last executing test programs: 1m57.754125487s ago: executing program 4 (id=769): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="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", 0xf9b}], 0x1}, 0x24008890) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x2a040, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001640)=0x1) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000141a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000001440)=0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f0000001680)=""/240, 0xf0, 0x0, &(0x7f0000001780)=""/182, 0xb6}}, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x18}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x16, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000ffffffff0000000000000080b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ac4bffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000da8ae1ff0000000085100000050000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0x54, &(0x7f0000000300)=""/84, 0x41000, 0x2, '\x00', r5, @cgroup_sockopt=0x16, r6, 0x8, &(0x7f00000014c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0xa, 0xc, 0x6}, 0x10, r7, r8, 0x0, &(0x7f00000018c0)=[r4, r4, r9], 0x0, 0x10, 0x9, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x5, &(0x7f00000003c0)=0x101, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x4b, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r13, 0x0, 0x7}, 0x38) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r12, &(0x7f0000000180)="a6e2976b5c", 0x5, 0x4048011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r14, 0x0, 0xf0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r11}, &(0x7f0000000180), &(0x7f00000002c0)=r14}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r15, 0x0, 0x80, 0x0, 0x108) 1m57.41874751s ago: executing program 4 (id=771): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x10}}], 0x48}, 0x0) 1m56.226274805s ago: executing program 4 (id=784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x3, 0x4, 0x2, 0x10, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x3, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r9, &(0x7f0000000340)}, 0x20) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000014000000100007"], 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) 1m55.516179434s ago: executing program 4 (id=786): unshare(0x42000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000005c0)={{0x2, 0x4e24, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x0, {0x2, 0x4e21, @multicast2}, 'veth1_to_batadv\x00'}) (async) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000005c0)={{0x2, 0x4e24, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x0, {0x2, 0x4e21, @multicast2}, 'veth1_to_batadv\x00'}) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000000000000000a0000008510000003000000180000000000000000000000000000009500000000000000184a0000ffffffff000000000000000095"], &(0x7f0000000740)='GPL\x00', 0x3, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) (async) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x128}, 0x4010) recvmsg$unix(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r11}, &(0x7f0000000100)=0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x100}, {0x6}, {0xfffffffffffffda9, 0x15, 0xe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x100}, {0x6}, {0xfffffffffffffda9, 0x15, 0xe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0xf8036000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) 1m53.577565792s ago: executing program 4 (id=803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2, 0x0, 0x9}, 0x18) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7000000}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m52.996983965s ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c80}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000004500004804c0001800b0001006f626a72656600003c0002800900020073797a300000f7ff0900020073797a31000000000900040073797a30000000000900040073797a310000000008000540000000010900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0) (async) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1m52.690197608s ago: executing program 32 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c80}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000004500004804c0001800b0001006f626a72656600003c0002800900020073797a300000f7ff0900020073797a31000000000900040073797a30000000000900040073797a310000000008000540000000010900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0) (async) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.278183881s ago: executing program 0 (id=2273): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(r2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) listen(r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe"], 0x58}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 2.205762674s ago: executing program 5 (id=2275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x105}]}]}, 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000022440000145f76697274043769000000000000c42c3cebb284f266da00"], 0x5e}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000002060108000054000000000000000040050001000600000005000500020000000900020073797a310000000011000300686173683a69702c6d61726b000000009f6fa95dfb0f3fef2b74000f889e0dd2dd9dced57d23abc542048e9d252147ca6c828c15db16c7ff77f71b2a840ab675f4c0d0ad58a36d2d54a98476c2a046a9e0e501dcf981ef16860d39160ae805874f710f50b6f0deac41f98725ac7c55"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x60}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007cbc317f47a6df640000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d30000009500000000000000542b624ff86088e18777"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r7, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x4008890) r10 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044045}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 2.071285342s ago: executing program 5 (id=2277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff}, [@RTA_IIF={0x8, 0x1b}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) read(r6, &(0x7f00000008c0)=""/4096, 0x1000) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000300b9b1c4260000060000001a000000", @ANYRES32, @ANYBLOB="0000000000000000790800000000000018000000fcffffff00000000000000009500000000000000360a0200d0ff0000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x28}}, 0x0) 1.981283695s ago: executing program 0 (id=2279): unshare(0x62040200) unshare(0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) connect$can_bcm(r0, &(0x7f0000000040), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$kcm(r3, 0x0, 0x100) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc9564eab44f5cc}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 1.976798496s ago: executing program 3 (id=2280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) (async) 1.865101593s ago: executing program 5 (id=2282): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="13000000d7"], 0x20) (async) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000130001000000000000000000100000080c00000000000000000000001400310000000000000000000000ffffac1e0001"], 0x34}], 0x1, 0x0, 0x0, 0xc081}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001890e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7, r2}, 0x38) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x8000, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 1.765439793s ago: executing program 3 (id=2284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x13, 0x0, &(0x7f0000000600)) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000080)=0x50000, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="05000100fd"], 0x9) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9, 0x2, 0x0, 0x7, 0x4, 0xe03}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03fff500000000000000020000000900010073797a30"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', r7, 0x10, 0x8, 0x8, 0x7, {{0x1d, 0x4, 0x1, 0xa, 0x74, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@noop, @end, @rr={0x7, 0x1b, 0x4d, [@private=0xa010101, @multicast1, @remote, @empty, @multicast2, @multicast2]}, @timestamp={0x44, 0x8, 0xc, 0x0, 0x2, [0x7]}, @ssrr={0x89, 0x1f, 0x32, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @local, @multicast2, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x63, 0x0, 0x2, [0x6, 0x6, 0x3, 0x10001]}, @ra={0x94, 0x4}]}}}}}) 1.678381472s ago: executing program 1 (id=2285): accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x0) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@local, @broadcast, 0x1, 0x3, [@multicast2, @remote, @remote]}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005640)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="62d81c3c", 0x4}], 0x1}], 0x1, 0x40080) 1.673493487s ago: executing program 5 (id=2286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="6435b7", 0x3, 0x0, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x1e, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12) sendfile(r6, r5, 0x0, 0xf03a0005) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x8000000000002) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, 0x0, 0x0) 1.56021537s ago: executing program 2 (id=2287): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x8001, 0x6eb, {{0x22, 0x4, 0x2, 0x2, 0x88, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @empty, {[@cipso={0x86, 0x6c, 0x0, [{0x2, 0x6, "f097ad23"}, {0x7, 0x10, "45eb62d4c9cae845aa47861be592"}, {0x1, 0x9, "bc4d0521659ec2"}, {0x1, 0xf, "e568647e96e87e0eba1c6b944a"}, {0x5, 0x12, "269f6d5e04e7d4b9ef9e966c87da2089"}, {0x1, 0xf, "3840e0ac9369a09c505ad1030b"}, {0x7, 0x8, "22d0092f0d48"}, {0x0, 0xf, "654149903d9b0751a02df7875b"}]}, @ssrr={0x89, 0x7, 0x8e, [@local]}, @noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=@deltfilter={0x4d4, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0x7}, {0x5, 0xd}, {0xffff, 0x8014}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8b}}, @filter_kind_options=@f_basic={{0xa}, {0x42c, 0x2, [@TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfcd}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x48e, 0xf2, 0x8, 0x1, 0x1, 0x0, 0x5, 0x7, 0x400, 0x401, 0x0, 0x6ee, 0x1, 0x9, 0x1, 0x2, 0x2, 0xffffffc0, 0x9, 0x6, 0x7f, 0x1b5, 0xffffffff, 0xfffffff9, 0x0, 0x9, 0x800, 0x7fffffff, 0x200, 0x9, 0x1, 0x6, 0x5, 0x5, 0x8, 0x3, 0x6, 0x4, 0x7, 0xc28b, 0x7fff, 0x5, 0x101, 0x7, 0x5, 0x30d9, 0x64d9, 0x1, 0xc43f, 0x8b73, 0x4, 0x5, 0x1, 0x84, 0x3, 0xff, 0x0, 0x0, 0x9, 0x85, 0x8, 0x6, 0x4, 0x3, 0x0, 0x10, 0x400000, 0x100, 0xd, 0x2, 0x2, 0x3, 0xffff, 0x8, 0x4, 0x800, 0x400, 0x4, 0xffffffff, 0x1, 0x2, 0x6, 0x7, 0xffffff80, 0xbe5, 0xd, 0xf8d, 0x0, 0x3, 0x8, 0x6, 0x1, 0x2, 0x6, 0x5, 0x3c3, 0x80000000, 0x4, 0x0, 0x401, 0x7ff, 0x8, 0x400, 0x100, 0x7, 0x9, 0x8, 0xcf, 0x1, 0x81, 0x2, 0xf0, 0xfdd4, 0x6fb, 0x0, 0xa3bf, 0x1, 0x8, 0x1000, 0x2, 0x78, 0x3993, 0x8, 0xffffff00, 0x1, 0x55e9, 0xff, 0x7, 0xc, 0x4, 0x6, 0x7, 0xfffffff8, 0x1, 0x2, 0x2, 0xff, 0x1, 0x80000001, 0x81, 0xf37, 0x7, 0x80000000, 0x7, 0x4, 0x1, 0x10000, 0xe, 0x8, 0x1, 0x3, 0x4, 0x5, 0x3, 0x7, 0x2, 0xe8a, 0x2, 0x5, 0xfffffffd, 0x8, 0x44aa, 0x89c, 0x1000, 0x9, 0x0, 0x9, 0x81, 0x7, 0x1ff, 0x800, 0x6, 0x9, 0xfffffffa, 0x6, 0x1, 0x5, 0x7, 0x5, 0x3, 0x80000000, 0x200, 0x400, 0x9c28, 0x7, 0x4, 0xfc, 0x1, 0xa, 0x9, 0x9, 0x80000000, 0x8, 0xf18f, 0x9, 0xd9, 0x6ae6ee86, 0x6, 0x6, 0x7, 0x3, 0xfffff38a, 0x0, 0xff, 0x99f4f3d, 0x3, 0x80000001, 0x8, 0x8, 0x9, 0x1, 0x5a, 0x7, 0x1, 0x4, 0x0, 0x24, 0x10001, 0x8, 0x3ff, 0xaa42, 0x3, 0x8, 0x0, 0x68cab9ec, 0x10, 0x3, 0x5, 0x2790, 0xc, 0x5, 0x1000, 0x401, 0x3, 0x6, 0x200, 0x2, 0x0, 0x800, 0x7ff, 0xe, 0x24e, 0xff, 0x7, 0x84, 0x1000, 0x6, 0x7fffffff, 0x3, 0x9, 0x3, 0x80, 0x2ae2, 0x8af4, 0x80000000, 0x72]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0xebd9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x9}}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fcc2}, @TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200a143000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.425951188s ago: executing program 1 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016000400014006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001fb00000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000240000001010800014000000000080003400000000008170440ffffffd90900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1.402334841s ago: executing program 2 (id=2289): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getpeername(r0, &(0x7f00000000c0)=@tipc, &(0x7f0000000240)=0x80) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000014c0)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61", 0x72}], 0x1}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1428, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1488) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000000), 0x98) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000000000004bd70000000a40000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001000010000000000000000000000000a"], 0xb0}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r6 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$kcm(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="5e85ddc444bbe877c9caf70073f086dcb17bd899b136d44a285188fb4b756d063b6624d4814f4d7433859181ea04628f0d623163bc2ecbd4ea0af9eab1420851a8de8adc308e1ff8d497bf6f7ba8658e3f56ac405af5c25c6d5e14b29db5f96ab1a5d3adda66f3dcf612cb36c82f249c35203f3fbc05096ad31cdf8f15a913bef95b9c286e9cbfea645d42f86e87ae2af91141b92e82b9b45dcaec3ece10368da01c00c9a8", 0xa5}, {&(0x7f0000000480)="0a93afaf07b49051765f1dcc", 0xc}, {&(0x7f00000007c0)="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", 0x2cf}], 0x3}, 0x4010) r7 = socket$inet(0x2, 0x4000000000000001, 0x5555) unshare(0x8000400) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e011", 0x44}, {0x0}, {&(0x7f0000000c40)="74447cef8906459cfee334d608d2feba18caa1b9c363de155b15af551154a57dd5359fc46db821289866d7de00824b9ac20b58b70104c405031fcbc191fa", 0x3e}], 0x3}}], 0x2, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001600)={0x0, 0xff}, &(0x7f0000001640)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000050000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.365051541s ago: executing program 3 (id=2290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff7f963}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x6) write(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.205547784s ago: executing program 1 (id=2291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r2, &(0x7f0000000440), &(0x7f0000000540)=""/125}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x18, 0x68, 0x100, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/68, 0x44}], 0x2}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc0ab2f077f500c3a}}, [@NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x84, 0x8, "d1184cb0cfd632611fa86ad229ef277e70511d57fcb2523575c00e1db738aa49ae92393e40a85d56e12102718a2346e209045427edba6866b6f8da4d912a24b74013fc9ab1df21813ce69b4e94328568ffe74d618114678a3542f768b6e23d98aab5684f93daed251070bb913e1de015ef4b8ea357e9f365480ff44cf321233a"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x1f, 0x8, "9422962a79d0830d8eac56118cf625d27cf57f31143a135d9b870a"}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x190}, 0x1, 0x0, 0x0, 0x804}, 0x24000844) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x3c26}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 1.203108136s ago: executing program 2 (id=2292): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x20042, 0x1, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)="ef", 0x1, 0x400a0, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x2, 0xfe, 0x8, 0xfc, 0x4, 0x3}, 0xe) shutdown(r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa1}, {}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x5, &(0x7f0000000140)=""/5, 0x41000, 0x2a, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x0, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0xf, 0x9}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x30, 0xce, &(0x7f0000000440)="fa9c47e05ce81f359ba9df8d7385107102bdaed2cd5877a3b4887eceea95c9c2b8af5cd4eaaa8c3c81e82dbff375328f", &(0x7f00000005c0)=""/206, 0x93c, 0x0, 0x59, 0xa6, &(0x7f00000006c0)="50107ba5698500eed4294a3299ac8e41f49bf08f21f9302d3545e822134394fbc82d4a85540fb32cf883534a88192e605ab3f1a15ff571a125af3d84923822aa7eb38de3dfc6220d4012b0a4d40da7d36dbef6986197641e50", &(0x7f0000000740)="9f0db988a54546467738a89f7062a66df6135f5ce3d129e648372c47f0f06c2f766251fb3079a96d901dd0b71c14e0c09534830c128c5e052c24317afd4b596d08221b1fcbcd257c025cbfc1536a08a5ad8ce4f7a906166394d36edf21099c367da27c62b34eebb14a9fc1303d24ccb6061f3237e591192f4cf79302a512663bd13eac81d515d0801f04cd8bc906b43b3b9088a47296cd1018731f47e9caad1469aa66aab262", 0x2, 0x0, 0x10001}, 0x50) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000d80)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xc5e1, @rand_addr=' \x01\x00', 0xffffffdd}}, [0xffffffff00000001, 0xc472, 0xffffffffffff1fdf, 0x6, 0x7, 0x1000, 0x8, 0x2, 0x6, 0x8, 0x5, 0x1, 0xffff, 0x4, 0x1]}, &(0x7f00000000c0)=0x100) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480)=0x800, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) 1.093644887s ago: executing program 3 (id=2293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000580)='GPL\x00', 0x7, 0x34, &(0x7f00000005c0)=""/52, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x101, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@ax25={{0x3, @netrom}, [@default, @rose, @null, @default, @bcast, @default, @default, @bcast]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f00000001c0)=""/92, 0x5c}], 0x3}, 0x10020) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10021) 1.067859867s ago: executing program 2 (id=2294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x110d1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd, 0x1}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x40008880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 880.183709ms ago: executing program 1 (id=2295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x2a, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x81}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@empty, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2, 0x0, 0x0, 0x1}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x800, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xe, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x3, 0x6, 0x3, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x4}, @generic={0x6, 0xc, 0x7, 0x7ab1, 0x11}, @call={0x85, 0x0, 0x0, 0x6f}], &(0x7f0000000080)='GPL\x00', 0xa0, 0xf2, &(0x7f0000000240)=""/242, 0x1e00, 0x0, '\x00', r2, 0x25, r6, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000380)=[{0x1, 0x4, 0x10, 0xa}, {0x3, 0x2, 0x8, 0x31875165c1b80145}, {0x1, 0x2, 0xc, 0x5}, {0x0, 0x1, 0x1}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0xe, 0xc}, {0x1, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x5, 0xc}, {0x5, 0x3, 0x6, 0x7}], 0x10, 0x0, @void, @value}, 0x94) 814.08336ms ago: executing program 0 (id=2296): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x5, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "f56ef97b3be3a5782b72db116099456ea3908d3717d7177bb6ad4029a0a85b54", "c36c2507818149e1ff770824c7da3daf3ff6431d38a01da8039af8db22b068aa", "7cfb8dfa2b2b1c59daaf53fbf1c6e8d65fe4dfa62ccb88044167c9048eddeda6", "0d18340f9147d09362f32abccf39d0ab72290958ca782131d214397e5cdf5cba", "f2db91cfe2620dc4bcc3698803f6c3f5c1e4b07d9a6d2f1ca371398e269823b7", "d3a908c1e8e861d060468789", 0xc, 0x10, 0x5, 0x7, 0xd}}) 679.091336ms ago: executing program 0 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1a8, 0x2f, 0x300, 0x70bd29, 0x25dfdbfb, {0x4}, [@nested={0x1c, 0xa4, 0x0, 0x1, [@typed={0x14, 0xab, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x10c}]}, @typed={0xc, 0x131, 0x0, 0x0, @u64=0x7}, @generic="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", @typed={0x4, 0x52}, @nested={0x18, 0x3f, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@remote}]}, @generic="0fe3bcd5e53cb197708fd35eaa3974ecc9e501331309dae3c3c4b10f434db5bc371b06c034025b192a46a440d1e68ce2891da39dc31821cefe215dbd00a3757fb507b3edf68242967107664584a34c0ba5eb"]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async, rerun: 64) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, r1, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0x74}}, 0x80) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) connect$vsock_stream(r7, &(0x7f0000000680)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000700), 0x2, 0x0) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000740), 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000041) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x1, 0x3, 0x8, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a40)={@empty, 0x0}, &(0x7f0000000a80)=0x14) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000980)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @jmp={0x5, 0x0, 0x7, 0x8, 0x0, 0xc, 0xfffffffffffffffc}], &(0x7f0000000a00)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x17, '\x00', r11, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)=[{0x0, 0x5, 0x0, 0x2}, {0x0, 0x3, 0x10, 0xc}], 0x10, 0xcd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r10, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r12}, 0x20) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={r1, 0x20, &(0x7f0000001040)={&(0x7f0000000f00)=""/223, 0xdf, 0x0, &(0x7f0000001000)=""/3, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x19, 0xc, &(0x7f0000000c80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @generic={0xf, 0x9, 0x1, 0x101, 0x2000000}, @generic={0x2, 0x6, 0x0, 0x2ba, 0x465}, @ldst={0x4, 0x1, 0x3, 0x0, 0x1, 0x4, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @alu={0x4, 0x1, 0x7, 0x4, 0x6, 0x6, 0xfffffffffffffffc}], &(0x7f0000000d00)='syzkaller\x00', 0x1, 0xf5, &(0x7f0000000d40)=""/245, 0x41000, 0x5, '\x00', r11, @cgroup_sockopt=0x16, r14, 0x8, &(0x7f0000000e80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000ec0)={0x5, 0x6, 0x4, 0x6}, 0x10, r15, r12, 0x0, 0x0, &(0x7f00000010c0), 0x10, 0x1, @void, @value}, 0x94) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001240)={'wpan1\x00', 0x0}) (async) r18 = openat$cgroup_ro(r8, &(0x7f0000001280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r19 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, r16, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r18}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r19}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008830}, 0x4010) 630.573695ms ago: executing program 2 (id=2298): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x6, 0x200, 0x40, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 509.343917ms ago: executing program 5 (id=2299): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xc, [@datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x7, 0x7}], "e5"}, @datasec={0x3, 0x5, 0x0, 0xf, 0x3, [{0x1, 0x1, 0xb}, {0x4, 0xd0b2, 0x8}, {0x1, 0x0, 0xfced}, {0x2, 0x2, 0xe961}, {0x3, 0x8, 0x80000000}], "ed3f29"}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x30, 0x0, 0x61, 0x30, 0x30, 0x30, 0x61]}}, &(0x7f0000000200)=""/4096, 0x94, 0x1000, 0x0, 0x9, 0x10000, @value}, 0x28) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000012c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x4, 0x8}, 0xc) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)=@generic={&(0x7f00000013c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)='%-5lx \x00'}, 0x20) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0x0, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x9, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x6}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x5, 0xa, 0x8000, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001540)=[r1, 0xffffffffffffffff, r2, r3, r4, r5, r6], &(0x7f0000001580)=[{0x5, 0x2, 0xc, 0x6}, {0x0, 0x4, 0x4, 0xc}, {0x0, 0x4, 0x3, 0x3}, {0x4, 0x5, 0x0, 0xb}, {0x4, 0x5, 0x10, 0xc}, {0x5, 0x1, 0x10, 0x2}], 0x10, 0xdb81, @void, @value}, 0x94) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000016c0), 0x8) sendmsg$NFT_BATCH(r7, &(0x7f0000001a80)={&(0x7f0000001700), 0xc, &(0x7f0000001a40)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x160, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x8f, 0x6, "7c07a1b635f7eaa82d801feee10bb87f3f986510e3810e623f2b76168993a3005d28607ec1ea1f7b826815fcf94d23bfd5bd241035ddb0b9ba9ca3f26ceaddf8f061a692e941a8123b1d993a4628cb7406d1e1a5643df09e22767ac24dc970aa9d03323dead4ab54be004a2fd291fb95fd79543dc9d9de979b0acd75705fc3833d74c8fb6e074263e4038f"}, @NFTA_TABLE_USERDATA={0xbc, 0x6, "2ae43a38db65e97209d63fdd833f14de8237ab526e4760b45b4aac0260928daab340502186a7d224523831e076f9543e172ace58a3f5f70d614cb77969aa1c254d10974ac6f937d0ba8e4ed1c0a4a127391931e2abe6178c6a86025008a01d149bfe502078f6c4deb68a6d5e39482b91d71def7f1d55667bb9e54d334890e31fb4eb7edd81e15edfe10a2e90200991ad40e5cd4e124cac28a2938d41a08027a6daaba8089b45428ecf3340c35be01a980a0f21aa47563889"}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x4a, 0x6, "a14bdf4b9b39c988d97bc17f0f764e2ed843f4598a5559dad4d32c331b020806dba2652dbcd3e81aeef5199d55b9df12adb1149ab6ff42f62e01faf8222190e802f7259657bf"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x2cc}, 0x1, 0x0, 0x0, 0x4}, 0x488d0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$ax25(r7, &(0x7f0000001b00)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f0000001b80)="a0d7e613d323f38152ddefd2f14c4da505fe71e8564dab5577c5a8d807543cdcf5493d937fa98efeff0d947b5716e6079f29dc8ca968d3c0d68f4abad74e05fa3d2fadcea7b3f832a9e816e3a47e1c3670e51d47dac6f1", 0x57, 0x4000000, &(0x7f0000001c00)={0xa, 0x4e21, 0x10001, @remote}, 0x1c) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000001c40)={0xffffffffffffffff, 0x1, 0xfd, 0x401, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x37}, @multicast1}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001c80)={{0x0, 0x0, 0x3e, 0x3, 0x5, 0xa305, 0x5, 0x6, 0x8, 0x6b, 0x1, 0x7ff, 0xe7, 0xfffffffffffffffd, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001d40)={r10, 0x4}) getpeername$l2tp(r7, &(0x7f0000002d40)={0x2, 0x0, @loopback}, &(0x7f0000002d80)=0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x80, r11, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="935beb092939"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000002f80)=0xe, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000003080)={'syztnl1\x00', &(0x7f0000003000)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x9, 0x2, {{0x15, 0x4, 0x2, 0x1b, 0x54, 0x68, 0x0, 0x80, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0x34, 0x0, [{0x0, 0x4, "90bf"}, {0x5, 0x6, "c9358939"}, {0x1, 0x8, "a862739ea4b6"}, {0x6, 0xe, "c3b77b84d3650876c9599c7a"}, {0x6, 0xe, "2fe5974d3849fd1c516d1bee"}]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000003140)={'syztnl2\x00', &(0x7f00000030c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x0, 0x1, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x7800, 0x8, 0x7}}) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000003180)={0x0, @local}, &(0x7f00000031c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f00000032c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x54, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004880) (async) r16 = accept(r7, &(0x7f0000003300)=@can, &(0x7f0000003380)=0x80) sendmsg$kcm(r16, &(0x7f0000003800)={&(0x7f00000033c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003440)="3cc0a8985930f10056243e61aab5e4bf8faa6cb7c293c651acb864fe918e33c284464e1383e2b799eee8766d663405e1516824864c4d84b06c24bac03df480b37ae60b1f4252081849747107af2dc5b965d4e77081efcc609fecc06139e239a0945501847ff5624c2ef8b7b48cba1494b8", 0x71}, {&(0x7f00000034c0)="1db28af7e878047227a1cfc33d3f7fcc384d5f9dc8cb39e11e5f3ecb3d866b299c952bc971729628b24fed67b071cb53eaa48209dd9dd0ef2e1c7c2211a4c7cbbc5cb2c6adc4b0c988f78729b956fb71ea3c6e35432d4ab7dc40272f922b84da240773a7a2f1f8d558638666b3f6780888179128743652ecf7cf5a3ae38b97", 0x7f}, {&(0x7f0000003540)="6f82ad4d3bdace121fabc9cb94b573482c5e7f08975aef71a125b4a53ce555967af6333c860752376ede4fba53ce2a61387d2a6ddbd41fa630f67900ca22798b5981f38a63849754fcac1e0098091d9986ceae887627dc2ca979c7b75532e70997ba6963710dfcafcac76878f6b7fa571c0c82aa94785c920162e7c195ee6f118f867a8c621f3007ef32f3b3b78ac31f5dd4f55a302c6aa05b21040edf04e0ef838d5dc83ec42bc7c4aaa3688916d75d378d92e2b957f0a9b0109bcf5484c2130ef04ed4770e2e7e53cd459d4902ca614b86949f1f937de4e4bf9f", 0xdb}, {&(0x7f0000003640)="7e5318745e8ca5800ce0f57475463d99f20bd24430254022164276d76cf6cf2be944f3025a69c7b03d763f7299566476a387f55f8d63f162cb562b07f15be04f10960ee4412ba436369a98a0a07bc721d1e0839bd69f0582db24dbadc227884276b8dc0a4a9a3a314deaaa1e53f6e0e59ba24da9d2f4c76e2bb25ef48c344bb1ea624f58ddcfe85836ba9de53a6f4faf63d809eddea8c41bc2e06f5a72d42fb94bc0a8c8c5e6a925078f5485a836d518d127ab7e6ef1f9c953", 0xb9}], 0x4, &(0x7f0000003740)=[{0xc0, 0x29, 0x7, "1a6e21ea53d5080f2d2256e907cd01cecfeef1f080297e8ad90b05a3bdd77a5244f239294a44669d54d37a25603de9058903c843130b834d1d67b4545834fe981146354da721fe1fc29207ddf0e03f986dc3e04bac32fae070da2f1dd543b6c74df27204a926483849b9cf6b4dd1a02a58f5cdba985116602220d3564ea3233d2c7a5a537fe55dedcdca8c7fcb52128ce380765eca2bcc2455ec294587258ccf755ee6618a8fa33b2f105a08e050419d"}], 0xc0}, 0x84) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000004440)={0x1f, 0x4, {0x7ff, @struct={0x6, 0xffffff8b}, 0x0, 0x6, 0x5, 0xa, 0x0, 0x6, 0x400, @usage=0x4, 0x7, 0x5, [0x358f, 0x2, 0xffffffffffffdb41, 0x8000, 0x0, 0x6b9]}, {0x200, @struct={0x7fffffff, 0xb}, 0x0, 0x1, 0x10001, 0x2, 0xffffffffffffff00, 0x1000, 0x2, @struct={0x1, 0x8}, 0x7fffffff, 0xffffffff, [0x5147, 0x7368, 0x3, 0x7, 0x2]}, {0xe89a, @usage=0xfffffffffffffffc, 0x0, 0x7, 0x6, 0x100000001, 0x9, 0x6, 0x20, @struct={0x80000001, 0x4}, 0x7f, 0xffffffff, [0x5, 0x4, 0x1000, 0x1, 0x4, 0x7]}, {0x4, 0x1}}) 454.803797ms ago: executing program 1 (id=2300): bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x174, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0x0, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x144, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x138, 0x6, [@m_simple={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x105, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d783e6c14d8da6156473bc39143eaba66c1921f94f19f65bc88b127c0eb8ac765b9220105c7c1060a0dd863f80d90bc3848a4fa52f73aaa4e21a1f0d6078cc5386cdfb2eef199f5261cf64455c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x174}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) splice(r5, &(0x7f0000000080)=0x9, r5, 0x0, 0x8a, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x38, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x3, 0x7, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 412.420343ms ago: executing program 2 (id=2301): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0xfffffffffffffc88, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=""/133, 0x93}, 0x10100) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) socket(0x1000000000000010, 0x80802, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x9}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x8000000}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 365.506354ms ago: executing program 0 (id=2302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c000025002c00010000000000000000ac0700000000000000c67b000000000000"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x31, 0x0, &(0x7f00000001c0)=0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x400004d}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x124, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x1, 0x116, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast, {[@generic={0x1, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6b2c, 0x42, "449a5725438e8febc4ae7f809aaae3a5129763c7940163647e45dd3e81bdac36f9913dcc18b192401fc402117e4b34a90862df17787ba65ccbe12828c4a88ccbcc7489377207f510cbd37a642ab3bc521801bcf1d80a09245c87700bca1decaad5a7c10fc437816fb5e187b59b9b73b725568a851630500323896d2f3616eb7658d041c17c9ef36ad7b00b9b255d50fee6d1faeced26f0747d03bcc86dad2151ebf6c7f93512e077627e4e49a82dee50c429f422cfeb6cfe0a53ca514b9b5749003b3bff7767da8175d4393928b106f9926796339f623994bef8b667dec908116f19174298d9484839de3a783c0580538977e05c9751"}}}}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)={0x6, 0x0, 0x2, 0x5}, 0x8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x40004) getuid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x4cf91c15, 0x7, 0x7fffffff, 0xfffffff7, 0x7, 0x10000, 0x3, 0x1, 0x94, 0x7, 0x9, 0x6359, 0x4, 0x8, 0x8, 0x3, 0x8, 0x0, 0x6, 0x3, 0x6, 0x2a, 0x80000000, 0x200, 0x0, 0x8, 0xa, 0x7561, 0x6, 0x5, 0x4, 0x80000001, 0xe, 0x8, 0x9, 0x0, 0x2, 0x800, 0x3, 0x7ff, 0x0, 0x7, 0x400007, 0x853, 0x7fd, 0x81, 0x30e8, 0x7fff, 0x40, 0xfffffff2, 0x0, 0xda, 0xfffffff6, 0x9ae, 0x5, 0x1, 0x41d4, 0x1, 0x37d4, 0xd, 0x6, 0x4, 0x6, 0x7, 0xe3, 0x1, 0x671f, 0xff, 0x2d8, 0x4, 0x10000, 0x80000001, 0x6, 0x3, 0x0, 0x3, 0x1, 0x4, 0xa7f9, 0x5, 0x8, 0x534, 0x0, 0x7ff, 0x5, 0x2, 0x1ff, 0xfffff3c0, 0x9, 0x4, 0x3, 0x4, 0x8, 0x4, 0x62c, 0xea88, 0x800, 0x2, 0x101, 0xb8f, 0x2, 0xa3f9, 0xfffffff9, 0x80000000, 0x5, 0x2, 0xa0000, 0x8, 0x4, 0x4, 0x8, 0x8001, 0xfd6e, 0x8000, 0xe3, 0x5, 0x5, 0x5, 0x531, 0x40000000, 0x2, 0x4, 0x7fffffff, 0x10000, 0x8, 0x10000, 0x1, 0x7, 0x10000, 0x1, 0x7, 0x6, 0x9, 0x6, 0x1000, 0x6, 0x5, 0x1, 0x8001, 0xce0, 0x8, 0x1000, 0xfff, 0xafa, 0x4, 0x6, 0x6, 0xfffff70c, 0x200, 0x1, 0xc, 0x6a, 0x96ae9b1a, 0x6089, 0x7ff, 0x9, 0x7, 0x6, 0x8, 0xfffffba3, 0xfffeffff, 0x3, 0x1000, 0x4, 0xcee, 0x6, 0x9, 0x6, 0x40, 0x2, 0xffff, 0x5, 0x1b2c, 0xe0a3, 0x5, 0x0, 0x100, 0xd48, 0x7, 0x6, 0x9d3, 0x9, 0x3ff, 0x5, 0xa3c, 0x4, 0x2, 0xf8a, 0x4, 0x2, 0xfffff800, 0x4, 0xff, 0x7, 0xa, 0x0, 0x1000, 0xe, 0x10001, 0x3, 0x3ff, 0x80000001, 0x7, 0x0, 0x8, 0x4, 0xe, 0x5, 0xffffff81, 0xf51, 0x8, 0xf, 0x10001, 0x7, 0x9, 0x9, 0x401, 0x9, 0x7fff, 0x9, 0x8, 0xebf6, 0x81, 0x7fffffff, 0x1, 0x6e, 0x8, 0x92, 0x8, 0x3, 0x10001, 0x6, 0x457, 0x4, 0x1, 0x8, 0xf4c, 0x8, 0x4, 0x10, 0x0, 0x8, 0x3, 0xfffffffe, 0x9, 0x80000001, 0x1000, 0x7, 0x7, 0xb42be557, 0x400, 0x10, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x200, 0x7ff, 0x1ff, 0x1, 0xf831, 0x2, 0x10001, 0x3, 0x5, 0x7, 0x8001, 0x7, 0x9, 0x3, 0x1, 0x3, 0x2, 0x6, 0x3, 0x6, 0xc2, 0x7f, 0x0, 0x4, 0x2, 0x1, 0x6, 0x1, 0x0, 0x8, 0x2, 0x1, 0x0, 0xc60, 0x1, 0x9, 0x8, 0x6, 0x4, 0x2, 0x7, 0x0, 0x5, 0x2, 0x9, 0x5, 0xa, 0x1, 0x7, 0x2, 0x10000, 0x6446, 0x4, 0xafe, 0x1, 0x1, 0x3, 0x8, 0x2, 0xfffffffe, 0x40, 0x0, 0x5, 0x62, 0x1, 0x200, 0xbfa, 0x1, 0x2, 0x6, 0x1, 0x7, 0x5, 0x7, 0x0, 0x7, 0x4, 0x0, 0x3b, 0x9, 0x9, 0x1, 0x0, 0xffbf, 0x4, 0x1, 0x6, 0x0, 0x5311ceb3, 0x80, 0x7, 0xfffffffa, 0x5, 0x84, 0x9, 0x7, 0x5, 0x10000, 0x0, 0x9, 0x4, 0x1, 0x7, 0x3, 0x8, 0x708, 0x6, 0x8, 0x80000001, 0x7, 0x7, 0x90, 0x1e, 0x2, 0x4, 0x8, 0x3, 0xfffffffe, 0x80000000, 0x7, 0x6, 0x2, 0x9, 0x0, 0xf3, 0x8e, 0x2, 0x101, 0x2b5, 0x7, 0xc7b, 0x6, 0xc, 0x200, 0x9, 0x1, 0x3, 0x8, 0x7, 0x7, 0x2, 0x2, 0x0, 0x9, 0x3, 0x8, 0x101, 0xfffffff2, 0x7, 0x6, 0x893, 0xd, 0x200, 0x7fffffff, 0xffffffff, 0x9, 0x5, 0x5, 0x7ff, 0x7, 0x6, 0x7, 0x9, 0x3d5a, 0xc, 0x9, 0xe6, 0x8, 0x6, 0x5, 0x876, 0x0, 0x77, 0x1, 0x3, 0x4, 0x1, 0x200, 0x4, 0x5, 0x4, 0x5, 0x9, 0x1, 0xfffffffd, 0x3, 0xed8, 0x0, 0x81, 0x6, 0x7, 0x6, 0x7359, 0x5, 0x8, 0x1, 0x80000001, 0x10, 0x8, 0x401, 0x3, 0x127, 0xffffff81, 0x8, 0x2, 0x7, 0x80000001, 0x227800, 0x401, 0xfd, 0x4, 0x5, 0xff, 0x5, 0x5, 0x7, 0x14d, 0x0, 0xa2, 0x2, 0x9, 0x3, 0x4, 0x7, 0x400, 0x6, 0x8, 0x8, 0xd903, 0x3, 0x2, 0x7fff, 0x3, 0x80000001, 0x4, 0x41, 0x8e2, 0x7, 0xc, 0x6, 0xffff8001, 0x4, 0x1, 0x4, 0x800, 0x2, 0x6, 0xf15, 0x401, 0x80000000, 0x0, 0x3, 0x9, 0x7, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7fff, 0x1, 0x9, {0x6, 0x0, 0x7a34, 0x3, 0x10, 0x8}, {0x7f, 0x2, 0xfff8, 0x6, 0x6, 0x3}, 0x35d, 0x0, 0x1}}]}]}}]}, 0x87c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fcdbdf2507000000080031000800000005002f000000000008000600", @ANYRES32=r8, @ANYBLOB="08003a0006000000080003007fd9cf4e1c225e1f39490392f7ec8ae7477185591c21ea36babb1268bcd38daa19fefe5a34f54aca7ce29dbdb0217ab1dd9212f31fb054ff75903ceb5755fa9792569d072039270222812c825765166243de8225958a3ed1d574ed0dd2833595e037cff813c07ca8f42fe4a47eccc8ab97a5fd77856e9b1b023018ce886da797a81df9d018f824a4c17b5467cb31d0e2c0421346c6e8b08ce948802db7f6329e50573b68f7ba378b62cb77c136cd03bdabaa2bd0ebafc88ef3246e6c01a378e6416c97e05499d8fafb6aefcd020f0937ad0015d8fe5ee0875c03b7c89c3bdfc481d8d5eb192b", @ANYRES32=0x0, @ANYBLOB="08003100090000000a000900aaaaaaaaaaaa000005003500f8000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000021}, 0x4048824) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) 364.473545ms ago: executing program 5 (id=2303): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x82, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000e980c200000086dd60010100004c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e21004c90"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000002800048024000180080001"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414bb0c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002400018014"], 0x9c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) pread64(r2, 0x0, 0x300, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "fffffffffffffff7", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x18, &(0x7f0000000080)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 281.523383ms ago: executing program 0 (id=2304): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendto$phonet(r1, &(0x7f00000000c0)="f01c55a18ecd0c9f511ea23e4488b16a417d2cf2488410e37fded458635eaa3296ec23749dd684ea3db1de060fc270393a2abc5a72a737b205e355aa542cb1f20ffb9e73", 0x44, 0x8880, 0x0, 0x0) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r2, &(0x7f0000000140)="110eff2f034674805aef34b993b03f736f5a49aa3fb44ad2def1c4d038e33811362e552d7b2786c8885eab59a4b7102ad36a51427174ac1e40ff5492e0307750f0cca8a2b6a1ce6396e6ab757011c1e97de3be1c4228798049869edf2a8add12ac369022e5d9aceb59c7c19b99f89653af9f76d06fcbef848d8c18ea641c6268476bcfffac188c870c2a4de55ff844a41ae186c7c4", 0x95, 0x8004, 0x0, 0x0) (async) r3 = accept$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@default, @rose, @remote, @null, @netrom, @remote, @default]}, &(0x7f0000000280)=0x48) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000002c0)) r4 = accept4$phonet_pipe(r2, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x800) sendto$phonet(r4, &(0x7f0000000380)="706a8792e42c6af1b27edcf27be52c6fac4e3e467f39e665edda08fedae3f323c690441503001e515d7f9cdd611320196ef76eb344d6475f5fdf202cb8bfaeaa646bfa648626c2f86f205d8d2d6f2ac62453acae6aac596fa801fcf8d917665de418bbf517dce52fdda8b9ad84a48bec7fd7cb3c6f1ba0620ef1856399ff740e3321618a43277c2d6189a787f1a05ccfe06abdb32ade803f7af91b3a815c2b3ffd7ae4c39eb6d62b01de860a1bc4", 0xae, 0x20004800, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x69, "63a246637a6c8e4e1cf036bbcc13c50a41cf8c5586f924c0946d7a7c7301a317eeb26b9bde61d4304d24909086f151c4b1649fbeb27c34a56dd7b94aaa44c331ca25537c72c03065e262b84144a702c7c0190a545ca42a51764d889d39a60a92750c4f2d5d852f4fa8"}, &(0x7f00000004c0)=0x71) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000500)={r6, 0x4}, &(0x7f0000000540)=0x8) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000580)={'veth1_to_batadv\x00', {0x2, 0x4e24, @multicast1}}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000005c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000600)={r4, 0x10001, 0x10000, 0x8}) connect$netrom(r7, &(0x7f0000000640)={{0x3, @null, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x1}, {0xc, 0x4}]}, @enum64={0xd, 0x5, 0x0, 0x13, 0x0, 0x7, [{0xc, 0x4, 0x9}, {0xf, 0x6, 0x6c6}, {0x3, 0x100, 0x1}, {0x10, 0x1000, 0x3}, {0x7, 0x400, 0x4}]}, @fwd={0xa}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000780), 0x8c, 0x0, 0x1, 0x6, 0x10000, @value=r7}, 0x28) (async, rerun: 32) r8 = socket$inet(0x2, 0x2, 0x4) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000800)={0x0, 0x100, 0x5, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000c00)={r9, 0x4, 0x5275af6c9c821cfa, [0xfffffffffffffffe, 0x4, 0x6, 0x200, 0xa85], [0x4, 0x6, 0xa34, 0xf, 0xfffffffffffffff6, 0x5, 0x87, 0x1, 0x1, 0x400, 0x7, 0x3, 0xac, 0x100, 0xf07, 0x5, 0x7, 0xffffffffffffffb8, 0x10001, 0x7, 0xcfb5, 0x100000000, 0x101, 0xc560, 0x8000000000000000, 0x100000000, 0x100, 0x3, 0x8000, 0x9, 0x5, 0x9, 0x7f, 0x6ba96d7a, 0xb, 0xc000000000000000, 0x2, 0x0, 0x9, 0x5, 0x100, 0x7f, 0xc, 0xcd, 0xffffffff, 0x0, 0xffff, 0x6, 0xb, 0x0, 0x5, 0x401, 0x6, 0x4, 0x4, 0x7, 0x6, 0x7ff, 0x5, 0x224b, 0x8, 0x25, 0x7, 0x2, 0x5, 0x4, 0x5, 0x3, 0x1, 0xb0, 0x1, 0x3ff, 0x4, 0x7, 0x8000000000000000, 0x9, 0x4, 0x5, 0x3, 0x9, 0xfffffffffffffffe, 0x10000, 0x6, 0x5, 0x9, 0x80000001, 0x3432, 0x9, 0x83de, 0x5, 0x4, 0x77b7, 0x8, 0x3, 0x2, 0xc0e5, 0xffff, 0x10, 0xf, 0x8000, 0x81, 0x0, 0x7f, 0x8000000000000000, 0x80000000, 0x4, 0x4, 0xb43, 0xff, 0xfffffffffffffffe, 0x1, 0xfe, 0x6, 0xf3be, 0x1, 0x8, 0x9, 0x65, 0x3ff, 0x6]}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) (async, rerun: 64) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000010c0)=0x4) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001100)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001140)={{r12}, r13, 0x4, @unused=[0x1, 0x1, 0xf, 0xfffffffffffffab8], @devid=r10}) sendto$phonet(r11, &(0x7f0000002140)="ae82c4f27198efddec2fcd10ec639cc64b7bb54815b90e1d4355d910fca8686fbad8d9299f674c551be2f8930b855063e0e7ef132edc064809d3cda6344f6004cb96bdfa806d86610d1499e67f3ed37070b11e9c6b2063096bab631252ee81472c89507a020bf8d2362c6f5b306c72099ec1aec814664c25abc77e12d58f32e2e581c2f8606de3b3bd979aaacbd3262a7f218440468206ca64f5e0319a", 0x9d, 0x20040010, &(0x7f0000002200)={0x23, 0x3, 0xb, 0x6}, 0x10) (async) r14 = accept$phonet_pipe(r1, &(0x7f0000002240), &(0x7f0000002280)=0x10) bind$phonet(r14, &(0x7f00000022c0)={0x23, 0x6, 0x0, 0x38}, 0x10) 171.943955ms ago: executing program 3 (id=2305): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$isdn(0x22, 0x3, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 2.004968ms ago: executing program 1 (id=2306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="85000000610000003500000000000020850000000500000095000000000000000001000000000000200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b0800000000000000087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c31a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5408e4dbfdb2fbfec699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987eed64bdf01bbd9aaeb77dde491845e612557f"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000080)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @random="a514a0ed377e", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x88}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x101]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20009400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000ffdbdf25740001feff305ec222b882ff58000007"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4) 0s ago: executing program 3 (id=2307): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000017cc468308000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffff"], 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x1c) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e22, 0x5b, @private1, 0x8}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000380)}, 0x20) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)={0xf8, 0x13, 0x1, 0x0, 0x0, "", [@generic="ae1d3fa74d6a249cdfee5a0635ef838c9531f2ad431db04a7be70d74ffe3175a8863d80c1d552b2a873cc95c19698b7afee90ec33806db8618d1f43364b84f730f9ec335e8500c6184ff5034fa07cf96a51c578133a5138dbff04e0c734e5ce366b6acc0f1f031bebe4a0f0bbba12c2f5c7f1f854384eb310083664473779e3687716a27f25375ac5f632c06cf80b935d7d175d39308df72d165cdff9d5eac79a6", @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @generic="675321d0a9314688d97ed8b98873024a98f6a283d52332c8932a72af64b54fbcd1b01a2a76fffe62592efacd81b7bab5d8053f4dd099530ef3", @nested={0x4, 0x37}]}, 0xf8}], 0x1}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250a0000002100018004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000000000084f44a47c2c8a48b21ccf42677dfa1a555eeb27f60000010000000000aba83d3ea6ecb9c17c4e6454cbc318f7db4bdae3404a9e8f84ffa171092d0d463bcc41d6e521e386c171000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000040), &(0x7f00000008c0)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940)="18", &(0x7f0000000980)=""/235}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, &(0x7f0000000200)=""/169, &(0x7f0000000040), &(0x7f00000003c0), 0x2, r9}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0xc0189436, 0x0) accept$nfc_llcp(r10, &(0x7f0000000c80), &(0x7f0000000740)=0x60) connect$rds(r10, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r11 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1d, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x2, 0x1, 0x4, 0x8, 0x30}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x3ff, 0x68, &(0x7f0000000840)=""/83, 0x41000, 0x23, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000900)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x2, 0x3, 0xd55c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r9, r9, r9], 0x0, 0x10, 0x49cc, @void, @value}, 0x94) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x10) kernel console output (not intermixed with test programs): ] net_ratelimit: 1086 callbacks suppressed [ 117.857077][ T7634] openvswitch: netlink: Multiple metadata blocks provided [ 117.882482][ T7641] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 117.921497][ T7635] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 118.051757][ T7635] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.139981][ T7652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.173354][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 118.205678][ T7654] batadv_slave_1: entered promiscuous mode [ 118.223908][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.241741][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 118.397017][ T7654] batadv_slave_1 (unregistering): left promiscuous mode [ 118.413753][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.762626][ T7675] ip6gretap0: entered promiscuous mode [ 118.781845][ T7675] batadv_slave_0: entered promiscuous mode [ 118.884472][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.890546][ T7684] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 118.891952][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.899600][ T7684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.982682][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.002776][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.129894][ T7671] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.147204][ T7671] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.156375][ T7671] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.166076][ T7671] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.265005][ T7691] syzkaller1: entered promiscuous mode [ 119.302648][ T7691] syzkaller1: entered allmulticast mode [ 119.564852][ T7715] FAULT_INJECTION: forcing a failure. [ 119.564852][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 119.602753][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.2.492 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 119.613400][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.623477][ T7715] Call Trace: [ 119.626766][ T7715] [ 119.629701][ T7715] dump_stack_lvl+0x241/0x360 [ 119.634403][ T7715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.639701][ T7715] ? __pfx__printk+0x10/0x10 [ 119.644300][ T7715] ? __kmalloc_noprof+0xb5/0x4c0 [ 119.649238][ T7715] ? __pfx___might_resched+0x10/0x10 [ 119.654521][ T7715] ? aa_get_newest_label+0xff/0x6f0 [ 119.659728][ T7715] should_fail_ex+0x3b0/0x4e0 [ 119.664411][ T7715] should_failslab+0xac/0x100 [ 119.669092][ T7715] __kmalloc_noprof+0xdd/0x4c0 [ 119.673858][ T7715] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 119.680104][ T7715] ? apparmor_capable+0x13b/0x1b0 [ 119.685135][ T7715] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 119.691212][ T7715] genl_rcv_msg+0x802/0xec0 [ 119.695746][ T7715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.700807][ T7715] ? __pfx_lock_acquire+0x10/0x10 [ 119.705841][ T7715] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 119.711230][ T7715] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 119.716519][ T7715] ? __pfx_nl80211_post_doit+0x10/0x10 [ 119.721981][ T7715] ? __pfx___might_resched+0x10/0x10 [ 119.727276][ T7715] netlink_rcv_skb+0x1e3/0x430 [ 119.732040][ T7715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.737068][ T7715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.742359][ T7715] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 119.747827][ T7715] genl_rcv+0x28/0x40 [ 119.751810][ T7715] netlink_unicast+0x7f6/0x990 [ 119.756578][ T7715] ? __pfx_netlink_unicast+0x10/0x10 [ 119.761858][ T7715] ? __virt_addr_valid+0x45f/0x530 [ 119.766968][ T7715] ? __phys_addr_symbol+0x2f/0x70 [ 119.771989][ T7715] ? __check_object_size+0x47a/0x730 [ 119.777279][ T7715] netlink_sendmsg+0x8e4/0xcb0 [ 119.782053][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.787340][ T7715] ? aa_sock_msg_perm+0x91/0x160 [ 119.792280][ T7715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.797561][ T7715] __sock_sendmsg+0x221/0x270 [ 119.802245][ T7715] ____sys_sendmsg+0x52a/0x7e0 [ 119.807013][ T7715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.812297][ T7715] ? __fget_files+0x2a/0x410 [ 119.816890][ T7715] ? __fget_files+0x2a/0x410 [ 119.821510][ T7715] __sys_sendmsg+0x269/0x350 [ 119.826126][ T7715] ? __pfx_lock_release+0x10/0x10 [ 119.831173][ T7715] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.836297][ T7715] ? __pfx_vfs_write+0x10/0x10 [ 119.841087][ T7715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.847424][ T7715] ? do_syscall_64+0x100/0x230 [ 119.852191][ T7715] ? do_syscall_64+0xb6/0x230 [ 119.856869][ T7715] do_syscall_64+0xf3/0x230 [ 119.861376][ T7715] ? clear_bhb_loop+0x35/0x90 [ 119.866065][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.871961][ T7715] RIP: 0033:0x7f4cbfd85d29 [ 119.876391][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.896013][ T7715] RSP: 002b:00007f4cc0bdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.904433][ T7715] RAX: ffffffffffffffda RBX: 00007f4cbff75fa0 RCX: 00007f4cbfd85d29 [ 119.912405][ T7715] RDX: 0000000004004000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 119.920375][ T7715] RBP: 00007f4cc0bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 119.928343][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.936310][ T7715] R13: 0000000000000000 R14: 00007f4cbff75fa0 R15: 00007ffe57b9d558 [ 119.944290][ T7715] [ 120.051730][ T7720] nbd: must specify a size in bytes for the device [ 120.077736][ T7720] batman_adv: batadv0: Adding interface: dummy0 [ 120.084983][ T7720] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.184472][ T7720] batman_adv: batadv0: Interface activated: dummy0 [ 120.217429][ T7724] batadv0: mtu less than device minimum [ 120.227075][ T7724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.239937][ T7724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.252393][ T7724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.264882][ T7724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.277367][ T7724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.289763][ T7724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.383460][ T7731] team0: No ports can be present during mode change [ 120.695334][ T7737] netlink: 'syz.2.499': attribute type 8 has an invalid length. [ 120.744070][ T7751] __nla_validate_parse: 3 callbacks suppressed [ 120.744089][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.140287][ T5840] Bluetooth: hci4: link tx timeout [ 121.148629][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.159748][ T5845] Bluetooth: hci4: link tx timeout [ 121.165155][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.178826][ T5845] Bluetooth: hci4: link tx timeout [ 121.183995][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.193217][ T5845] Bluetooth: hci4: link tx timeout [ 121.198665][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.206835][ T5845] Bluetooth: hci4: link tx timeout [ 121.211976][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.442936][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 121.469454][ T7767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.511'. [ 121.523666][ T7767] vlan2: entered allmulticast mode [ 121.780795][ T7764] netlink: 'syz.0.509': attribute type 5 has an invalid length. [ 121.820698][ T7782] netlink: 'syz.4.514': attribute type 3 has an invalid length. [ 121.929663][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 121.978598][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 122.021538][ T7788] netlink: 'syz.1.518': attribute type 11 has an invalid length. [ 122.022832][ T5880] IPVS: starting estimator thread 0... [ 122.050369][ T7796] x_tables: duplicate underflow at hook 3 [ 122.146637][ T7797] IPVS: using max 27 ests per chain, 64800 per kthread [ 122.305586][ T7808] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 122.323579][ T7808] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 122.513817][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 122.523685][ T7819] xt_hashlimit: size too large, truncated to 1048576 [ 122.847854][ T7833] netlink: 'syz.0.533': attribute type 5 has an invalid length. [ 123.215532][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 123.462095][ T7858] tipc: Started in network mode [ 123.482282][ T7858] tipc: Node identity ac14140f, cluster identity 4711 [ 123.655155][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'. [ 123.707106][ T7858] tipc: New replicast peer: 255.255.255.255 [ 123.739171][ T7858] tipc: Enabled bearer , priority 10 [ 123.767133][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 123.826520][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.856522][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.063000][ T7875] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 124.354632][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 124.733257][ T7896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.548'. [ 124.752909][ T8] tipc: Node number set to 2886997007 [ 124.887160][ T7905] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 126.394833][ T7958] netlink: 'syz.3.559': attribute type 16 has an invalid length. [ 126.402635][ T7958] netlink: 'syz.3.559': attribute type 3 has an invalid length. [ 126.434034][ T7960] sctp: [Deprecated]: syz.1.557 (pid 7960) Use of int in max_burst socket option. [ 126.434034][ T7960] Use struct sctp_assoc_value instead [ 126.446277][ T7958] __nla_validate_parse: 2 callbacks suppressed [ 126.446295][ T7958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.559'. [ 126.463678][ T7966] x_tables: duplicate underflow at hook 3 [ 126.480223][ T7967] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 126.826915][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 127.097413][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 127.238344][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 127.629939][ T8013] net_ratelimit: 13 callbacks suppressed [ 127.629960][ T8013] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 127.664274][ T8013] xt_hashlimit: max too large, truncated to 1048576 [ 128.189580][ T8002] vlan2: entered promiscuous mode [ 128.194818][ T8002] vlan2: entered allmulticast mode [ 128.332055][ T8025] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 128.342365][ T8025] netlink: 'syz.0.573': attribute type 27 has an invalid length. [ 128.405496][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 128.563593][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 128.631901][ T8043] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 128.640428][ T8043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.577'. [ 128.720110][ T8051] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 128.756003][ T8055] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 129.148979][ T8074] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 129.231424][ T8080] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 129.267890][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.275615][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.350168][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.357576][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.366594][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.374451][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.396315][ T8080] bridge0: entered promiscuous mode [ 129.402880][ T8080] team0: Port device bridge0 added [ 130.067366][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 130.667867][ T8132] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 131.766064][ T8127] veth2: entered allmulticast mode [ 132.002926][ T8144] netlink: 'syz.1.603': attribute type 12 has an invalid length. [ 132.039141][ T8144] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 132.066049][ T8144] netlink: 148 bytes leftover after parsing attributes in process `syz.1.603'. [ 132.198755][ T8149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'. [ 132.432968][ T8165] tc_dump_action: action bad kind [ 132.632966][ T8176] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.612'. [ 133.358925][ T8203] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.402683][ T8203] x_tables: ip_tables: osf match: only valid for protocol 6 [ 133.431787][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 133.896147][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 133.942283][ T8240] netlink: 'syz.2.633': attribute type 3 has an invalid length. [ 133.983543][ T8240] netlink: 'syz.2.633': attribute type 3 has an invalid length. [ 134.000929][ T8241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.005299][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.633'. [ 134.067509][ T8248] netlink: 'syz.4.635': attribute type 4 has an invalid length. [ 134.106452][ T8235] tipc: Enabled bearer , priority 10 [ 134.113640][ T8248] netlink: 'syz.4.635': attribute type 4 has an invalid length. [ 134.248588][ T8256] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 145.011532][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 145.081525][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 145.097680][ T8267] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 145.111864][ T8265] netlink: 152 bytes leftover after parsing attributes in process `syz.1.640'. [ 145.149539][ T8268] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 145.341150][ T8276] batadv0: entered allmulticast mode [ 145.381814][ T8278] netlink: 'syz.4.644': attribute type 5 has an invalid length. [ 145.560031][ T8284] netlink: 8312 bytes leftover after parsing attributes in process `syz.4.647'. [ 145.592956][ T8286] netlink: 8312 bytes leftover after parsing attributes in process `syz.4.647'. [ 146.025838][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 146.256027][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 146.269739][ T8318] netlink: 76 bytes leftover after parsing attributes in process `syz.2.654'. [ 146.307511][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 146.333596][ T8318] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 146.358630][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 146.605187][ T8312] infiniband syz!: set active [ 146.617878][ T8312] infiniband syz!: added team_slave_0 [ 146.689571][ T8312] RDS/IB: syz!: added [ 146.694826][ T8312] smc: adding ib device syz! with port count 1 [ 146.701483][ T8312] smc: ib device syz! port 1 has pnetid [ 146.929960][ T8360] vlan2: entered allmulticast mode [ 146.939446][ T8360] syz_tun: entered allmulticast mode [ 146.957412][ T8360] syz_tun: left allmulticast mode [ 147.118010][ T8368] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 147.366642][ T8381] x_tables: unsorted entry at hook 1 [ 147.383476][ T8382] x_tables: unsorted entry at hook 1 [ 155.990954][ T8387] __nla_validate_parse: 4 callbacks suppressed [ 155.990973][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 156.029111][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 157.090295][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 157.559492][ T8421] sctp: [Deprecated]: syz.2.681 (pid 8421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.559492][ T8421] Use struct sctp_sack_info instead [ 158.222161][ T8412] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 158.339169][ T8429] veth0_vlan: left promiscuous mode [ 158.382038][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 158.401709][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 158.463349][ T8441] netlink: 92 bytes leftover after parsing attributes in process `syz.2.687'. [ 158.632843][ T8440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.652640][ T8440] xt_recent: Unsupported userspace flags (00000042) [ 158.808881][ T8453] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 159.522216][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 159.615463][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 159.659428][ T8513] netlink: 'syz.1.710': attribute type 33 has an invalid length. [ 159.663992][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 159.672565][ T8513] netlink: 160 bytes leftover after parsing attributes in process `syz.1.710'. [ 159.805171][ T8520] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 159.813929][ T8520] macvlan2: entered allmulticast mode [ 159.819483][ T8520] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 160.078570][ T8531] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 160.128633][ T8531] netlink: 'syz.2.716': attribute type 8 has an invalid length. [ 160.283097][ T8538] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 160.637816][ T8555] openvswitch: netlink: Unknown nsh attribute 0 [ 160.651708][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.683745][ T8558] openvswitch: netlink: Unknown nsh attribute 0 [ 160.722117][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.871165][ T8565] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 161.024334][ T8569] syz.3.728[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.031903][ T8569] syz.3.728[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.051777][ T8569] syz.3.728[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.307417][ T8582] __nla_validate_parse: 7 callbacks suppressed [ 161.307437][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.730'. [ 161.354613][ T8582] netlink: 'syz.1.730': attribute type 7 has an invalid length. [ 161.369640][ T8579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.731'. [ 161.371012][ T8576] netlink: 'syz.2.732': attribute type 29 has an invalid length. [ 161.386453][ T8582] netlink: 'syz.1.730': attribute type 8 has an invalid length. [ 161.386492][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 161.681298][ T8602] bridge1: entered promiscuous mode [ 161.692876][ T8602] bridge1: entered allmulticast mode [ 161.769924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.783388][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.895076][ T8613] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 161.928085][ T8613] geneve0: entered promiscuous mode [ 161.969722][ T8617] netlink: 'syz.3.743': attribute type 7 has an invalid length. [ 161.992268][ T8617] netlink: 68 bytes leftover after parsing attributes in process `syz.3.743'. [ 162.060973][ T8624] xt_SECMARK: invalid mode: 0 [ 162.179928][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.0.747'. [ 164.003298][ T8649] netlink: 84 bytes leftover after parsing attributes in process `syz.2.755'. [ 164.086983][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 164.243479][ T8670] sctp: [Deprecated]: syz.1.760 (pid 8670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.243479][ T8670] Use struct sctp_sack_info instead [ 164.467367][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.764'. [ 164.477442][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 164.612983][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 164.930006][ T8713] validate_nla: 1 callbacks suppressed [ 164.930024][ T8713] netlink: 'syz.0.766': attribute type 4 has an invalid length. [ 164.960661][ T8711] netlink: 'syz.1.770': attribute type 7 has an invalid length. [ 164.971268][ T8713] ip6t_srh: unknown srh invflags 4000 [ 165.337125][ T8723] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 165.351003][ T8724] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 165.405397][ T8723] bond1: entered promiscuous mode [ 165.413423][ T8723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.436235][ T8726] batadv1: entered promiscuous mode [ 165.441497][ T8726] batadv1: entered allmulticast mode [ 165.533547][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.566351][ T8726] bond1: (slave batadv1): making interface the new active one [ 165.602002][ T8726] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 165.638514][ T8733] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.965852][ T8757] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 166.029812][ T8759] bond0: (slave wlan1): Releasing backup interface [ 166.377955][ T8775] __nla_validate_parse: 4 callbacks suppressed [ 166.377973][ T8775] netlink: 76 bytes leftover after parsing attributes in process `syz.4.784'. [ 166.401569][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.784'. [ 166.450638][ T8762] bond0: (slave team0): Releasing backup interface [ 166.461499][ T8762] batman_adv: batadv0: Interface deactivated: dummy0 [ 166.475610][ T8762] batman_adv: batadv0: Removing interface: dummy0 [ 166.569380][ T8762] bond0: (slave bond_slave_0): Releasing backup interface [ 166.590295][ T8762] bond0: (slave bond_slave_1): Releasing backup interface [ 166.628684][ T8762] team0: Port device team_slave_0 removed [ 166.655814][ T8762] team0: Port device team_slave_1 removed [ 166.667598][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.682302][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.695836][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.708106][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.830997][ T8762] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.844345][ T8762] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.860728][ T8762] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.869858][ T8762] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.917072][ T8762] vlan2: left promiscuous mode [ 166.922075][ T8762] vlan2: left allmulticast mode [ 166.942333][ T8773] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 166.997475][ T8776] veth5: entered allmulticast mode [ 167.040341][ T8781] pim6reg: entered allmulticast mode [ 167.063832][ T8781] pim6reg: left allmulticast mode [ 167.238794][ T8794] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 167.308779][ T8798] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 167.726228][ T8808] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 168.044117][ T8813] No such timeout policy "syz0" [ 169.398186][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 170.557343][ T8880] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 170.594036][ T8880] batman_adv: batadv0: Adding interface: wlan0 [ 170.601132][ T8880] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.653613][ T8880] batman_adv: batadv0: Interface activated: wlan0 [ 170.653950][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.670359][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.680454][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.690300][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.692087][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'. [ 170.712833][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.720712][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.721013][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'. [ 170.934708][ T8897] netlink: 104 bytes leftover after parsing attributes in process `syz.2.822'. [ 171.148411][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 171.447697][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.514065][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.528516][ T8881] bridge_slave_0: entered allmulticast mode [ 171.554166][ T8881] bridge_slave_0: entered promiscuous mode [ 171.581076][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.598426][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.618434][ T8881] bridge_slave_1: entered allmulticast mode [ 171.650079][ T8881] bridge_slave_1: entered promiscuous mode [ 171.694909][ T8929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.829'. [ 171.794865][ T8929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.829'. [ 171.831773][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.854971][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.048947][ T8881] team0: Port device team_slave_0 added [ 172.078877][ T8881] team0: Port device team_slave_1 added [ 172.148195][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.164605][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.191843][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.205197][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.212308][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.239035][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.401942][ T8881] hsr_slave_0: entered promiscuous mode [ 172.447655][ T8881] hsr_slave_1: entered promiscuous mode [ 172.470430][ T8881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.485473][ T8881] Cannot create hsr debugfs directory [ 172.504147][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 172.717516][ T8940] netlink: 'syz.2.833': attribute type 10 has an invalid length. [ 172.802788][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.810057][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.820577][ T5840] Bluetooth: hci2: command tx timeout [ 173.062660][ T8881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.066493][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 173.081795][ T8881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.117214][ T8881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.133539][ T8949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.160919][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.838'. [ 173.173903][ T8960] unsupported nlmsg_type 40 [ 173.174598][ T8949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.252492][ T8949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.294795][ T8949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.335847][ T8949] batman_adv: batadv0: Interface deactivated: wlan0 [ 173.342530][ T8949] batman_adv: batadv0: Removing interface: wlan0 [ 173.409954][ T8949] batadv0 (unregistering): left promiscuous mode [ 173.437175][ T8881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.689082][ T8881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.778856][ T8987] x_tables: duplicate underflow at hook 2 [ 173.782081][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.813275][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.820481][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.869261][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.876491][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.913826][ T8991] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 174.007818][ T8991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.062834][ T8995] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 174.142319][ T8999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.156492][ T9002] xt_bpf: check failed: parse error [ 174.162811][ T8999] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 174.188537][ T8999] bond2: (slave vcan1): Error -95 calling set_mac_address [ 174.561198][ T9026] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 174.626720][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 174.660426][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.793133][ T8881] veth0_vlan: entered promiscuous mode [ 174.831821][ T8881] veth1_vlan: entered promiscuous mode [ 174.857150][ T9052] netlink: 'syz.3.859': attribute type 11 has an invalid length. [ 174.897662][ T5840] Bluetooth: hci2: command tx timeout [ 174.904930][ T9052] netlink: 224 bytes leftover after parsing attributes in process `syz.3.859'. [ 174.921963][ T8881] veth0_macvtap: entered promiscuous mode [ 175.007301][ T8881] veth1_macvtap: entered promiscuous mode [ 175.089386][ T9060] netlink: 'syz.1.863': attribute type 8 has an invalid length. [ 175.115772][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.143352][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.174877][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.216636][ T9058] veth0_to_team: entered promiscuous mode [ 175.225484][ T9058] veth0_to_team: entered allmulticast mode [ 175.242115][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.254162][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.862'. [ 175.273524][ T8881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.283666][ T8881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.289022][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 175.302168][ T8881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.311006][ T8881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.333630][ T9071] bond0: entered promiscuous mode [ 175.342008][ T9071] bond_slave_0: entered promiscuous mode [ 175.348734][ T9071] bond_slave_1: entered promiscuous mode [ 175.357212][ T9071] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 175.365617][ T9071] bond0: left promiscuous mode [ 175.370410][ T9071] bond_slave_0: left promiscuous mode [ 175.376914][ T9071] bond_slave_1: left promiscuous mode [ 175.408386][ T9058] tap0: tun_chr_ioctl cmd 1074025677 [ 175.413974][ T9058] tap0: linktype set to 0 [ 175.528475][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.563812][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.596795][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.624651][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.630538][ T9081] netlink: 27 bytes leftover after parsing attributes in process `syz.1.866'. [ 176.350558][ T9121] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 176.388560][ T9122] tipc: Started in network mode [ 176.393792][ T9122] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711 [ 176.412746][ T9122] tipc: Enabling of bearer rejected, failed to enable media [ 176.441966][ T9080] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 176.753547][ T9135] __nla_validate_parse: 8 callbacks suppressed [ 176.753565][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.881'. [ 176.880656][ T9139] gretap1: entered allmulticast mode [ 176.887445][ T9139] bridge0: port 3(gretap1) entered blocking state [ 176.894198][ T9139] bridge0: port 3(gretap1) entered disabled state [ 176.920761][ T9139] gretap1: entered promiscuous mode [ 176.937956][ T9139] bridge0: port 3(gretap1) entered blocking state [ 176.944913][ T9139] bridge0: port 3(gretap1) entered forwarding state [ 176.974690][ T5840] Bluetooth: hci2: command tx timeout [ 177.159225][ T9146] sctp: [Deprecated]: syz.1.885 (pid 9146) Use of int in max_burst socket option deprecated. [ 177.159225][ T9146] Use struct sctp_assoc_value instead [ 177.174787][ T9144] netlink: 'syz.2.884': attribute type 2 has an invalid length. [ 177.174810][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 177.196311][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.886'. [ 177.803716][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.893'. [ 177.885416][ T9187] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 178.189556][ T9204] netlink: 'syz.3.899': attribute type 3 has an invalid length. [ 178.202771][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.302306][ T9209] bridge0: port 3(gretap1) entered disabled state [ 178.309052][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.318154][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.486381][ T9215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.694709][ T9223] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 178.801492][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 178.848550][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 178.928218][ T9232] netlink: 48 bytes leftover after parsing attributes in process `syz.5.910'. [ 178.960948][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.910'. [ 179.025336][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 179.054691][ T5840] Bluetooth: hci2: command tx timeout [ 179.066580][ T9236] dvmrp0: entered allmulticast mode [ 179.466086][ T9276] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 179.822993][ T5910] IPVS: starting estimator thread 0... [ 179.947826][ T9301] IPVS: using max 20 ests per chain, 48000 per kthread [ 180.531904][ T9327] netlink: 'syz.0.930': attribute type 1 has an invalid length. [ 180.798446][ T9260] IPVS: stop unused estimator thread 0... [ 180.809439][ T9334] netlink: 'syz.2.932': attribute type 5 has an invalid length. [ 182.281997][ T9409] __nla_validate_parse: 8 callbacks suppressed [ 182.282017][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 182.578798][ T9419] netlink: 228 bytes leftover after parsing attributes in process `syz.2.959'. [ 182.605845][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 183.054188][ T9449] netlink: 'syz.3.967': attribute type 21 has an invalid length. [ 183.073952][ T9451] netlink: 56 bytes leftover after parsing attributes in process `syz.1.969'. [ 183.240664][ T9461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.971'. [ 183.328043][ T9461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.971'. [ 183.391692][ T9461] bond0: left allmulticast mode [ 183.419704][ T9461] bond_slave_0: left allmulticast mode [ 183.440296][ T9461] bond_slave_1: left allmulticast mode [ 183.485061][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.516471][ T9461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.697493][ T9485] x_tables: duplicate underflow at hook 1 [ 183.814879][ T9494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 183.938324][ T9504] netlink: 72 bytes leftover after parsing attributes in process `syz.0.986'. [ 184.014991][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.984'. [ 184.195992][ T9516] netlink: 232 bytes leftover after parsing attributes in process `syz.0.989'. [ 184.217756][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'. [ 184.257373][ T9517] erspan0: entered promiscuous mode [ 184.293176][ T9517] erspan0: left promiscuous mode [ 184.658010][ T9525] tipc: Enabling of bearer rejected, failed to enable media [ 185.167956][ T9550] TCP: TCP_TX_DELAY enabled [ 185.173443][ T9546] IPVS: Scheduler module ip_vs_sip not found [ 185.198681][ T9546] bridge0: mtu less than device minimum [ 185.514018][ T9570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.531301][ T9573] netlink: 'syz.3.1009': attribute type 4 has an invalid length. [ 185.561489][ T9570] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 185.585119][ T9575] netlink: 'syz.5.1008': attribute type 1 has an invalid length. [ 185.605666][ T9575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.613287][ T9575] IPv6: NLM_F_CREATE should be set when creating new route [ 185.642750][ T9573] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 185.923889][ T9595] netlink: 'syz.0.1017': attribute type 64 has an invalid length. [ 185.941712][ T9596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.998567][ T9596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.142363][ T9610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.216313][ T9613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.407212][ T9622] tap0: tun_chr_ioctl cmd 1074025677 [ 186.414658][ T5840] Bluetooth: hci2: command tx timeout [ 186.418205][ T9622] tap0: linktype set to 778 [ 186.491762][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.861537][ T9645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.900355][ T9651] pimreg: entered allmulticast mode [ 187.260472][ T9663] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 187.419509][ T9680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.420989][ T9675] xt_limit: Overflow, try lower: 65536/2147483648 [ 187.475234][ T9643] pimreg: left allmulticast mode [ 188.404804][ T9718] __nla_validate_parse: 32 callbacks suppressed [ 188.404823][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1051'. [ 188.669339][ T9722] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 188.925992][ T9735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1055'. [ 188.953068][ T9735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1055'. [ 188.990180][ T9735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1055'. [ 189.026189][ T9735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1055'. [ 189.273208][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 189.355704][ T9749] syz.1.1059 (9749) used greatest stack depth: 18032 bytes left [ 189.365379][ T9756] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1061'. [ 189.492531][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 189.563734][ T9763] bpq0: entered promiscuous mode [ 189.751792][ T9781] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1070'. [ 189.835593][ T9791] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1071'. [ 190.119479][ T9784] batadv0: left allmulticast mode [ 190.212294][ T9784] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.986688][ T9844] : renamed from ipvlan1 [ 191.152477][ T9846] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 191.422648][ T9867] bond0: (slave bond_slave_0): Releasing backup interface [ 191.467234][ T9867] bond0: (slave bond_slave_1): Releasing backup interface [ 191.618807][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 191.625091][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 192.093205][ T9903] netlink: 'syz.2.1100': attribute type 7 has an invalid length. [ 192.469646][ T9919] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 192.514146][ T9921] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 193.103167][ T9909] dccp_close: ABORT with 32 bytes unread [ 193.154824][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.160274][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.222086][ T9967] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 193.234622][ T9962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.241965][ T9963] netlink: 'syz.2.1121': attribute type 21 has an invalid length. [ 193.250540][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.261405][ T9957] tun0: tun_chr_ioctl cmd 1074025677 [ 193.284724][ T9957] tun0: linktype set to 270 [ 193.289524][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.298836][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.304268][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.310460][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.326422][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.341136][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.348946][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.354779][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.360350][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.366429][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.374731][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.392367][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.402544][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.412714][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.432932][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.455807][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.461239][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.493114][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.512885][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.532729][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.569604][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.589187][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.601263][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.617049][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.634242][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.652914][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.663045][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.695003][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.700451][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.737130][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.764193][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.788329][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.809125][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.830446][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.850469][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.875471][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.894014][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 193.913613][ T9956] tun0: tun_chr_ioctl cmd 1074025673 [ 194.514269][ T9991] openvswitch: netlink: IP tunnel dst address not specified [ 194.523498][ T9993] __nla_validate_parse: 15 callbacks suppressed [ 194.523516][ T9993] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1131'. [ 194.569558][ T9993] 0ªX¹¦Dö»: renamed from gretap0 [ 194.646397][ T9993] 0ªX¹¦Dö»: entered allmulticast mode [ 194.675420][ T9995] tun0: tun_chr_ioctl cmd 1074812118 [ 194.701286][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 194.742182][ T9995] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.844769][ T9996] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.961017][T10007] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 195.030807][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1136'. [ 195.075631][T10010] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1136'. [ 195.089648][T10009] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1136'. [ 195.345744][T10020] nr0: entered allmulticast mode [ 195.547704][T10026] syzkaller0: entered allmulticast mode [ 195.574927][T10026] netlink: 'syz.0.1142': attribute type 10 has an invalid length. [ 195.593130][T10027] netlink: 'syz.0.1142': attribute type 10 has an invalid length. [ 195.604723][T10027] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1142'. [ 195.614552][T10026] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1142'. [ 195.757024][T10030] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 195.889645][T10053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1148'. [ 195.922687][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 195.983289][T10053] gre1: entered promiscuous mode [ 196.022877][T10053] gre1: entered allmulticast mode [ 196.040725][T10063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1148'. [ 196.143512][T10071] sctp: [Deprecated]: syz.1.1152 (pid 10071) Use of int in max_burst socket option. [ 196.143512][T10071] Use struct sctp_assoc_value instead [ 196.204288][T10071] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 196.773325][T10103] nbd: must specify at least one socket [ 196.796063][T10103] netlink: 'syz.5.1163': attribute type 1 has an invalid length. [ 196.889384][T10113] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1331427273/1331427275 [ 196.899802][T10113] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1331427273/1331427275 [ 197.245268][T10132] netlink: 'syz.5.1171': attribute type 4 has an invalid length. [ 197.399154][T10137] pimreg: entered allmulticast mode [ 197.913115][T10159] ÛÌî]-Ñ_in_bytes: renamed from lo [ 198.078599][T10173] netlink: 'syz.0.1184': attribute type 10 has an invalid length. [ 198.107789][T10177] bond_slave_0: entered promiscuous mode [ 198.113873][T10177] bond_slave_1: entered promiscuous mode [ 198.160801][T10177] bond_slave_0: left promiscuous mode [ 198.166367][T10177] bond_slave_1: left promiscuous mode [ 198.461759][T10191] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.552120][T10192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.631071][T10192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 199.183217][T10230] infiniband syz!: set active [ 199.205112][T10230] infiniband syz!: set active [ 200.054792][T10273] __nla_validate_parse: 15 callbacks suppressed [ 200.054811][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 200.228287][T10273] erspan0: entered promiscuous mode [ 200.257703][T10273] batman_adv: batadv0: Adding interface: macvlan0 [ 200.291825][T10273] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.358763][T10273] batman_adv: batadv0: Interface activated: macvlan0 [ 200.519658][T10294] netlink: 'syz.5.1222': attribute type 1 has an invalid length. [ 200.545890][T10294] netlink: 'syz.5.1222': attribute type 1 has an invalid length. [ 200.795300][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1222'. [ 200.822115][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.841361][T10303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.863615][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.894784][T10303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.173302][T10328] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 201.409944][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 201.459350][T10334] netlink: 'syz.5.1232': attribute type 1 has an invalid length. [ 201.591546][T10348] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1235'. [ 201.647172][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1236'. [ 202.640933][T10383] sctp: [Deprecated]: syz.1.1246 (pid 10383) Use of int in max_burst socket option deprecated. [ 202.640933][T10383] Use struct sctp_assoc_value instead [ 202.656887][T10380] xt_ct_set_helper: 18 callbacks suppressed [ 202.656905][T10380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.776136][T10388] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 202.789905][T10391] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1249'. [ 202.813320][T10396] x_tables: duplicate underflow at hook 1 [ 203.073517][T10406] netlink: 5424 bytes leftover after parsing attributes in process `syz.1.1255'. [ 203.100289][T10406] netlink: 5424 bytes leftover after parsing attributes in process `syz.1.1255'. [ 203.243659][T10415] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1258'. [ 203.542751][T10426] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 203.782962][T10449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1269'. [ 203.792364][T10449] netlink: 'syz.1.1269': attribute type 2 has an invalid length. [ 204.595056][T10480] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 204.636517][T10486] xt_l2tp: invalid flags combination: 4 [ 204.666876][T10489] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 204.753999][T10492] tipc: Started in network mode [ 204.784636][T10492] tipc: Node identity fc, cluster identity 4711 [ 204.790979][T10492] tipc: Enabling of bearer rejected, failed to enable media [ 205.083507][T10514] __nla_validate_parse: 8 callbacks suppressed [ 205.083527][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 205.196172][T10524] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1287'. [ 205.902386][T10520] tipc: Failed to obtain node identity [ 205.914674][T10520] tipc: Enabling of bearer rejected, failed to enable media [ 206.131430][T10536] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 206.179368][T10536] macvlan2: entered allmulticast mode [ 206.209746][T10536] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 206.264095][T10536] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 206.298008][T10539] gretap1: entered promiscuous mode [ 206.308161][T10548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1292'. [ 206.347246][T10548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1292'. [ 206.400109][T10549] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 206.409613][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1299'. [ 206.464725][T10549] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 206.535805][T10560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.576268][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 206.587218][T10560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1301'. [ 206.878449][T10583] batadv0: entered promiscuous mode [ 206.886744][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.082920][T10593] infiniband syz!: set active [ 207.167005][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1309'. [ 208.161918][T10631] Cannot find del_set index 4 as target [ 208.480831][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 208.950794][ T29] audit: type=1107 audit(1734709271.176:2): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_ö+¯) [ÆÏTýņ7 9·žE QÛÏVãW2óû ØÂ{‚CLØŠ¥_Qº(›Å–°D}3M0äE [ 208.950794][ T29] —gè {¬èTeV÷)ÛäúŽ¬í?xÖ±]io2ÂÎ×[üVˆÃÎÀ°îœÄ¸ù¦ [ 208.950794][ T29] V-›mvÍi,2%|GPU<«îa' [ 209.329872][T10678] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 209.566643][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 209.651137][T10692] netlink: 'syz.1.1338': attribute type 4 has an invalid length. [ 209.838406][T10708] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 209.852126][T10708] xt_nfacct: accounting object `syz1' does not exists [ 210.002807][T10713] netlink: 'syz.2.1345': attribute type 12 has an invalid length. [ 210.189350][T10715] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 210.372553][T10720] __nla_validate_parse: 1 callbacks suppressed [ 210.372572][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 210.405381][T10722] openvswitch: netlink: Message has 16 unknown bytes. [ 210.415140][T10720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1348'. [ 210.728795][T10738] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 210.737492][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 210.799793][T10742] FAULT_INJECTION: forcing a failure. [ 210.799793][T10742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.813401][T10742] CPU: 0 UID: 0 PID: 10742 Comm: syz.2.1351 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 210.824280][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 210.834339][T10742] Call Trace: [ 210.837624][T10742] [ 210.840562][T10742] dump_stack_lvl+0x241/0x360 [ 210.845256][T10742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.850463][T10742] ? __pfx__printk+0x10/0x10 [ 210.855056][T10742] ? __pfx_lock_release+0x10/0x10 [ 210.860085][T10742] should_fail_ex+0x3b0/0x4e0 [ 210.864765][T10742] _copy_from_iter+0x1e9/0x1c20 [ 210.869621][T10742] ? __virt_addr_valid+0x183/0x530 [ 210.874748][T10742] ? __alloc_skb+0x28f/0x440 [ 210.879337][T10742] ? __pfx__copy_from_iter+0x10/0x10 [ 210.884628][T10742] ? __virt_addr_valid+0x183/0x530 [ 210.889764][T10742] ? __virt_addr_valid+0x183/0x530 [ 210.894988][T10742] ? __virt_addr_valid+0x45f/0x530 [ 210.900121][T10742] ? __phys_addr_symbol+0x2f/0x70 [ 210.905152][T10742] ? __check_object_size+0x47a/0x730 [ 210.910448][T10742] netlink_sendmsg+0x73d/0xcb0 [ 210.915226][T10742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.920517][T10742] ? aa_sock_msg_perm+0x91/0x160 [ 210.925455][T10742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.930735][T10742] __sock_sendmsg+0x221/0x270 [ 210.935418][T10742] ____sys_sendmsg+0x52a/0x7e0 [ 210.940184][T10742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.945466][T10742] ? __fget_files+0x2a/0x410 [ 210.950058][T10742] ? __fget_files+0x2a/0x410 [ 210.954655][T10742] __sys_sendmsg+0x269/0x350 [ 210.959338][T10742] ? __pfx_lock_release+0x10/0x10 [ 210.964367][T10742] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.969486][T10742] ? __pfx_vfs_write+0x10/0x10 [ 210.974266][T10742] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.980595][T10742] ? do_syscall_64+0x100/0x230 [ 210.985364][T10742] ? do_syscall_64+0xb6/0x230 [ 210.990052][T10742] do_syscall_64+0xf3/0x230 [ 210.994605][T10742] ? clear_bhb_loop+0x35/0x90 [ 210.999305][T10742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.005205][T10742] RIP: 0033:0x7f4cbfd85d29 [ 211.009619][T10742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.029227][T10742] RSP: 002b:00007f4cc0bdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.037662][T10742] RAX: ffffffffffffffda RBX: 00007f4cbff75fa0 RCX: 00007f4cbfd85d29 [ 211.045657][T10742] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 211.053647][T10742] RBP: 00007f4cc0bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 211.061645][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.069617][T10742] R13: 0000000000000000 R14: 00007f4cbff75fa0 R15: 00007ffe57b9d558 [ 211.077604][T10742] [ 211.233894][T10746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.258324][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1354'. [ 211.274186][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 211.470682][T10762] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 211.505381][T10757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1358'. [ 211.564910][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1358'. [ 211.573917][T10757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1358'. [ 211.613737][T10757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1358'. [ 211.716950][T10776] FAULT_INJECTION: forcing a failure. [ 211.716950][T10776] name failslab, interval 1, probability 0, space 0, times 0 [ 211.770582][T10776] CPU: 1 UID: 0 PID: 10776 Comm: syz.0.1364 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 211.774334][T10778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1366'. [ 211.781471][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 211.781492][T10776] Call Trace: [ 211.781501][T10776] [ 211.781509][T10776] dump_stack_lvl+0x241/0x360 [ 211.781542][T10776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.781630][T10776] ? __pfx__printk+0x10/0x10 [ 211.781656][T10776] ? __kmalloc_noprof+0xb5/0x4c0 [ 211.781679][T10776] ? __pfx___might_resched+0x10/0x10 [ 211.781696][T10776] ? aa_get_newest_label+0xff/0x6f0 [ 211.781720][T10776] should_fail_ex+0x3b0/0x4e0 [ 211.781742][T10776] should_failslab+0xac/0x100 [ 211.781767][T10776] __kmalloc_noprof+0xdd/0x4c0 [ 211.781788][T10776] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 211.781811][T10776] ? apparmor_capable+0x13b/0x1b0 [ 211.781835][T10776] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 211.781866][T10776] genl_rcv_msg+0x802/0xec0 [ 211.781899][T10776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.781951][T10776] ? __pfx_lock_acquire+0x10/0x10 [ 211.781973][T10776] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 211.781994][T10776] ? __pfx___might_resched+0x10/0x10 [ 211.782025][T10776] netlink_rcv_skb+0x1e3/0x430 [ 211.782048][T10776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.782074][T10776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.782126][T10776] genl_rcv+0x28/0x40 [ 211.782148][T10776] netlink_unicast+0x7f6/0x990 [ 211.782174][T10776] ? __pfx_netlink_unicast+0x10/0x10 [ 211.782191][T10776] ? __virt_addr_valid+0x45f/0x530 [ 211.928432][T10776] ? __phys_addr_symbol+0x2f/0x70 [ 211.933465][T10776] ? __check_object_size+0x47a/0x730 [ 211.938761][T10776] netlink_sendmsg+0x8e4/0xcb0 [ 211.943537][T10776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.948825][T10776] ? aa_sock_msg_perm+0x91/0x160 [ 211.953767][T10776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.959053][T10776] __sock_sendmsg+0x221/0x270 [ 211.963825][T10776] ____sys_sendmsg+0x52a/0x7e0 [ 211.968597][T10776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.973881][T10776] ? __fget_files+0x2a/0x410 [ 211.978481][T10776] ? __fget_files+0x2a/0x410 [ 211.983079][T10776] __sys_sendmsg+0x269/0x350 [ 211.987670][T10776] ? __pfx_lock_release+0x10/0x10 [ 211.992783][T10776] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.997903][T10776] ? __pfx_vfs_write+0x10/0x10 [ 212.002723][T10776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.009058][T10776] ? do_syscall_64+0x100/0x230 [ 212.013827][T10776] ? do_syscall_64+0xb6/0x230 [ 212.018506][T10776] do_syscall_64+0xf3/0x230 [ 212.023015][T10776] ? clear_bhb_loop+0x35/0x90 [ 212.027695][T10776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.033590][T10776] RIP: 0033:0x7fbda6b85d29 [ 212.038007][T10776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.057617][T10776] RSP: 002b:00007fbda7a00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.066036][T10776] RAX: ffffffffffffffda RBX: 00007fbda6d75fa0 RCX: 00007fbda6b85d29 [ 212.074007][T10776] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 212.081979][T10776] RBP: 00007fbda7a00090 R08: 0000000000000000 R09: 0000000000000000 [ 212.090036][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.098011][T10776] R13: 0000000000000000 R14: 00007fbda6d75fa0 R15: 00007ffce20383f8 [ 212.105998][T10776] [ 212.259587][T10780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.399775][T10780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.567794][T10780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.631960][T10812] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 212.717613][T10780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.887263][T10780] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.904544][T10780] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.931462][T10780] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.956040][T10780] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.038890][T10832] x_tables: duplicate underflow at hook 1 [ 213.126169][T10836] netlink: 'syz.5.1384': attribute type 15 has an invalid length. [ 213.363059][T10802] delete_channel: no stack [ 214.331643][T10897] netlink: 'syz.0.1402': attribute type 4 has an invalid length. [ 214.511498][T10907] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 214.534957][T10909] netlink: 'syz.1.1406': attribute type 49 has an invalid length. [ 214.625400][T10916] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 214.662167][T10918] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 215.054051][T10933] sctp: [Deprecated]: syz.2.1414 (pid 10933) Use of int in max_burst socket option deprecated. [ 215.054051][T10933] Use struct sctp_assoc_value instead [ 215.162612][T10926] bond0 (unregistering): Released all slaves [ 215.404077][T10940] __nla_validate_parse: 10 callbacks suppressed [ 215.404092][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 215.419799][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 215.684695][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1418'. [ 215.723489][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 215.751868][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 215.905756][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 216.034792][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 216.272785][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 216.304432][T10982] tun0: tun_chr_ioctl cmd 1074025677 [ 216.304671][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1418'. [ 216.313576][T10982] tun0: linktype set to 270 [ 216.405724][T10989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:16) already exists on: macvlan0 [ 216.416848][T10989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.438258][T10989] team0: Device ipvlan2 failed to register rx_handler [ 216.464350][T10996] netlink: 516 bytes leftover after parsing attributes in process `syz.5.1426'. [ 217.302428][T11020] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 217.327217][T11020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.347181][T11020] bridge0: entered promiscuous mode [ 217.354287][T11020] gretap1: left promiscuous mode [ 217.368707][T11020] bridge0: port 3(gretap1) entered disabled state [ 217.408366][T11020] bridge_slave_1: left allmulticast mode [ 217.427656][T11020] bridge_slave_1: left promiscuous mode [ 217.449503][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.506798][T11020] bridge_slave_0: left allmulticast mode [ 217.530334][T11020] bridge_slave_0: left promiscuous mode [ 217.555060][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.722687][T11020] bridge0 (unregistering): left promiscuous mode [ 218.922761][T11110] netlink: 'syz.5.1458': attribute type 10 has an invalid length. [ 218.922756][T11108] netlink: 'syz.5.1458': attribute type 10 has an invalid length. [ 219.030316][T11108] netlink: 'syz.5.1458': attribute type 10 has an invalid length. [ 219.068396][T11108] team0: entered promiscuous mode [ 219.076401][T11108] team_slave_0: entered promiscuous mode [ 219.082549][T11108] team_slave_1: entered promiscuous mode [ 219.126769][T11108] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.134342][T11108] bridge0: port 3(team0) entered blocking state [ 219.162283][T11108] bridge0: port 3(team0) entered disabled state [ 219.177850][T11108] team0: entered allmulticast mode [ 219.193775][T11108] team_slave_0: entered allmulticast mode [ 219.201375][T11108] team_slave_1: entered allmulticast mode [ 219.215174][T11108] bridge0: port 3(team0) entered blocking state [ 219.221530][T11108] bridge0: port 3(team0) entered forwarding state [ 219.603247][T11154] netlink: 'syz.2.1471': attribute type 21 has an invalid length. [ 219.881782][T11167] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 220.397839][T11195] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 220.425386][T11199] __nla_validate_parse: 9 callbacks suppressed [ 220.425409][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1484'. [ 220.470850][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 220.480326][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 220.501249][T11204] ipvlan0: entered promiscuous mode [ 220.509344][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 220.534382][T11206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1486'. [ 220.649052][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 220.916566][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'. [ 221.015331][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1488'. [ 221.172076][T11255] netlink: 4160 bytes leftover after parsing attributes in process `syz.5.1497'. [ 221.646274][T11278] netlink: 'syz.0.1505': attribute type 64 has an invalid length. [ 221.654146][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1505'. [ 221.682214][T11277] xt_connbytes: Forcing CT accounting to be enabled [ 221.706460][T11277] xt_bpf: check failed: parse error [ 221.718644][T11279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.784024][T11306] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 222.801001][T11309] netlink: 'syz.3.1513': attribute type 8 has an invalid length. [ 222.847888][ T9256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.864654][ T9256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.826378][T11337] netlink: 'syz.1.1520': attribute type 21 has an invalid length. [ 224.682450][T11377] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 224.724761][T11380] veth1_macvtap: left promiscuous mode [ 224.790393][T11386] netlink: 'syz.5.1535': attribute type 1 has an invalid length. [ 224.855428][ T5840] block nbd1: Receive control failed (result -107) [ 224.922905][T11394] netlink: 'syz.3.1537': attribute type 27 has an invalid length. [ 225.387702][T11415] tipc: Enabling of bearer rejected, failed to enable media [ 225.519202][T11424] __nla_validate_parse: 14 callbacks suppressed [ 225.519224][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1546'. [ 225.941602][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 225.952000][T11441] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 225.962440][T11441] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 226.056487][T11453] netlink: 'syz.2.1553': attribute type 29 has an invalid length. [ 226.074328][T11446] delete_channel: no stack [ 226.086367][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1556'. [ 226.096689][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1555'. [ 226.262022][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1559'. [ 226.582144][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 228.002269][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 228.036554][T11516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.122489][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 228.727407][T11552] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 228.774895][ T5920] IPVS: starting estimator thread 0... [ 228.871064][T11554] IPVS: using max 24 ests per chain, 57600 per kthread [ 228.907572][T11557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1583'. [ 228.996637][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1585'. [ 229.028545][T11561] ip6gretap0: entered promiscuous mode [ 229.054302][T11561] ip6gretap0: left promiscuous mode [ 229.082692][T11567] batadv0: entered promiscuous mode [ 229.088373][T11567] batadv0: entered allmulticast mode [ 229.128022][T11569] netlink: 'syz.1.1586': attribute type 6 has an invalid length. [ 229.458459][T11589] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20000 [ 229.619955][T11590] ax25_connect(): syz.0.1593 uses autobind, please contact jreuter@yaina.de [ 229.811038][T11609] bond0: entered promiscuous mode [ 229.827798][T11609] bond_slave_0: entered promiscuous mode [ 229.840715][T11609] bond_slave_1: entered promiscuous mode [ 229.858990][T11609] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 229.876391][T11609] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 229.884739][T11609] Cannot create hsr debugfs directory [ 229.893685][T11609] hsr1: entered promiscuous mode [ 230.558516][T11660] __nla_validate_parse: 6 callbacks suppressed [ 230.558535][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 230.588744][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 230.615311][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'. [ 230.638061][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'. [ 230.729182][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 230.756637][T11660] bond1: entered promiscuous mode [ 230.771424][T11660] bond1: entered allmulticast mode [ 230.799255][T11660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.941594][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 230.982658][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1619'. [ 231.010658][T11687] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1617'. [ 231.245013][T11697] IPv6: sit1: Disabled Multicast RS [ 231.482939][T11707] syzkaller0: entered allmulticast mode [ 231.515022][T11710] ip6t_srh: unknown srh invflags 4000 [ 231.544902][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1624'. [ 231.571622][T11707] syzkaller0 (unregistering): left allmulticast mode [ 232.126530][T11730] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 232.158501][T11730] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 232.194569][T11730] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 232.213939][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1632'. [ 232.249081][T11730] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 232.284677][T11730] geneve2: entered promiscuous mode [ 232.402290][T11744] netlink: 'syz.5.1635': attribute type 4 has an invalid length. [ 232.412918][T11743] netlink: 'syz.5.1635': attribute type 4 has an invalid length. [ 233.092487][T11791] netlink: 'syz.5.1649': attribute type 6 has an invalid length. [ 233.114723][T11792] Cannot find del_set index 65534 as target [ 233.742576][T11832] openvswitch: netlink: EtherType 0 is less than min 600 [ 233.873582][T11846] xt_connbytes: Forcing CT accounting to be enabled [ 233.880510][T11846] xt_bpf: check failed: parse error [ 234.021262][T11849] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 234.188657][T11864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.197716][T11864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.218611][T11864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.239353][T11864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.253234][T11866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.666368][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.800154][T11892] bridge_slave_0 (unregistering): left allmulticast mode [ 234.807571][T11892] bridge_slave_0 (unregistering): left promiscuous mode [ 234.821560][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.858452][T11898] netlink: 'syz.3.1679': attribute type 15 has an invalid length. [ 234.883645][T11903] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 235.218150][T11912] bridge0: port 1(gretap0) entered blocking state [ 235.258548][T11912] bridge0: port 1(gretap0) entered disabled state [ 235.292946][T11912] gretap0: entered allmulticast mode [ 235.336581][T11912] gretap0: entered promiscuous mode [ 235.342362][T11912] bridge0: port 1(gretap0) entered blocking state [ 235.349362][T11912] bridge0: port 1(gretap0) entered forwarding state [ 235.355594][T11920] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 235.365072][T11915] bridge0: port 1(gretap0) entered blocking state [ 235.373684][T11915] bridge0: port 1(gretap0) entered disabled state [ 235.382464][T11915] gretap0: entered allmulticast mode [ 235.393141][T11915] gretap0: entered promiscuous mode [ 235.416911][T11926] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 235.431109][T11921] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 235.442570][T11913] gretap0: left allmulticast mode [ 235.449293][T11913] gretap0: left promiscuous mode [ 235.455148][T11913] bridge0: port 1(gretap0) entered disabled state [ 235.474253][T11919] 0ªX¹¦Dö»: left allmulticast mode [ 235.498964][T11919] bridge1: left promiscuous mode [ 235.503967][T11919] bridge1: left allmulticast mode [ 235.548406][T11919] bond1: left promiscuous mode [ 235.553228][T11919] bond1: left allmulticast mode [ 235.576294][T11919] gretap1: left allmulticast mode [ 235.583962][T11919] geneve2: left promiscuous mode [ 235.613104][T11918] gretap0: left allmulticast mode [ 235.637740][T11918] gretap0: left promiscuous mode [ 235.669295][T11918] bridge0: port 1(gretap0) entered disabled state [ 235.789850][T11932] tun0: tun_chr_ioctl cmd 1074812117 [ 235.816050][T11933] bond0: entered allmulticast mode [ 235.834916][T11933] bond_slave_0: entered allmulticast mode [ 235.850242][T11933] bond_slave_1: entered allmulticast mode [ 236.066600][T11950] __nla_validate_parse: 14 callbacks suppressed [ 236.066621][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 236.110893][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1693'. [ 236.474388][T11978] xt_TCPMSS: Only works on TCP SYN packets [ 236.573687][T11986] bridge0: entered allmulticast mode [ 236.587983][T11986] pim6reg: entered allmulticast mode [ 236.651239][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'. [ 236.656087][T11991] syz.2.1705 uses old SIOCAX25GETINFO [ 236.681588][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'. [ 236.759099][T11998] can: request_module (can-proto-0) failed. [ 237.046874][T12018] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 237.101867][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 237.169953][T12022] Unsupported ieee802154 address type: 0 [ 237.461636][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1724'. [ 237.904108][T12056] xt_bpf: check failed: parse error [ 238.217220][T12068] x_tables: duplicate entry at hook 1 [ 238.424361][T12073] sock: sock_timestamping_bind_phc: sock not bind to device [ 238.472516][T12073] netlink: 'syz.0.1732': attribute type 11 has an invalid length. [ 238.523722][T12080] tipc: Started in network mode [ 238.529101][T12080] tipc: Node identity 080211000001, cluster identity 4711 [ 238.537268][T12080] tipc: Enabled bearer , priority 0 [ 238.629199][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1735'. [ 238.820270][T12096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1736'. [ 238.952971][T12101] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1741'. [ 239.015554][T12103] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1739'. [ 239.262624][T12109] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 239.457803][T12117] vlan2: entered promiscuous mode [ 239.473683][T12117] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 239.654612][ T5910] tipc: Node number set to 134418688 [ 239.746819][T12130] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 239.904084][T12135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 239.905952][T12138] delete_channel: no stack [ 240.018333][T12135] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 240.084193][T12140] delete_channel: no stack [ 240.161080][T12146] bridge0 (unregistering): left allmulticast mode [ 240.270551][T12153] x_tables: duplicate underflow at hook 2 [ 240.507236][T12162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.517476][T12159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.671057][T12168] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 241.233584][T12196] __nla_validate_parse: 8 callbacks suppressed [ 241.233604][T12196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1770'. [ 241.272051][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 241.325148][T12203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1775'. [ 241.370762][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1775'. [ 241.467800][T12203] xt_nat: multiple ranges no longer supported [ 241.548187][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 241.671323][T12227] netlink: 'syz.0.1782': attribute type 137 has an invalid length. [ 241.681168][T12227] netlink: 'syz.0.1782': attribute type 29 has an invalid length. [ 242.035252][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 242.163530][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 242.253399][T12267] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1793'. [ 242.278183][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1793'. [ 242.448775][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1795'. [ 242.458686][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 243.499434][T12331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 243.557119][T12332] netlink: 'syz.1.1812': attribute type 13 has an invalid length. [ 243.578160][T12332] netlink: 'syz.1.1812': attribute type 12 has an invalid length. [ 243.884069][T12347] bond2: entered promiscuous mode [ 243.940108][T12353] gretap2: entered promiscuous mode [ 243.989746][T12353] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 244.025675][T12352] rose3: entered allmulticast mode [ 244.050266][T12359] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 244.051263][T12361] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 244.105142][T12359] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 244.476903][T12384] veth1: entered allmulticast mode [ 244.722201][T12397] dccp_invalid_packet: P.Data Offset(4) too small [ 244.754709][T12399] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.980605][T12403] syzkaller0: entered promiscuous mode [ 244.993298][T12403] syzkaller0: entered allmulticast mode [ 245.043033][T12403] netlink: 'syz.1.1840': attribute type 21 has an invalid length. [ 245.271062][T12420] netlink: 'syz.5.1844': attribute type 1 has an invalid length. [ 245.342454][T12420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.578864][T12447] __nla_validate_parse: 14 callbacks suppressed [ 247.578882][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 247.628348][T12448] netlink: 'syz.3.1851': attribute type 3 has an invalid length. [ 247.734036][T12451] syzkaller0: entered promiscuous mode [ 247.741952][T12451] syzkaller0: entered allmulticast mode [ 247.833668][T12454] vlan0: entered promiscuous mode [ 247.852614][T12454] bond0: entered promiscuous mode [ 247.874566][T12454] bond_slave_0: entered promiscuous mode [ 247.891576][T12454] bond_slave_1: entered promiscuous mode [ 248.006000][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 248.026117][T12460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1856'. [ 248.147958][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 248.190302][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1859'. [ 248.199871][T12469] nbd: must specify at least one socket [ 248.300552][T12473] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 248.327756][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 248.335428][T12473] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1859'. [ 248.367591][T12476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1860'. [ 248.384745][T12479] netlink: 'syz.5.1862': attribute type 1 has an invalid length. [ 248.392850][T12479] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1862'. [ 248.411714][T12472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1860'. [ 248.591810][T12489] netlink: 'syz.0.1865': attribute type 1 has an invalid length. [ 249.969551][T12514] netlink: 'syz.0.1870': attribute type 4 has an invalid length. [ 250.006835][T12511] netlink: 'syz.0.1870': attribute type 4 has an invalid length. [ 250.144987][T12516] IPVS: set_ctl: invalid protocol: 18604 172.20.20.187:20004 [ 250.450386][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.488037][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.552370][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.564377][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.592090][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.603814][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.619160][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.630450][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.648683][T12504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.681556][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.690858][T12528] netlink: 'syz.2.1873': attribute type 28 has an invalid length. [ 250.911519][T12542] bridge0: entered promiscuous mode [ 250.965297][T12542] bridge0: left promiscuous mode [ 251.164311][T12552] FAULT_INJECTION: forcing a failure. [ 251.164311][T12552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.191659][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.5.1879 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 251.202487][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 251.212586][T12552] Call Trace: [ 251.215887][T12552] [ 251.218839][T12552] dump_stack_lvl+0x241/0x360 [ 251.223564][T12552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.228800][T12552] ? __pfx__printk+0x10/0x10 [ 251.233427][T12552] ? __pfx_lock_release+0x10/0x10 [ 251.238491][T12552] should_fail_ex+0x3b0/0x4e0 [ 251.243206][T12552] _copy_from_user+0x2f/0xc0 [ 251.247831][T12552] copy_msghdr_from_user+0xae/0x680 [ 251.253070][T12552] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 251.258901][T12552] ? __fget_files+0x2a/0x410 [ 251.263509][T12552] ? __fget_files+0x2a/0x410 [ 251.268117][T12552] __sys_recvmsg+0x200/0x390 [ 251.272715][T12552] ? __pfx___sys_recvmsg+0x10/0x10 [ 251.277825][T12552] ? __mutex_unlock_slowpath+0x21e/0x790 [ 251.283466][T12552] ? __fget_files+0x2a/0x410 [ 251.288069][T12552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.294399][T12552] ? do_syscall_64+0x100/0x230 [ 251.299173][T12552] ? do_syscall_64+0xb6/0x230 [ 251.303858][T12552] do_syscall_64+0xf3/0x230 [ 251.308362][T12552] ? clear_bhb_loop+0x35/0x90 [ 251.313045][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.318938][T12552] RIP: 0033:0x7f81c3d85d29 [ 251.323531][T12552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.343139][T12552] RSP: 002b:00007f81c1bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 251.351557][T12552] RAX: ffffffffffffffda RBX: 00007f81c3f75fa0 RCX: 00007f81c3d85d29 [ 251.359535][T12552] RDX: 0000000000010021 RSI: 0000000020000700 RDI: 0000000000000004 [ 251.367512][T12552] RBP: 00007f81c1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.375492][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.383463][T12552] R13: 0000000000000000 R14: 00007f81c3f75fa0 R15: 00007ffd0f05ecf8 [ 251.391447][T12552] [ 251.675561][T12579] tap0: tun_chr_ioctl cmd 2147767506 [ 251.778751][T12584] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.915332][T12584] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.023305][T12601] FAULT_INJECTION: forcing a failure. [ 252.023305][T12601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.048461][T12584] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.118618][T12601] CPU: 1 UID: 0 PID: 12601 Comm: syz.2.1894 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 252.129448][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 252.139535][T12601] Call Trace: [ 252.142844][T12601] [ 252.145807][T12601] dump_stack_lvl+0x241/0x360 [ 252.150529][T12601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.155778][T12601] ? __pfx__printk+0x10/0x10 [ 252.160413][T12601] ? snprintf+0xda/0x120 [ 252.164697][T12601] should_fail_ex+0x3b0/0x4e0 [ 252.169405][T12601] _copy_to_user+0x31/0xb0 [ 252.173835][T12601] simple_read_from_buffer+0xca/0x150 [ 252.179215][T12601] proc_fail_nth_read+0x1e9/0x250 [ 252.184266][T12601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.189831][T12601] ? rw_verify_area+0x55e/0x6f0 [ 252.194688][T12601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.200248][T12601] vfs_read+0x1fc/0xb70 [ 252.204411][T12601] ? __pfx___mutex_lock+0x10/0x10 [ 252.209478][T12601] ? __pfx_vfs_read+0x10/0x10 [ 252.214159][T12601] ? __fget_files+0x2a/0x410 [ 252.218756][T12601] ? __fget_files+0x395/0x410 [ 252.223435][T12601] ? __fget_files+0x2a/0x410 [ 252.228037][T12601] ksys_read+0x18f/0x2b0 [ 252.232277][T12601] ? __pfx_ksys_read+0x10/0x10 [ 252.237037][T12601] ? do_syscall_64+0x100/0x230 [ 252.241805][T12601] ? do_syscall_64+0xb6/0x230 [ 252.246486][T12601] do_syscall_64+0xf3/0x230 [ 252.250987][T12601] ? clear_bhb_loop+0x35/0x90 [ 252.255672][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.261570][T12601] RIP: 0033:0x7f4cbfd8473c [ 252.265987][T12601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.285599][T12601] RSP: 002b:00007f4cc0bdd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.294019][T12601] RAX: ffffffffffffffda RBX: 00007f4cbff75fa0 RCX: 00007f4cbfd8473c [ 252.301993][T12601] RDX: 000000000000000f RSI: 00007f4cc0bdd0a0 RDI: 0000000000000006 [ 252.309965][T12601] RBP: 00007f4cc0bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 252.317941][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.325913][T12601] R13: 0000000000000000 R14: 00007f4cbff75fa0 R15: 00007ffe57b9d558 [ 252.333899][T12601] [ 252.353093][T12584] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.491331][T12584] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.521463][T12584] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.676185][T12584] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.713177][T12620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.740374][T12584] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.759477][T12626] __nla_validate_parse: 10 callbacks suppressed [ 252.759497][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 252.942326][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1904'. [ 253.144645][T12647] sctp: [Deprecated]: syz.3.1908 (pid 12647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.144645][T12647] Use struct sctp_sack_info instead [ 253.249621][T12655] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 253.273864][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 253.294897][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 253.429372][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1913'. [ 253.440092][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1910'. [ 253.534077][T12673] Cannot find del_set index 4 as target [ 253.746117][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 253.755598][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 253.869750][T12686] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 254.233548][T12708] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1926'. [ 254.347364][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'. [ 255.638271][T12771] validate_nla: 29 callbacks suppressed [ 255.638291][T12771] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 255.696474][T12772] delete_channel: no stack [ 255.951968][T12797] xt_recent: Unsupported userspace flags (00000042) [ 256.030759][T12803] sctp: [Deprecated]: syz.2.1952 (pid 12803) Use of int in maxseg socket option. [ 256.030759][T12803] Use struct sctp_assoc_value instead [ 256.146158][T12808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 256.360276][T12817] netlink: 'syz.1.1957': attribute type 6 has an invalid length. [ 256.540502][T12826] netlink: 'syz.3.1959': attribute type 4 has an invalid length. [ 256.549810][T12826] netlink: 'syz.3.1959': attribute type 4 has an invalid length. [ 256.572395][T12828] sch_fq: defrate 117 ignored. [ 256.659822][T12830] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 256.709113][T12834] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 256.811004][T12841] sctp: [Deprecated]: syz.0.1964 (pid 12841) Use of int in maxseg socket option. [ 256.811004][T12841] Use struct sctp_assoc_value instead [ 257.161440][T12860] tap0: tun_chr_ioctl cmd 1074025677 [ 257.183212][T12860] tap0: linktype set to 805 [ 257.195953][T12860] netlink: 'syz.0.1968': attribute type 12 has an invalid length. [ 257.222745][T12857] tap0: tun_chr_ioctl cmd 1074025677 [ 257.238913][T12857] tap0: linktype set to 805 [ 257.436801][T12873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.468060][T12873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 257.587500][T12873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.599508][T12873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 257.675733][T12873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.686623][T12873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 257.789366][T12873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.803068][T12873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 257.945732][T12873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 257.965297][T12873] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.993640][T12873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.005497][T12873] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 258.029494][T12873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.038118][T12873] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 258.063685][T12873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.081078][T12873] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 258.352682][T12921] __nla_validate_parse: 24 callbacks suppressed [ 258.352702][T12921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1985'. [ 258.580831][T12927] xt_limit: Overflow, try lower: 262144/524288 [ 258.735326][T12943] ip6gretap0: entered promiscuous mode [ 258.745920][T12943] batadv_slave_0: entered promiscuous mode [ 258.804986][T12943] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 258.812612][T12943] Cannot create hsr debugfs directory [ 258.848917][T12957] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 259.260678][T12971] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1996'. [ 259.794543][T13013] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2008'. [ 260.065423][T13027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2012'. [ 260.117477][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 260.147319][T13027] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 260.201425][T13033] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2013'. [ 260.246343][T13033] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 260.309663][T13035] ip6gre1: entered allmulticast mode [ 260.476335][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 260.810302][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2023'. [ 260.907631][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 260.935290][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'. [ 260.961503][T13058] syz.2.2021: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.978397][T13073] tap0: tun_chr_ioctl cmd 35111 [ 260.984757][T13058] CPU: 1 UID: 0 PID: 13058 Comm: syz.2.2021 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 260.995565][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 261.005657][T13058] Call Trace: [ 261.008963][T13058] [ 261.011915][T13058] dump_stack_lvl+0x241/0x360 [ 261.016624][T13058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.019047][T13072] set match dimension is over the limit! [ 261.021835][T13058] ? __pfx__printk+0x10/0x10 [ 261.032083][T13058] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 261.038538][T13058] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 261.045080][T13058] warn_alloc+0x278/0x410 [ 261.049441][T13058] ? __pfx_warn_alloc+0x10/0x10 [ 261.054336][T13058] ? xskq_create+0xb6/0x170 [ 261.058870][T13058] ? __get_vm_area_node+0x1c8/0x2d0 [ 261.064097][T13058] ? __get_vm_area_node+0x25c/0x2d0 [ 261.069319][T13058] __vmalloc_node_range_noprof+0x62f/0x1380 [ 261.075240][T13058] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.081586][T13058] ? __kasan_kmalloc+0x98/0xb0 [ 261.086359][T13058] vmalloc_user_noprof+0x74/0x80 [ 261.091298][T13058] ? xskq_create+0xb6/0x170 [ 261.095812][T13058] xskq_create+0xb6/0x170 [ 261.100149][T13058] xsk_init_queue+0xa1/0x100 [ 261.104745][T13058] xsk_setsockopt+0x598/0x950 [ 261.109429][T13058] ? __pfx_xsk_setsockopt+0x10/0x10 [ 261.114652][T13058] ? __pfx_aa_sk_perm+0x10/0x10 [ 261.119516][T13058] ? __pfx_lock_acquire+0x10/0x10 [ 261.124551][T13058] ? aa_sock_opt_perm+0x79/0x120 [ 261.129504][T13058] ? __pfx_xsk_setsockopt+0x10/0x10 [ 261.134707][T13058] do_sock_setsockopt+0x3af/0x720 [ 261.139740][T13058] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 261.145293][T13058] ? __fget_files+0x395/0x410 [ 261.149977][T13058] ? __fget_files+0x2a/0x410 [ 261.154585][T13058] __x64_sys_setsockopt+0x1ee/0x280 [ 261.159795][T13058] do_syscall_64+0xf3/0x230 [ 261.164302][T13058] ? clear_bhb_loop+0x35/0x90 [ 261.168993][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.174893][T13058] RIP: 0033:0x7f4cbfd85d29 [ 261.179309][T13058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.198917][T13058] RSP: 002b:00007f4cc0bdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.207337][T13058] RAX: ffffffffffffffda RBX: 00007f4cbff75fa0 RCX: 00007f4cbfd85d29 [ 261.215312][T13058] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 261.223283][T13058] RBP: 00007f4cbfe01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 261.231275][T13058] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 261.239248][T13058] R13: 0000000000000000 R14: 00007f4cbff75fa0 R15: 00007ffe57b9d558 [ 261.247233][T13058] [ 261.269725][T13058] Mem-Info: [ 261.272897][T13058] active_anon:9573 inactive_anon:0 isolated_anon:0 [ 261.272897][T13058] active_file:1704 inactive_file:38331 isolated_file:0 [ 261.272897][T13058] unevictable:768 dirty:107 writeback:0 [ 261.272897][T13058] slab_reclaimable:11902 slab_unreclaimable:110270 [ 261.272897][T13058] mapped:31567 shmem:4261 pagetables:645 [ 261.272897][T13058] sec_pagetables:0 bounce:0 [ 261.272897][T13058] kernel_misc_reclaimable:0 [ 261.272897][T13058] free:1314231 free_pcp:7240 free_cma:0 [ 261.322955][T13058] Node 0 active_anon:38332kB inactive_anon:0kB active_file:6816kB inactive_file:153248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126296kB dirty:456kB writeback:0kB shmem:15584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11980kB pagetables:2688kB sec_pagetables:0kB all_unreclaimable? no [ 261.357790][T13058] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 261.425074][T13072] pim6reg: entered allmulticast mode [ 261.426734][T13058] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.478884][T13072] pim6reg: left allmulticast mode [ 261.507708][T13058] lowmem_reserve[]: 0 2465 2466 0 0 [ 261.518445][T13058] Node 0 DMA32 free:1338456kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:38292kB inactive_anon:0kB active_file:6816kB inactive_file:152420kB unevictable:1536kB writepending:456kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:21572kB local_pcp:5100kB free_cma:0kB [ 261.549573][T13058] lowmem_reserve[]: 0 0 0 0 0 [ 261.555176][T13058] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 261.583276][T13058] lowmem_reserve[]: 0 0 0 0 0 [ 261.589897][T13058] Node 1 Normal free:3910428kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.619610][T13058] lowmem_reserve[]: 0 0 0 0 0 [ 261.656572][T13058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.697718][T13058] Node 0 DMA32: 190*4kB (ME) 48*8kB (UME) 40*16kB (UME) 48*32kB (UME) 40*64kB (ME) 29*128kB (UM) 24*256kB (UM) 9*512kB (UE) 3*1024kB (UM) 4*2048kB (UM) 319*4096kB (UM) = 1338232kB [ 261.741021][T13081] netlink: 'syz.1.2027': attribute type 11 has an invalid length. [ 261.783279][T13058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.888811][T13058] Node 1 Normal: 217*4kB (UME) 73*8kB (UME) 41*16kB (UME) 189*32kB (UME) 97*64kB (UME) 32*128kB (UME) 13*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910428kB [ 262.041992][T13058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.093064][T13058] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.129983][T13058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.168037][T13058] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.183530][T13058] 44315 total pagecache pages [ 262.207649][T13058] 0 pages in swap cache [ 262.213603][T13058] Free swap = 124996kB [ 262.222660][T13058] Total swap = 124996kB [ 262.227182][T13058] 2097051 pages RAM [ 262.231011][T13058] 0 pages HighMem/MovableOnly [ 262.238263][T13058] 427012 pages reserved [ 262.242457][T13058] 0 pages cma reserved [ 262.625877][T13115] netlink: 'syz.0.2035': attribute type 4 has an invalid length. [ 262.656938][T13115] netlink: 'syz.0.2035': attribute type 4 has an invalid length. [ 262.850411][T13121] batadv2: entered promiscuous mode [ 262.858465][T13121] batadv2: entered allmulticast mode [ 262.955782][T13131] tun0: tun_chr_ioctl cmd 1074812117 [ 263.219917][T13142] tap0: tun_chr_ioctl cmd 2148553947 [ 263.388086][T13155] __nla_validate_parse: 7 callbacks suppressed [ 263.388107][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 263.414653][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 263.614675][T13169] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 263.635049][T13168] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 263.799058][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'. [ 263.894278][T13182] smc: net device wg0 applied user defined pnetid SYZ0 [ 263.920740][T13182] netlink: 'syz.3.2051': attribute type 39 has an invalid length. [ 263.929393][T13186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2054'. [ 263.960706][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 263.962720][T13187] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 263.969803][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 263.972557][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 263.998625][T13182] smc: removing net device wg0 with user defined pnetid SYZ0 [ 264.010236][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 264.167454][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2056'. [ 264.177836][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2056'. [ 264.193303][T13193] xt_l2tp: v2 doesn't support IP mode [ 264.317060][T13198] netlink: 'syz.3.2059': attribute type 6 has an invalid length. [ 264.326191][T13198] netlink: 'syz.3.2059': attribute type 5 has an invalid length. [ 265.432101][T13286] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 265.447714][T13286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.975867][T13310] netlink: 'syz.3.2086': attribute type 9 has an invalid length. [ 265.990425][T13310] netlink: 'syz.3.2086': attribute type 7 has an invalid length. [ 266.013861][T13310] netlink: 'syz.3.2086': attribute type 8 has an invalid length. [ 266.046455][T13310] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 266.168105][T13326] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 266.206004][T13329] Bluetooth: MGMT ver 1.23 [ 266.405440][T13337] bridge0: port 3(team0) entered blocking state [ 266.423047][T13337] bridge0: port 3(team0) entered disabled state [ 266.440665][T13337] team0: entered allmulticast mode [ 266.447217][T13337] team_slave_0: entered allmulticast mode [ 266.453091][T13337] team_slave_1: entered allmulticast mode [ 266.464100][T13337] bridge0: entered allmulticast mode [ 266.482325][T13337] team0: left allmulticast mode [ 266.516581][T13337] team_slave_0: left allmulticast mode [ 266.522080][T13337] team_slave_1: left allmulticast mode [ 266.536280][T13337] bridge0: left allmulticast mode [ 266.884161][T13363] validate_nla: 1 callbacks suppressed [ 266.884180][T13363] netlink: 'syz.3.2098': attribute type 13 has an invalid length. [ 267.147869][T13378] netlink: 'syz.0.2103': attribute type 3 has an invalid length. [ 267.386386][T13386] netlink: 'syz.0.2107': attribute type 10 has an invalid length. [ 267.413349][T13386] team0: Device hsr_slave_0 failed to register rx_handler [ 267.854968][T13413] netlink: 'syz.5.2113': attribute type 33 has an invalid length. [ 268.635342][T13457] xt_TCPMSS: Only works on TCP SYN packets [ 268.682515][T13457] __nla_validate_parse: 22 callbacks suppressed [ 268.682537][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 268.718546][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 268.729375][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 268.908998][T13470] netlink: 'syz.1.2129': attribute type 3 has an invalid length. [ 268.925938][T13470] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2129'. [ 268.935570][T13474] netlink: 'syz.1.2129': attribute type 3 has an invalid length. [ 268.943635][T13474] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2129'. [ 268.980846][T13472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 269.135911][T13489] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 269.414921][T13509] tipc: Started in network mode [ 269.419864][T13509] tipc: Node identity e0000001, cluster identity 4711 [ 269.427356][T13509] tipc: Enabling of bearer rejected, failed to enable media [ 269.920340][T13522] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 269.937151][T13522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.151509][T13528] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2142'. [ 270.166761][T13528] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2142'. [ 270.187816][T13528] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2142'. [ 270.206433][T13530] netlink: 'syz.5.2143': attribute type 1 has an invalid length. [ 270.355946][T13533] syz.0.2144[13533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.356043][T13533] syz.0.2144[13533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.403815][T13536] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2146'. [ 270.408390][T13533] syz.0.2144[13533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.526379][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 270.589074][T13545] hsr0: entered promiscuous mode [ 271.322852][T13575] tipc: Enabling of bearer rejected, failed to enable media [ 271.335167][T13579] netlink: 'syz.0.2156': attribute type 2 has an invalid length. [ 271.343203][T13578] tipc: Enabling of bearer rejected, failed to enable media [ 271.357324][T13573] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 271.363244][T13575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.567762][T13583] smc: net device wg0 applied user defined pnetid SYZ0 [ 271.621364][T13583] netlink: 'syz.1.2158': attribute type 39 has an invalid length. [ 271.778554][T13583] smc: removing net device wg0 with user defined pnetid SYZ0 [ 272.656694][T13616] ip6gre2: entered allmulticast mode [ 272.734993][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 273.057029][T13631] netlink: 'syz.5.2171': attribute type 7 has an invalid length. [ 273.066244][T13631] netlink: 'syz.5.2171': attribute type 8 has an invalid length. [ 273.536188][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 273.636995][T13661] netlink: 'syz.3.2179': attribute type 11 has an invalid length. [ 273.979569][T13682] __nla_validate_parse: 15 callbacks suppressed [ 273.979590][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 274.299929][T13696] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2189'. [ 274.359766][T13698] sctp: [Deprecated]: syz.1.2191 (pid 13698) Use of int in max_burst socket option. [ 274.359766][T13698] Use struct sctp_assoc_value instead [ 274.710811][T13716] netlink: 'syz.1.2198': attribute type 6 has an invalid length. [ 274.730945][T13716] netlink: 'syz.1.2198': attribute type 7 has an invalid length. [ 274.745292][T13719] netlink: 'syz.5.2196': attribute type 10 has an invalid length. [ 274.754511][T13716] netlink: 'syz.1.2198': attribute type 8 has an invalid length. [ 274.805586][T13719] bond0: left allmulticast mode [ 274.810622][T13719] bond_slave_0: left allmulticast mode [ 274.818270][T13719] bond_slave_1: left allmulticast mode [ 274.850571][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.859578][T13719] team0: Device bond0 failed to register rx_handler [ 274.893071][T13714] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2196'. [ 274.948684][T13723] veth6: entered allmulticast mode [ 275.153897][T13728] x_tables: duplicate underflow at hook 4 [ 275.166671][T13729] netem: change failed [ 275.418295][T13735] pim6reg: entered allmulticast mode [ 275.483991][T13739] pim6reg: left allmulticast mode [ 275.515950][T13741] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 275.721834][T13750] syz.0.2208: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.749180][T13750] CPU: 0 UID: 0 PID: 13750 Comm: syz.0.2208 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 275.760015][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 275.770112][T13750] Call Trace: [ 275.773414][T13750] [ 275.776366][T13750] dump_stack_lvl+0x241/0x360 [ 275.781082][T13750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.786329][T13750] ? __pfx__printk+0x10/0x10 [ 275.790979][T13750] ? __rcu_read_unlock+0xa1/0x110 [ 275.796055][T13750] warn_alloc+0x278/0x410 [ 275.800416][T13750] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 275.806520][T13750] ? __pfx_warn_alloc+0x10/0x10 [ 275.811398][T13750] ? kasan_save_track+0x3f/0x80 [ 275.816254][T13750] ? __kasan_kmalloc+0x98/0xb0 [ 275.821107][T13750] ? xsk_setsockopt+0x4ea/0x950 [ 275.826055][T13750] ? do_sock_setsockopt+0x3af/0x720 [ 275.831257][T13750] ? __x64_sys_setsockopt+0x1ee/0x280 [ 275.836634][T13750] ? do_syscall_64+0xf3/0x230 [ 275.841336][T13750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.847441][T13750] __vmalloc_node_range_noprof+0x126/0x1380 [ 275.853384][T13750] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.859731][T13750] ? __kasan_kmalloc+0x98/0xb0 [ 275.864509][T13750] vmalloc_user_noprof+0x74/0x80 [ 275.869451][T13750] ? xskq_create+0xb6/0x170 [ 275.873966][T13750] xskq_create+0xb6/0x170 [ 275.878309][T13750] xsk_init_queue+0xa1/0x100 [ 275.882910][T13750] xsk_setsockopt+0x4ea/0x950 [ 275.887596][T13750] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.892807][T13750] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.897671][T13750] ? aa_sock_opt_perm+0x79/0x120 [ 275.902613][T13750] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.907922][T13750] do_sock_setsockopt+0x3af/0x720 [ 275.912987][T13750] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 275.918550][T13750] ? __fget_files+0x395/0x410 [ 275.923243][T13750] ? __fget_files+0x2a/0x410 [ 275.927857][T13750] __x64_sys_setsockopt+0x1ee/0x280 [ 275.933064][T13750] do_syscall_64+0xf3/0x230 [ 275.937571][T13750] ? clear_bhb_loop+0x35/0x90 [ 275.942259][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.948154][T13750] RIP: 0033:0x7fbda6b85d29 [ 275.952569][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.972199][T13750] RSP: 002b:00007fbda7a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.980626][T13750] RAX: ffffffffffffffda RBX: 00007fbda6d75fa0 RCX: 00007fbda6b85d29 [ 275.988602][T13750] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 275.996579][T13750] RBP: 00007fbda6c01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 276.004558][T13750] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.012550][T13750] R13: 0000000000000000 R14: 00007fbda6d75fa0 R15: 00007ffce20383f8 [ 276.020540][T13750] [ 276.039297][T13753] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2209'. [ 276.142618][T13750] Mem-Info: [ 276.171635][T13750] active_anon:6713 inactive_anon:0 isolated_anon:0 [ 276.171635][T13750] active_file:1704 inactive_file:38337 isolated_file:0 [ 276.171635][T13750] unevictable:768 dirty:259 writeback:0 [ 276.171635][T13750] slab_reclaimable:11734 slab_unreclaimable:110112 [ 276.171635][T13750] mapped:28640 shmem:1410 pagetables:646 [ 276.171635][T13750] sec_pagetables:0 bounce:0 [ 276.171635][T13750] kernel_misc_reclaimable:0 [ 276.171635][T13750] free:1306822 free_pcp:15127 free_cma:0 [ 276.234799][T13750] Node 0 active_anon:26732kB inactive_anon:0kB active_file:6816kB inactive_file:153272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114500kB dirty:1032kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11876kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no [ 276.279727][T13750] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 276.389753][T13750] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.432229][T13750] lowmem_reserve[]: 0 2465 2466 0 0 [ 276.444673][T13750] Node 0 DMA32 free:1304124kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:26592kB inactive_anon:0kB active_file:6816kB inactive_file:152444kB unevictable:1536kB writepending:1032kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:81492kB local_pcp:13420kB free_cma:0kB [ 276.491676][T13750] lowmem_reserve[]: 0 0 0 0 0 [ 276.506154][T13750] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 276.559668][T13750] lowmem_reserve[]: 0 0 0 0 0 [ 276.564909][T13750] Node 1 Normal free:3910428kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.602942][T13750] lowmem_reserve[]: 0 0 0 0 0 [ 276.618143][T13750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.631779][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2219'. [ 276.646305][T13750] Node 0 DMA32: 869*4kB (UME) 373*8kB (UE) 96*16kB (UME) 122*32kB (UE) 10*64kB (UE) 23*128kB (UME) 19*256kB (UM) 11*512kB (ME) 6*1024kB (M) 1*2048kB (M) 312*4096kB (UM) = 1312124kB [ 276.736411][T13750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 276.786056][T13750] Node 1 Normal: 217*4kB (UME) 73*8kB (UME) 41*16kB (UME) 189*32kB (UME) 97*64kB (UME) 32*128kB (UME) 13*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910428kB [ 276.845509][T13750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.874703][T13750] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.904916][T13750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.945763][T13750] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.964614][T13750] 41451 total pagecache pages [ 276.969353][T13750] 0 pages in swap cache [ 276.994944][T13750] Free swap = 124996kB [ 277.014722][T13750] Total swap = 124996kB [ 277.018997][T13750] 2097051 pages RAM [ 277.033045][T13750] 0 pages HighMem/MovableOnly [ 277.043210][T13750] 427012 pages reserved [ 277.056356][T13810] ip6tnl2: entered allmulticast mode [ 277.061812][T13750] 0 pages cma reserved [ 277.773108][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 278.331838][T13886] xt_recent: Unsupported userspace flags (00000042) [ 278.342838][T13893] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2247'. [ 278.594974][T13908] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2252'. [ 278.604648][ T29] audit: type=1107 audit(1734709340.786:3): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 278.661349][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 278.671018][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 279.087503][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2258'. [ 279.186785][T13932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2258'. [ 279.459007][T13946] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 279.644316][T13953] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.2265'. [ 279.670169][T13953] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.2265'. [ 280.384415][T13980] vlan1: entered promiscuous mode [ 280.404866][T13980] vlan1: entered allmulticast mode [ 280.442909][T13965] delete_channel: no stack [ 280.533105][T13994] netlink: 'syz.5.2277': attribute type 27 has an invalid length. [ 280.714781][T14006] netlink: 'syz.5.2282': attribute type 49 has an invalid length. [ 280.787442][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 280.851751][T14012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2284'. [ 281.017773][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 281.140483][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 281.172973][T14030] netlink: 'syz.1.2288': attribute type 21 has an invalid length. [ 281.182091][T14034] xt_limit: Overflow, try lower: 0/0 [ 281.372780][T13998] netlink: 'syz.0.2279': attribute type 3 has an invalid length. [ 281.380849][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 282.106170][T14077] syz.1.2300[14077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.106324][T14077] syz.1.2300[14077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.142205][T14080] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2302'. [ 282.148966][T14077] syz.1.2300[14077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.202015][T14077] netlink: 'syz.1.2300': attribute type 10 has an invalid length. [ 282.285758][T14077] team0: Device veth1_macvtap failed to register rx_handler [ 282.391095][T14081] tipc: Enabled bearer , priority 3 [ 282.432751][T14090] ------------[ cut here ]------------ [ 282.439178][T14090] refcount_t: decrement hit 0; leaking memory. [ 282.473782][T14090] WARNING: CPU: 0 PID: 14090 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 282.483959][T14090] Modules linked in: [ 282.488131][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz.0.2304 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 282.499106][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 282.509602][T14090] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 282.515860][T14090] Code: b2 00 00 00 e8 37 3b dd fc 5b 5d c3 cc cc cc cc e8 2b 3b dd fc c6 05 0d 2a 42 0b 01 90 48 c7 c7 a0 6a 5f 8c e8 d7 de 9d fc 90 <0f> 0b 90 90 eb d9 e8 0b 3b dd fc c6 05 ea 29 42 0b 01 90 48 c7 c7 [ 282.536089][T14090] RSP: 0018:ffffc90002f17728 EFLAGS: 00010246 [ 282.542208][T14090] RAX: c7286ded0a93a400 RBX: ffff88802278e64c RCX: ffff888033513c00 [ 282.550342][T14090] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 282.558396][T14090] RBP: 0000000000000004 R08: ffffffff81601a42 R09: fffffbfff1cfa210 [ 282.566781][T14090] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88802278e608 [ 282.574952][T14090] R13: 0000000000000000 R14: ffff88802278e64c R15: dffffc0000000000 [ 282.582948][T14090] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 282.591958][T14090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.598874][T14090] CR2: 0000000000000000 CR3: 0000000032fa4000 CR4: 00000000003526f0 [ 282.606939][T14090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.614996][T14090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.623004][T14090] Call Trace: [ 282.626786][T14090] [ 282.629755][T14090] ? __warn+0x165/0x4d0 [ 282.633946][T14090] ? refcount_warn_saturate+0xfa/0x1d0 [ 282.639523][T14090] ? report_bug+0x2b3/0x500 [ 282.644063][T14090] ? refcount_warn_saturate+0xfa/0x1d0 [ 282.649637][T14090] ? handle_bug+0x60/0x90 [ 282.654005][T14090] ? exc_invalid_op+0x1a/0x50 [ 282.659036][T14090] ? asm_exc_invalid_op+0x1a/0x20 [ 282.664106][T14090] ? __warn_printk+0x292/0x360 [ 282.668972][T14090] ? refcount_warn_saturate+0xfa/0x1d0 [ 282.674559][T14090] ? refcount_warn_saturate+0xf9/0x1d0 [ 282.680058][T14090] ref_tracker_free+0x6af/0x7e0 [ 282.685339][T14090] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 282.691284][T14090] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.696885][T14090] ? ax25_destroy_socket+0x551/0x5c0 [ 282.702217][T14090] ax25_release+0x368/0x950 [ 282.706826][T14090] sock_close+0xbc/0x240 [ 282.711111][T14090] ? __pfx_sock_close+0x10/0x10 [ 282.716300][T14090] __fput+0x23c/0xa50 [ 282.720338][T14090] task_work_run+0x24f/0x310 [ 282.725038][T14090] ? __pfx_task_work_run+0x10/0x10 [ 282.730415][T14090] ? do_exit+0xa2a/0x28e0 [ 282.734876][T14090] ? do_exit+0xa2a/0x28e0 [ 282.739252][T14090] do_exit+0xa2f/0x28e0 [ 282.743454][T14090] ? __pfx_do_exit+0x10/0x10 [ 282.748568][T14090] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.754001][T14090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.760092][T14090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.766531][T14090] ? _raw_spin_lock_irq+0xdf/0x120 [ 282.771703][T14090] do_group_exit+0x207/0x2c0 [ 282.776666][T14090] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.781913][T14090] ? lockdep_hardirqs_on+0x99/0x150 [ 282.787243][T14090] get_signal+0x16b2/0x1750 [ 282.791825][T14090] ? __pfx_get_signal+0x10/0x10 [ 282.796806][T14090] arch_do_signal_or_restart+0x96/0x860 [ 282.802405][T14090] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 282.808917][T14090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.815434][T14090] ? syscall_exit_to_user_mode+0xa3/0x340 [ 282.821289][T14090] syscall_exit_to_user_mode+0xce/0x340 [ 282.826919][T14090] do_syscall_64+0x100/0x230 [ 282.831689][T14090] ? clear_bhb_loop+0x35/0x90 [ 282.836710][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.842644][T14090] RIP: 0033:0x7fbda6b85d29 [ 282.847167][T14090] Code: Unable to access opcode bytes at 0x7fbda6b85cff. [ 282.854310][T14090] RSP: 002b:00007fbda7a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.862823][T14090] RAX: 0000000000000000 RBX: 00007fbda6d75fa0 RCX: 00007fbda6b85d29 [ 282.871125][T14090] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 282.879189][T14090] RBP: 00007fbda6c01aa8 R08: 0000000000000010 R09: 0000000000000000 [ 282.887262][T14090] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.895622][T14090] R13: 0000000000000000 R14: 00007fbda6d75fa0 R15: 00007ffce20383f8 [ 282.903690][T14090] [ 282.907074][T14090] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.914373][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz.0.2304 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 282.925139][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 282.935194][T14090] Call Trace: [ 282.938490][T14090] [ 282.941429][T14090] dump_stack_lvl+0x241/0x360 [ 282.946116][T14090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.951319][T14090] ? __pfx__printk+0x10/0x10 [ 282.955908][T14090] ? _printk+0xd5/0x120 [ 282.960066][T14090] ? __init_begin+0x41000/0x41000 [ 282.965094][T14090] ? vscnprintf+0x5d/0x90 [ 282.969436][T14090] panic+0x349/0x880 [ 282.973338][T14090] ? __warn+0x174/0x4d0 [ 282.977498][T14090] ? __pfx_panic+0x10/0x10 [ 282.981928][T14090] __warn+0x344/0x4d0 [ 282.985909][T14090] ? refcount_warn_saturate+0xfa/0x1d0 [ 282.991374][T14090] report_bug+0x2b3/0x500 [ 282.995704][T14090] ? refcount_warn_saturate+0xfa/0x1d0 [ 283.001173][T14090] handle_bug+0x60/0x90 [ 283.005328][T14090] exc_invalid_op+0x1a/0x50 [ 283.009833][T14090] asm_exc_invalid_op+0x1a/0x20 [ 283.014684][T14090] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 283.020759][T14090] Code: b2 00 00 00 e8 37 3b dd fc 5b 5d c3 cc cc cc cc e8 2b 3b dd fc c6 05 0d 2a 42 0b 01 90 48 c7 c7 a0 6a 5f 8c e8 d7 de 9d fc 90 <0f> 0b 90 90 eb d9 e8 0b 3b dd fc c6 05 ea 29 42 0b 01 90 48 c7 c7 [ 283.040373][T14090] RSP: 0018:ffffc90002f17728 EFLAGS: 00010246 [ 283.046446][T14090] RAX: c7286ded0a93a400 RBX: ffff88802278e64c RCX: ffff888033513c00 [ 283.054416][T14090] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 283.062389][T14090] RBP: 0000000000000004 R08: ffffffff81601a42 R09: fffffbfff1cfa210 [ 283.070360][T14090] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88802278e608 [ 283.078329][T14090] R13: 0000000000000000 R14: ffff88802278e64c R15: dffffc0000000000 [ 283.086304][T14090] ? __warn_printk+0x292/0x360 [ 283.091081][T14090] ? refcount_warn_saturate+0xf9/0x1d0 [ 283.096547][T14090] ref_tracker_free+0x6af/0x7e0 [ 283.101398][T14090] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 283.107299][T14090] ? __pfx_ref_tracker_free+0x10/0x10 [ 283.112680][T14090] ? ax25_destroy_socket+0x551/0x5c0 [ 283.117968][T14090] ax25_release+0x368/0x950 [ 283.122480][T14090] sock_close+0xbc/0x240 [ 283.126724][T14090] ? __pfx_sock_close+0x10/0x10 [ 283.131584][T14090] __fput+0x23c/0xa50 [ 283.135576][T14090] task_work_run+0x24f/0x310 [ 283.140176][T14090] ? __pfx_task_work_run+0x10/0x10 [ 283.145289][T14090] ? do_exit+0xa2a/0x28e0 [ 283.149619][T14090] ? do_exit+0xa2a/0x28e0 [ 283.153953][T14090] do_exit+0xa2f/0x28e0 [ 283.158115][T14090] ? __pfx_do_exit+0x10/0x10 [ 283.162705][T14090] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.168079][T14090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.174064][T14090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.180388][T14090] ? _raw_spin_lock_irq+0xdf/0x120 [ 283.185506][T14090] do_group_exit+0x207/0x2c0 [ 283.190094][T14090] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.195297][T14090] ? lockdep_hardirqs_on+0x99/0x150 [ 283.200492][T14090] get_signal+0x16b2/0x1750 [ 283.205010][T14090] ? __pfx_get_signal+0x10/0x10 [ 283.209868][T14090] arch_do_signal_or_restart+0x96/0x860 [ 283.215422][T14090] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 283.221577][T14090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.227566][T14090] ? syscall_exit_to_user_mode+0xa3/0x340 [ 283.233287][T14090] syscall_exit_to_user_mode+0xce/0x340 [ 283.238836][T14090] do_syscall_64+0x100/0x230 [ 283.243424][T14090] ? clear_bhb_loop+0x35/0x90 [ 283.248103][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.253994][T14090] RIP: 0033:0x7fbda6b85d29 [ 283.258406][T14090] Code: Unable to access opcode bytes at 0x7fbda6b85cff. [ 283.265416][T14090] RSP: 002b:00007fbda7a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.273835][T14090] RAX: 0000000000000000 RBX: 00007fbda6d75fa0 RCX: 00007fbda6b85d29 [ 283.281807][T14090] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 283.289775][T14090] RBP: 00007fbda6c01aa8 R08: 0000000000000010 R09: 0000000000000000 [ 283.297736][T14090] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.305704][T14090] R13: 0000000000000000 R14: 00007fbda6d75fa0 R15: 00007ffce20383f8 [ 283.313686][T14090] [ 283.316971][T14090] Kernel Offset: disabled [ 283.321349][T14090] Rebooting in 86400 seconds..