last executing test programs: 3.741507823s ago: executing program 2 (id=803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001d00)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x4}, {0x6, 0x60}]}) write$ppp(r4, &(0x7f0000000440)='f#', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 3.091113151s ago: executing program 3 (id=810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffed1, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0xb8a3bd273aac057b}, 0x12000054) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x1}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x4000, 0x40a, 0x2, 0x0, 0x20007e}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x9, 0x9, 0xfbf, 0x7fffffffffffffff, 0x6, 0x0, 0x6, 0x1}, &(0x7f00000001c0)={0x286, 0x4, 0x6, 0xbbb8, 0x200, 0x625, 0xb2d, 0x1}, &(0x7f0000000200)={0x1, 0xbb, 0x7, 0x5, 0xfffffffffffffff7, 0x8, 0x800, 0x2}, &(0x7f0000000280)={r2, r3+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x400]}, 0x8}) 2.96102698s ago: executing program 3 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (rerun: 32) ioctl$TUNGETDEVNETNS(r1, 0xc0189436, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x48) (async) r2 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r2, 0x12) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0xfffffffffffffe36, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="53e361eceb15dbf9687a1d6a6d2e86b5f012193c06d74b9476897005f7a5725036536ebe22d2cc2ad45d2365b1cb784dc3fbb9c1b797ab3af9fc33e97cd22568c5443ccf003d0c17c2", @ANYRES16=r3, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.759058168s ago: executing program 3 (id=816): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000600110000000000080013000bffff0005001400000000007011db2a96fb6389f5d9a21aa28afa8ba8a84488ffc2d956bdf966a1324b71950c3c89f986aed34fa08b9d0c3e59c7201ed03c6ec1c5788d8798d9ec0d47f6f5ce46f4a9d4a66b720ade8a3ed09fd0b5b71fb2e8a84b9e32d2f8052731bb2500bd9bc009adafaffb99851505ba25544de17a419b9d7985bd262813688a6d5185439d1f568a7d8015d51c413966f0147dfd95be73b66b87fb479b89c3374f26af66adea06ad4d39818c2093fa1f451dc6281dcef6e44246f15b4a98c2dc1acd9e2e632aea1a7705f8963af180a24f9c5f8f59306292f4c711aebe97fef06f"], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close(r5) close(0x3) 2.559910052s ago: executing program 2 (id=818): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000700)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/4, 0x4}], 0xa, &(0x7f00000006c0)}, 0x102) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000740)={0x16, 0x13, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb8, 0xb, [0x7ff, 0x81]}}, @jumbo, @enc_lim={0x4, 0x1, 0x1}, @generic={0x5, 0x4a, "9a1a86bf6afe42871fec191268f5800637bed4f864a1f23e970c4d0a7eb8b5405faa47c5c3ea05aee2463b27ceb88310bb0bc2311a918436021ac44f3c6edf6cf66f26bc958c1abd5d21"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xd0}, @jumbo={0xc2, 0x4, 0x6ff2}, @generic={0xfb, 0x19, "de5493ba298e32107f9b733b37b4ea583442792136379dd5e7"}]}, 0xa8) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000880)) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f00000008c0)=0xa, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000900)={0x6, {{0xa, 0x4e24, 0x87110, @loopback, 0x80000000}}}, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000009c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000a00)=0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4085) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r7) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000b40)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x1, 0x9, 0x11, @loopback, @private0, 0x80, 0x40, 0x4, 0x4}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r4, 0x13, 0x4, 0x7, 0x5, 0x42, @private0, @loopback, 0x20, 0x80, 0x1, 0x1ff}}) 2.434715085s ago: executing program 0 (id=821): syz_open_procfs$namespace(0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000100)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c200280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc014) 2.246614755s ago: executing program 2 (id=823): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1000a95f080026006401010204020f00"], 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x7a, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000002600)=""/4096, &(0x7f0000000480)=0x1000) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'nicvf0\x00', {0x2, 0x0, @private}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x22d02ef1224b41b7}, 0x24040844) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa08000900"], 0x48}}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x22}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000080) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000004580), 0x0) sendmmsg$unix(r8, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000940)="28eebda5a33ec03a21a9ccea591dd2e546622c51f5d95be88582df2f9a820944104b6c07bd95f4cbbae77d5093a285", 0x2f}, {&(0x7f0000000a00)="2271039e2e4989ad5256c3a5a62a793b87dfe58269", 0x15}, {0x0}, {0x0}, {&(0x7f0000000c40)="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", 0xdea}, {&(0x7f0000001c40)="023d979eee42", 0x6}], 0x6, &(0x7f0000002140), 0x0, 0x40040}}, {{&(0x7f0000002200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000405}}, {{0x0, 0x0, &(0x7f0000004480), 0x0, 0x0, 0x0, 0x8000000}}], 0x4, 0x4000) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200001000000000000385267e450500088b8ffff05000700070000000c002e00"], 0x50}}, 0x0) 2.164844442s ago: executing program 0 (id=825): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) recvfrom$packet(r0, &(0x7f0000000000)=""/66, 0x42, 0x0, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x1, 0x9}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.942499759s ago: executing program 1 (id=826): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="fe00fa0000000000"], 0x20}}, 0x14) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bind$netlink(r6, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x200}, 0x31) socket$kcm(0x11, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000200000000600000"], 0xd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440100001a0013070000000000000000e0000001000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000e00000020000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000008005e0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000040000000200010000000000000000004800020065636228636970686572df6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB='|\x00\x00\x00'], 0x144}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.741521123s ago: executing program 3 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb01001800000000000000910000007c000000070000000d00000000000010080000000500000000000010040000000a0000000000000b05000000030000000000000c03000000080000000000000a050000000c0000000000000a020000000c0000000000000b020000000c00000001000093000000000900000003000000070000000c00000000000011010000000a000000005f61002e3000b3b4245be164daf83a2a081e5433"], &(0x7f0000000500)=""/236, 0x9b, 0xec, 0x1, 0x2, 0x10000, @value}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x206, 0x7f, 0x7}}], 0x38, 0x20008004}], 0x1, 0x200000d0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x62b}, &(0x7f0000000280)=0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0xffff, 0xd7, 0x2, 0x140}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, r1, 0x4, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005080)=""/218, 0xda}, {&(0x7f0000000840)=""/4098, 0x1002}, {&(0x7f0000004fc0)=""/188, 0xbc}, {&(0x7f0000001940)=""/238, 0xee}, {&(0x7f0000001a40)=""/223, 0xdf}, {&(0x7f0000000480)=""/89, 0x59}], 0x6}, 0x400}], 0x1, 0x26160, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b40)=ANY=[@ANYBLOB="1c00000071205d3d6e20b6eb990d7b96a7f37536b63289af58167cffdf6fd6a40cfeefaeb4c81a5b13c289fe0bea6014e1843b25921fb5c32524a47500f5d0efd999de2c61c76b4cc7f4e20cdd359c5efe55fde1f22e52ce2e5a59034cad8c0a5d9117c01cb1fdd63ab05349b99185ffa241f2ea92df243876416a91cbc8f49ce213dcf1dce3fd2ef3b0f81e331942a69aafff28dce7b5262578818094aaddb135e13bf5839a441de8f9e06acc9787af2c5d90b692c7862cb2c17f59a6f9d28b03a913d0c134c43f6d56babc7184c886", @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.715619721s ago: executing program 4 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@gettaction={0x6c, 0x32, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}]}, 0x6c}}, 0x4804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9805, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6, 0x9, "5fe957bc4a59c34a1f"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d49b0cb}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x20000040) 1.662104811s ago: executing program 1 (id=829): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x2, 0xfa97b32f7c5fa303, 0x84) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full', 0x20, 0x6, 0x20, 0x40}, 0x2f) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000018000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0674dd960c6bd8aa6a4592437efb1", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x4001) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c00e8011bba7f2c1694000008000500bcbf099ab1c8b8fe0efc", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) 1.422570209s ago: executing program 4 (id=830): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = socket$caif_stream(0x25, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x401eb94) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xa, @mcast1}], 0x1c) connect$caif(r3, 0x0, 0x0) 1.413187948s ago: executing program 1 (id=831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20008145, &(0x7f0000000040)={0xa, 0x4e23, 0x10, @local, 0xf5}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)=r2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00\x00\x008\x00\x00\x00\x00@\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r7 = socket(0x28, 0x1, 0x0) connect$packet(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {}, 0x4, 0x0, 0x1000}}, 0x26) close(r2) getpeername(r9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000080ff01000000000000000000000000eb13177f585afd6300000010000100000000000000"], 0x28}}, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x80) writev(r2, &(0x7f0000000180)=[{&(0x7f00000003c0)="390100001000111867090707a640400f0021ff3f31000000170a0017000000000400376a94ffc7000900030001372564b758b9a64411f6bb745f7f51a5b3bb9d3764e8a02f8d72cd21436cd678b82228be4fc99459c7a82748570558f1a754", 0x5f}], 0x1) 1.262851643s ago: executing program 3 (id=832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0xfd46) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x200, @loopback, 0x1}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0xfdef) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000040)={0x26, 0x8, 0x53, 0x1b85400}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4004081) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.067218949s ago: executing program 1 (id=833): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000700)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/60}, {&(0x7f0000000080)=""/8}, {&(0x7f0000000100)=""/158}, {&(0x7f00000001c0)=""/116}, {&(0x7f0000000240)=""/134}, {&(0x7f0000000300)=""/76}, {&(0x7f0000000380)=""/6}, {&(0x7f00000003c0)=""/215}, {&(0x7f00000004c0)=""/103}], 0x4e, &(0x7f00000006c0)}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x20000044) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000740)={0x16, 0x13, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb8, 0xb, [0x1003, 0x81]}}, @jumbo, @pad1, @generic={0x5, 0x4a, "9a1a86bf6afe42871fec191268f5800637bed4f864a1f23e970c4d0a7eb8b5405faa47c5c3ea05aee2463b27ceb88310bb0bc2311a918436021ac44f3c6edf6cf66f26bc958c1abd5d21"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xd0}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xfb, 0x19, "de5493ba298e32107f9b733b37b4ea583442792136379dd5e7"}]}, 0xa8) r7 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000880)) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f00000008c0)=0xa, 0x4) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000900)={0x6, {{0xa, 0x4e24, 0x87110, @loopback, 0x80000000}}}, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) 1.018624316s ago: executing program 0 (id=834): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001040000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="1400b7a01215e1ffffffffffffff00000000000114000e00ff02"], 0x64}}, 0x4892) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000002040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000002080)=""/4096, 0x34, 0x1000, 0x1, 0x5, 0x0, @void, @value}, 0x28) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x40, @multicast2}, 0x10) 958.272171ms ago: executing program 2 (id=835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="7bd74dfa568c833125f8fde671d7dd7581180f09672c0c515ab5dff7388f8b98994d56d06dbbadb07af526a323847ee1b34dbbba2cc2afa8582132ca1c47535a22262c3b82aba5ecd84aae2a9001d72bc4e9cf577d4dc05380cf0c8f54ed89277f9dea005ef35b0c50b19d358fcced31f8aedb83c36fb523a11227b7c0537f38ee3d722bbf15828aabaebfeee320f7bb5ca3090f64c5a24b20293bffe444b926621e80b14cf32d2848b707fd55f2141339bddb", @ANYRES16=r3, @ANYBLOB="2db926bd7000fddbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x7, 0x6, 0x36, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @loopback, 0x80, 0x1, 0x200, 0x3}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000100)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x1}}], 0x10) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}}}, 0x24}}, 0x40044) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002f80)=@newtaction={0x23d4, 0x30, 0x48b, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xb4, 0x1, [@m_bpf={0xb0, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x60, 0x6, "a2f156ce42f2d83316c0941d1e4d7bcc3f8dfddc8734fc3aeeec06b201bbb4c413461461eec4bbb28af7ca6415163c7e4c9f80bafb577b63a28cf5770dde89c5b37eef4be03fc053bc0ce6041ed0a307514c850dfc57ad7161bf4eb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x21f0, 0x1, [@m_mpls={0xdc, 0x3, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x5, 0x4, 0x7, 0x1}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_PROTO={0x6, 0x4, 0x5}]}, {0x81, 0x6, "70f8ae75593fa770c8bcc4e41dec375fc21319b2caa701bf3a10ae4f9a44307d5549784dd6db9e3c3e44660857309e9bb6ce0e4794a6c50cebfb8d17067b943af1ee574bf549a7b41c9ada3b3d89b260ea7fbe353f4111c606006028e685730837146f0ddb83c16cbe27ed8cf93df625c97cbebe50592e1804b2da35f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_police={0xdb8, 0x5, 0x0, 0x0, {{0xb}, {0xce0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0xfffffffc, 0x8, 0xb3ae, {0x2, 0x1, 0x9, 0xcc, 0x6, 0xfffffff8}, {0x0, 0x0, 0x4, 0x1, 0xc, 0x3}, 0x8, 0xfaa7, 0xfff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff1ea2, 0x1, 0x7, 0x40, 0xf, 0x5, 0x6, 0x101, 0x0, 0x3, 0xd79, 0x1, 0xfff, 0x6, 0x4, 0x0, 0x2de, 0xffff, 0x4, 0x8, 0xffff8001, 0x9, 0xffffffff, 0x13a6, 0x6, 0x2, 0x7f, 0xc, 0x5, 0xcf, 0x8001, 0x9, 0x7, 0x4765d540, 0x1000, 0x8, 0x4, 0xff, 0xf4, 0x46b, 0xfffff6f3, 0x8, 0x4, 0x915, 0xd, 0xe, 0x8, 0x5, 0x6, 0x0, 0xb, 0xffffff80, 0x7f, 0xbea, 0x3, 0xffff, 0x9, 0x9, 0x1ff, 0x9bc, 0xfffffffc, 0x0, 0x6, 0x5, 0x2, 0x3, 0x1ff, 0x2b, 0x1, 0x10, 0x101, 0x6, 0x8, 0x3, 0x874, 0x1, 0x10001, 0x8d000000, 0xfffffff7, 0x6, 0x45a8e1b, 0x5, 0x8, 0x0, 0x6, 0x5, 0xfffffff1, 0x7f, 0x8, 0x7c2d, 0x9, 0x4, 0x5, 0x7, 0x5, 0x26a9, 0xe1b, 0x7, 0x4, 0x8000, 0x4, 0x4, 0xf4, 0x1ff, 0x0, 0xdaa, 0x1ff, 0xe8f, 0x3, 0x7, 0x5, 0x7, 0x746887f7, 0x2, 0x5, 0xff, 0x1, 0x2, 0x831, 0x0, 0x7, 0x5, 0x5, 0xf5, 0x400, 0x7, 0x5, 0x1, 0x4, 0x3, 0x7ff, 0x4, 0x2, 0x10000, 0xdae, 0x401, 0x0, 0x5, 0x8001, 0x4, 0x5, 0xfff, 0x7fff, 0x3, 0x3, 0x2, 0x7f, 0xffffffff, 0x1000, 0x8, 0x9, 0x4, 0x1, 0x800, 0x7f, 0x7, 0x6, 0x0, 0xfffffff7, 0xfffffffc, 0x80, 0x1, 0x1, 0x2, 0x4, 0x0, 0x7, 0x8, 0x2, 0x0, 0x5, 0x9, 0x80000000, 0x8, 0xffff, 0x25a, 0x9, 0x80000000, 0x10000, 0x9, 0x328, 0x8, 0x0, 0x8, 0x9, 0xe1, 0x6, 0xe, 0x1, 0x7fff, 0x6, 0x4, 0x3391, 0x10, 0xb, 0x0, 0x4b, 0x1d6, 0x0, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9d56, 0x478, 0xfffffb60, 0x8, 0x8, 0xb481, 0x3ff, 0x3, 0x1, 0x3ff, 0x800, 0x0, 0x4, 0x9, 0x9, 0x3, 0x10, 0x1000100, 0xffff, 0x5, 0x0, 0x2, 0x1, 0x80000000, 0x2, 0x40, 0x10001, 0x80, 0x3ff, 0x5, 0x7, 0xa0, 0x600, 0x7, 0x1, 0x7, 0x2, 0x300, 0x8830, 0x7, 0x2, 0x4ec7, 0x3, 0x8, 0x4, 0x382, 0x5, 0x100, 0x1000, 0x4, 0xb4, 0xa8a0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x4, 0x7f75, 0x2, {0xd7, 0x2, 0x3ff, 0xfff5, 0x9, 0x1}, {0xf0, 0x0, 0x3, 0x5, 0xc2f5, 0x2}, 0x0, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x1, 0x1, 0x7f, 0x2, 0x7, 0x2, 0xfffff2b1, 0x9, 0x9, 0x400, 0xfff, 0x5, 0x7, 0xe, 0xe1d8, 0x1, 0x2, 0x5325, 0x40, 0x5, 0x7, 0x32d, 0x200, 0x0, 0xc117, 0x4, 0x5, 0x4, 0x7, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x4, 0x10000, 0x7, 0x9, 0x0, 0x10000, 0x8, 0x400, 0xbb, 0x6, 0x7, 0xff, 0x6, 0xfff, 0x3, 0x8000, 0x1, 0x7fffffff, 0x3, 0x0, 0x7, 0x2, 0x6, 0x0, 0x2, 0x5, 0x0, 0x4, 0x5f, 0x9, 0xffff, 0x3, 0xa9, 0x80000000, 0xffffffff, 0x8, 0x7, 0x5, 0x368, 0x1, 0x9, 0x7, 0xa7, 0x8, 0x8, 0x4, 0x3, 0x0, 0x40, 0x80, 0x195e, 0x2, 0x5, 0x6, 0x40, 0xde2, 0x30000000, 0x0, 0x10001, 0xcdbd, 0x80000000, 0x1ff, 0x8, 0x1, 0xe, 0xb, 0x7, 0xb466, 0x9, 0xf, 0x8, 0x0, 0xf, 0x3b55, 0x2, 0x41f, 0x0, 0xdf9e, 0x1000, 0x2, 0x8, 0x83c, 0x5, 0xe, 0x8, 0x0, 0x1, 0x7, 0xd9dd, 0x2, 0x9, 0x9, 0x2, 0xcc52, 0x4, 0x7, 0x4, 0x9, 0xdbd6, 0x100, 0xffff, 0xb, 0x80000001, 0x8, 0x3, 0x526ba079, 0x4, 0x8, 0x9, 0x2, 0x100, 0x4, 0x9, 0x200, 0x1, 0x1, 0x1000, 0x5, 0x1, 0x9, 0x8aa4, 0x14b, 0xa45, 0x9, 0x0, 0x1, 0x69d, 0x7fff, 0x6, 0xc, 0x7, 0x1, 0xe529, 0x525, 0x10, 0x8001, 0x0, 0x8000, 0x1, 0x7fff, 0x92, 0x1, 0x40, 0x2, 0x9, 0x6, 0x4, 0x400, 0x3, 0x9, 0x80000001, 0xfffffeff, 0x5, 0x2, 0x597, 0xd1, 0x1, 0x2, 0x2, 0x9, 0x1, 0x3, 0x7fffffff, 0x8, 0x8, 0x2, 0x6, 0x9, 0x10, 0x2, 0x276, 0x1, 0x1, 0x10001, 0x401b277a, 0xab7, 0x80, 0x8, 0x6, 0x6b71, 0x9, 0x9, 0xefd, 0x86, 0xd, 0x8, 0x1, 0x40, 0x0, 0x1, 0x49, 0x4, 0xdf2, 0x400, 0x0, 0x0, 0x7fffffff, 0x8, 0x100, 0x9, 0x6, 0x9, 0x3, 0xfffffff9, 0x1000, 0x9, 0x5, 0xffffecc1, 0x6343, 0x6, 0x1, 0x3ff, 0x800, 0x0, 0x200, 0x12, 0x9, 0x1ff, 0x3, 0xffffff31, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xab5, 0x10000000, 0x3e, 0x1, 0x0, {0x4, 0x2, 0x1, 0x4, 0x80, 0xcc}, {0x2, 0x0, 0x22e4, 0xff7f, 0x9, 0x1d}, 0xfffffffb, 0xa4, 0x80000001}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xad}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x81, 0x3a07, 0xa4c, 0x0, 0x7fff, 0x7, 0x3, 0x3, 0x3d7f75b8, 0x10, 0x9, 0x2, 0x1, 0x8001, 0x81, 0x800, 0x95, 0x3ff, 0x7, 0x0, 0x1, 0x80000001, 0xffffffff, 0xfffff9e0, 0x6, 0xff8, 0xbc11, 0x10001, 0x4c, 0x80, 0x4, 0x1, 0xb, 0x5, 0x9, 0xfffffffb, 0xfffffff8, 0x401, 0x5, 0x7, 0x774e, 0x2, 0x7, 0x8, 0x100, 0x6, 0x401, 0x9, 0x7, 0x800, 0x8, 0x7, 0x0, 0x4, 0x46, 0xef6, 0x3, 0x5, 0xfff, 0x8, 0x0, 0x0, 0x306, 0x2, 0x2, 0x4f4, 0x2, 0x8000, 0x8, 0xe6, 0x87, 0x1, 0x0, 0x3, 0x69, 0x8, 0x2, 0x8001, 0xfffffc01, 0xcd, 0x1, 0x200, 0x1000, 0x8, 0xc92, 0x8c, 0x0, 0x3, 0x2, 0xfffffff8, 0x9, 0xffffffff, 0x7, 0xd, 0x3, 0x7fff, 0x400, 0x4d, 0x5, 0x7, 0x2, 0x0, 0xfff, 0x1, 0x10, 0x3, 0x4, 0x0, 0x5, 0x5, 0x7, 0x1, 0x7fff, 0x2fdd, 0xe72, 0x8, 0x5, 0x346d2565, 0x5, 0x0, 0x6, 0x0, 0x8, 0xe, 0x0, 0x0, 0x8, 0x200, 0x4, 0x4, 0x66f2, 0x3, 0x1ff, 0x7, 0x401, 0x3, 0x3, 0x5, 0x2, 0x43, 0x80, 0x1, 0x4, 0x8, 0x7, 0x4, 0x1, 0x9, 0xdd, 0x1, 0x80, 0xd9, 0x80000001, 0x80000000, 0x2, 0x6, 0x9, 0xfff, 0x26f, 0x23ba2d9d, 0xfffffff9, 0x3, 0x7, 0x92a2, 0x6, 0x13db, 0x9, 0x5, 0x8, 0x1, 0xf2a1, 0x6, 0x4, 0x3, 0x81, 0x2, 0xbe3, 0x5, 0x1, 0xa81b3de, 0xa51, 0xaa04, 0xffff91df, 0x400, 0x6, 0xbcd, 0x10, 0xa, 0x9c1, 0x81, 0x80000000, 0x5, 0x401, 0x101, 0xfc, 0x8001, 0x6, 0x0, 0xbd, 0xf, 0x101, 0x7, 0x9, 0x4, 0x3, 0xffffffff, 0x6, 0xfffffffe, 0x5, 0x5, 0x2, 0xfffffc1c, 0x6, 0x554c, 0x7, 0x10001, 0x10001, 0xffffffff, 0xe3ed, 0x9, 0x1, 0xec25, 0x8, 0x5, 0x7740, 0x3, 0x2, 0x9, 0x7, 0x6, 0x5, 0x9, 0xfa1, 0xa4, 0x3ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x98, 0x80000001, 0x8, 0x0, 0x3, 0x4, 0xa, 0x8000, 0x9, 0x1, 0x83, 0x7f, 0xfffffffa, 0xadfb]}]]}, {0xae, 0x6, "9c77010ed638d97ea29e46553d6fd5c13717533952a6143f949852405cfa27a46a6f26f75d90804603caa9f5a0c30c451c6aeef7b9485e16f4539b91053b1b2388b0275cdd798f696f1a66ccf6392492d470ecbe37849a47e78aafb4bfa37734018968be3411cf033d6698e6a9ffe77f2ae6bb78502729f1b41fd04157878be95efd11e00e0195a3ba32b1a724d07c0f7aeaed51d2540c33177dcf69285ed7e3ea4dd09268bc18ba470e"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x178, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x4, 0xff, 0x8}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x7, 0x4, 0x8000}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x97, 0x8, 0x3, 0x9, 0x5}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x6, 0x10000000, 0x12c, 0xb}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x3da0, 0x20000000, 0x3, 0x9c97}, 0x2, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2, 0x7, 0x51, 0x80000000}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x5, 0x9, 0x9, 0x1}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x10000000, 0xffffffff, 0xe08e}, 0x2}}]}, {0x4a, 0x6, "f70bb15b1035cabe92f481abe6dbce18ae14c1f846a0676e73946cab90c03c8de945af0373f6fa5d1aad82456be5e10080cb03503914b3f0a5b7805e8dc870a24bf7ca4920f2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xf0, 0x1e, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x6, 0x2, 0x5, 0x7}}]}, {0xa3, 0x6, "ef14717fd49626c5e4ab204bd506dbee11f6339ebc8ae10a0ed4df90ab1f01cf7db939fc3b28f7a793f46a09ecf36621f74b45cfbdf86792b16fdad1497d283f5604a512d0d4b346222ea3bd9051f9882dff51426b2a588f4b74fcfc559a9d0dd04f52ec13fe71f694ed7b37135d9f6eddfe4b60903fbaf0ad807c73e10e5830b47b2f90527fd05829b67b7aaa1d80b2804a344042c6f835655fcd311fd3a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x10f0, 0xf, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x1, 0xd3, 0x0, 0x7fffffff, {0xa2, 0x1, 0x9, 0x5, 0x7f, 0x9}, {0x6, 0x1, 0xc387, 0x9, 0x5, 0x7}, 0x3, 0x4, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x47dc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x907}, @TCA_POLICE_TBF={0x3c, 0x1, {0x22, 0xffffffffffffffff, 0x2, 0x8, 0x7, {0xfd, 0x0, 0x3, 0x1, 0xff, 0x3}, {0x2, 0x3, 0x8, 0x3, 0x8000, 0x9}, 0x2, 0xedb8, 0x6}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x1004, 0x6, "a0a9d0f787f2a1ab697f22cbf90305d7337899fd831f5383c8753c3631861929e307ff72838e2dcff3ea0ae7c9933f4055db0ec2f8c770e4d12352f5f0dc871bd3ad39280062a5f39583287d7b260fe3b1a21b6682b3d4be201d2f0bad9f1f91b716be3b6e3507e4a55cf002e550f974b65141db9e6a2101c0f9961289681961a26f7ca75efe2e84c05678f5843dedcf274f8dd3257bc6c6c95bf76b5ff3c7208b584a2e7b5d62d8ce5c184d576093d6c6cbe0a30b7e1db4ffc284dc5278881f9223fd67f5b6bec142efee979b9bcff60bc9228fa7e08de3ebe25b78e9c085aaff28b4d4b9e003e5790676035dd5062b64605c98ff6351a2e66bd74738b6c55946e7f9d6f68657e13a344564ce0deffd6f1ea544d34efd844ab2da6c2398a5748f3d9754654afd19382481fd871dc927fb439f0c3aaa16f78a470a3d5bf3ba97b5535733756940575cb82889fc8e93cdcb30c91a0db2ee39f1ff3b1b94e152346b3cff2000973da926fc1bbc761a18e21ff27701bba75c81e375dad7791a1773c491d0c8899e29af086e8240ed3dc734699a7df730872c8421e4a183b0e4a1997fda67b6bafbeacc24e2eb45f254259d6b88e5e0474b913ff43a1ba36220f699429b8f5cb2150c788e876ae2e7df3b67f11a802b19c03c18fe0f7c84f177581598ec897d5f2364191c5edabd8f99710caab07bd2e18d0a4d2ef3aa907406f8157ab6715288b511d1bc9865c084e24bec00133ea2c468765abcd35eea9fd79e810ca12617f4b8ef7f4f83e1ab444e1a5947569f48a3d094733dbcb1fedafd06afd876c34fdd935c418c0a878a9d556c7071b8a23ab9d55efc6120f6084973f534779b27510cae5e58b814ca341f9ab886ad043a823f541b061f63324c439043fcea1e64fa90e9774f6ced5ca46ab95b6c4ed254c88ff983fad25a64721d75589ae1a2c37d5ad67bc20849611ca9c0c8533b9a40ea698eb90ae953ee98e512e5ddb429c454154e30369ce53d00f45c95adeb84762ec6d317cd712599f44a0040ded66ec1de2a4744fd6f770501c1df47806425bfaff826e92e7514c939b056b9fd64f5dff72f4466d8aa464001f007dcbee15b597cd1a56a11944174b7380d02dd0ffe7b34598329b849ab6af9856ecea94a2f31cdf7829bdb62abfcca6cc9f81a82fb2a5829a7b60e7ab4bf0fd4e1286a0f340ec3b22e3542ad6352bf4062afb2576b8e99c111b69930a785c516397064521ce0fb9f0933a80b9380eecdc40e48c345589fcc3d6d532aa060b96a0cb73f3f892b9fa5a6e00197772ab897255110bfa605c932d051dfb3fbe46001b14324caabbdd030480f6dc14365f6fefcf533903bba4181a637e006051064b3fdf405cf2c2b7ffb72d014ab77bcb61b0bcf593ebb4cffccef83203cf46686311135a9795366f26656cc66e110fab5e66378c65accdc79aae2f20e11605abb8dd6f425854ad52643c0835b13c5eaa322e7a01f5970b70c92de1df998ff235c977474f3f88f2a94f4969c28c8c62f5c71dd836696d3ac90f15c9cb8393c688b64ddd5a3cafdce0ce633f4e40124453315ccf6a32181869678c300f2da1223d6a28c4eb0c6960d5301376c736c8f91249db4ba7d067834d4b48f89822cec3fc43de81e559e638dfc7061b1ab10dc9f3bb671bc90b502d8083202e76d0c1e02c80e0395c3c862e1bf9f90ccb300aa042ed4f6e5babff2fcc97f8ea1c8818c788490b682a237cabdfa959dac5743395253f5f7f9df243326bb6873c13d01081b277076781e2c9284dcf950ea557aa16683fc8aac164c3cd1c0c8e118d4b0432da476afb6b4609ab6450863eddc62fff93fcd73b3a94f4a9eea7574f7204050c5deffb8948ba3d09f7de0aaac8e1f31f36e5dd7524a61b96d54dc39930b9fcdc8f13cb85de88c5583a4b7da8b11cd037519e21ddb3a98aaf5fd504d0c9f2b4226353af28ad8fe7afe583be3d495334fca5ce4a46a5eae42ca67d72bf0b61fd78916936b5e04ac37462c56506aeb2e28b6ab8d3602a051c9bcb7a326702b5fd0ec731ddfdbccc4c4c58a37684494d05ede432abdb6ed2e57fba2d1562afd5a866f1a67455b38d79fee9cd3b336ac5c017b45499fff46e8906a8a3803f0d7f7a4f2bc60ad3739684fd2cc62497459b42cc1b24cc18638c4315cb6ad4b309d515f0267353fae77c1090d0109d84ed917153a2ca16ce246ef1bdc38ec4044f4e17264ad3cc27982d57ac99a5d4588a297fd07e1eacf12d247efd06b6c63cae98285b8257f9280cb9ec7abd3aaa89f741c9a83af54b47eb8b468cf2d87aae99d7127be03f0d64360846ed038bed4a81f6415e5481cdb11e448b587913759dd6c9457ab61d0589762edd8d7befd7354b87d4e34faf416d2f4d858c83789f209a32897b41b8963dacd9e1fd5a2ea980a7150a404013f1382fd4d4b5a3e4e375a1fa7f43580cf796e7d833cabfdda3dc9968debaa0cce21c261b10b74a22b5d3562989bc6b82e67f49ea9768cdaece9ae01b396dfa92d1c3dec3c405704ce49b68178b7f4d0b6e2844f9aa5f1fc477afe3147558dd65e1bf96e6abdd38c8faaa1d0668f9acbe3240e1a11ad1571d59997872d34c559a436a19db6fc36320d1f8389abb324775762ed3e65cbccc9bc57b9458ae909b4af2ca8cd076f8874b5c27c50b84a3ff95e0a69df536baed89175864b9c6b668c77a38092ab235845acb5f4e9702af3e501b067b4b4e733673ce3e8fc9e88c5093923a3f91c5b2cb3f7907ff386453f70b252ff5f495cfd80121503d6a69eb09639649d7377931d26f0f73736b476da3ff4caec81784ca4962223cc8e6f715119243ad71cc04da38329cbf3e96e16023d782c266e99f838cbf39548648b4f4754ef30084668662d2f015c140ed1a009fd8909e802b002cb8e6c13de87e056fa1f8e6dcfb3a79648c252717858b7b76ff41cb953d10e585aa640c657fdd1e1d5e36ae26af7aa7b374e75c6708f2b20f02507db700aec88c8987b827837b66c667139dd9bb26fc2817915ecf40aa48d513ef35ea36ad61471914c049c9465f376e066405159fa2fa49a19d56968bd0018a34ff026550c74bdb68b34588ce6780bdeb41383aea484539fca07cc6a8256ad459bbaef41c1c72fd65c97059c8e09f59425310ab4c81989852afbb275fe65a1a06d7cc522e148ccdbfa99179b4b99bff71a06ae3437ffdedbefff9061e51bd32272bb9cc5f4970ba0f77d847037a210f6544b20ffc6622fc1befc3970fb3f6ad0b7c9fea7663d0918c70cce64b3d5a149100b07364d0b411ac6c733857c16d6ca99fcea52ef539423ff1c08054462c33d15de1b05dd82fb85047629ef99989a034b5f80146d3656233723c824260bc91e4245c8ac4b438d97e23204f0efab3c1c53be2d365760bec8f3131d3c603264b059edcc0e28aaa1013cedd40224ffbe5904755a620610a17a33b05d969c835abddaf18edd5143a7cbd50ebe033f0bef6240a251e97a704e10f7844c57548b0a5d714387f7b1493be499d8e7bde6cd03539e8e105d1f76f11bfab1474ee065f21944ed0e70453a8d7991ef8287c63f7ec0a881ba631c6a661abed7fc2ee9ab240c4615b5b820214b033076710ab67712c24853aa6a5bc4e242d6c1d3e00eacd5a334553c753b8364f90fff4282db8e149613fd8d7f82f2a1633d9255a3f7cd30fa057018aaa092d6bdeef305761b46a03c693c4cb4fd154eee1b4cdab43fe0ec893454a5e87a9a6557804c3299c4300852282a4779af16d2faaac1b9e547e9caca8a2371d5cca023113a6b6bd5f3cf26806aadbedb668251e1c793eba6e4f9e3283c6f6c04de3e5e1641a44088b68da962994afb7a651adc224d4d46756fa57c2940dc54c1abfbea63fcec8ef1e5a6cafdbb15ad5e0b23db88e8366d4db05dae6994f0e80a8dc3110af16319054ff808410a6b431be503f019aee97b69ffd21d33d32b305fe8700931218b427f8497f0bfc6355776804ff8a79b3612ff13ac0b38f353087283e4490c3e8937d146b04c431ffa781dbd075f5e92269a8d1b9a852f9cc231c47e61cd9163cdf43bbecbf0a2b6a1350d42ac33cd3b73643d192c3df4878a3b13172dd60cea55bdd5f4a9b1a35232fb0b2683b22d634eb0e56f6679195e2f609584f03198c1dd4635fb1db463c77476602861c3232e4270b037b70d3c5e85b29b5e61085557f183853e7ffd2f88bd83d93b3462953a09c8669480aceba761f646bef3b1be55523e3620acc2d0e76e12ac226ac4dd771a28ef23495624ea8823d608ad241876bd39914d6fb7b3deef53ef1b2e3e44bb4ef9b689aab6e3329848945e8ccfc5286decbb74ef345ed52414aad0378001b56ee3970b8ff462034e2c09bfbc34918083f3f9cd17ffaac604b127e8750043bd85d8183638ca91312d6abe574b80f04d15ae61cd9a5a2db157264e2ee57b8c6960fcdde6e3d836b86b5a562e8daf6444ac7d1bb52cee864831f496d7f96fadcebd36cc82ca4de5f98ea8368f8a7cc22ca5d08c7384fc8d16ebaee38726546e2b16803e032b18b9d4df1f16f3ff1eb21634b88cf7d7f37778ab3ab0b0ac5024a232a6c2662a0831832da6fe74a08be2e16ca38d969dd3d515eedaa65d91ed5b7f0f37861feb774cf45943df4c457cfe49e3ef1cbe4ac9c0d2a8638a58598fecac62631e8a3197f3224af4322d79447fe9fbd7b043320c4f2d2d13aeaf3aaf1d136fe25c60f019753a29e5c0a6ba9b7ded4460c83dd58db078b1ac382c9a451dc8edd1a4577b80939baf0e3eebf97ff1a6d78b27103f7ad5fc74494fc147652edac97eae33eace2e59e1b70ebf38169d17acdf8075d7a29f6b0fe1dba626344b9a56ac91c7c164e2d950a4787b2106ae36058f7d7dce0d6cdf71ac663eeee90fe8c733ec26f9b4994f48b02d4455b7b83c1f523f09f3cece5b0aec61c227cd5a257b72d2b834cc7a01b4be51dd87b83b7a60089a6c17ce5b647e39cd8227ceef30925212f410b6320476845f968e29ae39c64532a3d44f3ec16aba6c401068aa40b99327d3cc8628458444c1eb61afe7dd2fe8a19d88601fb1a6242f67900f7f88b2626c31f01eb3b02474d2a160f9046f51a5030923c101e34dd5072b6a9812981533841193fa77389b87b5e650b3bbda017e1e140e2e5e82ef9e2a6c293e3b40a08d14d2c622ac6d4509a7dc910d8d9bc784f29e6849a3536e8c87454039cc0bfb43eb10693aa6ed9818a198dab8b5cf8e5079a8c76c2be68a788ded7c64c4340f1dc5b648603e9a4a2f04b1bfdf372497280087812665f07597de13c0e1211838fd3922e229863ab6601bef728b1107a39727fea7ba14acf64a964b4d3486f9b02c8a64b9fdc7ea0cb5c858ffe9fa94011ec697f19dcd1db3590b85eafd55c5ba05485ebc8d231ee081ad6c5fc37fdff9468afec743ffd38035f46d3c85511983f24ecca5b9e34d57a599d0f372f1eb2b3ff90904c534a28bcad1638ebc7913a6d7c5ee806fb55a272c224da769e1f58731f2cedb53cc209c26e00f753d5f1e3e1f0950ac0251a97721cca4b1a928361751d147de164fda81f3b8e28bae20fd7e23e5e3b7dd84cd382e3242e1bd26116cc381c09d19b2579ad0443cddf880a2a033a7f5285b07daf5c863876c6d0b9bbf372e05301d5db3e39af14b17eeb900a2455ceb55af8047a7845616295ef8cef8b97210c58195961c91064124be2668b3345ee8628a9465516ec6b852fb6b8b882daa597225dd399672f3b6410ed2c1c8ed45bf4b8aed16cde19e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xa8, 0x1, [@m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x61, 0x6, "1a8e06dfbc92b0ccb3f7cea6885cb33031da998382c16592c7734e539418db8f1d72a2812d09a4b8c1d1a3405a9ddbf3553c45f0d514ba15524edf4fb795ef98d28121bf47b62487ddf77820358dc6a8aeac29d409f527dd8ba2bc8b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x23d4}}, 0x0) r14 = socket(0x2c, 0x3, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="110000000004000000ff0000000100000019c9c76133d2c3a1abcc4d826989f1d824cd764cbb095c0eb8073c16a9c70dc19a2e609750eb788160ab96709fdb6bcc", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r16, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r15, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r14}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r15, &(0x7f0000000200)}, 0x20) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) 948.565353ms ago: executing program 4 (id=836): r0 = socket$kcm(0x29, 0x27de1af898fb4d00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r4}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1408, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x13cf, 0x23, 0x0, 0x1, [@nested={0x120, 0x11f, 0x0, 0x1, [@typed={0x7, 0x19, 0x0, 0x0, @str='\'*\x00'}, @generic="946c8cbfb34538a402961c039d294af6f4edf86b86d48bc782311328cefb90008cad6dc8c1347524be6229ff23132e3e45ccf1d64a533f1eb28b8aa3afb0c2c1045d8b", @typed={0x8, 0xc7, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x121, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic, @generic="4d4b7aa37387bab9d51832b7d2511bd2cc5b5a7e6b3cbd46cf2cef61fc87af150dc6c8194ab3fc05afb7f3c3de3ec8ebc4f42b84907db8d4bf812539efe4839413e923351fa20cb14a4e5d631462b90c73f18dc831100b06b211f6cdf9c4c25efb75f50633873c8c1c86429fc2dd4ee71bdb33e8e87a66b77056d778c06474b18f4a05507026ba95cf03b1c1fd47ac989e6a33e0977357fbaf7f05cb74ff10d1b88b9dc786", @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@loopback}]}, @generic="0b7002e865235f599faaae2c87d93ecf4afce8c8988453d05d4b1950aee140fa6314fd1f6be7d64782bebd2c99de64b5fa614b23636fa1030ca24e61017916ab18d4c0c1643589ee69386e64e63c049f40f4defa6ca274648d8c877937bcc92b4f453b6b942cc8c18fb7f57e92cae6a693ac0dc2c74567f48c2fdb6c2705c8df550c164c5144807cc1ee23ce920ed3b41a60ed42df659bbeca09dc6d841ff62552a17d83c8a0388471ce09c2af9b2d20fc7733d2317d7db992f7921fd4c641213e554b869c5dae07da775afe206b8b61f3180d3f24d7c7339cd44859bb653ab6eb6e792a64ab965909bda7", @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x11b7, 0x20, 0x0, 0x1, [@generic="c486d8b0e15171a44f93d3bd0ea783ecad2e03faa80949261fb3a651357aea95466de7c0006133f7e273cd07afc3f9ce4629248fef15c2a3a38d8463d8f393c8c6b60dd2db453ccee5b82813ed94fd59edfb78894c7008f841c0385ec6b418c9efe296ad7076ddd7f4237236d87ae2ce168180b2528a539abafe6bc8c3d701ceeb43e27b206682e4415dce0e0e755317969648d7d639f6e3f68794581489917f43929841", @generic="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", @generic="62afe46d91a868ecc8628fff94916e53a8f2c46c2ae28403601623eade8a02ceebf7d2478680f0e6523d3e0e5a5bf2b3153ef8d31342bc82a1054463d01e046384420f33030f5f155921301ff2ac75a58e7072afd95ca1fad8d47ec355abdfe535c5dff21a9be3338af8fdba603b9f47fc46deb4bb6536c7338f20a29c84c2da575f02b84432c43a135d74a93e0d8ce3ce30a0e3c07c39f20ae49d8fab8977", @typed={0x6f, 0x16, 0x0, 0x0, @binary="69fe533f332187b81b6cfa5b638240a0c504a7d6844f2185e3f05a1b5ecec9cc1ee0fe7164e24fd0b939c21f39d093210bee07c4952eb2205810f775282b4f045b6cd39e205d86d8ad8cf98642c43b3ff912fde6000556b1fedc91e3b2b1c9e7992333883d21b09d820da2"}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="8d437a577106dba73a8db37f0f09b96ab5be2be3"]}]}, 0x1408}}, 0xc000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x2) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080080000280012800b00010067726574617000001800028004001200060003003640"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) 832.315744ms ago: executing program 0 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x15, 0xa, 0x400, 0x5a35, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000000240)="9f46e89f77657736254fd49e6ca119114db9c8bc14cfb676884f1ddeabb80a2ff7dd8240f4ac8736561ae8ca8d55fc17929b6ad3ad2a2199db59ae6545cdd4cd925bb04ba48f52c259dc9058d0dadf35442ef93ab3ab6e8699bf3366310d78b7c0a6a849064512a523e45932abeba09273c132a192bc5787bf5c738c82126657310cfb9337726ba12d01f03c4984c05dfb8959198ede568f4ae5e592e4f8270b4a896a5975f46782e98dd61d0ad37a8ac2388e0b8c9d3fb01d8728f544112e31914449589cd1e4c1", &(0x7f0000000340)=""/4096, &(0x7f0000001340)="65b282f662972df7f8291e3ca3e3402bef8f9100d365481ae35f849aa9a368477af62f27c3d2ca4d38887f65aedf62158428c4bd2d7e712b5e54286ddba06d7087ab1b83c20aedc0f322c3f71e185afd8de53d60450857c3829b0bb4f41d8c9249aab350a21a75b447956ed0c02ea7779c682edf4ef6e18a350af8682c787b7675ca57555651459f5c39000f7e5222be741b71e7ea7292d4b04d97a87f40b4659f0adee9b0c6d08010328399b1adb73b357b6341c0353d62d638ece6f28d2abfb343c2495fbc8aa481ed89c4c8873b4ee495e356bf7731", &(0x7f0000000040)="cce914ca9b0888e2c43431d8", 0x9, r0, 0x4}, 0x38) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30, 0x50}}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) socket(0x11, 0x4, 0x9) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x51249, 0x2}}, 0x20}}, 0x4800) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r7}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r7, 0x0, &(0x7f00000003c0)=""/242}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x19, 0x17, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xde97}, {}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xec, &(0x7f00000011c0)=""/236, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000180), &(0x7f00000012c0)=[{0x2, 0x4, 0xa, 0xb}, {0x4, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x0, 0xf}, {0x3, 0x4, 0xa, 0xb}], 0x10, 0xc9b, @void, @value}, 0x94) (async) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket(0x2, 0x3, 0x100000001) syz_emit_ethernet(0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003000000000000190780a010100ac1414aa030090780300183f45000000002409a133c40dc52000000000000000ac1414aaac141400c12ad56b933e52a8224f3fb7f808b6db50b3b5a11d9fb34c51b23ec380f721f1c77cb7dd51965935c78fbbd8ebb4e00a4d00ea828c88305b5b5a39d76eb72e007166f2c1ab26a81bb795cb60bc20e350a6d7e856d5b00cb48a34ce111d5ffeaa946cbf001cfcfd79c44d398df70b134279631012a7192466a1c87b66cc3e08c225f729bb9ccdd0cbcaa0f1d33f5d574ebe8e2306232ebc5526dbf31166f9fa15e1caee86d2f01cb7b71836c9db55260b4c76a973631fe24515af5e92cda9d852582b6353be1ce3003698cb7567fea12f7c448d1375e64a4f178edba46c0e7cadad7e27b4a03e20821c59858be4c32d5710717608394a82d91fe2"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) bind$alg(r2, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r8 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 748.425455ms ago: executing program 4 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc78}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000000850000003100000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 582.951454ms ago: executing program 2 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4', @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000040)="4cd05502c2a1c18f1a", 0x9}], 0x2) 548.384534ms ago: executing program 4 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000003100074006edb25c291bae751f66ea9f2eea3436c56b7ba56e1c806ace903b898babde33e723dc91133c88b7f906d493f26764549c7c92efa4ca0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000003100074006edb25c291bae751f66ea9f2eea3436c56b7ba56e1c806ace903b898babde33e723dc91133c88b7f906d493f26764549c7c92efa4ca0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) 416.289902ms ago: executing program 0 (id=841): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="72df1c7a0384fe9cd6625c16379266e2856b21cb8da97489ed55b4aeb7e7a9e0476979d128d752df7ebaacdb745dd583885384867d9e65be4b5920fb4cfe88cdcb39a634f81e7a3f63b47ad50b02ee7a86a0a978282e14197f8a44f57b4d8bec6a0657e3618040fa", 0x68}, 0x1, 0x0, 0x0, 0x4008811}, 0x20008800) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast2, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0xffffffff}, 0x400000}, 0x0, 0x7fff}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, @in6=@empty, @in6=@local}]}, @proto={0x5, 0x1b}]}, 0x150}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xf, 0x0, &(0x7f0000000080)="10b6fce2fc05df5bd5e06bf7db0097", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = accept4(r3, 0x0, 0x0, 0x80000) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000440)=0x30) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001300)) 350.855761ms ago: executing program 2 (id=842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0xffffff27, 0x0, &(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x2b, 0x3}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet6(r3, &(0x7f0000000240)=""/128, 0x80, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) ioctl$FITHAW(r1, 0xc0045878) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) writev(r10, &(0x7f0000000580)=[{&(0x7f0000000700)='\b', 0x1}], 0x1) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x70bd25, 0x0, {{@in6=@remote, @in=@dev, 0x4e20}, {@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x14}}]}, 0x138}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) 336.214605ms ago: executing program 4 (id=843): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x3c}}, 0x0) r8 = socket(0xe79b5097b07d17c, 0x4, 0x200001) sendmmsg$inet(r8, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000300)={r10, 0x5}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xa}, {0x4, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4e000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r11, 0x0, 0xa0028000}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000020201020000000000000000dc8163108d81b0364d0a0000093c0002802c00018014000300fc0200000000000000000000000000fd14e10300000000000000000000000000000000000c0002"], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x804) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) 261.947992ms ago: executing program 3 (id=844): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010003000000ffdbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000000)={0x81, 0xfd}) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000005de7ce04a689a9fdf69531a97b4bbe79cc1ebfbdbb184de62fa4a0e04c00000e000000"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x1fff, @none, 0x3ff}, 0xe) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003d00070100000000000000c7047c000004f8ffff0f00018008001600e00000010400a480040008"], 0x2c}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r11, 0x11, 0xa, 0x0, &(0x7f00000000c0)) 137.023006ms ago: executing program 0 (id=845): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x9, 0xcc3, {{0x5, 0x4, 0x3, 0x32, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7800, 0x7, 0x8, 0x8, {{0x2a, 0x4, 0x1, 0x6, 0xa8, 0x65, 0x0, 0x6, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@noop, @cipso={0x86, 0x2d, 0x1, [{0x6, 0x10, "bce72b35f9003690a499e1f9ea34"}, {0x0, 0xb, "a1b39737f28e9fb42c"}, {0x4, 0xc, "33d33c60385f2122639a"}]}, @ssrr={0x89, 0xb, 0x34, [@local, @broadcast]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x9, [0x5, 0x6, 0x74]}, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0x8, [{@multicast2, 0x1}, {@local, 0xffff0001}, {@broadcast, 0xdb9}]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x23, [@rand_addr=0x64010101, @empty, @loopback, @broadcast]}, @timestamp={0x44, 0x14, 0x39, 0x0, 0x5, [0xb, 0x0, 0xfffffc01, 0x5]}]}}}}}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in=@loopback, 0x4e23, 0xb, 0x4e24, 0x100, 0x2, 0xe0, 0x10, 0x2e, r3}, {0x2, 0xffffffffffffffff, 0x80000001, 0xbae, 0x8, 0xffffffffffffffff, 0x8c, 0x1}, {0xfffffffffffffffa, 0xfffffffffffffffe, 0x8b, 0xc5}, 0x8, 0x6e6bb7, 0x1, 0x1a07a08a36bd3ee2, 0xec18470dd435a9ae}, {{@in6=@mcast1, 0x4d6, 0xff}, 0x0, @in=@multicast2, 0x3503, 0x1, 0x3, 0x6, 0x2, 0xb}}, 0xe8) bind$unix(r0, &(0x7f0000002c00)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r1, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x4}, {@in6=@empty, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, {0x40000000000}, {}, {0x8}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'ghash-ce-sync\x00'}}}]}, 0x13c}}, 0x0) 42.935512ms ago: executing program 1 (id=846): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc044}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)}], 0x2}], 0x1, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 1 (id=847): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001040000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="1400b7a01215e1ffffffffffffff00000000000114000e00ff02"], 0x64}}, 0x4892) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000002040)) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x40, @multicast2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 67.960482][ T5820] cgroup: Unknown subsys name 'net' [ 68.069995][ T5820] cgroup: Unknown subsys name 'cpuset' [ 68.078754][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.592769][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.607060][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.613582][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.942617][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.961469][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.983990][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.992154][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.999981][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.008843][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.017430][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.024520][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.032569][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.034683][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.040312][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.050374][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.062549][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.063416][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.070025][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.085447][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.094486][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.102304][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.102437][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.117411][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.118362][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.125601][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.132318][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.139868][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.146256][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.153813][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.174543][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.182111][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.203979][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.212563][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.659843][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 72.676962][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.687356][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 72.754023][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 72.870100][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.924829][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.933138][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.940858][ T5834] bridge_slave_0: entered allmulticast mode [ 72.948475][ T5834] bridge_slave_0: entered promiscuous mode [ 72.985953][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.993107][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.000766][ T5834] bridge_slave_1: entered allmulticast mode [ 73.007855][ T5834] bridge_slave_1: entered promiscuous mode [ 73.015016][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.022477][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.029769][ T5833] bridge_slave_0: entered allmulticast mode [ 73.037204][ T5833] bridge_slave_0: entered promiscuous mode [ 73.092502][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.099746][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.107364][ T5833] bridge_slave_1: entered allmulticast mode [ 73.114077][ T5833] bridge_slave_1: entered promiscuous mode [ 73.133616][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.140945][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.148651][ T5840] bridge_slave_0: entered allmulticast mode [ 73.155350][ T5840] bridge_slave_0: entered promiscuous mode [ 73.184163][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.194631][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.202331][ T5839] bridge_slave_0: entered allmulticast mode [ 73.210008][ T5839] bridge_slave_0: entered promiscuous mode [ 73.217951][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.225049][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.232595][ T5840] bridge_slave_1: entered allmulticast mode [ 73.240146][ T5840] bridge_slave_1: entered promiscuous mode [ 73.258284][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.270804][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.303230][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.311039][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.319225][ T5839] bridge_slave_1: entered allmulticast mode [ 73.326636][ T5839] bridge_slave_1: entered promiscuous mode [ 73.351124][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.372422][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.412370][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.440152][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.449779][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.457210][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.464638][ T5830] bridge_slave_0: entered allmulticast mode [ 73.471533][ T5830] bridge_slave_0: entered promiscuous mode [ 73.480964][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.504674][ T5834] team0: Port device team_slave_0 added [ 73.513058][ T5834] team0: Port device team_slave_1 added [ 73.537245][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.544999][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.552466][ T5830] bridge_slave_1: entered allmulticast mode [ 73.559722][ T5830] bridge_slave_1: entered promiscuous mode [ 73.577341][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.588977][ T5840] team0: Port device team_slave_0 added [ 73.620611][ T5833] team0: Port device team_slave_0 added [ 73.636943][ T5840] team0: Port device team_slave_1 added [ 73.653990][ T5839] team0: Port device team_slave_0 added [ 73.669571][ T5833] team0: Port device team_slave_1 added [ 73.678191][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.689796][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.717559][ T5839] team0: Port device team_slave_1 added [ 73.723949][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.731209][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.757221][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.802269][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.809407][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.835513][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.854453][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.861512][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.887781][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.904394][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.911773][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.938309][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.952924][ T5830] team0: Port device team_slave_0 added [ 73.961177][ T5830] team0: Port device team_slave_1 added [ 73.968071][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.975034][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001019][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.032600][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.039726][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.065879][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.092561][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.099896][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.126668][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.139543][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.147788][ T5835] Bluetooth: hci0: command tx timeout [ 74.153492][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.179739][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.208835][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.215914][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.242596][ T5838] Bluetooth: hci1: command tx timeout [ 74.242962][ T5835] Bluetooth: hci3: command tx timeout [ 74.248129][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.264886][ T5838] Bluetooth: hci4: command tx timeout [ 74.294494][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.301637][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.306403][ T5835] Bluetooth: hci2: command tx timeout [ 74.334024][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.359769][ T5833] hsr_slave_0: entered promiscuous mode [ 74.366228][ T5833] hsr_slave_1: entered promiscuous mode [ 74.388682][ T5834] hsr_slave_0: entered promiscuous mode [ 74.394917][ T5834] hsr_slave_1: entered promiscuous mode [ 74.401162][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.408954][ T5834] Cannot create hsr debugfs directory [ 74.429378][ T5840] hsr_slave_0: entered promiscuous mode [ 74.435567][ T5840] hsr_slave_1: entered promiscuous mode [ 74.441904][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.449732][ T5840] Cannot create hsr debugfs directory [ 74.469911][ T5839] hsr_slave_0: entered promiscuous mode [ 74.476322][ T5839] hsr_slave_1: entered promiscuous mode [ 74.482452][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.490086][ T5839] Cannot create hsr debugfs directory [ 74.601184][ T5830] hsr_slave_0: entered promiscuous mode [ 74.609133][ T5830] hsr_slave_1: entered promiscuous mode [ 74.615080][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.623194][ T5830] Cannot create hsr debugfs directory [ 74.949813][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.966827][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.990332][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.007828][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.037109][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.063270][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.089019][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.099679][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.135630][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.153480][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.174324][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.195781][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.233942][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.251717][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.263056][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.278858][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.372507][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.383491][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.393475][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.415601][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.457152][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.514442][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.539324][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.554438][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.590275][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.602707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.610025][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.641238][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.648432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.668554][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.703287][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.710462][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.727929][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.740581][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.752736][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.759972][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.808377][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.815490][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.829060][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.836276][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.845719][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.852844][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.864667][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.871775][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.892625][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.961754][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.000149][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.039919][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.047231][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.093642][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.100814][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.233267][ T5835] Bluetooth: hci0: command tx timeout [ 76.299248][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.316243][ T5835] Bluetooth: hci3: command tx timeout [ 76.316308][ T5838] Bluetooth: hci4: command tx timeout [ 76.321673][ T5835] Bluetooth: hci1: command tx timeout [ 76.387423][ T5835] Bluetooth: hci2: command tx timeout [ 76.462833][ T5840] veth0_vlan: entered promiscuous mode [ 76.494936][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.514160][ T5840] veth1_vlan: entered promiscuous mode [ 76.618813][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.639362][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.671001][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.723160][ T5834] veth0_vlan: entered promiscuous mode [ 76.734762][ T5840] veth0_macvtap: entered promiscuous mode [ 76.755792][ T5840] veth1_macvtap: entered promiscuous mode [ 76.784847][ T5833] veth0_vlan: entered promiscuous mode [ 76.800701][ T5834] veth1_vlan: entered promiscuous mode [ 76.824669][ T5833] veth1_vlan: entered promiscuous mode [ 76.837522][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.855854][ T5830] veth0_vlan: entered promiscuous mode [ 76.869894][ T5830] veth1_vlan: entered promiscuous mode [ 76.890468][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.925724][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.936116][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.944896][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.963142][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039105][ T5830] veth0_macvtap: entered promiscuous mode [ 77.051375][ T5834] veth0_macvtap: entered promiscuous mode [ 77.065516][ T5830] veth1_macvtap: entered promiscuous mode [ 77.077397][ T5833] veth0_macvtap: entered promiscuous mode [ 77.088532][ T5834] veth1_macvtap: entered promiscuous mode [ 77.100576][ T5833] veth1_macvtap: entered promiscuous mode [ 77.175657][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.188800][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.200847][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.210629][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.221795][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.232103][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.242604][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.253943][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.273409][ T5839] veth0_vlan: entered promiscuous mode [ 77.283641][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.294795][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.304873][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.315674][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.326119][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.336944][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.348899][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.365067][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.376795][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.387566][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.396641][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.408835][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.419016][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.430704][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.441654][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.460213][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.471060][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.481415][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.492773][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.502940][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.513710][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.525072][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.539065][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.548224][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.557977][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566926][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.579814][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.591620][ T5839] veth1_vlan: entered promiscuous mode [ 77.600804][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.613208][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622512][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.631623][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.640489][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.662431][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.671380][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.680427][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.690370][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732875][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.740995][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.797149][ T5839] veth0_macvtap: entered promiscuous mode [ 77.813495][ T5839] veth1_macvtap: entered promiscuous mode [ 77.921571][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.923341][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.950279][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.961061][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.971912][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.982126][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.001547][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.011586][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.022076][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.033520][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.067483][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.075369][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.095781][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.114045][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.125276][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.155735][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.168154][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.184452][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.194710][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.205294][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.216729][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.225442][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.233749][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.261113][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.262931][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.279863][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.290296][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.290941][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.306216][ T5835] Bluetooth: hci0: command tx timeout [ 78.306608][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.386072][ T5835] Bluetooth: hci4: command tx timeout [ 78.387296][ T5838] Bluetooth: hci3: command tx timeout [ 78.391512][ T5835] Bluetooth: hci1: command tx timeout [ 78.434577][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.465714][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.473648][ T5835] Bluetooth: hci2: command tx timeout [ 78.509738][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.532023][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.584316][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.609723][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.688312][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.706962][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.761055][ T5925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 78.922119][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.957415][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.978704][ T5931] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.945626][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.986285][ T5961] Zero length message leads to an empty skb [ 80.030549][ T5961] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 80.084277][ T5961] syzkaller1: entered promiscuous mode [ 80.122043][ T5961] syzkaller1: entered allmulticast mode [ 80.187449][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 80.386087][ T5835] Bluetooth: hci0: command tx timeout [ 80.466231][ T5835] Bluetooth: hci1: command tx timeout [ 80.466253][ T5841] Bluetooth: hci3: command tx timeout [ 80.466289][ T5841] Bluetooth: hci4: command tx timeout [ 80.546837][ T5841] Bluetooth: hci2: command tx timeout [ 80.663078][ T5973] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 81.873091][ T5966] syz.4.11: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 81.893409][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.4.11 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 81.893435][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.893452][ T5966] Call Trace: [ 81.893459][ T5966] [ 81.893467][ T5966] dump_stack_lvl+0x241/0x360 [ 81.893507][ T5966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.893530][ T5966] ? __pfx__printk+0x10/0x10 [ 81.893562][ T5966] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 81.893591][ T5966] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 81.893621][ T5966] warn_alloc+0x278/0x410 [ 81.893649][ T5966] ? __pfx_warn_alloc+0x10/0x10 [ 81.893676][ T5966] ? veth_dev_init+0x35f/0x550 [ 81.893696][ T5966] ? __get_vm_area_node+0x1c8/0x2d0 [ 81.893729][ T5966] ? __get_vm_area_node+0x25c/0x2d0 [ 81.893769][ T5966] __vmalloc_node_range_noprof+0x62f/0x1380 [ 81.893792][ T5966] ? look_up_lock_class+0x77/0x170 [ 81.893841][ T5966] ? rcu_is_watching+0x15/0xb0 [ 81.893866][ T5966] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.893889][ T5966] ? rcu_is_watching+0x15/0xb0 [ 81.893914][ T5966] ? trace_kmalloc+0x1f/0xd0 [ 81.893943][ T5966] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 81.893975][ T5966] ? __kvmalloc_node_noprof+0x72/0x190 [ 81.894016][ T5966] __kvmalloc_node_noprof+0x142/0x190 [ 81.894053][ T5966] ? veth_dev_init+0x35f/0x550 [ 81.894078][ T5966] veth_dev_init+0x35f/0x550 [ 81.894108][ T5966] register_netdevice+0x6d7/0x1b70 [ 81.894137][ T5966] ? _get_random_bytes+0x25d/0x2c0 [ 81.894173][ T5966] ? snprintf+0xda/0x120 [ 81.894197][ T5966] ? __pfx_register_netdevice+0x10/0x10 [ 81.894226][ T5966] ? __pfx_snprintf+0x10/0x10 [ 81.894249][ T5966] ? __asan_memset+0x23/0x50 [ 81.894282][ T5966] veth_newlink+0x66a/0xb70 [ 81.894310][ T5966] ? __pfx_veth_newlink+0x10/0x10 [ 81.894391][ T5966] ? alloc_netdev_mqs+0xe01/0x1210 [ 81.894429][ T5966] ? rtnl_create_link+0x95b/0xc90 [ 81.894459][ T5966] ? __pfx_veth_newlink+0x10/0x10 [ 81.894483][ T5966] rtnl_newlink_create+0x37b/0xbd0 [ 81.894513][ T5966] ? __mutex_lock+0x602/0x1010 [ 81.894545][ T5966] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 81.894589][ T5966] ? __pfx___mutex_lock+0x10/0x10 [ 81.894627][ T5966] ? ns_capable+0x8a/0xf0 [ 81.894657][ T5966] rtnl_newlink+0x167a/0x1d90 [ 81.894694][ T5966] ? stack_depot_save_flags+0x37/0x940 [ 81.894744][ T5966] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.894777][ T5966] ? __netlink_deliver_tap+0x561/0x7f0 [ 81.894811][ T5966] ? __pfx_validate_chain+0x10/0x10 [ 81.894834][ T5966] ? __sock_sendmsg+0x221/0x270 [ 81.894864][ T5966] ? ____sys_sendmsg+0x53a/0x860 [ 81.894899][ T5966] ? __sys_sendmsg+0x269/0x350 [ 81.894922][ T5966] ? do_syscall_64+0xf3/0x230 [ 81.894948][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.895059][ T5966] ? __pfx_lock_release+0x10/0x10 [ 81.895109][ T5966] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.895145][ T5966] rtnetlink_rcv_msg+0x791/0xcf0 [ 81.895176][ T5966] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 81.895215][ T5966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.895255][ T5966] ? ref_tracker_free+0x643/0x7e0 [ 81.895303][ T5966] netlink_rcv_skb+0x206/0x480 [ 81.895338][ T5966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.895375][ T5966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.895433][ T5966] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.895471][ T5966] netlink_unicast+0x7f6/0x990 [ 81.895511][ T5966] ? __pfx_netlink_unicast+0x10/0x10 [ 81.895538][ T5966] ? __virt_addr_valid+0x45f/0x530 [ 81.895569][ T5966] ? __phys_addr_symbol+0x2f/0x70 [ 81.895591][ T5966] ? __check_object_size+0x47a/0x730 [ 81.895638][ T5966] netlink_sendmsg+0x8de/0xcb0 [ 81.895685][ T5966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.895723][ T5966] ? aa_sock_msg_perm+0x91/0x160 [ 81.895764][ T5966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.895795][ T5966] __sock_sendmsg+0x221/0x270 [ 81.895836][ T5966] ____sys_sendmsg+0x53a/0x860 [ 81.895868][ T5966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.895891][ T5966] ? __fget_files+0x2a/0x410 [ 81.895925][ T5966] ? __fget_files+0x2a/0x410 [ 81.895966][ T5966] __sys_sendmsg+0x269/0x350 [ 81.895997][ T5966] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.896069][ T5966] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.896104][ T5966] ? do_syscall_64+0x100/0x230 [ 81.896134][ T5966] ? do_syscall_64+0xb6/0x230 [ 81.896165][ T5966] do_syscall_64+0xf3/0x230 [ 81.896193][ T5966] ? clear_bhb_loop+0x35/0x90 [ 81.896226][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.896266][ T5966] RIP: 0033:0x7f6af698d169 [ 81.896290][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.896327][ T5966] RSP: 002b:00007f6af783b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.896350][ T5966] RAX: ffffffffffffffda RBX: 00007f6af6ba5fa0 RCX: 00007f6af698d169 [ 81.896366][ T5966] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 81.896380][ T5966] RBP: 00007f6af6a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.896393][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.896406][ T5966] R13: 0000000000000000 R14: 00007f6af6ba5fa0 R15: 00007ffd6a7e76f8 [ 81.896439][ T5966] [ 82.410386][ T5966] Mem-Info: [ 82.413573][ T5966] active_anon:4952 inactive_anon:0 isolated_anon:0 [ 82.413573][ T5966] active_file:1051 inactive_file:38295 isolated_file:0 [ 82.413573][ T5966] unevictable:768 dirty:1539 writeback:0 [ 82.413573][ T5966] slab_reclaimable:9974 slab_unreclaimable:99056 [ 82.413573][ T5966] mapped:38837 shmem:1430 pagetables:920 [ 82.413573][ T5966] sec_pagetables:0 bounce:0 [ 82.413573][ T5966] kernel_misc_reclaimable:0 [ 82.413573][ T5966] free:1343777 free_pcp:371 free_cma:0 [ 82.464594][ T5966] Node 0 active_anon:19808kB inactive_anon:0kB active_file:4204kB inactive_file:153104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155348kB dirty:6152kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:3680kB sec_pagetables:0kB all_unreclaimable? no [ 82.498182][ T5966] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 82.531608][ T5966] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.559939][ T5966] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 82.568329][ T5966] Node 0 DMA32 free:1452324kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19768kB inactive_anon:0kB active_file:4204kB inactive_file:152780kB unevictable:1536kB writepending:6148kB present:3129332kB managed:2549712kB mlocked:0kB bounce:0kB free_pcp:848kB local_pcp:312kB free_cma:0kB [ 82.598734][ T5966] lowmem_reserve[]: 0 0 0 0 0 [ 82.603700][ T5966] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.632167][ T5966] lowmem_reserve[]: 0 0 0 0 0 [ 82.637370][ T5966] Node 1 Normal free:3907768kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 82.666854][ T5966] lowmem_reserve[]: 0 0 0 0 0 [ 82.671663][ T5966] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 82.684601][ T5966] Node 0 DMA32: 3*4kB (UME) 1*8kB (E) 140*16kB (UME) 81*32kB (UME) 63*64kB (UME) 36*128kB (UM) 25*256kB (UM) 16*512kB (UME) 2*1024kB (ME) 0*2048kB 347*4096kB (M) = 1451444kB [ 82.702572][ T5966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 82.714638][ T5966] Node 1 Normal: 232*4kB (UE) 75*8kB (UME) 34*16kB (UME) 209*32kB (UME) 98*64kB (UME) 26*128kB (UME) 9*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 946*4096kB (UM) = 3907768kB [ 82.733941][ T5966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.743614][ T5966] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.753074][ T5966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.762764][ T5966] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.772141][ T5966] 40776 total pagecache pages [ 82.776912][ T5966] 0 pages in swap cache [ 82.781080][ T5966] Free swap = 124996kB [ 82.785250][ T5966] Total swap = 124996kB [ 82.790674][ T5966] 2097051 pages RAM [ 82.794537][ T5966] 0 pages HighMem/MovableOnly [ 82.799621][ T5966] 427901 pages reserved [ 82.803887][ T5966] 0 pages cma reserved [ 83.622160][ T5972] bridge_slave_0: left allmulticast mode [ 83.628413][ T5972] bridge_slave_0: left promiscuous mode [ 83.635486][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.661787][ T5972] bridge_slave_1: left allmulticast mode [ 83.672497][ T5972] bridge_slave_1: left promiscuous mode [ 83.681165][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.714549][ T5972] bond0: (slave bond_slave_0): Releasing backup interface [ 83.743563][ T5972] bond0: (slave bond_slave_1): Releasing backup interface [ 83.779365][ T5972] team0: Port device team_slave_0 removed [ 83.791528][ T5972] team0: Port device team_slave_1 removed [ 83.798820][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.806740][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.815725][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.824751][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.843644][ T6005] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 83.848912][ T5974] team0: Mode changed to "roundrobin" [ 83.854377][ T6005] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 83.871857][ T6005] netlink: 236 bytes leftover after parsing attributes in process `syz.4.18'. [ 83.898818][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.910282][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'. [ 84.187540][ T6005] syzkaller1: entered promiscuous mode [ 84.193122][ T6005] syzkaller1: entered allmulticast mode [ 84.228539][ T6014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.442033][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.450024][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.721945][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.757027][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.925588][ T6017] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.945579][ T6017] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.960672][ T6017] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.971258][ T6017] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.306340][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.329098][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.350502][ T6014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.271861][ T6039] netlink: 'syz.4.25': attribute type 2 has an invalid length. [ 86.294919][ T6039] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.25'. [ 86.339544][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.679101][ T6056] ip6tnl1: entered promiscuous mode [ 86.684389][ T6056] ip6tnl1: entered allmulticast mode [ 86.729263][ T6056] team0: Device ip6tnl1 is of different type [ 86.770911][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28'. [ 86.874474][ T6056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.28'. [ 86.964443][ T9] cfg80211: failed to load regulatory.db [ 87.431547][ T6074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.686107][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 88.928948][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 89.034368][ T6106] netlink: 'syz.0.40': attribute type 30 has an invalid length. [ 89.096247][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 89.152829][ T6111] netlink: 'syz.0.40': attribute type 30 has an invalid length. [ 89.300834][ T6106] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.309946][ T6106] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.318853][ T6106] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.327681][ T6106] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.444645][ T6116] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 89.478862][ T6123] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 89.621990][ T6116] xt_time: unknown flags 0x4 [ 90.165470][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 90.211910][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.298291][ T6136] bridge_slave_1: left allmulticast mode [ 90.338722][ T6136] bridge_slave_1: left promiscuous mode [ 90.344769][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.423359][ T6136] bridge_slave_0: left allmulticast mode [ 90.465999][ T6136] bridge_slave_0: left promiscuous mode [ 90.471990][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.586738][ T6144] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.782913][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.45'. [ 91.048097][ T6152] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 92.361795][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 92.424861][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 92.994107][ T6189] tun0: tun_chr_ioctl cmd 1074025673 [ 93.309350][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 93.460889][ T6205] netlink: 256 bytes leftover after parsing attributes in process `syz.1.62'. [ 93.794003][ T6212] lo speed is unknown, defaulting to 1000 [ 93.803765][ T6212] lo speed is unknown, defaulting to 1000 [ 93.847723][ T6212] lo speed is unknown, defaulting to 1000 [ 93.882256][ T6212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.905438][ T6212] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.955113][ T6212] lo speed is unknown, defaulting to 1000 [ 93.997936][ T6212] lo speed is unknown, defaulting to 1000 [ 94.019480][ T6212] lo speed is unknown, defaulting to 1000 [ 94.031580][ T6212] lo speed is unknown, defaulting to 1000 [ 94.041381][ T6212] lo speed is unknown, defaulting to 1000 [ 94.245493][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 94.513687][ T6236] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.554009][ T6236] Cannot find set identified by id 0 to match [ 94.769863][ T6247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.788329][ T6256] raw_sendmsg: syz.1.78 forgot to set AF_INET. Fix it! [ 94.829846][ T6245] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 94.952451][ T6247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.066949][ T6247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.153517][ T6247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.196457][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 95.240946][ T6263] lo speed is unknown, defaulting to 1000 [ 95.255986][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.270984][ T6262] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.293519][ T6247] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.347797][ T6247] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.411564][ T6247] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.512707][ T6247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.533398][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 95.548650][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 95.596197][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 95.626061][ T6268] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 95.649408][ T6268] nbd: error processing sock list [ 95.771652][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 96.186346][ T6293] netlink: 108 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.211440][ T6293] netlink: 108 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.230206][ T6293] netlink: 84 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.283260][ T6285] vlan0: entered promiscuous mode [ 96.346500][ T6285] team0: Port device vlan0 added [ 96.814036][ T6317] netlink: 64 bytes leftover after parsing attributes in process `syz.2.94'. [ 97.071337][ T6324] lo speed is unknown, defaulting to 1000 [ 97.776367][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 98.004820][ T6349] team_slave_0: entered promiscuous mode [ 98.010945][ T6349] team_slave_1: entered promiscuous mode [ 98.033211][ T6349] vlan2: entered promiscuous mode [ 98.051842][ T6349] team0: entered promiscuous mode [ 98.076362][ T6349] team0: left promiscuous mode [ 98.082924][ T6349] team_slave_0: left promiscuous mode [ 98.088463][ T6349] team_slave_1: left promiscuous mode [ 98.197201][ T6358] openvswitch: netlink: IPv6 tunnel dst address is zero [ 98.757980][ T6373] Cannot find set identified by id 0 to match [ 99.177014][ T6382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.224145][ T6382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.935074][ T6411] netlink: 'syz.0.120': attribute type 21 has an invalid length. [ 100.025581][ T6413] lo speed is unknown, defaulting to 1000 [ 100.184683][ T6416] lo speed is unknown, defaulting to 1000 [ 100.538655][ T6445] FAULT_INJECTION: forcing a failure. [ 100.538655][ T6445] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.572773][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.4.126 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 100.572804][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.572816][ T6445] Call Trace: [ 100.572824][ T6445] [ 100.572832][ T6445] dump_stack_lvl+0x241/0x360 [ 100.572866][ T6445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.572889][ T6445] ? __pfx__printk+0x10/0x10 [ 100.572912][ T6445] ? __pfx_lock_release+0x10/0x10 [ 100.572953][ T6445] should_fail_ex+0x40a/0x550 [ 100.572989][ T6445] _copy_from_user+0x2d/0xb0 [ 100.573018][ T6445] copy_msghdr_from_user+0xae/0x680 [ 100.573052][ T6445] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.573079][ T6445] ? __fget_files+0x2a/0x410 [ 100.573114][ T6445] ? __fget_files+0x2a/0x410 [ 100.573152][ T6445] __sys_sendmsg+0x209/0x350 [ 100.573181][ T6445] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.573218][ T6445] ? do_sys_openat2+0x17a/0x1d0 [ 100.573273][ T6445] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.573305][ T6445] ? do_syscall_64+0x100/0x230 [ 100.573336][ T6445] ? do_syscall_64+0xb6/0x230 [ 100.573366][ T6445] do_syscall_64+0xf3/0x230 [ 100.573393][ T6445] ? clear_bhb_loop+0x35/0x90 [ 100.573422][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.573445][ T6445] RIP: 0033:0x7f6af698d169 [ 100.573461][ T6445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.573478][ T6445] RSP: 002b:00007f6af781a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.573503][ T6445] RAX: ffffffffffffffda RBX: 00007f6af6ba6080 RCX: 00007f6af698d169 [ 100.573518][ T6445] RDX: 000000000004e000 RSI: 0000400000000400 RDI: 0000000000000003 [ 100.573531][ T6445] RBP: 00007f6af781a090 R08: 0000000000000000 R09: 0000000000000000 [ 100.573550][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.573562][ T6445] R13: 0000000000000001 R14: 00007f6af6ba6080 R15: 00007ffd6a7e76f8 [ 100.573592][ T6445] [ 100.880289][ T6435] lo speed is unknown, defaulting to 1000 [ 100.939232][ T6445] lo speed is unknown, defaulting to 1000 [ 100.963515][ T6451] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 101.159652][ T6454] af_packet: tpacket_rcv: packet too big, clamped from 4817 to 3952. macoff=96 [ 101.288519][ T6461] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 101.354023][ T6458] __nla_validate_parse: 3 callbacks suppressed [ 101.354045][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 101.838463][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 101.847561][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.977213][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.066296][ T6475] lo speed is unknown, defaulting to 1000 [ 102.088392][ T6486] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 102.337482][ T6492] Unsupported ieee802154 address type: 0 [ 102.439045][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 102.576163][ T6503] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.668567][ T6557] syzkaller0: entered promiscuous mode [ 103.678372][ T6557] syzkaller0: entered allmulticast mode [ 103.967326][ T6568] lo speed is unknown, defaulting to 1000 [ 105.837933][ T6586] batadv_slave_1: entered promiscuous mode [ 105.849808][ T6604] warning: `syz.4.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.980932][ T6594] batadv_slave_1: left promiscuous mode [ 106.014236][ T6608] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.164'. [ 106.218811][ T6616] netlink: 'syz.4.165': attribute type 12 has an invalid length. [ 106.897157][ T6645] netlink: 96 bytes leftover after parsing attributes in process `syz.1.174'. [ 106.915316][ T6647] dccp_close: ABORT with 46 bytes unread [ 106.930090][ T6645] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 107.224341][ T6657] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 107.245522][ T6660] FAULT_INJECTION: forcing a failure. [ 107.245522][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.270163][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.2.181 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 107.270194][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.270206][ T6660] Call Trace: [ 107.270213][ T6660] [ 107.270222][ T6660] dump_stack_lvl+0x241/0x360 [ 107.270254][ T6660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.270277][ T6660] ? __pfx__printk+0x10/0x10 [ 107.270297][ T6660] ? rcu_is_watching+0x15/0xb0 [ 107.270322][ T6660] ? __pfx_lock_release+0x10/0x10 [ 107.270350][ T6660] ? __alloc_frozen_pages_noprof+0x350/0x710 [ 107.270384][ T6660] should_fail_ex+0x40a/0x550 [ 107.270420][ T6660] _copy_from_iter+0x1df/0x1c40 [ 107.270461][ T6660] ? __pfx__copy_from_iter+0x10/0x10 [ 107.270487][ T6660] ? tun_get_user+0x838/0x45b0 [ 107.270516][ T6660] ? set_page_refcounted+0xa1/0x1e0 [ 107.270547][ T6660] ? alloc_pages_noprof+0x136/0x190 [ 107.270574][ T6660] ? page_copy_sane+0x46/0x260 [ 107.270614][ T6660] copy_page_from_iter+0x7a/0x100 [ 107.270643][ T6660] tun_get_user+0x1ed6/0x45b0 [ 107.270672][ T6660] ? tun_get_user+0x838/0x45b0 [ 107.270705][ T6660] ? __lock_acquire+0x1397/0x2100 [ 107.270743][ T6660] ? __pfx_tun_get_user+0x10/0x10 [ 107.270787][ T6660] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 107.270809][ T6660] ? tun_get+0x1e/0x2f0 [ 107.270833][ T6660] ? __pfx_lock_release+0x10/0x10 [ 107.270879][ T6660] ? tun_get+0x1e/0x2f0 [ 107.270904][ T6660] ? tun_get+0x27d/0x2f0 [ 107.270930][ T6660] tun_chr_write_iter+0x10d/0x1f0 [ 107.270957][ T6660] vfs_write+0xacf/0xd10 [ 107.270984][ T6660] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 107.271011][ T6660] ? __pfx_vfs_write+0x10/0x10 [ 107.271031][ T6660] ? do_sys_openat2+0x17a/0x1d0 [ 107.271063][ T6660] ? __fget_files+0x2a/0x410 [ 107.271096][ T6660] ? __fget_files+0x2a/0x410 [ 107.271134][ T6660] ksys_write+0x18f/0x2b0 [ 107.271159][ T6660] ? __pfx_ksys_write+0x10/0x10 [ 107.271183][ T6660] ? do_syscall_64+0x100/0x230 [ 107.271214][ T6660] ? do_syscall_64+0xb6/0x230 [ 107.271252][ T6660] do_syscall_64+0xf3/0x230 [ 107.271279][ T6660] ? clear_bhb_loop+0x35/0x90 [ 107.271310][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.271338][ T6660] RIP: 0033:0x7fe8a898bc1f [ 107.271356][ T6660] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 107.271373][ T6660] RSP: 002b:00007fe8a983c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 107.271394][ T6660] RAX: ffffffffffffffda RBX: 00007fe8a8ba5fa0 RCX: 00007fe8a898bc1f [ 107.271409][ T6660] RDX: 000000000000004e RSI: 00004000000000c0 RDI: 00000000000000c8 [ 107.271422][ T6660] RBP: 00007fe8a983c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.271434][ T6660] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 107.271446][ T6660] R13: 0000000000000000 R14: 00007fe8a8ba5fa0 R15: 00007fffb28492e8 [ 107.271475][ T6660] [ 107.275382][ T6657] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.180'. [ 107.879569][ T6680] bond_slave_0: entered allmulticast mode [ 108.081605][ T6686] syzkaller0: entered promiscuous mode [ 108.092825][ T6686] syzkaller0: entered allmulticast mode [ 108.117152][ T6682] lo speed is unknown, defaulting to 1000 [ 108.224921][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 108.245669][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 109.958640][ T6698] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 110.055123][ T6709] xt_hashlimit: max too large, truncated to 1048576 [ 110.970251][ T6752] netlink: 60 bytes leftover after parsing attributes in process `syz.1.207'. [ 110.988859][ T6755] tipc: Can't bind to reserved service type 1 [ 111.010689][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 111.630225][ T6770] xt_socket: unknown flags 0x8 [ 111.914105][ T6775] tipc: Started in network mode [ 111.937509][ T6775] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 111.956092][ T6775] tipc: Enabling of bearer rejected, failed to enable media [ 111.977060][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 112.427580][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'. [ 112.828279][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 112.850057][ T6817] vlan2: entered allmulticast mode [ 112.856639][ T6817] bridge0: port 3(vlan2) entered blocking state [ 112.864166][ T6817] bridge0: port 3(vlan2) entered disabled state [ 112.996615][ T6822] team0: No ports can be present during mode change [ 113.324883][ T6839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.231'. [ 113.412660][ T6811] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.510086][ T6849] netlink: 'syz.4.233': attribute type 11 has an invalid length. [ 113.609108][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.616730][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.699433][ T6856] netlink: 892 bytes leftover after parsing attributes in process `syz.2.235'. [ 113.923503][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.962821][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.032680][ T6844] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.043464][ T6844] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.052855][ T6844] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.063574][ T6844] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.125942][ T6862] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 114.390491][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 114.575908][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 114.605365][ T6863] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 114.639759][ T6874] vlan2: entered allmulticast mode [ 114.999489][ T6876] vlan0: left promiscuous mode [ 115.004554][ T6876] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 115.025214][ T6862] IPv6: sit1: Disabled Multicast RS [ 115.032432][ T6862] sit1: entered allmulticast mode [ 115.119945][ T6893] pim6reg: entered allmulticast mode [ 115.140268][ T6896] team0: entered allmulticast mode [ 115.150065][ T6896] team_slave_0: entered allmulticast mode [ 115.158386][ T6896] team_slave_1: entered allmulticast mode [ 115.164466][ T6899] team0: left allmulticast mode [ 115.170665][ T6899] team_slave_0: left allmulticast mode [ 115.176582][ T6899] team_slave_1: left allmulticast mode [ 115.182495][ T6899] pim6reg: left allmulticast mode [ 115.269927][ T6903] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 115.278749][ T6903] netlink: 224 bytes leftover after parsing attributes in process `syz.0.245'. [ 115.507059][ T6910] netlink: 'syz.0.247': attribute type 21 has an invalid length. [ 115.556091][ T6910] netlink: 128 bytes leftover after parsing attributes in process `syz.0.247'. [ 115.565167][ T6910] netlink: 3 bytes leftover after parsing attributes in process `syz.0.247'. [ 115.748417][ T6924] netlink: 'syz.2.252': attribute type 2 has an invalid length. [ 115.782612][ T6924] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 115.872706][ T6927] Bluetooth: MGMT ver 1.23 [ 115.918103][ T6927] team0: Device gtp0 is of different type [ 116.397343][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 116.487042][ T6946] netpci0: tun_chr_ioctl cmd 1074812118 [ 116.624541][ T6951] IPVS: Unknown mcast interface: veth1_to_batadv [ 116.784622][ T6959] netlink: 'syz.3.262': attribute type 11 has an invalid length. [ 117.250831][ T6972] tipc: Started in network mode [ 117.264172][ T6973] x_tables: duplicate underflow at hook 1 [ 117.283763][ T6972] tipc: Node identity fa82b5ad5055, cluster identity 4711 [ 117.292659][ T6972] tipc: Enabled bearer , priority 0 [ 117.422558][ T6981] syzkaller0: entered promiscuous mode [ 117.460540][ T6981] syzkaller0: entered allmulticast mode [ 117.484790][ T6981] tipc: Resetting bearer [ 117.842213][ T6519] tipc: Resetting bearer [ 117.905637][ T7001] __nla_validate_parse: 5 callbacks suppressed [ 117.905660][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 117.955579][ T6970] tipc: Resetting bearer [ 118.411562][ T5914] tipc: Node number set to 2866263469 [ 119.933453][ T6970] tipc: Disabling bearer [ 119.954839][ T6996] lo speed is unknown, defaulting to 1000 [ 120.318073][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 120.375265][ T7030] bond2: entered promiscuous mode [ 120.388847][ T7030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.611027][ T7042] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 120.702658][ T7030] netlink: 'syz.4.281': attribute type 6 has an invalid length. [ 120.908127][ T7052] Bluetooth: MGMT ver 1.23 [ 120.914289][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 121.167034][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 121.198784][ T7070] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 121.236715][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.271873][ T7069] vlan2: entered allmulticast mode [ 121.297007][ T7069] ip6gretap0: entered allmulticast mode [ 121.315937][ T7069] ip6gretap0: left allmulticast mode [ 121.386663][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 121.422392][ T7074] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 121.985070][ T7091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.323300][ T7114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.374229][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 122.522940][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 122.712958][ T7090] dccp_close: ABORT with 88 bytes unread [ 122.756983][ T7131] x_tables: duplicate underflow at hook 1 [ 123.031988][ T7142] lo speed is unknown, defaulting to 1000 [ 123.130749][ T7145] lo speed is unknown, defaulting to 1000 [ 123.539295][ T7161] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 123.554815][ T7161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.649131][ T7165] tipc: Enabled bearer , priority 0 [ 123.753386][ T7173] netlink: 'syz.3.324': attribute type 29 has an invalid length. [ 123.861877][ T7169] tipc: Resetting bearer [ 123.911625][ T7164] tipc: Resetting bearer [ 124.113107][ T7181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'. [ 124.124327][ T7190] xt_ecn: cannot match TCP bits for non-tcp packets [ 125.571415][ T7164] tipc: Disabling bearer [ 125.596079][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'. [ 126.056574][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 126.304777][ T7226] lo speed is unknown, defaulting to 1000 [ 126.373881][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.391174][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.421703][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.443477][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.457966][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.478222][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 126.493787][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.505966][ T7237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.337'. [ 126.526615][ T7237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.337'. [ 126.602235][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.628033][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.662334][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.184351][ T7249] lo speed is unknown, defaulting to 1000 [ 127.423163][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 127.454625][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 127.649275][ T7264] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 127.676191][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 128.043538][ T7280] lo speed is unknown, defaulting to 1000 [ 128.110084][ T7285] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.851859][ T7307] netlink: 'syz.4.358': attribute type 8 has an invalid length. [ 129.245083][ T7314] lo speed is unknown, defaulting to 1000 [ 129.447565][ T7322] Cannot find del_set index 2 as target [ 130.015266][ T7343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.370'. [ 130.369092][ T7350] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.371'. [ 130.416703][ T7355] lo speed is unknown, defaulting to 1000 [ 130.577194][ T7362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.651600][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 130.848376][ T7373] netlink: 'syz.2.379': attribute type 6 has an invalid length. [ 130.895316][ T7377] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.904227][ T7377] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.913084][ T7377] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.922061][ T7377] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.045871][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 131.310346][ T7355] netlink: 830 bytes leftover after parsing attributes in process `syz.4.373'. [ 131.326950][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 131.400358][ T7386] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 131.410741][ T7386] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 131.613902][ T7401] lo speed is unknown, defaulting to 1000 [ 131.630323][ T7403] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 131.663556][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.675532][ T7403] team0: Port device batadv0 added [ 131.782131][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 132.788542][ T7415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.862520][ T7449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.889509][ T7443] lo speed is unknown, defaulting to 1000 [ 133.029353][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036936][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.039406][ T7415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.251863][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.333210][ T7457] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.343126][ T7457] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.352304][ T7457] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.368210][ T7457] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.412356][ T7457] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.421912][ T7457] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.430970][ T7457] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.439924][ T7457] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.460690][ T7459] bridge0: port 1(gretap0) entered blocking state [ 133.485598][ T7459] bridge0: port 1(gretap0) entered disabled state [ 133.492655][ T7459] gretap0: entered allmulticast mode [ 133.500758][ T7459] gretap0: entered promiscuous mode [ 133.531269][ T7415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.546767][ T7463] gretap0: left allmulticast mode [ 133.554961][ T7463] gretap0: left promiscuous mode [ 133.562623][ T7463] bridge0: port 1(gretap0) entered disabled state [ 133.752935][ T7415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.893040][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 133.921200][ T7479] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 133.930882][ T7479] NCSI netlink: No device for ifindex 0 [ 133.968885][ T7415] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.085089][ T7415] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.180767][ T7415] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.292069][ T7415] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.350045][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.414'. [ 134.382529][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 134.413778][ T7492] tipc: Started in network mode [ 134.429347][ T7492] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 134.452290][ T7492] tipc: Enabling of bearer rejected, failed to enable media [ 134.637603][ T7497] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 134.805525][ T7508] tap0: tun_chr_ioctl cmd 1074025673 [ 134.813599][ T7508] tap0: tun_chr_ioctl cmd 1074025673 [ 134.820242][ T7510] tap0: tun_chr_ioctl cmd 1074025677 [ 134.832129][ T7510] tap0: linktype set to 774 [ 134.838370][ T7510] tap0: tun_chr_ioctl cmd 1074025677 [ 134.843992][ T7510] tap0: linktype set to 774 [ 134.853738][ T7508] tap0: tun_chr_ioctl cmd 1074025673 [ 135.052252][ T7520] lo speed is unknown, defaulting to 1000 [ 135.093372][ T7525] lo speed is unknown, defaulting to 1000 [ 135.269400][ T7533] __nla_validate_parse: 2 callbacks suppressed [ 135.269420][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 135.286081][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 135.294905][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'. [ 135.325674][ T5841] block nbd0: Receive control failed (result -107) [ 135.374085][ T7534] syzkaller1: entered promiscuous mode [ 135.386136][ T7533] nbd0: detected capacity change from 0 to 256 [ 135.412777][ T7534] syzkaller1: entered allmulticast mode [ 135.649597][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 136.094338][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'. [ 136.125494][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'. [ 136.198294][ T7566] bridge: RTM_NEWNEIGH with invalid ether address [ 136.435653][ T7578] netlink: 'syz.2.438': attribute type 58 has an invalid length. [ 136.445194][ T7542] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 136.469283][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 136.848474][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 136.936021][ T7599] netlink: 'syz.2.443': attribute type 7 has an invalid length. [ 137.016034][ T7599] netlink: 'syz.2.443': attribute type 8 has an invalid length. [ 137.030869][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 137.266103][ T7605] lo speed is unknown, defaulting to 1000 [ 137.557220][ T7613] netlink: 332 bytes leftover after parsing attributes in process `syz.3.447'. [ 137.844599][ T7624] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 137.880497][ T7624] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 138.359683][ T7642] lo speed is unknown, defaulting to 1000 [ 138.541280][ T7656] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.632572][ T6858] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.490846][ T7679] lo speed is unknown, defaulting to 1000 [ 140.131930][ T7709] pim6reg1: entered promiscuous mode [ 140.137459][ T7709] pim6reg1: entered allmulticast mode [ 140.714954][ T7741] __nla_validate_parse: 10 callbacks suppressed [ 140.714976][ T7741] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.475'. [ 140.994446][ T7747] team0: Device gtp0 is of different type [ 141.147200][ T7756] dvmrp5: entered allmulticast mode [ 141.155609][ T7757] dvmrp5: left allmulticast mode [ 142.087812][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.485'. [ 142.256410][ T7831] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 142.346724][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.489'. [ 142.371427][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 142.400613][ T7835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.415011][ T5884] IPVS: starting estimator thread 0... [ 142.432282][ T7835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.456075][ T7835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.464847][ T7835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.474070][ T7835] geneve2: entered promiscuous mode [ 142.480515][ T7835] geneve2: entered allmulticast mode [ 142.507748][ T7843] IPv6: sit1: Disabled Multicast RS [ 142.516657][ T7840] IPVS: using max 22 ests per chain, 52800 per kthread [ 142.531060][ T7843] sit1: entered allmulticast mode [ 142.767673][ T7848] netlink: 6 bytes leftover after parsing attributes in process `syz.1.492'. [ 143.106018][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.364452][ T7882] sctp: [Deprecated]: syz.2.501 (pid 7882) Use of int in max_burst socket option. [ 143.364452][ T7882] Use struct sctp_assoc_value instead [ 143.706575][ T7895] netlink: 'syz.2.505': attribute type 14 has an invalid length. [ 143.877708][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.508'. [ 143.917357][ T7908] IPVS: length: 78 != 13088928 [ 143.946444][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 143.953127][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.976144][ T7907] bond0: entered allmulticast mode [ 143.982980][ T7907] bond_slave_1: entered allmulticast mode [ 144.013148][ T7907] team0: Port device bond0 added [ 144.025210][ T7903] bridge0: port 3(team0) entered blocking state [ 144.035695][ T7903] bridge0: port 3(team0) entered disabled state [ 144.044641][ T7903] team0: entered allmulticast mode [ 144.058969][ T7903] team_slave_0: entered allmulticast mode [ 144.074940][ T7903] team_slave_1: entered allmulticast mode [ 144.115958][ T7903] team0: entered promiscuous mode [ 144.124224][ T7903] team_slave_0: entered promiscuous mode [ 144.136971][ T7903] team_slave_1: entered promiscuous mode [ 144.143610][ T7903] bond0: entered promiscuous mode [ 144.155912][ T7903] bond_slave_0: entered promiscuous mode [ 144.162046][ T7903] bond_slave_1: entered promiscuous mode [ 144.183197][ T7903] bridge0: port 3(team0) entered blocking state [ 144.189625][ T7903] bridge0: port 3(team0) entered forwarding state [ 144.344680][ T7919] syzkaller0: entered promiscuous mode [ 144.351158][ T7919] syzkaller0: entered allmulticast mode [ 144.386260][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 144.464459][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 144.626647][ T9] IPVS: starting estimator thread 0... [ 144.725975][ T7937] IPVS: using max 20 ests per chain, 48000 per kthread [ 144.882086][ T7945] warn_alloc: 1 callbacks suppressed [ 144.882105][ T7945] syz.2.518: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.013283][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.518 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 145.013314][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.013327][ T7945] Call Trace: [ 145.013333][ T7945] [ 145.013342][ T7945] dump_stack_lvl+0x241/0x360 [ 145.013373][ T7945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.013395][ T7945] ? __pfx__printk+0x10/0x10 [ 145.013423][ T7945] ? __rcu_read_unlock+0xa1/0x110 [ 145.013456][ T7945] warn_alloc+0x278/0x410 [ 145.013479][ T7945] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 145.013502][ T7945] ? __pfx_warn_alloc+0x10/0x10 [ 145.013524][ T7945] ? kasan_save_track+0x3f/0x80 [ 145.013544][ T7945] ? __kasan_kmalloc+0x98/0xb0 [ 145.013569][ T7945] ? xsk_setsockopt+0x4aa/0x810 [ 145.013598][ T7945] ? do_sock_setsockopt+0x3af/0x720 [ 145.013619][ T7945] ? __x64_sys_setsockopt+0x1ee/0x280 [ 145.013640][ T7945] ? do_syscall_64+0xf3/0x230 [ 145.013664][ T7945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.013702][ T7945] __vmalloc_node_range_noprof+0x126/0x1380 [ 145.013752][ T7945] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.013779][ T7945] ? __kasan_kmalloc+0x98/0xb0 [ 145.013808][ T7945] vmalloc_user_noprof+0x74/0x80 [ 145.013828][ T7945] ? xskq_create+0xb6/0x170 [ 145.013843][ T7945] xskq_create+0xb6/0x170 [ 145.013873][ T7945] xsk_init_queue+0xa1/0x100 [ 145.013895][ T7945] xsk_setsockopt+0x4aa/0x810 [ 145.013928][ T7945] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.013959][ T7945] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.013993][ T7945] ? aa_sock_opt_perm+0x79/0x120 [ 145.014029][ T7945] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.014059][ T7945] do_sock_setsockopt+0x3af/0x720 [ 145.014087][ T7945] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.014116][ T7945] ? __fget_files+0x395/0x410 [ 145.014145][ T7945] ? __fget_files+0x2a/0x410 [ 145.014184][ T7945] __x64_sys_setsockopt+0x1ee/0x280 [ 145.014214][ T7945] do_syscall_64+0xf3/0x230 [ 145.014240][ T7945] ? clear_bhb_loop+0x35/0x90 [ 145.014271][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.014298][ T7945] RIP: 0033:0x7fe8a898d169 [ 145.014316][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.014332][ T7945] RSP: 002b:00007fe8a983c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.014353][ T7945] RAX: ffffffffffffffda RBX: 00007fe8a8ba5fa0 RCX: 00007fe8a898d169 [ 145.014367][ T7945] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 145.014379][ T7945] RBP: 00007fe8a8a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 145.014391][ T7945] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.014403][ T7945] R13: 0000000000000000 R14: 00007fe8a8ba5fa0 R15: 00007fffb28492e8 [ 145.014432][ T7945] [ 145.014440][ T7945] Mem-Info: [ 145.236674][ T7952] Unknown options in mask 1f4 [ 145.247305][ T7945] active_anon:8565 inactive_anon:0 isolated_anon:0 [ 145.247305][ T7945] active_file:1679 inactive_file:38325 isolated_file:0 [ 145.247305][ T7945] unevictable:768 dirty:139 writeback:0 [ 145.247305][ T7945] slab_reclaimable:10666 slab_unreclaimable:101033 [ 145.247305][ T7945] mapped:31571 shmem:4290 pagetables:814 [ 145.247305][ T7945] sec_pagetables:0 bounce:0 [ 145.247305][ T7945] kernel_misc_reclaimable:0 [ 145.247305][ T7945] free:1326435 free_pcp:2074 free_cma:0 [ 145.351663][ T7945] Node 0 active_anon:34260kB inactive_anon:0kB active_file:6716kB inactive_file:153224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125684kB dirty:556kB writeback:0kB shmem:15624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11648kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no [ 145.482857][ T7945] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 145.521909][ T7945] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.596579][ T7945] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 145.620127][ T7945] Node 0 DMA32 free:1362864kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:30220kB inactive_anon:0kB active_file:6716kB inactive_file:152900kB unevictable:1536kB writepending:556kB present:3129332kB managed:2549712kB mlocked:0kB bounce:0kB free_pcp:10452kB local_pcp:1660kB free_cma:0kB [ 145.715879][ T7945] lowmem_reserve[]: 0 0 0 0 0 [ 145.725901][ T7945] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.785402][ T7945] lowmem_reserve[]: 0 0 0 0 0 [ 145.786141][ T7962] netlink: 76 bytes leftover after parsing attributes in process `syz.1.521'. [ 145.803839][ T7945] Node 1 Normal free:3908428kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.898343][ T7945] lowmem_reserve[]: 0 0 0 0 0 [ 145.908226][ T7945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 145.935700][ T7945] Node 0 DMA32: 3*4kB (UME) 16*8kB (UE) 3*16kB (ME) 6*32kB (UME) 30*64kB (UME) 53*128kB (M) 24*256kB (ME) 17*512kB (UME) 12*1024kB (UM) 6*2048kB (UME) 317*4096kB (UM) = 1346940kB [ 145.973377][ T7945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 145.997172][ T7945] Node 1 Normal: 237*4kB (UE) 75*8kB (UME) 34*16kB (UME) 213*32kB (UME) 90*64kB (UME) 26*128kB (UME) 13*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 946*4096kB (UM) = 3908428kB [ 146.066377][ T7945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.086349][ T7945] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.101572][ T7945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.116383][ T7945] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.125756][ T7945] 45522 total pagecache pages [ 146.145906][ T7945] 0 pages in swap cache [ 146.150121][ T7945] Free swap = 124996kB [ 146.156968][ T7945] Total swap = 124996kB [ 146.161169][ T7945] 2097051 pages RAM [ 146.183613][ T7945] 0 pages HighMem/MovableOnly [ 146.196428][ T7945] 427901 pages reserved [ 146.200796][ T7945] 0 pages cma reserved [ 146.538616][ T7971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.522'. [ 146.547955][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.522'. [ 148.989036][ T7962] lo speed is unknown, defaulting to 1000 [ 149.006450][ T7975] netlink: 'syz.0.523': attribute type 39 has an invalid length. [ 149.526427][ T7989] lo speed is unknown, defaulting to 1000 [ 149.668325][ T7998] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.531'. [ 149.683185][ T7998] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 149.745618][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 150.187936][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 150.276002][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 150.330475][ T9] IPVS: starting estimator thread 0... [ 150.436621][ T8024] IPVS: using max 21 ests per chain, 50400 per kthread [ 150.515647][ T8027] lo speed is unknown, defaulting to 1000 [ 150.785044][ T8044] netlink: 76 bytes leftover after parsing attributes in process `syz.4.543'. [ 150.808179][ T8043] netlink: 76 bytes leftover after parsing attributes in process `syz.4.543'. [ 150.918553][ T8052] IPVS: Unknown mcast interface: vcan0 [ 151.286023][ T8060] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 151.460669][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 151.475529][ T8071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.483492][ T8071] IPv6: NLM_F_CREATE should be set when creating new route [ 151.490811][ T8071] IPv6: NLM_F_CREATE should be set when creating new route [ 151.512218][ T8074] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.764782][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 151.782596][ T8080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.553'. [ 151.808738][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 151.987582][ T8089] sctp: [Deprecated]: syz.0.556 (pid 8089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.987582][ T8089] Use struct sctp_sack_info instead [ 152.152139][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 152.184674][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 152.226004][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.241270][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 152.362558][ T8111] lo speed is unknown, defaulting to 1000 [ 152.526359][ T8122] netlink: 'syz.0.567': attribute type 11 has an invalid length. [ 153.126192][ T8148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.176819][ T8148] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.192087][ T8148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.217124][ T8157] ipt_REJECT: TCP_RESET invalid for non-tcp [ 153.247710][ T8148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.346014][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.566271][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.580'. [ 154.014791][ T8191] lo speed is unknown, defaulting to 1000 [ 154.227423][ T8207] lo speed is unknown, defaulting to 1000 [ 154.462572][ T8221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.594'. [ 154.495483][ T8221] netlink: 'syz.1.594': attribute type 39 has an invalid length. [ 154.865606][ T8239] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 154.937221][ T8240] netlink: 'syz.1.598': attribute type 30 has an invalid length. [ 155.179833][ T8246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.203941][ T8246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.227392][ T8246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.245020][ T8254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 155.246492][ T8246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.285019][ T8246] bond1: (slave geneve2): making interface the new active one [ 155.303997][ T8246] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 155.364202][ T8258] syzkaller1: entered promiscuous mode [ 155.390234][ T8258] syzkaller1: entered allmulticast mode [ 155.518583][ T8265] lo speed is unknown, defaulting to 1000 [ 155.712342][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.747028][ T8277] sctp: [Deprecated]: syz.1.608 (pid 8277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.747028][ T8277] Use struct sctp_sack_info instead [ 155.763915][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.790901][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.821059][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.932185][ T8282] syz_tun: entered allmulticast mode [ 156.144087][ T8265] __nla_validate_parse: 4 callbacks suppressed [ 156.144107][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 156.245360][ T8278] syz_tun: left allmulticast mode [ 156.418054][ T8297] FAULT_INJECTION: forcing a failure. [ 156.418054][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 156.435942][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.0.615 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 156.435972][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.435984][ T8297] Call Trace: [ 156.435992][ T8297] [ 156.436000][ T8297] dump_stack_lvl+0x241/0x360 [ 156.436032][ T8297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.436056][ T8297] ? __pfx__printk+0x10/0x10 [ 156.436080][ T8297] ? fs_reclaim_acquire+0x93/0x130 [ 156.436104][ T8297] ? __pfx___might_resched+0x10/0x10 [ 156.436137][ T8297] should_fail_ex+0x40a/0x550 [ 156.436174][ T8297] should_failslab+0xac/0x100 [ 156.436205][ T8297] __kmalloc_noprof+0xdd/0x4c0 [ 156.436234][ T8297] ? kstrtouint_from_user+0x128/0x190 [ 156.436256][ T8297] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 156.436284][ T8297] tomoyo_realpath_from_path+0xcf/0x5e0 [ 156.436319][ T8297] tomoyo_path_number_perm+0x239/0x770 [ 156.436353][ T8297] ? __lock_acquire+0x1397/0x2100 [ 156.436396][ T8297] ? tomoyo_path_number_perm+0x209/0x770 [ 156.436428][ T8297] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.436502][ T8297] ? __fget_files+0x2a/0x410 [ 156.436537][ T8297] ? __fget_files+0x2a/0x410 [ 156.436573][ T8297] security_file_ioctl+0xc6/0x2a0 [ 156.436603][ T8297] __se_sys_ioctl+0x46/0x170 [ 156.436629][ T8297] do_syscall_64+0xf3/0x230 [ 156.436658][ T8297] ? clear_bhb_loop+0x35/0x90 [ 156.436691][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.436719][ T8297] RIP: 0033:0x7f465d38d169 [ 156.436737][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.436754][ T8297] RSP: 002b:00007f465e2d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.436776][ T8297] RAX: ffffffffffffffda RBX: 00007f465d5a5fa0 RCX: 00007f465d38d169 [ 156.436791][ T8297] RDX: 0000400000000d00 RSI: 00000000000089f2 RDI: 0000000000000008 [ 156.436804][ T8297] RBP: 00007f465e2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.436816][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.436828][ T8297] R13: 0000000000000000 R14: 00007f465d5a5fa0 R15: 00007ffe45b639d8 [ 156.436860][ T8297] [ 156.438095][ T8297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.586013][ T8274] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 156.699936][ T8301] lo speed is unknown, defaulting to 1000 [ 156.948745][ T8308] netlink: 348 bytes leftover after parsing attributes in process `syz.1.619'. [ 156.996397][ T8309] netlink: 348 bytes leftover after parsing attributes in process `syz.1.619'. [ 157.244000][ T8323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.622'. [ 157.325173][ T8324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.340483][ T8301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.348998][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 157.584658][ T8324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.607043][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.625'. [ 157.626049][ T8331] netem: unknown loss type 13 [ 157.635186][ T8331] netem: change failed [ 157.711737][ T8324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.762851][ T8333] lo speed is unknown, defaulting to 1000 [ 157.907508][ T8324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.976415][ T8337] lo speed is unknown, defaulting to 1000 [ 158.248024][ T8355] FAULT_INJECTION: forcing a failure. [ 158.248024][ T8355] name failslab, interval 1, probability 0, space 0, times 0 [ 158.266334][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.3.630 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 158.266366][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.266379][ T8355] Call Trace: [ 158.266385][ T8355] [ 158.266392][ T8355] dump_stack_lvl+0x241/0x360 [ 158.266419][ T8355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.266445][ T8355] ? __pfx__printk+0x10/0x10 [ 158.266464][ T8355] ? fs_reclaim_acquire+0x93/0x130 [ 158.266483][ T8355] ? __pfx___might_resched+0x10/0x10 [ 158.266503][ T8355] ? dynamic_dname+0x144/0x1b0 [ 158.266524][ T8355] should_fail_ex+0x40a/0x550 [ 158.266554][ T8355] should_failslab+0xac/0x100 [ 158.266578][ T8355] __kmalloc_noprof+0xdd/0x4c0 [ 158.266601][ T8355] ? tomoyo_encode+0x26f/0x540 [ 158.266622][ T8355] tomoyo_encode+0x26f/0x540 [ 158.266640][ T8355] ? __pfx_sockfs_dname+0x10/0x10 [ 158.266666][ T8355] tomoyo_realpath_from_path+0x59e/0x5e0 [ 158.266693][ T8355] tomoyo_path_number_perm+0x239/0x770 [ 158.266717][ T8355] ? __lock_acquire+0x1397/0x2100 [ 158.266745][ T8355] ? tomoyo_path_number_perm+0x209/0x770 [ 158.266770][ T8355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.266826][ T8355] ? __fget_files+0x2a/0x410 [ 158.266853][ T8355] ? __fget_files+0x2a/0x410 [ 158.266881][ T8355] security_file_ioctl+0xc6/0x2a0 [ 158.266905][ T8355] __se_sys_ioctl+0x46/0x170 [ 158.266926][ T8355] do_syscall_64+0xf3/0x230 [ 158.266949][ T8355] ? clear_bhb_loop+0x35/0x90 [ 158.266976][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.266998][ T8355] RIP: 0033:0x7f2b5f78d169 [ 158.267013][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.267026][ T8355] RSP: 002b:00007f2b606b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.267044][ T8355] RAX: ffffffffffffffda RBX: 00007f2b5f9a5fa0 RCX: 00007f2b5f78d169 [ 158.267056][ T8355] RDX: 0000400000000d00 RSI: 00000000000089f2 RDI: 0000000000000008 [ 158.267066][ T8355] RBP: 00007f2b606b0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.267076][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.267085][ T8355] R13: 0000000000000000 R14: 00007f2b5f9a5fa0 R15: 00007ffe260ff238 [ 158.267109][ T8355] [ 158.267128][ T8355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.381802][ T8324] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.609918][ T8324] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.791780][ T8324] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.861275][ T8324] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.882701][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 159.178914][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.637'. [ 159.523111][ T8396] lo speed is unknown, defaulting to 1000 [ 159.779031][ T8412] netlink: 830 bytes leftover after parsing attributes in process `syz.3.644'. [ 159.852040][ T8413] netlink: 830 bytes leftover after parsing attributes in process `syz.3.644'. [ 160.414381][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 161.215034][ T8485] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.230456][ T8485] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.239672][ T8485] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.248267][ T8485] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.322264][ T8481] lo speed is unknown, defaulting to 1000 [ 161.838802][ T8497] syzkaller0: entered promiscuous mode [ 161.844855][ T8501] __nla_validate_parse: 8 callbacks suppressed [ 161.844871][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'. [ 161.869658][ T8497] syzkaller0: entered allmulticast mode [ 161.902530][ T8499] sch_fq: defrate 511 ignored. [ 162.402413][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 162.477511][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 162.537037][ T8527] netlink: 9 bytes leftover after parsing attributes in process `syz.2.671'. [ 164.052409][ T8524] bond0: (slave bond_slave_0): Releasing backup interface [ 164.080017][ T8527] gretap0: entered promiscuous mode [ 164.226717][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 164.529679][ T8542] netlink: 'syz.4.676': attribute type 14 has an invalid length. [ 164.554282][ T8543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.675'. [ 164.576488][ T8541] netlink: 'syz.2.673': attribute type 3 has an invalid length. [ 164.584619][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 164.721877][ T8547] netlink: 88 bytes leftover after parsing attributes in process `syz.0.679'. [ 164.746357][ T8553] netlink: 'syz.1.677': attribute type 32 has an invalid length. [ 164.772959][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 164.797984][ T8553] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 164.860218][ T8558] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.681'. [ 164.870329][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.984275][ T8567] FAULT_INJECTION: forcing a failure. [ 164.984275][ T8567] name failslab, interval 1, probability 0, space 0, times 0 [ 164.997460][ T8567] CPU: 1 UID: 0 PID: 8567 Comm: syz.3.684 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 164.997487][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.997499][ T8567] Call Trace: [ 164.997506][ T8567] [ 164.997515][ T8567] dump_stack_lvl+0x241/0x360 [ 164.997546][ T8567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.997580][ T8567] ? __pfx__printk+0x10/0x10 [ 164.997601][ T8567] ? __kmalloc_cache_noprof+0x48/0x390 [ 164.997629][ T8567] ? __pfx___might_resched+0x10/0x10 [ 164.997659][ T8567] should_fail_ex+0x40a/0x550 [ 164.997692][ T8567] should_failslab+0xac/0x100 [ 164.997719][ T8567] __kmalloc_cache_noprof+0x70/0x390 [ 164.997751][ T8567] ? call_usermodehelper_setup+0x8e/0x270 [ 164.997774][ T8567] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 164.997806][ T8567] call_usermodehelper_setup+0x8e/0x270 [ 164.997828][ T8567] ? __pfx_free_modprobe_argv+0x10/0x10 [ 164.997851][ T8567] __request_module+0x3cd/0x640 [ 164.997872][ T8567] ? capable+0x79/0xe0 [ 164.997894][ T8567] ? __pfx___request_module+0x10/0x10 [ 164.997917][ T8567] ? rcu_is_watching+0x15/0xb0 [ 164.997941][ T8567] ? apparmor_capable+0x13b/0x1b0 [ 164.997967][ T8567] ? bpf_lsm_capable+0x9/0x10 [ 164.997994][ T8567] ? security_capable+0x7e/0x2d0 [ 164.998027][ T8567] ? dev_load+0x21/0x1f0 [ 164.998053][ T8567] dev_load+0x18f/0x1f0 [ 164.998080][ T8567] dev_ioctl+0x869/0x1340 [ 164.998110][ T8567] sock_ioctl+0x7ef/0x8e0 [ 164.998138][ T8567] ? __pfx_sock_ioctl+0x10/0x10 [ 164.998175][ T8567] ? __pfx_sock_ioctl+0x10/0x10 [ 164.998201][ T8567] __se_sys_ioctl+0xf5/0x170 [ 164.998225][ T8567] do_syscall_64+0xf3/0x230 [ 164.998251][ T8567] ? clear_bhb_loop+0x35/0x90 [ 164.998280][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.998306][ T8567] RIP: 0033:0x7f2b5f78d169 [ 164.998340][ T8567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.998356][ T8567] RSP: 002b:00007f2b606b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.998377][ T8567] RAX: ffffffffffffffda RBX: 00007f2b5f9a5fa0 RCX: 00007f2b5f78d169 [ 164.998391][ T8567] RDX: 0000400000000d00 RSI: 00000000000089f2 RDI: 0000000000000008 [ 164.998404][ T8567] RBP: 00007f2b606b0090 R08: 0000000000000000 R09: 0000000000000000 [ 164.998416][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.998427][ T8567] R13: 0000000000000000 R14: 00007f2b5f9a5fa0 R15: 00007ffe260ff238 [ 164.998474][ T8567] [ 165.322791][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 165.517998][ T8581] xt_CT: No such helper "snmp" [ 165.522753][ T8584] netlink: 'syz.0.690': attribute type 14 has an invalid length. [ 165.745297][ T8601] netlink: 'syz.0.695': attribute type 64 has an invalid length. [ 165.782186][ T8601] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 165.874905][ T8606] lo speed is unknown, defaulting to 1000 [ 166.030427][ T8617] FAULT_INJECTION: forcing a failure. [ 166.030427][ T8617] name failslab, interval 1, probability 0, space 0, times 0 [ 166.056699][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.4.700 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 166.056728][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.056740][ T8617] Call Trace: [ 166.056747][ T8617] [ 166.056755][ T8617] dump_stack_lvl+0x241/0x360 [ 166.056787][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.056809][ T8617] ? __pfx__printk+0x10/0x10 [ 166.056831][ T8617] ? __kmalloc_cache_noprof+0x48/0x390 [ 166.056861][ T8617] ? __pfx___might_resched+0x10/0x10 [ 166.056892][ T8617] should_fail_ex+0x40a/0x550 [ 166.056927][ T8617] should_failslab+0xac/0x100 [ 166.056956][ T8617] __kmalloc_cache_noprof+0x70/0x390 [ 166.056983][ T8617] ? call_usermodehelper_setup+0x8e/0x270 [ 166.057007][ T8617] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 166.057041][ T8617] call_usermodehelper_setup+0x8e/0x270 [ 166.057065][ T8617] ? __pfx_free_modprobe_argv+0x10/0x10 [ 166.057088][ T8617] __request_module+0x3cd/0x640 [ 166.057111][ T8617] ? capable+0x79/0xe0 [ 166.057134][ T8617] ? __pfx___request_module+0x10/0x10 [ 166.057158][ T8617] ? rcu_is_watching+0x15/0xb0 [ 166.057184][ T8617] ? apparmor_capable+0x13b/0x1b0 [ 166.057210][ T8617] ? bpf_lsm_capable+0x9/0x10 [ 166.057239][ T8617] ? security_capable+0x7e/0x2d0 [ 166.057279][ T8617] ? dev_load+0x21/0x1f0 [ 166.057306][ T8617] dev_load+0x18f/0x1f0 [ 166.057335][ T8617] dev_ioctl+0x869/0x1340 [ 166.057367][ T8617] sock_ioctl+0x7ef/0x8e0 [ 166.057397][ T8617] ? __pfx_sock_ioctl+0x10/0x10 [ 166.057438][ T8617] ? __pfx_sock_ioctl+0x10/0x10 [ 166.057466][ T8617] __se_sys_ioctl+0xf5/0x170 [ 166.057492][ T8617] do_syscall_64+0xf3/0x230 [ 166.057519][ T8617] ? clear_bhb_loop+0x35/0x90 [ 166.057551][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.057577][ T8617] RIP: 0033:0x7f6af698d169 [ 166.057595][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.057611][ T8617] RSP: 002b:00007f6af783b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.057639][ T8617] RAX: ffffffffffffffda RBX: 00007f6af6ba5fa0 RCX: 00007f6af698d169 [ 166.057654][ T8617] RDX: 0000400000000d00 RSI: 00000000000089f2 RDI: 0000000000000008 [ 166.057667][ T8617] RBP: 00007f6af783b090 R08: 0000000000000000 R09: 0000000000000000 [ 166.057679][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.057691][ T8617] R13: 0000000000000000 R14: 00007f6af6ba5fa0 R15: 00007ffd6a7e76f8 [ 166.057721][ T8617] [ 166.605259][ T8638] netlink: 'syz.1.705': attribute type 14 has an invalid length. [ 166.643570][ T8632] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 166.773622][ T8632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.807886][ T8641] ip6t_rpfilter: unknown options [ 167.025545][ T8649] __nla_validate_parse: 5 callbacks suppressed [ 167.025566][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.709'. [ 167.262497][ T8666] netlink: 228 bytes leftover after parsing attributes in process `syz.3.708'. [ 167.274068][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.708'. [ 167.462997][ T8669] lo speed is unknown, defaulting to 1000 [ 167.496491][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 167.574176][ T8678] netlink: 'syz.4.717': attribute type 14 has an invalid length. [ 167.693999][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.718'. [ 167.957919][ T8671] netlink: 'syz.2.713': attribute type 4 has an invalid length. [ 168.405431][ T8723] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 168.793660][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.733'. [ 168.936427][ T8749] bridge_slave_1: entered promiscuous mode [ 168.949669][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 168.966546][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 169.111891][ T8757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.738'. [ 169.128363][ T8757] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.187660][ T8749] bridge_slave_1 (unregistering): left promiscuous mode [ 169.224794][ T8759] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 169.250714][ T8757] lo speed is unknown, defaulting to 1000 [ 169.300637][ T8759] lo speed is unknown, defaulting to 1000 [ 169.723378][ T8783] validate_nla: 5 callbacks suppressed [ 169.723415][ T8783] netlink: 'syz.1.744': attribute type 14 has an invalid length. [ 169.900837][ T8787] lo speed is unknown, defaulting to 1000 [ 170.105402][ T8791] lo speed is unknown, defaulting to 1000 [ 170.126966][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 170.786326][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.588196][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.892102][ T8842] netlink: 'syz.2.761': attribute type 11 has an invalid length. [ 172.265529][ T8850] lo speed is unknown, defaulting to 1000 [ 172.293969][ T8862] IPVS: length: 59 != 24 [ 172.310605][ T8857] lo speed is unknown, defaulting to 1000 [ 172.396144][ T8866] xt_hashlimit: max too large, truncated to 1048576 [ 172.619359][ T8874] netlink: 'syz.4.768': attribute type 14 has an invalid length. [ 172.706080][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 173.393745][ T8909] __nla_validate_parse: 1 callbacks suppressed [ 173.393767][ T8909] netlink: 76 bytes leftover after parsing attributes in process `syz.0.778'. [ 173.409559][ T8909] nbd: couldn't find device at index 640 [ 173.438037][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 173.438051][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 173.438100][ T8910] team0: left allmulticast mode [ 173.486014][ T8910] team_slave_0: left allmulticast mode [ 173.492358][ T8910] team_slave_1: left allmulticast mode [ 173.498725][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 173.508449][ T8910] team0: left promiscuous mode [ 173.513660][ T8910] team_slave_0: left promiscuous mode [ 173.532630][ T8910] team_slave_1: left promiscuous mode [ 173.543089][ T8910] bond0: left promiscuous mode [ 173.552599][ T8910] bond_slave_0: left promiscuous mode [ 173.562884][ T8910] bond_slave_1: left promiscuous mode [ 173.577316][ T8910] bridge0: port 3(team0) entered disabled state [ 173.614834][ T8910] bridge_slave_1: left allmulticast mode [ 173.628972][ T8910] bridge_slave_1: left promiscuous mode [ 173.667655][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.686938][ T8910] bridge_slave_0: left allmulticast mode [ 173.692641][ T8910] bridge_slave_0: left promiscuous mode [ 173.722493][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.741086][ T8925] netlink: 'syz.3.779': attribute type 4 has an invalid length. [ 173.830617][ T8926] lo speed is unknown, defaulting to 1000 [ 173.849090][ T8914] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:177 [ 174.028484][ T8936] netlink: 'syz.0.784': attribute type 14 has an invalid length. [ 174.278181][ T8945] IPv6: sit1: Disabled Multicast RS [ 174.430538][ T8950] pim6reg1: entered promiscuous mode [ 174.450664][ T8950] pim6reg1: entered allmulticast mode [ 174.600997][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. [ 174.610775][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. [ 174.682443][ T8930] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 174.690422][ T8930] netlink: 228 bytes leftover after parsing attributes in process `syz.1.782'. [ 174.710886][ T8926] lo speed is unknown, defaulting to 1000 [ 174.723344][ T8963] netlink: 'syz.4.789': attribute type 10 has an invalid length. [ 174.731537][ T8961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.792'. [ 174.758872][ T8965] @0ÿ: renamed from bond_slave_0 [ 174.993942][ T8975] netlink: 'syz.2.796': attribute type 14 has an invalid length. [ 175.608986][ T8993] lo speed is unknown, defaulting to 1000 [ 175.639498][ T8994] lo speed is unknown, defaulting to 1000 [ 176.162454][ T9018] netlink: 'syz.0.808': attribute type 14 has an invalid length. [ 176.526504][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 176.644139][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.652901][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.976883][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.821'. [ 177.014042][ T9064] netlink: 'syz.4.822': attribute type 14 has an invalid length. [ 177.148830][ T9069] sctp: [Deprecated]: syz.4.824 (pid 9069) Use of int in max_burst socket option. [ 177.148830][ T9069] Use struct sctp_assoc_value instead [ 177.223513][ T9069] netlink: 'syz.4.824': attribute type 21 has an invalid length. [ 177.406502][ T9077] bridge0: port 3(gretap0) entered blocking state [ 177.413336][ T9077] bridge0: port 3(gretap0) entered disabled state [ 177.432324][ T9077] gretap0: entered allmulticast mode [ 177.439662][ T9077] gretap0: entered promiscuous mode [ 177.457752][ T9077] gretap0: left allmulticast mode [ 177.462991][ T9077] gretap0: left promiscuous mode [ 177.468864][ T9077] bridge0: port 3(gretap0) entered disabled state [ 177.675909][ T9080] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 178.098821][ T9093] lo speed is unknown, defaulting to 1000 [ 178.335353][ T9105] netlink: 'syz.0.834': attribute type 14 has an invalid length. [ 178.398744][ T9109] __nla_validate_parse: 1 callbacks suppressed [ 178.398764][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'. [ 178.426635][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 178.463172][ T6524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.476588][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 178.500138][ T6524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.815984][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 178.854341][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 178.956328][ T9131] netlink: 3 bytes leftover after parsing attributes in process `syz.2.842'. [ 178.991136][ T9131] batadv1: entered allmulticast mode [ 179.190012][ T9143] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 179.322531][ T9150] netlink: 'syz.1.847': attribute type 14 has an invalid length. [ 179.347415][ T9136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.368347][ T9136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.396733][ T9136] bond0 (unregistering): Released all slaves [ 179.431995][ T9143] [ 179.434365][ T9143] ====================================================== [ 179.441397][ T9143] WARNING: possible circular locking dependency detected [ 179.448447][ T9143] 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 Not tainted [ 179.455572][ T9143] ------------------------------------------------------ [ 179.462615][ T9143] syz.3.844/9143 is trying to acquire lock: [ 179.468524][ T9143] ffff88802a708768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 179.478328][ T9143] [ 179.478328][ T9143] but task is already holding lock: [ 179.485706][ T9143] ffff8880292f4d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 179.494718][ T9143] [ 179.494718][ T9143] which lock already depends on the new lock. [ 179.494718][ T9143] [ 179.505139][ T9143] [ 179.505139][ T9143] the existing dependency chain (in reverse order) is: [ 179.514174][ T9143] [ 179.514174][ T9143] -> #1 (&dev->lock){+.+.}-{4:4}: [ 179.521436][ T9143] lock_acquire+0x1ed/0x550 [ 179.526509][ T9143] __mutex_lock+0x19c/0x1010 [ 179.531656][ T9143] register_netdevice+0x12d8/0x1b70 [ 179.537408][ T9143] cfg80211_register_netdevice+0x149/0x2f0 [ 179.543859][ T9143] ieee80211_if_add+0x119d/0x1780 [ 179.549437][ T9143] ieee80211_register_hw+0x3708/0x42e0 [ 179.555445][ T9143] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 179.561718][ T9143] init_mac80211_hwsim+0x87a/0xb00 [ 179.567377][ T9143] do_one_initcall+0x248/0x930 [ 179.572688][ T9143] do_initcall_level+0x157/0x210 [ 179.578180][ T9143] do_initcalls+0x71/0xd0 [ 179.583061][ T9143] kernel_init_freeable+0x435/0x5d0 [ 179.588806][ T9143] kernel_init+0x1d/0x2b0 [ 179.590996][ T9153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.843'. [ 179.593671][ T9143] ret_from_fork+0x4b/0x80 [ 179.607475][ T9143] ret_from_fork_asm+0x1a/0x30 [ 179.612764][ T9143] [ 179.612764][ T9143] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 179.620503][ T9143] validate_chain+0x18ef/0x5920 [ 179.625883][ T9143] __lock_acquire+0x1397/0x2100 [ 179.631290][ T9143] lock_acquire+0x1ed/0x550 [ 179.636330][ T9143] __mutex_lock+0x19c/0x1010 [ 179.641445][ T9143] ieee80211_change_mac+0xc6/0x1160 [ 179.647170][ T9143] netif_set_mac_address+0x327/0x510 [ 179.652981][ T9143] dev_set_mac_address+0x38/0x50 [ 179.658444][ T9143] team_modeop_port_enter+0x183/0x240 [ 179.664343][ T9143] team_add_slave+0xa8e/0x28a0 [ 179.669694][ T9143] do_set_master+0x579/0x730 [ 179.674815][ T9143] do_setlink+0xfee/0x40f0 [ 179.679765][ T9143] rtnl_newlink+0x15a6/0x1d90 [ 179.684993][ T9143] rtnetlink_rcv_msg+0x791/0xcf0 [ 179.690463][ T9143] netlink_rcv_skb+0x206/0x480 [ 179.695758][ T9143] netlink_unicast+0x7f6/0x990 [ 179.701078][ T9143] netlink_sendmsg+0x8de/0xcb0 [ 179.706379][ T9143] __sock_sendmsg+0x221/0x270 [ 179.711594][ T9143] ____sys_sendmsg+0x53a/0x860 [ 179.716888][ T9143] __sys_sendmsg+0x269/0x350 [ 179.722018][ T9143] do_syscall_64+0xf3/0x230 [ 179.727063][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.733487][ T9143] [ 179.733487][ T9143] other info that might help us debug this: [ 179.733487][ T9143] [ 179.743723][ T9143] Possible unsafe locking scenario: [ 179.743723][ T9143] [ 179.751347][ T9143] CPU0 CPU1 [ 179.756723][ T9143] ---- ---- [ 179.762083][ T9143] lock(&dev->lock); [ 179.766088][ T9143] lock(&rdev->wiphy.mtx); [ 179.773157][ T9143] lock(&dev->lock); [ 179.779686][ T9143] lock(&rdev->wiphy.mtx); [ 179.784210][ T9143] [ 179.784210][ T9143] *** DEADLOCK *** [ 179.784210][ T9143] [ 179.792457][ T9143] 3 locks held by syz.3.844/9143: [ 179.797480][ T9143] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 179.806675][ T9143] #1: ffff88805e508e00 (team->team_lock_key){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 179.816626][ T9143] #2: ffff8880292f4d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 179.826034][ T9143] [ 179.826034][ T9143] stack backtrace: [ 179.831917][ T9143] CPU: 0 UID: 0 PID: 9143 Comm: syz.3.844 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 179.831936][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.831949][ T9143] Call Trace: [ 179.831958][ T9143] [ 179.831968][ T9143] dump_stack_lvl+0x241/0x360 [ 179.831998][ T9143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.832022][ T9143] ? __pfx__printk+0x10/0x10 [ 179.832045][ T9143] print_circular_bug+0x13a/0x1b0 [ 179.832064][ T9143] check_noncircular+0x36a/0x4a0 [ 179.832080][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832097][ T9143] ? __pfx_check_noncircular+0x10/0x10 [ 179.832114][ T9143] ? lockdep_lock+0x123/0x2b0 [ 179.832137][ T9143] ? rtnl_newlink+0x15a6/0x1d90 [ 179.832170][ T9143] validate_chain+0x18ef/0x5920 [ 179.832191][ T9143] ? validate_chain+0x11e/0x5920 [ 179.832208][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832247][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832262][ T9143] ? validate_chain+0x11e/0x5920 [ 179.832279][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832296][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832312][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832328][ T9143] ? validate_chain+0x11e/0x5920 [ 179.832347][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.832363][ T9143] ? mark_lock+0x9a/0x360 [ 179.832379][ T9143] __lock_acquire+0x1397/0x2100 [ 179.832408][ T9143] lock_acquire+0x1ed/0x550 [ 179.832430][ T9143] ? ieee80211_change_mac+0xc6/0x1160 [ 179.832453][ T9143] ? __pfx_lock_acquire+0x10/0x10 [ 179.832477][ T9143] ? __pfx___might_resched+0x10/0x10 [ 179.832502][ T9143] __mutex_lock+0x19c/0x1010 [ 179.832522][ T9143] ? ieee80211_change_mac+0xc6/0x1160 [ 179.832542][ T9143] ? __pfx_lock_release+0x10/0x10 [ 179.832567][ T9143] ? ieee80211_change_mac+0xc6/0x1160 [ 179.832587][ T9143] ? __pfx___mutex_lock+0x10/0x10 [ 179.832609][ T9143] ? ib_device_get_by_netdev+0x85/0x5e0 [ 179.832633][ T9143] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 179.832656][ T9143] ? hsr_netdev_notify+0x295/0xb50 [ 179.832679][ T9143] ieee80211_change_mac+0xc6/0x1160 [ 179.832700][ T9143] ? ip6_route_dev_notify+0x99/0x600 [ 179.832718][ T9143] ? notifier_call_chain+0x15a/0x3f0 [ 179.832741][ T9143] ? notifier_call_chain+0x3cc/0x3f0 [ 179.832764][ T9143] netif_set_mac_address+0x327/0x510 [ 179.832784][ T9143] ? __pfx_netif_set_mac_address+0x10/0x10 [ 179.832803][ T9143] ? netif_set_mtu+0x110/0x1b0 [ 179.832819][ T9143] ? __pfx_netif_set_mtu+0x10/0x10 [ 179.832836][ T9143] dev_set_mac_address+0x38/0x50 [ 179.832853][ T9143] team_modeop_port_enter+0x183/0x240 [ 179.832873][ T9143] ? __pfx_team_modeop_port_enter+0x10/0x10 [ 179.832905][ T9143] ? team_add_slave+0x981/0x28a0 [ 179.832930][ T9143] team_add_slave+0xa8e/0x28a0 [ 179.832956][ T9143] ? __pfx_team_add_slave+0x10/0x10 [ 179.832975][ T9143] ? __dev_notify_flags+0x316/0x400 [ 179.832991][ T9143] ? dev_set_rx_mode+0xb8/0x2e0 [ 179.833007][ T9143] ? __pfx___dev_notify_flags+0x10/0x10 [ 179.833022][ T9143] ? __dev_change_flags+0x515/0x6f0 [ 179.833040][ T9143] ? __pfx___dev_change_flags+0x10/0x10 [ 179.833062][ T9143] ? validate_linkmsg+0x828/0xa40 [ 179.833092][ T9143] ? mutex_is_locked+0x17/0x50 [ 179.833116][ T9143] do_set_master+0x579/0x730 [ 179.833142][ T9143] do_setlink+0xfee/0x40f0 [ 179.833173][ T9143] ? mark_lock+0x9a/0x360 [ 179.833188][ T9143] ? __pfx_do_setlink+0x10/0x10 [ 179.833203][ T9143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 179.833227][ T9143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.833255][ T9143] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 179.833272][ T9143] ? lockdep_hardirqs_on+0x99/0x150 [ 179.833291][ T9143] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 179.833307][ T9143] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.833326][ T9143] ? rcu_is_watching+0x15/0xb0 [ 179.833344][ T9143] ? __mutex_lock+0xba3/0x1010 [ 179.833364][ T9143] ? __mutex_lock+0x602/0x1010 [ 179.833385][ T9143] ? rtnl_newlink+0xc4c/0x1d90 [ 179.833408][ T9143] ? __pfx___mutex_lock+0x10/0x10 [ 179.833431][ T9143] ? ns_capable+0x8a/0xf0 [ 179.833449][ T9143] ? rtnl_link_get_net_capable+0x168/0x340 [ 179.833467][ T9143] rtnl_newlink+0x15a6/0x1d90 [ 179.833489][ T9143] ? is_bpf_text_address+0x285/0x2a0 [ 179.833503][ T9143] ? is_bpf_text_address+0x26/0x2a0 [ 179.833523][ T9143] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.833546][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.833570][ T9143] ? validate_chain+0x11e/0x5920 [ 179.833586][ T9143] ? __pfx_lock_acquire+0x10/0x10 [ 179.833610][ T9143] ? __pfx_lock_release+0x10/0x10 [ 179.833634][ T9143] ? __pfx_validate_chain+0x10/0x10 [ 179.833651][ T9143] ? mark_lock+0x9a/0x360 [ 179.833667][ T9143] ? __lock_acquire+0x1397/0x2100 [ 179.833701][ T9143] ? __pfx_lock_release+0x10/0x10 [ 179.833729][ T9143] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.833753][ T9143] rtnetlink_rcv_msg+0x791/0xcf0 [ 179.833776][ T9143] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 179.833800][ T9143] ? __lock_acquire+0x1397/0x2100 [ 179.833823][ T9143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.833852][ T9143] netlink_rcv_skb+0x206/0x480 [ 179.833876][ T9143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.833900][ T9143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.833932][ T9143] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.833956][ T9143] netlink_unicast+0x7f6/0x990 [ 179.833979][ T9143] ? __pfx_netlink_unicast+0x10/0x10 [ 179.833999][ T9143] ? __virt_addr_valid+0x45f/0x530 [ 179.834014][ T9143] ? __phys_addr_symbol+0x2f/0x70 [ 179.834028][ T9143] ? __check_object_size+0x47a/0x730 [ 179.834051][ T9143] netlink_sendmsg+0x8de/0xcb0 [ 179.834090][ T9143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.834127][ T9143] ? aa_sock_msg_perm+0x91/0x160 [ 179.834156][ T9143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.834184][ T9143] __sock_sendmsg+0x221/0x270 [ 179.834216][ T9143] ____sys_sendmsg+0x53a/0x860 [ 179.834243][ T9143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.834261][ T9143] ? __fget_files+0x2a/0x410 [ 179.834283][ T9143] ? __fget_files+0x2a/0x410 [ 179.834306][ T9143] __sys_sendmsg+0x269/0x350 [ 179.834321][ T9143] ? vma_end_read+0x18/0x170 [ 179.834340][ T9143] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.834365][ T9143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 179.834389][ T9143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.834411][ T9143] ? exc_page_fault+0x590/0x8b0 [ 179.834446][ T9143] ? do_syscall_64+0xb6/0x230 [ 179.834466][ T9143] do_syscall_64+0xf3/0x230 [ 179.834486][ T9143] ? clear_bhb_loop+0x35/0x90 [ 179.834508][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.834530][ T9143] RIP: 0033:0x7f2b5f78d169 [ 179.834543][ T9143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.834557][ T9143] RSP: 002b:00007f2b6066e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.834572][ T9143] RAX: ffffffffffffffda RBX: 00007f2b5f9a6160 RCX: 00007f2b5f78d169 [ 179.834584][ T9143] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 000000000000000c [ 179.834593][ T9143] RBP: 00007f2b5f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.834602][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.834611][ T9143] R13: 0000000000000001 R14: 00007f2b5f9a6160 R15: 00007ffe260ff238 [ 179.834627][ T9143] [ 180.537137][ T9143] team0: Port device wlan1 added [ 180.545532][ T9151] lo speed is unknown, defaulting to 1000