last executing test programs: 3.714610156s ago: executing program 3 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40901}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x4, 0x2, 0x1, 0x6, 0x0, 0x806}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000001640)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x4}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r11}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x220}]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f00000002c0)=@ethtool_regs={0x4, 0x8, 0x91, "32ba14d54c7c285d636bd07d813302d235ed33eec1372b6a7da44bd676f784678db6fa0950fea52ea967c06cec6930e56f5ee55860f650e3b641a1dd8361f17531f9bbcd6e432b5e0bfc61aa9b5e39a81a0a4871168b17118d54ca520140a7bd84f892aa15e161f700948a39ef6fa868df27cbd232feaa1bc8bb366e103267cdf843d23efd4b65cca1589d57325d90a238"}}) ioctl(r8, 0x8b32, &(0x7f0000000040)) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000180)={0x8358, 0x2, 0x5, 0x7, 0xfffffffc}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x200, 0x2cb95740, 0xd2a, 0x2, 0x9, 0x6, 0x68e0, 0x4, 0x7, 0x2, 0x400, 0x40, 0x8, 0x10001, 0x4, 0x7ff, 0x7ff, 0xa8d, 0x2, 0xee, 0xfffffff7, 0x1, 0x3, 0xffff55da, 0xf24, 0x401, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x3, 0x0, 0x2, 0x1ff, 0x3, 0x690a, 0xff, 0x1, 0x9, 0x40, 0x695, 0x0, 0x2, 0x93d1, 0x5, 0x9478, 0x7, 0xa, 0x0, 0xc0b, 0x6, 0x4, 0x5, 0x7, 0x8, 0x7, 0xeda, 0x80000000, 0x4e98, 0x0, 0x3, 0x80, 0x275b200, 0x5, 0x6, 0x3, 0x10000, 0x7, 0x3, 0x2, 0x5, 0x7fffffff, 0x7f, 0x5, 0x8, 0x8001, 0xc1d, 0x8, 0x4, 0xca, 0x9, 0x49, 0xbf, 0x4, 0x3, 0x3, 0x6, 0x7f, 0x0, 0x1, 0x2, 0x6, 0x4, 0x2, 0x6, 0x5, 0x5, 0x6, 0x4, 0x0, 0x6, 0x6, 0x0, 0x8, 0x9, 0x0, 0x8, 0x512, 0x4, 0x7, 0x6, 0x9, 0xea2, 0x1, 0x6, 0x1, 0x2, 0x10, 0x0, 0x0, 0x4b43, 0x6, 0x4, 0x400, 0xffffffff, 0x0, 0x8001, 0x6, 0x5, 0xaa0, 0x10001, 0x4, 0xf, 0x7, 0x6, 0x1, 0x8, 0xffffe9c4, 0x6, 0x7fffffff, 0x4, 0x2400, 0xfffffffa, 0x0, 0x3689dd20, 0x9f2, 0xfad6, 0x0, 0xfb7, 0x4, 0x3f, 0x3, 0x5, 0x7, 0x5, 0x6, 0x9, 0x1c0000, 0x1, 0x9, 0xc, 0x7, 0x7f2d, 0x8, 0x3, 0x5, 0xd, 0x80, 0x8000, 0x7fffffff, 0xffffffff, 0x263, 0x1, 0xfffffff9, 0x3, 0x2, 0x4, 0x504, 0x0, 0xa, 0x2, 0x0, 0x3, 0x8, 0x3, 0x3, 0x7, 0xfff, 0x2, 0x2, 0x0, 0x3, 0x8, 0x9, 0x2, 0x8, 0xfffff47f, 0x800, 0x5, 0x6, 0x80, 0xf21d, 0x1c2083d1, 0xd, 0x80000000, 0x80000000, 0x6, 0x0, 0x100, 0x9, 0x3, 0x7fffffff, 0x80000001, 0x7, 0xef, 0x80000000, 0x4, 0x8b, 0x1, 0x3, 0x10000, 0x101, 0x3, 0x2, 0x6, 0x8608, 0x3ff, 0x0, 0x1b800000, 0xff, 0x0, 0x919, 0xe77, 0x8, 0xffffffff, 0xc, 0x7, 0xbe9, 0x2, 0x5, 0x5, 0xd79, 0x3ff, 0x401, 0x8, 0xeb60, 0xfffffff5, 0x7ff, 0x10000000, 0x1, 0x6, 0x7, 0x9, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6a4, 0x7, 0xff, 0x1, 0x3, 0x2, 0x1, 0x10001, 0x6, 0x1, 0x5, 0x3, 0x9, 0x200, 0x8, 0xa, 0x3, 0x8, 0x8, 0xee1, 0xffffffd6, 0x7, 0x9, 0x7acc40f1, 0x5, 0x552bd9b9, 0x6, 0x5, 0x1, 0x2, 0x5, 0x5, 0x8001, 0x1000, 0xff, 0x4456, 0x4, 0x6, 0x2, 0x0, 0x1, 0x9d, 0x1, 0x3, 0x28, 0x3, 0xffffff00, 0x9, 0x2, 0xb9, 0x80000001, 0x5, 0x8, 0xff, 0x38, 0x2, 0x159a3a6d, 0xd, 0x18000, 0x4, 0x80, 0x200, 0x8cb7, 0x2, 0x310bd560, 0x9, 0x1, 0x5, 0xdf, 0x9, 0x2, 0x9, 0x6e, 0x3, 0x7, 0x3, 0x5, 0x1a27, 0x2, 0x2, 0xfffffffb, 0x3ff, 0x40, 0x400, 0xe969, 0x0, 0x1, 0x10000, 0x4, 0x10001, 0x9, 0xff, 0x0, 0x6, 0x4, 0x5e886c0b, 0x200, 0x8, 0xfffffffa, 0x9, 0x77d, 0x8, 0x1, 0x4, 0x4, 0x1, 0x2, 0x1ff, 0x26000000, 0x9, 0x6, 0x4eaf, 0xffffffff, 0x3ff, 0x5, 0x1, 0x2, 0x824, 0x3, 0x9, 0x7, 0x7, 0x7, 0x1000, 0xe, 0x1, 0x5, 0x9, 0x5, 0x7, 0x8001, 0x5, 0x9, 0x29, 0x8, 0xf, 0xb7, 0x9, 0x80, 0x401, 0x9, 0x0, 0xf9, 0x0, 0x2b, 0x3, 0x22, 0x1, 0x10001, 0x6, 0x7, 0x0, 0x4, 0x2, 0x3, 0x8, 0x1, 0x4, 0x36, 0x3, 0x247, 0x4, 0x8, 0x7ff, 0x7, 0x9, 0x61dfa670, 0x0, 0x68a, 0x3, 0x172, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3, 0x6, 0x4, 0x1, 0x6, 0x570, 0x9, 0x1000, 0x5, 0x9, 0x8, 0x1, 0x98, 0x66f, 0x9, 0x5, 0x8, 0x400, 0x97, 0x3ff, 0x9, 0x1, 0x919d, 0x2, 0xeb, 0x1, 0x2, 0x5, 0x7fff, 0x0, 0x6b0a, 0xfffffffd, 0x1000, 0xff, 0x0, 0xfff8, 0xf77, 0x1, 0x6, 0x2c2, 0x1, 0x1, 0x4a5, 0x80000000, 0x10000, 0x6, 0x7, 0x8, 0x6, 0xff, 0x7c1440d7, 0x3, 0x6, 0x9, 0xfffffff4, 0x5, 0x3, 0x4, 0x5, 0xc0000000, 0x5d, 0x200, 0x5b, 0x7f, 0x1, 0x3, 0x6, 0x4, 0x7f, 0x0, 0x1, 0x4, 0x24624535, 0xc4, 0x7, 0x2, 0xfc59, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x20000001, 0x7, 0x9, 0x94, {0x6, 0x1, 0x8482, 0x3, 0x7f, 0x9}, {0x8, 0x1, 0x6, 0x9, 0x4, 0x7}, 0xb, 0x8, 0xfffffffc}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 3.500943729s ago: executing program 4 (id=1017): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000240)="5aa3d0b9c5eb92b28c86e6213b27fd0ed734b4cbef7ce4b2a0a1357bf34d0b2c72846881a77e523e107024fc5ecf2bc2768bceabe7ffa8409c0995e21816151a998785a29ed26e51d6883ba748a5144d1e6fefe86a1254c67ca5173cfd8df3f1fa803db3c9bf1b7b5f0c4c6ae674c6967b3f14ab38fe1b24e2a3940544148612f32a1f87", 0x84}], 0x1}}], 0x1, 0x40810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840080000000800024000000000080005400000000008000340000000"], 0x9c}}, 0x0) 3.379018711s ago: executing program 1 (id=1018): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703a90723f9000000008af26c", 0xd8}], 0x1}, 0x22040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001d00010027bd7000fcdbdf251c000000", @ANYRES32=0x0, @ANYBLOB="020021000a0001000180c2000000008d005bfec90d6185fd87afb501c0730697cb1877a245332770a79566d061dd6070f7c527b309b0333726ebcdf9b804c5967b45c0c02b72590ae4d8409df553eedb819b9a2f8ea0574b48642ad22ba37ea7ed3c93833ce5b96d2d74c5e40670875a1f0253bb08d07d0f576805ae1ba620e5b7f05058bff30dddb15134e448c794c8b81da10b97224ff8364362916e1ba04e0b21e6e18ecef04b2850077b7f4e20833a169ca6224802c2031001714f25313fe83e5b23e011b507803c2642484e935fe830cb4f19070a507bd106aa9ce9c383f873f72a6229ae6f5d9ec8d1af35db13cec1"], 0x28}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f00000002c0)={0x2, 0x2, '\x00', 0x0, 0x5c}) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e44706001280090001007665746800000000040002800800200009c4060008001f00040000000000000000004e30fcd013e3ab13d1eef884cc6b9be7d0560f39271f29eece55bceb2070c7e8983f6f2c7b1c8f8fe8bf11456e9d5314c96202ecb53e4568dc6d23d9d3c98444d71d5bf7d9b08407b753369a1993e8cc68621fc135"], 0x44}, 0x1, 0xba01}, 0x0) bind$netlink(r6, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)) socket$kcm(0x10, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703a90723f9000000008af26c", 0xd8}], 0x1}, 0x22040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001d00010027bd7000fcdbdf251c000000", @ANYRES32=0x0, @ANYBLOB="020021000a0001000180c2000000008d005bfec90d6185fd87afb501c0730697cb1877a245332770a79566d061dd6070f7c527b309b0333726ebcdf9b804c5967b45c0c02b72590ae4d8409df553eedb819b9a2f8ea0574b48642ad22ba37ea7ed3c93833ce5b96d2d74c5e40670875a1f0253bb08d07d0f576805ae1ba620e5b7f05058bff30dddb15134e448c794c8b81da10b97224ff8364362916e1ba04e0b21e6e18ecef04b2850077b7f4e20833a169ca6224802c2031001714f25313fe83e5b23e011b507803c2642484e935fe830cb4f19070a507bd106aa9ce9c383f873f72a6229ae6f5d9ec8d1af35db13cec1"], 0x28}}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f00000002c0)={0x2, 0x2, '\x00', 0x0, 0x5c}) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e44706001280090001007665746800000000040002800800200009c4060008001f00040000000000000000004e30fcd013e3ab13d1eef884cc6b9be7d0560f39271f29eece55bceb2070c7e8983f6f2c7b1c8f8fe8bf11456e9d5314c96202ecb53e4568dc6d23d9d3c98444d71d5bf7d9b08407b753369a1993e8cc68621fc135"], 0x44}, 0x1, 0xba01}, 0x0) (async) bind$netlink(r6, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)) (async) 3.27888117s ago: executing program 4 (id=1019): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="8bf0a8d59517f2338cb76bb788f16f7caac84c3a1092595ec5f51e255a37ae8faf394e701289db59450f"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xe0646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) close(r0) (async) close(r0) 2.794208554s ago: executing program 1 (id=1021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0xe821651e0a1b45fc) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4dec943", @ANYRES16=r2, @ANYBLOB="31830000000000000000190000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0xc) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x488c0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.619630291s ago: executing program 3 (id=1022): socket$nl_xfrm(0x10, 0x3, 0x6) 2.350445489s ago: executing program 3 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000061f9000000000000090000008510000005000000ca670400f0ffffff1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000017a336000600000018220000", @ANYRES32, @ANYBLOB="000000006f0900009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x10, 0x29, &(0x7f00000001c0)=""/41, 0x40f00, 0x8, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x6, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500), &(0x7f00000002c0)=[{0x0, 0x5, 0x2, 0xa}, {0x2, 0x1, 0xa, 0x4}, {0x3, 0x5, 0x10, 0x9}, {0x1, 0x2, 0x8, 0x4}, {0x4, 0x2, 0x10}], 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0xc000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) shutdown(r2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000140)={&(0x7f0000000640)=""/179, 0xb3, 0x5, 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="ef65b63b93204542e4dc65ee1c1987c679190c57ef35da1ccbb3d5a7686d5341357fd9579222aee9be3d359bf2c42f5badd1fb0b4fc1c9f47ba264d8c543af780368bfd7759689798eaaa28859f5e3ed65483fa35a11a0aeca7523a06d05c488daee5d886f00f5a4dec512299ef6c0348784c776fb4c96d9eebe279277", @ANYBLOB="47adb546ce05b52b732abc32ff916faf5fdfc1f9297f2fcba28ad1bcee5ca31a", @ANYRESOCT=r3, @ANYRES8=r5, @ANYBLOB="51e5929ded358e38532b708a1f0b79947c68284abbbecc0990d279d12c8a596a9aee63fc098d39b682b7d13c7c792fcb74edbede306433bf2dc7b61aa9cf3c9a7dfe332e22e82f459db27d29d25cbb3a507451a7e3c8dfd222083bf99ebff4065804bd07de63e0889de21634e64ef6b8923cca498bbeb7c4bbccd75b34f4", @ANYRES8=r3, @ANYRESHEX=r5, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0xc021}, 0x20004084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) r9 = socket(0x8000000010, 0x2, 0x0) write(r9, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r10 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000540)="0c00971d92916d11c068e9b28037534267b998998dd56e96a5fb7e5b49fa651dc4a515c59eda78a45d7a24fb7b99e58cc5740fb0d0baaaa6c1a3d4d753c3c1da2bcc0090bcc013f6c027255ee7e8949b2b46bed7aba5f395139bd76ba658045d7ca5a288bf6cca640962bf7fa1eb5a9f255e30179066e0cf423a27b8fd73a7ca680466af48a36ee886515a3dac7f2aa5432abd0484e533327c4d3cf71f737ed4443a206c72844526791d318fec7509b178762b612c1262256149d1e15875d2d486101d61cbe059375ed413228562ffcd7ffebccb1f253e40c6f2eec3279c23108f6e34287ac04102d374", 0xea, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pipe(&(0x7f0000000000)) 2.281418145s ago: executing program 4 (id=1026): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)="5116ba52bfc157f388b9f68e681a853f247a5d46b8ce5fd5b3ab030f6f7a22839562fd0271c2c67f35eeccd8059a4ca2aa922021b1d93b5d8b26982883d6095da1ddb830c888fac76841db48ae58f4abf5934249aa3c210c0d7a69d70ba57b14fd2778adbaaf6b94b2820942b7e62845cf7a337e3ac51f17a3023e1b56ba6acf6c1ed0b341c2aad027a37cde7dcf0d93b55f879ddf167482061ee8b302665eea66f14ddc284a07a4fde928ca7683", &(0x7f00000002c0)=""/59, 0x4}, 0x20) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'veth1\x00', 0x766}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc9}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x4, 0xc, 0x5, 0x77, @empty, @private1, 0x7, 0x700, 0x0, 0xc}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3, 0x1}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8002}]}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd2c, 0x25dfdbfd, {0x2, 0x80, 0x14, 0x2, 0xfc, 0x1, 0x0, 0x0, 0x4000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40) 2.076547074s ago: executing program 4 (id=1029): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x35c, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000079b0, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x435}], 0x1, 0x40012021, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000045) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.978531745s ago: executing program 2 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001600)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @local, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="7ca85e77535dffbeab00df1e8a8dad902eb6e9ef873550c5e0c535e6bf981413a83c", &(0x7f0000000180)=@tcp6=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000140)="6c14fb20", 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000a00)=ANY=[], 0x18c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="de27391c27fa6259ace8f6d963410449", 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 1.680030183s ago: executing program 2 (id=1031): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8917, &(0x7f0000000000)={'veth1_to_batadv\x00', @random="0200ff7fffff"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0xf0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@dev, @private, 0x0, 0x0, 'pimreg1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000af00)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) (async) write$cgroup_int(r9, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002d00090526bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 1.613874404s ago: executing program 0 (id=1032): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000005, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.474379554s ago: executing program 2 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (fail_nth: 5) 1.449823214s ago: executing program 0 (id=1034): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344}, 0x0, 0x10000) syz_emit_ethernet(0x52, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x1c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, r1, 0x0, 0x2, 0x7, 0x70, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x4}, @timestamp={0x44, 0x4, 0x36, 0x3}, @timestamp={0x44, 0x4}]}}, {{0x100, 0x4e24, 0x41424344, r1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r4, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f00000019c0)=[{{&(0x7f00000002c0)={0xa, 0x4e25, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f0000000280)) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) close(0x3) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aeaa000000000000711011000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x0, 0x230, 0x2c8, 0x130, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@remote, @local, 0x0, 0x0, 'dummy0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0xff000000, 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x2e}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x6, 0x6, 0x1, 0x1], 0x4, 0x2}, {0x2, [0x2, 0x2, 0x4, 0x1, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 1.425879996s ago: executing program 3 (id=1035): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x24}}], 0x1, 0x8094) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.311798681s ago: executing program 1 (id=1036): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000ee51101614a3ef3032bf36d1528ac54156c91970a62537af09f20a92c89facb9586bfd2afdcafab5a18e1b912539a85c4f50a1dff07a8a2a5c7204952fa6ad35ea799f3c4e2b661b880cc29d36999e68ff0d0efad3175b1c25aa7936d466a54283f0d0b8eef78739ad67848912440d9b9101f4c189a0398d052846e2b0e5b1bdd1a6bd"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001200"/28], 0x48) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r6, 0x917}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000438799ba26c99a430ef9d05f008018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000000c000000b70700000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) connect$inet6(r8, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) (async, rerun: 32) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) writev(r8, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a", 0x28) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x140d, 0x20, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 854.266703ms ago: executing program 4 (id=1037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xb, 0x600}, @fastopen={0x22, 0x8, "9cd061e7e749"}]}}}}}}, 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000001857000006000000000000000000000018460000080000000000000000000000850000003e000000ab0a300000000000"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xb1, &(0x7f0000000580)=""/177, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x7, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r4, r4, r3, r4, r3], &(0x7f0000000700)=[{0x3, 0x5, 0xe, 0x3}, {0x3, 0x4, 0x9, 0x8}, {0x3, 0x5, 0xf, 0xc}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000440)='powernv_throttle\x00', r5, 0x0, 0xf}, 0x18) unshare(0x20000400) sendfile(0xffffffffffffffff, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18003b98030000000000000000000000957967c35c000000d80e32a4d1d215ffccc497918fac99db11aa2465eb996dd7d3cccfa296fc0d373d67065530236702caa4213acc4e47a4aeaa5ed4a8338aa3a77f0bddaedfbbddb20000ea899a64b305e4939a4c81a12eae6fdd6c488047d92ce85a193544298d38e51437c632050000000000000053d9c4ef8d1aea8952c372e0d65bb50dc9d954781ddff614cb58ddb82d7ccac3b787ea6c5f82075c21d916a07f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {0x20}, {}, {}, {0x64}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) unshare(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000051000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6cb9c8df", @ANYRES16=0x0, @ANYBLOB="000026bd7000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="1e003300a0107800ffffffffffff08021100000050505050505089003700000004006c001000cd00090007000700020003000900040087000800570038090000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000880) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="45ad000000000000140035007866726d3000006c0000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20048080) 757.379465ms ago: executing program 2 (id=1038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x6, [{@empty}, {@private=0xa010100, 0x6}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r6, 0x607, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 683.847045ms ago: executing program 1 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdadf25047c0000040000001400018006000600800a000008000f00ffffff7f"], 0x2c}}, 0x0) (async) r1 = socket(0x1a, 0x6, 0x8) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x7, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8404) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$bt_hci(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000028c178fde21aba5913cd6895aa8a570e00dd0090"], 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES16=r4], 0x20}}, 0xc080) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_pressure(r10, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) (async) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r12, 0x8918, 0x0) (async) preadv(r11, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x4000) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008001}, 0x24000880) (async) unshare(0x22040000) (async) unshare(0x40040000) 558.540053ms ago: executing program 0 (id=1040): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77abcd11", 0x16) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x9, 0x0, 0x401, 0x10, &(0x7f0000000980), 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x127, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018830000050000000000001300"/40], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1020, &(0x7f0000001200)=""/4128, 0x40efd, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYRES8=r2], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24048804) 451.44016ms ago: executing program 1 (id=1041): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000005c00000008000300", @ANYRES32=r2, @ANYBLOB="08000a2a0b7c2666e3d125927ff23216236b003c000000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20048050) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200feffffff000000003000320002010000000000000000000002000000000000000000000000000000fc0200000000003b8da9930000000004030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) 447.523085ms ago: executing program 2 (id=1042): socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000000)="134345be218a82fe733e8c3f43303816b8567084637af22e", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x1000, 0xb9, &(0x7f0000001680)="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", &(0x7f0000000600)=""/185, 0x5, 0x0, 0x5f, 0x1000, &(0x7f0000000540)="51e86401b753649c95e21a0e42c079e364c324f9ff6765b8c5fb161825941f89d00a9c96aeca1cde313293c89eefa9ee1ca9244d0482b66f58bf7f7daa08863d74e336591c2ceca3fce1d2af3d38126a1664ddcc5f2e4bbc6d6e70b36367b9", &(0x7f0000002680)="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", 0x4, 0x0, 0x5}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400000038000107003652539e99660000000000ba250a994a5c7f5407fb36afd193f9be064627a707c7f6e94b34ca266410559f6d7149437854b10fdfe499a5bdb9952acadee3ab8f3a39a385b3c96a7d0826add3c61bd45b6eb201d495b60ab9dc95bc4bb7ec06e0a63505972d07ef952e991779c52c34930398636f0d3e928f80cd795500090df24231ef3d64ed262dfd719ee35ea6a6b9b8b86999be051b9fbf429d4e5a3cd6d976d7354544a2647ade421155b0407a806c680865c9bec590d9981bc069d4f4687ba41b89e0232b5f1886a868cac29567adcfebd2c7e7e98d87ea294b"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c0003000000000000000000140001"], 0x114}], 0x1}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc0000000000000000000000000000000000000000000040020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = accept(r1, &(0x7f0000000940)=@ax25={{0x3, @default}, [@remote, @rose, @remote, @rose, @bcast, @default, @rose]}, &(0x7f0000000280)=0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf25210000000c0099000a000000feffffff18002d80120000fc30668eaf8f80193382fbad87c90d00000600f700042000000600f7000080000008009e000800000008009e0010140000"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x2000006, 0x1010, r6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r11, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r11, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 412.25605ms ago: executing program 0 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) (async) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r1, 0x0, 0x7, &(0x7f0000000280)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) (async, rerun: 32) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d7069647320ad49fa74b10e6d5b44c368adef757f5017c0d114"], 0x6) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000006030000fb1a3b1895cfe405"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "347882c6c46d0631", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "a977baec9c729411", "6519dbfd9473c9c63e9d7297e5d18c57e9189dfcd803cbcfe06b8ad742f64fa7", "b7df73b6", "5ce850515447ec0a"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r11, 0x11, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r12, @ANYBLOB="0a000600080211000000000038005080080003000cac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) (async) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @null]}, 0x48) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54400000000b01010000000000000000020000080800034000000001050001000000000008000100292e29000800024000000005080003400000000008000240070000000800024000000002080001002e2d7d00"], 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) 306.370788ms ago: executing program 3 (id=1044): unshare(0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x92, 0x0, &(0x7f0000000240)="a4da57df712462aa0da7152f892444f624ca72c3ae1da8dc3a065519945631d50bc06e2b5ca04b349157652bb6b912ee5ec14ffd1159d51c0440a0009961b0bf80500850f60157c1f9e7eb4150cee1e98d13a7b79bf6bf2cf78e1148411375bbfb3916cc871e0fdfca0f39b57d3c3ad4550661475c2f8fade0bd6adf2e60716dcc9367223c11886db15f61a7d82f3ca6adb7", 0x0}, 0x50) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac14140000000000000000000000000000000000000000395ecc65da80e28090000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff00000000000000000000000044000800fc0100000000000000000000000000000000000000000000000000007f00000100"/196], 0x16c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7f, 0xffff, 0xde6, 0x9, 0x2232, 0x8001, 0x7a16, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x2, 0x2, 0xd, 0x3}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) ioctl$sock_inet_udp_SIOCINQ(r0, 0x894b, &(0x7f00000000c0)) 239.679424ms ago: executing program 1 (id=1045): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)}}], 0x1, 0x0) listen(r3, 0xfff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) accept(r3, 0xfffffffffffffffd, &(0x7f0000000680)=0xffffffffffffff89) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0xa, 0xce58}, {0x7bb, 0x101}, {0xb, 0x8001}, {0x6, 0x7}, {0x5, 0x1226}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0xb}, @fwd={0x8}]}, {0x0, [0x4f, 0x61, 0x61, 0x30, 0x0]}}, &(0x7f00000007c0)=""/29, 0x77, 0x1d, 0x1, 0x0, 0x10000, @value=r1}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='tlb_flush\x00', r7}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}}], 0x1, 0xc0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="de76e4c4b7235e53413cc9a0942158b396858fbf912a0068d1da5b33f9aa17f86e35296514c6d90c67e46cf5c9b6a700f28136cbe56b1a72e6d01e196c6aa5", 0x3f}, {&(0x7f0000000180)="490bbf9532c4f5008f90f47c54831cccf375cfbea70a846f30407055a67fdb7c9850b9daaadaae", 0x27}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000200)="8933f9e2fcef4af562e32c74a2e3c16a17d40bfdfb953250515c37a6bc329c5c7c19594dc2112826b4cd166c3fd2e973403054d42ad3a2c18f39b1a6d5fb58b9dad4c3d9ee633d94f57d76b06bb6bed7292a14c22a6c5f117c746030db8d92e0730795058f06b78c472f0212eab4dd23eeb7c46cef0937373a282fb96f98921a43545062fac49f75dec5ba90788d64a8afb25642fec5f275756991a59925345d538c92c0e028305b96a4a68957b5b4130e807ce7619edb843acec33c7bdc2f63f8361eefc51f4bcd47b7c9173197a78f8a584f69163fce53b15f3f5ef617d3647e14bfe94545ead46df98f0e74bc1553ebf0a6", 0xf3}, {&(0x7f0000000400)="465a7a3e8539dda3c09b4f76173a9ac0799657b42fa0f8ec38e7be11e1782351d9e6dc308d5de01cec0945d6f20dd7b680b21161cf4d04cc28a9f002033858b7a61a6f4ab080d2d2e8506fc6b39e9e48331d9aec8d882869b1d94e226bcd59629db9b167522ebeae653808179fb2e4e9e7150af2b7da7440c7d6cc04846fcbc59a914130184b75c5cc79f2a6753527348be3ae00c5695b4e", 0x98}, {&(0x7f0000000540)="6c620d9d3da60f5f242daaaef63b452799d0073d9eeeb741971f54551923a0b596257f3ea9086a1d9e3368d2bd55df8b869f7272f7c07a0cccc6b754c8843c57cb2c9fdbdebc6cfc8df65733c1d0dbd3866125deb71fc2a8e328148c6217e25330a9c79d5510c18d6bba634e848d1b7cd89aea7f587f8ec785172f7efe22581ce3", 0x81}, {&(0x7f0000000300)="493252578cf5b6895427fc74277f6c695726c046109646059a3208f2d8517ff93188a146becf5d2bbb94877f81d7a60dd968", 0x32}, {&(0x7f0000000380)="b2a90ea0d7dbcb3970d725bc81df62f4b16ad0ad5c3b0d470468bc", 0x1b}], 0x8, &(0x7f00000006c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x404c024}], 0x1, 0x20000000) socket$packet(0x11, 0x0, 0x300) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x400c054) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 212.453776ms ago: executing program 0 (id=1046): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 62.459153ms ago: executing program 2 (id=1047): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'sit0\x00', r4, 0x20, 0x80, 0x8, 0x6, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x54, [@empty]}, @ssrr={0x89, 0x13, 0xa4, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1]}, @generic={0x82, 0x11, "1333645969a3cbcb8d07908af7aa5d"}]}}}}}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) (async, rerun: 64) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x3c, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x3c}}, 0x4000) (async) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 64) r8 = epoll_create(0x401) (rerun: 64) epoll_wait(r8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xa03) 61.518427ms ago: executing program 4 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (fail_nth: 6) 30.868321ms ago: executing program 0 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) socket$inet6(0xa, 0x1, 0x3) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000400)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x9, 'macvtap0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000015000100fdfffffffedbdf2502400000ca8aa8b59df4adcc224fc27a9c3d816873458db551d140e4a4d6d4d9ff41b9b0bd88063a516f5dd296b9039df65579b4f13d0fc87b18eedcaadbf49b446e5e93465e4ca04d30acd19a50322a3fa71c0a9e100e49fa4594b8a5192fa9b03e3c9f5dbf5000"/133, @ANYRES32=r2, @ANYBLOB="14000300766574682100"], 0x34}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r9, 0x11, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 0s ago: executing program 3 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000001b0000000000880000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000003f55090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 97.714932][ T5820] cgroup: Unknown subsys name 'net' [ 97.853432][ T5820] cgroup: Unknown subsys name 'cpuset' [ 97.867669][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.140978][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.774804][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.783953][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.792392][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.800662][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.808686][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.027940][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.039163][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.047330][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.055987][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.068385][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.078158][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.086379][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.095248][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.103256][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.111532][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.141774][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.150179][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.158014][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.167892][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.177935][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.204694][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.214559][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.222562][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.240459][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.248318][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.323610][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 103.573499][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.582156][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.589670][ T5831] bridge_slave_0: entered allmulticast mode [ 103.598042][ T5831] bridge_slave_0: entered promiscuous mode [ 103.641617][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.648835][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.656850][ T5831] bridge_slave_1: entered allmulticast mode [ 103.664818][ T5831] bridge_slave_1: entered promiscuous mode [ 103.721259][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.751345][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.806089][ T5831] team0: Port device team_slave_0 added [ 103.831221][ T5831] team0: Port device team_slave_1 added [ 103.941903][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.948897][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.975911][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.995824][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.003631][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.030309][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.314664][ T5831] hsr_slave_0: entered promiscuous mode [ 104.322054][ T5831] hsr_slave_1: entered promiscuous mode [ 104.329563][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 104.381964][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 104.404240][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 104.529480][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 104.746807][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.754509][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.762143][ T5836] bridge_slave_0: entered allmulticast mode [ 104.769491][ T5836] bridge_slave_0: entered promiscuous mode [ 104.832469][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.839687][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.847111][ T5836] bridge_slave_1: entered allmulticast mode [ 104.855096][ T5836] bridge_slave_1: entered promiscuous mode [ 104.871617][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.878771][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.886628][ T5843] bridge_slave_0: entered allmulticast mode [ 104.893784][ T5846] Bluetooth: hci0: command tx timeout [ 104.901843][ T5843] bridge_slave_0: entered promiscuous mode [ 104.937618][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.945481][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.953142][ T5845] bridge_slave_0: entered allmulticast mode [ 104.960689][ T5845] bridge_slave_0: entered promiscuous mode [ 104.968610][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.976747][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.984053][ T5845] bridge_slave_1: entered allmulticast mode [ 104.991602][ T5845] bridge_slave_1: entered promiscuous mode [ 105.021564][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.028860][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.036748][ T5843] bridge_slave_1: entered allmulticast mode [ 105.045071][ T5843] bridge_slave_1: entered promiscuous mode [ 105.052074][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.059284][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.067153][ T5837] bridge_slave_0: entered allmulticast mode [ 105.075175][ T5837] bridge_slave_0: entered promiscuous mode [ 105.136030][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.160224][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.167388][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.174739][ T5837] bridge_slave_1: entered allmulticast mode [ 105.182182][ T5837] bridge_slave_1: entered promiscuous mode [ 105.192473][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.205793][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.217555][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.226804][ T5834] Bluetooth: hci1: command tx timeout [ 105.230075][ T5846] Bluetooth: hci2: command tx timeout [ 105.290005][ T5834] Bluetooth: hci3: command tx timeout [ 105.295939][ T5846] Bluetooth: hci4: command tx timeout [ 105.340533][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.353814][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.394200][ T5845] team0: Port device team_slave_0 added [ 105.402921][ T5836] team0: Port device team_slave_0 added [ 105.412508][ T5836] team0: Port device team_slave_1 added [ 105.445046][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.458741][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.473728][ T5845] team0: Port device team_slave_1 added [ 105.580072][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.587086][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.616319][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.632403][ T5843] team0: Port device team_slave_0 added [ 105.652310][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.659291][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.685505][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.706467][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.714306][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.740809][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.755569][ T5843] team0: Port device team_slave_1 added [ 105.778289][ T5837] team0: Port device team_slave_0 added [ 105.785122][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.792279][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.818458][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.857474][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.864618][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.890682][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.904428][ T5837] team0: Port device team_slave_1 added [ 105.956499][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.963721][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.989868][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.017843][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.031749][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.049585][ T5845] hsr_slave_0: entered promiscuous mode [ 106.056139][ T5845] hsr_slave_1: entered promiscuous mode [ 106.062777][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.070642][ T5845] Cannot create hsr debugfs directory [ 106.111908][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.126247][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.142770][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.149757][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.176451][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.207901][ T5836] hsr_slave_0: entered promiscuous mode [ 106.214517][ T5836] hsr_slave_1: entered promiscuous mode [ 106.221434][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.229024][ T5836] Cannot create hsr debugfs directory [ 106.276379][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.286025][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.312296][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.441663][ T5837] hsr_slave_0: entered promiscuous mode [ 106.448385][ T5837] hsr_slave_1: entered promiscuous mode [ 106.455513][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.463262][ T5837] Cannot create hsr debugfs directory [ 106.475971][ T5843] hsr_slave_0: entered promiscuous mode [ 106.482679][ T5843] hsr_slave_1: entered promiscuous mode [ 106.488836][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.496757][ T5843] Cannot create hsr debugfs directory [ 106.970075][ T5846] Bluetooth: hci0: command tx timeout [ 107.055296][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.068621][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.084840][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.121669][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.178352][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.211926][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.224455][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.250927][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.271902][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.290654][ T5834] Bluetooth: hci1: command tx timeout [ 107.296318][ T5846] Bluetooth: hci2: command tx timeout [ 107.319367][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.356683][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.364064][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.376724][ T5846] Bluetooth: hci4: command tx timeout [ 107.381779][ T5834] Bluetooth: hci3: command tx timeout [ 107.395805][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.406939][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.423171][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.435878][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.497483][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.504759][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.630816][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.644990][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.657615][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.685112][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.865211][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.928500][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.961055][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.977338][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.026425][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.033726][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.074350][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.098744][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.105970][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.123806][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.136784][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.143989][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.175154][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.185588][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.192777][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.221039][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.228195][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.239371][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.246578][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.322260][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.344024][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.417495][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.424718][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.438912][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.446048][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.493707][ T1218] cfg80211: failed to load regulatory.db [ 108.679528][ T5831] veth0_vlan: entered promiscuous mode [ 108.783866][ T5831] veth1_vlan: entered promiscuous mode [ 108.935803][ T5831] veth0_macvtap: entered promiscuous mode [ 108.987282][ T5831] veth1_macvtap: entered promiscuous mode [ 109.050201][ T5834] Bluetooth: hci0: command tx timeout [ 109.075091][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.096805][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.153869][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.224042][ T3499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.234760][ T3499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.256152][ T3499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.265482][ T3499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.301033][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.354417][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.373249][ T5834] Bluetooth: hci2: command tx timeout [ 109.378745][ T5834] Bluetooth: hci1: command tx timeout [ 109.401919][ T5836] veth0_vlan: entered promiscuous mode [ 109.454956][ T5846] Bluetooth: hci3: command tx timeout [ 109.460661][ T5834] Bluetooth: hci4: command tx timeout [ 109.502804][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.507331][ T5836] veth1_vlan: entered promiscuous mode [ 109.514365][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.546167][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.660077][ T5845] veth0_vlan: entered promiscuous mode [ 109.672506][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.698350][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.774132][ T5845] veth1_vlan: entered promiscuous mode [ 109.804006][ T5843] veth0_vlan: entered promiscuous mode [ 109.871710][ T5836] veth0_macvtap: entered promiscuous mode [ 109.879656][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.891556][ T5843] veth1_vlan: entered promiscuous mode [ 109.929413][ T5836] veth1_macvtap: entered promiscuous mode [ 110.030858][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.037953][ T5948] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 110.055018][ T5948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 110.058625][ T5845] veth0_macvtap: entered promiscuous mode [ 110.083369][ T5948] bridge0: port 3(dummy0) entered blocking state [ 110.090013][ T5948] bridge0: port 3(dummy0) entered disabled state [ 110.096536][ T5948] dummy0: entered allmulticast mode [ 110.106776][ T5948] dummy0: entered promiscuous mode [ 110.113450][ T5948] bridge0: port 3(dummy0) entered blocking state [ 110.120133][ T5948] bridge0: port 3(dummy0) entered forwarding state [ 110.131674][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.152029][ T5845] veth1_macvtap: entered promiscuous mode [ 110.174242][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.183436][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.257486][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.274463][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.286265][ T5843] veth0_macvtap: entered promiscuous mode [ 110.294189][ T5837] veth0_vlan: entered promiscuous mode [ 110.338643][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.360857][ T5843] veth1_macvtap: entered promiscuous mode [ 110.385778][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.398319][ T5837] veth1_vlan: entered promiscuous mode [ 110.469793][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.498077][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.508685][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.521070][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.532621][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.541714][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.625385][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.637977][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.712323][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.726578][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.764527][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.774870][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.807770][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.824665][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.883164][ T5837] veth0_macvtap: entered promiscuous mode [ 110.939129][ T5837] veth1_macvtap: entered promiscuous mode [ 111.054101][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 111.130120][ T5834] Bluetooth: hci0: command tx timeout [ 111.229063][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.250979][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.338515][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.363224][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.382235][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.452542][ T5834] Bluetooth: hci1: command tx timeout [ 111.458115][ T5846] Bluetooth: hci2: command tx timeout [ 111.530390][ T5834] Bluetooth: hci4: command tx timeout [ 111.537196][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.539956][ T5846] Bluetooth: hci3: command tx timeout [ 111.567005][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.589755][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.625626][ T5968] Zero length message leads to an empty skb [ 111.680648][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.754485][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.789302][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.825501][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.879914][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.900921][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.043781][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.072013][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.340523][ T5982] netlink: 'syz.2.10': attribute type 11 has an invalid length. [ 112.476175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.516863][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.628581][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 112.985007][ T5998] lo speed is unknown, defaulting to 1000 [ 113.041238][ T5998] lo speed is unknown, defaulting to 1000 [ 113.116181][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 113.127422][ T5998] lo speed is unknown, defaulting to 1000 [ 113.233849][ T5998] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.348128][ T5998] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.504062][ T5998] lo speed is unknown, defaulting to 1000 [ 113.572313][ T6011] sctp: [Deprecated]: syz.1.14 (pid 6011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.572313][ T6011] Use struct sctp_sack_info instead [ 113.708231][ T6015] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14'. [ 113.779570][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.788105][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.128899][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.187625][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.382287][ T5998] lo speed is unknown, defaulting to 1000 [ 114.388454][ T6017] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17'. [ 114.403407][ T6019] netlink: 'syz.0.18': attribute type 12 has an invalid length. [ 114.462890][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.491265][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.538224][ T5998] lo speed is unknown, defaulting to 1000 [ 114.547670][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.592322][ T4352] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.633896][ T5998] lo speed is unknown, defaulting to 1000 [ 114.670154][ T5998] lo speed is unknown, defaulting to 1000 [ 114.824556][ T6022] lo speed is unknown, defaulting to 1000 [ 115.609107][ T6043] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 115.633618][ T6043] macsec1: entered promiscuous mode [ 115.688425][ T6043] macsec1: entered allmulticast mode [ 115.723521][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 115.767542][ T6043] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 115.789255][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 115.824747][ T6051] tipc: Started in network mode [ 115.830355][ T6051] tipc: Node identity , cluster identity 4711 [ 115.838840][ T6051] tipc: Failed to set node id, please configure manually [ 115.855089][ T6051] tipc: Enabling of bearer rejected, failed to enable media [ 116.268781][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 116.362836][ T6071] netlink: 'syz.4.29': attribute type 4 has an invalid length. [ 116.420063][ T6071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.29'. [ 116.438093][ T6085] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 116.749003][ T6099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.38'. [ 116.848428][ T6094] lo speed is unknown, defaulting to 1000 [ 116.948885][ T6105] syz.4.40 uses obsolete (PF_INET,SOCK_PACKET) [ 116.990560][ T6107] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.998738][ T6105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.394585][ T6117] lo speed is unknown, defaulting to 1000 [ 117.413071][ T6123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.456189][ T5846] Bluetooth: hci4: command tx timeout [ 117.603907][ T6123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.017499][ T6147] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 118.028791][ T6139] syz_tun: entered allmulticast mode [ 118.062556][ T6147] netlink: 'syz.4.49': attribute type 2 has an invalid length. [ 118.209794][ T6151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 118.400676][ T6159] netlink: 504 bytes leftover after parsing attributes in process `syz.0.52'. [ 118.491633][ T6161] batman_adv: batadv0: Adding interface: ip6gretap1 [ 118.563397][ T6161] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.620928][ T6161] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 119.040937][ T6182] lo speed is unknown, defaulting to 1000 [ 119.219503][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.478747][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 119.547951][ T6210] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 119.563351][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 119.760841][ T6214] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 119.837831][ T6220] netlink: 788 bytes leftover after parsing attributes in process `syz.0.64'. [ 120.431670][ T6243] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 120.439403][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.73'. [ 120.525734][ T6246] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.686176][ T6243] team0: Port device geneve0 added [ 120.725574][ T6239] lo speed is unknown, defaulting to 1000 [ 121.136017][ T5955] IPVS: starting estimator thread 0... [ 121.260162][ T6266] IPVS: using max 31 ests per chain, 74400 per kthread [ 121.655986][ T6271] lo speed is unknown, defaulting to 1000 [ 121.995446][ T6239] lo speed is unknown, defaulting to 1000 [ 122.022865][ T6239] lo speed is unknown, defaulting to 1000 [ 122.038117][ T6239] lo speed is unknown, defaulting to 1000 [ 122.068547][ T6239] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 122.235735][ T6239] lo speed is unknown, defaulting to 1000 [ 122.303612][ T6239] lo speed is unknown, defaulting to 1000 [ 122.337594][ T6239] lo speed is unknown, defaulting to 1000 [ 122.498657][ T6239] lo speed is unknown, defaulting to 1000 [ 122.524439][ T6239] lo speed is unknown, defaulting to 1000 [ 122.549479][ T6239] lo speed is unknown, defaulting to 1000 [ 122.578769][ T6239] lo speed is unknown, defaulting to 1000 [ 122.761171][ T6304] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 123.086729][ T6313] x_tables: duplicate entry at hook 1 [ 123.137387][ T6315] __nla_validate_parse: 2 callbacks suppressed [ 123.137424][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 123.240757][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 123.299064][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 123.468455][ T6316] bridge1: entered promiscuous mode [ 123.484173][ T6316] bridge1: entered allmulticast mode [ 124.595909][ T6361] netlink: 'syz.1.97': attribute type 11 has an invalid length. [ 124.620952][ T6361] netlink: 224 bytes leftover after parsing attributes in process `syz.1.97'. [ 124.671384][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 124.718531][ T6365] netlink: 460 bytes leftover after parsing attributes in process `syz.0.99'. [ 124.935966][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 124.961895][ T6373] dvmrp0: entered allmulticast mode [ 125.383598][ T6389] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 125.433653][ T6389] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 125.500441][ T6399] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 125.538231][ T6399] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 125.990317][ T5901] IPVS: starting estimator thread 0... [ 126.090273][ T6411] IPVS: using max 29 ests per chain, 69600 per kthread [ 127.278411][ T6434] lo speed is unknown, defaulting to 1000 [ 127.317384][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 127.385899][ T6434] lo speed is unknown, defaulting to 1000 [ 127.438917][ T6434] lo speed is unknown, defaulting to 1000 [ 127.497077][ T6434] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.531327][ T6434] lo speed is unknown, defaulting to 1000 [ 127.540599][ T6434] lo speed is unknown, defaulting to 1000 [ 127.549757][ T6434] lo speed is unknown, defaulting to 1000 [ 127.558340][ T6434] lo speed is unknown, defaulting to 1000 [ 127.575680][ T6434] lo speed is unknown, defaulting to 1000 [ 127.740238][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 127.860948][ T6443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.112'. [ 128.213577][ T6455] lo speed is unknown, defaulting to 1000 [ 128.482828][ T6459] lo speed is unknown, defaulting to 1000 [ 130.840915][ T6500] Cannot find add_set index 0 as target [ 131.476916][ T6507] __nla_validate_parse: 1 callbacks suppressed [ 131.477068][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 133.000441][ T6519] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 133.351467][ T6527] netlink: 84 bytes leftover after parsing attributes in process `syz.0.131'. [ 133.446964][ T6527] netem: invalid attributes len -16 [ 133.459121][ T6527] netem: change failed [ 133.839363][ T44] IPVS: starting estimator thread 0... [ 133.950225][ T6537] IPVS: using max 31 ests per chain, 74400 per kthread [ 135.554642][ T6562] netlink: 'syz.2.136': attribute type 303 has an invalid length. [ 135.841380][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 136.085691][ T30] audit: type=1800 audit(1750723945.832:2): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 136.157271][ T6558] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 136.256307][ T6558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 136.337250][ T6558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 136.490182][ T6578] nbd: must specify at least one socket [ 136.886640][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 137.897243][ T6593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.505069][ T6593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.115953][ T6593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.246733][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.471550][ T6593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.505633][ T6629] x_tables: duplicate underflow at hook 2 [ 139.830628][ T6632] sit0: entered promiscuous mode [ 139.975429][ T6632] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 139.991425][ T6632] netlink: 1 bytes leftover after parsing attributes in process `syz.4.154'. [ 140.376444][ T5988] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.397088][ T5988] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.586217][ T5988] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.846629][ T4352] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.328165][ T6653] sit0: left promiscuous mode [ 141.426862][ C1] Illegal XDP return value 16128 on prog (id 46) dev lo, expect packet loss! [ 141.874568][ T6653] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 143.326557][ T6696] netlink: 63 bytes leftover after parsing attributes in process `syz.0.165'. [ 143.858823][ T6715] xt_time: unknown flags 0x4 [ 144.297896][ T6723] sctp: [Deprecated]: syz.0.169 (pid 6723) Use of int in max_burst socket option deprecated. [ 144.297896][ T6723] Use struct sctp_assoc_value instead [ 144.358142][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.375756][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.430964][ T6729] x_tables: duplicate underflow at hook 2 [ 144.538398][ T6732] netlink: 144 bytes leftover after parsing attributes in process `syz.3.170'. [ 144.904320][ T6736] syz_tun: entered promiscuous mode [ 144.964544][ T6736] batadv_slave_0: entered promiscuous mode [ 145.523436][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 147.496357][ T6773] netlink: 76 bytes leftover after parsing attributes in process `syz.4.175'. [ 147.841699][ T6765] syz_tun: refused to change device tx_queue_len [ 147.848585][ T6765] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 148.412938][ T6774] lo speed is unknown, defaulting to 1000 [ 148.521162][ T6791] netlink: 'syz.2.181': attribute type 4 has an invalid length. [ 148.842872][ T5901] lo speed is unknown, defaulting to 1000 [ 148.849425][ T5901] syz2: Port: 1 Link DOWN [ 149.164223][ T6802] netlink: 'syz.0.182': attribute type 11 has an invalid length. [ 149.201006][ T6803] netlink: 'syz.0.182': attribute type 11 has an invalid length. [ 150.930865][ T6834] x_tables: duplicate underflow at hook 1 [ 151.821214][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 151.915463][ T6852] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 151.960377][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 152.002104][ T6845] syz.3.192: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 152.030610][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: syz.3.192 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 152.030709][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.030808][ T6845] Call Trace: [ 152.031071][ T6845] [ 152.031145][ T6845] dump_stack_lvl+0x189/0x250 [ 152.031368][ T6845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.031421][ T6845] ? __pfx__printk+0x10/0x10 [ 152.031446][ T6845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 152.031472][ T6845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 152.031498][ T6845] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 152.031525][ T6845] warn_alloc+0x214/0x310 [ 152.031552][ T6845] ? stack_depot_save_flags+0x429/0x900 [ 152.031698][ T6845] ? __pfx_warn_alloc+0x10/0x10 [ 152.031727][ T6845] ? kasan_save_track+0x4f/0x80 [ 152.031782][ T6845] ? xskq_create+0x56/0x170 [ 152.031903][ T6845] ? xsk_init_queue+0xb0/0x110 [ 152.031933][ T6845] ? xsk_setsockopt+0x43f/0x710 [ 152.031960][ T6845] ? do_sock_setsockopt+0x25a/0x3e0 [ 152.032107][ T6845] ? __x64_sys_setsockopt+0x18b/0x220 [ 152.032136][ T6845] ? do_syscall_64+0xfa/0x3b0 [ 152.032175][ T6845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.032214][ T6845] __vmalloc_node_range_noprof+0x125/0x12f0 [ 152.032307][ T6845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.032341][ T6845] ? __kasan_kmalloc+0x93/0xb0 [ 152.032368][ T6845] vmalloc_user_noprof+0xad/0xf0 [ 152.032393][ T6845] ? xskq_create+0xbf/0x170 [ 152.032416][ T6845] xskq_create+0xbf/0x170 [ 152.032440][ T6845] xsk_init_queue+0xb0/0x110 [ 152.032479][ T6845] xsk_setsockopt+0x43f/0x710 [ 152.032526][ T6845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.032566][ T6845] ? __lock_acquire+0xab9/0xd20 [ 152.032611][ T6845] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 152.032640][ T6845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.032673][ T6845] do_sock_setsockopt+0x25a/0x3e0 [ 152.032709][ T6845] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 152.032852][ T6845] ? __fget_files+0x2a/0x420 [ 152.032911][ T6845] __x64_sys_setsockopt+0x18b/0x220 [ 152.032957][ T6845] do_syscall_64+0xfa/0x3b0 [ 152.032983][ T6845] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.033006][ T6845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.033041][ T6845] ? clear_bhb_loop+0x60/0xb0 [ 152.033068][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.033091][ T6845] RIP: 0033:0x7fc12ff8e929 [ 152.033130][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.033222][ T6845] RSP: 002b:00007fc130d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.033263][ T6845] RAX: ffffffffffffffda RBX: 00007fc1301b5fa0 RCX: 00007fc12ff8e929 [ 152.033279][ T6845] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 152.033292][ T6845] RBP: 00007fc130010b39 R08: 0000000000000004 R09: 0000000000000000 [ 152.033307][ T6845] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.033321][ T6845] R13: 0000000000000000 R14: 00007fc1301b5fa0 R15: 00007ffec8b845f8 [ 152.033357][ T6845] [ 152.353882][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 152.356190][ T6845] Mem-Info: [ 152.366529][ T6852] bridge0: port 3(dummy0) entered blocking state [ 152.368137][ T6845] active_anon:7914 inactive_anon:0 isolated_anon:0 [ 152.368137][ T6845] active_file:1416 inactive_file:39837 isolated_file:0 [ 152.368137][ T6845] unevictable:768 dirty:180 writeback:0 [ 152.368137][ T6845] slab_reclaimable:10372 slab_unreclaimable:98236 [ 152.368137][ T6845] mapped:29436 shmem:3540 pagetables:1139 [ 152.368137][ T6845] sec_pagetables:0 bounce:0 [ 152.368137][ T6845] kernel_misc_reclaimable:0 [ 152.368137][ T6845] free:1329498 free_pcp:14754 free_cma:0 [ 152.422934][ T6845] Node 0 active_anon:31656kB inactive_anon:0kB active_file:5664kB inactive_file:159148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117744kB dirty:716kB writeback:0kB shmem:12624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11868kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.432084][ T6852] bridge0: port 3(dummy0) entered disabled state [ 152.463638][ T6845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.463840][ T6845] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.463908][ T6845] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 152.463965][ T6845] Node 0 DMA32 free:1396372kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31612kB inactive_anon:0kB active_file:5664kB inactive_file:157316kB unevictable:1536kB writepending:716kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:42340kB local_pcp:19644kB free_cma:0kB [ 152.464034][ T6845] lowmem_reserve[]: 0 0 1 1 1 [ 152.464260][ T6845] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 152.464322][ T6845] lowmem_reserve[]: 0 0 0 0 0 [ 152.464409][ T6845] Node 1 Normal free:3905744kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16708kB local_pcp:8292kB free_cma:0kB [ 152.464570][ T6845] lowmem_reserve[]: 0 0 0 0 0 [ 152.464636][ T6845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.677366][ T6845] Node 0 DMA32: 704*4kB (UM) 963*8kB (UME) 445*16kB (UME) 188*32kB (UME) 61*64kB (UME) 41*128kB (UE) 30*256kB (UME) 29*512kB (UM) 34*1024kB (UME) 16*2048kB (UM) 311*4096kB (UM) = 1396776kB [ 152.697754][ T6845] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 152.719370][ T6852] dummy0: entered allmulticast mode [ 152.730787][ T6845] Node 1 Normal: 190*4kB (UE) 31*8kB (UME) 34*16kB (UME) 96*32kB (UME) 31*64kB (UME) 6*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 950*4096kB (M) = 3905744kB [ 152.820540][ T6845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.862257][ T6845] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 152.910697][ T6845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.978616][ T6845] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.048313][ T6852] dummy0: entered promiscuous mode [ 153.100489][ T6845] 42966 total pagecache pages [ 153.105478][ T6845] 0 pages in swap cache [ 153.211560][ T6852] bridge0: port 3(dummy0) entered blocking state [ 153.214399][ T6845] Free swap = 124996kB [ 153.219080][ T6852] bridge0: port 3(dummy0) entered forwarding state [ 153.304446][ T6845] Total swap = 124996kB [ 153.309174][ T6845] 2097051 pages RAM [ 153.314305][ T6866] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 153.411972][ T6845] 0 pages HighMem/MovableOnly [ 153.447189][ T6845] 424693 pages reserved [ 153.487696][ T6867] netlink: 280 bytes leftover after parsing attributes in process `syz.1.197'. [ 153.495479][ T6845] 0 pages cma reserved [ 153.514387][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 153.999588][ T6874] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 154.019206][ T6874] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 154.058970][ T6852] tipc: Started in network mode [ 154.065412][ T6852] tipc: Node identity ff000300e0000001, cluster identity 4711 [ 154.093550][ T6852] tipc: Enabling of bearer rejected, failed to enable media [ 154.260697][ T6851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 154.278658][ T6857] lo speed is unknown, defaulting to 1000 [ 154.894399][ T6905] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 155.453416][ T6897] netem: incorrect gi model size [ 155.471258][ T6897] netem: change failed [ 155.556226][ T6906] warning: `syz.3.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.892451][ T6894] lo speed is unknown, defaulting to 1000 [ 155.923317][ T6899] lo speed is unknown, defaulting to 1000 [ 156.304142][ T6920] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 157.085206][ T5901] IPVS: starting estimator thread 0... [ 157.210230][ T6937] IPVS: using max 34 ests per chain, 81600 per kthread [ 159.129158][ T6968] netlink: 108 bytes leftover after parsing attributes in process `syz.0.216'. [ 159.508740][ T6971] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 159.541700][ T6971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 159.678645][ T6971] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 159.758759][ T6971] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.862295][ T6976] netlink: 27 bytes leftover after parsing attributes in process `syz.0.220'. [ 159.926954][ T6971] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 161.460510][ T6992] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 161.541142][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.224'. [ 161.628524][ T6992] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 161.892599][ T6995] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 161.948443][ T6995] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 162.065709][ T6988] lo speed is unknown, defaulting to 1000 [ 162.972120][ T7007] netlink: 128 bytes leftover after parsing attributes in process `syz.1.230'. [ 163.529896][ T7014] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 163.538142][ T7014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.232'. [ 163.550496][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 163.655020][ T7014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.232'. [ 163.677534][ T7010] bond2: entered promiscuous mode [ 163.691102][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 163.705465][ T7010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.079067][ T7070] netlink: 256 bytes leftover after parsing attributes in process `syz.4.241'. [ 166.111850][ T7071] netlink: 160 bytes leftover after parsing attributes in process `syz.1.245'. [ 166.343369][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 167.410506][ T7095] netlink: 'syz.2.250': attribute type 83 has an invalid length. [ 167.737183][ T7099] GUP no longer grows the stack in syz.0.251 (7099): 200000006000-20000000a000 (200000005000) [ 167.830284][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.0.251 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 167.830455][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.830494][ T7099] Call Trace: [ 167.830561][ T7099] [ 167.830621][ T7099] dump_stack_lvl+0x189/0x250 [ 167.830804][ T7099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.830852][ T7099] ? __pfx__printk+0x10/0x10 [ 167.830873][ T7099] ? find_vma+0xe7/0x160 [ 167.830908][ T7099] __get_user_pages+0x2a60/0x30b0 [ 167.830997][ T7099] ? __pfx___get_user_pages+0x10/0x10 [ 167.831030][ T7099] ? __gup_longterm_locked+0xbf7/0x15b0 [ 167.831062][ T7099] ? down_read_killable+0x1d1/0x350 [ 167.831173][ T7099] ? try_get_folio+0x633/0x660 [ 167.831198][ T7099] __gup_longterm_locked+0xd66/0x15b0 [ 167.831239][ T7099] ? try_grab_folio_fast+0x1be/0x4f0 [ 167.831270][ T7099] ? gup_fast_fallback+0x1afc/0x2260 [ 167.831324][ T7099] gup_fast_fallback+0x1cd4/0x2260 [ 167.831410][ T7099] ? __pfx_gup_fast_fallback+0x10/0x10 [ 167.831450][ T7099] ? trace_contention_end+0x39/0x120 [ 167.831473][ T7099] ? __mutex_lock+0x330/0xe80 [ 167.831524][ T7099] ? is_valid_gup_args+0x11f/0x200 [ 167.831588][ T7099] ? get_user_pages_fast+0x4d/0xb0 [ 167.831621][ T7099] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 167.831757][ T7099] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 167.831783][ T7099] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 167.831814][ T7099] ? wait_for_space+0x24d/0x2d0 [ 167.831837][ T7099] iov_iter_get_pages2+0x5e/0xa0 [ 167.831860][ T7099] __se_sys_vmsplice+0x548/0x10d0 [ 167.831900][ T7099] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 167.831939][ T7099] ? __lock_acquire+0xab9/0xd20 [ 167.831991][ T7099] ? __pfx_futex_wake+0x10/0x10 [ 167.832059][ T7099] ? __lock_acquire+0xab9/0xd20 [ 167.832127][ T7099] ? rcu_is_watching+0x15/0xb0 [ 167.832166][ T7099] ? do_syscall_64+0xbe/0x3b0 [ 167.832266][ T7099] do_syscall_64+0xfa/0x3b0 [ 167.832311][ T7099] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.832428][ T7099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.832454][ T7099] ? clear_bhb_loop+0x60/0xb0 [ 167.832497][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.832521][ T7099] RIP: 0033:0x7fd9ae78e929 [ 167.832571][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.832651][ T7099] RSP: 002b:00007fd9af535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 167.832730][ T7099] RAX: ffffffffffffffda RBX: 00007fd9ae9b5fa0 RCX: 00007fd9ae78e929 [ 167.832756][ T7099] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 167.832836][ T7099] RBP: 00007fd9ae810b39 R08: 0000000000000000 R09: 0000000000000000 [ 167.832858][ T7099] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 167.832876][ T7099] R13: 0000000000000000 R14: 00007fd9ae9b5fa0 R15: 00007ffd6de9f908 [ 167.832931][ T7099] [ 168.962541][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068ddc000: rx timeout, send abort [ 169.440541][ T7112] lo speed is unknown, defaulting to 1000 [ 169.474045][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068ddc000: abort rx timeout. Force session deactivation [ 173.817243][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 173.941612][ T7181] xt_hashlimit: size too large, truncated to 1048576 [ 174.065142][ T7181] syz.0.268: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.120513][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: syz.0.268 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 174.120821][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.120883][ T7181] Call Trace: [ 174.120985][ T7181] [ 174.121111][ T7181] dump_stack_lvl+0x189/0x250 [ 174.121308][ T7181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.121357][ T7181] ? __pfx__printk+0x10/0x10 [ 174.121378][ T7181] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.121402][ T7181] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.121426][ T7181] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.121449][ T7181] warn_alloc+0x214/0x310 [ 174.121483][ T7181] ? __pfx_warn_alloc+0x10/0x10 [ 174.121514][ T7181] ? __get_vm_area_node+0x28f/0x300 [ 174.121535][ T7181] ? htable_create+0xfc/0x7a0 [ 174.121666][ T7181] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 174.121720][ T7181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.121748][ T7181] ? rcu_is_watching+0x15/0xb0 [ 174.121781][ T7181] ? htable_create+0xfc/0x7a0 [ 174.121797][ T7181] ? htable_create+0xfc/0x7a0 [ 174.121810][ T7181] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 174.121833][ T7181] ? htable_create+0xfc/0x7a0 [ 174.121935][ T7181] ? hashlimit_pernet+0x23/0x240 [ 174.121964][ T7181] htable_create+0xfc/0x7a0 [ 174.122005][ T7181] hashlimit_mt_check_common+0x719/0xa10 [ 174.122033][ T7181] xt_check_match+0x3ce/0xab0 [ 174.122119][ T7181] ? __pfx___mutex_lock+0x10/0x10 [ 174.122219][ T7181] ? __pfx_xt_check_match+0x10/0x10 [ 174.122248][ T7181] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 174.122380][ T7181] ? xt_find_match+0x1f7/0x250 [ 174.122415][ T7181] translate_table+0x1553/0x2040 [ 174.122665][ T7181] ? __pfx_translate_table+0x10/0x10 [ 174.122696][ T7181] ? __might_fault+0xb0/0x130 [ 174.122736][ T7181] ? _copy_from_user+0x94/0xb0 [ 174.122823][ T7181] do_ip6t_set_ctl+0x970/0xce0 [ 174.122996][ T7181] ? rcu_is_watching+0x15/0xb0 [ 174.123027][ T7181] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 174.123074][ T7181] ? __pfx___mutex_lock+0x10/0x10 [ 174.123096][ T7181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.123125][ T7181] ? __pfx_futex_wait+0x10/0x10 [ 174.123184][ T7181] nf_setsockopt+0x26c/0x290 [ 174.123272][ T7181] rawv6_setsockopt+0x23b/0x5b0 [ 174.123337][ T7181] ? __lock_acquire+0xab9/0xd20 [ 174.123410][ T7181] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 174.123429][ T7181] ? aa_sock_opt_perm+0x74/0x110 [ 174.123516][ T7181] ? sock_common_setsockopt+0x36/0xc0 [ 174.123588][ T7181] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 174.123626][ T7181] do_sock_setsockopt+0x25a/0x3e0 [ 174.123742][ T7181] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 174.123818][ T7181] ? __fget_files+0x2a/0x420 [ 174.123850][ T7181] __x64_sys_setsockopt+0x18b/0x220 [ 174.123884][ T7181] do_syscall_64+0xfa/0x3b0 [ 174.123931][ T7181] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.123950][ T7181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.123970][ T7181] ? clear_bhb_loop+0x60/0xb0 [ 174.124015][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.124055][ T7181] RIP: 0033:0x7fd9ae78e929 [ 174.124244][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.124284][ T7181] RSP: 002b:00007fd9af514038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.124335][ T7181] RAX: ffffffffffffffda RBX: 00007fd9ae9b6080 RCX: 00007fd9ae78e929 [ 174.124361][ T7181] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c [ 174.124376][ T7181] RBP: 00007fd9ae810b39 R08: 0000000000000588 R09: 0000000000000000 [ 174.124398][ T7181] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 174.124416][ T7181] R13: 0000000000000000 R14: 00007fd9ae9b6080 R15: 00007ffd6de9f908 [ 174.124445][ T7181] [ 174.124453][ T7181] Mem-Info: [ 174.610292][ T7181] active_anon:4912 inactive_anon:0 isolated_anon:0 [ 174.610292][ T7181] active_file:1432 inactive_file:39850 isolated_file:0 [ 174.610292][ T7181] unevictable:768 dirty:131 writeback:0 [ 174.610292][ T7181] slab_reclaimable:10357 slab_unreclaimable:99166 [ 174.610292][ T7181] mapped:31314 shmem:1368 pagetables:1018 [ 174.610292][ T7181] sec_pagetables:0 bounce:0 [ 174.610292][ T7181] kernel_misc_reclaimable:0 [ 174.610292][ T7181] free:1332073 free_pcp:13717 free_cma:0 [ 174.691681][ T7181] Node 0 active_anon:19648kB inactive_anon:0kB active_file:5728kB inactive_file:159200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125256kB dirty:524kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11532kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.840539][ T7181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.938346][ T7181] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.027497][ T7181] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 175.061103][ T7181] Node 0 DMA32 free:1406432kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19604kB inactive_anon:0kB active_file:5728kB inactive_file:157368kB unevictable:1536kB writepending:524kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:38324kB local_pcp:16920kB free_cma:0kB [ 175.130095][ T7181] lowmem_reserve[]: 0 0 1 1 1 [ 175.140083][ T7181] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 175.240332][ T7187] netlink: 256 bytes leftover after parsing attributes in process `syz.2.270'. [ 175.260051][ T7181] lowmem_reserve[]: 0 0 0 0 0 [ 175.264929][ T7181] Node 1 Normal free:3906260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16192kB local_pcp:7776kB free_cma:0kB [ 175.332395][ T7181] lowmem_reserve[]: 0 0 0 0 0 [ 175.357215][ T7181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.487841][ T7181] Node 0 DMA32: 1018*4kB (UM) 1311*8kB (UME) 367*16kB (UME) 105*32kB (UME) 129*64kB (UME) 99*128kB (UME) 75*256kB (UME) 61*512kB (UM) 48*1024kB (UME) 14*2048kB (UM) 301*4096kB (UM) = 1405872kB [ 175.597253][ T7181] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 175.681303][ T7198] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 175.695144][ T7181] Node 1 Normal: 191*4kB (UE) 31*8kB (UME) 34*16kB (UME) 106*32kB (UME) 34*64kB (UME) 6*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 950*4096kB (M) = 3906260kB [ 175.775489][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 175.805031][ T7181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.851965][ T7181] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 175.887580][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 175.894145][ T7181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.912223][ T7181] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 175.924303][ T7181] 42647 total pagecache pages [ 175.929103][ T7181] 0 pages in swap cache [ 175.937745][ T7181] Free swap = 124996kB [ 175.956455][ T7181] Total swap = 124996kB [ 175.968676][ T7181] 2097051 pages RAM [ 175.988873][ T7181] 0 pages HighMem/MovableOnly [ 176.020463][ T7181] 424693 pages reserved [ 176.025007][ T7181] 0 pages cma reserved [ 176.074721][ T7198] bond1: entered promiscuous mode [ 176.084025][ T7198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.468542][ T7206] netlink: 248 bytes leftover after parsing attributes in process `syz.2.277'. [ 176.952990][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 177.941833][ T7235] lo speed is unknown, defaulting to 1000 [ 178.036705][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.103715][ T7236] _Z`Ԁ@: entered promiscuous mode [ 178.816084][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 178.980674][ T7250] vlan3: entered promiscuous mode [ 179.012549][ T7250] bond0: entered promiscuous mode [ 179.033105][ T7250] bond_slave_0: entered promiscuous mode [ 179.070896][ T7250] bond_slave_1: entered promiscuous mode [ 179.490107][ T7256] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.511017][ T7259] tipc: Enabling of bearer rejected, failed to enable media [ 179.670687][ T7266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.210850][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 180.302499][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.295'. [ 180.344849][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 180.368995][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 181.993885][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 182.455522][ T7318] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 182.506990][ T7329] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.617384][ T7320] vlan2: entered allmulticast mode [ 182.642882][ T7320] bond3: entered allmulticast mode [ 182.663534][ T7320] gretap1: entered allmulticast mode [ 182.947929][ T7337] netlink: 2 bytes leftover after parsing attributes in process `syz.1.310'. [ 182.966436][ T7337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.008987][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 183.534349][ T7341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.697698][ T7347] netlink: 76 bytes leftover after parsing attributes in process `syz.1.313'. [ 184.164273][ T7347] lo speed is unknown, defaulting to 1000 [ 185.987353][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 186.910448][ T7397] pim6reg: entered allmulticast mode [ 186.991158][ T7398] pim6reg: left allmulticast mode [ 187.865810][ T7410] netlink: 248 bytes leftover after parsing attributes in process `syz.4.327'. [ 189.000705][ T7420] lo speed is unknown, defaulting to 1000 [ 190.502034][ T7465] netlink: 'syz.0.338': attribute type 3 has an invalid length. [ 190.617107][ T7465] netlink: 68 bytes leftover after parsing attributes in process `syz.0.338'. [ 190.788444][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'. [ 191.181064][ T7459] lo speed is unknown, defaulting to 1000 [ 192.048437][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 192.804028][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 193.308440][ T7500] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.536494][ T7508] pim6reg: entered allmulticast mode [ 193.732272][ T7506] pim6reg: left allmulticast mode [ 194.437169][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 195.295238][ T5886] IPVS: starting estimator thread 0... [ 195.440304][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 195.452615][ T7544] IPVS: using max 29 ests per chain, 69600 per kthread [ 196.644541][ T7554] lo speed is unknown, defaulting to 1000 [ 198.588565][ T7607] netlink: 'syz.2.369': attribute type 12 has an invalid length. [ 199.266926][ T7627] xt_CT: No such helper "snmp" [ 199.973022][ T7647] netlink: 'syz.3.380': attribute type 13 has an invalid length. [ 200.784656][ T7675] x_tables: duplicate underflow at hook 3 [ 200.796996][ T7676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.386'. [ 201.124606][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.136204][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.379568][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.455688][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.039709][ T7667] netlink: 'syz.1.384': attribute type 12 has an invalid length. [ 202.174022][ T7670] ip6gre1: entered promiscuous mode [ 202.248119][ T3499] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.305189][ T3499] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.353468][ T3499] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.410435][ T3499] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.837971][ T7707] lo speed is unknown, defaulting to 1000 [ 203.469645][ T7744] netlink: 'syz.4.397': attribute type 83 has an invalid length. [ 203.505436][ T7747] netlink: 76 bytes leftover after parsing attributes in process `syz.0.398'. [ 203.912235][ T7752] netlink: 'syz.0.400': attribute type 12 has an invalid length. [ 203.971638][ T30] audit: type=1800 audit(1750724013.722:3): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="memory.events" dev="tmpfs" ino=347 res=0 errno=0 [ 204.017027][ T30] audit: type=1804 audit(1750724013.772:4): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.401" name="memory.events" dev="tmpfs" ino=347 res=1 errno=0 [ 204.054264][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 204.063505][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 204.377594][ T7761] x_tables: duplicate underflow at hook 1 [ 204.498435][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 204.921122][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 205.013729][ T7765] lo speed is unknown, defaulting to 1000 [ 205.047379][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 205.792898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.799967][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.541104][ T7805] lo speed is unknown, defaulting to 1000 [ 206.725088][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 206.910995][ T7820] netlink: 'syz.3.416': attribute type 303 has an invalid length. [ 206.926184][ T7811] lo speed is unknown, defaulting to 1000 [ 206.996764][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 207.112383][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 207.320320][ T30] audit: type=1800 audit(1750724017.072:5): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 207.357212][ T7828] netlink: 'syz.1.418': attribute type 12 has an invalid length. [ 207.361470][ T7818] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 207.464200][ T7818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 207.505546][ T7818] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 207.538342][ T7812] siw: device registration error -23 [ 207.712551][ T7818] syz.3.416 (7818) used greatest stack depth: 18136 bytes left [ 207.853224][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 208.342303][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 208.398223][ T7847] trusted_key: syz.3.425 sent an empty control message without MSG_MORE. [ 208.859379][ T7851] lo speed is unknown, defaulting to 1000 [ 209.002142][ T7867] Cannot find add_set index 4 as target [ 209.507132][ T7872] netlink: 'syz.3.431': attribute type 12 has an invalid length. [ 209.680999][ T7881] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.432'. [ 210.831070][ T7910] netlink: 'syz.3.440': attribute type 9 has an invalid length. [ 210.893809][ T7910] netlink: 'syz.3.440': attribute type 7 has an invalid length. [ 210.952375][ T7910] netlink: 'syz.3.440': attribute type 8 has an invalid length. [ 211.788437][ T7900] lo speed is unknown, defaulting to 1000 [ 212.475222][ T7928] lo speed is unknown, defaulting to 1000 [ 213.020097][ T7960] netlink: 'syz.0.450': attribute type 12 has an invalid length. [ 213.213897][ T7957] lo speed is unknown, defaulting to 1000 [ 213.533202][ T7963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.451'. [ 214.086549][ T7973] xt_hashlimit: max too large, truncated to 1048576 [ 214.654267][ T7991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.459'. [ 215.561668][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 215.671529][ T8017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.463'. [ 215.738517][ T8020] netlink: 'syz.0.465': attribute type 2 has an invalid length. [ 215.762028][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 215.934999][ T8023] netlink: 'syz.2.466': attribute type 12 has an invalid length. [ 216.296574][ T8033] veth0_macvtap: left promiscuous mode [ 216.317369][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 216.386058][ T8030] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 216.586620][ T8039] lo speed is unknown, defaulting to 1000 [ 216.987861][ T8042] lo speed is unknown, defaulting to 1000 [ 217.615086][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.644017][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 217.947702][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.477'. [ 217.957637][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 218.616072][ T8083] netlink: 'syz.3.481': attribute type 12 has an invalid length. [ 218.829640][ T8097] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 219.069650][ T8101] x_tables: duplicate entry at hook 3 [ 219.603189][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 220.004026][ T8108] lo speed is unknown, defaulting to 1000 [ 220.860708][ T8132] lo speed is unknown, defaulting to 1000 [ 220.940211][ T8144] netlink: 'syz.2.500': attribute type 12 has an invalid length. [ 221.300184][ T8151] xt_policy: too many policy elements [ 221.313137][ T8151] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 221.342196][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.501'. [ 221.526860][ T8139] lo speed is unknown, defaulting to 1000 [ 221.703728][ T8151] team0: Port device geneve0 added [ 221.812887][ T8159] Bluetooth: MGMT ver 1.23 [ 222.092333][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 222.100671][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 222.148055][ T8167] netlink: 356 bytes leftover after parsing attributes in process `syz.3.505'. [ 222.628541][ T8166] gre0: Master is either lo or non-ether device [ 222.726386][ T8167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'. [ 223.367208][ T8191] netlink: 'syz.0.511': attribute type 12 has an invalid length. [ 224.356855][ T8209] netlink: 'syz.4.517': attribute type 3 has an invalid length. [ 224.406599][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 224.454657][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 225.534918][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.523'. [ 225.875539][ T8213] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 226.030653][ T8213] team0: Port device geneve1 added [ 226.157156][ T8242] lo speed is unknown, defaulting to 1000 [ 226.363266][ T8248] lo speed is unknown, defaulting to 1000 [ 226.426778][ T8260] netlink: 'syz.3.528': attribute type 12 has an invalid length. [ 226.816499][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 227.071429][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 227.192474][ T8279] IPv6: addrconf: prefix option has invalid lifetime [ 227.634291][ T8269] lo speed is unknown, defaulting to 1000 [ 228.336220][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 228.338313][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 228.345152][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 229.801632][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 229.883171][ T8319] lo speed is unknown, defaulting to 1000 [ 230.049209][ T8328] netlink: 'syz.4.544': attribute type 12 has an invalid length. [ 231.139249][ T8355] netlink: 'syz.4.551': attribute type 10 has an invalid length. [ 231.265831][ T8360] netlink: 72 bytes leftover after parsing attributes in process `syz.0.550'. [ 231.518543][ T8355] dummy0: entered promiscuous mode [ 231.603269][ T8355] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.409590][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 232.526873][ T8374] lo speed is unknown, defaulting to 1000 [ 232.821365][ T8388] netlink: 76 bytes leftover after parsing attributes in process `syz.2.557'. [ 233.158437][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 233.198888][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 233.284219][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 233.394941][ T8387] lo speed is unknown, defaulting to 1000 [ 233.837302][ T8397] lo speed is unknown, defaulting to 1000 [ 234.002148][ T8413] openvswitch: netlink: Message has 8 unknown bytes. [ 234.054571][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 234.091855][ T8412] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 235.272797][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 235.297659][ T8434] lo speed is unknown, defaulting to 1000 [ 236.191583][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 236.247535][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.576'. [ 236.419424][ T8468] vlan2: entered allmulticast mode [ 236.523929][ T8468] macvlan1: entered allmulticast mode [ 237.571916][ T8486] lo speed is unknown, defaulting to 1000 [ 237.812336][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 239.667986][ T8532] x_tables: duplicate underflow at hook 2 [ 239.751197][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.593'. [ 239.807443][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.593'. [ 239.922642][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 240.837328][ T8563] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 240.871402][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 240.903837][ T8566] netlink: 'syz.3.601': attribute type 12 has an invalid length. [ 242.486945][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.606'. [ 242.507164][ T8599] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.584917][ T8599] openvswitch: netlink: Message has 8 unknown bytes. [ 242.684411][ T8580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.718469][ T8580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.733587][ T8580] bond0 (unregistering): Released all slaves [ 242.924038][ T8598] lo speed is unknown, defaulting to 1000 [ 243.697284][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 243.726205][ T8618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.607'. [ 244.454033][ T8627] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.613'. [ 244.965116][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.520477][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 245.596724][ T8661] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 245.688675][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 245.896974][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'. [ 246.615024][ T8669] lo speed is unknown, defaulting to 1000 [ 246.841535][ T8686] lo speed is unknown, defaulting to 1000 [ 247.177254][ T8710] Bluetooth: MGMT ver 1.23 [ 247.370760][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 247.735475][ T8715] netlink: 38 bytes leftover after parsing attributes in process `syz.0.634'. [ 247.808425][ T8714] lo speed is unknown, defaulting to 1000 [ 247.840456][ T8716] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.634'. [ 249.462625][ T8747] af_packet: tpacket_rcv: packet too big, clamped from 3970 to 3710. macoff=82 [ 249.482566][ T8758] __nla_validate_parse: 3 callbacks suppressed [ 249.482656][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 249.542931][ T8745] lo speed is unknown, defaulting to 1000 [ 249.728373][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 250.251085][ T8773] No such timeout policy "syz1" [ 250.516979][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 250.761461][ T8777] lo speed is unknown, defaulting to 1000 [ 252.583561][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'. [ 252.812183][ T8825] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 252.838123][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.661'. [ 252.848449][ T8825] netlink: 120 bytes leftover after parsing attributes in process `syz.0.660'. [ 252.953491][ T8827] No such timeout policy "syz0" [ 252.979441][ T8829] tipc: Started in network mode [ 253.013038][ T8829] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 253.024037][ T8832] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 253.058351][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 253.386965][ T8836] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 253.444167][ T8840] netlink: 276 bytes leftover after parsing attributes in process `syz.2.665'. [ 253.478274][ T8837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.503013][ T7652] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 253.709295][ T5991] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 254.088589][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 254.365376][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 254.764452][ T8878] netlink: 56 bytes leftover after parsing attributes in process `syz.1.675'. [ 254.778482][ T8871] lo speed is unknown, defaulting to 1000 [ 255.825277][ T8903] x_tables: unsorted entry at hook 2 [ 255.892206][ T5841] Bluetooth: hci4: link tx timeout [ 255.899154][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 256.254740][ T8910] sctp: [Deprecated]: syz.4.682 (pid 8910) Use of int in max_burst socket option. [ 256.254740][ T8910] Use struct sctp_assoc_value instead [ 256.282872][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.682'. [ 256.701619][ T8917] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 256.722549][ T8914] lo speed is unknown, defaulting to 1000 [ 256.761905][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 256.885302][ T8920] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 257.130583][ T8925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'. [ 257.189906][ T8917] xt_TCPMSS: Only works on TCP SYN packets [ 257.302686][ T8919] vlan2: entered promiscuous mode [ 257.308104][ T8919] bridge0: entered promiscuous mode [ 257.372971][ T8919] vlan2: entered allmulticast mode [ 257.378342][ T8919] bridge0: entered allmulticast mode [ 257.526208][ T8936] netlink: 64 bytes leftover after parsing attributes in process `syz.2.689'. [ 257.539103][ T8936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.689'. [ 257.559244][ T8934] tap0: tun_chr_ioctl cmd 1074025677 [ 257.563147][ T8936] netlink: 248 bytes leftover after parsing attributes in process `syz.2.689'. [ 257.575524][ T8934] tap0: linktype set to 780 [ 257.803721][ T8943] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.691'. [ 257.934831][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 257.971001][ T8945] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 258.007229][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 258.316021][ T8959] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.695'. [ 258.913040][ T8962] lo speed is unknown, defaulting to 1000 [ 258.944654][ T8970] bridge_slave_0: left allmulticast mode [ 258.961106][ T8970] bridge_slave_0: left promiscuous mode [ 258.967648][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.041227][ T8970] bridge_slave_1: left allmulticast mode [ 259.048077][ T8970] bridge_slave_1: left promiscuous mode [ 259.055764][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.105047][ T8970] team0: Port device team_slave_0 removed [ 259.134464][ T8970] team0: Port device team_slave_1 removed [ 259.145257][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.184704][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.221682][ T8970] batman_adv: batadv0: Removing interface: ip6gretap1 [ 259.978560][ T9001] __nla_validate_parse: 2 callbacks suppressed [ 259.978699][ T9001] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.707'. [ 260.060781][ T8998] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.707'. [ 260.144889][ T9010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.208279][ T9007] lo speed is unknown, defaulting to 1000 [ 260.819459][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 260.881870][ T9030] netlink: 72 bytes leftover after parsing attributes in process `syz.2.715'. [ 260.901838][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 260.950394][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.715'. [ 261.495910][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 261.740277][ T9048] bridge_slave_1: left allmulticast mode [ 261.749606][ T9048] bridge_slave_1: left promiscuous mode [ 261.777798][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.825709][ T9048] bridge_slave_0: left allmulticast mode [ 261.835335][ T9048] bridge_slave_0: left promiscuous mode [ 261.844351][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.164692][ T9053] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.720'. [ 262.203567][ T9051] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.720'. [ 262.275562][ T9058] lo speed is unknown, defaulting to 1000 [ 263.034937][ T9078] lo speed is unknown, defaulting to 1000 [ 263.272519][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 263.995399][ T9102] netlink: 'syz.2.733': attribute type 2 has an invalid length. [ 264.004721][ T9101] netlink: 'syz.2.733': attribute type 2 has an invalid length. [ 264.437727][ T9106] lo speed is unknown, defaulting to 1000 [ 264.647120][ T9113] lo speed is unknown, defaulting to 1000 [ 264.890663][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 265.173625][ T9127] Cannot find add_set index 0 as target [ 265.607077][ T9144] netlink: 'syz.2.744': attribute type 21 has an invalid length. [ 265.692744][ T9144] netlink: 'syz.2.744': attribute type 6 has an invalid length. [ 265.731453][ T9144] __nla_validate_parse: 5 callbacks suppressed [ 265.731517][ T9144] netlink: 156 bytes leftover after parsing attributes in process `syz.2.744'. [ 265.762198][ T9147] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.778094][ T9147] block nbd0: shutting down sockets [ 265.820067][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 265.842946][ T9153] netlink: 56 bytes leftover after parsing attributes in process `syz.4.747'. [ 265.888679][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 266.008555][ T9152] Set syz1 is full, maxelem 0 reached [ 266.945057][ T9185] netlink: 38 bytes leftover after parsing attributes in process `syz.3.751'. [ 266.986728][ T9181] lo speed is unknown, defaulting to 1000 [ 267.218492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.225485][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.463393][ T9189] lo speed is unknown, defaulting to 1000 [ 267.759606][ T9204] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 267.958638][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.759'. [ 268.161250][ T9220] FAULT_INJECTION: forcing a failure. [ 268.161250][ T9220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 268.177777][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.1.764 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 268.177849][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.177904][ T9220] Call Trace: [ 268.177965][ T9220] [ 268.178056][ T9220] dump_stack_lvl+0x189/0x250 [ 268.178238][ T9220] ? __pfx____ratelimit+0x10/0x10 [ 268.178342][ T9220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.178373][ T9220] ? __pfx__printk+0x10/0x10 [ 268.178409][ T9220] should_fail_ex+0x414/0x560 [ 268.178572][ T9220] _copy_to_user+0x31/0xb0 [ 268.178640][ T9220] simple_read_from_buffer+0xe1/0x170 [ 268.178669][ T9220] proc_fail_nth_read+0x1df/0x250 [ 268.178699][ T9220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.178727][ T9220] ? rw_verify_area+0x258/0x650 [ 268.178759][ T9220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.178782][ T9220] vfs_read+0x1fd/0x980 [ 268.178874][ T9220] ? __pfx___mutex_lock+0x10/0x10 [ 268.179035][ T9220] ? __pfx_vfs_read+0x10/0x10 [ 268.179089][ T9220] ? __fget_files+0x2a/0x420 [ 268.179117][ T9220] ? __fget_files+0x3a0/0x420 [ 268.179137][ T9220] ? __fget_files+0x2a/0x420 [ 268.179168][ T9220] ksys_read+0x145/0x250 [ 268.179197][ T9220] ? __pfx_ksys_read+0x10/0x10 [ 268.179224][ T9220] ? rcu_is_watching+0x15/0xb0 [ 268.179260][ T9220] ? do_syscall_64+0xbe/0x3b0 [ 268.179287][ T9220] do_syscall_64+0xfa/0x3b0 [ 268.179307][ T9220] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.179328][ T9220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.179349][ T9220] ? clear_bhb_loop+0x60/0xb0 [ 268.179373][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.179393][ T9220] RIP: 0033:0x7fddc7f8d33c [ 268.179413][ T9220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.179447][ T9220] RSP: 002b:00007fddc8ea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.179481][ T9220] RAX: ffffffffffffffda RBX: 00007fddc81b5fa0 RCX: 00007fddc7f8d33c [ 268.179504][ T9220] RDX: 000000000000000f RSI: 00007fddc8ea70a0 RDI: 0000000000000003 [ 268.179537][ T9220] RBP: 00007fddc8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.179549][ T9220] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 268.179560][ T9220] R13: 0000000000000000 R14: 00007fddc81b5fa0 R15: 00007ffd84d79f28 [ 268.179592][ T9220] [ 268.198790][ T9205] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 268.218327][ T9222] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 268.233954][ T37] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 268.261374][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 268.276580][ T9210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.504354][ T9216] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.758'. [ 268.599519][ T9213] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.758'. [ 268.647866][ T4352] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 269.018040][ T9247] netlink: 128 bytes leftover after parsing attributes in process `syz.3.767'. [ 269.862884][ T9262] lo speed is unknown, defaulting to 1000 [ 270.500080][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 271.518224][ T9311] __nla_validate_parse: 4 callbacks suppressed [ 271.518392][ T9311] netlink: 424 bytes leftover after parsing attributes in process `syz.4.785'. [ 271.643492][ T9309] bridge0: entered allmulticast mode [ 271.683568][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'. [ 272.221629][ T9328] netlink: 'syz.2.790': attribute type 16 has an invalid length. [ 272.230185][ T9328] netlink: 'syz.2.790': attribute type 17 has an invalid length. [ 272.364136][ T9328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.429091][ T7701] lo speed is unknown, defaulting to 1000 [ 272.436502][ T7701] syz2: Port: 1 Link ACTIVE [ 272.482015][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.792'. [ 272.596258][ T9325] lo speed is unknown, defaulting to 1000 [ 272.715532][ T9337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.793'. [ 272.909715][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 273.391854][ T9348] !: renamed from dummy0 (while UP) [ 273.612790][ T9365] netlink: 124 bytes leftover after parsing attributes in process `syz.4.801'. [ 273.819372][ T9369] netlink: 1 bytes leftover after parsing attributes in process `syz.3.802'. [ 274.064130][ T9374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.804'. [ 274.205333][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 274.378496][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 274.564407][ T9386] bridge0: port 3(macvlan2) entered blocking state [ 274.631428][ T9386] bridge0: port 3(macvlan2) entered disabled state [ 274.654531][ T9386] macvlan2: entered allmulticast mode [ 274.685525][ T9386] bridge0: entered allmulticast mode [ 274.723847][ T9386] macvlan2: left allmulticast mode [ 274.740541][ T9386] bridge0: left allmulticast mode [ 275.181991][ T9392] lo speed is unknown, defaulting to 1000 [ 275.335670][ T9399] lo speed is unknown, defaulting to 1000 [ 276.330904][ T9432] vxlan0: entered promiscuous mode [ 276.336512][ T9432] vxlan0: entered allmulticast mode [ 276.351702][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.377158][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.415584][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.452195][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.540694][ T9437] __nla_validate_parse: 3 callbacks suppressed [ 276.540902][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.820'. [ 276.795344][ T9447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.991563][ T30] audit: type=1107 audit(1750724086.742:6): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ne' \ [ 276.991563][ T30] ) x&4(2*|c60M3ED}FtbGɣx[)_?l)PϘ~ rejected, failed to enable media [ 281.424111][ T9580] netlink: 'syz.4.858': attribute type 12 has an invalid length. [ 281.441482][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.859'. [ 281.487793][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 281.715984][ T9591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.864'. [ 281.847607][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 281.991190][ T9598] lo speed is unknown, defaulting to 1000 [ 282.072951][ T9604] x_tables: duplicate underflow at hook 2 [ 282.286333][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 283.211110][ T9643] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 283.386088][ T9648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.881'. [ 283.516562][ T9652] netdevsim netdevsim4: Direct firmware load for . [ 283.516562][ T9652] failed with error -2 [ 283.568638][ T9652] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 283.568638][ T9652] [ 283.589187][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.885'. [ 283.985460][ T9675] netlink: 72 bytes leftover after parsing attributes in process `syz.3.890'. [ 284.222759][ T9685] netlink: 64 bytes leftover after parsing attributes in process `syz.0.893'. [ 284.462293][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 284.477467][ T9694] FAULT_INJECTION: forcing a failure. [ 284.477467][ T9694] name failslab, interval 1, probability 0, space 0, times 1 [ 284.508016][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.3.896 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 284.508050][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.508093][ T9694] Call Trace: [ 284.508137][ T9694] [ 284.508160][ T9694] dump_stack_lvl+0x189/0x250 [ 284.508273][ T9694] ? __pfx____ratelimit+0x10/0x10 [ 284.508390][ T9694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.508422][ T9694] ? __pfx__printk+0x10/0x10 [ 284.508452][ T9694] ? __pfx___might_resched+0x10/0x10 [ 284.508492][ T9694] should_fail_ex+0x414/0x560 [ 284.508575][ T9694] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 284.508697][ T9694] should_failslab+0xa8/0x100 [ 284.508725][ T9694] __kvmalloc_node_noprof+0x161/0x5f0 [ 284.508749][ T9694] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 284.508781][ T9694] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 284.508823][ T9694] __nf_unregister_net_hook+0x4f6/0x700 [ 284.508865][ T9694] nf_unregister_net_hooks+0xcb/0x140 [ 284.508907][ T9694] nf_defrag_ipv4_disable+0x95/0xe0 [ 284.508989][ T9694] nf_ct_netns_put+0x2da/0x520 [ 284.509064][ T9694] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 284.509129][ T9694] nft_connlimit_destroy+0x5a/0xb0 [ 284.509153][ T9694] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 284.509200][ T9694] nft_expr_destroy+0x8c/0xd0 [ 284.509241][ T9694] nf_tables_newset+0x1553/0x2530 [ 284.509317][ T9694] ? __pfx_nf_tables_newset+0x10/0x10 [ 284.509371][ T9694] ? __nla_parse+0x40/0x60 [ 284.509425][ T9694] nfnetlink_rcv+0x112f/0x2520 [ 284.509484][ T9694] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 284.509517][ T9694] ? __lock_acquire+0xab9/0xd20 [ 284.509601][ T9694] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.509686][ T9694] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.509718][ T9694] netlink_unicast+0x75b/0x8d0 [ 284.509750][ T9694] netlink_sendmsg+0x805/0xb30 [ 284.509784][ T9694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.509812][ T9694] ? aa_sock_msg_perm+0x94/0x160 [ 284.509905][ T9694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.509932][ T9694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.509963][ T9694] __sock_sendmsg+0x219/0x270 [ 284.510026][ T9694] ____sys_sendmsg+0x505/0x830 [ 284.510133][ T9694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.510182][ T9694] ? import_iovec+0x74/0xa0 [ 284.510267][ T9694] ___sys_sendmsg+0x21f/0x2a0 [ 284.510299][ T9694] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.510377][ T9694] ? __fget_files+0x2a/0x420 [ 284.510400][ T9694] ? __fget_files+0x3a0/0x420 [ 284.510435][ T9694] __x64_sys_sendmsg+0x19b/0x260 [ 284.510470][ T9694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.510513][ T9694] ? __pfx_ksys_write+0x10/0x10 [ 284.510531][ T9694] ? rcu_is_watching+0x15/0xb0 [ 284.510570][ T9694] ? do_syscall_64+0xbe/0x3b0 [ 284.510596][ T9694] do_syscall_64+0xfa/0x3b0 [ 284.510615][ T9694] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.510633][ T9694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.510652][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 284.510675][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.510693][ T9694] RIP: 0033:0x7fc12ff8e929 [ 284.510713][ T9694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.510728][ T9694] RSP: 002b:00007fc130d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.510750][ T9694] RAX: ffffffffffffffda RBX: 00007fc1301b5fa0 RCX: 00007fc12ff8e929 [ 284.510763][ T9694] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 284.510775][ T9694] RBP: 00007fc130d96090 R08: 0000000000000000 R09: 0000000000000000 [ 284.510786][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.510797][ T9694] R13: 0000000000000000 R14: 00007fc1301b5fa0 R15: 00007ffec8b845f8 [ 284.510831][ T9694] [ 285.592365][ T9729] netlink: 'syz.3.905': attribute type 12 has an invalid length. [ 285.904017][ T9744] macsec1: entered promiscuous mode [ 285.909538][ T9744] macsec1: entered allmulticast mode [ 286.096093][ T9750] lo speed is unknown, defaulting to 1000 [ 286.405627][ T9765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.916'. [ 286.468367][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.917'. [ 286.517488][ T9759] lo speed is unknown, defaulting to 1000 [ 286.772330][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.793480][ T9771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.891692][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 287.564735][ T9803] netlink: 'syz.4.928': attribute type 12 has an invalid length. [ 287.844644][ T9800] bridge1: left promiscuous mode [ 287.850343][ T9800] bridge1: left allmulticast mode [ 287.862464][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'. [ 287.908550][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 287.927040][ T9810] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.022387][ T9810] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.221859][ T9810] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.392074][ T9810] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.519276][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 288.549424][ T9830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.937'. [ 288.562262][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 288.669249][ T9836] lo speed is unknown, defaulting to 1000 [ 288.837069][ T9831] lo speed is unknown, defaulting to 1000 [ 288.938283][ T9847] bridge0: port 3(0!) entered disabled state [ 288.945714][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.954281][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.136683][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.256013][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.327551][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.372004][ T5988] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.737514][ T9873] lo speed is unknown, defaulting to 1000 [ 289.806772][ T9881] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.945'. [ 289.821407][ T9876] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.945'. [ 290.358322][ T9895] lo speed is unknown, defaulting to 1000 [ 290.438047][ T9909] netlink: 'syz.1.955': attribute type 10 has an invalid length. [ 290.472588][ T9909] 8021q: VLANs not supported on ip6tnl0 [ 290.630504][ T9915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.876387][ T9918] netlink: 'syz.1.959': attribute type 12 has an invalid length. [ 290.998485][ T9926] netlink: 'syz.4.960': attribute type 3 has an invalid length. [ 291.010209][ T9926] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.960'. [ 291.137148][ T9932] lo speed is unknown, defaulting to 1000 [ 291.282334][ T9933] lo speed is unknown, defaulting to 1000 [ 291.291020][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.314319][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.342146][ T9941] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 291.357260][ T9941] Cannot find set identified by id 0 to match [ 291.934808][ T9970] SET target dimension over the limit! [ 292.019562][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 292.054471][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 292.113975][ T9973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.972'. [ 292.225245][ T5834] block nbd0: Receive control failed (result -107) [ 292.254478][ T9992] FAULT_INJECTION: forcing a failure. [ 292.254478][ T9992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.256617][ T9991] syz_tun: entered promiscuous mode [ 292.272586][ T9973] nbd0: detected capacity change from 0 to 256 [ 292.276075][ T9991] batadv_slave_0: entered promiscuous mode [ 292.286788][ T9991] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 292.295970][ T9991] Cannot create hsr debugfs directory [ 292.301880][ T9992] CPU: 1 UID: 0 PID: 9992 Comm: syz.4.975 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 292.301909][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.301921][ T9992] Call Trace: [ 292.301929][ T9992] [ 292.301938][ T9992] dump_stack_lvl+0x189/0x250 [ 292.301981][ T9992] ? __pfx____ratelimit+0x10/0x10 [ 292.302065][ T9992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.302093][ T9992] ? __pfx__printk+0x10/0x10 [ 292.302112][ T9992] ? __might_fault+0xb0/0x130 [ 292.302143][ T9992] should_fail_ex+0x414/0x560 [ 292.302176][ T9992] _copy_from_user+0x2d/0xb0 [ 292.302198][ T9992] ___sys_sendmsg+0x158/0x2a0 [ 292.302233][ T9992] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.302298][ T9992] ? __fget_files+0x2a/0x420 [ 292.302320][ T9992] ? __fget_files+0x3a0/0x420 [ 292.302351][ T9992] __x64_sys_sendmsg+0x19b/0x260 [ 292.302382][ T9992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.302420][ T9992] ? __pfx_ksys_write+0x10/0x10 [ 292.302443][ T9992] ? do_syscall_64+0xbe/0x3b0 [ 292.302467][ T9992] do_syscall_64+0xfa/0x3b0 [ 292.302485][ T9992] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.302503][ T9992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.302522][ T9992] ? clear_bhb_loop+0x60/0xb0 [ 292.302546][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.302565][ T9992] RIP: 0033:0x7f8fad58e929 [ 292.302584][ T9992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.302632][ T9992] RSP: 002b:00007f8fae40b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.302667][ T9992] RAX: ffffffffffffffda RBX: 00007f8fad7b6080 RCX: 00007f8fad58e929 [ 292.302680][ T9992] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 292.302691][ T9992] RBP: 00007f8fae40b090 R08: 0000000000000000 R09: 0000000000000000 [ 292.302703][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.302713][ T9992] R13: 0000000000000001 R14: 00007f8fad7b6080 R15: 00007ffd7f424298 [ 292.302745][ T9992] [ 292.671973][T10000] netlink: 'syz.1.979': attribute type 12 has an invalid length. [ 292.786943][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.812414][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.893762][T10016] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.981'. [ 292.938217][T10006] lo speed is unknown, defaulting to 1000 [ 292.938227][T10014] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.981'. [ 292.978965][T10019] veth0_virt_wifi: entered promiscuous mode [ 293.013135][T10019] veth0_virt_wifi: left promiscuous mode [ 293.231854][T10029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.989'. [ 293.258955][T10035] netlink: 48 bytes leftover after parsing attributes in process `syz.0.990'. [ 293.270100][T10035] netlink: 'syz.0.990': attribute type 2 has an invalid length. [ 293.286559][T10033] delete_channel: no stack [ 293.301677][T10035] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 293.322344][T10035] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 293.373063][T10035] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 293.479931][T10035] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 293.503708][T10035] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 293.575354][T10048] FAULT_INJECTION: forcing a failure. [ 293.575354][T10048] name failslab, interval 1, probability 0, space 0, times 0 [ 293.616358][T10048] CPU: 1 UID: 0 PID: 10048 Comm: syz.3.991 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 293.616392][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.616403][T10048] Call Trace: [ 293.616412][T10048] [ 293.616420][T10048] dump_stack_lvl+0x189/0x250 [ 293.616460][T10048] ? __pfx____ratelimit+0x10/0x10 [ 293.616480][T10048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.616524][T10048] ? __pfx__printk+0x10/0x10 [ 293.616552][T10048] ? __pfx___might_resched+0x10/0x10 [ 293.616589][T10048] should_fail_ex+0x414/0x560 [ 293.616623][T10048] should_failslab+0xa8/0x100 [ 293.616653][T10048] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 293.616675][T10048] ? __alloc_skb+0x112/0x2d0 [ 293.616817][T10048] __alloc_skb+0x112/0x2d0 [ 293.616849][T10048] netlink_sendmsg+0x5c6/0xb30 [ 293.616889][T10048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.616919][T10048] ? aa_sock_msg_perm+0x94/0x160 [ 293.616950][T10048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.616977][T10048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.617002][T10048] __sock_sendmsg+0x219/0x270 [ 293.617029][T10048] ____sys_sendmsg+0x505/0x830 [ 293.617065][T10048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.617105][T10048] ? import_iovec+0x74/0xa0 [ 293.617131][T10048] ___sys_sendmsg+0x21f/0x2a0 [ 293.617164][T10048] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.617234][T10048] ? __fget_files+0x2a/0x420 [ 293.617257][T10048] ? __fget_files+0x3a0/0x420 [ 293.617288][T10048] __x64_sys_sendmsg+0x19b/0x260 [ 293.617328][T10048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.617368][T10048] ? __pfx_ksys_write+0x10/0x10 [ 293.617385][T10048] ? rcu_is_watching+0x15/0xb0 [ 293.617424][T10048] ? do_syscall_64+0xbe/0x3b0 [ 293.617450][T10048] do_syscall_64+0xfa/0x3b0 [ 293.617470][T10048] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.617490][T10048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.617517][T10048] ? clear_bhb_loop+0x60/0xb0 [ 293.617541][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.617561][T10048] RIP: 0033:0x7fc12ff8e929 [ 293.617581][T10048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.617623][T10048] RSP: 002b:00007fc130d96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.617647][T10048] RAX: ffffffffffffffda RBX: 00007fc1301b5fa0 RCX: 00007fc12ff8e929 [ 293.617661][T10048] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 293.617673][T10048] RBP: 00007fc130d96090 R08: 0000000000000000 R09: 0000000000000000 [ 293.617685][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.617696][T10048] R13: 0000000000000000 R14: 00007fc1301b5fa0 R15: 00007ffec8b845f8 [ 293.617728][T10048] [ 293.892997][T10046] tipc: Invalid UDP bearer configuration [ 293.893112][T10046] tipc: Enabling of bearer rejected, failed to enable media [ 294.324591][T10080] x_tables: duplicate underflow at hook 3 [ 294.536513][T10089] lo speed is unknown, defaulting to 1000 [ 294.665507][T10099] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1004'. [ 294.692744][T10101] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 294.700985][T10094] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1004'. [ 294.764058][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1010'. [ 294.765645][T10104] bridge0: port 3(dummy0) entered disabled state [ 294.781972][T10104] dummy0: left allmulticast mode [ 294.786983][T10104] dummy0: left promiscuous mode [ 294.792456][T10104] bridge0: port 3(dummy0) entered disabled state [ 294.820320][T10104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 295.032027][ T3499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.053952][ T3499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.079707][ T3499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.094725][ T3499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.466741][T10125] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.474605][T10125] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.614753][T10125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.634393][T10125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.741394][T10125] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 295.748593][T10125] macsec1: left promiscuous mode [ 295.754998][T10125] macsec1: left allmulticast mode [ 295.792216][ T7701] lo speed is unknown, defaulting to 1000 [ 295.798410][ T7701] syz2: Port: 1 Link DOWN [ 295.924982][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.930049][T10154] FAULT_INJECTION: forcing a failure. [ 295.930049][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.948780][T10154] CPU: 0 UID: 0 PID: 10154 Comm: syz.2.1020 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 295.948829][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.948841][T10154] Call Trace: [ 295.948851][T10154] [ 295.948861][T10154] dump_stack_lvl+0x189/0x250 [ 295.948903][T10154] ? __pfx____ratelimit+0x10/0x10 [ 295.948927][T10154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.948958][T10154] ? __pfx__printk+0x10/0x10 [ 295.948981][T10154] ? __might_fault+0xb0/0x130 [ 295.949015][T10154] should_fail_ex+0x414/0x560 [ 295.949048][T10154] _copy_from_iter+0x1db/0x16f0 [ 295.949085][T10154] ? rcu_is_watching+0x15/0xb0 [ 295.949119][T10154] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 295.949142][T10154] ? __pfx__copy_from_iter+0x10/0x10 [ 295.949174][T10154] ? __build_skb_around+0x257/0x3e0 [ 295.949206][T10154] ? netlink_sendmsg+0x642/0xb30 [ 295.949232][T10154] ? skb_put+0x11b/0x210 [ 295.949264][T10154] netlink_sendmsg+0x6b2/0xb30 [ 295.949307][T10154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.949338][T10154] ? aa_sock_msg_perm+0x94/0x160 [ 295.949367][T10154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.949393][T10154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.949421][T10154] __sock_sendmsg+0x219/0x270 [ 295.949448][T10154] ____sys_sendmsg+0x505/0x830 [ 295.949486][T10154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.949527][T10154] ? import_iovec+0x74/0xa0 [ 295.949551][T10154] ___sys_sendmsg+0x21f/0x2a0 [ 295.949584][T10154] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.949656][T10154] ? __fget_files+0x2a/0x420 [ 295.949677][T10154] ? __fget_files+0x3a0/0x420 [ 295.949711][T10154] __x64_sys_sendmsg+0x19b/0x260 [ 295.949748][T10154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.949787][T10154] ? __pfx_ksys_write+0x10/0x10 [ 295.949803][T10154] ? rcu_is_watching+0x15/0xb0 [ 295.949836][T10154] ? do_syscall_64+0xbe/0x3b0 [ 295.949859][T10154] do_syscall_64+0xfa/0x3b0 [ 295.949878][T10154] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.949897][T10154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.949916][T10154] ? clear_bhb_loop+0x60/0xb0 [ 295.949940][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.949960][T10154] RIP: 0033:0x7fe56b78e929 [ 295.949979][T10154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.949995][T10154] RSP: 002b:00007fe56c6a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.950016][T10154] RAX: ffffffffffffffda RBX: 00007fe56b9b5fa0 RCX: 00007fe56b78e929 [ 295.950029][T10154] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 295.950043][T10154] RBP: 00007fe56c6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 295.950054][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.950140][T10154] R13: 0000000000000000 R14: 00007fe56b9b5fa0 R15: 00007ffde7c2c678 [ 295.950174][T10154] [ 295.956423][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.289516][T10159] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 296.309334][T10161] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 296.366899][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.384734][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.444326][T10168] lo speed is unknown, defaulting to 1000 [ 296.464130][T10167] validate_nla: 1 callbacks suppressed [ 296.464233][T10167] netlink: 'syz.3.1025': attribute type 12 has an invalid length. [ 296.484714][T10153] lo speed is unknown, defaulting to 1000 [ 296.913472][T10183] lo speed is unknown, defaulting to 1000 [ 297.300373][T10198] FAULT_INJECTION: forcing a failure. [ 297.300373][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 297.386931][T10198] CPU: 1 UID: 0 PID: 10198 Comm: syz.2.1033 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 297.386981][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.387000][T10198] Call Trace: [ 297.387013][T10198] [ 297.387022][T10198] dump_stack_lvl+0x189/0x250 [ 297.387062][T10198] ? __pfx____ratelimit+0x10/0x10 [ 297.387085][T10198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.387116][T10198] ? __pfx__printk+0x10/0x10 [ 297.387142][T10198] ? __pfx___might_resched+0x10/0x10 [ 297.387180][T10198] ? fs_reclaim_acquire+0x7d/0x100 [ 297.387211][T10198] should_fail_ex+0x414/0x560 [ 297.387244][T10198] should_failslab+0xa8/0x100 [ 297.387269][T10198] __kmalloc_noprof+0xcb/0x4f0 [ 297.387289][T10198] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 297.387319][T10198] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 297.387347][T10198] genl_family_rcv_msg_doit+0xb8/0x300 [ 297.387375][T10198] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.387398][T10198] ? rcu_is_watching+0x15/0xb0 [ 297.387432][T10198] ? apparmor_capable+0x137/0x1b0 [ 297.387453][T10198] ? bpf_lsm_capable+0x9/0x20 [ 297.387471][T10198] ? security_capable+0x7e/0x2e0 [ 297.387577][T10198] genl_rcv_msg+0x60e/0x790 [ 297.387605][T10198] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.387624][T10198] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 297.387719][T10198] netlink_rcv_skb+0x208/0x470 [ 297.387744][T10198] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.387766][T10198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.387810][T10198] ? down_read+0x1ad/0x2e0 [ 297.387909][T10198] genl_rcv+0x28/0x40 [ 297.387936][T10198] netlink_unicast+0x75b/0x8d0 [ 297.387966][T10198] netlink_sendmsg+0x805/0xb30 [ 297.387999][T10198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.388026][T10198] ? aa_sock_msg_perm+0x94/0x160 [ 297.388053][T10198] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.388086][T10198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.388112][T10198] __sock_sendmsg+0x219/0x270 [ 297.388139][T10198] ____sys_sendmsg+0x505/0x830 [ 297.388175][T10198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.388214][T10198] ? import_iovec+0x74/0xa0 [ 297.388256][T10198] ___sys_sendmsg+0x21f/0x2a0 [ 297.388289][T10198] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.388357][T10198] ? __fget_files+0x2a/0x420 [ 297.388378][T10198] ? __fget_files+0x3a0/0x420 [ 297.388408][T10198] __x64_sys_sendmsg+0x19b/0x260 [ 297.388441][T10198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.388478][T10198] ? __pfx_ksys_write+0x10/0x10 [ 297.388493][T10198] ? rcu_is_watching+0x15/0xb0 [ 297.388529][T10198] ? do_syscall_64+0xbe/0x3b0 [ 297.388554][T10198] do_syscall_64+0xfa/0x3b0 [ 297.388572][T10198] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.388591][T10198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.388612][T10198] ? clear_bhb_loop+0x60/0xb0 [ 297.388648][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.388667][T10198] RIP: 0033:0x7fe56b78e929 [ 297.388686][T10198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.388703][T10198] RSP: 002b:00007fe56c6a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.388725][T10198] RAX: ffffffffffffffda RBX: 00007fe56b9b5fa0 RCX: 00007fe56b78e929 [ 297.388740][T10198] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 297.388752][T10198] RBP: 00007fe56c6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 297.388763][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.388773][T10198] R13: 0000000000000000 R14: 00007fe56b9b5fa0 R15: 00007ffde7c2c678 [ 297.388802][T10198] [ 297.752042][T10204] netlink: 'syz.3.1035': attribute type 16 has an invalid length. [ 297.760288][T10204] netlink: 'syz.3.1035': attribute type 17 has an invalid length. [ 297.778275][T10206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.992979][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.053233][T10204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.263401][T10226] xfrm0: entered promiscuous mode [ 298.404590][T10232] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 298.433263][T10232] __nla_validate_parse: 5 callbacks suppressed [ 298.433290][T10232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1042'. [ 298.478410][T10238] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1044'. [ 298.488636][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 298.540583][T10238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.720567][T10250] FAULT_INJECTION: forcing a failure. [ 298.720567][T10250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.722336][T10250] [ 298.722351][T10250] ====================================================== [ 298.722428][T10250] WARNING: possible circular locking dependency detected [ 298.722446][T10250] 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 Not tainted [ 298.722485][T10250] ------------------------------------------------------ [ 298.722497][T10250] syz.4.1048/10250 is trying to acquire lock: [ 298.722506][T10250] ffffffff8e132fc0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 298.722608][T10250] [ 298.722608][T10250] but task is already holding lock: [ 298.722614][T10250] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 298.722663][T10250] [ 298.722663][T10250] which lock already depends on the new lock. [ 298.722663][T10250] [ 298.722669][T10250] [ 298.722669][T10250] the existing dependency chain (in reverse order) is: [ 298.722675][T10250] [ 298.722675][T10250] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 298.722730][T10250] lock_acquire+0x120/0x360 [ 298.722756][T10250] _raw_spin_lock_nested+0x32/0x50 [ 298.722775][T10250] raw_spin_rq_lock_nested+0x2a/0x140 [ 298.722801][T10250] task_rq_lock+0xbc/0x470 [ 298.722825][T10250] cgroup_move_task+0x9a/0x590 [ 298.722843][T10250] css_set_move_task+0x658/0x9e0 [ 298.722863][T10250] cgroup_post_fork+0x1ef/0x790 [ 298.722881][T10250] copy_process+0x3862/0x3c00 [ 298.722897][T10250] kernel_clone+0x21e/0x870 [ 298.722914][T10250] user_mode_thread+0xdd/0x140 [ 298.722931][T10250] rest_init+0x23/0x300 [ 298.722952][T10250] start_kernel+0x47d/0x500 [ 298.723124][T10250] x86_64_start_reservations+0x24/0x30 [ 298.723153][T10250] x86_64_start_kernel+0x143/0x1c0 [ 298.723180][T10250] common_startup_64+0x13e/0x147 [ 298.723202][T10250] [ 298.723202][T10250] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 298.723229][T10250] lock_acquire+0x120/0x360 [ 298.723254][T10250] _raw_spin_lock_irqsave+0xa7/0xf0 [ 298.723281][T10250] try_to_wake_up+0x6e/0x1290 [ 298.723300][T10250] __wake_up_common_lock+0x134/0x1f0 [ 298.723322][T10250] tty_port_default_wakeup+0xa2/0xf0 [ 298.723423][T10250] serial8250_tx_chars+0x72e/0x970 [ 298.723456][T10250] serial8250_handle_irq+0x633/0xbb0 [ 298.723474][T10250] serial8250_default_handle_irq+0xbf/0x1b0 [ 298.723496][T10250] serial8250_interrupt+0xa2/0x1d0 [ 298.723523][T10250] __handle_irq_event_percpu+0x28c/0x980 [ 298.723544][T10250] handle_irq_event+0x8b/0x1e0 [ 298.723563][T10250] handle_edge_irq+0x267/0x9c0 [ 298.723579][T10250] __common_interrupt+0x143/0x250 [ 298.723603][T10250] common_interrupt+0xb6/0xe0 [ 298.723628][T10250] asm_common_interrupt+0x26/0x40 [ 298.723647][T10250] page_ext_lookup+0x61/0x180 [ 298.723665][T10250] page_table_check_clear+0x278/0x700 [ 298.723683][T10250] unmap_page_range+0x3249/0x41c0 [ 298.723706][T10250] unmap_vmas+0x399/0x580 [ 298.723726][T10250] exit_mmap+0x248/0xb50 [ 298.723748][T10250] __mmput+0x118/0x420 [ 298.723774][T10250] exit_mm+0x1da/0x2c0 [ 298.723795][T10250] do_exit+0x640/0x22e0 [ 298.723813][T10250] do_group_exit+0x21c/0x2d0 [ 298.723833][T10250] __x64_sys_exit_group+0x3f/0x40 [ 298.723853][T10250] x64_sys_call+0x21ba/0x21c0 [ 298.723872][T10250] do_syscall_64+0xfa/0x3b0 [ 298.723891][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.723908][T10250] [ 298.723908][T10250] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 298.723936][T10250] lock_acquire+0x120/0x360 [ 298.723961][T10250] _raw_spin_lock_irqsave+0xa7/0xf0 [ 298.723987][T10250] __wake_up_common_lock+0x2f/0x1f0 [ 298.724008][T10250] tty_port_default_wakeup+0xa2/0xf0 [ 298.724028][T10250] serial8250_tx_chars+0x72e/0x970 [ 298.724045][T10250] serial8250_handle_irq+0x633/0xbb0 [ 298.724062][T10250] serial8250_default_handle_irq+0xbf/0x1b0 [ 298.724103][T10250] serial8250_interrupt+0xa2/0x1d0 [ 298.724147][T10250] __handle_irq_event_percpu+0x28c/0x980 [ 298.724168][T10250] handle_irq_event+0x8b/0x1e0 [ 298.724187][T10250] handle_edge_irq+0x267/0x9c0 [ 298.724203][T10250] __common_interrupt+0x143/0x250 [ 298.724226][T10250] common_interrupt+0xb6/0xe0 [ 298.724249][T10250] asm_common_interrupt+0x26/0x40 [ 298.724266][T10250] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 298.724294][T10250] uart_port_unlock_deref+0x111/0x2f0 [ 298.724311][T10250] uart_write+0xe8/0x130 [ 298.724327][T10250] n_tty_write+0xd32/0x11d0 [ 298.724350][T10250] file_tty_write+0x503/0x990 [ 298.724366][T10250] vfs_write+0x548/0xa90 [ 298.724394][T10250] ksys_write+0x145/0x250 [ 298.724409][T10250] do_syscall_64+0xfa/0x3b0 [ 298.724427][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.724444][T10250] [ 298.724444][T10250] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 298.724510][T10250] lock_acquire+0x120/0x360 [ 298.724535][T10250] _raw_spin_lock_irqsave+0xa7/0xf0 [ 298.724581][T10250] serial8250_console_write+0x17e/0x1ba0 [ 298.724602][T10250] console_flush_all+0x728/0xc40 [ 298.724622][T10250] console_unlock+0xc4/0x270 [ 298.724638][T10250] vprintk_emit+0x5b7/0x7a0 [ 298.724653][T10250] _printk+0xcf/0x120 [ 298.724671][T10250] register_console+0xa8b/0xf90 [ 298.724690][T10250] univ8250_console_init+0x52/0x90 [ 298.724739][T10250] console_init+0x1a1/0x670 [ 298.724780][T10250] start_kernel+0x2cc/0x500 [ 298.724801][T10250] x86_64_start_reservations+0x24/0x30 [ 298.724829][T10250] x86_64_start_kernel+0x143/0x1c0 [ 298.724860][T10250] common_startup_64+0x13e/0x147 [ 298.724879][T10250] [ 298.724879][T10250] -> #0 (console_owner){-.-.}-{0:0}: [ 298.724905][T10250] validate_chain+0xb9b/0x2140 [ 298.724921][T10250] __lock_acquire+0xab9/0xd20 [ 298.724944][T10250] lock_acquire+0x120/0x360 [ 298.724966][T10250] console_flush_all+0x6d2/0xc40 [ 298.724983][T10250] console_unlock+0xc4/0x270 [ 298.724998][T10250] vprintk_emit+0x5b7/0x7a0 [ 298.725011][T10250] _printk+0xcf/0x120 [ 298.725028][T10250] should_fail_ex+0x3f5/0x560 [ 298.725050][T10250] strncpy_from_user+0x36/0x290 [ 298.725079][T10250] strncpy_from_user_nofault+0x72/0x150 [ 298.725104][T10250] bpf_probe_read_user_str+0x2a/0x70 [ 298.725133][T10250] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 298.725147][T10250] bpf_trace_run2+0x284/0x4b0 [ 298.725167][T10250] __bpf_trace_tlb_flush+0xf5/0x150 [ 298.725183][T10250] trace_tlb_flush+0x115/0x140 [ 298.725203][T10250] switch_mm_irqs_off+0x53e/0x7a0 [ 298.725220][T10250] __schedule+0x106c/0x4d00 [ 298.725246][T10250] preempt_schedule_irq+0xb5/0x150 [ 298.725262][T10250] irqentry_exit+0x6f/0x90 [ 298.725277][T10250] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.725296][T10250] lock_acquire+0x175/0x360 [ 298.725336][T10250] unwind_next_frame+0xc2/0x2390 [ 298.725379][T10250] arch_stack_walk+0x11c/0x150 [ 298.725395][T10250] stack_trace_save+0x9c/0xe0 [ 298.725415][T10250] kasan_save_track+0x3e/0x80 [ 298.725442][T10250] __kasan_slab_alloc+0x6c/0x80 [ 298.725457][T10250] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.725486][T10250] skb_clone+0x212/0x3a0 [ 298.725503][T10250] __netlink_deliver_tap+0x404/0x850 [ 298.725527][T10250] netlink_deliver_tap+0x19c/0x1b0 [ 298.725550][T10250] netlink_unicast+0x72f/0x8d0 [ 298.725568][T10250] netlink_sendmsg+0x805/0xb30 [ 298.725591][T10250] __sock_sendmsg+0x219/0x270 [ 298.725609][T10250] ____sys_sendmsg+0x505/0x830 [ 298.725635][T10250] ___sys_sendmsg+0x21f/0x2a0 [ 298.725661][T10250] __x64_sys_sendmsg+0x19b/0x260 [ 298.725687][T10250] do_syscall_64+0xfa/0x3b0 [ 298.725706][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.725722][T10250] [ 298.725722][T10250] other info that might help us debug this: [ 298.725722][T10250] [ 298.725729][T10250] Chain exists of: [ 298.725729][T10250] console_owner --> &p->pi_lock --> &rq->__lock [ 298.725729][T10250] [ 298.725796][T10250] Possible unsafe locking scenario: [ 298.725796][T10250] [ 298.725822][T10250] CPU0 CPU1 [ 298.725841][T10250] ---- ---- [ 298.725851][T10250] lock(&rq->__lock); [ 298.725865][T10250] lock(&p->pi_lock); [ 298.725883][T10250] lock(&rq->__lock); [ 298.725897][T10250] lock(console_owner); [ 298.725910][T10250] [ 298.725910][T10250] *** DEADLOCK *** [ 298.725910][T10250] [ 298.725915][T10250] 6 locks held by syz.4.1048/10250: [ 298.725927][T10250] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0 [ 298.725981][T10250] #1: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 298.726035][T10250] #2: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 298.726097][T10250] #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 298.726143][T10250] #4: ffffffff8e133020 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 298.726183][T10250] #5: ffffffff8e01a8f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 298.726226][T10250] [ 298.726226][T10250] stack backtrace: [ 298.726236][T10250] CPU: 1 UID: 0 PID: 10250 Comm: syz.4.1048 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 298.726277][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.726290][T10250] Call Trace: [ 298.726298][T10250] [ 298.726307][T10250] dump_stack_lvl+0x189/0x250 [ 298.726343][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.726374][T10250] ? __pfx__printk+0x10/0x10 [ 298.726396][T10250] ? print_lock_name+0xde/0x100 [ 298.726419][T10250] print_circular_bug+0x2ee/0x310 [ 298.726442][T10250] check_noncircular+0x134/0x160 [ 298.726466][T10250] validate_chain+0xb9b/0x2140 [ 298.726498][T10250] __lock_acquire+0xab9/0xd20 [ 298.726529][T10250] ? console_flush_all+0x13a/0xc40 [ 298.726550][T10250] lock_acquire+0x120/0x360 [ 298.726575][T10250] ? console_flush_all+0x13a/0xc40 [ 298.726602][T10250] ? do_raw_spin_unlock+0x122/0x240 [ 298.726623][T10250] ? console_flush_all+0x13a/0xc40 [ 298.726653][T10250] console_flush_all+0x6d2/0xc40 [ 298.726673][T10250] ? console_flush_all+0x13a/0xc40 [ 298.726696][T10250] ? console_flush_all+0x13a/0xc40 [ 298.726721][T10250] ? __pfx_console_flush_all+0x10/0x10 [ 298.726747][T10250] ? is_printk_cpu_sync_owner+0x32/0x40 [ 298.726772][T10250] console_unlock+0xc4/0x270 [ 298.726791][T10250] ? __pfx_console_unlock+0x10/0x10 [ 298.726810][T10250] ? is_printk_cpu_sync_owner+0x32/0x40 [ 298.726836][T10250] vprintk_emit+0x5b7/0x7a0 [ 298.726856][T10250] ? __pfx_vprintk_emit+0x10/0x10 [ 298.726884][T10250] _printk+0xcf/0x120 [ 298.726903][T10250] ? __pfx____ratelimit+0x10/0x10 [ 298.726924][T10250] ? __pfx__printk+0x10/0x10 [ 298.726951][T10250] should_fail_ex+0x3f5/0x560 [ 298.726977][T10250] strncpy_from_user+0x36/0x290 [ 298.727003][T10250] strncpy_from_user_nofault+0x72/0x150 [ 298.727032][T10250] bpf_probe_read_user_str+0x2a/0x70 [ 298.727063][T10250] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 298.727093][T10250] bpf_trace_run2+0x284/0x4b0 [ 298.727116][T10250] ? bpf_trace_run2+0x186/0x4b0 [ 298.727139][T10250] ? __pfx_bpf_trace_run2+0x10/0x10 [ 298.727164][T10250] ? kvm_sched_clock_read+0x11/0x20 [ 298.727183][T10250] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 298.727205][T10250] __bpf_trace_tlb_flush+0xf5/0x150 [ 298.727225][T10250] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 298.727249][T10250] ? psi_group_change+0xbc7/0x1210 [ 298.727267][T10250] ? rcu_read_lock_sched_held+0x89/0x100 [ 298.727300][T10250] trace_tlb_flush+0x115/0x140 [ 298.727320][T10250] switch_mm_irqs_off+0x53e/0x7a0 [ 298.727343][T10250] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 298.727361][T10250] ? psi_task_switch+0x314/0x6d0 [ 298.727381][T10250] __schedule+0x106c/0x4d00 [ 298.727417][T10250] ? __lock_acquire+0xab9/0xd20 [ 298.727439][T10250] ? preempt_schedule_irq+0xb5/0x150 [ 298.727456][T10250] ? __pfx___schedule+0x10/0x10 [ 298.727488][T10250] ? preempt_schedule_irq+0xaa/0x150 [ 298.727504][T10250] preempt_schedule_irq+0xb5/0x150 [ 298.727518][T10250] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 298.727537][T10250] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 298.727564][T10250] irqentry_exit+0x6f/0x90 [ 298.727578][T10250] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.727596][T10250] RIP: 0010:lock_acquire+0x175/0x360 [ 298.727619][T10250] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 298.727634][T10250] RSP: 0018:ffffc9000b847198 EFLAGS: 00000206 [ 298.727649][T10250] RAX: 45c0ac2fb0e0c200 RBX: 0000000000000000 RCX: 45c0ac2fb0e0c200 [ 298.727661][T10250] RDX: 0000000000000000 RSI: ffffffff8db71adc RDI: ffffffff8be28b80 [ 298.727672][T10250] RBP: ffffffff81729af5 R08: 0000000000000000 R09: ffffffff81729af5 [ 298.727683][T10250] R10: ffffc9000b847358 R11: ffffffff81acf690 R12: 0000000000000002 [ 298.727695][T10250] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 298.727706][T10250] ? unwind_next_frame+0xa5/0x2390 [ 298.727731][T10250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.727749][T10250] ? unwind_next_frame+0xa5/0x2390 [ 298.727780][T10250] ? unwind_next_frame+0xa5/0x2390 [ 298.727803][T10250] ? ___sys_sendmsg+0x21f/0x2a0 [ 298.727840][T10250] ? unwind_next_frame+0xa5/0x2390 [ 298.727863][T10250] unwind_next_frame+0xc2/0x2390 [ 298.727886][T10250] ? unwind_next_frame+0xa5/0x2390 [ 298.727912][T10250] ? unwind_next_frame+0xa5/0x2390 [ 298.727935][T10250] ? ____sys_sendmsg+0x505/0x830 [ 298.727959][T10250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.727975][T10250] arch_stack_walk+0x11c/0x150 [ 298.727993][T10250] ? ___sys_sendmsg+0x21f/0x2a0 [ 298.728017][T10250] stack_trace_save+0x9c/0xe0 [ 298.728033][T10250] ? __pfx_stack_trace_save+0x10/0x10 [ 298.728051][T10250] ? __kernel_text_address+0xd/0x40 [ 298.728083][T10250] ? unwind_get_return_address+0x4d/0x90 [ 298.728107][T10250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.728124][T10250] ? arch_stack_walk+0xfc/0x150 [ 298.728138][T10250] kasan_save_track+0x3e/0x80 [ 298.728160][T10250] ? kasan_save_track+0x3e/0x80 [ 298.728182][T10250] ? __kasan_slab_alloc+0x6c/0x80 [ 298.728195][T10250] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.728220][T10250] ? skb_clone+0x212/0x3a0 [ 298.728233][T10250] ? __netlink_deliver_tap+0x404/0x850 [ 298.728253][T10250] ? netlink_deliver_tap+0x19c/0x1b0 [ 298.728272][T10250] ? netlink_unicast+0x72f/0x8d0 [ 298.728287][T10250] ? netlink_sendmsg+0x805/0xb30 [ 298.728306][T10250] ? __sock_sendmsg+0x219/0x270 [ 298.728322][T10250] ? ____sys_sendmsg+0x505/0x830 [ 298.728343][T10250] ? ___sys_sendmsg+0x21f/0x2a0 [ 298.728385][T10250] __kasan_slab_alloc+0x6c/0x80 [ 298.728399][T10250] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.728423][T10250] ? skb_clone+0x212/0x3a0 [ 298.728438][T10250] skb_clone+0x212/0x3a0 [ 298.728453][T10250] __netlink_deliver_tap+0x404/0x850 [ 298.728506][T10250] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.728526][T10250] netlink_deliver_tap+0x19c/0x1b0 [ 298.728546][T10250] netlink_unicast+0x72f/0x8d0 [ 298.728567][T10250] netlink_sendmsg+0x805/0xb30 [ 298.728591][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.728613][T10250] ? aa_sock_msg_perm+0x94/0x160 [ 298.728635][T10250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.728656][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.728676][T10250] __sock_sendmsg+0x219/0x270 [ 298.728694][T10250] ____sys_sendmsg+0x505/0x830 [ 298.728719][T10250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.728745][T10250] ? import_iovec+0x74/0xa0 [ 298.728762][T10250] ___sys_sendmsg+0x21f/0x2a0 [ 298.728786][T10250] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.728826][T10250] ? __fget_files+0x2a/0x420 [ 298.728844][T10250] ? __fget_files+0x3a0/0x420 [ 298.728865][T10250] __x64_sys_sendmsg+0x19b/0x260 [ 298.728889][T10250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.728917][T10250] ? __pfx_ksys_write+0x10/0x10 [ 298.728930][T10250] ? rcu_is_watching+0x15/0xb0 [ 298.728957][T10250] ? do_syscall_64+0xbe/0x3b0 [ 298.728975][T10250] do_syscall_64+0xfa/0x3b0 [ 298.728990][T10250] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.729004][T10250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.729038][T10250] ? clear_bhb_loop+0x60/0xb0 [ 298.729056][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.729076][T10250] RIP: 0033:0x7f8fad58e929 [ 298.729115][T10250] Code: Unable to access opcode bytes at 0x7f8fad58e8ff. [ 298.729123][T10250] RSP: 002b:00007f8fae42c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.729140][T10250] RAX: ffffffffffffffda RBX: 00007f8fad7b5fa0 RCX: 00007f8fad58e929 [ 298.729151][T10250] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 298.729161][T10250] RBP: 00007f8fae42c090 R08: 0000000000000000 R09: 0000000000000000 [ 298.729171][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.729180][T10250] R13: 0000000000000000 R14: 00007f8fad7b5fa0 R15: 00007ffd7f424298 [ 298.729198][T10250] [ 300.380302][T10250] CPU: 1 UID: 0 PID: 10250 Comm: syz.4.1048 Not tainted 6.16.0-rc2-syzkaller-00625-g27390db9592d #0 PREEMPT(full) [ 300.380324][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.380333][T10250] Call Trace: [ 300.380343][T10250] [ 300.380351][T10250] dump_stack_lvl+0x189/0x250 [ 300.380380][T10250] ? __pfx____ratelimit+0x10/0x10 [ 300.380395][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.380415][T10250] ? __pfx__printk+0x10/0x10 [ 300.380434][T10250] should_fail_ex+0x414/0x560 [ 300.380454][T10250] strncpy_from_user+0x36/0x290 [ 300.380472][T10250] strncpy_from_user_nofault+0x72/0x150 [ 300.380493][T10250] bpf_probe_read_user_str+0x2a/0x70 [ 300.380517][T10250] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 300.380529][T10250] bpf_trace_run2+0x284/0x4b0 [ 300.380545][T10250] ? bpf_trace_run2+0x186/0x4b0 [ 300.380561][T10250] ? __pfx_bpf_trace_run2+0x10/0x10 [ 300.380578][T10250] ? kvm_sched_clock_read+0x11/0x20 [ 300.380589][T10250] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 300.380604][T10250] __bpf_trace_tlb_flush+0xf5/0x150 [ 300.380618][T10250] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 300.380633][T10250] ? psi_group_change+0xbc7/0x1210 [ 300.380645][T10250] ? rcu_read_lock_sched_held+0x89/0x100 [ 300.380690][T10250] trace_tlb_flush+0x115/0x140 [ 300.380707][T10250] switch_mm_irqs_off+0x53e/0x7a0 [ 300.380725][T10250] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 300.380738][T10250] ? psi_task_switch+0x314/0x6d0 [ 300.380754][T10250] __schedule+0x106c/0x4d00 [ 300.380784][T10250] ? __lock_acquire+0xab9/0xd20 [ 300.380803][T10250] ? preempt_schedule_irq+0xb5/0x150 [ 300.380818][T10250] ? __pfx___schedule+0x10/0x10 [ 300.380844][T10250] ? preempt_schedule_irq+0xaa/0x150 [ 300.380858][T10250] preempt_schedule_irq+0xb5/0x150 [ 300.380870][T10250] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 300.380887][T10250] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 300.380909][T10250] irqentry_exit+0x6f/0x90 [ 300.380922][T10250] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.380938][T10250] RIP: 0010:lock_acquire+0x175/0x360 [ 300.380958][T10250] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 300.380981][T10250] RSP: 0018:ffffc9000b847198 EFLAGS: 00000206 [ 300.380995][T10250] RAX: 45c0ac2fb0e0c200 RBX: 0000000000000000 RCX: 45c0ac2fb0e0c200 [ 300.381006][T10250] RDX: 0000000000000000 RSI: ffffffff8db71adc RDI: ffffffff8be28b80 [ 300.381016][T10250] RBP: ffffffff81729af5 R08: 0000000000000000 R09: ffffffff81729af5 [ 300.381026][T10250] R10: ffffc9000b847358 R11: ffffffff81acf690 R12: 0000000000000002 [ 300.381036][T10250] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 300.381047][T10250] ? unwind_next_frame+0xa5/0x2390 [ 300.381069][T10250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.381085][T10250] ? unwind_next_frame+0xa5/0x2390 [ 300.381113][T10250] ? unwind_next_frame+0xa5/0x2390 [ 300.381134][T10250] ? ___sys_sendmsg+0x21f/0x2a0 [ 300.381158][T10250] ? unwind_next_frame+0xa5/0x2390 [ 300.381178][T10250] unwind_next_frame+0xc2/0x2390 [ 300.381198][T10250] ? unwind_next_frame+0xa5/0x2390 [ 300.381232][T10250] ? unwind_next_frame+0xa5/0x2390 [ 300.381251][T10250] ? ____sys_sendmsg+0x505/0x830 [ 300.381270][T10250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.381285][T10250] arch_stack_walk+0x11c/0x150 [ 300.381300][T10250] ? ___sys_sendmsg+0x21f/0x2a0 [ 300.381320][T10250] stack_trace_save+0x9c/0xe0 [ 300.381334][T10250] ? __pfx_stack_trace_save+0x10/0x10 [ 300.381349][T10250] ? __kernel_text_address+0xd/0x40 [ 300.381428][T10250] ? unwind_get_return_address+0x4d/0x90 [ 300.381459][T10250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.381472][T10250] ? arch_stack_walk+0xfc/0x150 [ 300.381483][T10250] kasan_save_track+0x3e/0x80 [ 300.381502][T10250] ? kasan_save_track+0x3e/0x80 [ 300.381519][T10250] ? __kasan_slab_alloc+0x6c/0x80 [ 300.381529][T10250] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 300.381570][T10250] ? skb_clone+0x212/0x3a0 [ 300.381581][T10250] ? __netlink_deliver_tap+0x404/0x850 [ 300.381599][T10250] ? netlink_deliver_tap+0x19c/0x1b0 [ 300.381614][T10250] ? netlink_unicast+0x72f/0x8d0 [ 300.381626][T10250] ? netlink_sendmsg+0x805/0xb30 [ 300.381654][T10250] ? __sock_sendmsg+0x219/0x270 [ 300.381670][T10250] ? ____sys_sendmsg+0x505/0x830 [ 300.381686][T10250] ? ___sys_sendmsg+0x21f/0x2a0 [ 300.381718][T10250] __kasan_slab_alloc+0x6c/0x80 [ 300.381730][T10250] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 300.381750][T10250] ? skb_clone+0x212/0x3a0 [ 300.381761][T10250] skb_clone+0x212/0x3a0 [ 300.381774][T10250] __netlink_deliver_tap+0x404/0x850 [ 300.381795][T10250] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.381827][T10250] netlink_deliver_tap+0x19c/0x1b0 [ 300.381844][T10250] netlink_unicast+0x72f/0x8d0 [ 300.381862][T10250] netlink_sendmsg+0x805/0xb30 [ 300.381893][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.381913][T10250] ? aa_sock_msg_perm+0x94/0x160 [ 300.381932][T10250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.381948][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.381964][T10250] __sock_sendmsg+0x219/0x270 [ 300.381978][T10250] ____sys_sendmsg+0x505/0x830 [ 300.381998][T10250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.382019][T10250] ? import_iovec+0x74/0xa0 [ 300.382032][T10250] ___sys_sendmsg+0x21f/0x2a0 [ 300.382051][T10250] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.382099][T10250] ? __fget_files+0x2a/0x420 [ 300.382114][T10250] ? __fget_files+0x3a0/0x420 [ 300.382131][T10250] __x64_sys_sendmsg+0x19b/0x260 [ 300.382151][T10250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.382174][T10250] ? __pfx_ksys_write+0x10/0x10 [ 300.382185][T10250] ? rcu_is_watching+0x15/0xb0 [ 300.382206][T10250] ? do_syscall_64+0xbe/0x3b0 [ 300.382222][T10250] do_syscall_64+0xfa/0x3b0 [ 300.382234][T10250] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.382246][T10250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.382258][T10250] ? clear_bhb_loop+0x60/0xb0 [ 300.382273][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.382285][T10250] RIP: 0033:0x7f8fad58e929 [ 300.382295][T10250] Code: Unable to access opcode bytes at 0x7f8fad58e8ff. [ 300.382302][T10250] RSP: 002b:00007f8fae42c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.382315][T10250] RAX: ffffffffffffffda RBX: 00007f8fad7b5fa0 RCX: 00007f8fad58e929 [ 300.382324][T10250] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 300.382331][T10250] RBP: 00007f8fae42c090 R08: 0000000000000000 R09: 0000000000000000 [ 300.382339][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.382363][T10250] R13: 0000000000000000 R14: 00007f8fad7b5fa0 R15: 00007ffd7f424298 [ 300.382378][T10250] [ 301.148283][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1049'. [ 301.165129][T10259] batadv_slave_0: entered promiscuous mode [ 301.179432][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 301.211661][T10259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.252694][T10259] batadv_slave_0 (unregistering): left promiscuous mode [ 301.271941][T10259] batman_adv: batadv0: Removing interface: batadv_slave_0