last executing test programs: 5.691135481s ago: executing program 3 (id=2178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3e) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000011140001002a198ee74020000800030001005b1f"], 0x18}, 0x1, 0x0, 0x0, 0x4044811}, 0xc5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x0) 3.767079031s ago: executing program 4 (id=2196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="090000004000010042000000", @ANYRES32=0x1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000240)=""/113}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="18002a447f56878400000018110000150980eea1bc4613a10500000000000000a16664fd58c18ba574c8c3d1d6fd178b94", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000007f0000010000000000000000000000000104000000000000000000000000000008000000000000000000000000000000ffffffff00000000030000000000000000000000000000000000000800000000fdffffffffffffff0000000000000000fdffffffffffffff01000080000000000000000001000000fcffffff02000000000000000a000401400000000000000040010100726d64313630"], 0x230}, 0x1, 0x0, 0x0, 0x24040031}, 0x0) socket$netlink(0x10, 0x3, 0x12) 3.396092168s ago: executing program 3 (id=2199): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(0x4) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = accept(r2, 0x0, 0x0) (async) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) (async) bind$llc(r5, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) 3.233527213s ago: executing program 3 (id=2200): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x8, 0xc, 0x10008, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd76}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28, 0x8}}, 0x14}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x8, 0xc, 0x10008, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd76}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28, 0x8}}, 0x14}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) (async) 3.051295125s ago: executing program 4 (id=2202): r0 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7000fcdbdf2500"/16], 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0xa2, 0x4) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001811000007c9ac6775ed00ef1d06d26d2e31613984d49d1ecc1d246fa90185182cd16d05cf8c4e3065b5606793b35bcfba6b7a8885faaf8d1a210ee12eff619f102b4153245fa0ff042e5daf7ddda03fb05c43e0f257cda761582e6bdd7cb5b3a8c6e34b461958d27d6148f75c73801f232611ccca4bf6963234a414e47a10497b5e3b7c51b04da6352b404056f85798abfc62d6b0beb3c873705474a86c43cfc0ed4782396010a11ed5ec1af21c481799", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={0x0, r11, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x22}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x408d0}, 0x4100) 2.931976484s ago: executing program 3 (id=2203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0), 0x2040, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x5) splice(r1, 0x0, r4, 0x0, 0x80, 0x6) write(r4, &(0x7f0000003300)="ac", 0x1) write(r2, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x100, 0x0, @dev}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000008c000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$tun(r6, &(0x7f0000000080)=ANY=[], 0xfdef) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r0, 0x0) 2.31650991s ago: executing program 1 (id=2207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x7, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000a4000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r2, 0xef, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000005c00)={0x0, 0x6b, "e90bd4126a029d6d30db6eba78a916efd9b9df66017fda96e042a843a3b13ea4a2d8f4fd215181afbe46ac22528f98309f4458af49393d8129bdee87dc2c218b92391a05d29546ebbe872a6bd14ad4091a127b0067f80801d7772bac1e2ae03cece6d5c9376cc5b3bcb13c"}, &(0x7f0000005c80)=0x73) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000005cc0)={0x0, 0x1}, &(0x7f0000005d00)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000005d40)={0x0, 0xc4}, &(0x7f0000005d80)=0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r10, 0x1) getsockopt$bt_hci(r10, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r11, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x5) sendmmsg$inet6(r11, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000240)={r13, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={r13, 0x8, "6609fe5a78c1a940"}, &(0x7f0000000180)=0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000003800)=0x1, 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000005f00)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000000c0)="33d6b04bae2e6a7c29498f4680b08f8776ed", 0x12}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000100)="8e8ac3f1a5d307dc477c501917e4ee729f093322516e5f02293024324aefd8f3a60098d877bb", 0x26}, {&(0x7f0000000180)}, {&(0x7f0000002500)="c594ce2514762eb24b19e82fef75528c49775e0f19553e4ed190dcaba586161e935a21f4fdf7ed609816f07fde59c454da6fb76ef6ddb8a6f3fdd99f83fe19a402db783e67ecc852d0c5ee00eacbc4e029a74981468a1db7bda338f037193f67f604f33a76f916a02fdee553ed397d5438f5b29c1d2be9d68f50e3d2554aff58786bee134dad9638f3340dc92f9e48758e69c2a7547aee441b296e782c4c48a121d71635e67a43cf30cc0b3152c80b30b9b2312e3333794afe67d5bb1b3f536a9a9742c1e6f874d3c849f70c4311567047c01c1dac2810ce301d2924655d708e7338f30de7a0a85e86fe9106d3686f11efbb5f60aef152ff6ac8dd1f36240e9ca2a259940a6c3a18e8f00cc4f3779022585d0b6467d23706c2e7884d4f559645aa5a51d7dca3cf60f3e8f3a6d1273971d177999599a07ff25bae02a87c532529a34d9999fe2179a1a0b6a4c2ab1d3778e2d20b6cb0fa50846a0a38efc852700f960b7e3c468d708fa13e2cdd7f0f451c4314d7f87af26c14cb91f4f96f759cbd94e1d3815170e2ef3dbe23bcf165f4694524c4532231f0b1a81ade48f7af4a8c5f44cd3769943476ef1d3911fd75aa3dd6e96d766f1cb677df1ca56064d80e213ab2dbeb15ecf00222e1d5af6e240c77db495cc016c793e898aade6a31cb75feb8925bdd072176e6fd365881e712e0ef3b9ccbec65ccd6f444272e295bb2d774e393f744e8862a2e8e6a9e2deed438022f0f72747b18d0ce8dd346bc058ad17797a167adc14cf8268990bcba324c3ebd777880df619f957534fbc53b2322405055c0e9389fcdc3d060bab02cd8a08570197b413f9a97faf05c269e320a1f42fc0cb1f820e2dead9c9e533928641adfb987f51a989184db411f7eead263962dd8766508d4f06853052abc10d35233ca762c4b50c95f0a17d5ec175ea6bb0b09f644bd632b40eb83c076971bc913bb907333a9c513c2864cf21a280e702b3cdda142ca23e37086bce555c4709299e12d4716ec4ff917fec37f5205b42bf96e7d84e3ca5daa6dad00871da6740e097a4104677b39b058f56591106baf85cd30b301c752d1b166a99b06c14f5981f166e2912715c22b7861d129956326b96d423fd29a71d1586cf0eb981885df8acd5cfa1837b3bf13d6d11a2943b3b52217a3dbb2f56b85677f09fe1c73c60198a49234300bb520972af1cc2e983ddae751e73c2712730f4bacd4b0e2e169eb92a99b429a59171660f31ae56f8427a0897dfb608a13d8ccf73c61e5ce2a1325bbf99d07ff500ffba1756f5aaeb32d648d26775d6dc4c5e54febd8abb88c91da09c4f383ecc9502914259070eecaae86e41b83cb267eb1e50ca03215ee3046058d7f705821b519c29ed5dd9a88764abddf08369fc128e96ea069f9ed013e76c2a690edd7c2a8a71d80db5e5ea8a1fbee6bbd5307a04934b2a3458d6c55af497dacfb786e8aeb34c941cd1c207b2366b0bd5a00881c430200d7186963f30a6b1395de79b91a1cf631e81f00d88343f6ef1155435ab3aa9391c7354cb8185f9b349c35f892174ec057eb3455fe4343a2ef5c4a7b0718c303fa091e541f5b98376bc9bb89e96b3784e78b647ca23db62725f01c7b12d93cc1c5d8acec406fff40e1d3d5bbb8d80294b82d97d1d619c9ef4e48dd3aed5dbf3a489a6f393fbb6864593c2dabe777e806057fe7e5c908de2ac3e42906ef909ec2700cf3d22d0f4204d7eafefb3d531b994977917c74356c1b186923ad49cf86beeeb20728e2c444871d1013d3adcb0d79b3cdab81cfda189c1c7eb19ae41c800cd25d6c5f1fd53fbdc402274ec73a490e477429927f877dbdbaa8e9d819b0540f1739c78a02753f93f94a9f87479e0992fc18d5dbe8b6f9bf960c035bfd9ce47aa09f951f87f529b804f98c9648c12ee443e9bc9adec8830f2102cde8fa59692072be94d05cbf939d23e1c32d0d2e2d862f736bf07eb5bfbff0d90bfa5c83dd08dd547b4f15bac295b1f34d1793498dfcd59ba9c6158422b463f976b16dae4388fb373796ed4ae0cb87f2db116af813e0d2728c3c67d8f8424bab246ad3faeaf851b15397c8aa71c9bc6d7f6ba149a8b4226327d842b136e38d54e65e85512ce89085d9774b9e4892d611062bac9ade8260632162d696f1a914448871407291f2c99fa556395b6bf2a6e1713587ad6caa20f8eedc4eea84c5a1e086f37446ec2f1be8a73f80b0cd824b3a1942f9cfca16aeed16611278bffd7302803e48708877336511c3dc272cbb6527fada1ea64302fa7cfdf3c829f01824c24d933791f5e187897629f08d1200bb1c7a3b73e58d326140dbb44b8026435b7ee14b4a51312e5d47dccfe38820d254ce52c415797a0ef0fd5453d259b1b2a70736a7ca3edd1ec30ae861de7520575198f109c8bc6f9b73308d35d931eccf28d26ee2292efc0deaf1c7ab97000f640b07350dd60a7fd284b62ef6d47ed296bad9e89245dd0a6d8cce50674741f218b763109e3788e5e4162757b091158e97dab44cf3886cd4271ccf9c601d3ffa4be642f06fe829789672b0846e5f17852fd7d0e761c5256fdcb713cb1cec91ee5bb0a0dcc34690e035a6ad651b74edcbe5ec6fe762117f8db8c9b615f9265700dd0e87d52e0a55ea3b45dfe6e09ef5c4493a16c2def69fb3165f66dc1dc908e6b51a4b1015ce81a03d55b11bf6b06e4bcca9a5f494ecc8f5a56c28cadd2a8b14208efb0529ea53e42d463322c585dd48b6df572a5061f9f31bae861ddb49fc11b5ab349e7f68f922210880a5c62a628441591e81eb6232dce1590700eaf56ccf10b1ebff7c1157b42b8055e1456056bf003d16029190b3125c26ff0544b19614838908f07cdcd3d9df09369566eb6af655122e147e4d7a10e11c4dbd45fa71e0168ab6c6b6ec9b4da699a90b0439168146f60aadc36ad321ca48c6474d19d0e1429d573c89aa6eda9240deec0dcd22747caf96ff6215727971bb8024b0babd7fa2f7f29a94fdf001ed1cea18ec8f1701142296f815a09b48b3dbeb36203c09e86b2aab4c498c624ad40e4e432a074dce8796a03e855bbab0bc26fdf09ca77ef09606c2e7ed63b6dfa392828add56e98987220e394d9972cb179357f7ffecb298added93249f6a5fbee97ac7ae5043a143677f9c7d5105edaaaaa7fa995543d63405dd45af4d1f0653e2134bc4b6a1cb02a8e933749cd428511735c24c5ce802814ce90db170b0bc2035a7a53d89d6249bc8bc0afbbbab9f19ce9f29874db0bc148ee0437dd3abc168311aa829777e74108e8f999f0e4e9a937976155a204497a8d4d2b1783cee9a5a58076bc1ccceb679c1b85e98166b5dc67619146344fc03b2ce0bf3536eafa578f981330b6c648555a5743e52301d1181ebcb84b352c8963e7571206e03f1832ba635f5a9537c239bf3b120c126efc3f01e7d96a2fbbf6a87e27726485163cf057698b1865897364dd05ee25f96df06ea859a87bb03556c7970ef73c44a383ae10f7793895f4b1fbd3c4a0b829e8a9bb5b5473c943eeebef2f81880e9557b09c305bc6755a039f0a0ce6516846bdc695d167ec12e6d77e3c3e2593bc219db170cb459522aaa21637086cf9e03d10ff26708977569cd4af18f5f0293f18b4dcdaf91d8eb9c2d6604d1b666fef990f179d6f8b1194780446f8f2f4e875aa479814298c79a6b5f9c449b8a44fbda837e146cca585bb6eb3e16ff1a40c01c5544094e69df6f7329e45164d5af43d82b1fbdb73dc56582b27a75edf101dfad2bf4e78b1c8c8bd844baecf5af204d670b360e37a81abad73661904d616779bb780488e80e0d4e638523072571527d479f78fadabd78e3cd32209165ccfa08222ea6fde8a9372950ac8366be92d060ddde0ec3789fc2d99749fdc1c257e10ea458c327dcaa9989ed090bc7386d0c00d6a50076cc32d4c621dd9f43510cfce3fccfc9c6a2753f1ca68d060065f4d5fe1569369c903233c950f5c3bc316e19e42d7e20cedbe1c035d5bd7e9e590eeb8ff50778f878578c6240d003aa1aaefc164c1897555bfa4475dff94b47086852c3243edccaa8786b13e743622d817498066c9b4fae4a147f95e58d0fc9dfab254c7bb7e46dd7ed8356bd23e608d045191d2783ec77fec1d5feed01268af47d9a90ddebb688510121d6ac1cdc63b1c860a88a45a590663f13ec7795fcdb6205b00f8026c5cafef11260936f98d5c52174a5dbf744e1e46be0744021b77646d9fb5c383f4028e9b43dea7c1942c1ec2fc33e74cf612a79ae956c2d136d89c57388b225841cb3465a314c759c6383a9bf8344623a6405fd64e46b1eb903dd13bfff4c8acbd6a45c4d0cfa1ffbe97f715568aa385da427ac07d5bd18ac0580e87b69ac72a819e674231e6464b46c7186718fd4d560113bfe34bee2127ac0a4687fc580721881f46bcacb62d347ed1f3961a424dd0f45d98f01da95be08b6e2a441129bd77c8da6a6e189d963308e8f18e24f26c7c985940fa0d91f842338b7bf474412be28fdc370afeb2d8f2160a5aa42f4f545477d0921289b9d36386167fe06c43b3c085a125ace9acac7b5acebf5b2c5dc54d4200424de60858a77b0fdbb64754cd0eba4fc2fb9d17326ca97a57748a998782d26db456630062f36f638610c7d2a39aadd98d284696c928eb3baeb3cfd342a2a1d04c143a8a4c198a398f50c2cdae3db353eb36648b19d4f5a799a0db8217b21c9bf5d83665d96a362981241c6467837111cb76ed16d07067dd7e8c98a0df535dfe6811dad0b6d707b94de82826679e5e6ed6ed2fad0cfb1ce21b15563b2403bef2469aad761efd95843040f5fc98e139bd60bb2cb3b8b81b4f840be35300a083b598877176f96d1ced78df462342e30b20deb9c1319ef87cd5356bb5d802b557e49cdb525cb16ca78791e0d062924121225818c4c82e0a855f2ec860d20c67ba6a426ca547057d77f8c971aff4194493207f1b8351db970809142d4819cc0cd5393ce05b8be745d459c2301e987842ea587dc773cec230baab800c1a5077fef4b43c7f660e0f29f6a25b0ab3c8d5aeff51c05d3b43c045a7e68ba79b1f8c228cd299aa3ea98e354c591439559f060bb5aa3738b6de276d9654ec7e5703b15d9618acb4ccb0e807490334b617baf9211f91640c25a12a7d0f4255451d6e4a0ddebd442533e1999d38ed1e1a0a1ee8e16e03b717694f76dd958c9a87ca99817223b37ddd17fe3d781129d73ba6aa7e813eebf7ca6db8c13f34355491dc947a43f7cb032aa7e3594b03c25c32c3bcf98bd49da048927f912f3e9a1dac221e32869fb91275c11fa9b978afa43ff21e4ad54125d85a0a3b7a0d666886ed631b70b19ed41b8cac7c930f2284fd886e73fc5ce80c433a93337efe4f2ffef18073ecef127c6a0780463248473a8bec50cd10fd9f1960252b12896af7b6fd8867781518ae429fa66694eb3c55829dd3fb682d46724fcd36c1711538b0a3ce9ed3dd21d87869019a3919d196d11c65b450fb9e5e372341f24a96d9d442f7b604895a5d9bf16ba69f9672bbb4b69f921712cbabfd61c9f4a9b14db58e44d28ef99d21d0047d64dced7c42b9ad0716b1b7eb321df284ef2a6bf4e86fa4558fb66fdc85fedb80a7fcd19a2490c8f9811e7db74432d9b2ceb833d7b3de752d1ed8b36de8c0b87d1a374ebfb17d26b46eda13a8baff6b44ff753f297ad8c508fdbb8793f3becd8ad9ad4ad003a897fbdf48cd10a6ff7cd27d8dddbe4b750fe458efb3607128534084e8959744a02585e10fce5312b40e126a", 0x1000}, {&(0x7f0000000240)="ae50b7a77602ebbf5c34cb67e186056d31900062c028ac7d81bda9382e5d22f8422bf34669afe5edc874037fae2f29c2a9b7e99272d4ed364b1f0c30f6307568fb4a8c4251297f05c8f9931273a2a7005abfd0769e0269cc5e085dedb2c9e1e257b8629b42462d369eee38cffb7333523f8301e7580ce499a32c86afb49c93cba3b04f02f39509bb9d90b30b30a3f61bddefb8a88a46ce2ad6a71d6de5b32273c4a19f0b4fc73ceb02521096f6f4ec14705017634b38e3d155ca2fbc3531a19d368e12b24ff5a5ad292d231fc2dd8c3e", 0xd0}, {&(0x7f0000000500)="efdf3962321174fdb882a41b039243ddcd507025618beaf747d5a735c1189678d2418ab3705afcfcf1e0cd7b152874debfa38d31ec869954c825e0574e7967c9674cb6f50a093176f0403c9041e83ef669e9ad8cc8ed335b7d54bb0a9e8c514e7743f11e58e9245d0fc3e9c35c40a7071990635460233b32889bfeb1bb9a4491c6cd3e794d15c698ac7399ceba89c5b78673276ae2e176b79f8c593075ce940ee53815429664e560889d3235a4687733a5b6f7dfc1ba7ca5efb14fd5ad9d3a826c67a8e60459fbc7d74c22ee8df4b132b05e8fcf288771988913844a952e79583f9e66da0897ffb3da", 0xe9}, {&(0x7f00000003c0)="3acaff95eaf245d604a15a47939822aee356e395296406e1d7ca1cb112492dd175ae0b4879a54f16e830edf5a5b5543e3f935b3d5eeccd286a93649cc6ff087fe89f8ec496abf4f89b30127a17292f8c2c924e294c9ab735ececf2dd533d6409d1273e70c723d349e8c9d7bc4f9d8a0d94e98039d5b2b6be32c86905d80b317955139b35a667f7528f813d65e1f8598008fc652de8285fb76615324e9d1ecace5f0c52eb08", 0xa5}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="3eff69fa737d761948c7d6ba37bebec30707f8d16eb6c4b9ef3e41f411253ae8921efb0904a0064dddc3ef391e69b376ec2f677728f87b233485626b9909ce045167134f489ad1e2521589f0", 0x4c}], 0xa, &(0x7f00000001c0)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}], 0x20, 0x4000}, {&(0x7f0000000840)=@in6={0xa, 0x4e22, 0x6, @local, 0xee5d}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000880)="e183635a5cf0719de4d69899f5d618bb4b06d98b8c16134d31a4721b7a2f567405a5cd3e60971712628e9d005d28d76e5fa26df67d3a7204f200314f2a707e86326026e7efcfa2e455a59267a8adf367d2f8ae23a651ce657f24172e7ccb235bcd023f507c0d8ad3a0176e3548", 0x6d}, {&(0x7f0000000900)="9232f821fa15253a576e42abaeb986b0e3ff29921fb1221a6b29b698be069658753b9f01f7a627bf88ab473830ddbd37d787484086389dde0b07a68cdec4486ff8c358a36f", 0x45}, {&(0x7f0000000980)="c7e36db0fc23d41436195c6079f996a115bb43f82994496f817883209ab24b94f9c1351984b5b16e126831eea50191b90310e5b7a4a211ccfadb49f938367bf9bc9c084ac855cd8099f6f50cf810d40b6ab3d36c69c3640f34d561bead6596eb4013017a60a27238e103d7d0b509eaa934de537108896ad16828ef1a038968cadabebdcee5bc732a64c744bb8891d5f8d08f79271ff91fcc452545e4b2d6bc98ba341fc48fb3", 0xa6}, {&(0x7f0000000a40)="c04a43ca8cda8dd341a37fada4aeda9b16b2a4b730e149471903fd83a22dc41d5a36d95461a24b630f98fe50aa4c419d00ef634a11c1f1a931771cf88db6df2241fe5ba6f81f6afeec0b6149417dee027af80c51b4889f64106203536e033c288663306abe025c7edf2e8a70adfe545428ab48ece870c7bb7c68cf7658dbf7e3ef21fffbbf83c1ef45ff35837e282fe42bb0", 0x92}, {&(0x7f0000000b00)="395078c717edaf7610c891b4ca873a2c47a034a42e2645d2596d86e6d3b8fc312e3dbfe1a003d3e0eb5d8b580ae72118ff9fba4564698eafeb0d0ac456ec5aa553fcb869a1c708a20b3e1a17d6fd1d4e2560e784fb62b669a717accffd7a18", 0x5f}], 0x5, &(0x7f0000000cc0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x1, 0xa}}, @sndrcv={0x30, 0x84, 0x1, {0x100, 0xaa2, 0xc, 0x5, 0x7fffffff, 0x6, 0x40, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x6ba8, 0x9, 0x59}}, @authinfo={0x18, 0x84, 0x6, {0x80}}], 0x110, 0x40010}, {&(0x7f0000000e00)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000e40)="fa316395ae257c504c669434dffea28cd39a21ed8569ba3a07c45d57", 0x1c}, {&(0x7f0000000e80)="57cd1de6e2d95c44d028114105f104e852f98018865e66e7fb85037633fef242155bcfda638428c59b95d8be7d11575994e9913fd8fa07b58771caf3b1cb2aea2123be9c2ee38cfa9e791f539c4b0f0b143e5426d643b3723655b7b2b7590f9fa906066fe8976ef90848fce0446ab4b595bb72e2b91c73b356a0388cba04297b60652535e5989b41f9ad0f9f95d8a67a945ab906", 0x94}, {&(0x7f0000000f40)="f309d91aec0a29badf5a83c7df0f32babd627f6843bce0047b2e6d92abda67c5e7c7819cacf0219b8466b4cdf280265e7e673ec2ef557fddebf70c69bcfa6c8f2607f9f242e3822e1aabb33cabc45e035273f06c3a2a314cf74a60254563661b850ea7196c7f8bfc178708a1176657462885f826c3e2ac1dff13b0c56ac518a2cbd69463dee83ac38e2f50e988b69bfd1dc8e721a4a67ed47b8fb3e2304683c7c2d06d8904277a43aa46063f5395bf08eb3fee741fda38160840a8a3fe94d3926047c99b01a7b424267dfc42", 0xcc}], 0x3, 0x0, 0x0, 0x20000080}, {&(0x7f0000001080)=@in6={0xa, 0x4e22, 0x55, @remote, 0xffff}, 0x1c, &(0x7f0000004640)=[{&(0x7f00000010c0)="7d3a66fe7ca67157724d4faa20ef28417bc23ffd76bb3c0166a4a483979aa9b324c8cc2ae554bce07f12f4ad962edf04867a7813b93968a366c793a18935599542aa1f18b039835b593e4f7e61e0a2a8474122555e7d2cc11c1f0e087e77bb8891c69bd81df457fb711b735b440c549bde4b0794d4210a8ba333b9ec0ab2ae9668026e9af2a4e28fcaa28cf26949041dfec8946507b7ec0ae2c5775628f716dd3d9be889516b90b916fa0025a6a66e16388c6edcd336f7f175c11778de6b00180f3602bee3251dcf7de0282dd8ff7942f2034bcce9e7cd6ed6", 0xd9}, {&(0x7f00000011c0)="d7f0186389580aa1f2ac9c761ffe15c954c992c82cb6c40db433148f0eba46e76ddc40b99cc5c76371e740f0ebecba2d22edbb344a472e17c9a790927b30ea7e8dace9c6ba9b15db4986c75040bbcb7ac64a0de008db7a8383f4f465e78681dc440428e84c825bbc7d6deefe5ed9a94cbdfce8af357a36d91ddab4e4c07f733517fc219b55", 0x85}, {&(0x7f0000001280)="2d05f8c11cd626dcf64a6bc462acb3a502d7d4b27e38fb828effc9b61a468fc374d99c38f936de9354cf9a761705af5ebc8d29484498950d18c7c76b5cc0b7eae4e5a3e3164b8171c2b81e1ed630decb0c80863b6c52a6c484a9f8e106a5c6980e202e41529a067adef9f00ebf28a2814ae03da4d81ff88e841e27ff3b19c62e7907e7e01e9bc7559e7abceef7ed37f3dbb63bccc60986cb6451e65baf4d5b6b8c89afa343f0ea8c6b359f102626c9eedeb49186f72a3f50", 0xb8}, {&(0x7f0000001340)="fa22bf660950e0b0d03b1e2e7f51200d308f569cbd8f6dac444d82b22e2693f1c02de291bc55fda7dfd16b6e3558620c15f033e2eba3d970497ab3018e5269d565ea9c78b37f8f322732102994243f3e9d5e945457736a075e65c059bd779ffd8f8d2ed698fabeb854c473e592b16e035031925948fcdd7c03008cd768c8ad65dc20361e5f9840e882869317f6eebb700fad7e16166811a6bf032453ffe97e40afe57208fbc0637cf756dfaeebd1d844d62d0d3a9bba18abd2740b87102d8d9059112ec395262c6f0847651162d7883b25c7d07ecee66511", 0xd8}, {&(0x7f0000004540)="f1f04cb557fa8ae076885e6b6f51c7c72e2c71d2671fe71d2a2ea2837b25655a69c9f86c4dae4628e5ad14fb840f672057174f666dcbfe6e8c50f11d4e862dcba4066f6a8397899af88e6a2be4cb42624b06f7b85b1e77f2f046f0698db6991853db12981ba8dab79654d2e4c95b3535e1247c0e9d20ad19b4425a0f22ad581c8eb7400d06f83973709edd3abb471a313b2007847f", 0x95}, {&(0x7f0000004600)="b15a8dee239fda", 0x7}], 0x6, &(0x7f0000003500)=ANY=[@ANYBLOB="18000000000000008400000007000000e000000200000000300000000000000084000000010000000002aa0002000000080000000a000000000000000400000004000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000600000001800000000000003000000000000000840000000100000004000000008000003800000008000000cd0000000700000006000000", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001000000910068000580000009000000755200000e00000001000000da000000", @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000200018008000000ff7f00006f080000800000000d00000000000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac1414aa000000003000000000000000840000000100000002000300010000000300000004000000feffffff4200000008000000", @ANYRES32=r2, @ANYBLOB="180000000000f400840000000500ee000300800318080000000000000000000005000000000700000000000000000000fc217746edd053e7bd99a6e6f0c132f92d8675d48981c81e0e755f55c5c1d3cd44a02b5cfc1ceaefef812dd6b707e650d22c1a65135e4d1da5c2337f9d81853bd00043ac984c6e7424137dcaa1dfec2272f62e094b0596d79787b43acec105fa80f8e2263ff988d0f2f32e"], 0x168, 0x845}, {&(0x7f00000049c0)=@in6={0xa, 0x4e20, 0x1, @loopback, 0x6}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000004a00)="be34d862972abef88ea20e21e6149db5579030c67442a10812ea9a74ea500b17948bf34e0299b60731ce38f61314b955dc32d4c59ca90c879625aac008b137dba4991b7682f6bed10df5d6d3fd7fc736d7ddb507a13097052f2c2ab0f25a2c497dde10e08e375cbe7d95fcc1e5502517d3af831ff9807b66f703bd47d6be31543f7b6840e8d075113c68c87185a4f03186b2cc7ae58b3be988b7367b28d8d3159296181ebfd4", 0xa6}, {&(0x7f0000004ac0)="7bdea8834427d9444dcc9e0760a2310477b96fdeda11c6ddc02b2351df39fcef30fbb9dd37e072c3b25f70edf5623e96df925d0e7830c741f9ae4d82d63f9436f48fef6fd3eb9bfdba85d8b406ed97ee6c33a2dc45656e778bb136548f3041dbcd699fca6c9e1e18c90b209582dd997b0b26c08ac93b99e908a93693ceb914bc0d89", 0x82}, {&(0x7f0000004b80)="6fa0f5559be78f10dd4d44b1a93f29bc8d6830f71fc9c507c10e44ffd61db45b48932eee4db6ff1f2eb743a11aca710f149b271018bb4df637409786341ee77bc12c88add1a304b5e404f1c252f48528d6446ab9c404628c9e8e79f3e3abe33c266a6f7ff3044a3e156ee62e7d94ec596de0b61071a77868b8de2bc642fecea74cc2b33817b438034a6a4374b4a3221617b5c013d45b343842495927e75a7cbf091ed45a089fa8611f6b46f577931b1416413159bdd5aea63993adb866c664fba764591a60e996d1344ed17fa06fd4822d59b11e55f64aaf4a8df83e8ce96abecc075743f0dea97ae583f366", 0xec}, {&(0x7f0000004c80)="84002c24930ae99ab8532889cdbbfeb41fe29befd13101fe4250e96b74e98c35793f68075b0eadf1f492735bb7460b943960372e1d5ea652c0a518115b0b491b0f0107c80750e5e1bd17bd5951c300de0ec46b2b57d68dfeeeff4a2b31fa1e6ff39356b77bfcd33cbbbd16d329b965093f7eb2763f7f61ae6f1334b324b4eb5c1b18ca038bf575fa080f2363bc017a14b39045bd6c1713d8106ee80a56763458fbf0caa1c318a6eb95c1c80040369af4482dea654332cddbaf9f3a4c166fbd19ae13489a", 0xc4}, {&(0x7f0000004d80)="701e735bd30f66fd380c459cf3fdd3a261e990c14be4348f9f381139fb71391fbd365bb6cab02824b4fb5b71a77ebd5c57ede04f04b1ad6ac37c84aac8826742bde376d5b4ee20a206a5f7c3de8403f8dffcf6ea071b2bca76e4e623959d1fb3d83dd687ddfb63595f21153c238c34c2b3df8b81e08f5a2250f9a7d7c2e054b236820181e67afad6b5b92e1ad1d327e567be5793c880114eca1aa8ad74d58e6a5cb702bb57b4b26d0bdf9389ab52638be41a0801c77c69e32296a7afa9960945686f7e58348a416846a5af47b85042f59429c053c57e867289284eb755d62865091051056e3f745eb01a28797872661d", 0xf0}, {&(0x7f0000004e80)="b28a5235bbc2ca8c98a42948955a793d182d30c253fa3f1883c78d41e42f858d598950a35256a5ecfcac65a54c0b1ac8bb888de20337ecfbc4721326722308a19f2b7f544b3accb11c857cd9f1959a363a77eb0c292acc9b5904d02210a4dd4ebdca2c823cb71ce6291c9b5ab29f1990a4a26ee290c51e493f3ef587b5850d8ca8067e6a37db8c7bc65a78837f72fe6c84bf6c78c4e11c01fe", 0x99}, {&(0x7f0000004f40)="fd2d1c05f4e8ac49bf5bb6e553addcbdc29dbbe6e061837fc66eacb5987fa5d78cacada06d2f4041e7e74a479ae4b9005580768d64b80e87fd1c82cdd6cc083d5b050e888fb340d45c7848ad774e083523b3ace61aa4897e65814d947a0f2c632653085a7d37685de4514370dff47446a2d818e76cdc43b83efa407c03d7248bf6056daef13de11c1e6f12091b0fbc033ced3fa8f0158bcbb806e6eaaa69c4787e5d7902d212ffc23bfe28b69d878bb91207e4d0a2e06219489368b6175f", 0xbe}], 0x7, &(0x7f0000005080)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x18, 0x24000050}, {&(0x7f00000050c0)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000005440)=[{&(0x7f0000005100)="771544ebe1c456582fa21f3337fe234418d5db6c534d71356dd73b4166c6c98183f67ce1a3f1bae3084f4f655379c4d8b1d49dbf94a5eefc8c4df6aa54d04b369e59b0ca83347e699399a009fc876b27197cb4340bf86ef31331d8f6c35a90b620bb74dd078f6f0aae178a16a6627e4b76ee9ce10a40ae9bb6d7497f2afa08509d96bfde56c4b132ead669c3e5cd1c3258002bbde11aafe84626dad4a2ef2699e06af36684c6e37b7e4962c41e59c26b51", 0xb1}, {&(0x7f00000051c0)="ae926d6e9cfe54e0549e3f819129818fae7f7012865d735627a12e10eda815e3a0975af4151edc121f005b41a74da42edd4d02b3133aa365f0c2dcc2d882f017bb71c2736f847f6035f9653fcd3c49d663eb63696ada356dc59ac958d8ea384c8d80f0d5ac", 0x65}, {&(0x7f0000005240)="e554839f1d096b75a28dc45c42960207dcbfca99a3939a593060bce66644066c4c7d965f326374b64f38485dde1c1314f3940e40bd53dfbe562b3bfcd3cb752c84c2e2e4ab98efb2a190b7db6cd713f5f8c27644741ee890e3fb771c536e7240fcf90f5b08388c57c8eaa1321a7c46f635c379ae282a436d7ec4f3f273d2beb40b7fb1d533ad80a24b45d3be7043425da278bc2fd73b7001ee13792350dbc1aa7195a8cba17565444bc837f6ed017fa174cfae6be5b77d89e92bb7d9706bafb7c60796a25790812ecb0d739eac53191d8f22d880cc9e5311ddcf8ae3cf31a9b56f0bd199c5157030c0ac87", 0xeb}, {&(0x7f0000005340)="8a664be0622ab74b9ac3d836fd622ca6d85d2462225512ebf11d1c2f6152eef50d45a2fdb33be9", 0x27}, {&(0x7f0000005380)="4925dfab06676e411c1156695a35c1b292522ded0f218d032526a4869eeeffa4912bc01e5b60e6ea6b38468656013fc082ad846a9ff3ffad2aa806fab9860442ff12c524b2a71879bbc143f93af1008c819ddf7f6ba3d3c6b9c0d1c030a5f720fdb7e72d8010279bc680f91708d8f5c6a1fd2d878c13dbba3b77a7ca52e7e28c9ab939e6f0483a06b7332eddea4b1977915e1e283bdaf2680cefe01eb93e56", 0x9f}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f00000054c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000005880)=[{&(0x7f0000005500)="2e9484e239eea3824e63487af5b9c48728bc0db6bcb8eac004d7d7c04a092d32f6c70f3177234b5d7a1ec32d1b234b9308df058b61f35438db4843494884c09ffd00fe52720ffd27ce92b477247671cb072d46fe3e5b888e0187ed4bd9f2e5a9cd5f03f9d42feb4b4d7d2355c69c728f82c3fc8b6571c3e7c46290f5952bf990cdab8535911f708f4ecc41728231e47cdfe501ad47240324fba6d0c46f07bbb5aff439865ae78cd54b30ed3d8445c4710f1f4350200424a45c47594514c54a94241a2fd5c1b76be7964cf2dcf90153023f607d1d5b5263419a", 0xd9}, {&(0x7f0000005600)="94a5bd033d32c82e77a3fcd2dbfd73087a7196ae1aee611c4be95746951f5a252d7e6a142db66d162b477645121497418ed1746e8e3a1436b86c9b242499a81b3965fd07e4ca34c9e593f45bc1f3eb51e4", 0x51}, {&(0x7f0000005680)="dd675db7fc1898b0a1c6e6fa240924cb357daeb3f747abd1c2c474fb22b8ef6f56c30794f5c9a07f55999f2815d1c98ae8974f1f7e0bf9dca0de56782fa9248f5e3c6ad5929a445c7b0d2aaaa204c4fcf6cda35eb61dbd5dab9c998d57c1d2d2eef10da78aa30a62ac6bfca2c57126f2c281e2b5e931f7acc445ccaf6f756f2af6cc0690f0b51c4e87dd821a2b936752753546e8d6bef22348ed7319646f25307e9053765b18b8aaa719f9764698f452af6a08831715d967849996e276474dd67df9f30c27b295fc5e5d9a5288e5156a74d4ae33dd7b8f4f6793d64153ad8e91b0f436672e34206c0cb311c5c91ae4", 0xef}, {&(0x7f0000005780)="b1bc010b547eb0bf52e20129ae370d9cfd63a7cfdf0ed2525109791f75d757e9563ed6b657ef2025c04ae8f340a576d1facdfff9ec40a51060d29dd3921e04daa64183984ceee29d1495e2da58f146f54d0cd869cbfdb3779fa1815ddb1a576e6de1f9def7bf7a3f3a45cdee98cddcfb5905520a5598a6efe6e1121761cfd2ec4480b788cad9f561e22018373c2e1f097f211072bff834b291a6a2551f3c89fac5dac0db0069ccaa3248b79e22e91571c0ab599aa6b786d9e208455d00f3dc03c6e495cca70776e88c", 0xc9}], 0x4, &(0x7f00000058c0)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x18, 0x800}, {&(0x7f0000005900)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000005a40)=[{&(0x7f0000005940)="f3b488e02c4c9b1e984d572589b824cf37011feb97c0d8ea069e41b3acdfcaf81e991bb7b8fe8f0bc61c1c24afa6e70c0e644dee02cd11e788bf2deb69d6ca7507a3a2bb0b455bcc7b10cd8fc5b9", 0x4e}, {&(0x7f00000059c0)="2efded0e7a4beec853086e5ce4e82615763efe553d52eea41141205918105fad1fbd71888bb94efb", 0x28}, {&(0x7f0000005a00)="bc7bbf32a0ccc48df19ec9833c674cb881b5266afa928f998661395f4ef2bacd4a8aaf504cfddb185d1bea099a0287b793d9813949570820729589f7f1", 0x3d}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000003afc568748d0e6600840000000601000009000000000000001800e0f70000008443f79d0900000007e30600040006000084000000050000001005000000c600"/80], 0x48, 0x40}, {&(0x7f0000005b00)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005bc0)=[{&(0x7f0000005b40)="1a6601819fc8fe1adb05cd7c595cf2cad248700310020fbeaf66c7b2009fcd5acfa0fb8d292568d80ad93c5a2ccec04300562610d743c3d0b275d6a4bb6ecc8eb82aff21e7cbd18898af872ed695abe45de3f2279c", 0x55}], 0x1, &(0x7f0000005dc0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x4, 0x7, 0xd, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20, 0x84, 0x2, {0xfff1, 0x4, 0x0, 0x3, r5}}, @init={0x18, 0x84, 0x0, {0x7, 0x9, 0x3, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x4, 0x3, 0x6, 0x1, 0x200, 0x40, 0x0, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x800e, 0xf0dc, 0x16, r9}}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x4, 0xfffffffd, 0x0, r13}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @init={0x18, 0x84, 0x0, {0x0, 0x1, 0x4, 0x26}}], 0x130, 0x24008044}], 0x9, 0x44040) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="14000000100001000d13bb0e000000000000040a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000002080002406cb100000900010073797a9ec1614bff646e4d0073797a3200000000140000001100010000000000000000000500000a68d402a0040e08d5b9876718cf472d8b9fc6e3233182062313e930779283db85633293881c77b6cc23bea3adc436b7df1f9091049e95ec2c24fc04c3bb3eb8717f1e0a2055709aa3544b41b2b98a7691779354b634e1491426e88fb1ba2358"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.237735454s ago: executing program 3 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080002400000000d08000440000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x60, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005200000000800290780a010102e00003000b019078000300004cb10008efbd0040068900060000000000000000441c0b008000000100007fff000000050000080000ce000700000006550dd140f821"], 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x30, 0x4040001}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x9, 0x40000006}, 0x3c) (async) unshare(0x62040200) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffd62) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) 2.235036644s ago: executing program 1 (id=2210): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xb, 0x1, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x8000, 0x7, 0x10001, 0x7}, 0x10}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x538}]}, 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x4743d90161058b74) 1.991876999s ago: executing program 0 (id=2212): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r3) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) shutdown(r1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.912196522s ago: executing program 2 (id=2213): socket(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xe, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x6, 0x3, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r5) r6 = socket(0x1e, 0x4, 0x0) connect$inet(r6, &(0x7f0000000000)={0x1e, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b8200400", @ANYRES32=r8], 0x38}, 0x1, 0x300}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r10, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, 0x0, &(0x7f0000000180)) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x9404a089beb68200, &(0x7f0000000340)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000953d515500"/27], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) socket(0x2a, 0x2, 0x0) 1.864091385s ago: executing program 1 (id=2214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005e", 0x28}], 0x1}], 0x1, 0x40800) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000002b000701feffffff00eeffff027c00000c000180a7fe0600ffffffff100002800c00"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.862942644s ago: executing program 4 (id=2215): syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0x6f, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b8, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x190, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04b6362058a51ef356f4a43ab0f9edc8b4a15afb4876099b559310bb5c2ac4b8"}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 1.838703642s ago: executing program 3 (id=2216): unshare(0x400) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7e, 0x6, 0x10, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x40, 0x20, 0x5, 0x5}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000000"], 0x184}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r5, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)={0x4c, 0x12, 0x400, 0x70bd26, 0x25dfdbfe, {0xb, 0xa3, 0x4, 0x9b, {0x4e20, 0x4e1f, [0x7, 0x0, 0x40000000, 0x7], [0xd, 0x4, 0x6, 0xbd6], 0x0, [0x4, 0x3]}, 0x4, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20008000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r10], 0x20, 0x6044}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) 1.771794496s ago: executing program 4 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c) bind$inet6(r2, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.651770449s ago: executing program 0 (id=2218): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e) getsockname$packet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x14) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r2}, 0x94) 1.625545331s ago: executing program 2 (id=2219): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000009244a22f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(ecb-camellia-asm,cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e80), 0x0, 0x20000000) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000190000009500000000000000002f853d58122572703de5e00bf3d3b959f193eee057369f1fb580e4833c7cc15ac634643a91747bbd6ed004ac695e75d20a712489b82d7d682f4b880c0a0e9a8600cef9f9401503cbd0736b5476e9d4efe50be06bc060bc674d46afe74c92a17e14f1f0d691675d7e38bb7d2d8a60a1645dc02a02a1a450c38ba4"], &(0x7f0000000440)='syzkaller\x00', 0x2}, 0x94) (async) read(r2, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000ac0), 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0xc) (async) accept(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x400000) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="800009e922", 0x5, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000001077a0000000000000000"], 0x10) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r7, 0x0, 0x4}, 0x18) unshare(0x62040200) 1.600243984s ago: executing program 4 (id=2220): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0xffff, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 1.508048344s ago: executing program 0 (id=2221): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x0, 0x0, 0x100, 0x6, 0x7500dc}) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x8e60, @empty, 0x2b74}, 0x1c) unshare(0x8000400) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x33, @any, 0x4, 0x3}, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x200000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0xb, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becfd64dc90bc21470e441225642855b5f2faed4a10400efd5f2e2f98328de9441030000000000000000000000000000000200"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e5f, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x2e, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0x127) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)='O', 0x1, 0x40848, &(0x7f0000000280)={0xa, 0x0, 0xffffffff, @private2}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f0000000100), &(0x7f0000000180)=0x8) listen(r6, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x50}}, 0x0) 1.433232677s ago: executing program 1 (id=2222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@generic={0x44, 0x5, "1d856e"}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "a356ea3f9b2bb182413a793d7ac5f9eb6dad168e73a5c70d", "fce73746a15971cb959fe20c51af61d12c7a7085fc38ab3310edba533be5799f"}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000) 1.387703409s ago: executing program 0 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x24}}, 0x4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xda}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1.139890907s ago: executing program 0 (id=2224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1f08358d1928aa0f0c05f3b1b37a0038c431ccf9772ee5bd561c468c91d30ec3802fb15a8b182efd737bccc62da", 0xb7}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add063962cfb18feec5606a6d2d2a79f2b05907463042de305fed3e1da822fe93d3a5474", 0x83}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)="097647d70e8eb61d9c0101dfcbcc94ba4ad4589bd1784bcb2faa9f159763e05858957532c85b5ada5cfe41aaba299f671c16810c0ead0ba644fdfe7c95229a8f4e260fe1e913d4190221718fa46e12b1412c8fc1af935e29a4f89a573185e21ce8a7cde5294350c22fae2eb2e2ba9f32abc6e1c7d9953cbdaffad1aab9d90c7e8c8778dc561817296b8e87ceaf8ad8aa7803b69b2fb973a2dabf3e1c1bbdec450eacba54852050b7cccd4b38b89d0583cc0e232e6112287f7b818ff092f4ef7f2e24d1089715b7b6540287963be04ee6f395d981321fe564d7900fab1711a16fc782168be279a8a62beb70e1838edc28", 0xf0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000700)="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", 0xd06}, {0x0}], 0x2, 0x0, 0x0, 0x20044810}}], 0x2, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x3, 0xfffffffd, @remote, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 1.139131694s ago: executing program 2 (id=2225): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x2, @dev, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socket$inet(0x2, 0x80000, 0x5) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc814) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48041}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="920d", 0x2}], 0x1}}], 0x1, 0x20040000) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') 826.991194ms ago: executing program 4 (id=2226): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x2590}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r3, 0xb9, "eb678b415694b926bba7cdf949ffb8f1909807b9aef4e7357406ba7a9ec1a44e1cf21a4c5d4c9fc2ad257189b12c63ab46ef89e70fba2730eadad650c3378c4e4d5eef21e16530727a71806896ca237d7e8a8edf54623fcdc3d7108e5a71da2240ef9629031fd13a0e5daa53b2e4b98c9accd42e64581784392a88d818dd4afe589e41b970c6346709227c2b4751d7af28523f5bbc85bec90f4a367f59ca96989b3b4184e054c90c940f7df9875573020e361fba9a5bad323f"}, &(0x7f0000000100)=0xc1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "0934f5f68656995c", "de75bd5e941a37bbeded21b90e4d6fb6", "356718e2", "f755f8e11b03703c"}, 0x28) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r4, 0x2000) 753.153126ms ago: executing program 0 (id=2227): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010c2e807e2000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-blowfish-asm,tgr192)\x00'}, 0x58) r4 = socket(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0xc8, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x14f756a8727d18e2}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xc8}}, 0x8000) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 620.150207ms ago: executing program 2 (id=2228): socket$kcm(0xa, 0x922000000003, 0x11) (async) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) (async) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011020000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0x2c}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 369.080626ms ago: executing program 1 (id=2229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f4e"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) (async) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) (async) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x40000000, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x3be97}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) close(r1) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 367.239581ms ago: executing program 2 (id=2230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x5, 0x2, 0x10001, 0x10001, {0x1, 0x0, 0x8, 0x8, 0x6, 0xfffffffe}, {0x9, 0x0, 0x0, 0x1000, 0x3, 0x6}, 0x8, 0x2, 0x3}}]}]}}]}, 0x74}}, 0x20040054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000004000700000a20000000000a01020000000000000000070000030900010073797a300000000034000000140a01010000000000000000070000070900020073797a32000000000800034000000009090001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4008) 122.131214ms ago: executing program 1 (id=2231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x2, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r5) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xd3, 0xa0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=2232): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x891e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd603000bb00102b00fc020000000000000000000000000000fe80000000000000000000000000001c7e4711aa00000308000000000000000000089078"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="4a00330000b80100080211000001ffffffffffff505050505050550008f38a00102802000006020202020202e0ff2d1a0100100200000000000000010002001600000006e303000000fe000008009f00040000000800a1001f040000080026005014e200050d19010800000005001801160000f6c3cabf2f58ee84ee6a46aab6bec905147029bbd2f010cf27d98188b4fc0e2d85ed9d8b5ec079da3a"], 0x90}, 0x1, 0x0, 0x0, 0x6a845ecb4f243e70}, 0x20008080) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001740)=""/4085}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) kernel console output (not intermixed with test programs): uid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.816" name="blkio.bfq.time_recursive" dev="tmpfs" ino=940 res=0 errno=0 [ 216.692754][ T9600] siw: device registration error -23 [ 217.035644][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 217.081196][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 217.331812][ T9624] syzkaller0: entered allmulticast mode [ 217.568609][ T30] audit: type=1800 audit(1756651597.050:11): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="blkio.bfq.time_recursive" dev="tmpfs" ino=863 res=0 errno=0 [ 217.715230][ T9630] lo speed is unknown, defaulting to 1000 [ 217.746102][ T9630] lo speed is unknown, defaulting to 1000 [ 217.752430][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 217.776536][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 217.788124][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 217.814409][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 218.108597][ T9630] lo speed is unknown, defaulting to 1000 [ 218.138701][ T9656] IPVS: length: 209 != 24 [ 218.213842][ T9658] IPVS: set_ctl: invalid protocol: 255 172.20.20.39:20000 [ 219.030103][ T5872] Bluetooth: hci1: command 0x0405 tx timeout [ 219.126743][ T9690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.848'. [ 220.133106][ T9749] __nla_validate_parse: 1 callbacks suppressed [ 220.133127][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 220.193929][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 220.401119][ T9762] netlink: 164 bytes leftover after parsing attributes in process `syz.3.869'. [ 220.499751][ T9766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.870'. [ 220.521811][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.870'. [ 220.685253][ T9778] netlink: 'syz.0.873': attribute type 10 has an invalid length. [ 220.693590][ T9778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.873'. [ 220.705839][ T9778] batman_adv: batadv0: Adding interface: virt_wifi0 [ 220.712977][ T9778] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.746882][ T9778] batman_adv: batadv0: Interface activated: virt_wifi0 [ 221.059873][ T9784] delete_channel: no stack [ 221.142467][ T9782] lo speed is unknown, defaulting to 1000 [ 221.149682][ T9782] lo speed is unknown, defaulting to 1000 [ 221.302183][ T9796] netlink: 'syz.4.878': attribute type 2 has an invalid length. [ 221.310305][ T9796] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 221.318362][ T9796] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 221.393591][ T9796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.469766][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.879'. [ 221.515410][ T9806] ip6tnl2: entered promiscuous mode [ 221.820990][ T9782] lo speed is unknown, defaulting to 1000 [ 221.835587][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 221.845971][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 221.894753][ T9815] ip6tnl1: entered promiscuous mode [ 221.920584][ T9815] ip6tnl1: entered allmulticast mode [ 222.570764][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 222.605368][ T9854] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 222.622618][ T9854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.722297][ T9859] batadv1: entered allmulticast mode [ 222.736792][ T9859] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 222.791342][ T9865] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 222.922497][ T9871] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 222.991293][ T9878] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 223.017785][ T9871] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.075871][ T30] audit: type=1800 audit(1756651602.540:12): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.902" name="blkio.bfq.time_recursive" dev="tmpfs" ino=951 res=0 errno=0 [ 223.146065][ T30] audit: type=1800 audit(1756651602.600:13): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.903" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1026 res=0 errno=0 [ 223.475816][ T9904] bond2: entered promiscuous mode [ 223.480962][ T9904] bond2: entered allmulticast mode [ 223.486476][ T9904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.603680][ T9908] wireguard0: entered promiscuous mode [ 223.625364][ T9908] wireguard0: entered allmulticast mode [ 223.738715][ T9919] netlink: 'syz.2.914': attribute type 10 has an invalid length. [ 223.759125][ T9919] macvlan0: entered promiscuous mode [ 223.777967][ T9919] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 223.860413][ T30] audit: type=1800 audit(1756651603.350:14): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.917" name="blkio.bfq.time_recursive" dev="tmpfs" ino=967 res=0 errno=0 [ 224.983943][ T9985] tipc: Enabled bearer , priority 0 [ 225.046125][ T9985] syzkaller0: entered promiscuous mode [ 225.073966][ T9985] syzkaller0: entered allmulticast mode [ 225.078728][ T30] audit: type=1800 audit(1756651604.530:15): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.930" name="blkio.bfq.time_recursive" dev="tmpfs" ino=945 res=0 errno=0 [ 225.131217][ T9985] tipc: Resetting bearer [ 225.145179][ T9984] tipc: Resetting bearer [ 225.187445][ T9984] tipc: Disabling bearer [ 225.241323][ T9998] lo speed is unknown, defaulting to 1000 [ 225.255325][ T9997] lo speed is unknown, defaulting to 1000 [ 225.278225][ T9998] lo speed is unknown, defaulting to 1000 [ 225.752313][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.076546][T10026] syz.4.941 (10026) used greatest stack depth: 17912 bytes left [ 226.103453][ T30] audit: type=1800 audit(1756651605.590:16): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.943" name="blkio.bfq.time_recursive" dev="tmpfs" ino=999 res=0 errno=0 [ 226.156379][ T5872] Bluetooth: hci1: command 0x0405 tx timeout [ 226.187646][T10037] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 226.199235][T10037] __nla_validate_parse: 8 callbacks suppressed [ 226.199253][T10037] netlink: 144 bytes leftover after parsing attributes in process `syz.4.944'. [ 226.220214][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 226.251486][ T9997] lo speed is unknown, defaulting to 1000 [ 226.259275][ T9998] lo speed is unknown, defaulting to 1000 [ 226.473722][T10043] lo speed is unknown, defaulting to 1000 [ 226.680881][T10056] tipc: Enabled bearer , priority 0 [ 226.702088][T10056] syzkaller0: entered promiscuous mode [ 226.707757][T10056] syzkaller0: entered allmulticast mode [ 226.737892][T10043] lo speed is unknown, defaulting to 1000 [ 226.758915][T10056] tipc: Resetting bearer [ 226.777071][T10055] tipc: Resetting bearer [ 226.828170][T10055] tipc: Disabling bearer [ 226.857540][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032db0800: rx timeout, send abort [ 226.876763][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 226.906095][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 227.074926][T10043] lo speed is unknown, defaulting to 1000 [ 227.106457][T10063] lo speed is unknown, defaulting to 1000 [ 227.114331][ T9997] lo speed is unknown, defaulting to 1000 [ 227.145250][T10063] lo speed is unknown, defaulting to 1000 [ 227.357656][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032db1400: rx timeout, send abort [ 227.366886][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032db0800: abort rx timeout. Force session deactivation [ 227.466000][T10067] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 227.474457][T10067] netlink: 228 bytes leftover after parsing attributes in process `syz.0.954'. [ 227.657729][ T30] audit: type=1800 audit(1756651607.140:17): pid=10074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.955" name="blkio.bfq.time_recursive" dev="tmpfs" ino=342 res=0 errno=0 [ 227.738607][T10063] lo speed is unknown, defaulting to 1000 [ 227.865980][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032db1400: abort rx timeout. Force session deactivation [ 228.574852][T10085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.958'. [ 229.261578][T10074] warn_alloc: 1 callbacks suppressed [ 229.261599][T10074] syz.0.955: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 229.378716][T10074] CPU: 0 UID: 0 PID: 10074 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(full) [ 229.378763][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.378776][T10074] Call Trace: [ 229.378785][T10074] [ 229.378794][T10074] dump_stack_lvl+0x189/0x250 [ 229.378830][T10074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.378856][T10074] ? __pfx__printk+0x10/0x10 [ 229.378886][T10074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 229.378911][T10074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 229.378937][T10074] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 229.378966][T10074] warn_alloc+0x214/0x310 [ 229.379005][T10074] ? __pfx_warn_alloc+0x10/0x10 [ 229.379047][T10074] ? __get_vm_area_node+0x28f/0x300 [ 229.379077][T10074] ? hash_netport4_resize+0x235/0x1b60 [ 229.379107][T10074] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 229.379184][T10074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.379223][T10074] ? rcu_is_watching+0x15/0xb0 [ 229.379245][T10074] ? hash_netport4_resize+0x235/0x1b60 [ 229.379268][T10074] ? hash_netport4_resize+0x235/0x1b60 [ 229.379290][T10074] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 229.379321][T10074] ? hash_netport4_resize+0x235/0x1b60 [ 229.379354][T10074] hash_netport4_resize+0x235/0x1b60 [ 229.379378][T10074] ? hash_netport4_uadt+0xc97/0xf30 [ 229.379408][T10074] ? __pfx_hash_netport4_add+0x10/0x10 [ 229.379432][T10074] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 229.379468][T10074] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 229.379503][T10074] call_ad+0x44e/0xb00 [ 229.379543][T10074] ? __pfx_call_ad+0x10/0x10 [ 229.379590][T10074] ? __nla_parse+0x40/0x60 [ 229.379627][T10074] ip_set_ad+0x791/0x930 [ 229.379668][T10074] ? __pfx_ip_set_ad+0x10/0x10 [ 229.379743][T10074] nfnetlink_rcv_msg+0xb4d/0x1130 [ 229.379775][T10074] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 229.379828][T10074] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 229.379875][T10074] ? kasan_save_free_info+0x46/0x50 [ 229.379957][T10074] netlink_rcv_skb+0x208/0x470 [ 229.379981][T10074] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 229.380012][T10074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.380046][T10074] ? bpf_lsm_capable+0x9/0x20 [ 229.380074][T10074] ? security_capable+0x7e/0x2e0 [ 229.380113][T10074] nfnetlink_rcv+0x26a/0x2520 [ 229.380146][T10074] ? __dev_queue_xmit+0x1d79/0x3b50 [ 229.380194][T10074] ? __dev_queue_xmit+0x27b/0x3b50 [ 229.380236][T10074] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 229.380266][T10074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 229.380308][T10074] ? ref_tracker_free+0x63a/0x7d0 [ 229.380339][T10074] ? __asan_memcpy+0x40/0x70 [ 229.380361][T10074] ? __pfx_ref_tracker_free+0x10/0x10 [ 229.380410][T10074] ? skb_clone+0x246/0x3a0 [ 229.380440][T10074] ? __netlink_deliver_tap+0x807/0x850 [ 229.380460][T10074] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.380488][T10074] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.380518][T10074] netlink_unicast+0x82c/0x9e0 [ 229.380559][T10074] ? __pfx_netlink_unicast+0x10/0x10 [ 229.380591][T10074] ? netlink_sendmsg+0x642/0xb30 [ 229.380609][T10074] ? skb_put+0x11b/0x210 [ 229.380635][T10074] netlink_sendmsg+0x805/0xb30 [ 229.380667][T10074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.380691][T10074] ? aa_sock_msg_perm+0xf1/0x1d0 [ 229.380713][T10074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.380734][T10074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.380756][T10074] __sock_sendmsg+0x21c/0x270 [ 229.380796][T10074] ____sys_sendmsg+0x505/0x830 [ 229.380826][T10074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.380861][T10074] ? import_iovec+0x74/0xa0 [ 229.380889][T10074] ___sys_sendmsg+0x21f/0x2a0 [ 229.380916][T10074] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.380980][T10074] ? __fget_files+0x2a/0x420 [ 229.380998][T10074] ? __fget_files+0x3a0/0x420 [ 229.381028][T10074] __x64_sys_sendmsg+0x19b/0x260 [ 229.381057][T10074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.381092][T10074] ? rcu_is_watching+0x15/0xb0 [ 229.381120][T10074] ? do_syscall_64+0xbe/0x3b0 [ 229.381148][T10074] do_syscall_64+0xfa/0x3b0 [ 229.381169][T10074] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.381198][T10074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.381219][T10074] ? clear_bhb_loop+0x60/0xb0 [ 229.381245][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.381270][T10074] RIP: 0033:0x7fada558ebe9 [ 229.381290][T10074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.381309][T10074] RSP: 002b:00007fada63f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.381330][T10074] RAX: ffffffffffffffda RBX: 00007fada57c5fa0 RCX: 00007fada558ebe9 [ 229.381346][T10074] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 229.381359][T10074] RBP: 00007fada5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 229.381372][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.381384][T10074] R13: 00007fada57c6038 R14: 00007fada57c5fa0 R15: 00007ffe5436c988 [ 229.381419][T10074] [ 229.916884][T10074] Mem-Info: [ 229.920541][T10074] active_anon:4710 inactive_anon:0 isolated_anon:0 [ 229.920541][T10074] active_file:3146 inactive_file:39903 isolated_file:0 [ 229.920541][T10074] unevictable:768 dirty:135 writeback:0 [ 229.920541][T10074] slab_reclaimable:11792 slab_unreclaimable:182677 [ 229.920541][T10074] mapped:29738 shmem:1359 pagetables:1124 [ 229.920541][T10074] sec_pagetables:0 bounce:0 [ 229.920541][T10074] kernel_misc_reclaimable:0 [ 229.920541][T10074] free:1243520 free_pcp:13106 free_cma:0 [ 229.967007][T10074] Node 0 active_anon:18840kB inactive_anon:0kB active_file:12584kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118952kB dirty:540kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12848kB pagetables:4356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.000703][T10074] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.034140][T10074] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.063678][T10074] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 230.069506][T10074] Node 0 DMA32 free:1063500kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18996kB inactive_anon:0kB active_file:12584kB inactive_file:157840kB unevictable:1536kB writepending:540kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:38968kB local_pcp:17608kB free_cma:0kB [ 230.102883][T10074] lowmem_reserve[]: 0 0 1 1 1 [ 230.107665][T10074] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 230.137516][T10074] lowmem_reserve[]: 0 0 0 0 0 [ 230.142675][T10074] Node 1 Normal free:3895208kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13344kB local_pcp:7232kB free_cma:0kB [ 230.175426][T10074] lowmem_reserve[]: 0 0 0 0 0 [ 230.181154][T10074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.194169][T10074] Node 0 DMA32: 366*4kB (UM) 324*8kB (UM) 239*16kB (M) 364*32kB (UME) 130*64kB (UME) 62*128kB (UM) 97*256kB (UM) 62*512kB (UME) 26*1024kB (UME) 11*2048kB (UM) 225*4096kB (UM) = 1063112kB [ 230.213880][T10074] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 230.226517][T10074] Node 1 Normal: 200*4kB (UME) 49*8kB (UME) 44*16kB (UME) 116*32kB (UME) 29*64kB (UME) 13*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895208kB [ 230.245651][T10074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.255586][T10074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.265019][T10074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.275005][T10074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.284516][T10074] 44404 total pagecache pages [ 230.289328][T10074] 0 pages in swap cache [ 230.293543][T10074] Free swap = 124996kB [ 230.297810][T10074] Total swap = 124996kB [ 230.308587][T10074] 2097051 pages RAM [ 230.312654][T10074] 0 pages HighMem/MovableOnly [ 230.317351][T10074] 425669 pages reserved [ 230.321766][T10074] 0 pages cma reserved [ 230.425403][T10141] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 230.619820][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 230.634212][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 230.755162][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.789276][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.802090][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.975'. [ 230.848112][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 230.869862][T10166] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 230.891005][T10166] netlink: 'syz.2.976': attribute type 4 has an invalid length. [ 230.898799][T10166] NCSI netlink: No device for ifindex 3321692160 [ 230.968330][T10170] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 231.302894][ T30] audit: type=1800 audit(1756651610.790:18): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.980" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1124 res=0 errno=0 [ 231.334804][T10186] __nla_validate_parse: 2 callbacks suppressed [ 231.334825][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 231.716530][T10198] netlink: 'syz.0.986': attribute type 64 has an invalid length. [ 231.907599][T10204] bond0: option use_carrier: invalid value (255) [ 231.954832][T10208] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.992'. [ 232.121447][ T30] audit: type=1800 audit(1756651611.600:19): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.993" name="blkio.bfq.time_recursive" dev="tmpfs" ino=987 res=0 errno=0 [ 232.470325][T10226] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 232.490981][T10226] netlink: 172 bytes leftover after parsing attributes in process `syz.0.996'. [ 232.597289][ T8929] IPVS: starting estimator thread 0... [ 232.607065][T10228] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.730787][T10231] IPVS: using max 27 ests per chain, 64800 per kthread [ 232.751446][T10226] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.057644][T10245] netlink: 'syz.4.1004': attribute type 21 has an invalid length. [ 233.109138][T10245] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1004'. [ 233.699979][ T30] audit: type=1800 audit(1756651613.180:20): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1007" name="blkio.bfq.time_recursive" dev="tmpfs" ino=405 res=0 errno=0 [ 233.919487][T10269] lo speed is unknown, defaulting to 1000 [ 233.935068][T10269] lo speed is unknown, defaulting to 1000 [ 234.447979][T10281] lo speed is unknown, defaulting to 1000 [ 234.478396][T10269] lo speed is unknown, defaulting to 1000 [ 234.492655][T10281] lo speed is unknown, defaulting to 1000 [ 234.799171][T10281] lo speed is unknown, defaulting to 1000 [ 234.969729][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 235.306675][T10296] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 235.515834][ T5872] Bluetooth: hci1: command 0x0405 tx timeout [ 235.556326][ T30] audit: type=1800 audit(1756651615.040:21): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1022" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1148 res=0 errno=0 [ 235.632764][T10306] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1021'. [ 235.867955][T10313] gtp0: entered promiscuous mode [ 235.886783][T10313] gtp0: entered allmulticast mode [ 236.191375][T10329] lo speed is unknown, defaulting to 1000 [ 236.199645][T10329] lo speed is unknown, defaulting to 1000 [ 236.365712][T10324] ip6tnl0: entered promiscuous mode [ 236.400097][T10324] ip6tnl0: entered allmulticast mode [ 236.412856][T10324] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 236.617884][T10329] lo speed is unknown, defaulting to 1000 [ 236.826676][ T30] audit: type=1800 audit(1756651616.310:22): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1033" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1167 res=0 errno=0 [ 236.988049][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 237.152163][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 237.188425][T10357] syzkaller1: entered promiscuous mode [ 237.208089][T10357] syzkaller1: entered allmulticast mode [ 238.072604][ T30] audit: type=1800 audit(1756651617.560:23): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1044" name="blkio.bfq.time_recursive" dev="tmpfs" ino=441 res=0 errno=0 [ 238.219551][T10385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.242143][T10388] netlink: 'syz.2.1046': attribute type 4 has an invalid length. [ 238.261358][T10388] netlink: 'syz.2.1046': attribute type 4 has an invalid length. [ 238.315594][T10388] syzkaller1: entered promiscuous mode [ 238.323341][T10385] tipc: Failed to remove unknown binding: 66,1,1/0:1637266816/1637266818 [ 238.345244][T10385] tipc: Failed to remove unknown binding: 66,1,1/0:1637266816/1637266818 [ 238.352388][T10388] syzkaller1: entered allmulticast mode [ 238.378254][T10385] tipc: Failed to remove unknown binding: 66,1,1/0:1637266816/1637266818 [ 238.413090][T10393] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1045'. [ 239.134431][ T30] audit: type=1800 audit(1756651618.620:24): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1058" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1052 res=0 errno=0 [ 239.187166][T10428] netlink: 'syz.3.1060': attribute type 3 has an invalid length. [ 239.206811][T10428] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1060'. [ 239.229828][T10433] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1061'. [ 239.286829][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 239.365255][T10437] lo speed is unknown, defaulting to 1000 [ 239.507240][T10437] lo speed is unknown, defaulting to 1000 [ 239.752485][T10470] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 239.773105][T10466] tipc: Enabled bearer , priority 0 [ 239.852476][ T30] audit: type=1800 audit(1756651619.330:25): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1073" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1222 res=0 errno=0 [ 239.936457][T10470] vlan2: entered allmulticast mode [ 239.980594][T10470] bond3: entered allmulticast mode [ 240.064926][T10471] syzkaller0: entered promiscuous mode [ 240.072312][T10471] syzkaller0: entered allmulticast mode [ 240.080897][T10479] sch_tbf: peakrate 6 is lower than or equals to rate 8951488879090114690 ! [ 240.093890][T10481] tipc: Resetting bearer [ 240.107440][T10437] lo speed is unknown, defaulting to 1000 [ 240.119637][T10478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1074'. [ 240.131533][T10465] tipc: Resetting bearer [ 240.158103][T10465] tipc: Disabling bearer [ 240.233626][T10484] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 240.258313][T10486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'. [ 240.355207][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 240.394636][T10486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.502573][T10497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.612894][T10486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.660474][T10491] lo speed is unknown, defaulting to 1000 [ 240.668636][T10491] lo speed is unknown, defaulting to 1000 [ 240.752855][T10486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.836699][T10486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.985456][ T2912] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.007507][ T2912] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.038767][ T3019] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.061767][ T3019] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.084412][T10510] lo speed is unknown, defaulting to 1000 [ 241.092879][T10510] lo speed is unknown, defaulting to 1000 [ 241.093539][T10491] lo speed is unknown, defaulting to 1000 [ 241.099862][T10508] lo speed is unknown, defaulting to 1000 [ 241.277950][T10517] netlink: 'syz.2.1082': attribute type 5 has an invalid length. [ 241.634753][T10524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1083'. [ 241.649108][T10508] lo speed is unknown, defaulting to 1000 [ 241.789861][ T30] audit: type=1800 audit(1756651621.270:26): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1085" name="blkio.bfq.time_recursive" dev="tmpfs" ino=482 res=0 errno=0 [ 241.935055][T10523] lo speed is unknown, defaulting to 1000 [ 241.941345][T10508] lo speed is unknown, defaulting to 1000 [ 241.961197][T10510] lo speed is unknown, defaulting to 1000 [ 241.984240][T10523] lo speed is unknown, defaulting to 1000 [ 242.416318][T10536] tipc: Started in network mode [ 242.422924][T10536] tipc: Node identity 02c7a2ecc71b, cluster identity 4711 [ 242.430690][T10536] tipc: Enabled bearer , priority 0 [ 242.437351][T10534] syzkaller0: entered promiscuous mode [ 242.443813][T10534] syzkaller0: entered allmulticast mode [ 242.454298][T10534] tipc: Resetting bearer [ 242.472352][T10534] sch_fq: defrate 257 ignored. [ 242.479412][T10534] tipc: Resetting bearer [ 242.489868][T10523] lo speed is unknown, defaulting to 1000 [ 242.792005][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 242.962145][T10545] __nla_validate_parse: 1 callbacks suppressed [ 242.962167][T10545] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1091'. [ 243.089398][T10545] : entered promiscuous mode [ 243.097140][T10541] lo speed is unknown, defaulting to 1000 [ 243.181645][T10541] lo speed is unknown, defaulting to 1000 [ 243.460163][ T5928] tipc: Node number set to 3319571180 [ 243.495408][T10555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1094'. [ 243.534898][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 243.709328][T10563] netlink: 'syz.4.1097': attribute type 6 has an invalid length. [ 243.762788][T10566] netlink: 'syz.4.1097': attribute type 6 has an invalid length. [ 243.840413][T10541] lo speed is unknown, defaulting to 1000 [ 244.154003][T10579] lo speed is unknown, defaulting to 1000 [ 244.161826][T10579] lo speed is unknown, defaulting to 1000 [ 244.173995][T10575] v: renamed from ip6_vti0 (while UP) [ 244.193656][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1100'. [ 244.233258][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 244.521108][T10604] bpq0: entered promiscuous mode [ 244.578412][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'. [ 244.602955][T10605] tipc: Enabled bearer , priority 10 [ 244.718748][T10579] lo speed is unknown, defaulting to 1000 [ 244.870832][T10609] netlink: 'syz.0.1107': attribute type 5 has an invalid length. [ 244.897117][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 244.931947][T10609] syz_tun: entered allmulticast mode [ 245.018780][T10609] dvmrp8: entered allmulticast mode [ 245.204086][T10609] syz_tun: left allmulticast mode [ 245.703950][T10629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1112'. [ 245.720061][T10629] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1112'. [ 246.006192][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 246.046069][T10643] syz_tun: entered allmulticast mode [ 246.055739][T10642] syz_tun: left allmulticast mode [ 246.181671][T10654] netlink: 'syz.3.1121': attribute type 2 has an invalid length. [ 246.421555][T10669] netlink: 'syz.0.1123': attribute type 2 has an invalid length. [ 246.429354][T10669] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 246.458947][T10671] xfrm0: entered promiscuous mode [ 246.467673][T10660] netlink: 'syz.0.1123': attribute type 2 has an invalid length. [ 246.486653][T10671] xfrm0: entered allmulticast mode [ 246.491993][T10660] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 246.703420][T10686] netlink: 'syz.0.1131': attribute type 6 has an invalid length. [ 246.734803][T10683] bond0: (slave macvlan0): Releasing backup interface [ 246.875162][T10683] team0: Port device sit2 removed [ 247.266796][T10710] lo speed is unknown, defaulting to 1000 [ 247.322218][T10710] lo speed is unknown, defaulting to 1000 [ 247.366194][T10719] netlink: 'syz.3.1139': attribute type 12 has an invalid length. [ 247.609574][T10729] batadv_slave_1: entered promiscuous mode [ 247.790665][T10728] batadv_slave_1: left promiscuous mode [ 248.097875][T10710] lo speed is unknown, defaulting to 1000 [ 248.207715][T10742] tun0: tun_chr_ioctl cmd 35111 [ 248.413754][T10746] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 248.434739][T10748] lo speed is unknown, defaulting to 1000 [ 248.509198][T10748] lo speed is unknown, defaulting to 1000 [ 248.626950][T10758] __nla_validate_parse: 135 callbacks suppressed [ 248.627384][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 249.077965][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 249.113542][T10748] lo speed is unknown, defaulting to 1000 [ 249.347185][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 249.947827][T10812] validate_nla: 64 callbacks suppressed [ 249.947850][T10812] netlink: 'syz.4.1162': attribute type 83 has an invalid length. [ 250.103142][T10812] lo speed is unknown, defaulting to 1000 [ 250.148941][T10812] lo speed is unknown, defaulting to 1000 [ 250.318867][T10830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1166'. [ 250.439751][T10812] lo speed is unknown, defaulting to 1000 [ 250.617933][T10834] sctp: [Deprecated]: syz.2.1167 (pid 10834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.617933][T10834] Use struct sctp_sack_info instead [ 250.945191][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.023346][T10852] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.228252][T10845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1171'. [ 251.306551][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 251.323587][T10852] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.425013][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'. [ 251.507615][T10852] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.630557][T10852] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.751967][ T30] audit: type=1800 audit(1756651631.240:27): pid=10875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1178" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1162 res=0 errno=0 [ 251.934184][ T2912] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.955884][ T2912] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.055058][ T6226] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.122119][ T6226] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.143058][T10902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.338973][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1185'. [ 252.382832][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 252.393088][T10907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1185'. [ 252.517733][T10920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.715389][T10913] team0 (unregistering): left promiscuous mode [ 252.926435][T10937] veth3: entered promiscuous mode [ 253.654225][T10988] batman_adv: batadv0: Removing interface: virt_wifi0 [ 253.673715][T10985] lo speed is unknown, defaulting to 1000 [ 253.694428][T10993] __nla_validate_parse: 2 callbacks suppressed [ 253.694447][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 253.695581][T10984] lo speed is unknown, defaulting to 1000 [ 253.758444][T10985] lo speed is unknown, defaulting to 1000 [ 253.780892][T10992] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.822479][T10979] lo speed is unknown, defaulting to 1000 [ 253.867832][T10992] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.933732][T10992] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.015061][T10992] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.045499][T11004] macvlan0: left promiscuous mode [ 254.182090][ T65] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.223172][ T65] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.261516][ T65] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.299527][ T65] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.301496][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1208'. [ 254.317532][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1208'. [ 254.362226][T11014] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 254.370634][T11014] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1208'. [ 254.383139][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 254.709854][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 254.844117][T10984] lo speed is unknown, defaulting to 1000 [ 254.869766][T10985] lo speed is unknown, defaulting to 1000 [ 254.931476][T11030] lo speed is unknown, defaulting to 1000 [ 255.236068][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 255.539090][T11041] lo speed is unknown, defaulting to 1000 [ 255.586580][T10984] lo speed is unknown, defaulting to 1000 [ 255.597619][T10979] lo speed is unknown, defaulting to 1000 [ 256.146969][T11030] lo speed is unknown, defaulting to 1000 [ 256.292759][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1216'. [ 256.377135][T11041] lo speed is unknown, defaulting to 1000 [ 256.468402][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 256.493985][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1218'. [ 256.716656][T11041] lo speed is unknown, defaulting to 1000 [ 256.726819][T11067] tipc: Enabled bearer , priority 0 [ 256.793019][T10979] lo speed is unknown, defaulting to 1000 [ 256.849723][T11030] lo speed is unknown, defaulting to 1000 [ 256.906181][T11066] tipc: Disabling bearer [ 257.651598][T11082] IPVS: length: 235 != 8 [ 258.355054][T11092] batman_adv: batadv0: Adding interface: ipvlan2 [ 258.380382][T11092] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 258.406045][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.438918][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.448904][T11092] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 258.589160][T11101] IPv6: Can't replace route, no match found [ 258.757030][T11112] __nla_validate_parse: 4 callbacks suppressed [ 258.757050][T11112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1232'. [ 258.848548][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 259.018984][T11123] pim6reg: entered allmulticast mode [ 259.131111][T11129] tipc: Enabled bearer , priority 0 [ 259.162251][T11127] tipc: Disabling bearer [ 259.219449][T11133] bridge1: entered allmulticast mode [ 259.247025][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1239'. [ 259.482629][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 259.512004][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 259.566786][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 259.646029][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 259.667000][T11157] netlink: 'syz.3.1248': attribute type 30 has an invalid length. [ 259.715599][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.733676][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.757306][ T65] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.853982][ T65] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.980386][ T30] audit: type=1800 audit(1756651639.420:28): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1251" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1264 res=0 errno=0 [ 260.367884][T11178] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1254'. [ 260.392833][T11178] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 260.598057][T11187] tipc: Resetting bearer [ 260.612491][T11187] tipc: Resetting bearer [ 260.650754][T11189] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 260.793359][T11201] bpq0: left promiscuous mode [ 260.881310][T11204] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1262'. [ 260.898763][T11204] ..0·: renamed from hsr0 [ 260.925134][T11204] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.939572][T11204] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.967082][T11204] ..0·: entered allmulticast mode [ 260.985443][T11204] hsr_slave_0: entered allmulticast mode [ 261.003186][T11204] hsr_slave_1: entered allmulticast mode [ 261.034714][T11204] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 261.200524][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.395340][T11225] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 261.506250][T11231] netlink: 'syz.3.1270': attribute type 2 has an invalid length. [ 261.556999][T11235] netlink: 'syz.3.1270': attribute type 10 has an invalid length. [ 261.588206][T11235] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.614165][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 261.648356][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.715993][T11233] bridge_slave_1 (unregistering): left allmulticast mode [ 261.724732][T11233] bridge_slave_1 (unregistering): left promiscuous mode [ 261.732622][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.442549][T11290] syzkaller0: entered promiscuous mode [ 262.458293][T11290] syzkaller0: entered allmulticast mode [ 262.525818][T11294] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 262.614183][T11294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.633773][T11300] netlink: 'syz.1.1291': attribute type 21 has an invalid length. [ 262.665860][T11297] bond4: (slave ip6gretap1): making interface the new active one [ 262.666145][T11303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.676079][T11297] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 262.694635][T11300] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 262.726469][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.827399][T11309] veth3: entered allmulticast mode [ 262.955975][T11318] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 262.992585][T11318] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 263.166017][T11328] tipc: Enabled bearer , priority 0 [ 263.179795][T11328] syzkaller0: entered promiscuous mode [ 263.185680][T11328] syzkaller0: entered allmulticast mode [ 263.194777][T11326] lo speed is unknown, defaulting to 1000 [ 263.240305][T11326] lo speed is unknown, defaulting to 1000 [ 263.287208][T11328] tipc: Resetting bearer [ 263.400880][T11327] tipc: Resetting bearer [ 263.448361][T11327] tipc: Disabling bearer [ 263.508268][T11345] tipc: Enabled bearer , priority 0 [ 263.620751][T11326] lo speed is unknown, defaulting to 1000 [ 263.863985][T11361] __nla_validate_parse: 5 callbacks suppressed [ 263.864003][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 264.007338][T11364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1309'. [ 264.059143][T11344] tipc: Disabling bearer [ 264.067200][T11369] warn_alloc: 3 callbacks suppressed [ 264.067218][T11369] syz.4.1309: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 264.095367][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.4.1309 Not tainted syzkaller #0 PREEMPT(full) [ 264.095397][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.095411][T11369] Call Trace: [ 264.095419][T11369] [ 264.095429][T11369] dump_stack_lvl+0x189/0x250 [ 264.095465][T11369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.095491][T11369] ? __pfx__printk+0x10/0x10 [ 264.095522][T11369] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 264.095558][T11369] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 264.095584][T11369] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 264.095610][T11369] warn_alloc+0x214/0x310 [ 264.095643][T11369] ? stack_depot_save_flags+0x40/0x860 [ 264.095674][T11369] ? __pfx_warn_alloc+0x10/0x10 [ 264.095708][T11369] ? kasan_save_track+0x4f/0x80 [ 264.095734][T11369] ? xskq_create+0x56/0x170 [ 264.095750][T11369] ? xsk_init_queue+0xb0/0x110 [ 264.095782][T11369] ? xsk_setsockopt+0x4dc/0x8d0 [ 264.095810][T11369] ? do_sock_setsockopt+0x179/0x1b0 [ 264.095830][T11369] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 264.095849][T11369] ? do_syscall_64+0xfa/0x3b0 [ 264.095869][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.095898][T11369] __vmalloc_node_range_noprof+0x125/0x12f0 [ 264.095961][T11369] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 264.095998][T11369] ? __kasan_kmalloc+0x93/0xb0 [ 264.096029][T11369] vmalloc_user_noprof+0xad/0xf0 [ 264.096059][T11369] ? xskq_create+0xbf/0x170 [ 264.096079][T11369] xskq_create+0xbf/0x170 [ 264.096101][T11369] xsk_init_queue+0xb0/0x110 [ 264.096134][T11369] xsk_setsockopt+0x4dc/0x8d0 [ 264.096166][T11369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.096197][T11369] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.096231][T11369] ? aa_sock_opt_perm+0xff/0x1b0 [ 264.096254][T11369] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 264.096277][T11369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.096318][T11369] do_sock_setsockopt+0x179/0x1b0 [ 264.096365][T11369] __x64_sys_setsockopt+0x13f/0x1b0 [ 264.096395][T11369] do_syscall_64+0xfa/0x3b0 [ 264.096415][T11369] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.096435][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.096456][T11369] ? clear_bhb_loop+0x60/0xb0 [ 264.096482][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.096501][T11369] RIP: 0033:0x7f47c578ebe9 [ 264.096520][T11369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.096539][T11369] RSP: 002b:00007f47c65a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.096561][T11369] RAX: ffffffffffffffda RBX: 00007f47c59c6090 RCX: 00007f47c578ebe9 [ 264.096576][T11369] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 264.096595][T11369] RBP: 00007f47c5811e19 R08: 0000000000000004 R09: 0000000000000000 [ 264.096609][T11369] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.096622][T11369] R13: 00007f47c59c6128 R14: 00007f47c59c6090 R15: 00007ffdfae51e28 [ 264.096657][T11369] [ 264.393896][T11369] Mem-Info: [ 264.397123][T11369] active_anon:9075 inactive_anon:0 isolated_anon:0 [ 264.397123][T11369] active_file:3146 inactive_file:39918 isolated_file:0 [ 264.397123][T11369] unevictable:768 dirty:162 writeback:0 [ 264.397123][T11369] slab_reclaimable:12268 slab_unreclaimable:181440 [ 264.397123][T11369] mapped:34177 shmem:4222 pagetables:1168 [ 264.397123][T11369] sec_pagetables:0 bounce:0 [ 264.397123][T11369] kernel_misc_reclaimable:0 [ 264.397123][T11369] free:1240085 free_pcp:11818 free_cma:0 [ 264.557376][T11369] Node 0 active_anon:27256kB inactive_anon:0kB active_file:12584kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117144kB dirty:648kB writeback:0kB shmem:6480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13000kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.598798][T11369] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.631140][T11369] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.664925][T11369] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 264.671297][T11369] Node 0 DMA32 free:1065216kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24612kB inactive_anon:0kB active_file:12584kB inactive_file:157900kB unevictable:1536kB writepending:648kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:33656kB local_pcp:15904kB free_cma:0kB [ 264.704142][T11369] lowmem_reserve[]: 0 0 1 1 1 [ 264.708923][T11369] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 264.739418][T11369] lowmem_reserve[]: 0 0 0 0 0 [ 264.744807][T11369] Node 1 Normal free:3895720kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12864kB local_pcp:7232kB free_cma:0kB [ 264.817869][T11379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1313'. [ 264.884524][T11369] lowmem_reserve[]: 0 0 0 0 0 [ 264.895316][T11379] IPv6: sit3: Disabled Multicast RS [ 264.911606][T11379] sit3: entered allmulticast mode [ 264.928868][T11369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.952824][T11369] Node 0 DMA32: 1968*4kB (UME) 798*8kB (UME) 531*16kB (UME) 440*32kB (UME) 231*64kB (UME) 89*128kB (UME) 107*256kB (UME) 72*512kB (UME) 38*1024kB (UM) 5*2048kB (UME) 217*4096kB (UM) = 1065248kB [ 264.989638][T11369] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 265.027328][T11369] Node 1 Normal: 200*4kB (UME) 49*8kB (UME) 44*16kB (UME) 128*32kB (UME) 31*64kB (UME) 13*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895720kB [ 265.073032][T11369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.126555][T11369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.182941][T11369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.223736][T11369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.277712][T11369] 44420 total pagecache pages [ 265.317519][T11369] 0 pages in swap cache [ 265.341815][T11369] Free swap = 124996kB [ 265.348575][T11388] lo speed is unknown, defaulting to 1000 [ 265.357619][T11388] lo speed is unknown, defaulting to 1000 [ 265.387901][T11369] Total swap = 124996kB [ 265.425666][T11369] 2097051 pages RAM [ 265.429541][T11369] 0 pages HighMem/MovableOnly [ 265.453521][T11369] 425669 pages reserved [ 265.457854][T11369] 0 pages cma reserved [ 265.767859][T11416] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 265.790684][T11416] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1321'. [ 265.833062][T11416] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.883570][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 265.917975][T11420] netlink: 'syz.4.1323': attribute type 10 has an invalid length. [ 265.937035][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 265.946551][T11420] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.006872][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 266.043679][T11420] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 266.166045][T11424] netlink: 'syz.4.1323': attribute type 3 has an invalid length. [ 266.255200][T11388] lo speed is unknown, defaulting to 1000 [ 266.454447][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1329'. [ 267.582286][T11467] vlan0: left promiscuous mode [ 267.587215][T11467] bond0: left promiscuous mode [ 267.593497][T11467] gretap1: left promiscuous mode [ 267.600095][T11467] macsec1: left promiscuous mode [ 267.608360][T11467] sit1: left promiscuous mode [ 267.624884][T11467] ip6tnl2: left promiscuous mode [ 267.632447][T11467] bond2: left promiscuous mode [ 267.637478][T11467] bond2: left allmulticast mode [ 267.651795][T11467] wireguard0: left promiscuous mode [ 267.658176][T11467] wireguard0: left allmulticast mode [ 267.684831][T11467] sit3: left allmulticast mode [ 267.763150][T11480] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.799548][ T1154] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.837460][ T1154] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.883274][T11480] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.917399][ T1154] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.947253][ T1154] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.989151][T11480] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.098457][T11480] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.165270][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 268.192472][T11502] netlink: 'syz.3.1345': attribute type 11 has an invalid length. [ 268.216581][T11502] netlink: 'syz.3.1345': attribute type 4 has an invalid length. [ 268.229439][T11502] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1345'. [ 268.295885][ T65] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.322375][ T65] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.409292][ T65] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.646808][ T1154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.291490][T11521] lo speed is unknown, defaulting to 1000 [ 269.299341][T11521] lo speed is unknown, defaulting to 1000 [ 269.630577][T11543] lo speed is unknown, defaulting to 1000 [ 269.803872][T11549] lo speed is unknown, defaulting to 1000 [ 269.955761][T11543] lo speed is unknown, defaulting to 1000 [ 269.970344][T11521] lo speed is unknown, defaulting to 1000 [ 270.525327][T11549] lo speed is unknown, defaulting to 1000 [ 270.798156][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 270.846484][T11574] bridge3: entered allmulticast mode [ 270.884362][T11576] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 270.908809][T11576] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 270.966762][T11576] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 271.025120][T11543] lo speed is unknown, defaulting to 1000 [ 271.067437][T11549] lo speed is unknown, defaulting to 1000 [ 271.106406][ T30] audit: type=1800 audit(1756651650.590:29): pid=11581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1367" name="blkio.bfq.time_recursive" dev="tmpfs" ino=865 res=0 errno=0 [ 271.460224][T11587] lo speed is unknown, defaulting to 1000 [ 271.495645][T11587] lo speed is unknown, defaulting to 1000 [ 272.159333][T11596] netlink: 'syz.4.1372': attribute type 3 has an invalid length. [ 272.320873][T11587] lo speed is unknown, defaulting to 1000 [ 272.368437][T11604] netlink: 'syz.1.1375': attribute type 3 has an invalid length. [ 272.390528][T11603] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 272.635722][T11608] mac80211_hwsim hwsim9 wlan1: Device is already in use. [ 272.911680][T11613] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1379'. [ 274.160168][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 274.241168][T11642] pim6reg1: entered promiscuous mode [ 274.246527][T11642] pim6reg1: entered allmulticast mode [ 274.332885][T11655] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 274.351072][T11657] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 274.363737][T11656] sctp: [Deprecated]: syz.0.1389 (pid 11656) Use of int in max_burst socket option. [ 274.363737][T11656] Use struct sctp_assoc_value instead [ 274.413298][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 274.433134][T11653] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.451050][T11653] block nbd0: shutting down sockets [ 274.466523][T11657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.708794][T11665] dvmrp8: entered allmulticast mode [ 274.785458][T11665] dvmrp8: left allmulticast mode [ 274.865801][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 274.887700][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 274.893398][T11677] netlink: 'syz.4.1391': attribute type 23 has an invalid length. [ 274.918230][T11672] netlink: 'syz.1.1393': attribute type 18 has an invalid length. [ 275.437138][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1402'. [ 275.550415][T11707] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 275.727042][T11714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1406'. [ 275.736436][T11714] netlink: 'syz.3.1406': attribute type 7 has an invalid length. [ 275.744985][T11714] netlink: 'syz.3.1406': attribute type 8 has an invalid length. [ 275.758044][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1407'. [ 275.787553][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 275.820948][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 275.853842][T11714] syz_tun: entered promiscuous mode [ 275.869510][T11714] gretap0: entered promiscuous mode [ 275.888417][T11714] syz_tun: left promiscuous mode [ 275.906613][T11714] gretap0: left promiscuous mode [ 276.519739][T11762] lo speed is unknown, defaulting to 1000 [ 276.581997][T11762] lo speed is unknown, defaulting to 1000 [ 276.679802][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 276.679827][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 276.931544][ T30] audit: type=1800 audit(1756651656.410:30): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1417" name="memory.events" dev="tmpfs" ino=1556 res=0 errno=0 [ 277.077506][T11762] lo speed is unknown, defaulting to 1000 [ 277.112507][T11787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.298500][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 277.337026][ T6226] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.359208][ T6226] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.368475][ T6226] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.377951][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'. [ 277.397702][T11798] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1427'. [ 277.465900][ T6226] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.944023][T11828] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 277.959645][T11828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1435'. [ 277.973200][T11825] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1433'. [ 278.089652][T11833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1436'. [ 278.099884][T11833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1436'. [ 278.114864][T11834] netlink: 'syz.1.1437': attribute type 2 has an invalid length. [ 278.246810][T11838] tipc: Enabling of bearer rejected, already enabled [ 278.423461][T11842] netlink: 'syz.3.1440': attribute type 2 has an invalid length. [ 278.929597][T11883] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 278.975519][T11886] netlink: 'syz.3.1455': attribute type 7 has an invalid length. [ 279.098227][T11889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.108076][T11889] bond5: (slave bond6): Enslaving as an active interface with an up link [ 279.506902][T11901] veth5: entered promiscuous mode [ 279.702031][T11920] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 279.933969][ T30] audit: type=1800 audit(1756651659.400:31): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1466" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1520 res=0 errno=0 [ 280.339766][T11945] wg1: entered promiscuous mode [ 280.346080][T11945] wg1: entered allmulticast mode [ 280.515752][T11948] team0: Device sit2 is of different type [ 280.848532][T11954] __nla_validate_parse: 211 callbacks suppressed [ 280.848556][T11954] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1475'. [ 280.869815][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 281.098316][T11976] tipc: Enabling of bearer rejected, failed to enable media [ 281.224261][ T30] audit: type=1800 audit(1756651660.710:32): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1479" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1537 res=0 errno=0 [ 281.291571][T11983] tipc: Resetting bearer [ 281.297403][T11983] tipc: Resetting bearer [ 281.381934][T11984] lo speed is unknown, defaulting to 1000 [ 281.405804][T11984] lo speed is unknown, defaulting to 1000 [ 281.407730][T11987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1481'. [ 281.431192][T11987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1481'. [ 281.723027][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1484'. [ 281.752455][T11998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1484'. [ 281.781907][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1484'. [ 281.816959][T11998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1484'. [ 281.855709][T11997] lo speed is unknown, defaulting to 1000 [ 281.907316][T12007] netlink: 'syz.0.1488': attribute type 13 has an invalid length. [ 281.925248][T12007] netlink: 'syz.0.1488': attribute type 17 has an invalid length. [ 282.037330][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 282.065650][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 282.086377][T12013] netlink: 'syz.1.1489': attribute type 13 has an invalid length. [ 282.099161][T12013] netlink: 'syz.1.1489': attribute type 12 has an invalid length. [ 282.108760][T12007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.137882][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.159296][T11984] lo speed is unknown, defaulting to 1000 [ 282.159322][T11997] lo speed is unknown, defaulting to 1000 [ 282.206245][T12009] lo speed is unknown, defaulting to 1000 [ 282.299199][T12020] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 282.555141][T12029] bridge0: failed insert local address into bridge forwarding table [ 282.579543][T12029] 8021q: VLANs not supported on ipvlan1 [ 282.603220][T12009] lo speed is unknown, defaulting to 1000 [ 282.839636][T12009] lo speed is unknown, defaulting to 1000 [ 282.847238][T12027] lo speed is unknown, defaulting to 1000 [ 282.847276][T11997] lo speed is unknown, defaulting to 1000 [ 282.855504][T12027] lo speed is unknown, defaulting to 1000 [ 282.895976][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.916389][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.213743][T12027] lo speed is unknown, defaulting to 1000 [ 283.790065][T12048] netlink: 'syz.0.1500': attribute type 5 has an invalid length. [ 284.026994][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.076131][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.118449][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.149688][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.187695][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.223997][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.276488][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.328333][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.345142][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.345240][T12071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.371618][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.383084][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.395405][T12066] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 284.404736][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.462608][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.490890][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.517988][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.542344][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.562945][T12064] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 284.575078][T12076] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 284.597637][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.627910][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.669297][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.700237][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.729891][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.754625][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.771841][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.794738][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.816948][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 284.874617][T12064] team0: Device hsr_slave_0 failed to register rx_handler [ 285.025844][T12089] lo speed is unknown, defaulting to 1000 [ 285.167586][T12091] lo speed is unknown, defaulting to 1000 [ 285.467826][T12117] syz_tun: entered promiscuous mode [ 285.475902][T12117] batadv_slave_0: entered promiscuous mode [ 285.484319][T12117] debugfs: 'hsr1' already exists in 'hsr' [ 285.490720][T12117] Cannot create hsr debugfs directory [ 285.501763][T12117] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 285.521023][T12117] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.537364][T12117] hsr1: entered allmulticast mode [ 285.547409][T12117] batadv_slave_0: entered allmulticast mode [ 285.590505][ T5882] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 286.565777][T12181] __nla_validate_parse: 10 callbacks suppressed [ 286.565798][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 286.606432][T12178] nbd0: detected capacity change from 0 to 127 [ 286.631124][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 286.722406][ T5882] block nbd0: Receive control failed (result -32) [ 286.916347][T12196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 286.932049][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1540'. [ 286.942249][T12196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 286.951814][T12196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 286.965003][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 286.984786][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 287.000898][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1541'. [ 287.003478][T12194] dvmrp0: entered allmulticast mode [ 287.102557][T12204] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1540'. [ 287.120634][T12204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.275378][T12209] sctp: [Deprecated]: syz.4.1543 (pid 12209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.275378][T12209] Use struct sctp_sack_info instead [ 287.337806][T12210] sctp: [Deprecated]: syz.4.1543 (pid 12210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.337806][T12210] Use struct sctp_sack_info instead [ 287.858770][ T30] audit: type=1800 audit(1756651667.340:33): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1548" name="cgroup.controllers" dev="tmpfs" ino=1629 res=0 errno=0 [ 287.988062][T12232] syz_tun (unregistering): left promiscuous mode [ 288.259163][T12240] lo speed is unknown, defaulting to 1000 [ 288.285443][T12240] lo speed is unknown, defaulting to 1000 [ 288.631118][T12263] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 289.160759][T12285] veth1_to_bond: entered allmulticast mode [ 289.185011][T12240] lo speed is unknown, defaulting to 1000 [ 289.346216][T12285] bond0: (slave bond_slave_1): Releasing backup interface [ 289.371006][T12290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.490619][T12285] veth1_to_bond (unregistering): left allmulticast mode [ 289.632611][T12292] lo speed is unknown, defaulting to 1000 [ 289.641608][T12288] lo speed is unknown, defaulting to 1000 [ 289.675447][T12292] lo speed is unknown, defaulting to 1000 [ 290.046121][T12306] validate_nla: 9 callbacks suppressed [ 290.046142][T12306] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 290.285389][T12288] lo speed is unknown, defaulting to 1000 [ 290.420549][ T30] audit: type=1800 audit(1756651669.900:34): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1573" name="memory.events" dev="tmpfs" ino=1523 res=0 errno=0 [ 290.584165][T12330] ipvlan3: entered promiscuous mode [ 290.728127][T12288] lo speed is unknown, defaulting to 1000 [ 290.782868][T12322] lo speed is unknown, defaulting to 1000 [ 290.826055][T12292] lo speed is unknown, defaulting to 1000 [ 290.934094][T12338] bpq0: entered promiscuous mode [ 290.940628][T12322] lo speed is unknown, defaulting to 1000 [ 291.005119][ T30] audit: type=1800 audit(1756651670.490:35): pid=12340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1578" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1701 res=0 errno=0 [ 291.761909][ T8934] IPVS: starting estimator thread 0... [ 291.839084][T12322] lo speed is unknown, defaulting to 1000 [ 291.861987][T12364] IPVS: using max 25 ests per chain, 60000 per kthread [ 291.947532][T12371] netlink: 'syz.4.1584': attribute type 7 has an invalid length. [ 291.960336][T12372] netlink: 'syz.4.1584': attribute type 7 has an invalid length. [ 291.968123][T12372] __nla_validate_parse: 9 callbacks suppressed [ 291.968140][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 291.998351][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 292.288373][T12367] lo speed is unknown, defaulting to 1000 [ 292.526811][T12367] lo speed is unknown, defaulting to 1000 [ 292.725634][T12383] netlink: 'syz.1.1586': attribute type 4 has an invalid length. [ 292.734038][T12384] netlink: 'syz.1.1586': attribute type 4 has an invalid length. [ 292.750830][T12383] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1586'. [ 292.769174][T12384] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1586'. [ 292.787606][T12383] wlan1: mtu less than device minimum [ 292.806937][T12384] wlan1: mtu less than device minimum [ 292.856187][T12367] lo speed is unknown, defaulting to 1000 [ 292.948133][T12391] netlink: 'syz.1.1588': attribute type 32 has an invalid length. [ 293.319778][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 294.043946][T12430] netlink: 'syz.1.1595': attribute type 1 has an invalid length. [ 294.138142][T12430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.206969][T12434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.219213][T12441] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1599'. [ 294.233671][T12434] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 294.256499][T12434] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 294.318553][T12430] veth5: entered promiscuous mode [ 294.677016][T12463] netlink: 'syz.2.1602': attribute type 21 has an invalid length. [ 294.716371][T12463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1602'. [ 294.911792][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 294.946466][T12472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1605'. [ 295.014683][T12472] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1605'. [ 295.259366][T12480] lo speed is unknown, defaulting to 1000 [ 295.272990][T12480] lo speed is unknown, defaulting to 1000 [ 295.528192][T12498] lo speed is unknown, defaulting to 1000 [ 295.597961][T12504] bond0: (slave wlan1): Releasing backup interface [ 295.628605][T12504] bond2: (slave geneve2): Releasing active interface [ 295.668185][ T1154] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.688713][ T1154] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.703580][ T30] audit: type=1800 audit(1756651675.180:36): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1614" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1110 res=0 errno=0 [ 295.711719][ T1154] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.776610][ T1154] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.816935][T12506] team0: Mode changed to "activebackup" [ 295.830979][ T30] audit: type=1800 audit(1756651675.320:37): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1615" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1116 res=0 errno=0 [ 295.834611][T12480] lo speed is unknown, defaulting to 1000 [ 295.855289][T12498] lo speed is unknown, defaulting to 1000 [ 296.402337][T12498] lo speed is unknown, defaulting to 1000 [ 296.847459][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.870162][T12552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.891949][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.905035][T12552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.978514][T12560] netlink: 'syz.2.1630': attribute type 3 has an invalid length. [ 297.287663][T12566] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 297.342076][T12566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.447276][T12568] vlan0: entered promiscuous mode [ 297.507364][T12568] bond5: entered promiscuous mode [ 297.544824][T12568] vlan0: entered allmulticast mode [ 297.574248][T12575] netlink: 'syz.1.1635': attribute type 10 has an invalid length. [ 297.590624][T12575] __nla_validate_parse: 4 callbacks suppressed [ 297.590645][T12575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1635'. [ 297.607931][T12568] bond5: entered allmulticast mode [ 297.608188][T12576] netlink: 'syz.1.1635': attribute type 10 has an invalid length. [ 297.646064][T12571] bond5: (slave gretap1): making interface the new active one [ 297.654086][T12571] gretap1: entered promiscuous mode [ 297.659587][T12571] gretap1: entered allmulticast mode [ 297.675244][T12571] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 297.676634][T12576] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1635'. [ 297.697749][T12575] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 298.131455][T12576] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 298.422584][T12601] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 298.609461][T12614] bridge3: entered promiscuous mode [ 298.646774][T12614] bridge3: entered allmulticast mode [ 298.691735][T12614] team0: Port device bridge3 added [ 299.185180][T12632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.192719][T12632] IPv6: NLM_F_CREATE should be set when creating new route [ 299.200085][T12632] IPv6: NLM_F_CREATE should be set when creating new route [ 299.207332][T12632] IPv6: NLM_F_CREATE should be set when creating new route [ 299.264986][T12634] tipc: Resetting bearer [ 299.276294][T12634] tipc: Resetting bearer [ 299.485956][ T30] audit: type=1800 audit(1756651678.970:38): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1763 res=0 errno=0 [ 299.526656][T12642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.548581][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 299.653097][ T8934] IPVS: starting estimator thread 0... [ 299.750552][T12647] IPVS: using max 26 ests per chain, 62400 per kthread [ 299.797584][T12650] tipc: Enabled bearer , priority 0 [ 299.827943][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 299.844997][T12649] syzkaller0: entered promiscuous mode [ 299.866809][T12649] syzkaller0: entered allmulticast mode [ 299.919427][T12649] tipc: Resetting bearer [ 299.957624][T12650] tipc: Resetting bearer [ 299.978325][T12650] tipc: Disabling bearer [ 299.989233][T12652] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 300.108391][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 300.164493][T12662] nbd: nbd0 already in use [ 300.179802][T12662] block nbd0: NBD_DISCONNECT [ 300.185254][T12662] block nbd0: Send disconnect failed -32 [ 300.201906][T12662] block nbd0: shutting down sockets [ 300.434320][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 300.484817][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1660'. [ 300.540988][ T30] audit: type=1800 audit(1756651680.000:39): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1661" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1779 res=0 errno=0 [ 300.563953][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'. [ 300.647175][T12692] netlink: 'syz.0.1662': attribute type 7 has an invalid length. [ 300.655362][T12692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1662'. [ 300.833273][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 301.046089][T12716] tipc: Enabled bearer , priority 0 [ 301.054690][T12716] syzkaller0: entered promiscuous mode [ 301.064493][T12716] syzkaller0: entered allmulticast mode [ 301.223093][T12714] tipc: Resetting bearer [ 301.278143][T12714] tipc: Disabling bearer [ 301.434424][T12741] netlink: 'syz.2.1679': attribute type 1 has an invalid length. [ 301.450191][T12741] netlink: 'syz.2.1679': attribute type 3 has an invalid length. [ 301.644242][T12748] lo speed is unknown, defaulting to 1000 [ 301.672439][T12748] lo speed is unknown, defaulting to 1000 [ 302.256661][T12748] lo speed is unknown, defaulting to 1000 [ 302.387274][T12774] lo speed is unknown, defaulting to 1000 [ 302.423009][T12774] lo speed is unknown, defaulting to 1000 [ 302.891520][T12789] __nla_validate_parse: 54 callbacks suppressed [ 302.891539][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 302.953823][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.017707][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.078409][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.131136][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.197835][T12774] lo speed is unknown, defaulting to 1000 [ 303.197928][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.345216][T12798] sctp: [Deprecated]: syz.3.1693 (pid 12798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.345216][T12798] Use struct sctp_sack_info instead [ 303.362775][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.450573][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.496623][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.580317][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 303.859002][T12802] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 304.059130][T12802] geneve0: entered promiscuous mode [ 304.065898][T12802] team0: Port device geneve0 added [ 304.091446][T12807] ip6tnl2: entered promiscuous mode [ 304.096732][T12807] ip6tnl2: entered allmulticast mode [ 304.126993][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.257798][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.280933][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.328486][T12813] lo speed is unknown, defaulting to 1000 [ 304.349495][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.399531][T12813] lo speed is unknown, defaulting to 1000 [ 304.526228][T12824] netlink: 'syz.1.1700': attribute type 39 has an invalid length. [ 304.553326][T12823] tipc: Enabling of bearer rejected, already enabled [ 304.655724][T12827] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 304.692199][T12827] netlink: 'syz.4.1701': attribute type 10 has an invalid length. [ 304.729800][T12827] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.743955][T12827] 8021q: VLANs not supported on ipvlan0 [ 304.799136][T12829] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 304.812548][T12828] lo speed is unknown, defaulting to 1000 [ 305.107444][T12828] lo speed is unknown, defaulting to 1000 [ 305.107444][T12813] lo speed is unknown, defaulting to 1000 [ 305.528846][T12828] lo speed is unknown, defaulting to 1000 [ 305.715811][T12849] tc_dump_action: action bad kind [ 307.180368][T12873] syzkaller1: entered promiscuous mode [ 307.188382][T12873] syzkaller1: entered allmulticast mode [ 307.353514][T12880] ip6tnl1: entered promiscuous mode [ 307.385150][T12880] ip6tnl1: entered allmulticast mode [ 307.432866][T12886] smc: removing ib device syz0 [ 307.639629][T12894] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 308.698188][T12924] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 308.851029][T12939] __nla_validate_parse: 8 callbacks suppressed [ 308.851051][T12939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1725'. [ 309.038778][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 309.279387][T12947] vlan3: entered promiscuous mode [ 309.280043][T12952] sctp: [Deprecated]: syz.0.1729 (pid 12952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.280043][T12952] Use struct sctp_sack_info instead [ 309.290041][T12947] gretap0: entered promiscuous mode [ 309.424148][T12957] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1732'. [ 309.607545][T12964] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 309.678295][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 309.823947][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1736'. [ 310.014371][T12972] bond1: (slave bridge6): making interface the new active one [ 310.025479][T12972] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 310.143046][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 310.152113][T12967] 8021q: adding VLAN 0 to HW filter on device bond7 [ 310.154416][T12967] bond6: (slave bond7): Enslaving as an active interface with an up link [ 310.159399][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 310.182697][T12975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.245998][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 310.447511][T12991] lo speed is unknown, defaulting to 1000 [ 310.470521][T13000] netlink: 'syz.0.1744': attribute type 4 has an invalid length. [ 310.613918][T12991] lo speed is unknown, defaulting to 1000 [ 310.649737][T13013] netlink: 'syz.4.1747': attribute type 4 has an invalid length. [ 310.683258][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 310.921970][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1751'. [ 311.064641][T13024] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 311.077567][T13024] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 311.148104][T13024] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 311.369394][T13041] lo speed is unknown, defaulting to 1000 [ 311.397405][T13041] lo speed is unknown, defaulting to 1000 [ 312.237721][T13066] tipc: Failed to remove unknown binding: 66,1,1/0:3586515473/3586515475 [ 312.264067][T13066] tipc: Failed to remove unknown binding: 66,1,1/0:3586515473/3586515475 [ 312.273220][T13066] tipc: Failed to remove unknown binding: 66,1,1/0:3586515473/3586515475 [ 312.310749][ T5882] Bluetooth: hci1: command 0x0405 tx timeout [ 312.498432][T13079] netlink: 'syz.1.1767': attribute type 21 has an invalid length. [ 312.557215][T13076] vlan0: entered promiscuous mode [ 312.595701][T13076] team0: Port device vlan0 added [ 312.717829][T13079] netlink: 'syz.1.1767': attribute type 5 has an invalid length. [ 312.732401][T13079] netlink: 'syz.1.1767': attribute type 6 has an invalid length. [ 312.808479][T13085] macsec0: entered promiscuous mode [ 312.823320][T13085] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 312.834127][T13085] macsec0: entered allmulticast mode [ 312.839592][T13085] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 312.848832][T13089] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 312.927456][T13089] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 322.635220][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.029144][T13122] __nla_validate_parse: 3 callbacks suppressed [ 375.029170][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'. [ 375.064043][T13123] openvswitch: netlink: IP tunnel dst address not specified [ 375.066488][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.073199][T13119] can: request_module (can-proto-0) failed. [ 375.088833][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.114869][T13122] netlink: 'syz.1.1780': attribute type 3 has an invalid length. [ 375.239671][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 375.378967][T13140] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.502215][T13144] lo speed is unknown, defaulting to 1000 [ 375.514782][T13144] lo speed is unknown, defaulting to 1000 [ 375.886723][T13155] netem: incorrect ge model size [ 375.907216][T13155] netem: change failed [ 375.962244][T13155] dvmrp8: entered allmulticast mode [ 375.985823][T13154] dvmrp8: left allmulticast mode [ 376.186771][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 376.209717][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1793'. [ 376.235039][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1793'. [ 376.418042][T13179] netlink: 'syz.3.1796': attribute type 6 has an invalid length. [ 376.606488][T13184] lo speed is unknown, defaulting to 1000 [ 376.626920][T13184] lo speed is unknown, defaulting to 1000 [ 376.971365][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 377.137633][T13211] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1805'. [ 377.289083][T13214] netlink: 'syz.2.1806': attribute type 30 has an invalid length. [ 377.480288][T13221] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 377.535822][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'. [ 377.942095][T13239] netem: change failed [ 378.206438][T13239] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1810'. [ 378.248899][T13239] netlink: 161 bytes leftover after parsing attributes in process `syz.3.1810'. [ 378.281130][T13241] lo speed is unknown, defaulting to 1000 [ 378.288725][T13241] lo speed is unknown, defaulting to 1000 [ 378.362948][T13245] gretap2: entered promiscuous mode [ 378.665869][T13237] lo speed is unknown, defaulting to 1000 [ 378.727008][T13237] lo speed is unknown, defaulting to 1000 [ 378.862682][T13263] openvswitch: netlink: Flow key attr not present in new flow. [ 379.723124][T13292] netlink: 'syz.1.1829': attribute type 1 has an invalid length. [ 379.839046][T13292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.856804][T13299] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 379.887139][T13299] netlink: 'syz.2.1830': attribute type 2 has an invalid length. [ 379.895124][T13299] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 379.914035][T13293] veth7: entered promiscuous mode [ 379.922872][T13301] bond0: (slave syz_tun): Releasing backup interface [ 379.933468][T13301] bond0: (slave bond_slave_0): Releasing backup interface [ 379.942915][T13301] bond0: (slave bond_slave_1): Releasing backup interface [ 379.954299][T13301] team_slave_0: left promiscuous mode [ 379.963799][T13301] team0: Port device team_slave_0 removed [ 379.972498][T13301] team_slave_1: left promiscuous mode [ 379.979532][T13301] team0: Port device team_slave_1 removed [ 379.987398][T13301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.996388][T13301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.006226][T13301] geneve0: left promiscuous mode [ 380.017835][T13301] team0: Port device geneve0 removed [ 380.025355][T13301] bond0: (slave wlan1): Releasing backup interface [ 380.034728][T13301] batman_adv: batadv0: Removing interface: ipvlan2 [ 380.053572][ T6226] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.066501][ T6226] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.089993][ T6226] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.106633][ T6226] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.171896][T13307] __nla_validate_parse: 6 callbacks suppressed [ 380.171917][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 380.438536][T13311] can: request_module (can-proto-0) failed. [ 380.513464][T13314] "syz.1.1834" (13314) uses obsolete ecb(arc4) skcipher [ 380.660540][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1839'. [ 380.692201][T13333] vlan2: entered promiscuous mode [ 380.714996][T13333] vlan2: entered allmulticast mode [ 380.725473][T13333] hsr_slave_1: entered allmulticast mode [ 380.761495][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1838'. [ 380.838271][T13342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.855307][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 380.879439][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 380.908890][T13346] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1843'. [ 381.310736][T13364] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1847'. [ 381.718421][T13390] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1852'. [ 381.744622][T13390] vlan4: entered allmulticast mode [ 381.752092][T13390] gretap0: entered allmulticast mode [ 382.088079][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 382.138466][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 382.169616][T13380] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.216905][ T6240] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.238912][ T6240] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.277535][ T6240] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.327828][T13413] lo speed is unknown, defaulting to 1000 [ 382.376179][T13413] lo speed is unknown, defaulting to 1000 [ 382.506103][T13425] netlink: 'syz.2.1864': attribute type 15 has an invalid length. [ 382.864421][T13435] tc_dump_action: action bad kind [ 383.138397][T13457] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20000 [ 383.461382][T13476] netlink: 'syz.0.1878': attribute type 13 has an invalid length. [ 383.773019][T13500] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 383.795821][T13501] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 383.808892][T13501] netlink: 'syz.0.1884': attribute type 10 has an invalid length. [ 383.809018][T13490] lo speed is unknown, defaulting to 1000 [ 383.824903][T13500] ip6erspan0: entered promiscuous mode [ 383.922968][T13501] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 383.947923][T13490] lo speed is unknown, defaulting to 1000 [ 384.085564][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.101837][T13512] openvswitch: netlink: IP tunnel dst address not specified [ 384.400476][T13522] lo speed is unknown, defaulting to 1000 [ 384.408063][T13522] lo speed is unknown, defaulting to 1000 [ 384.805562][T13550] netlink: 'syz.0.1897': attribute type 3 has an invalid length. [ 384.997199][T13540] lo speed is unknown, defaulting to 1000 [ 385.061509][T13560] sctp: [Deprecated]: syz.4.1895 (pid 13560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.061509][T13560] Use struct sctp_sack_info instead [ 385.283301][T13540] lo speed is unknown, defaulting to 1000 [ 385.594875][T13572] __nla_validate_parse: 5 callbacks suppressed [ 385.594893][T13572] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1902'. [ 385.614555][T13572] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1902'. [ 385.627572][T13572] 0·: renamed from ..0· (while UP) [ 385.635815][T13572] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 385.838867][T13581] team0: entered promiscuous mode [ 385.869182][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 386.116813][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 386.212630][T13581] team0 (unregistering): left promiscuous mode [ 386.224483][T13581] team0 (unregistering): Port device bridge3 removed [ 386.245313][T13583] lo speed is unknown, defaulting to 1000 [ 386.341234][T13583] lo speed is unknown, defaulting to 1000 [ 386.360843][T13544] infiniband syz0: set down [ 386.365689][T13544] infiniband syz0: added veth1_to_hsr [ 386.385245][T13544] syz0: rxe_create_cq: returned err = -12 [ 386.403693][T13544] infiniband syz0: Couldn't create ib_mad CQ [ 386.411210][T13544] infiniband syz0: Couldn't open port 1 [ 386.507489][T13544] RDS/IB: syz0: added [ 386.527235][T13544] smc: adding ib device syz0 with port count 1 [ 386.534130][T13544] smc: ib device syz0 port 1 has pnetid [ 386.584407][T13603] lo speed is unknown, defaulting to 1000 [ 386.594687][T13606] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.609166][T13606] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 386.686814][T13603] lo speed is unknown, defaulting to 1000 [ 386.698864][T13606] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.713346][T13606] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 386.795485][T13606] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.806075][T13606] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 386.896460][T13606] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.907223][T13606] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 387.032824][T13379] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.058122][T13379] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 387.095802][T13383] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.120024][T13383] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 387.161293][ T6234] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.169546][ T6234] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 387.199800][ T6234] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.213044][ T6234] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 387.263650][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 387.669465][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 387.694204][T13638] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1921'. [ 387.829665][T13641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1922'. [ 387.845354][T13641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1922'. [ 388.017230][T13645] syzkaller1: entered promiscuous mode [ 388.023917][T13645] syzkaller1: entered allmulticast mode [ 388.035389][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 388.327509][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.342507][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.355974][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.365790][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.374607][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.383899][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.393194][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.403043][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.411902][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.421300][T13651] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 388.525349][ T30] audit: type=1800 audit(1756651768.010:40): pid=13655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1928" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2072 res=0 errno=0 [ 388.810595][T13661] nbd: socks must be embedded in a SOCK_ITEM attr [ 391.147199][T13729] __nla_validate_parse: 10 callbacks suppressed [ 391.147220][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1950'. [ 391.170736][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 391.352772][T13734] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1953'. [ 391.818139][T13753] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1956'. [ 391.827506][T13753] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1956'. [ 391.837463][T13763] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1960'. [ 392.320988][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 392.523010][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 392.919032][ T30] audit: type=1800 audit(1756651772.400:41): pid=13791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1969" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1917 res=0 errno=0 [ 392.925202][T13791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1969'. [ 392.954645][T13794] GUP no longer grows the stack in syz.1.1970 (13794): 200000003000-20000000a000 (200000001000) [ 392.972074][T13794] CPU: 0 UID: 0 PID: 13794 Comm: syz.1.1970 Not tainted syzkaller #0 PREEMPT(full) [ 392.972107][T13794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.972128][T13794] Call Trace: [ 392.972137][T13794] [ 392.972148][T13794] dump_stack_lvl+0x189/0x250 [ 392.972183][T13794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.972210][T13794] ? __pfx__printk+0x10/0x10 [ 392.972235][T13794] ? find_vma+0xe7/0x160 [ 392.972267][T13794] ? __lock_acquire+0xab9/0xd20 [ 392.972312][T13794] __get_user_pages+0x24d0/0x2ce0 [ 392.972340][T13794] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 392.972417][T13794] ? rcu_is_watching+0x15/0xb0 [ 392.972445][T13794] __gup_longterm_locked+0xde9/0x1660 [ 392.972499][T13794] ? sanity_check_pinned_pages+0x123a/0x1300 [ 392.972534][T13794] gup_fast_fallback+0x1e6a/0x2010 [ 392.972597][T13794] ? __pfx_gup_fast_fallback+0x10/0x10 [ 392.972619][T13794] ? stack_trace_save+0x9c/0xe0 [ 392.972642][T13794] ? __pfx_stack_trace_save+0x10/0x10 [ 392.972685][T13794] ? pin_user_pages_fast+0x4d/0xb0 [ 392.972714][T13794] iov_iter_extract_pages+0x35a/0x5e0 [ 392.972749][T13794] extract_iter_to_sg+0xe46/0x24e0 [ 392.972787][T13794] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 392.972837][T13794] ? __asan_memset+0x22/0x50 [ 392.972863][T13794] af_alg_get_rsgl+0x436/0x810 [ 392.972929][T13794] aead_recvmsg+0x4cc/0x13f0 [ 392.972994][T13794] ? __pfx_aead_recvmsg+0x10/0x10 [ 392.973028][T13794] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 392.973059][T13794] ? __pfx_aead_recvmsg+0x10/0x10 [ 392.973089][T13794] sock_recvmsg_nosec+0x183/0x1c0 [ 392.973124][T13794] ____sys_recvmsg+0x3aa/0x460 [ 392.973158][T13794] ? __pfx_____sys_recvmsg+0x10/0x10 [ 392.973201][T13794] ? import_iovec+0x74/0xa0 [ 392.973228][T13794] ___sys_recvmsg+0x1b5/0x510 [ 392.973258][T13794] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.973318][T13794] ? __might_fault+0xb0/0x130 [ 392.973351][T13794] do_recvmmsg+0x307/0x770 [ 392.973387][T13794] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.973408][T13794] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 392.973454][T13794] ? __pfx_do_futex+0x10/0x10 [ 392.973499][T13794] __x64_sys_recvmmsg+0x190/0x240 [ 392.973528][T13794] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 392.973550][T13794] ? rcu_is_watching+0x15/0xb0 [ 392.973577][T13794] ? do_syscall_64+0xbe/0x3b0 [ 392.973603][T13794] do_syscall_64+0xfa/0x3b0 [ 392.973625][T13794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.973645][T13794] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.973665][T13794] ? clear_bhb_loop+0x60/0xb0 [ 392.973690][T13794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.973717][T13794] RIP: 0033:0x7f7df478ebe9 [ 392.973736][T13794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.973755][T13794] RSP: 002b:00007f7df55cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.973778][T13794] RAX: ffffffffffffffda RBX: 00007f7df49c5fa0 RCX: 00007f7df478ebe9 [ 392.973793][T13794] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a [ 392.973805][T13794] RBP: 00007f7df4811e19 R08: 0000000000000000 R09: 0000000000000000 [ 392.973818][T13794] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 392.973830][T13794] R13: 00007f7df49c6038 R14: 00007f7df49c5fa0 R15: 00007fff46ce09c8 [ 392.973864][T13794] [ 393.364875][T13801] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1974'. [ 394.388295][T13822] veth9: entered promiscuous mode [ 394.447966][T13809] lo speed is unknown, defaulting to 1000 [ 394.625095][T13809] lo speed is unknown, defaulting to 1000 [ 395.044748][ T30] audit: type=1800 audit(1756651774.520:42): pid=13861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1985" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1945 res=0 errno=0 [ 395.391674][T13874] validate_nla: 32 callbacks suppressed [ 395.391702][T13874] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 395.799243][T13893] lo speed is unknown, defaulting to 1000 [ 395.808854][T13893] lo speed is unknown, defaulting to 1000 [ 395.826419][T13892] block nbd0: server does not support multiple connections per device. [ 395.848570][T13892] block nbd0: shutting down sockets [ 395.941700][T13895] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 396.219778][T13887] lo speed is unknown, defaulting to 1000 [ 396.277659][T13887] lo speed is unknown, defaulting to 1000 [ 396.396861][T13909] __nla_validate_parse: 2 callbacks suppressed [ 396.396880][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 396.468851][T13910] syz_tun: entered allmulticast mode [ 396.499625][T13908] syz_tun: left allmulticast mode [ 396.817774][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 396.834922][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 396.844346][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 396.889404][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 396.924651][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 396.947869][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 397.375325][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 397.550534][T13941] syzkaller1: entered promiscuous mode [ 397.561568][T13941] syzkaller1: entered allmulticast mode [ 397.590956][T13934] lo speed is unknown, defaulting to 1000 [ 397.751049][T13949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2010'. [ 397.776390][T13934] lo speed is unknown, defaulting to 1000 [ 398.188781][T13965] bond4: (slave ip6gretap1): Releasing active interface [ 398.290583][T13965] bond5: (slave bond6): Releasing backup interface [ 398.432310][T13979] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 398.722912][T13987] team_slave_0: entered promiscuous mode [ 398.729030][T13987] team_slave_1: entered promiscuous mode [ 398.736167][T13987] bond_slave_0: entered promiscuous mode [ 398.742179][T13987] bridge0: entered promiscuous mode [ 398.747718][T13987] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 398.782771][T13993] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2024'. [ 398.783997][T13987] macsec1: entered promiscuous mode [ 398.805853][T13987] team0: entered promiscuous mode [ 398.812362][T13987] bond0: entered promiscuous mode [ 398.892582][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.924872][T13992] netlink: 'syz.1.2022': attribute type 8 has an invalid length. [ 398.933592][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.995342][T13992] bond0: entered promiscuous mode [ 399.035674][T13992] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 399.079162][T13992] ip6gretap0: entered promiscuous mode [ 399.109838][T13992] debugfs: 'hsr0' already exists in 'hsr' [ 399.137722][T13992] Cannot create hsr debugfs directory [ 399.168933][T13992] hsr0: entered promiscuous mode [ 399.315751][T13998] syz.2.2024 (13998) used greatest stack depth: 17864 bytes left [ 399.434827][T14014] lo speed is unknown, defaulting to 1000 [ 399.456398][T14014] lo speed is unknown, defaulting to 1000 [ 400.104650][T14034] bond9: entered promiscuous mode [ 400.528831][T14058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.654672][T14060] tipc: Enabling of bearer rejected, already enabled [ 400.933238][T14080] lo speed is unknown, defaulting to 1000 [ 400.956723][T14080] lo speed is unknown, defaulting to 1000 [ 401.084218][T14095] netlink: 'syz.2.2056': attribute type 15 has an invalid length. [ 401.122857][T14099] netlink: 'syz.4.2055': attribute type 21 has an invalid length. [ 401.126431][T14100] netlink: 'syz.1.2054': attribute type 10 has an invalid length. [ 401.167168][T14100] team0: Device dummy0 failed to register rx_handler [ 401.200943][T14101] netlink: 'syz.1.2054': attribute type 10 has an invalid length. [ 401.618053][T14120] __nla_validate_parse: 9 callbacks suppressed [ 401.618076][T14120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2062'. [ 402.401567][T14161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2075'. [ 402.410590][ T30] audit: type=1800 audit(1756651781.880:43): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2075" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2266 res=0 errno=0 [ 402.460659][T14163] netlink: 'syz.0.2074': attribute type 15 has an invalid length. [ 402.739737][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 403.001709][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 403.013875][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 403.025464][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 403.716262][T14204] netlink: 'syz.1.2085': attribute type 13 has an invalid length. [ 403.728059][T14203] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 403.780271][T14204] netlink: 'syz.1.2085': attribute type 17 has an invalid length. [ 403.898740][T14204] netlink: 'syz.1.2085': attribute type 27 has an invalid length. [ 403.935885][T14205] lo speed is unknown, defaulting to 1000 [ 403.953468][T14205] lo speed is unknown, defaulting to 1000 [ 403.996368][T14209] netlink: 'syz.3.2087': attribute type 7 has an invalid length. [ 404.025516][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 404.075778][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'. [ 404.113656][T14211] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 404.459713][T14225] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2093'. [ 404.693616][T14234] syzkaller0: entered allmulticast mode [ 404.988792][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 405.036085][T14254] netlink: 'syz.4.2098': attribute type 4 has an invalid length. [ 405.295413][T14265] rdma_rxe: rxe_newlink: failed to add wlan1 [ 405.796003][T14283] lo speed is unknown, defaulting to 1000 [ 405.870854][T14283] lo speed is unknown, defaulting to 1000 [ 406.078733][T14304] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 406.563676][T14317] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 406.629190][ T5882] Bluetooth: hci1: link tx timeout [ 406.636450][ T5882] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.675628][T14316] lo speed is unknown, defaulting to 1000 [ 406.710239][ T5872] Bluetooth: hci1: link tx timeout [ 406.715423][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.726920][ T5872] Bluetooth: hci1: link tx timeout [ 406.732541][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.745210][ T5872] Bluetooth: hci1: link tx timeout [ 406.750529][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.765107][T14316] lo speed is unknown, defaulting to 1000 [ 406.783691][ T5872] Bluetooth: hci1: link tx timeout [ 406.788877][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.797754][ T5872] Bluetooth: hci1: link tx timeout [ 406.807911][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.825552][ T5872] Bluetooth: hci1: link tx timeout [ 406.831007][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.838691][ T5872] Bluetooth: hci1: link tx timeout [ 406.844012][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.856121][ T5872] Bluetooth: hci1: link tx timeout [ 406.861390][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.869064][ T5872] Bluetooth: hci1: link tx timeout [ 406.878037][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.887691][ T5872] Bluetooth: hci1: link tx timeout [ 406.893044][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.900813][ T5872] Bluetooth: hci1: link tx timeout [ 406.905948][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.935237][ T5872] Bluetooth: hci1: link tx timeout [ 406.940791][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.948769][ T5872] Bluetooth: hci1: link tx timeout [ 406.954224][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.962134][ T5872] Bluetooth: hci1: link tx timeout [ 406.967274][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.994208][ T5872] Bluetooth: hci1: link tx timeout [ 406.999384][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 407.007554][ T5872] Bluetooth: hci1: link tx timeout [ 407.012745][ T5872] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 407.381154][T14336] __nla_validate_parse: 3 callbacks suppressed [ 407.381173][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 407.409773][T14337] validate_nla: 1 callbacks suppressed [ 407.409797][T14337] netlink: 'syz.4.2116': attribute type 13 has an invalid length. [ 407.429077][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'. [ 407.448713][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 407.458952][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'. [ 407.476262][T14340] netlink: 'syz.4.2116': attribute type 2 has an invalid length. [ 407.489834][T14336] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2117'. [ 407.613650][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 408.035377][T13380] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.052724][T14362] openvswitch: netlink: IP tunnel dst address not specified [ 408.063015][T13380] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.083898][T14364] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 408.115131][T13380] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.179196][T13380] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.287795][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 408.327339][T14369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2125'. [ 408.529042][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 408.560953][T14373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2127'. [ 408.714000][ T5872] Bluetooth: hci1: command 0x0405 tx timeout [ 408.991385][T14396] lo speed is unknown, defaulting to 1000 [ 409.004662][T14381] lo speed is unknown, defaulting to 1000 [ 409.026663][T14381] lo speed is unknown, defaulting to 1000 [ 409.167369][T14388] lo speed is unknown, defaulting to 1000 [ 409.176172][T14388] lo speed is unknown, defaulting to 1000 [ 409.360382][T14414] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 409.791720][T14431] lo speed is unknown, defaulting to 1000 [ 409.851563][T14431] lo speed is unknown, defaulting to 1000 [ 411.317708][T14471] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 411.830034][ T5872] Bluetooth: hci1: command 0x0405 tx timeout [ 412.654357][T14507] lo speed is unknown, defaulting to 1000 [ 412.694526][T14507] lo speed is unknown, defaulting to 1000 [ 412.695792][T14520] netlink: 'syz.2.2165': attribute type 28 has an invalid length. [ 412.747385][ T30] audit: type=1107 audit(1756651792.230:44): pid=14518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 412.748129][T14522] delete_channel: no stack [ 412.828094][T14522] dvmrp1: entered allmulticast mode [ 412.831492][T14523] netlink: 'syz.2.2165': attribute type 10 has an invalid length. [ 412.954073][T14523] __nla_validate_parse: 5 callbacks suppressed [ 412.954094][T14523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2165'. [ 413.517538][T14543] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2172'. [ 413.701527][T14553] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 413.773810][T14555] netlink: 'syz.4.2177': attribute type 9 has an invalid length. [ 413.785186][T14555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2177'. [ 414.309250][T14533] tipc: Resetting bearer [ 414.409423][T14533] tipc: Resetting bearer [ 414.496275][T14535] geneve2: entered promiscuous mode [ 414.506543][T14535] geneve2: entered allmulticast mode [ 414.575920][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.613909][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 414.728798][T14569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2178'. [ 414.828191][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.868779][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 414.892100][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.912785][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 414.923380][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.932963][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 415.051405][ T30] audit: type=1800 audit(1756651794.530:45): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2184" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2233 res=0 errno=0 [ 415.115453][T14563] lo speed is unknown, defaulting to 1000 [ 415.164163][T14563] lo speed is unknown, defaulting to 1000 [ 415.189682][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 415.293044][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2182'. [ 415.331668][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2182'. [ 415.370609][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2182'. [ 415.423922][T14575] lo speed is unknown, defaulting to 1000 [ 415.456776][T14575] lo speed is unknown, defaulting to 1000 [ 415.517211][T14599] netlink: 'syz.1.2187': attribute type 31 has an invalid length. [ 415.616390][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 415.951141][T14614] veth1_to_hsr: entered allmulticast mode [ 416.110965][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2193'. [ 416.668803][T14627] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 416.981311][T14634] dvmrp8: entered allmulticast mode [ 417.086699][T14631] dvmrp8: left allmulticast mode [ 417.472982][T14657] netlink: 'syz.0.2204': attribute type 22 has an invalid length. [ 417.552379][ T6234] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.563539][T14657] netlink: 'syz.0.2204': attribute type 22 has an invalid length. [ 417.592856][T13383] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.630396][T13383] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.673276][T13383] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.145718][T14685] __nla_validate_parse: 2 callbacks suppressed [ 418.145738][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 418.166624][T14685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2211'. [ 418.189684][T14685] gretap3: entered promiscuous mode [ 418.203783][T14687] syz_tun: entered allmulticast mode [ 418.217937][T14689] dvmrp8: entered allmulticast mode [ 418.267267][T14688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2210'. [ 418.284747][T14688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2210'. [ 418.315979][T14690] syz_tun: left allmulticast mode [ 418.343641][T14690] dvmrp8: left allmulticast mode [ 418.491813][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'. [ 418.511998][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'. [ 418.590503][T14701] netlink: 'syz.1.2214': attribute type 1 has an invalid length. [ 418.613756][T14705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2217'. [ 418.801531][T14710] tipc: Enabled bearer , priority 0 [ 418.821044][T14710] syzkaller0: entered promiscuous mode [ 418.954364][T14710] syzkaller0: entered allmulticast mode [ 418.998974][T14710] tipc: Resetting bearer [ 419.016024][T14710] ¾x9ÿ: renamed from bridge_slave_0 [ 419.056436][T14709] tipc: Resetting bearer [ 419.104734][T14709] tipc: Disabling bearer [ 419.238314][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 419.268533][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 419.374720][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2225'. [ 419.587134][T14736] bond11: entered promiscuous mode [ 419.595907][T14736] bond11: entered allmulticast mode [ 419.601735][T14736] 8021q: adding VLAN 0 to HW filter on device bond11 [ 419.856339][T14743] lo speed is unknown, defaulting to 1000 [ 419.865159][T14743] lo speed is unknown, defaulting to 1000 [ 420.261396][T14763] ================================================================== [ 420.269647][T14763] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 420.277590][T14763] Read of size 1 at addr ffff888021f80770 by task syz.1.2231/14763 [ 420.285525][T14763] [ 420.287936][T14763] CPU: 1 UID: 0 PID: 14763 Comm: syz.1.2231 Not tainted syzkaller #0 PREEMPT(full) [ 420.287964][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.287978][T14763] Call Trace: [ 420.287987][T14763] [ 420.287996][T14763] dump_stack_lvl+0x189/0x250 [ 420.288025][T14763] ? __kasan_check_byte+0x12/0x40 [ 420.288058][T14763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.288082][T14763] ? lock_release+0x4b/0x3e0 [ 420.288118][T14763] ? __virt_addr_valid+0x4a5/0x5c0 [ 420.288146][T14763] print_report+0xca/0x240 [ 420.288165][T14763] ? xfrm_state_find+0x2cf2/0x5400 [ 420.288187][T14763] kasan_report+0x118/0x150 [ 420.288218][T14763] ? xfrm_state_find+0x2cf2/0x5400 [ 420.288246][T14763] xfrm_state_find+0x2cf2/0x5400 [ 420.288268][T14763] ? unwind_get_return_address+0x4d/0x90 [ 420.288292][T14763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.288330][T14763] ? xfrm_state_find+0x1da/0x5400 [ 420.288355][T14763] ? __pfx_xfrm_state_find+0x10/0x10 [ 420.288381][T14763] ? trace_fib_table_lookup+0x85/0x200 [ 420.288409][T14763] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 420.288453][T14763] ? fib_rules_lookup+0xc55/0xe90 [ 420.288477][T14763] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 420.288506][T14763] ? __lock_acquire+0xab9/0xd20 [ 420.288557][T14763] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 420.288594][T14763] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 420.288624][T14763] ? xfrm_expand_policies+0x41f/0x6a0 [ 420.288655][T14763] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 420.288688][T14763] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 420.288716][T14763] ? rcuref_put+0x1b7/0x210 [ 420.288741][T14763] ? __pfx_rcuref_put+0x10/0x10 [ 420.288767][T14763] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 420.288801][T14763] xfrm_lookup_route+0x3c/0x1c0 [ 420.288830][T14763] __ip4_datagram_connect+0x9a5/0x1270 [ 420.288867][T14763] __ip6_datagram_connect+0x9f0/0x1150 [ 420.288905][T14763] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 420.288935][T14763] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.288955][T14763] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 420.288981][T14763] ip6_datagram_connect_v6_only+0x63/0xa0 [ 420.289026][T14763] __sys_connect+0x316/0x440 [ 420.289046][T14763] ? __pfx___sys_connect+0x10/0x10 [ 420.289072][T14763] ? rcu_is_watching+0x15/0xb0 [ 420.289096][T14763] __x64_sys_connect+0x7a/0x90 [ 420.289116][T14763] do_syscall_64+0xfa/0x3b0 [ 420.289137][T14763] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.289155][T14763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.289176][T14763] ? clear_bhb_loop+0x60/0xb0 [ 420.289198][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.289218][T14763] RIP: 0033:0x7f7df478ebe9 [ 420.289236][T14763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.289254][T14763] RSP: 002b:00007f7df55cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 420.289275][T14763] RAX: ffffffffffffffda RBX: 00007f7df49c5fa0 RCX: 00007f7df478ebe9 [ 420.289291][T14763] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 420.289304][T14763] RBP: 00007f7df4811e19 R08: 0000000000000000 R09: 0000000000000000 [ 420.289318][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.289330][T14763] R13: 00007f7df49c6038 R14: 00007f7df49c5fa0 R15: 00007fff46ce09c8 [ 420.289355][T14763] [ 420.289362][T14763] [ 420.617182][T14763] Allocated by task 14231: [ 420.621604][T14763] kasan_save_track+0x3e/0x80 [ 420.626294][T14763] __kasan_slab_alloc+0x6c/0x80 [ 420.631150][T14763] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 420.637053][T14763] kmalloc_reserve+0xbd/0x290 [ 420.641725][T14763] __alloc_skb+0x142/0x2d0 [ 420.646139][T14763] napi_alloc_skb+0x84/0x7d0 [ 420.650729][T14763] page_to_skb+0x288/0x930 [ 420.655143][T14763] receive_buf+0x45f/0x15e0 [ 420.659664][T14763] virtnet_poll+0x1fbc/0x2d80 [ 420.664344][T14763] __napi_poll+0xc4/0x360 [ 420.668684][T14763] net_rx_action+0x707/0xe30 [ 420.673279][T14763] handle_softirqs+0x283/0x870 [ 420.678047][T14763] __irq_exit_rcu+0xca/0x1f0 [ 420.682639][T14763] irq_exit_rcu+0x9/0x30 [ 420.686878][T14763] common_interrupt+0xbb/0xe0 [ 420.691562][T14763] asm_common_interrupt+0x26/0x40 [ 420.696596][T14763] [ 420.698924][T14763] Freed by task 14231: [ 420.702985][T14763] kasan_save_track+0x3e/0x80 [ 420.707664][T14763] kasan_save_free_info+0x46/0x50 [ 420.712691][T14763] __kasan_slab_free+0x5b/0x80 [ 420.717457][T14763] kmem_cache_free+0x18f/0x400 [ 420.722229][T14763] skb_release_data+0x62d/0x7c0 [ 420.727086][T14763] kfree_skb_partial+0x97/0xb0 [ 420.731848][T14763] tcp_data_queue+0x1ee9/0x6380 [ 420.736705][T14763] tcp_rcv_established+0xf9e/0x1eb0 [ 420.741902][T14763] tcp_v4_do_rcv+0xa23/0xce0 [ 420.746485][T14763] tcp_v4_rcv+0x252a/0x2db0 [ 420.750986][T14763] ip_protocol_deliver_rcu+0x221/0x440 [ 420.756441][T14763] ip_local_deliver_finish+0x3bb/0x6f0 [ 420.761897][T14763] NF_HOOK+0x309/0x3a0 [ 420.765963][T14763] ip_sublist_rcv_finish+0x221/0x2a0 [ 420.771251][T14763] ip_sublist_rcv+0x74c/0xa10 [ 420.775933][T14763] ip_list_rcv+0x3e2/0x430 [ 420.780347][T14763] __netif_receive_skb_list_core+0x7d2/0x800 [ 420.786338][T14763] netif_receive_skb_list_internal+0x96f/0xcb0 [ 420.792499][T14763] napi_complete_done+0x2f2/0x7c0 [ 420.797531][T14763] virtnet_poll+0x23a6/0x2d80 [ 420.802218][T14763] __napi_poll+0xc4/0x360 [ 420.806566][T14763] net_rx_action+0x707/0xe30 [ 420.811157][T14763] handle_softirqs+0x283/0x870 [ 420.815956][T14763] __irq_exit_rcu+0xca/0x1f0 [ 420.820548][T14763] irq_exit_rcu+0x9/0x30 [ 420.824803][T14763] common_interrupt+0xbb/0xe0 [ 420.829483][T14763] asm_common_interrupt+0x26/0x40 [ 420.834505][T14763] [ 420.836831][T14763] The buggy address belongs to the object at ffff888021f80680 [ 420.836831][T14763] which belongs to the cache skbuff_small_head of size 704 [ 420.851405][T14763] The buggy address is located 240 bytes inside of [ 420.851405][T14763] freed 704-byte region [ffff888021f80680, ffff888021f80940) [ 420.865202][T14763] [ 420.867525][T14763] The buggy address belongs to the physical page: [ 420.873948][T14763] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21f80 [ 420.882720][T14763] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 420.891221][T14763] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 420.899201][T14763] page_type: f5(slab) [ 420.903183][T14763] raw: 00fff00000000040 ffff888141689b40 0000000000000000 0000000000000001 [ 420.911765][T14763] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 420.920358][T14763] head: 00fff00000000040 ffff888141689b40 0000000000000000 0000000000000001 [ 420.929046][T14763] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 420.937722][T14763] head: 00fff00000000002 ffffea000087e001 00000000ffffffff 00000000ffffffff [ 420.946394][T14763] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 420.955058][T14763] page dumped because: kasan: bad access detected [ 420.961482][T14763] page_owner tracks the page as allocated [ 420.967194][T14763] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13606, tgid 13605 (syz.3.1911), ts 387029436116, free_ts 377845047287 [ 420.988563][T14763] post_alloc_hook+0x240/0x2a0 [ 420.993346][T14763] get_page_from_freelist+0x21e4/0x22c0 [ 420.998888][T14763] __alloc_frozen_pages_noprof+0x181/0x370 [ 421.004694][T14763] alloc_pages_mpol+0x232/0x4a0 [ 421.009553][T14763] allocate_slab+0x8a/0x370 [ 421.014058][T14763] ___slab_alloc+0xbeb/0x1410 [ 421.018740][T14763] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 421.024645][T14763] kmalloc_reserve+0xbd/0x290 [ 421.029324][T14763] pskb_expand_head+0x18e/0x1150 [ 421.034264][T14763] netlink_trim+0x1d5/0x2e0 [ 421.038772][T14763] netlink_broadcast_filtered+0xd6/0x1000 [ 421.044508][T14763] devlink_port_notify+0x402/0x570 [ 421.049623][T14763] __devlink_port_type_set+0x54f/0x700 [ 421.055082][T14763] devlink_port_netdevice_event+0x2a9/0x4f0 [ 421.060975][T14763] notifier_call_chain+0x1b6/0x3e0 [ 421.066088][T14763] register_netdevice+0x1608/0x1ae0 [ 421.071291][T14763] page last free pid 13233 tgid 13224 stack trace: [ 421.077791][T14763] __free_frozen_pages+0xbc4/0xd30 [ 421.082924][T14763] __put_partials+0x156/0x1a0 [ 421.087604][T14763] put_cpu_partial+0x17c/0x250 [ 421.092369][T14763] __slab_free+0x2d5/0x3c0 [ 421.096791][T14763] qlist_free_all+0x97/0x140 [ 421.101384][T14763] kasan_quarantine_reduce+0x148/0x160 [ 421.106846][T14763] __kasan_slab_alloc+0x22/0x80 [ 421.111703][T14763] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 421.117604][T14763] __alloc_skb+0x112/0x2d0 [ 421.122021][T14763] alloc_skb_with_frags+0xca/0x890 [ 421.127142][T14763] sock_alloc_send_pskb+0x857/0x990 [ 421.132355][T14763] llc_ui_sendmsg+0x477/0xdd0 [ 421.137029][T14763] __sock_sendmsg+0x21c/0x270 [ 421.141706][T14763] sock_sendmsg+0x158/0x230 [ 421.146218][T14763] splice_to_socket+0x8ff/0xf10 [ 421.151075][T14763] direct_splice_actor+0xfe/0x160 [ 421.156102][T14763] [ 421.158425][T14763] Memory state around the buggy address: [ 421.164051][T14763] ffff888021f80600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.172123][T14763] ffff888021f80680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.180189][T14763] >ffff888021f80700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.188256][T14763] ^ [ 421.195974][T14763] ffff888021f80780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.204033][T14763] ffff888021f80800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.212089][T14763] ================================================================== [ 421.250010][T14763] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 421.257273][T14763] CPU: 1 UID: 0 PID: 14763 Comm: syz.1.2231 Not tainted syzkaller #0 PREEMPT(full) [ 421.266674][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.276769][T14763] Call Trace: [ 421.280067][T14763] [ 421.283015][T14763] dump_stack_lvl+0x99/0x250 [ 421.287642][T14763] ? __asan_memcpy+0x40/0x70 [ 421.292242][T14763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.297454][T14763] ? __pfx__printk+0x10/0x10 [ 421.302072][T14763] vpanic+0x281/0x750 [ 421.306067][T14763] ? preempt_schedule+0xae/0xc0 [ 421.310937][T14763] ? __pfx_vpanic+0x10/0x10 [ 421.315448][T14763] ? preempt_schedule_common+0x83/0xd0 [ 421.320926][T14763] ? preempt_schedule+0xae/0xc0 [ 421.325792][T14763] ? __pfx_preempt_schedule+0x10/0x10 [ 421.331183][T14763] panic+0xb9/0xc0 [ 421.334910][T14763] ? __pfx_panic+0x10/0x10 [ 421.339330][T14763] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 421.345237][T14763] ? xfrm_state_find+0x2cf2/0x5400 [ 421.350356][T14763] check_panic_on_warn+0x89/0xb0 [ 421.355304][T14763] ? xfrm_state_find+0x2cf2/0x5400 [ 421.360454][T14763] end_report+0x78/0x160 [ 421.364719][T14763] kasan_report+0x129/0x150 [ 421.369236][T14763] ? xfrm_state_find+0x2cf2/0x5400 [ 421.374371][T14763] xfrm_state_find+0x2cf2/0x5400 [ 421.379316][T14763] ? unwind_get_return_address+0x4d/0x90 [ 421.384956][T14763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.391140][T14763] ? xfrm_state_find+0x1da/0x5400 [ 421.396170][T14763] ? __pfx_xfrm_state_find+0x10/0x10 [ 421.401459][T14763] ? trace_fib_table_lookup+0x85/0x200 [ 421.406930][T14763] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 421.413108][T14763] ? fib_rules_lookup+0xc55/0xe90 [ 421.418139][T14763] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 421.424741][T14763] ? __lock_acquire+0xab9/0xd20 [ 421.429617][T14763] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 421.435005][T14763] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 421.440391][T14763] ? xfrm_expand_policies+0x41f/0x6a0 [ 421.445781][T14763] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 421.451169][T14763] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 421.456980][T14763] ? rcuref_put+0x1b7/0x210 [ 421.461500][T14763] ? __pfx_rcuref_put+0x10/0x10 [ 421.466359][T14763] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 421.471743][T14763] xfrm_lookup_route+0x3c/0x1c0 [ 421.476609][T14763] __ip4_datagram_connect+0x9a5/0x1270 [ 421.482082][T14763] __ip6_datagram_connect+0x9f0/0x1150 [ 421.487555][T14763] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 421.493456][T14763] ? __local_bh_enable_ip+0x12d/0x1c0 [ 421.498828][T14763] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 421.504556][T14763] ip6_datagram_connect_v6_only+0x63/0xa0 [ 421.510296][T14763] __sys_connect+0x316/0x440 [ 421.514898][T14763] ? __pfx___sys_connect+0x10/0x10 [ 421.520013][T14763] ? rcu_is_watching+0x15/0xb0 [ 421.524836][T14763] __x64_sys_connect+0x7a/0x90 [ 421.529605][T14763] do_syscall_64+0xfa/0x3b0 [ 421.534111][T14763] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.539311][T14763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.545383][T14763] ? clear_bhb_loop+0x60/0xb0 [ 421.550073][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.555968][T14763] RIP: 0033:0x7f7df478ebe9 [ 421.560387][T14763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.580003][T14763] RSP: 002b:00007f7df55cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 421.588420][T14763] RAX: ffffffffffffffda RBX: 00007f7df49c5fa0 RCX: 00007f7df478ebe9 [ 421.596411][T14763] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 421.604389][T14763] RBP: 00007f7df4811e19 R08: 0000000000000000 R09: 0000000000000000 [ 421.612364][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.620335][T14763] R13: 00007f7df49c6038 R14: 00007f7df49c5fa0 R15: 00007fff46ce09c8 [ 421.628324][T14763] [ 421.631745][T14763] Kernel Offset: disabled [ 421.636072][T14763] Rebooting in 86400 seconds..