffffda RBX: 00007fb20b7e5fa0 RCX: 00007fb20b58eec9 [ 137.899273][ T8373] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 137.899283][ T8373] RBP: 00007fb20c377090 R08: 00002000000000c0 R09: 0000000000000000 [ 137.899293][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.899302][ T8373] R13: 00007fb20b7e6038 R14: 00007fb20b7e5fa0 R15: 00007fff44bb2b68 [ 137.899332][ T8373] [ 138.800968][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 139.060466][ T8387] batman_adv: batadv0: Interface deactivated: dummy0 [ 139.147679][ T8387] batadv0: left promiscuous mode [ 139.165825][ T8387] batadv0: left allmulticast mode [ 139.238863][ T8387] veth3: left promiscuous mode [ 139.256423][ T8387] geneve2: left promiscuous mode [ 139.274918][ T8387] geneve3: left promiscuous mode [ 139.280922][ T8387] geneve4: left promiscuous mode [ 139.296006][ T8387] geneve4: left allmulticast mode [ 139.301584][ T8387] vlan2: left allmulticast mode [ 139.306978][ T8387] veth1: left allmulticast mode [ 139.542997][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 139.853907][ T8428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.530'. [ 139.958617][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 140.027548][ T8428] netlink: 56 bytes leftover after parsing attributes in process `syz.2.530'. [ 140.339249][ T8441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.531'. [ 140.462117][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 140.705232][ T8454] siw: device registration error -23 [ 141.057651][ T8456] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.217204][ T8456] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.311847][ T8456] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.438716][ T8456] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.490195][ T8487] netlink: 'syz.3.541': attribute type 9 has an invalid length. [ 141.798572][ T8497] veth7: entered promiscuous mode [ 142.062923][ T8520] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 142.091005][ T1151] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.118412][ T1151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.187628][ T1151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.278274][ T1038] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.501494][ T8540] __nla_validate_parse: 3 callbacks suppressed [ 142.501511][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 142.633650][ T8557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.640986][ T8557] IPv6: NLM_F_CREATE should be set when creating new route [ 142.648294][ T8557] IPv6: NLM_F_CREATE should be set when creating new route [ 142.655558][ T8557] IPv6: NLM_F_CREATE should be set when creating new route [ 142.765536][ T8565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.801955][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'. [ 143.127159][ T8577] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 143.136911][ T8577] netlink: 216 bytes leftover after parsing attributes in process `syz.3.557'. [ 143.151971][ T8581] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 143.160346][ T8581] netlink: 216 bytes leftover after parsing attributes in process `syz.3.557'. [ 143.677903][ T8598] 8021q: VLANs not supported on ip6_vti0 [ 143.885075][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 143.937490][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 144.607901][ T8649] syz_tun: entered allmulticast mode [ 144.635860][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 144.746410][ T8649] syz_tun (unregistering): left allmulticast mode [ 144.932179][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 145.084454][ T8681] netlink: 'syz.0.581': attribute type 2 has an invalid length. [ 145.134505][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 145.195609][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 145.570083][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.578775][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.860709][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.883399][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.107289][ T1038] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.116960][ T1038] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.169177][ T1038] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.189440][ T1038] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.731679][ T8761] vlan0: entered allmulticast mode [ 147.219654][ T8784] tipc: Enabled bearer , priority 0 [ 147.247211][ T8785] tipc: Enabling of bearer rejected, already enabled [ 147.256692][ T8783] syzkaller0: entered promiscuous mode [ 147.262312][ T8783] syzkaller0: entered allmulticast mode [ 147.356164][ T8783] tipc: Resetting bearer [ 147.409862][ T8789] netlink: 'syz.4.609': attribute type 12 has an invalid length. [ 147.428931][ T8782] tipc: Resetting bearer [ 147.473733][ T8782] tipc: Disabling bearer [ 147.871466][ T8805] vlan2: entered promiscuous mode [ 147.896391][ T8805] macvtap0: entered promiscuous mode [ 147.936084][ T8798] block nbd0: server does not support multiple connections per device. [ 147.971444][ T8798] block nbd0: shutting down sockets [ 148.067884][ T8811] __nla_validate_parse: 7 callbacks suppressed [ 148.067902][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 148.251807][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 148.508726][ T8839] netlink: 228 bytes leftover after parsing attributes in process `syz.1.620'. [ 148.522484][ T8839] netlink: 228 bytes leftover after parsing attributes in process `syz.1.620'. [ 148.627978][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.622'. [ 148.652994][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 148.834426][ T8867] netlink: 'syz.2.627': attribute type 13 has an invalid length. [ 148.838792][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 148.846102][ T8867] netlink: 'syz.2.627': attribute type 27 has an invalid length. [ 149.151436][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 149.245804][ T8896] netlink: 3 bytes leftover after parsing attributes in process `syz.2.635'. [ 149.593339][ T8896] batadv1: entered promiscuous mode [ 149.608892][ T8913] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 149.627407][ T8913] netlink: 172 bytes leftover after parsing attributes in process `syz.1.639'. [ 149.632241][ T8896] batadv1: entered allmulticast mode [ 149.906732][ T8925] xt_l2tp: unknown flags: 51 [ 150.091194][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.103171][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.190957][ T1151] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.206449][ T1151] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.531277][ T8961] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 150.692769][ T8971] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 150.699346][ T8970] netlink: 'syz.3.657': attribute type 5 has an invalid length. [ 150.770670][ T8971] bond3 (unregistering): Released all slaves [ 150.886243][ T8987] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 150.929733][ T8976] sit0: entered promiscuous mode [ 150.945293][ T8976] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 151.157065][ T9002] sctp: [Deprecated]: syz.2.665 (pid 9002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.157065][ T9002] Use struct sctp_sack_info instead [ 152.003634][ T9062] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 152.103004][ T9059] syzkaller0: entered promiscuous mode [ 152.109446][ T9059] syzkaller0: entered allmulticast mode [ 153.452768][ T9085] __nla_validate_parse: 14 callbacks suppressed [ 153.452788][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 153.492634][ T9085] netlink: 84 bytes leftover after parsing attributes in process `syz.0.689'. [ 153.515452][ T30] audit: type=1107 audit(1758561410.008:3): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 153.752938][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 153.786598][ T9103] netlink: 'syz.2.697': attribute type 4 has an invalid length. [ 153.809357][ T9103] netlink: 'syz.2.697': attribute type 4 has an invalid length. [ 153.849284][ T9098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.693'. [ 153.995229][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 154.185882][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 154.462913][ T9144] netlink: 324 bytes leftover after parsing attributes in process `syz.0.703'. [ 154.473619][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.703'. [ 154.546479][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 154.666175][ T9152] syzkaller0: entered promiscuous mode [ 154.714591][ T9152] syzkaller0: entered allmulticast mode [ 154.759099][ T9158] syz_tun: entered allmulticast mode [ 154.844591][ T9156] syz_tun: left allmulticast mode [ 155.041638][ T9170] sit0: entered promiscuous mode [ 155.051651][ T9170] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 155.069747][ T9170] netlink: 1 bytes leftover after parsing attributes in process `syz.3.709'. [ 155.216634][ T9192] tipc: Invalid UDP bearer configuration [ 155.216687][ T9192] tipc: Enabling of bearer rejected, failed to enable media [ 156.523685][ T9264] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 156.532748][ T9264] NCSI netlink: No device for ifindex 813332851 [ 156.832117][ T9281] !: renamed from dummy0 (while UP) [ 156.988341][ T9298] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 157.282505][ T9312] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 159.030307][ T9430] __nla_validate_parse: 9 callbacks suppressed [ 159.030326][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 159.043814][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.769'. [ 159.258136][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 159.276090][ T9452] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 159.434588][ T9467] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 159.553177][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 159.638785][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 159.883598][ T9485] netlink: 'syz.0.785': attribute type 4 has an invalid length. [ 160.346937][ T9513] tipc: Enabling of bearer rejected, failed to enable media [ 160.359940][ T9519] netlink: 68 bytes leftover after parsing attributes in process `syz.0.797'. [ 160.442705][ T9523] netlink: 'syz.3.796': attribute type 3 has an invalid length. [ 160.451335][ T9523] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.796'. [ 160.551637][ T9529] wg1: entered promiscuous mode [ 160.558695][ T9529] wg1: entered allmulticast mode [ 160.579943][ T9530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 160.646710][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 160.729926][ T9534] tipc: Enabled bearer , priority 0 [ 160.757312][ T9534] syzkaller0: entered promiscuous mode [ 160.762820][ T9534] syzkaller0: entered allmulticast mode [ 160.823920][ T9534] tipc: Resetting bearer [ 160.843754][ T9533] tipc: Resetting bearer [ 160.867178][ T9533] tipc: Disabling bearer [ 160.974254][ T30] audit: type=1800 audit(1758561417.468:4): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.801" name="memory.events" dev="tmpfs" ino=792 res=0 errno=0 [ 161.165923][ T9549] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 161.379622][ T9562] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 161.457840][ T9569] IPv6: addrconf: prefix option has invalid lifetime [ 161.802655][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 161.945449][ T9597] netlink: 'syz.0.818': attribute type 21 has an invalid length. [ 162.151032][ T9607] netlink: 'syz.1.820': attribute type 4 has an invalid length. [ 162.306016][ T9619] netlink: 'syz.3.824': attribute type 7 has an invalid length. [ 162.316543][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.325120][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.464432][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.488992][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.724746][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.736611][ T8027] syz1: Port: 1 Link DOWN [ 162.741284][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.769920][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.802485][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.868897][ T9638] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 162.986744][ T9651] netlink: 'syz.1.830': attribute type 13 has an invalid length. [ 163.014090][ T9651] netlink: 'syz.1.830': attribute type 17 has an invalid length. [ 163.109157][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.128867][ T9651] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.150813][ T9651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.170778][ T9653] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.205360][ T9656] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.742797][ T9694] sctp: [Deprecated]: syz.2.840 (pid 9694) Use of int in max_burst socket option. [ 163.742797][ T9694] Use struct sctp_assoc_value instead [ 163.822079][ T9696] tipc: Can't bind to reserved service type 1 [ 164.087965][ T9722] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 164.132776][ T9722] __nla_validate_parse: 14 callbacks suppressed [ 164.132793][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 164.668600][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 164.680877][ T9755] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 164.723174][ T9755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.745439][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.856'. [ 164.950616][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 164.967723][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 165.009703][ T9775] netlink: 'syz.0.861': attribute type 2 has an invalid length. [ 165.021544][ T9762] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.034792][ T9772] netlink: 148 bytes leftover after parsing attributes in process `syz.2.860'. [ 165.044137][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 165.053892][ T9762] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.068162][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 165.086048][ T9762] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.114971][ T9762] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.241986][ T9784] netlink: 100 bytes leftover after parsing attributes in process `syz.0.862'. [ 165.416877][ T9784] IPVS: Scheduler module ip_vs_sip not found [ 165.803972][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.871'. [ 165.978320][ T9824] ..0·: renamed from hsr0 [ 165.987252][ T9824] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.999071][ T9824] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.013591][ T9824] ..0·: entered allmulticast mode [ 166.036417][ T9824] hsr_slave_0: entered allmulticast mode [ 166.050225][ T9824] hsr_slave_1: entered allmulticast mode [ 166.058849][ T9824] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 166.148791][ T9823] nbd0: detected capacity change from 0 to 127 [ 166.197652][ T51] block nbd0: Receive control failed (result -32) [ 166.322959][ T5868] IPVS: starting estimator thread 0... [ 166.331811][ T9834] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 166.358552][ T9834] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.383654][ T5868] IPVS: starting estimator thread 0... [ 166.415643][ T9835] IPVS: using max 31 ests per chain, 74400 per kthread [ 166.494783][ T9842] IPVS: using max 34 ests per chain, 81600 per kthread [ 166.579379][ T9851] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 166.768978][ T9862] netlink: 'syz.2.886': attribute type 13 has an invalid length. [ 166.797732][ T9862] netlink: 'syz.2.886': attribute type 17 has an invalid length. [ 166.809709][ T74] IPVS: stop unused estimator thread 0... [ 166.956844][ T9862] sit0: left promiscuous mode [ 166.967420][ T9873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.013226][ T9862] bridge0: left promiscuous mode [ 167.026377][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.038397][ T9862] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.061815][ T9862] 0ªX¹¦À: left allmulticast mode [ 167.068446][ T9862] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 167.283193][ T9886] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 167.306587][ T9883] batman_adv: batadv0: Removing interface: dummy0 [ 167.347897][ T9890] netlink: 'syz.0.894': attribute type 21 has an invalid length. [ 167.360304][ T9890] netlink: 'syz.0.894': attribute type 21 has an invalid length. [ 167.523704][ T9899] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20000 [ 167.695509][ T9903] block nbd1: server does not support multiple connections per device. [ 167.704948][ T9903] block nbd1: shutting down sockets [ 167.989037][ T9930] netlink: 'syz.2.907': attribute type 13 has an invalid length. [ 167.997798][ T9930] netlink: 'syz.2.907': attribute type 17 has an invalid length. [ 168.004074][ T9931] veth0_to_bond: left allmulticast mode [ 168.012841][ T9931] veth0_to_bond: left promiscuous mode [ 168.023217][ T9931] bridge1: port 2(veth0_to_bond) entered disabled state [ 168.038633][ T9931] bond0: (slave bond_slave_0): Releasing backup interface [ 168.049614][ T9931] bond0: (slave bond_slave_1): Releasing backup interface [ 168.061515][ T9931] team0: Port device team_slave_0 removed [ 168.069969][ T9931] team0: Port device team_slave_1 removed [ 168.077042][ T9931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.085684][ T9931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.095169][ T9931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.117108][ T9930] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.227027][ T9942] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 168.237392][ T9942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.649403][ T9968] netlink: 'syz.0.918': attribute type 21 has an invalid length. [ 168.673409][ T9968] netlink: 'syz.0.918': attribute type 1 has an invalid length. [ 169.121592][ T9975] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 169.129568][ T9975] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 169.147437][ T9975] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 169.197551][ T9759] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.245831][ T9759] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.264357][ T9759] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.284568][ T9759] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.723823][T10012] __nla_validate_parse: 14 callbacks suppressed [ 169.723847][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 169.763728][ T9999] lo: entered allmulticast mode [ 169.769761][ T9999] tunl0: entered allmulticast mode [ 169.775726][ T9999] gre0: entered allmulticast mode [ 169.781459][ T9999] gretap0: entered allmulticast mode [ 169.788195][ T9999] erspan0: entered allmulticast mode [ 169.794387][ T9999] ip_vti0: entered allmulticast mode [ 169.800428][ T9999] ip6_vti0: entered allmulticast mode [ 169.806614][ T9999] sit0: entered allmulticast mode [ 169.815338][ T9999] ip6tnl0: entered allmulticast mode [ 169.823583][ T9999] ip6gre0: entered allmulticast mode [ 169.846631][ T9999] ip6gretap0: entered allmulticast mode [ 169.853096][ T9999] bridge0: entered allmulticast mode [ 169.859982][ T9999] vcan0: entered allmulticast mode [ 169.867218][ T9999] bond0: entered allmulticast mode [ 169.872520][ T9999] bond_slave_0: entered allmulticast mode [ 169.881150][ T9999] bond_slave_1: entered allmulticast mode [ 169.888786][ T9999] team0: entered allmulticast mode [ 169.894087][ T9999] team_slave_0: entered allmulticast mode [ 169.915625][ T9999] team_slave_1: entered allmulticast mode [ 169.948248][ T9999] dummy0: entered allmulticast mode [ 169.963013][ T9999] nlmon0: entered allmulticast mode [ 169.975414][ T9999] 0ªX¹¦À: entered allmulticast mode [ 169.980862][ T9999] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 170.016096][T10026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.076474][T10024] veth0: entered promiscuous mode [ 170.082096][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 170.111180][T10024] veth0 (unregistering): left promiscuous mode [ 170.199270][T10031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.936'. [ 170.292486][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.590885][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 171.479522][T10087] validate_nla: 2 callbacks suppressed [ 171.479540][T10087] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 171.882076][T10097] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.972756][T10100] lo: entered allmulticast mode [ 171.980260][T10100] tunl0: entered allmulticast mode [ 171.993917][T10100] gre0: entered allmulticast mode [ 172.037909][T10100] gretap0: entered allmulticast mode [ 172.106523][T10100] erspan0: entered allmulticast mode [ 172.142993][T10100] ip_vti0: entered allmulticast mode [ 172.155752][T10100] ip6_vti0: entered allmulticast mode [ 172.167428][T10100] sit0: left promiscuous mode [ 172.184782][T10100] sit0: entered allmulticast mode [ 172.200559][T10100] ip6tnl0: entered allmulticast mode [ 172.227288][T10100] ip6gre0: entered allmulticast mode [ 172.239938][T10100] syz_tun: entered allmulticast mode [ 172.257932][T10100] ip6gretap0: entered allmulticast mode [ 172.276961][T10100] bond0: entered allmulticast mode [ 172.283236][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.301538][T10100] team0: entered allmulticast mode [ 172.316157][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.335027][T10100] nlmon0: entered allmulticast mode [ 172.341957][T10100] caif0: entered allmulticast mode [ 172.354868][T10100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.462108][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 172.473674][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 172.487810][T10111] tipc: Invalid UDP bearer configuration [ 172.487868][T10111] tipc: Enabling of bearer rejected, failed to enable media [ 172.496290][T10116] Unsupported ieee802154 address type: 0 [ 172.513001][T10111] netlink: 'syz.1.959': attribute type 12 has an invalid length. [ 172.521283][T10111] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.959'. [ 172.780642][T10130] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 173.020642][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 173.222914][T10157] netlink: 'syz.2.971': attribute type 39 has an invalid length. [ 173.277286][T10162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.971'. [ 173.304787][T10162] netlink: 43 bytes leftover after parsing attributes in process `syz.2.971'. [ 173.322656][T10162] netlink: 'syz.2.971': attribute type 5 has an invalid length. [ 173.368389][T10165] vlan2: entered allmulticast mode [ 174.214486][T10205] netlink: 'syz.0.981': attribute type 6 has an invalid length. [ 175.020939][T10242] gtp0: entered promiscuous mode [ 175.028569][T10242] gtp0: entered allmulticast mode [ 175.108864][T10251] IPv6: Can't replace route, no match found [ 175.393005][T10266] __nla_validate_parse: 3 callbacks suppressed [ 175.393022][T10266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.996'. [ 175.757218][T10285] bridge_slave_0: default FDB implementation only supports local addresses [ 175.826891][T10286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 175.830430][T10293] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 175.838414][T10289] netlink: 'syz.4.1007': attribute type 13 has an invalid length. [ 175.852764][T10289] netlink: 'syz.4.1007': attribute type 17 has an invalid length. [ 175.860707][T10293] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1008'. [ 176.087666][T10289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.210508][T10289] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.242109][T10289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.285228][T10304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1011'. [ 176.498556][T10308] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1013'. [ 176.533986][T10310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.541279][T10310] IPv6: NLM_F_CREATE should be set when creating new route [ 176.548558][T10310] IPv6: NLM_F_CREATE should be set when creating new route [ 176.555817][T10310] IPv6: NLM_F_CREATE should be set when creating new route [ 176.618744][ T30] audit: type=1107 audit(1758561433.118:5): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 176.728692][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 176.738536][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 176.765295][T10322] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 176.796447][T10322] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1017'. [ 177.073146][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'. [ 177.143427][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 177.197318][T10358] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 177.530062][T10383] netlink: 'syz.4.1033': attribute type 12 has an invalid length. [ 177.701157][T10389] tipc: Enabled bearer , priority 18 [ 177.802229][T10400] netlink: 'syz.0.1037': attribute type 11 has an invalid length. [ 177.832058][T10400] netlink: 'syz.0.1037': attribute type 4 has an invalid length. [ 178.597212][T10461] tipc: Enabled bearer , priority 0 [ 178.611175][T10461] syzkaller0: entered promiscuous mode [ 178.630100][T10461] syzkaller0: entered allmulticast mode [ 178.690633][T10465] netlink: 'syz.3.1053': attribute type 4 has an invalid length. [ 179.356084][T10498] tipc: Started in network mode [ 179.407691][T10498] tipc: Node identity cae9942242a8, cluster identity 4711 [ 179.415314][T10498] tipc: Enabled bearer , priority 0 [ 179.492931][T10460] tipc: Resetting bearer [ 179.502252][T10503] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 179.690437][T10460] tipc: Disabling bearer [ 179.740511][T10498] tipc: Disabling bearer [ 179.751571][T10503] dummy0: entered promiscuous mode [ 179.758887][T10503] dummy0: left allmulticast mode [ 179.785483][T10503] bridge0: port 3(dummy0) entered blocking state [ 179.792244][T10503] bridge0: port 3(dummy0) entered disabled state [ 179.811929][T10503] dummy0: entered allmulticast mode [ 179.824130][T10503] bridge0: port 3(dummy0) entered blocking state [ 179.830772][T10503] bridge0: port 3(dummy0) entered forwarding state [ 179.878286][T10506] syzkaller1: entered promiscuous mode [ 179.894145][T10506] syzkaller1: entered allmulticast mode [ 179.947252][T10520] netlink: 'syz.1.1069': attribute type 13 has an invalid length. [ 179.978806][T10520] netlink: 'syz.1.1069': attribute type 17 has an invalid length. [ 180.108181][T10520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.150963][T10522] xfrm0: entered promiscuous mode [ 180.171392][T10522] xfrm0: entered allmulticast mode [ 181.515236][T10583] __nla_validate_parse: 9 callbacks suppressed [ 181.515254][T10583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1082'. [ 182.219450][T10614] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 182.675364][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1094'. [ 182.703058][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 182.840520][T10655] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1098'. [ 182.884449][T10654] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1098'. [ 183.015163][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 183.024452][T10661] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.554004][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1109'. [ 183.566147][T10684] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1109'. [ 183.644306][T10690] dvmrp8: entered allmulticast mode [ 183.706416][T10691] netlink: 'syz.2.1111': attribute type 23 has an invalid length. [ 184.251656][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 185.434312][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 185.733597][T10725] bridge_slave_1: left allmulticast mode [ 185.740576][T10725] bridge_slave_1: left promiscuous mode [ 185.747599][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.761645][T10725] bridge_slave_0: left promiscuous mode [ 185.767635][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.122031][T10746] veth1_macvtap: left promiscuous mode [ 186.242300][T10757] netlink: 'syz.3.1124': attribute type 5 has an invalid length. [ 186.369658][T10754] ip6gre2: entered allmulticast mode [ 186.499086][T10767] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 186.635527][T10771] __nla_validate_parse: 1 callbacks suppressed [ 186.635541][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1126'. [ 186.659163][T10767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.753629][T10770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.763450][T10770] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 186.778287][T10770] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 187.086355][T10781] syzkaller0: entered promiscuous mode [ 187.136989][T10781] syzkaller0: entered allmulticast mode [ 187.287967][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 187.469813][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1133'. [ 187.657266][T10809] netlink: 'syz.4.1134': attribute type 10 has an invalid length. [ 187.681844][T10809] team0: Port device dummy0 added [ 188.407571][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 189.155559][T10823] syz.4.1137: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 189.177458][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.4.1137 Not tainted syzkaller #0 PREEMPT(full) [ 189.177481][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.177491][T10823] Call Trace: [ 189.177498][T10823] [ 189.177506][T10823] dump_stack_lvl+0x189/0x250 [ 189.177534][T10823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.177554][T10823] ? __pfx__printk+0x10/0x10 [ 189.177576][T10823] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 189.177595][T10823] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 189.177616][T10823] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 189.177638][T10823] warn_alloc+0x214/0x310 [ 189.177667][T10823] ? __pfx_warn_alloc+0x10/0x10 [ 189.177700][T10823] ? __get_vm_area_node+0x28f/0x300 [ 189.177723][T10823] ? xskq_create+0xbf/0x170 [ 189.177744][T10823] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 189.177798][T10823] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.177821][T10823] ? xskq_create+0x56/0x170 [ 189.177840][T10823] ? __kasan_kmalloc+0x93/0xb0 [ 189.177864][T10823] vmalloc_user_noprof+0xad/0xf0 [ 189.177893][T10823] ? xskq_create+0xbf/0x170 [ 189.177910][T10823] xskq_create+0xbf/0x170 [ 189.177931][T10823] xsk_init_queue+0xb0/0x110 [ 189.177950][T10823] xsk_setsockopt+0x57b/0x8d0 [ 189.177976][T10823] ? __pfx_xsk_setsockopt+0x10/0x10 [ 189.177999][T10823] ? __pfx_aa_sk_perm+0x10/0x10 [ 189.178025][T10823] ? __fget_files+0x2a/0x420 [ 189.178039][T10823] ? aa_sock_opt_perm+0xff/0x1b0 [ 189.178060][T10823] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 189.178077][T10823] ? __pfx_xsk_setsockopt+0x10/0x10 [ 189.178101][T10823] do_sock_setsockopt+0x179/0x1b0 [ 189.178127][T10823] __x64_sys_setsockopt+0x13f/0x1b0 [ 189.178153][T10823] do_syscall_64+0xfa/0x3b0 [ 189.178170][T10823] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.178187][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.178203][T10823] ? clear_bhb_loop+0x60/0xb0 [ 189.178224][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.178240][T10823] RIP: 0033:0x7f689058eec9 [ 189.178255][T10823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.178268][T10823] RSP: 002b:00007f688e7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.178287][T10823] RAX: ffffffffffffffda RBX: 00007f68907e5fa0 RCX: 00007f689058eec9 [ 189.178299][T10823] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 189.178310][T10823] RBP: 00007f6890611f91 R08: 0000000000000004 R09: 0000000000000000 [ 189.178320][T10823] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 189.178330][T10823] R13: 00007f68907e6038 R14: 00007f68907e5fa0 R15: 00007fff8fe088f8 [ 189.178360][T10823] [ 189.178378][T10823] Mem-Info: [ 189.253389][T10821] openvswitch: netlink: IPv4 tunnel dst address is zero [ 189.259483][T10823] active_anon:4839 inactive_anon:0 isolated_anon:0 [ 189.259483][T10823] active_file:3270 inactive_file:39925 isolated_file:0 [ 189.259483][T10823] unevictable:768 dirty:262 writeback:0 [ 189.259483][T10823] slab_reclaimable:11894 slab_unreclaimable:160436 [ 189.259483][T10823] mapped:31316 shmem:1365 pagetables:1180 [ 189.259483][T10823] sec_pagetables:0 bounce:0 [ 189.259483][T10823] kernel_misc_reclaimable:0 [ 189.259483][T10823] free:1258246 free_pcp:18831 free_cma:0 [ 189.259572][T10823] Node 0 active_anon:19356kB inactive_anon:0kB active_file:13080kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125264kB dirty:1044kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13108kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.317837][T10834] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 189.353247][T10823] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.362984][T10834] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1140'. [ 189.384748][T10823] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.632740][T10823] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 189.638637][T10823] Node 0 DMA32 free:1120224kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19412kB inactive_anon:0kB active_file:13080kB inactive_file:157916kB unevictable:1536kB writepending:1044kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:59740kB local_pcp:43296kB free_cma:0kB [ 189.673207][T10823] lowmem_reserve[]: 0 0 1 1 1 [ 189.694064][T10823] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 189.724195][T10823] lowmem_reserve[]: 0 0 0 0 0 [ 189.731585][T10823] Node 1 Normal free:3897388kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16480kB local_pcp:8480kB free_cma:0kB [ 189.776748][T10823] lowmem_reserve[]: 0 0 0 0 0 [ 189.781703][T10823] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.796144][T10823] Node 0 DMA32: 653*4kB (UM) 518*8kB (UME) 173*16kB (UME) 209*32kB (UME) 51*64kB (UME) 60*128kB (UME) 88*256kB (UME) 33*512kB (UME) 21*1024kB (UM) 8*2048kB (UME) 248*4096kB (M) = 1120276kB [ 189.816558][T10823] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 189.830361][T10823] Node 1 Normal: 193*4kB (UME) 39*8kB (UME) 35*16kB (UME) 110*32kB (UME) 30*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3897388kB [ 189.849997][T10823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.860712][T10823] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.870877][T10823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.881485][T10823] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.892550][T10823] 45497 total pagecache pages [ 189.897733][T10823] 0 pages in swap cache [ 189.902450][T10823] Free swap = 124996kB [ 189.907944][T10823] Total swap = 124996kB [ 189.915783][T10823] 2097051 pages RAM [ 189.920045][T10823] 0 pages HighMem/MovableOnly [ 189.925604][T10823] 425681 pages reserved [ 189.929946][T10823] 0 pages cma reserved [ 190.289524][T10856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1146'. [ 190.480846][T10871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'. [ 190.620095][T10878] netlink: 'syz.3.1153': attribute type 4 has an invalid length. [ 190.629156][T10878] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1153'. [ 190.789376][T10890] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 190.801755][T10890] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1154'. [ 191.127871][T10910] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1159'. [ 191.151245][T10910] veth3: entered promiscuous mode [ 191.446890][T10917] ipvlan0: entered promiscuous mode [ 191.603869][T10925] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 191.925750][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 192.115469][T10961] netlink: 'syz.4.1175': attribute type 153 has an invalid length. [ 192.298576][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 192.417709][T10979] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1178'. [ 192.562512][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 192.719171][T10990] netlink: 'syz.4.1182': attribute type 7 has an invalid length. [ 193.006008][T11004] delete_channel: no stack [ 193.094342][T11014] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1190'. [ 193.277104][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1194'. [ 193.992688][T11053] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 194.034491][T11053] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1201'. [ 194.319559][T11080] openvswitch: netlink: IPv6 tunnel dst address is zero [ 194.622848][T11093] syzkaller0: entered promiscuous mode [ 194.629799][T11093] syzkaller0: entered allmulticast mode [ 194.665822][T11093] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1211'. [ 195.080468][T11106] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1212'. [ 195.101670][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 195.405642][T11111] dummy0: entered promiscuous mode [ 195.413350][T11111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.799458][T11127] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 195.801392][T11121] smc: net device bond0 applied user defined pnetid SYZ0 [ 195.828163][T11126] smc: net device bond0 erased user defined pnetid SYZ0 [ 195.881937][T11127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.945848][T11123] bond2: (slave gretap1): making interface the new active one [ 195.986955][T11123] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 195.999522][T11133] netlink: 'syz.3.1221': attribute type 29 has an invalid length. [ 196.015800][T11138] netlink: 'syz.3.1221': attribute type 29 has an invalid length. [ 196.560880][T11175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.572736][T11175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.581208][T11175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.588709][T11175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.196745][T11212] __nla_validate_parse: 5 callbacks suppressed [ 197.196763][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1242'. [ 197.226608][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 197.279329][T11212] bond3: entered promiscuous mode [ 197.294454][T11212] bond3: entered allmulticast mode [ 197.307028][T11212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.380797][T11227] netlink: 'syz.2.1246': attribute type 12 has an invalid length. [ 197.705348][T11247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1246'. [ 197.715688][ T5868] IPVS: starting estimator thread 0... [ 197.815794][T11252] IPVS: using max 33 ests per chain, 79200 per kthread [ 197.817523][T11247] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 197.869911][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1252'. [ 197.870076][T11261] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 197.915328][T11260] IPv6: Can't replace route, no match found [ 198.207937][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 198.379063][T11285] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 198.393307][T11285] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1258'. [ 198.663608][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 198.697674][T11307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1264'. [ 198.741285][T11307] gretap1: entered promiscuous mode [ 198.963137][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 199.007889][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 199.186931][T11344] tipc: Enabled bearer , priority 0 [ 199.194552][T11338] syzkaller0: entered promiscuous mode [ 199.216824][T11338] syzkaller0: entered allmulticast mode [ 199.575163][T11348] tipc: Resetting bearer [ 199.686208][T11348] tipc: Disabling bearer [ 199.866988][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.883945][T11370] bridge_slave_0: left allmulticast mode [ 199.897929][T11370] bridge_slave_0: left promiscuous mode [ 199.911676][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.048032][T11375] netlink: 'syz.4.1279': attribute type 12 has an invalid length. [ 200.387119][T11401] erspan0: left allmulticast mode [ 200.525980][T11413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.949004][T11433] dummy0: left promiscuous mode [ 200.963480][T11433] team0: Port device dummy0 removed [ 200.976310][T11433] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.118176][T11450] netlink: 'syz.2.1295': attribute type 3 has an invalid length. [ 201.320585][T11456] bond0: Unable to set down delay as MII monitoring is disabled [ 201.439065][T11459] netlink: 'syz.2.1298': attribute type 21 has an invalid length. [ 201.460359][T11466] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 201.475523][T11459] netlink: 'syz.2.1298': attribute type 4 has an invalid length. [ 201.500665][T11459] netlink: 'syz.2.1298': attribute type 5 has an invalid length. [ 201.526721][T11470] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 201.590698][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.608259][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.767527][T11470] bond3: entered promiscuous mode [ 201.773149][T11470] bond3: entered allmulticast mode [ 201.790852][T11477] bridge4: entered promiscuous mode [ 201.796526][T11477] bridge4: entered allmulticast mode [ 201.852286][T11477] bond3: (slave bridge4): making interface the new active one [ 201.872054][T11477] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 201.890022][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.905824][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.933398][T11495] netlink: 'syz.2.1304': attribute type 6 has an invalid length. [ 202.088493][T11505] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 202.116751][T11505] openvswitch: netlink: Message has 1 unknown bytes. [ 202.371757][ T30] audit: type=1804 audit(1758561458.868:6): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1313" name="/newroot/260/cgroup.controllers" dev="tmpfs" ino=1359 res=1 errno=0 [ 202.428410][ T30] audit: type=1800 audit(1758561458.898:7): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1313" name="cgroup.controllers" dev="tmpfs" ino=1359 res=0 errno=0 [ 202.673112][T11533] __nla_validate_parse: 21 callbacks suppressed [ 202.673131][T11533] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1317'. [ 202.976149][T11546] netlink: 'syz.0.1322': attribute type 4 has an invalid length. [ 202.984990][T11541] can: request_module (can-proto-5) failed. [ 203.084925][T11553] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1326'. [ 203.127834][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 203.144878][T11555] netlink: 'syz.3.1325': attribute type 20 has an invalid length. [ 203.171353][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.175230][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 203.213618][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.218671][T11555] netlink: 'syz.3.1325': attribute type 20 has an invalid length. [ 203.242214][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.262311][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.262564][T11562] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 203.624997][T11582] tipc: Enabled bearer , priority 0 [ 203.637201][T11583] C: renamed from team_slave_0 (while UP) [ 203.688541][T11583] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1331'. [ 203.733753][T11583] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 203.790259][T11582] tipc: Disabling bearer [ 204.161329][T11620] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004 [ 204.686734][T11642] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1345'. [ 204.706315][T11645] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 204.823610][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.870780][T11653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1349'. [ 205.122463][T11666] nbd: socks must be embedded in a SOCK_ITEM attr [ 205.578964][T11693] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1362'. [ 205.595116][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 206.009294][T11718] dvmrp8: entered allmulticast mode [ 206.124876][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 206.168609][T11725] can: request_module (can-proto-0) failed. [ 206.350218][T11748] veth0_to_bridge: entered promiscuous mode [ 206.734494][T11776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.849907][T11761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.621833][T11815] Unsupported ieee802154 address type: 0 [ 207.749008][T11823] __nla_validate_parse: 3 callbacks suppressed [ 207.749026][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 207.765329][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 207.790264][T11819] vlan2: entered allmulticast mode [ 207.795717][T11819] bond2: entered allmulticast mode [ 208.020807][ T8024] IPVS: starting estimator thread 0... [ 208.117005][T11834] IPVS: using max 28 ests per chain, 67200 per kthread [ 208.156667][T11844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1400'. [ 208.457015][T11859] batadv_slave_1: entered promiscuous mode [ 208.622618][T11870] validate_nla: 3 callbacks suppressed [ 208.622638][T11870] netlink: 'syz.4.1408': attribute type 4 has an invalid length. [ 208.726377][T11866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1406'. [ 208.754511][T11858] batadv_slave_1: left promiscuous mode [ 208.762894][T11865] netlink: zone id is out of range [ 208.768524][T11865] netlink: del zone limit has 8 unknown bytes [ 208.783129][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1412'. [ 208.794445][T11865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1408'. [ 208.896453][T11886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.161269][T11902] netlink: 'syz.2.1415': attribute type 27 has an invalid length. [ 209.625097][T11920] batadv0: entered promiscuous mode [ 209.630538][T11920] batadv0: entered allmulticast mode [ 209.860936][T11925] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1422'. [ 209.905906][T11925] netlink: 'syz.1.1422': attribute type 10 has an invalid length. [ 209.928595][T11925] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.197386][T11936] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 210.576997][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1431'. [ 210.588903][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1431'. [ 210.654061][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'. [ 210.869630][T11968] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 210.932311][T11969] IPVS: Error connecting to the multicast addr [ 211.509898][T11987] xfrm0: entered promiscuous mode [ 211.524582][T11987] xfrm0: entered allmulticast mode [ 212.372670][T12013] team0: Device ipip0 is of different type [ 212.463802][T12022] netlink: 'syz.3.1449': attribute type 25 has an invalid length. [ 212.513307][T12017] tipc: Enabled bearer , priority 0 [ 212.595853][T12018] syzkaller0: entered promiscuous mode [ 212.601368][T12018] syzkaller0: entered allmulticast mode [ 212.647921][T12024] tipc: Resetting bearer [ 212.685774][T12027] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.763323][T12004] tipc: Resetting bearer [ 212.782232][T12004] tipc: Disabling bearer [ 212.797326][T12036] __nla_validate_parse: 8 callbacks suppressed [ 212.797343][T12036] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1452'. [ 212.822413][T12036] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1452'. [ 212.832254][T12036] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1452'. [ 212.852521][T12039] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 212.880694][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1453'. [ 212.958715][T12039] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1453'. [ 212.969457][T12039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1453'. [ 213.025347][T12042] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1454'. [ 213.224127][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1460'. [ 213.243947][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1460'. [ 213.278156][T12056] gtp0: left promiscuous mode [ 213.282876][T12056] gtp0: left allmulticast mode [ 213.296252][T12068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1460'. [ 213.297646][T12056] xfrm0: left promiscuous mode [ 213.315741][T12056] xfrm0: left allmulticast mode [ 213.392922][T12056] hsr_slave_0: left promiscuous mode [ 213.400553][T12056] hsr_slave_1: left promiscuous mode [ 213.687726][T12085] syzkaller0: entered promiscuous mode [ 213.693639][T12085] syzkaller0: entered allmulticast mode [ 213.863991][T12095] IPVS: length: 24 != 55320 [ 213.968745][T12099] sctp: [Deprecated]: syz.2.1470 (pid 12099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.968745][T12099] Use struct sctp_sack_info instead [ 214.811674][T12146] batadv0: entered promiscuous mode [ 214.822581][T12146] batadv0: entered allmulticast mode [ 214.879629][T12149] tipc: Enabled bearer , priority 10 [ 215.344095][T12171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.483097][T12171] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.536134][T12181] !: renamed from dummy0 [ 215.610436][T12171] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.693282][T12171] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.005701][ T5974] tipc: Node number set to 2285999138 [ 216.031883][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.041258][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.089826][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.155491][ T9760] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.282454][T12193] geneve5: entered promiscuous mode [ 216.292262][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.301104][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.315578][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.323823][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.741130][T12218] tipc: Enabling of bearer rejected, failed to enable media [ 217.197831][T12240] syzkaller0: entered promiscuous mode [ 217.203343][T12240] syzkaller0: entered allmulticast mode [ 217.589849][T12269] netlink: 'syz.1.1511': attribute type 2 has an invalid length. [ 217.693930][T12268] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 217.718629][T12266] vlan1: entered promiscuous mode [ 217.726852][T12266] vlan1: entered allmulticast mode [ 217.746001][T12266] veth0_vlan: entered allmulticast mode [ 217.776229][T12268] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 218.209421][T12296] openvswitch: netlink: EtherType 50a is less than min 600 [ 218.227846][T12293] netlink: 'syz.4.1516': attribute type 23 has an invalid length. [ 218.308274][T12298] __nla_validate_parse: 16 callbacks suppressed [ 218.308294][T12298] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1518'. [ 218.351787][T12298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.730123][T12315] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 218.741424][T12316] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 220.123895][T12331] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 220.154406][T12331] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1526'. [ 220.184027][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 220.356705][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1531'. [ 220.503170][T12354] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1532'. [ 220.591898][T12364] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1535'. [ 220.767708][T12378] tipc: Enabled bearer , priority 14 [ 220.885997][T12390] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 221.070217][T12396] tipc: Enabled bearer , priority 0 [ 221.078095][T12396] syzkaller0: entered promiscuous mode [ 221.082539][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'. [ 221.083759][T12396] syzkaller0: entered allmulticast mode [ 221.105371][T12396] tipc: Resetting bearer [ 221.117866][T12395] tipc: Resetting bearer [ 221.147249][T12395] tipc: Disabling bearer [ 221.392190][T12411] netlink: 'syz.4.1549': attribute type 2 has an invalid length. [ 221.414618][T12411] þ: entered promiscuous mode [ 221.708623][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 221.788906][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 222.026008][T12439] netlink: 'syz.4.1558': attribute type 13 has an invalid length. [ 222.041853][T12439] netlink: 'syz.4.1558': attribute type 17 has an invalid length. [ 222.171523][T12439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.196835][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1560'. [ 222.203208][T12439] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.219841][T12439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.343602][T12439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.303406][T12488] netlink: 'syz.4.1571': attribute type 10 has an invalid length. [ 223.311667][T12488] syz_tun: entered promiscuous mode [ 223.323124][T12488] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.917338][T12528] tipc: Enabled bearer , priority 0 [ 224.033651][T12528] tipc: Disabling bearer [ 224.322804][T12555] batadv_slave_1: entered promiscuous mode [ 224.346274][T12553] batadv_slave_1: left promiscuous mode [ 225.052678][T12598] netlink: 'syz.2.1599': attribute type 2 has an invalid length. [ 225.132113][T12598] : entered promiscuous mode [ 225.199251][T12611] __nla_validate_parse: 2 callbacks suppressed [ 225.199271][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1601'. [ 225.476348][T12625] netlink: 'syz.2.1606': attribute type 303 has an invalid length. [ 225.685315][T12637] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1610'. [ 225.695963][T12637] netlink: 'syz.2.1610': attribute type 2 has an invalid length. [ 225.749115][T12639] syz.2.1611: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.769247][T12639] CPU: 1 UID: 0 PID: 12639 Comm: syz.2.1611 Not tainted syzkaller #0 PREEMPT(full) [ 225.769273][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.769284][T12639] Call Trace: [ 225.769292][T12639] [ 225.769300][T12639] dump_stack_lvl+0x189/0x250 [ 225.769328][T12639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.769348][T12639] ? __pfx__printk+0x10/0x10 [ 225.769371][T12639] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 225.769391][T12639] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 225.769413][T12639] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 225.769435][T12639] warn_alloc+0x214/0x310 [ 225.769464][T12639] ? __pfx_warn_alloc+0x10/0x10 [ 225.769497][T12639] ? __get_vm_area_node+0x28f/0x300 [ 225.769520][T12639] ? xskq_create+0xbf/0x170 [ 225.769542][T12639] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 225.769597][T12639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.769626][T12639] ? __kasan_kmalloc+0x93/0xb0 [ 225.769651][T12639] vmalloc_user_noprof+0xad/0xf0 [ 225.769674][T12639] ? xskq_create+0xbf/0x170 [ 225.769691][T12639] xskq_create+0xbf/0x170 [ 225.769731][T12639] xsk_init_queue+0xb0/0x110 [ 225.769751][T12639] xsk_setsockopt+0x57b/0x8d0 [ 225.769777][T12639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.769801][T12639] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.769836][T12639] ? __fget_files+0x2a/0x420 [ 225.769849][T12639] ? aa_sock_opt_perm+0xff/0x1b0 [ 225.769870][T12639] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 225.769888][T12639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.769912][T12639] do_sock_setsockopt+0x179/0x1b0 [ 225.769938][T12639] __x64_sys_setsockopt+0x13f/0x1b0 [ 225.769963][T12639] do_syscall_64+0xfa/0x3b0 [ 225.769981][T12639] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.769998][T12639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.770016][T12639] ? clear_bhb_loop+0x60/0xb0 [ 225.770036][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.770052][T12639] RIP: 0033:0x7fbdbd18eec9 [ 225.770068][T12639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.770082][T12639] RSP: 002b:00007fbdbdfef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.770102][T12639] RAX: ffffffffffffffda RBX: 00007fbdbd3e5fa0 RCX: 00007fbdbd18eec9 [ 225.770115][T12639] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 225.770126][T12639] RBP: 00007fbdbd211f91 R08: 0000000000000004 R09: 0000000000000000 [ 225.770137][T12639] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 225.770148][T12639] R13: 00007fbdbd3e6038 R14: 00007fbdbd3e5fa0 R15: 00007fff96791468 [ 225.770179][T12639] [ 225.770187][T12639] Mem-Info: [ 226.041939][T12639] active_anon:4747 inactive_anon:0 isolated_anon:0 [ 226.041939][T12639] active_file:3270 inactive_file:39940 isolated_file:0 [ 226.041939][T12639] unevictable:768 dirty:277 writeback:50 [ 226.041939][T12639] slab_reclaimable:12317 slab_unreclaimable:160819 [ 226.041939][T12639] mapped:29288 shmem:1369 pagetables:1117 [ 226.041939][T12639] sec_pagetables:0 bounce:0 [ 226.041939][T12639] kernel_misc_reclaimable:0 [ 226.041939][T12639] free:1261234 free_pcp:15032 free_cma:0 [ 226.130134][T12639] Node 0 active_anon:19136kB inactive_anon:0kB active_file:13080kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117148kB dirty:816kB writeback:88kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13356kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.183947][T12639] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.250042][T12639] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.292414][T12639] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 226.300874][T12639] Node 0 DMA32 free:1132968kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19092kB inactive_anon:0kB active_file:13080kB inactive_file:157976kB unevictable:1536kB writepending:804kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:40340kB local_pcp:26012kB free_cma:0kB [ 226.335733][T12639] lowmem_reserve[]: 0 0 1 1 1 [ 226.340482][T12639] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 226.387053][T12639] lowmem_reserve[]: 0 0 0 0 0 [ 226.391819][T12639] Node 1 Normal free:3897420kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16472kB local_pcp:8192kB free_cma:0kB [ 226.423557][T12639] lowmem_reserve[]: 0 0 0 0 0 [ 226.428549][T12639] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.442157][T12639] Node 0 DMA32: 852*4kB (UM) 1167*8kB (UME) 410*16kB (UM) 387*32kB (UME) 115*64kB (UE) 62*128kB (UME) 92*256kB (UME) 37*512kB (UM) 23*1024kB (UME) 6*2048kB (UM) 246*4096kB (UM) = 1132936kB [ 226.466773][T12639] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 226.479860][T12639] Node 1 Normal: 129*4kB (UME) 39*8kB (UME) 35*16kB (UME) 113*32kB (UME) 31*64kB (UME) 10*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3897420kB [ 226.499499][T12639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.525643][T12639] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.555384][T12639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.570082][T12639] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.605298][T12639] 44572 total pagecache pages [ 226.610008][T12639] 0 pages in swap cache [ 226.614159][T12639] Free swap = 124996kB [ 226.630148][T12639] Total swap = 124996kB [ 226.636563][T12639] 2097051 pages RAM [ 226.666216][T12639] 0 pages HighMem/MovableOnly [ 226.684808][T12639] 425681 pages reserved [ 226.688996][T12639] 0 pages cma reserved [ 226.748832][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 226.774557][T12666] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1617'. [ 226.835945][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 226.860885][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 226.873104][T12673] 8021q: VLANs not supported on nr0 [ 227.260973][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1626'. [ 227.332369][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1625'. [ 227.560809][T12724] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 227.703554][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 227.892579][T12750] bond4: entered promiscuous mode [ 227.948338][T12750] bond4: entered allmulticast mode [ 227.957190][T12750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.187874][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 228.228006][T12770] bridge8: entered allmulticast mode [ 228.527761][T12788] IPv6: sit1: Disabled Multicast RS [ 228.739394][T12802] netlink: 'syz.2.1647': attribute type 3 has an invalid length. [ 228.782177][T12802] dvmrp8: left allmulticast mode [ 228.869829][T12804] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 228.896668][T12802] lo: left allmulticast mode [ 228.915261][T12802] tunl0: left allmulticast mode [ 228.922157][T12802] gre0: left allmulticast mode [ 228.969932][T12802] gretap0: left allmulticast mode [ 229.035270][T12802] ip_vti0: left allmulticast mode [ 229.040797][T12802] ip6_vti0: left allmulticast mode [ 229.086802][T12802] sit0: left allmulticast mode [ 229.106559][T12802] ip6tnl0: left allmulticast mode [ 229.129997][T12802] ip6gre0: left allmulticast mode [ 229.148594][T12802] ip6gretap0: left allmulticast mode [ 229.174242][T12802] bridge0: left allmulticast mode [ 229.187896][T12802] vcan0: left allmulticast mode [ 229.193254][T12802] bond0: left allmulticast mode [ 229.199508][T12802] bond_slave_0: left allmulticast mode [ 229.209885][T12802] bond_slave_1: left allmulticast mode [ 229.219745][T12802] team0: left allmulticast mode [ 229.225740][T12802] team_slave_0: left allmulticast mode [ 229.231223][T12802] team_slave_1: left allmulticast mode [ 229.244203][T12802] nlmon0: left allmulticast mode [ 229.250701][T12802] 0ªX¹¦À: left allmulticast mode [ 229.261999][T12802] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 229.270161][T12836] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 229.305475][T12836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.403537][T12839] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 229.471886][T12841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.481354][T12841] bond0: (slave bond2): Enslaving as an active interface with an up link [ 229.562987][T12852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.570295][T12852] IPv6: NLM_F_CREATE should be set when creating new route [ 229.577584][T12852] IPv6: NLM_F_CREATE should be set when creating new route [ 229.716103][T12853] can: request_module (can-proto-0) failed. [ 229.747158][T12852] block nbd1: server does not support multiple connections per device. [ 229.775483][T12852] block nbd1: shutting down sockets [ 229.895819][T12876] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 229.924105][T12876] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 230.639645][T12910] __nla_validate_parse: 9 callbacks suppressed [ 230.639663][T12910] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1673'. [ 230.854927][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 230.895736][T12914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1674'. [ 230.956534][T12921] macsec0: entered promiscuous mode [ 230.961778][T12921] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 230.969150][T12921] macsec0: entered allmulticast mode [ 230.974450][T12921] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 230.997584][T12914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1674'. [ 231.031825][T12926] netlink: 'syz.4.1679': attribute type 1 has an invalid length. [ 231.199671][T12926] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 231.268890][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 231.278334][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'. [ 231.310263][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 231.333398][T12936] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 231.343616][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1681'. [ 231.493738][T12949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.518551][T12949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.580383][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 231.684270][T12949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.734755][T12949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.847968][T12949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.864486][T12949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.984144][T12949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.016597][T12949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.128913][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1690'. [ 232.314833][T12994] Unsupported ieee802154 address type: 0 [ 232.326012][T12996] Unsupported ieee802154 address type: 0 [ 232.335085][ T9759] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.364536][ T9759] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.373032][ T9759] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.391211][ T9759] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.422516][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.436680][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.503271][T12999] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 232.547742][ T9759] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.556871][ T9759] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.608360][T13007] tipc: Enabled bearer , priority 0 [ 232.616615][T13007] syzkaller0: entered promiscuous mode [ 232.625871][T13007] syzkaller0: entered allmulticast mode [ 232.664372][T13007] tipc: Resetting bearer [ 232.685890][T13005] tipc: Resetting bearer [ 232.706961][T13005] tipc: Disabling bearer [ 232.812463][T13017] team0: No ports can be present during mode change [ 233.063438][T13035] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 233.459812][T13049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.822473][T13064] netlink: 'syz.1.1713': attribute type 10 has an invalid length. [ 233.939094][T13064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.951480][T13064] team0: Port device bond0 added [ 234.109898][T13069] vlan4: entered allmulticast mode [ 234.115467][T13069] bridge_slave_0: entered allmulticast mode [ 234.411779][T13082] netlink: 'syz.1.1717': attribute type 1 has an invalid length. [ 234.473772][T13082] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 234.673433][T13091] netlink: 'syz.0.1718': attribute type 3 has an invalid length. [ 234.701182][T13091] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 234.945421][T13104] siw: device registration error -23 [ 235.536324][T13122] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.736942][T13122] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.878895][T13140] __nla_validate_parse: 13 callbacks suppressed [ 235.878914][T13140] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1732'. [ 235.905658][T13142] netlink: 'syz.0.1731': attribute type 2 has an invalid length. [ 235.906374][T13122] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.925852][T13142] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 235.944033][T13142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1731'. [ 236.030824][T13122] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.063441][T13140] tipc: Enabled bearer , priority 0 [ 236.088132][T13139] tipc: Disabling bearer [ 236.152324][T13150] dvmrp1: entered allmulticast mode [ 236.221670][T13150] dvmrp1: left allmulticast mode [ 236.273537][ T9762] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.307372][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.353137][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.395220][ T9759] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.675650][T13176] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 236.833938][T13176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.905942][T13181] netlink: 'syz.3.1741': attribute type 1 has an invalid length. [ 236.952011][T13177] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 236.973241][T13177] bond3: (slave batadv1): making interface the new active one [ 236.993158][T13177] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 237.074953][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'. [ 237.183056][T13181] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.196859][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1744'. [ 237.333460][T13185] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.360475][T13185] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.392842][T13185] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 237.550473][T13188] veth7: entered promiscuous mode [ 237.562086][T13188] bond5: (slave veth7): Enslaving as an active interface with a down link [ 237.570890][T13193] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 238.022326][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 238.105752][T13019] Set syz1 is full, maxelem 65536 reached [ 238.186878][T13222] netlink: 'syz.4.1753': attribute type 12 has an invalid length. [ 238.437729][T13237] openvswitch: netlink: Missing valid actions attribute. [ 238.447180][T13239] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1758'. [ 238.477556][T13239] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1758'. [ 238.488238][T13239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1758'. [ 238.500381][T13237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.339651][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.357095][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.366196][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.377053][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.387591][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.404611][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.413723][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.423140][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.433952][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.443395][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.193083][T13279] netlink: 'syz.2.1770': attribute type 16 has an invalid length. [ 240.216078][T13279] netlink: 'syz.2.1770': attribute type 17 has an invalid length. [ 240.330619][T13279] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 240.513035][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1773'. [ 240.574375][T13265] chnl_net:caif_netlink_parms(): no params data found [ 240.886025][T13265] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.904774][T13265] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.912041][T13265] bridge_slave_0: entered allmulticast mode [ 240.925250][T13265] bridge_slave_0: entered promiscuous mode [ 240.936803][T13265] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.944061][T13265] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.952048][T13265] bridge_slave_1: entered allmulticast mode [ 240.960172][T13265] bridge_slave_1: entered promiscuous mode [ 241.013098][T13317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1780'. [ 241.025634][T13317] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1780'. [ 241.050775][T13265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.151236][T13265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.221657][T13332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1782'. [ 241.281455][T13265] team0: Port device team_slave_0 added [ 241.290500][T13265] team0: Port device team_slave_1 added [ 241.418859][T13265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.428549][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.473670][T13265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.495259][ T5876] Bluetooth: hci1: command tx timeout [ 241.505251][T13265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.521636][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.554307][T13265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.859138][T13265] hsr_slave_0: entered promiscuous mode [ 241.894489][T13265] hsr_slave_1: entered promiscuous mode [ 242.801350][T13265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.813026][T13395] netlink: 'syz.4.1796': attribute type 16 has an invalid length. [ 242.821386][T13395] netlink: 'syz.4.1796': attribute type 17 has an invalid length. [ 242.825819][T13265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.862843][T13395] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.886814][T13395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.910106][T13265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.964879][T13265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.099443][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 243.300679][T13265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.350722][T13265] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.361525][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1801'. [ 243.373590][T13414] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1801'. [ 243.397225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.404448][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.417406][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.424656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.435828][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1801'. [ 243.532841][T13418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1803'. [ 243.577083][ T5876] Bluetooth: hci1: command tx timeout [ 243.872149][T13422] syzkaller1: entered promiscuous mode [ 243.880506][T13422] syzkaller1: entered allmulticast mode [ 243.894490][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 244.297151][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1808'. [ 244.568207][T13452] veth0_to_bridge: left promiscuous mode [ 244.701330][T13452] bond3: left promiscuous mode [ 244.709326][T13452] bond3: left allmulticast mode [ 244.739087][T13462] bond0: entered promiscuous mode [ 244.744220][T13462] bond_slave_0: entered promiscuous mode [ 244.750330][T13462] bond_slave_1: entered promiscuous mode [ 244.759061][T13462] bond0: left promiscuous mode [ 244.764375][T13462] bond_slave_0: left promiscuous mode [ 244.773174][T13462] bond_slave_1: left promiscuous mode [ 244.801076][ T74] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.810685][ T74] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.819790][ T74] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.828618][ T74] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.857770][T13265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.872033][ T74] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.888439][ T74] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.915543][ T74] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.924004][ T74] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.523377][T13265] veth0_vlan: entered promiscuous mode [ 245.585195][T13265] veth1_vlan: entered promiscuous mode [ 245.643846][T13519] tipc: Enabled bearer , priority 0 [ 245.655051][T13519] syzkaller0: entered promiscuous mode [ 245.656350][ T5876] Bluetooth: hci1: command tx timeout [ 245.660545][T13519] syzkaller0: entered allmulticast mode [ 245.689509][T13519] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20001 [ 245.699283][T13265] veth0_macvtap: entered promiscuous mode [ 245.740548][T13519] tipc: Resetting bearer [ 245.762117][T13265] veth1_macvtap: entered promiscuous mode [ 245.769787][T13518] tipc: Resetting bearer [ 245.790919][T13518] tipc: Disabling bearer [ 245.841676][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.858967][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.879344][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.890679][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.902070][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.910048][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.918150][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.926241][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.934008][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.942972][T13523] netlink: 'syz.4.1827': attribute type 2 has an invalid length. [ 245.968583][T13525] IPv6: sit2: Disabled Multicast RS [ 245.977082][T13525] sit2: entered allmulticast mode [ 246.019068][T13265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.099839][T13537] delete_channel: no stack [ 246.158722][T13542] __nla_validate_parse: 5 callbacks suppressed [ 246.158740][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 246.226560][T13265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.303678][T13549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1834'. [ 246.305012][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.354384][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.365615][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.403322][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.428993][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 246.663268][ T9762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.681077][ T9762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.817963][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 246.977710][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.015265][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.223070][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 247.246093][T13580] dummy0: left allmulticast mode [ 247.256163][T13584] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 247.275291][T13580] dummy0: left promiscuous mode [ 247.280440][T13580] bridge0: port 3(dummy0) entered disabled state [ 247.312099][T13580] bridge_slave_1: left allmulticast mode [ 247.324887][T13580] bridge_slave_1: left promiscuous mode [ 247.330693][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.357368][T13580] bridge_slave_0: left promiscuous mode [ 247.374956][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.710713][T13615] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1852'. [ 247.734901][ T5876] Bluetooth: hci1: command tx timeout [ 247.867294][T13621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1854'. [ 247.878465][T13621] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.962886][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 247.985083][T13627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.772665][T13669] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1866'. [ 248.797471][T13669] netem: invalid attributes len -16 [ 248.803772][T13669] netem: change failed [ 248.820604][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 249.815244][ T5876] Bluetooth: hci1: command tx timeout [ 250.057743][T13742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 250.510045][T13767] bridge0: port 1(erspan0) entered blocking state [ 250.528044][T13767] bridge0: port 1(erspan0) entered disabled state [ 250.553731][T13767] erspan0: entered promiscuous mode [ 250.572820][T13767] bridge0: port 1(erspan0) entered blocking state [ 250.579618][T13767] bridge0: port 1(erspan0) entered forwarding state [ 250.608472][T13768] IPVS: Error connecting to the multicast addr [ 251.074472][T13788] validate_nla: 6 callbacks suppressed [ 251.074491][T13788] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 251.208033][T13788] __nla_validate_parse: 9 callbacks suppressed [ 251.208054][T13788] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1900'. [ 251.328835][T13788] block nbd1: server does not support multiple connections per device. [ 251.345901][T13788] block nbd1: shutting down sockets [ 251.506818][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 251.563032][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1904'. [ 251.638447][T13804] nbd: socks must be embedded in a SOCK_ITEM attr [ 251.689328][T13803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1904'. [ 251.739309][T13803] nbd: device at index 64 is going down [ 251.797226][T13811] netlink: 'syz.5.1906': attribute type 3 has an invalid length. [ 251.980792][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 251.992631][T13824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1910'. [ 252.332890][T13850] veth0: entered promiscuous mode [ 252.338674][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1914'. [ 252.348718][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1914'. [ 252.361728][T13844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1914'. [ 252.377028][T13849] veth0: left promiscuous mode [ 252.586312][ T5868] IPVS: starting estimator thread 0... [ 252.675217][T13869] IPVS: using max 29 ests per chain, 69600 per kthread [ 252.850752][T13875] ip6gretap1: entered allmulticast mode [ 253.097880][T13885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'. [ 253.772901][T13907] bond0: (slave syz_tun): Releasing backup interface [ 253.786940][T13745] ================================================================== [ 253.795038][T13745] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 253.803028][T13745] Read of size 8 at addr ffff88802f47c0a0 by task khidpd_16bf5505/13745 [ 253.811356][T13745] [ 253.813682][T13745] CPU: 1 UID: 0 PID: 13745 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) [ 253.813704][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.813715][T13745] Call Trace: [ 253.813723][T13745] [ 253.813730][T13745] dump_stack_lvl+0x189/0x250 [ 253.813752][T13745] ? __kasan_check_byte+0x12/0x40 [ 253.813775][T13745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.813794][T13745] ? lock_release+0x4b/0x3e0 [ 253.813819][T13745] ? __virt_addr_valid+0x4a5/0x5c0 [ 253.813840][T13745] print_report+0xca/0x240 [ 253.813857][T13745] ? __mutex_lock+0x801/0x1350 [ 253.813875][T13745] kasan_report+0x118/0x150 [ 253.813897][T13745] ? __mutex_lock+0x801/0x1350 [ 253.813919][T13745] __mutex_lock+0x801/0x1350 [ 253.813939][T13745] ? __mutex_lock+0x5bb/0x1350 [ 253.813959][T13745] ? l2cap_unregister_user+0x6a/0x1b0 [ 253.813979][T13745] ? __pfx___mutex_lock+0x10/0x10 [ 253.813997][T13745] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.814021][T13745] l2cap_unregister_user+0x6a/0x1b0 [ 253.814041][T13745] hidp_session_thread+0x3c9/0x410 [ 253.814061][T13745] ? __pfx_hidp_session_thread+0x10/0x10 [ 253.814078][T13745] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.814093][T13745] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 253.814114][T13745] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 253.814133][T13745] ? __kthread_parkme+0x7b/0x200 [ 253.814151][T13745] ? __kthread_parkme+0x1a1/0x200 [ 253.814170][T13745] kthread+0x70e/0x8a0 [ 253.814191][T13745] ? __pfx_hidp_session_thread+0x10/0x10 [ 253.814209][T13745] ? __pfx_kthread+0x10/0x10 [ 253.814228][T13745] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.814243][T13745] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.814266][T13745] ? __pfx_kthread+0x10/0x10 [ 253.814285][T13745] ret_from_fork+0x439/0x7d0 [ 253.814303][T13745] ? __pfx_ret_from_fork+0x10/0x10 [ 253.814323][T13745] ? __switch_to_asm+0x39/0x70 [ 253.814341][T13745] ? __switch_to_asm+0x33/0x70 [ 253.814359][T13745] ? __pfx_kthread+0x10/0x10 [ 253.814378][T13745] ret_from_fork_asm+0x1a/0x30 [ 253.814405][T13745] [ 253.814412][T13745] [ 254.015572][T13745] Allocated by task 13265: [ 254.019970][T13745] kasan_save_track+0x3e/0x80 [ 254.024640][T13745] __kasan_kmalloc+0x93/0xb0 [ 254.029217][T13745] __kmalloc_noprof+0x27a/0x4f0 [ 254.034056][T13745] hci_alloc_dev_priv+0x28/0x2060 [ 254.039062][T13745] vhci_create_device+0x120/0x650 [ 254.044076][T13745] vhci_write+0x3ce/0x4a0 [ 254.048431][T13745] vfs_write+0x5c9/0xb30 [ 254.052660][T13745] ksys_write+0x145/0x250 [ 254.056973][T13745] do_syscall_64+0xfa/0x3b0 [ 254.061462][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.067337][T13745] [ 254.069646][T13745] Freed by task 13909: [ 254.073692][T13745] kasan_save_track+0x3e/0x80 [ 254.078354][T13745] kasan_save_free_info+0x46/0x50 [ 254.083362][T13745] __kasan_slab_free+0x5b/0x80 [ 254.088201][T13745] kfree+0x18e/0x440 [ 254.092092][T13745] bt_host_release+0x82/0x90 [ 254.096671][T13745] device_release+0x9c/0x1c0 [ 254.101253][T13745] kobject_put+0x22b/0x480 [ 254.105655][T13745] vhci_release+0x15a/0x1a0 [ 254.110150][T13745] __fput+0x44c/0xa70 [ 254.114112][T13745] task_work_run+0x1d1/0x260 [ 254.118690][T13745] do_exit+0x6b5/0x2300 [ 254.122833][T13745] do_group_exit+0x21c/0x2d0 [ 254.127405][T13745] get_signal+0x1286/0x1340 [ 254.132150][T13745] arch_do_signal_or_restart+0x9a/0x750 [ 254.137682][T13745] exit_to_user_mode_loop+0x75/0x110 [ 254.142955][T13745] ret_from_fork+0x4bc/0x7d0 [ 254.147529][T13745] ret_from_fork_asm+0x1a/0x30 [ 254.152280][T13745] [ 254.154591][T13745] Last potentially related work creation: [ 254.160284][T13745] kasan_save_stack+0x3e/0x60 [ 254.164946][T13745] kasan_record_aux_stack+0xbd/0xd0 [ 254.170126][T13745] insert_work+0x3d/0x330 [ 254.174441][T13745] __queue_work+0xbaf/0xfb0 [ 254.178926][T13745] queue_work_on+0x181/0x270 [ 254.183499][T13745] process_scheduled_works+0xae1/0x17b0 [ 254.189027][T13745] worker_thread+0x8a0/0xda0 [ 254.193599][T13745] kthread+0x70e/0x8a0 [ 254.197652][T13745] ret_from_fork+0x439/0x7d0 [ 254.202228][T13745] ret_from_fork_asm+0x1a/0x30 [ 254.206977][T13745] [ 254.209283][T13745] Second to last potentially related work creation: [ 254.215847][T13745] kasan_save_stack+0x3e/0x60 [ 254.220510][T13745] kasan_record_aux_stack+0xbd/0xd0 [ 254.225688][T13745] insert_work+0x3d/0x330 [ 254.230004][T13745] __queue_work+0xcd2/0xfb0 [ 254.234488][T13745] call_timer_fn+0x17b/0x5f0 [ 254.239063][T13745] __run_timer_base+0x646/0x860 [ 254.243901][T13745] run_timer_softirq+0xb7/0x180 [ 254.248737][T13745] handle_softirqs+0x283/0x870 [ 254.253526][T13745] __irq_exit_rcu+0xca/0x1f0 [ 254.258162][T13745] irq_exit_rcu+0x9/0x30 [ 254.262385][T13745] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 254.267998][T13745] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.273971][T13745] [ 254.276283][T13745] The buggy address belongs to the object at ffff88802f47c000 [ 254.276283][T13745] which belongs to the cache kmalloc-8k of size 8192 [ 254.290319][T13745] The buggy address is located 160 bytes inside of [ 254.290319][T13745] freed 8192-byte region [ffff88802f47c000, ffff88802f47e000) [ 254.304184][T13745] [ 254.306496][T13745] The buggy address belongs to the physical page: [ 254.312889][T13745] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f478 [ 254.321680][T13745] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.330158][T13745] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 254.337682][T13745] page_type: f5(slab) [ 254.341660][T13745] raw: 00fff00000000040 ffff88801a442280 ffffea000156f600 0000000000000002 [ 254.350224][T13745] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 254.358789][T13745] head: 00fff00000000040 ffff88801a442280 ffffea000156f600 0000000000000002 [ 254.367439][T13745] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 254.376090][T13745] head: 00fff00000000003 ffffea0000bd1e01 00000000ffffffff 00000000ffffffff [ 254.384744][T13745] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 254.393397][T13745] page dumped because: kasan: bad access detected [ 254.399796][T13745] page_owner tracks the page as allocated [ 254.405490][T13745] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12445, tgid 12438 (syz.4.1558), ts 222263090669, free_ts 220262144691 [ 254.427007][T13745] post_alloc_hook+0x240/0x2a0 [ 254.432200][T13745] get_page_from_freelist+0x21e4/0x22c0 [ 254.437726][T13745] __alloc_frozen_pages_noprof+0x181/0x370 [ 254.443514][T13745] alloc_pages_mpol+0x232/0x4a0 [ 254.448351][T13745] allocate_slab+0x8a/0x370 [ 254.452838][T13745] ___slab_alloc+0xbeb/0x1420 [ 254.457501][T13745] __kmalloc_noprof+0x305/0x4f0 [ 254.462334][T13745] cache_create_net+0x92/0x260 [ 254.467080][T13745] gss_svc_init_net+0x58/0x570 [ 254.471836][T13745] ops_init+0x35c/0x5c0 [ 254.475975][T13745] setup_net+0x10c/0x320 [ 254.480203][T13745] copy_net_ns+0x31b/0x4d0 [ 254.484601][T13745] create_new_namespaces+0x3f3/0x720 [ 254.489872][T13745] unshare_nsproxy_namespaces+0x11c/0x170 [ 254.495572][T13745] ksys_unshare+0x4c8/0x8c0 [ 254.500060][T13745] __x64_sys_unshare+0x38/0x50 [ 254.504815][T13745] page last free pid 5856 tgid 5856 stack trace: [ 254.511119][T13745] __free_frozen_pages+0xbc4/0xd30 [ 254.516220][T13745] __put_partials+0x156/0x1a0 [ 254.520882][T13745] put_cpu_partial+0x17c/0x250 [ 254.525625][T13745] __slab_free+0x2d5/0x3c0 [ 254.530022][T13745] qlist_free_all+0x97/0x140 [ 254.534593][T13745] kasan_quarantine_reduce+0x148/0x160 [ 254.540032][T13745] __kasan_slab_alloc+0x22/0x80 [ 254.544866][T13745] __kmalloc_noprof+0x224/0x4f0 [ 254.549700][T13745] tomoyo_realpath_from_path+0xe3/0x5d0 [ 254.555239][T13745] tomoyo_path_number_perm+0x1e8/0x5a0 [ 254.560681][T13745] security_file_ioctl+0xcb/0x2d0 [ 254.565691][T13745] __se_sys_ioctl+0x47/0x170 [ 254.570263][T13745] do_syscall_64+0xfa/0x3b0 [ 254.574750][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.580624][T13745] [ 254.582928][T13745] Memory state around the buggy address: [ 254.588540][T13745] ffff88802f47bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 254.596580][T13745] ffff88802f47c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.604620][T13745] >ffff88802f47c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.612659][T13745] ^ [ 254.617752][T13745] ffff88802f47c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.625792][T13745] ffff88802f47c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.633829][T13745] ================================================================== [ 254.648987][T13745] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.656209][T13745] CPU: 1 UID: 0 PID: 13745 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) [ 254.666101][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.676403][T13745] Call Trace: [ 254.679667][T13745] [ 254.682583][T13745] dump_stack_lvl+0x99/0x250 [ 254.687162][T13745] ? __asan_memcpy+0x40/0x70 [ 254.691741][T13745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.696929][T13745] ? __pfx__printk+0x10/0x10 [ 254.701515][T13745] vpanic+0x281/0x750 [ 254.705482][T13745] ? __pfx_vpanic+0x10/0x10 [ 254.709987][T13745] ? irqentry_exit+0x74/0x90 [ 254.714570][T13745] panic+0xb9/0xc0 [ 254.718278][T13745] ? __pfx_panic+0x10/0x10 [ 254.722682][T13745] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 254.728577][T13745] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 254.734455][T13745] ? __mutex_lock+0x801/0x1350 [ 254.739206][T13745] check_panic_on_warn+0x89/0xb0 [ 254.744222][T13745] ? __mutex_lock+0x801/0x1350 [ 254.748970][T13745] end_report+0x78/0x160 [ 254.753200][T13745] kasan_report+0x129/0x150 [ 254.757690][T13745] ? __mutex_lock+0x801/0x1350 [ 254.762445][T13745] __mutex_lock+0x801/0x1350 [ 254.767020][T13745] ? __mutex_lock+0x5bb/0x1350 [ 254.771814][T13745] ? l2cap_unregister_user+0x6a/0x1b0 [ 254.777178][T13745] ? __pfx___mutex_lock+0x10/0x10 [ 254.782186][T13745] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 254.788065][T13745] l2cap_unregister_user+0x6a/0x1b0 [ 254.793249][T13745] hidp_session_thread+0x3c9/0x410 [ 254.798347][T13745] ? __pfx_hidp_session_thread+0x10/0x10 [ 254.803963][T13745] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 254.809846][T13745] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 254.816076][T13745] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 254.822394][T13745] ? __kthread_parkme+0x7b/0x200 [ 254.827318][T13745] ? __kthread_parkme+0x1a1/0x200 [ 254.832330][T13745] kthread+0x70e/0x8a0 [ 254.836385][T13745] ? __pfx_hidp_session_thread+0x10/0x10 [ 254.842006][T13745] ? __pfx_kthread+0x10/0x10 [ 254.846584][T13745] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.851767][T13745] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.856970][T13745] ? __pfx_kthread+0x10/0x10 [ 254.861550][T13745] ret_from_fork+0x439/0x7d0 [ 254.866129][T13745] ? __pfx_ret_from_fork+0x10/0x10 [ 254.871231][T13745] ? __switch_to_asm+0x39/0x70 [ 254.875990][T13745] ? __switch_to_asm+0x33/0x70 [ 254.880741][T13745] ? __pfx_kthread+0x10/0x10 [ 254.885318][T13745] ret_from_fork_asm+0x1a/0x30 [ 254.890077][T13745] [ 254.893330][T13745] Kernel Offset: disabled [ 254.897637][T13745] Rebooting in 86400 seconds..