last executing test programs: 4.333587871s ago: executing program 2 (id=1289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="b261d39d1b42b4388c5113cbdf22f47df8572e8a0b7be87417b91c1292b48340f0d1e91eb84e93033723456419b2e61e1974393c879f086246adcf657f63d62169c589f6d9524db845bf8592659119970506d50e2c13ad37af8b8f8832d1a12e8bca04d220d29fe8d11c841795841f664251ebc691e5c6d2ec5815b7ea6eb4a9befeeced26b45e0181109b9d21964d361d2507ed03efd04444806e634eb1d58e9654fe8a278a458f824586550189d95232a2bc51acfa7a5178e8a23e84c482000fe9", 0xc2}, {&(0x7f0000000300)="a8fd8de96eb1fdbd2cc6b9ca98ebed3b418c82e8e79015fd071a96f2393c1b2b0f98e79c9a62d3179b2c97640f9d3ea7cff210756ce1b4783108ec6a8433bc8fb2bb65ca694e99ef4070a03f3b6abe51ac5dfa74148929160386b35cc333e47c55564c54cae845", 0x67}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000e5ff00000029000000080000000500000000000000cafa1fb90860e8f8cd4131ce1ef68b9717"], 0x18}}, {{&(0x7f0000000440)={0xa, 0x4e24, 0x8, @mcast1, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)="2a2873d2eab2cd1e6c80b99db5d1143adbe09d65586f04f90f9db4c6b0249368f229328c9e7a8f8d9c7f83ce77f77ca8e2322ab104070618792abc9fa32cd2da0e08c6df5004c225dc176172508af692833fba8c250a9beaf040a4467bbec0e65d7a5da5722462a3cbf85d95e7e09bbd974db6de937eb7745c5cd061", 0x7c}, {&(0x7f0000000500)="b1c4492255ca56a2925c78964d729d3c7cebf2fa5bcc57763fca144b81fb113f1988afb1b616002ab14fef255db2103e909f84ab5a6b5ba911f78b20912c24a0c1f7ee10d366a03611f459e87a43009124c38887cdda535db243e8b3fa3b021908c560f852387a90186085770a73aaa75a6e1af935a66172db318e5597e11ad7fa6ec4fd09d4078f1e959fdd01a27eb716defdc68e159feb5a6f7f4b99c0a94e0c910a6ba9e041e41cb22baf477a34658339", 0xb2}, {&(0x7f00000007c0)="db317dc6b1e2e39c815d16951d1c6eb1510d694dc548903b037a4d3ba098ff9f319dbc08e561aac7036921fc99594ee6a0d3414a7580c9d6171dec4cb0624d7e78110c33c05010f21a0646dd0e831347c35950a3cc7214bbcf0abd70afb136480a295824a2f815b8e3c0d45aa1f2dffd4a9d9bbac039789a33d09fd56e8639d9415b90acf6d64427e68c6270325bd65754e6ad22f999caa455af24afaaeb66787b632e1f80a656a6a609b95bbdae75c20f67d64699d4feb00155980c42027b2362d0622cb2c2588ea59f420b690c59a1059871e8471343cec8e907427ea1808cbc8f6c5987e439cc42121e", 0xeb}], 0x3, &(0x7f00000008c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3a, 0xe, 0x0, 0x8, 0x0, [@remote, @private0, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x1, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @ra={0x5, 0x2, 0x200}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x1, 0xa, 0x0, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}]}}}], 0x158}}], 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$PPPIOCGIDLE64(r1, 0x80111500, 0xfffffffffffffffd) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900dd8d000000000000000002800000000000060000000008000f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x80840}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f185a348a5236b5}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) listen(r0, 0xfff) 4.203869587s ago: executing program 3 (id=1291): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80080400) recvfrom(r0, 0x0, 0x0, 0x40000121, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f80)=@bridge_getlink={0x28, 0x12, 0xdba2e9e4846a7f93, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x75800, 0x1}, [@IFLA_CARRIER={0x5, 0x1d, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000308"], 0x80}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x100, 0x9, 0x6}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @volatile={0x1, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x5f, 0x61]}}, &(0x7f00000007c0)=""/4096, 0x35, 0x1000, 0x0, 0x6, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r7, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000a4000db800dfad369825c26623182cab0000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000006000300c87a00000900010073797a3000000000090088020073797a110b000000140000"], 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000060000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.928447113s ago: executing program 3 (id=1295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.426740448s ago: executing program 2 (id=1298): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8061, 0x671, 0x8001, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0xd1, 0x2f, 0x0, @local, @empty}}}}) (async) getsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000240)=0x1) (async) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="c498a1e6d6eca274a774c83fb4aa0ab9292dc5a5970c8d61bd27cfd075afd86141d92ad440d5065965ebe673dffba390bab98bbb2ddf978eea939b5ca904acd5d8e0f830d9e0aa2d8e35fb38b338f925c655f635635a76255ede0ec8ed71917ec4c668acf3dd0aa8747a59fe1769e4e7b4ff61da553c0117a2cc9fcde1b359de3e2aae27396efb6ca45b", 0x8a}], 0x1, &(0x7f0000000740)=[{0xe0, 0x1, 0x9, "22912fe2309a4dbdb38359c839fdede4582a3d2abd2421474ee0b8096d75209c18e823f5d0a7cee2058efafed4db85c0ea531d9b1cbf6e36f168122c05ee2329cf69ff95b749cad26705c64fa15f36ed00cc0ee217dca3f749dcacfbd4bf72452556621e31cc116f2800cd03b08d32a2f81851c630acd7425ce4f2491bab0fe592dd59631aeb8686251b55ec85cefe836700f4eda43af988bc0cbd5fc8d39ab62de8f6d75ef82f408118879b1ff45cc983e45834c18990b665c363dcba2f3a07bd8e459073d300a4b7633d4b2bbe6cf0"}, {0x100, 0xff, 0x8, "cc3c3687982c737703495753a9a12ff91d1270ab9e2a7e554041326c51b6c6cc99ec48fe6bfe6cd4e88950b99e6634b3d61784e4348c075c0be6e99d286a4afce8faecf048dfac425dc68b1c82cf3552c0a8db63b7ad313a564b5fe9c885bbabd72e9465686749b018ea11362469e0a1f6355a879ee9c74a31fca2b94e48fe82e7ef58ef8f32876b706049534578c36cd4fbcdca825b90af27251297eb9907179f56bf5268324def6deeed999eb9e014459776db237c98439f34bb0cb94a2f87795fb4ae991b4f48729322d079391f033cfcb51b0101111301259ec6d79a8d0a0b792061dcca992bb3f3d7e60f1a7b"}, {0x10, 0x113, 0x2bd3}, {0x60, 0x3a, 0x2e0, "d066d3e601cb19a07c0c8df1915f5e762952f6395be884d9404f422c1411f09cea3718268fa7c4cac628a8998ca2d0203c89b2c42c89aa0b7bde5b5aeae66ad4d35b2fa72f106595edcafbf154269c5b"}, {0x110, 0x107, 0xd702, "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"}], 0x360}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="963063a14724469c41e324903f0c907fc909725dd2a3fdd300cdaaf42e13a393ea89c8c8e5a17167c0601d87dd1600bf5ac2feb451381135267f2aba8b214a073ad0e5192450a5289b99d49a0005e19466369cff30aada9aac5b029e559cc0d2c5b03118299bd12484cc3d18937c10cccedda436e52f094d1d240558bd74ddb43e8a2febc6ccdc", 0x87}], 0x1, &(0x7f0000000c00)=[{0x1010, 0x110, 0xcc, "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"}], 0x1010}}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x2, 0x3, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80, &(0x7f0000002100)=[{&(0x7f00000001c0)="1c282b6d6bd400cd9e8e1ec9ee69d999ab9873", 0x13}, {&(0x7f0000000400)="7b59a4af727d924c34f28167d233b9e4cb488ac9a73bc3c12ba8b38e9afbe7473f91b80207b035fd091036eb72fc3ba5537472899ce2182c06180e6d5459b8e0a944886482d80aad026ef8609eca2fc2b502a9433101245fb5bf9778a0800771b9c36adee1aefd08b606039e1f50af6df9fa634d", 0x74}, {&(0x7f0000001c40)="a4061af203512b83d1dd6a1464eeaab94a8702a4f7058bb8d0bf1c590f2accf0ba6ecc2ae61d7fa80b1ba8625b42a9d71a479eae40381f6bc7ff5cdfd22f51c4643df7ff014e1f46026bd676d944d3f3c23b63bf964a58113af81579ac97eb288c3385ec840236c34d1fd2d854a3c948d595e76d04ad04acb21d47f12b169ab4b73d44bce567e8b293c3b5f64244d233ce5c963946a33ecdbe24525108fc609b2d9f4c010ce1b4f940a4e4fb75047a7216616fb01caf6bb5598ad43978576e33e8081fb4ad09a38141ed", 0xca}, {&(0x7f00000004c0)="d2ce1ba657aea20ab9179dab2f72aca8d3ed", 0x12}, {&(0x7f0000001d40)="a7f42557ddfc0419f99068a2e5cbf780ce1fa276635f3ee5a94e083af68d2a1e585e799cd8b4143c97ba94fae5cadc07f744300652aba86a7917f8bb18cfa5db8feb8746df30de0c6ec69715cf8c206e13a9d25d1be06380ddb79b6ed451da5712d79cc13a594f5d88d3ccb71d917583abc165579bde67ccf767aed0b03e8e1db600448e1285dd3d74bcc96d1f42da56b905fd35701c882d1a56adc8d5186e4cc50da2719fe38a3e3e339d57b2fb979914d692af7d6adca693e2dee28b769647f754d0693409e297596f0411f16150e9752939d5e241d7c3", 0xd8}, {&(0x7f0000001e40)="ec51dcbcad47f47a0d410328e2ec898e3b27d6b5fc2448e01b7477820e8b865edbc138f5400247169c4c8b1804d4221f26663a387b590ec65811c1c84da3c238a465a6f79f345dba9d5daa9ecf9dac55b96ff4973a5543d176d87d0788ae2157761211d1f415649989be3255edf3dd99d1c6c6d213d4f0895275a1e5e0b6b2f8993a2f41df068c4a52648c9926ebbc99496cdc08e15ab1f6ec71a7524ac0d5177682c1979075af1290da6dbcd2e15c56588afbc590c2ae05cf46e245f99684e6965ed9b1a6819f227cdd7b38318f759956a0ef5f0dfb0646c2dd66e2e71e1162ee1b16398f991524b1f580d5b31c6c27", 0xf0}, {&(0x7f0000000500)="b1fa078d9f297a6f02f7110506f03a7d95d5d6f92b70982f60a99ccebab9352772a31a4ca27fbaf42170d318a029efdf13f9b809afc8ce083b3704cecb300f8f948b7a49eb546a0bb06b55dd1e80", 0x4e}, {&(0x7f0000001f40)="847c66f07b515166ac4819c6b2167c07664f500c2653b73473091603c4ed58fdb7ef034c74f7196bffc9c0f42592b9698097201eb0276a62c79a9cb186d44e9e7a08f947674f7abbde711e54dd6431af0fffa903adb1a3724375f4f690d796fb6040d44dcea186e3ea0455d0fc405ec88ed4a5b5643b83d835e9d9186e2830d6557c4af4e5ff25efb3c02e99b6227e48c45053fd3e5c40fc15e82be46ea87a4772e497c7811b2dc46abaeac8807f9199e450fe6cc0905d4ccd1bca3dd8f0646b68fa4c1cb1af58ac76b3db73263214d44edad32e9b8c215c7a00", 0xda}, {&(0x7f0000002040)="d2a37338b1bdbe416244335fa3706f5224877927d04ab82d33aaafce1ae3b057a6a6d78be04bb21f5d4ca209da5aee10e1117d4fadb63bd3bc2814e0c43805188fd2294f5bca5e4e297c9921fd97522b9aa25421ffcf1ec1ec7927f686279cb55e87fa6cc7adbc6a3c406f36e9b9c217c10cc9f889ce51582817c75fa0aac3ba845bd1e36cba466157507210efcaad66", 0x90}], 0x9, &(0x7f00000021c0)=[{0x20, 0x119, 0x9, "5ccce20e1253def36d2f7497"}, {0x58, 0x113, 0x0, "aa45069d6a86e406a566b9c7d4e5645e4e519aa561cbf667e8d18274504ab05ca224db8438286d788440d2604a4117220f93638e472d4c2f2e2a7223c7d3b6f52e1600"}, {0x10, 0x14, 0xf}, {0x80, 0x0, 0x6, "3ef77f9ca8442c5170065f8b685d16123cf5fcaead095ecb3b419586a558a1de197f742d8f6043b40fe14a288e76e75348d826d4021dd1b0ae7ff23b3f0276439cfd4918424aec6d399dc0420aad9c0d2aaf98edca28b12cc45157ab45f21274b5b2022676ecabc414083984ab9b90"}, {0x70, 0x107, 0x10000, "da368cc2213479e09a188cc37c27f38f9abf8226c053f086413fb7a8d85200815e9c7792ebfe121e57def9580b68c4097e2dd3744ba38d6dece541c377c4ba962b0695735ef7544757043d39dcdcc8124ce746119c7672a925be0c58"}, {0xc8, 0xff, 0x7, "49c8caca0682190742e04bf7aa0b71780be51b8883a812719451945048a80aa9eb3cac4c14d93b17d50847b1c8a4950605799aca6cafe63b3986df1c02426711a9b58c0cfad67a96781a85eb11c19b2a353024853cd6f79083077c3c62c4c2267774b2f55f97d2f9450fc4dfb33a27015a3fac5d76aa90dea9efe5c983d46d57e3dccb9879f7cc0f75a9fe521c7df3bf68d2607219f6861f02191a9629eb3efc9a4d06cabe6e88487d7fecac60dc1eec93c70a16b2"}], 0x240}}], 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0xb) (rerun: 32) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 2.988344734s ago: executing program 2 (id=1304): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000010000009"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) write$tun(r6, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x3, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"7f816cbbc7131ec803767b5bad27c3a404b5370b4504cdbfae21b7d2bc"}}}}}, 0x53) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) 2.778844421s ago: executing program 3 (id=1306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x8000, @rand_addr=' \x01\x00', 0x5, 0x4}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) unshare(0x2040400) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="010025bd70000000000005000000040103802e00050027c56a6c0611e69e3e8c570f449bb118fccf44accc0d4369460c6585d4719ce54f84100e86c096eba9de000004000400c400038020000180040003000800010001000100080001000300000004000300040003001c000180040003000a0002005e5e2d5d2100000004000300040003000c000180080001000300000008000180040003000c00018008000100040000004000018008000100ffff00000400030008000100010000000500020000000000050002000000000008000100f8ffffff040003000800010000001800040003001800018007000200200100000800010003000000040003000c00018004000300040003000400010004000100480003803f00040040c9d802a34ab00f1972fe66a18b66e181660bad57bceb7c1aee1d7c020e8bdcaa597fa3cf6f0d16eb9b79ddee40583f73d9abde1ca0bea4fd51f30004000380"], 0x160}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7ba}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffb, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000010) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000340)) r9 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) 2.184030459s ago: executing program 0 (id=1312): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2.067326183s ago: executing program 2 (id=1313): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100)=0x3ff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000100)=0x7fff, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002f897edd8dbda664d1ef3972ec228c779310ad362a183fb02dd0d36b6ef1660e55091a0a209796cc60fa040ba56b358c6cfdd59f08dd3ab32760a2a6be4ce6c568b5711c9772ae52d647108e506f997b09fdd0888972468eca745e9a29be00de6902db2272ba021ce18121b7bc93bf94901fb101b9f7cdefd3c2f728c6bbc6c10cdb714688", @ANYRES16=r4, @ANYBLOB="dbbf000000000000000004000000"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00007a0b001fff26bd70000094010000000000136d4ed42ae0d61123b8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012802900010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES16=r8, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x4044045}, 0x814) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0xde, 0x4, 0x25, 0x2}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2512, 0x4) sendto(r0, &(0x7f00000003c0)="ac84b8d9dc152ecdec09823cdcd3b8ba9b82e59354503fd69d99626b4d891b75863b61e19eae9ed808146296867c78f76fa974421e097b3586949ee9bcc423f415a53c3a2315d2d3fe8d11d44804d8fe8c97c546bc2e07b2dd679514fe61b8c94b4905610236e6bc435f9d7a00b4fa98e59df20f576b96b67aaa2937aa436faeff9988304ded2a70adbbf0df374bc32e92dbd4931d525c8b0892313e79fbccdb0d28693cee16bb4354434251770cdea1efb0737bf9", 0xb5, 0x10, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x10000, 0x0) 2.01382838s ago: executing program 0 (id=1314): unshare(0x8000480) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r4, 0x108, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, 't'}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "410a45e9cc65bf89"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "88bff8a31d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1ec6936e1c3263515c53d255a2"}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000080) 2.013345823s ago: executing program 1 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000004c0), 0x4) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}, 0x8000}], 0x2, 0x60002000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.9224012s ago: executing program 4 (id=1316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.668419839s ago: executing program 0 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)={0x28, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x131, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @pid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) sendmsg$inet(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="98", 0x1}], 0x1}, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_setlink={0x34, 0x13, 0xa2f, 0xfffffffd, 0x0, {0x7, 0x0, 0x68, r8, 0x900, 0x2010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x4050) sendto(r6, &(0x7f0000000640)="a80e9c", 0x3, 0x20000800, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f00000003c0)=""/74, 0xfffffffffffffc43, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000600"], 0x28}}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1.517956644s ago: executing program 3 (id=1318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x800, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.43203885s ago: executing program 2 (id=1319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x8084) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3d) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000400)=0x21, 0x4) connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d350010b0200000028bec77e337583dbdf25"], 0x10}}, 0x30000000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000030400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="14180000270900001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB="b4a78e598616a5e005c70b9585241ef35156c7d7"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000420000170000000c00068004e700008d000600000000002906f3d6629a98cbf8b098ccf50aeb59a9a364675ccc24f83eb2dd27b147fb5e8d46e1b7b827ec8fa4c5c5043e4ff9780278270d9dd9df383e321b244edc773039cd78caabad0d8f83fd"], 0x20}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000480)}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) listen(r2, 0x100101) accept4(r2, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r9, &(0x7f0000000240)=""/56, 0x38, 0x100000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x14, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000ffffffffffffaabaaaaaaabb88a8130081002b0008004500102caa000000002f9078acc2b0aae00000010000655a0018907804ffff00000000000000000000000000347401e15db7c195c869f7e7"], 0x46) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.305678589s ago: executing program 3 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) socket(0x400000000010, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) socket$inet6(0xa, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000001800048014000180090001006c61737400000000040002800900010073797a30000000000900020073797a320000000006000748d3d20020140000001100010000000000000000000000000a"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000006ce7edd101bba49242fd914eb1cc0f518d9d11fd213330f6a4718dc67876b04efe1c6a2b725958fb7c3b47855bb298ca2126fca3e876022f39f214135fc65e56284e3350f28304fe31bb0c5cd701a914cb5159db7e889feb0c92ac4f4ea1d04059a4", @ANYRES16=r4, @ANYBLOB="25bc2cbd7000fbdbdf252e00000005002b00020000000a0001007770616e3000000005002e000100000008002c00000000000c0005000202aaaaaaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x8c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x58, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @from_mac, {0x8, 0x396}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x2, @random, 0x800, @void, @val={0x1, 0x8, [{0x24}, {0xc}, {0x4, 0x1}, {0xb, 0x1}, {0x24, 0x1}, {0x6c}, {0x2, 0x1}, {0x0, 0x1}]}, @void, @val={0x4, 0x6, {0x5, 0xfb, 0x6d4, 0x7}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x78, 0x20}}, [{0xdd, 0x7, "9e77626fecb3bd"}]}}]}, 0x8c}}, 0x0) 1.217639552s ago: executing program 0 (id=1321): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffff7f, 0x1000, 0x0, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="fcff3eff00000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b7000000286c0000bca30000000000002403000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61111800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa7, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0xfffffffd, 0xffe0000}}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0xfffffffd, 0xffe0000}}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xa}, @generic={0x7, 0xc, "0990ec742f779f8fa6a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000240)=0x3) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000240)=0x3) sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fd", 0x11, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) shutdown(r2, 0x0) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1}, 0x40000110) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000f3ff7b8af8ff004c890e50a200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000e4565fc242b0d490d4c940359243b79b19eb69825c0453b1e9e2f7776dec8d2aa84060d234c46a7431a2402a3bcbe2ad04f49dbe38d3dad6ba92f38afa6b910c85d2ad9af3b760af68e75b9366223bde266ca347f8a35e7933cea413fae9be771d89081b99c720ddf36da575c291005cd0964834da2d08830ebac749b4fc54e95ef0441b51adac170627f380a51e6844ee609116d510ab"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000f3ff7b8af8ff004c890e50a200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000e4565fc242b0d490d4c940359243b79b19eb69825c0453b1e9e2f7776dec8d2aa84060d234c46a7431a2402a3bcbe2ad04f49dbe38d3dad6ba92f38afa6b910c85d2ad9af3b760af68e75b9366223bde266ca347f8a35e7933cea413fae9be771d89081b99c720ddf36da575c291005cd0964834da2d08830ebac749b4fc54e95ef0441b51adac170627f380a51e6844ee609116d510ab"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x7f) 1.2148172s ago: executing program 1 (id=1322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$x25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5fc, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x5b4, 0x2, [@TCA_ROUTE4_POLICE={0x47c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x4, 0xffffff00, 0x7, 0x81, 0x9, 0x400, 0x787, 0x2, 0x6, 0x6, 0x4c, 0x7, 0x9c6, 0x0, 0x1, 0x2, 0x4000, 0xba9f, 0x1, 0x5, 0x1, 0x40, 0x3, 0x8000, 0x9, 0xc, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x0, 0x6, 0x3, 0xe, 0x0, 0x3, 0x53, 0x6, 0x6, 0x0, 0x9, 0x6, 0x9, 0xfe8, 0x9, 0x8f000000, 0x6e, 0x8, 0x2, 0x1, 0x800, 0x4, 0x9, 0xffffffff, 0x4, 0x9, 0xffff650e, 0x3, 0x8, 0x9, 0x6, 0x9e5, 0x7, 0x1, 0x2, 0x7, 0x3, 0x8, 0x2, 0x1, 0x7b94bcfe, 0x4, 0x3, 0x75e8, 0x200, 0x58, 0x1, 0x6, 0x7, 0x9, 0x8001, 0x10001, 0x5, 0x1000, 0xc9, 0x1714, 0x3400000, 0x5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x9, 0x9, 0x3, 0x5, 0x3, 0xd3e6, 0x8, 0x2, 0x0, 0x3, 0x8, 0x4, 0x6, 0x9, 0x7, 0x8, 0xa6f1, 0x2, 0x800, 0x401, 0x9, 0x4, 0xd, 0x1, 0x400, 0x9, 0x5, 0x7, 0x1f4, 0x1, 0x8, 0x10000000, 0x9, 0x3, 0x177e, 0x97, 0x1, 0x400, 0x15b, 0x401, 0x400, 0x8, 0x3, 0x1, 0x0, 0x400, 0x1, 0x80, 0x7, 0x1, 0x62c, 0x10000, 0x11f, 0x4, 0x18c, 0xb, 0x7, 0x8, 0x400, 0x1, 0x1, 0x4, 0xe, 0xae11, 0xffff2460, 0x401, 0x4, 0x3, 0x8764, 0x0, 0x5, 0x0, 0x10001, 0xfff, 0x4, 0x4aa, 0x0, 0x8, 0x6, 0x9, 0x1, 0x83f, 0x16, 0xfc2e, 0x8, 0x4, 0x17b, 0xb, 0xfce, 0x5, 0x9, 0x3, 0x0, 0x3, 0x80000000, 0x81, 0x6, 0xe, 0x7, 0x80000000, 0x1, 0xf, 0x7ff, 0x3, 0xe6, 0x7, 0x8, 0x6, 0x2, 0x8001, 0x1000, 0x0, 0x3, 0x0, 0xdb, 0x10001, 0x6, 0xffff, 0x6, 0x6, 0x2, 0x2a, 0x1ff, 0x10000, 0xfffffffe, 0x4, 0x10001, 0x7, 0x6c14, 0x9, 0x0, 0x9, 0x4, 0x200, 0xfffffe00, 0x3, 0x4, 0x8, 0xffffffff, 0x8001, 0x80, 0x1e6ff6ce, 0x1, 0x5, 0x0, 0x1, 0x3, 0x20, 0x2, 0x4, 0x4, 0xfffffff1, 0x4839, 0x10000, 0x8, 0x9, 0x0, 0x3f, 0x80, 0xee9, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0xffffffff, 0x3ff, 0x5, {0x4, 0x2, 0x800, 0x6, 0x8, 0x58e7}, {0x8, 0x2, 0x101, 0x6, 0xffc0, 0xd}, 0x9, 0xf1bb, 0x7fff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x124, 0x6, [@m_sample={0xe4, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x60}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x6, 0x10000000, 0x1, 0xfeb7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x26}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffff935, 0x7fffffff, 0x3, 0x3a94}}]}, {0x55, 0x6, "3f81bd469ecd55c3d0c66f931a90cf8a9a6c6e924d22e41113bf61112e1bef5ef9e1150463043691922858f5540850bceed091a291af3e192cb3fc9ab6d65e4d417d821b8b6ae01e4c04503209c7b330c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x91}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xeb, 0x8, 0x3e, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x40, 0x20, 0x3ff, 0x8000}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) readv(r2, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[], 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x28}, 0x18) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000000000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240005dd80000000a0001004155444954000000140000001000010000000000000000000500"], 0xb4}}, 0x0) 1.200758126s ago: executing program 4 (id=1323): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x3}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x3}, 0x8) (async) 1.017630035s ago: executing program 1 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004900)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800000000000c15471d21b390000b21aeeee000000090000000000000046d2c2326f17d11862f36dced97fe5a95cbea984fa36e55e36f5c943ed8ec6cdaecfede59b7a429c4f468c90309e34fd7d710733f880b3c6be62a22c00f8467ead8cb4f4ce7ca646f61ad33a5d27c45658527d52873924ddd3"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r0}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000101fcfffdff80004000fde207000000"], 0x14) socket$kcm(0xa, 0x2, 0x73) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 869.740164ms ago: executing program 0 (id=1325): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, 0x0, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x268, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x254, 0x1, [@m_skbmod={0x15c, 0x1f, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa}]}, {0xe1, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace9aaf8a1a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xf4, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0xc5, 0x6, "2d3226d2e3c57ead557080202f648bcdfe78417bc2116e51a2e0cec3ecc283dc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf0d6783c18c59c8c9e2fcbd90d335bc50b9fe7f8bc3d0041c343f964816c387c2b856c8dc4b06bf7a3fe6e0fb860738eb6bfbd18b07588e329e421012b28551f9c1267b24f31285115c4986075bc929c62ad7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x268}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x17}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x29, 0x8, 0xe8, 0x1, 0x8, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0xfffff184, 0x5}}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 797.545874ms ago: executing program 4 (id=1326): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r1, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000000000000000", @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 715.680645ms ago: executing program 4 (id=1327): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = getpid() r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$unix(r3, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4}}], 0x1, 0x4000) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x2a0, 0x7, 0x90e1802b3d6c7e94, 0x301, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x5}, [@nested={0x18a, 0x70, 0x0, 0x1, [@nested={0x4, 0x4e}, @generic="19e682704f4528f1300785d149b276a12f8fd25dee68811e2105b1ad133bef2d6c6859f779df177f5536f2e747c66be80845d644ae1d15e97ff69b6d41853906a543ab3f6e3ac7bcc3ac46a725f585ccfef69edd58c7dc8113fe706588cf5139522f304dc4892d02fb1944a35570da192ba63b7c276a0b42c498bb741ffcca6adbc8d14eb8d9749f2fa7b4346e9e49bc2364cb6719270c523bcae4f44c96a5d829cd9541db70624c48a0261969adf82dc1aee9db73830d4187e589560816d9f7c619e3198cff8ecbacd880d3ae9f3fe6bf90401d22781e4ec94b78fe8f1b227dfa20a96f72fd0853cdf8cba425fb530029591e667c", @generic="139e53aa28b0e1d7950938757652bc20b61f9f5b259e2c2b144a22a9c58ab690d5a00a89c041b0c71fc416593f", @generic="5352675c8738f552e1fdbaed2dbbe572467c940dbf412165bbfbe1166348bd27676d060163081b9027ee4b98bee4e3daabd4ea470632cb73dc3154bd357262d52b13ebaadbe2c97988a0de4f6d6eb4d93736f7f3c3e4fda0", @generic, @typed={0x8, 0xdb, 0x0, 0x0, @fd=r1}]}, @generic="c7ba06ff30d1c543dd7c5313c77ea670df2000a373d23f0fc2741102d284466821c3caffe35ae5d4ae2dc334b3941b752262274b472eb368fd3577aa5f9adee7d513e131a633f97dd4fb03af8f4326b69183daddc0ffe5cb0f36e1e297572f85ee0a10291d3eb92fcc05e50247afe87183f72594e249dd386057392d90d167f89305954da44f60000b97a3db48acc9c0b7736130832fc6c9e3638aa7f9db3bf34db615b1033468463d45a774927cdf61d7a5f99043340c92ad30085a2a75c2cdb5e4e4c5feb15e91694ddf64d57422bf5bf87c571d9ebc4431f3e66772b5196c494c2d38cc503434276b9d35cf", @typed={0x8, 0x7d, 0x0, 0x0, @str='*:]\x00'}, @typed={0x8, 0x13f, 0x0, 0x0, @pid=r4}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xff, @empty, 0x4}, 0x1c) 602.671061ms ago: executing program 1 (id=1328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0x3) (async) close(0x3) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r7, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="5f0300000000000000d4ff05000000000000", @ANYRES32=r15, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) 409.635773ms ago: executing program 0 (id=1329): r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x36040980) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xffbf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8000000000000001}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={r4, 0x2}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="0100f2ffffff000000003b05000008000300", @ANYRES32=r7, @ANYBLOB="8400330080800000ffffffffffff08021100000050505050505000001a004981000000000000000000006ac1000602020202020201016c0301040406000000000700060209002a01013c040908050c2d1a0200127f00000000000000070000000b00000000080800000007720603030303030371"], 0xa0}}, 0x20040000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000001040101000000000000000006080004400000000408000340000000070500810001000000cd21b8ecee00529e643fba93a5d0ed89d4ee25089b4d671cd35909918a8a7c9fc0a40e5ebea3254c067559cf4fe95e8ca75fd696318ee33070cef6caae18b1d5397162f2652c57de5f232731"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 408.900484ms ago: executing program 4 (id=1330): r0 = socket(0x1f4f88798862650e, 0x4, 0x8) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/235, &(0x7f0000000200)=0xeb) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xfb677827d8dc8993, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) socket(0x1f4f88798862650e, 0x4, 0x8) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/235, &(0x7f0000000200)=0xeb) (async) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xfb677827d8dc8993, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) (async) accept4$inet(r0, 0x0, 0x0, 0x0) (async) 282.508542ms ago: executing program 1 (id=1331): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d01"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8, 0x3f40, 0x7, 0x40, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @loopback, {[@noop, @ssrr={0x89, 0xb, 0x69, [@dev={0xac, 0x14, 0x14, 0x43}, @remote]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendfile(r0, r0, 0x0, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 248.948927ms ago: executing program 4 (id=1332): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x6aa102, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) read(r0, &(0x7f00000022c0)=""/4096, 0x1000) 173.878475ms ago: executing program 2 (id=1333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 170.69812ms ago: executing program 3 (id=1334): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0x5, 0xf954}) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x9, 0x4) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = getpid() (async) r6 = getgid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r5, 0xee01, r6}, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x5}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48014}, 0x20000004) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0xffff, 0x3}, {0xfff2, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048080}, 0x60000004) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) r10 = getgid() (async, rerun: 64) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) (rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x2, 0x35c, [0x0, 0x200006c0, 0x200006f0, 0x20000720], 0x0, &(0x7f0000000440), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x8, 0x19, 'erspan0\x00', 'ip6erspan0\x00', 'wlan0\x00', 'pimreg\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffff}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}, {0x5, 0x35, 0x88f5, 'vlan0\x00', 'rose0\x00', 'veth1_macvtap\x00', 'wlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x14e, 0x1c6, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'batadv_slave_1\x00', {0xff}, 'bridge_slave_0\x00', {0xff}, 0x12, 0x8}}}, @owner={{'owner\x00', 0x0, 0x18}, {{r8, r9, r10, r12, 0x5}}}], [@common=@redirect={'redirect\x00', 0x8}], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x7, 0x6, 0x0, 0x0, "adbe767754dcf3bb91e0c0fc03744657dbfb0998ac135b73e855908d0644d9f783fbde57e990d75b3f85160bb06c1d6e2edc904e90ed74e83c4cc688081bf1e6"}}}}]}]}, 0x3d4) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) (rerun: 32) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r13, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r14, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4845}, 0x8801) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000c00)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c40)={'ip6erspan0\x00'}) ioctl$sock_netdev_private(r4, 0x89fa, &(0x7f0000000c80)="edda04a89775e271f480e535bba37442b15a121f0a206e4863f1ab81d1f044aa8bdb2a4678dc6b1e2413") (async, rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@loopback, @in6=@private2, 0x4e22, 0xb673, 0x4e23, 0x6, 0xa, 0x0, 0x70, 0xff, 0x0, r11}, {0x5, 0x8, 0xb2d, 0xc5, 0x6d0, 0x5, 0x7, 0x1}, {0x8, 0x4, 0x64, 0x1}, 0xfff, 0x6e6bbc, 0x1, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x3c}, 0xa, @in=@empty, 0x3504, 0x1, 0x2, 0x69, 0x80000, 0x9, 0xffff}}, 0xe8) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r15, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r14, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x41) sendmsg$NL80211_CMD_ASSOCIATE(r13, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x154, r14, 0x204, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x39}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x3, 0x20, 0x3, 0xffcc}}}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ddf49a44f3ff9be52d1f248eec8cb05e4dbfcf7989b66ba7b1f8"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x10, 0x3, 0x8, 0x6, 0x3, 0x5, 0xd8c, 0x3, 0x4, 0x3, 0x101, 0xc60, 0x6654, 0x7, 0x5, 0xeb1]}, @NL80211_ATTR_IE={0xd0, 0x2a, [@dsss={0x3, 0x1, 0xb9}, @sec_chan_ofs={0x3e, 0x1}, @preq={0x82, 0x57, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x2, @broadcast, 0x7, @value, 0x1, 0x3, 0x5, [{{0x1}, @broadcast, 0x2}, {{0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{}, @device_a, 0x7}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7c, 0x74, 0x65}}, @preq={0x82, 0x62, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x6, 0xe, @device_a, 0x0, @value, 0x2, 0xffffffff, 0x6, [{{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{}, @device_b, 0x800}, {{0x1, 0x0, 0x1}, @device_b, 0x7f11}, {{}, @broadcast, 0xed2c}, {{0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0xfffffff0}]}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0xd576, 0x7, 0xfffe, 0x7f}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 32) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000001140)=0x2, 0x4) (rerun: 32) 0s ago: executing program 1 (id=1335): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="941b4a1c1a58e555c48d7f410d5a9fda908db356e21fa863f8f8169e28302fa5f295cadadfd12d5dd895c27841883206606e06caafb824bc96dcb348d3", 0x3d}], 0x1, 0x0, 0x0, 0x40040}], 0x1, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d030000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x25dfdbff}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0x10) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x204}}, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000000), &(0x7f0000000180)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000008f0605006c0000008e24080000000000050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c0007800800120000000000"], 0x58}, 0x1, 0x40afc, 0x0, 0x40804}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1d, &(0x7f0000000a00)=ANY=[@ANYBLOB="18ed", @ANYRES32, @ANYBLOB], 0x0, 0xa3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66f8, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r2, @ANYBLOB="200028bd7000ffdbdf3b0700000008000100030000000c00990008000000080000000a00e80008021100000000001c00e700f3a573946c80167ddcede8e1af9e6e4119b6c56905b5bfb21c00e70015a75c78589d2646d519546eef09e74ac9d3085287c37db60a00e800ffffffffffff00000a00e800ffffffffffff00000a00e80008021100000100000a00e80008021100000000001c00e700e0c367b9bcc5915b0e10f6842257e562ad661201eab8289d1c00e700f8d3c5d51b837ede1d84bce744fc63ba9d33994ee6ee91831400040076657468315f6d6163767461700000000800050002000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0xfffffffffffffd74}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): ent: Unsupported userspace flags (00000042) [ 79.486596][ T5940] tipc: Enabling of bearer rejected, failed to enable media [ 79.553422][ T5946] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 79.567496][ T5947] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 79.576327][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.607896][ T5940] syzkaller0: entered promiscuous mode [ 79.624400][ T5940] syzkaller0: entered allmulticast mode [ 79.658464][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 79.687792][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 79.759642][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'. [ 80.007016][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 80.016584][ T5956] netlink: 'syz.4.9': attribute type 7 has an invalid length. [ 80.042967][ T5956] netlink: 'syz.4.9': attribute type 8 has an invalid length. [ 80.051872][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 80.135390][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'. [ 80.366160][ T5966] raw_sendmsg: syz.0.12 forgot to set AF_INET. Fix it! [ 80.394183][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'. [ 80.764394][ T53] Bluetooth: hci0: command tx timeout [ 80.764522][ T5852] Bluetooth: hci1: command tx timeout [ 80.769877][ T5844] Bluetooth: hci3: command tx timeout [ 80.844725][ T5844] Bluetooth: hci4: command tx timeout [ 80.846645][ T5852] Bluetooth: hci2: command tx timeout [ 81.265689][ T5973] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 81.273626][ T5973] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.13'. [ 81.288711][ T5973] openvswitch: netlink: Flow key attr not present in new flow. [ 83.216544][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.407125][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.413031][ T5991] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 83.522267][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.669721][ T5997] bridge0: port 3(batadv1) entered blocking state [ 83.671730][ T6004] netlink: 'syz.3.22': attribute type 39 has an invalid length. [ 83.685093][ T2147] IPVS: starting estimator thread 0... [ 83.734710][ T5997] bridge0: port 3(batadv1) entered disabled state [ 83.775031][ T5997] batadv1: entered allmulticast mode [ 83.794285][ T6006] IPVS: using max 20 ests per chain, 48000 per kthread [ 83.812020][ T5997] batadv1: entered promiscuous mode [ 83.823784][ T6011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.923551][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.020903][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.127580][ T3503] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 84.137799][ T3503] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 84.358995][ T6015] nbd: must specify at least one socket [ 84.664727][ T6024] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 84.795001][ T6024] tipc: Started in network mode [ 84.814505][ T6024] tipc: Node identity 0000000a000000005f2e002d0000004, cluster identity 4711 [ 84.875850][ T6028] netlink: 'syz.2.31': attribute type 3 has an invalid length. [ 85.023710][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 85.573520][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 85.630851][ T6058] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 85.635294][ T6059] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'. [ 85.642859][ T6058] x_tables: ip_tables: osf match: only valid for protocol 6 [ 86.812082][ T6059] syzkaller1: entered promiscuous mode [ 86.824506][ T6059] syzkaller1: entered allmulticast mode [ 86.849011][ T973] cfg80211: failed to load regulatory.db [ 87.103443][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 87.121126][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'. [ 87.729406][ T6104] Zero length message leads to an empty skb [ 87.920532][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.52'. [ 88.033481][ T6102] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 88.133570][ T6112] netlink: 288 bytes leftover after parsing attributes in process `syz.2.54'. [ 88.340426][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.478877][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.502574][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 88.526014][ T6123] tipc: Started in network mode [ 88.531480][ T6123] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 88.544158][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 88.590682][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.678737][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 88.713594][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 89.742106][ T5888] IPVS: starting estimator thread 0... [ 89.854225][ T6160] IPVS: using max 19 ests per chain, 45600 per kthread [ 90.320411][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.329098][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.506374][ T6156] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 90.600404][ T6142] lo speed is unknown, defaulting to 1000 [ 90.724382][ T6142] lo speed is unknown, defaulting to 1000 [ 90.732989][ T6180] trusted_key: syz.3.74 sent an empty control message without MSG_MORE. [ 90.734583][ T6142] lo speed is unknown, defaulting to 1000 [ 90.752056][ T6142] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.780713][ T6142] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.931869][ T6142] lo speed is unknown, defaulting to 1000 [ 90.943772][ T6142] lo speed is unknown, defaulting to 1000 [ 90.951370][ T6186] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 90.963691][ T6142] lo speed is unknown, defaulting to 1000 [ 90.987505][ T6186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.202986][ T6142] lo speed is unknown, defaulting to 1000 [ 91.227072][ T6142] lo speed is unknown, defaulting to 1000 [ 91.242008][ T6142] lo speed is unknown, defaulting to 1000 [ 91.557428][ T6202] sctp: [Deprecated]: syz.1.77 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.557428][ T6202] Use struct sctp_sack_info instead [ 91.624688][ T6202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 92.106191][ T5885] IPVS: starting estimator thread 0... [ 92.177838][ T6221] hsr0: entered promiscuous mode [ 92.214212][ T6222] IPVS: using max 21 ests per chain, 50400 per kthread [ 92.234555][ T6221] hsr_slave_0: left promiscuous mode [ 92.242021][ T6221] hsr_slave_1: left promiscuous mode [ 92.257351][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 92.296950][ T6221] hsr0 (unregistering): left promiscuous mode [ 92.305714][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 92.323555][ T6227] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 92.837347][ T6246] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 59416 - 0 [ 92.854643][ T6246] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 59416 - 0 [ 92.879877][ T6246] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 59416 - 0 [ 92.882028][ T6249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.92'. [ 92.908115][ T6246] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 59416 - 0 [ 92.935640][ T6246] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 39654 - 0 [ 92.954352][ T6246] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 39654 - 0 [ 92.964970][ T6246] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 39654 - 0 [ 92.973993][ T6246] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 39654 - 0 [ 92.986997][ T6246] geneve2: entered promiscuous mode [ 93.000536][ T6246] geneve2: entered allmulticast mode [ 93.011827][ T6247] bridge0: port 3(ip6gretap0) entered blocking state [ 93.020252][ T6247] bridge0: port 3(ip6gretap0) entered disabled state [ 93.027912][ T6247] ip6gretap0: entered allmulticast mode [ 93.041068][ T6247] ip6gretap0: entered promiscuous mode [ 93.073684][ T6247] bridge0: port 3(ip6gretap0) entered blocking state [ 93.080855][ T6247] bridge0: port 3(ip6gretap0) entered forwarding state [ 93.221146][ T6254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.303513][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 93.465315][ T6260] netlink: 'syz.1.95': attribute type 2 has an invalid length. [ 93.960212][ T6271] netlink: 96 bytes leftover after parsing attributes in process `syz.3.100'. [ 94.021528][ T6273] tipc: Started in network mode [ 94.032903][ T6273] tipc: Node identity 46e6e0d47805, cluster identity 4711 [ 94.063828][ T6273] tipc: Enabled bearer , priority 0 [ 94.182937][ T6273] syzkaller0: entered promiscuous mode [ 94.195933][ T6284] IPVS: ip_vs_add_dest(): server weight less than zero [ 94.210968][ T6273] syzkaller0: entered allmulticast mode [ 94.255168][ T6273] tipc: Resetting bearer [ 94.284696][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 94.306686][ T6272] tipc: Resetting bearer [ 95.158887][ T5885] tipc: Node number set to 1055121620 [ 96.713471][ T6272] tipc: Disabling bearer [ 96.735918][ T6280] lo speed is unknown, defaulting to 1000 [ 97.047379][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 97.243106][ T6317] openvswitch: netlink: Flow key attr not present in new flow. [ 97.292841][ T6307] lo speed is unknown, defaulting to 1000 [ 97.374696][ T6322] netlink: 1 bytes leftover after parsing attributes in process `syz.3.112'. [ 97.417103][ T6322] openvswitch: netlink: Actions may not be safe on all matching packets [ 97.442073][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 97.466538][ T6322] netlink: 'syz.3.112': attribute type 18 has an invalid length. [ 97.510924][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'. [ 97.548776][ T6323] netlink: 'syz.1.113': attribute type 5 has an invalid length. [ 97.921949][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 98.110292][ T6346] veth0_vlan: left promiscuous mode [ 98.222193][ T6351] warning: `syz.4.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.239822][ T6348] lo speed is unknown, defaulting to 1000 [ 98.598293][ T6362] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 98.615383][ T6362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.121'. [ 98.836511][ T6362] lo speed is unknown, defaulting to 1000 [ 98.960721][ T6368] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 98.975316][ T6373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.015339][ T6368] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 99.071726][ T6375] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 99.277919][ T6380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.127'. [ 99.327064][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 99.375976][ T6386] pim6reg: entered allmulticast mode [ 99.534518][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 99.543822][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 99.658111][ T6398] gtp0: entered promiscuous mode [ 99.709157][ T6398] gtp0: entered allmulticast mode [ 99.721369][ T6402] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.522548][ T6431] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.712356][ T6437] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.729048][ T6435] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.757561][ T6435] batman_adv: batadv0: Adding interface: ip6gretap1 [ 100.773155][ T6435] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 100.804304][ T6435] batman_adv: batadv0: Interface activated: ip6gretap1 [ 101.011551][ T6442] x_tables: duplicate underflow at hook 3 [ 101.195679][ T6444] Cannot find add_set index 0 as target [ 101.857200][ T6471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.044477][ T6471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.205010][ T6471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.419426][ T6471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.535332][ T6500] __nla_validate_parse: 6 callbacks suppressed [ 102.535354][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 102.561773][ T6503] Bluetooth: MGMT ver 1.23 [ 102.577327][ T6500] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 102.598114][ T6500] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 102.616320][ T6504] sctp: [Deprecated]: syz.4.163 (pid 6504) Use of int in max_burst socket option deprecated. [ 102.616320][ T6504] Use struct sctp_assoc_value instead [ 102.658201][ T6471] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.900695][ T6471] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.958615][ T6471] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.996613][ T6471] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.150413][ T6515] ax25_connect(): syz.0.166 uses autobind, please contact jreuter@yaina.de [ 103.175929][ T6514] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 103.226149][ T6512] syzkaller0: entered promiscuous mode [ 103.231690][ T6512] syzkaller0: entered allmulticast mode [ 103.277031][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.301822][ T6514] team0: Port device batadv0 added [ 103.547146][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 105.124417][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 105.133491][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.174'. [ 105.264430][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 105.283473][ C1] vcan0: j1939_session_tx_dat: 0xffff88807ef0e800: queue data error: -100 [ 105.298867][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 105.305475][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.313336][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.321210][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.329177][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.337080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.345038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.352887][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.360861][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.368732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.376679][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.384553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.392453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.400350][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.408269][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.416157][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.424120][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.431961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.439890][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.447768][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.455710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.463553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.471480][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.479340][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.487277][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.495154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.503048][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.510946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.518873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.526780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.534694][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.542513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.550446][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.558318][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.566241][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.574114][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.581973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.589852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.597752][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.605617][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.613529][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.621436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.629329][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.637198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.645124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.652957][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.660868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.668735][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.679453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.684280][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 105.687319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.687400][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.709084][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.717029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.724926][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.732834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.740734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.748692][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.756579][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.764469][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.772275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.780240][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.788109][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.796080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.803924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.811871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.819749][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.827697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.835580][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.843498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.851432][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.859398][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.867281][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.875228][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.883080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.891064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.898982][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.906927][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.914791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.922654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.930510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.938442][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.946303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.946382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.946400][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.946462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.946481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 105.946534][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 105.993582][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.001542][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.009444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.062575][ T6554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.176'. [ 106.147731][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 106.203370][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 106.237533][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 106.763029][ T6576] syzkaller0: entered promiscuous mode [ 106.779349][ T6576] syzkaller0: entered allmulticast mode [ 106.805672][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.073266][ T6604] netlink: 5 bytes leftover after parsing attributes in process `syz.2.191'. [ 108.328976][ T6604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.696500][ T6624] __nla_validate_parse: 1 callbacks suppressed [ 108.696522][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.197'. [ 108.815552][ T6637] syz.3.199: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.867189][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.3.199 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 108.877848][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.887951][ T6637] Call Trace: [ 108.891263][ T6637] [ 108.894229][ T6637] dump_stack_lvl+0x241/0x360 [ 108.898999][ T6637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.904247][ T6637] ? __pfx__printk+0x10/0x10 [ 108.908880][ T6637] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 108.915374][ T6637] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 108.921930][ T6637] warn_alloc+0x278/0x410 [ 108.926306][ T6637] ? __pfx_warn_alloc+0x10/0x10 [ 108.931199][ T6637] ? xskq_create+0xb6/0x170 [ 108.935743][ T6637] ? __get_vm_area_node+0x1c8/0x2d0 [ 108.940990][ T6637] ? __get_vm_area_node+0x25c/0x2d0 [ 108.946257][ T6637] __vmalloc_node_range_noprof+0x62f/0x1380 [ 108.952227][ T6637] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.958597][ T6637] ? __kasan_kmalloc+0x98/0xb0 [ 108.963419][ T6637] vmalloc_user_noprof+0x74/0x80 [ 108.968414][ T6637] ? xskq_create+0xb6/0x170 [ 108.972959][ T6637] xskq_create+0xb6/0x170 [ 108.977336][ T6637] xsk_init_queue+0xa1/0x100 [ 108.981945][ T6637] xsk_setsockopt+0x598/0x950 [ 108.986634][ T6637] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.991845][ T6637] ? __pfx_aa_sk_perm+0x10/0x10 [ 108.996723][ T6637] ? __pfx_lock_acquire+0x10/0x10 [ 109.001776][ T6637] ? aa_sock_opt_perm+0x79/0x120 [ 109.006742][ T6637] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.011955][ T6637] do_sock_setsockopt+0x3af/0x720 [ 109.017014][ T6637] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.022634][ T6637] ? __fget_files+0x395/0x410 [ 109.027337][ T6637] ? __fget_files+0x2a/0x410 [ 109.031953][ T6637] __x64_sys_setsockopt+0x1ee/0x280 [ 109.037193][ T6637] do_syscall_64+0xf3/0x230 [ 109.041720][ T6637] ? clear_bhb_loop+0x35/0x90 [ 109.046412][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.052334][ T6637] RIP: 0033:0x7f9661f85d29 [ 109.056765][ T6637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.076470][ T6637] RSP: 002b:00007f965fdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.084903][ T6637] RAX: ffffffffffffffda RBX: 00007f9662175fa0 RCX: 00007f9661f85d29 [ 109.092893][ T6637] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 109.100869][ T6637] RBP: 00007f9662001b08 R08: 0000000000000004 R09: 0000000000000000 [ 109.108846][ T6637] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 109.116832][ T6637] R13: 0000000000000000 R14: 00007f9662175fa0 R15: 00007fff55029d08 [ 109.124825][ T6637] [ 109.151397][ T6637] Mem-Info: [ 109.159433][ T6637] active_anon:5212 inactive_anon:0 isolated_anon:0 [ 109.159433][ T6637] active_file:1484 inactive_file:38263 isolated_file:0 [ 109.159433][ T6637] unevictable:768 dirty:70 writeback:0 [ 109.159433][ T6637] slab_reclaimable:9843 slab_unreclaimable:99247 [ 109.159433][ T6637] mapped:29332 shmem:2049 pagetables:768 [ 109.159433][ T6637] sec_pagetables:0 bounce:0 [ 109.159433][ T6637] kernel_misc_reclaimable:0 [ 109.159433][ T6637] free:1341758 free_pcp:351 free_cma:0 [ 109.270306][ T6637] Node 0 active_anon:22348kB inactive_anon:0kB active_file:5936kB inactive_file:152980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118628kB dirty:280kB writeback:0kB shmem:7960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11004kB pagetables:3072kB sec_pagetables:0kB all_unreclaimable? no [ 109.376475][ T6637] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 109.433827][ T6637] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.503451][ T6652] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 109.564032][ T6637] lowmem_reserve[]: 0 2465 2466 0 0 [ 109.569421][ T6637] Node 0 DMA32 free:1445096kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:26912kB inactive_anon:0kB active_file:5936kB inactive_file:152148kB unevictable:1536kB writepending:280kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:1476kB local_pcp:648kB free_cma:0kB [ 109.605476][ T6637] lowmem_reserve[]: 0 0 0 0 0 [ 109.610284][ T6637] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 109.702431][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.204'. [ 109.706968][ T6637] lowmem_reserve[]: 0 0 0 0 0 [ 109.723775][ T6637] Node 1 Normal free:3900344kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.742348][ T6663] netlink: 85 bytes leftover after parsing attributes in process `syz.4.204'. [ 109.756736][ T6637] lowmem_reserve[]: 0 0 0 0 0 [ 109.767038][ T6637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.786600][ T6637] Node 0 DMA32: 126*4kB (U) 7*8kB (E) 22*16kB (UE) 443*32kB (UE) 152*64kB (UE) 38*128kB (UME) 34*256kB (UME) 16*512kB (UM) 5*1024kB (UME) 6*2048kB (UM) 336*4096kB (UM) = 1440240kB [ 109.794674][ T6666] lo speed is unknown, defaulting to 1000 [ 109.807423][ T6637] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.822912][ T6637] Node 1 Normal: 212*4kB (UE) 51*8kB (UME) 39*16kB (UME) 227*32kB (UME) 102*64kB (UME) 29*128kB (UME) 14*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 0*2048kB 944*4096kB (M) = 3900344kB [ 109.843208][ T6637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.944944][ T6637] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.995001][ T6637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.022409][ T6637] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.061250][ T6637] 44049 total pagecache pages [ 110.080876][ T6637] 0 pages in swap cache [ 110.090017][ T6637] Free swap = 124996kB [ 110.096228][ T6637] Total swap = 124996kB [ 110.100614][ T6637] 2097051 pages RAM [ 110.107267][ T6637] 0 pages HighMem/MovableOnly [ 110.112196][ T6637] 427013 pages reserved [ 110.118474][ T6637] 0 pages cma reserved [ 110.546223][ T6689] lo speed is unknown, defaulting to 1000 [ 110.570935][ T6691] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 110.620729][ T6698] bond0: (slave vlan1): Opening slave failed [ 110.660159][ T6691] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.681816][ T6691] bond0: (slave team0): Enslaving as an active interface with an up link [ 110.737529][ T6694] netlink: 168 bytes leftover after parsing attributes in process `syz.1.214'. [ 111.056299][ T6710] pim6reg1: entered promiscuous mode [ 111.096498][ T6714] netlink: 244 bytes leftover after parsing attributes in process `syz.3.220'. [ 111.122632][ T6712] netlink: 23 bytes leftover after parsing attributes in process `syz.0.219'. [ 111.366113][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.223'. [ 111.444879][ T6727] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.544913][ T6687] lo: entered allmulticast mode [ 111.567840][ T6687] lo: left allmulticast mode [ 111.711193][ T6738] netlink: 'syz.3.227': attribute type 21 has an invalid length. [ 111.748404][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 111.762939][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 112.084379][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 112.093314][ T6750] netlink: 'syz.0.231': attribute type 7 has an invalid length. [ 112.124199][ T6750] netlink: 'syz.0.231': attribute type 8 has an invalid length. [ 112.384746][ T6764] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 112.413607][ T6769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.000728][ T6785] tipc: Enabled bearer , priority 18 [ 113.358902][ T6801] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 113.366976][ T6801] netlink: 'syz.3.244': attribute type 8 has an invalid length. [ 113.379877][ T6801] netlink: 'syz.3.244': attribute type 9 has an invalid length. [ 113.396487][ T6801] netlink: 'syz.3.244': attribute type 10 has an invalid length. [ 113.428728][ T6800] lo speed is unknown, defaulting to 1000 [ 113.709775][ T6822] geneve3: entered promiscuous mode [ 113.728835][ T6822] geneve3: entered allmulticast mode [ 114.124505][ T5887] tipc: Node number set to 4278255617 [ 114.458424][ T6856] __nla_validate_parse: 68 callbacks suppressed [ 114.458447][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 114.475378][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 114.961174][ T6884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.263'. [ 115.015316][ T6887] validate_nla: 2 callbacks suppressed [ 115.015337][ T6887] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 115.110573][ T6887] netlink: 224 bytes leftover after parsing attributes in process `syz.0.264'. [ 115.238013][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 115.294287][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 115.324971][ T6897] netlink: 'syz.1.266': attribute type 12 has an invalid length. [ 115.523746][ T6906] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 115.882480][ T6918] dvmrp0: entered allmulticast mode [ 115.906525][ T6917] dvmrp0: left allmulticast mode [ 116.453876][ T6949] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 116.586898][ T6953] netlink: 80 bytes leftover after parsing attributes in process `syz.1.284'. [ 116.678379][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 116.910357][ T6974] netlink: 104 bytes leftover after parsing attributes in process `syz.1.287'. [ 117.432334][ T6993] netlink: 'syz.1.295': attribute type 15 has an invalid length. [ 117.481044][ T6990] lo speed is unknown, defaulting to 1000 [ 117.600470][ T6991] lo speed is unknown, defaulting to 1000 [ 117.831936][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 117.948045][ T7019] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 117.996162][ T7019] netlink: 'syz.0.299': attribute type 2 has an invalid length. [ 119.434029][ T7094] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 119.452232][ T7094] netlink: 'syz.1.313': attribute type 27 has an invalid length. [ 119.503644][ T7086] Bluetooth: MGMT ver 1.23 [ 119.519027][ T7088] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 119.531341][ T7081] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 119.573214][ T7088] syz_tun: entered promiscuous mode [ 119.620923][ T7088] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 119.661711][ T7106] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 119.675254][ T7105] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.884887][ T7110] x_tables: duplicate entry at hook 2 [ 119.995881][ T7120] __nla_validate_parse: 3 callbacks suppressed [ 119.995903][ T7120] netlink: 3 bytes leftover after parsing attributes in process `syz.3.320'. [ 120.045721][ T7120] 0ªX¹¦À: renamed from caif0 [ 120.137345][ T7120] 0ªX¹¦À: entered allmulticast mode [ 120.155223][ T7120] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 120.228764][ T7138] sit0: entered promiscuous mode [ 120.262815][ T7138] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 120.331637][ T7138] netlink: 1 bytes leftover after parsing attributes in process `syz.0.321'. [ 120.535517][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 120.574226][ T7150] netlink: 148 bytes leftover after parsing attributes in process `syz.4.324'. [ 120.897473][ T7161] netlink: 'syz.4.327': attribute type 21 has an invalid length. [ 120.927955][ T7164] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 120.938116][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 120.974033][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 121.196238][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 121.592756][ T7186] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.603147][ T7176] netlink: 48 bytes leftover after parsing attributes in process `syz.2.330'. [ 121.647323][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.671980][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 121.698663][ T7188] syzkaller1: entered promiscuous mode [ 121.714283][ T7188] syzkaller1: entered allmulticast mode [ 121.855346][ T7199] xfrm0: entered allmulticast mode [ 122.222804][ T7211] lo speed is unknown, defaulting to 1000 [ 122.228779][ T5852] Bluetooth: hci4: link tx timeout [ 122.234715][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.244376][ T5852] Bluetooth: hci4: link tx timeout [ 122.249618][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.257570][ T5852] Bluetooth: hci4: link tx timeout [ 122.262805][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.366730][ T7221] xt_NFQUEUE: number of total queues is 0 [ 122.845611][ T7234] netlink: 'syz.3.344': attribute type 21 has an invalid length. [ 122.881855][ T7234] netlink: 152 bytes leftover after parsing attributes in process `syz.3.344'. [ 123.555460][ T7247] netlink: 'syz.1.348': attribute type 3 has an invalid length. [ 124.175783][ T7262] tipc: Enabling of bearer rejected, failed to enable media [ 124.205907][ T7262] --map-set only usable from mangle table [ 124.284270][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 124.716362][ T7273] lo speed is unknown, defaulting to 1000 [ 125.317207][ T7296] : entered promiscuous mode [ 125.564270][ T7302] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20002 [ 126.832307][ T7334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.872999][ T7339] lo speed is unknown, defaulting to 1000 [ 127.039844][ T7344] __nla_validate_parse: 8 callbacks suppressed [ 127.039867][ T7344] netlink: 52 bytes leftover after parsing attributes in process `syz.1.365'. [ 127.083315][ T7344] nbd: must specify at least one socket [ 127.138499][ T7344] netlink: 80 bytes leftover after parsing attributes in process `syz.1.365'. [ 127.218440][ T7350] tipc: Enabled bearer , priority 10 [ 127.446699][ T7360] netlink: 72 bytes leftover after parsing attributes in process `syz.1.366'. [ 127.823987][ T7370] tipc: Started in network mode [ 127.846555][ T7370] tipc: Node identity ac14140f, cluster identity 4711 [ 127.865081][ T7370] tipc: New replicast peer: 255.255.255.255 [ 127.913829][ T7370] tipc: Enabled bearer , priority 10 [ 128.750800][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.975755][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 129.027467][ T63] tipc: Node number set to 2886997007 [ 129.915040][ T7428] netlink: 48 bytes leftover after parsing attributes in process `syz.4.379'. [ 130.309686][ T7445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'. [ 130.334752][ T7443] netlink: 'syz.4.384': attribute type 10 has an invalid length. [ 130.371058][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.408072][ T7443] team0: Port device batadv0 added [ 130.517642][ T7449] tipc: Cannot configure node identity twice [ 130.523687][ T7449] tipc: Cannot configure node identity twice [ 130.712132][ T7452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.741347][ T7452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59416 - 0 [ 130.767924][ T7452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 39654 - 0 [ 130.865571][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 130.936381][ T7452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.952863][ T7452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59416 - 0 [ 130.964771][ T7452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 39654 - 0 [ 131.167548][ T7452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.197792][ T7452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59416 - 0 [ 131.225313][ T7473] netlink: 'syz.2.392': attribute type 10 has an invalid length. [ 131.244906][ T7452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 39654 - 0 [ 131.311759][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 131.466855][ T7452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.505629][ T7452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59416 - 0 [ 131.550104][ T7452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 39654 - 0 [ 131.573540][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 131.609751][ T7487] tipc: Enabled bearer , priority 0 [ 131.676798][ T7487] syzkaller0: entered promiscuous mode [ 131.682326][ T7487] syzkaller0: entered allmulticast mode [ 131.690555][ T7487] tipc: Resetting bearer [ 131.705577][ T7486] tipc: Resetting bearer [ 132.927042][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.311249][ T7486] tipc: Disabling bearer [ 133.373560][ T7452] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 39654 - 0 [ 133.411577][ T7452] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 59416 - 0 [ 133.454271][ T7452] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 133.482040][ T7452] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 39654 - 0 [ 133.493183][ T7452] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 59416 - 0 [ 133.501665][ T7452] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 133.516900][ T7452] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 39654 - 0 [ 133.525532][ T7452] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 59416 - 0 [ 133.533826][ T7452] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 133.579157][ T7452] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 39654 - 0 [ 133.604237][ T7452] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 59416 - 0 [ 133.629018][ T7452] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 133.676696][ T7516] tipc: Enabled bearer , priority 0 [ 133.709158][ T7514] lo speed is unknown, defaulting to 1000 [ 133.825936][ T7526] __nla_validate_parse: 2 callbacks suppressed [ 133.825957][ T7526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.406'. [ 133.861054][ T7516] syzkaller0: entered promiscuous mode [ 133.875134][ T7516] syzkaller0: entered allmulticast mode [ 133.892793][ T7516] tipc: Resetting bearer [ 133.964819][ T7515] tipc: Resetting bearer [ 134.157785][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 134.198126][ T7541] netlink: 11 bytes leftover after parsing attributes in process `syz.3.411'. [ 134.225751][ T7545] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 135.758888][ T7515] tipc: Disabling bearer [ 135.777622][ T7537] ip6gretap0: left allmulticast mode [ 135.782980][ T7537] ip6gretap0: left promiscuous mode [ 135.789047][ T7537] bridge0: port 3(ip6gretap0) entered disabled state [ 135.802864][ T7537] bridge_slave_0: left allmulticast mode [ 135.809311][ T7537] bridge_slave_0: left promiscuous mode [ 135.822215][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.852992][ T7537] bridge_slave_1: left allmulticast mode [ 135.868138][ T7537] bridge_slave_1: left promiscuous mode [ 135.873908][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.888992][ T7537] bond0: (slave bond_slave_0): Releasing backup interface [ 135.903628][ T7537] bond0: (slave bond_slave_1): Releasing backup interface [ 135.929763][ T7537] team0: Port device team_slave_0 removed [ 135.940361][ T7537] team0: Port device team_slave_1 removed [ 135.947536][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.955326][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.964031][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.973026][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.002667][ T7545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.386079][ T7565] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 136.415277][ T7565] netlink: 6 bytes leftover after parsing attributes in process `syz.0.414'. [ 136.458136][ T7573] lo speed is unknown, defaulting to 1000 [ 136.722411][ T7582] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 136.859946][ T7586] batadv1: entered promiscuous mode [ 137.056389][ T7582] bond1: entered promiscuous mode [ 137.092924][ T7582] bond1: entered allmulticast mode [ 137.206656][ T7600] netlink: 'syz.2.418': attribute type 5 has an invalid length. [ 137.341463][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.422'. [ 137.658758][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 137.847183][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 137.870575][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 137.988908][ T7637] lo speed is unknown, defaulting to 1000 [ 138.305496][ T7638] lo speed is unknown, defaulting to 1000 [ 138.574515][ T7662] syzkaller1: entered promiscuous mode [ 138.588759][ T7662] syzkaller1: entered allmulticast mode [ 138.921870][ T7673] openvswitch: netlink: Message has 1 unknown bytes. [ 138.939813][ T7673] tun0: tun_chr_ioctl cmd 1074025680 [ 139.302798][ T7691] veth0_to_hsr: entered promiscuous mode [ 139.318511][ T7691] macsec2: entered allmulticast mode [ 139.353328][ T7691] veth0_to_hsr: entered allmulticast mode [ 139.393183][ T7691] batman_adv: batadv0: Adding interface: macsec2 [ 139.446900][ T7691] batman_adv: batadv0: Interface activated: macsec2 [ 139.735916][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 139.985610][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 140.039615][ T7719] team0: Device is already in use. [ 140.428694][ T7733] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.438339][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 141.018320][ T7765] lo speed is unknown, defaulting to 1000 [ 141.249235][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 141.329140][ T7784] lo speed is unknown, defaulting to 1000 [ 141.346154][ T7787] dvmrp0: entered allmulticast mode [ 141.525855][ T7794] x_tables: duplicate underflow at hook 2 [ 141.637476][ T7798] tipc: Enabled bearer , priority 0 [ 141.719234][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 141.777734][ T7798] syzkaller0: entered promiscuous mode [ 141.799489][ T7798] syzkaller0: entered allmulticast mode [ 141.809778][ T7798] tipc: Resetting bearer [ 141.854483][ T7797] tipc: Resetting bearer [ 142.028041][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 142.196454][ T7824] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 142.253303][ T7825] netlink: 'syz.0.481': attribute type 4 has an invalid length. [ 144.431242][ T7797] tipc: Disabling bearer [ 144.443477][ T7822] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 144.523558][ T7837] tipc: Enabling of bearer rejected, already enabled [ 145.051060][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.109908][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 145.120916][ T7862] netlink: 'syz.4.492': attribute type 10 has an invalid length. [ 145.166333][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 145.174583][ T7868] netlink: 'syz.4.492': attribute type 10 has an invalid length. [ 145.232645][ T7862] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.393383][ T7884] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 145.450350][ T7884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.730504][ T7894] tipc: Enabled bearer , priority 0 [ 145.754736][ T7894] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 145.811257][ T7894] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 145.864205][ T7901] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 145.887527][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 146.076453][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 146.125922][ T7916] 8021q: VLANs not supported on lo [ 146.227922][ T7915] geneve2: entered allmulticast mode [ 146.262390][ T7919] xt_CT: No such helper "snmp_trap" [ 146.596739][ T7937] syzkaller0: entered promiscuous mode [ 146.614553][ T7937] syzkaller0: entered allmulticast mode [ 146.652288][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.508'. [ 146.662743][ T7946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.509'. [ 146.731963][ T7948] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 146.783713][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 146.813243][ T7952] netlink: 88 bytes leftover after parsing attributes in process `syz.0.510'. [ 146.846139][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 148.473974][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.482177][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.537468][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.545520][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.553005][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.560214][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.572216][ T7948] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.582337][ T7956] batadv_slave_1: entered promiscuous mode [ 148.767487][ T7970] tipc: Enabled bearer , priority 0 [ 148.889707][ T7970] syzkaller0: entered promiscuous mode [ 148.925043][ T7970] syzkaller0: entered allmulticast mode [ 148.945227][ T7970] tipc: Resetting bearer [ 148.952691][ T7984] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 148.960696][ T7987] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 148.968657][ T7987] netlink: 224 bytes leftover after parsing attributes in process `syz.0.517'. [ 148.980340][ T7984] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 148.992352][ T7969] tipc: Resetting bearer [ 150.570399][ T7969] tipc: Disabling bearer [ 150.954514][ T8014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.964591][ T8014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.973374][ T8014] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.983080][ T8014] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.040541][ T8014] vxlan0: entered promiscuous mode [ 151.058942][ T8014] vxlan0: entered allmulticast mode [ 151.096852][ T8014] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.106253][ T8014] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.115367][ T8014] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.124658][ T8014] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.421734][ T8033] tipc: Started in network mode [ 151.437839][ T8033] tipc: Node identity 32e7a7e54eb, cluster identity 4711 [ 151.461729][ T8033] tipc: Enabled bearer , priority 0 [ 151.607583][ T8047] syzkaller0: entered promiscuous mode [ 151.613267][ T8047] syzkaller0: entered allmulticast mode [ 151.628186][ T8047] tipc: Resetting bearer [ 151.641789][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 151.655585][ T8032] tipc: Resetting bearer [ 151.695928][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.533'. [ 151.769624][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 152.496229][ T2147] tipc: Node number set to 2086119397 [ 153.228709][ T8032] tipc: Disabling bearer [ 153.244906][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.536513][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 154.272684][ T8074] syz_tun: left promiscuous mode [ 154.435081][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.442422][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.927288][ T8074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.974489][ T8074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.198969][ T8074] tipc: Resetting bearer [ 155.394225][ T8074] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.403194][ T8074] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.414243][ T8074] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.432147][ T8074] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.561023][ T8074] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 155.570815][ T8074] batman_adv: batadv0: Interface deactivated: macsec2 [ 155.591621][ T8074] veth0_to_hsr: left allmulticast mode [ 155.597243][ T8074] macsec2: left allmulticast mode [ 155.626222][ T8078] lo speed is unknown, defaulting to 1000 [ 155.804689][ T5844] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 155.835194][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 156.081589][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 156.462133][ T8135] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.142261][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 157.155796][ T8140] pimreg: entered allmulticast mode [ 157.168519][ T8139] pimreg: left allmulticast mode [ 157.340276][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 157.370693][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 157.466208][ T8152] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 157.614920][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 158.081297][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.565'. [ 158.146489][ T8186] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 158.409939][ T8193] Cannot find add_set index 0 as target [ 158.561762][ T8191] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.897140][ T8223] Unsupported ieee802154 address type: 0 [ 159.016077][ T8223] can: request_module (can-proto-5) failed. [ 159.307619][ T8238] netlink: 1644 bytes leftover after parsing attributes in process `syz.4.581'. [ 159.472226][ T8244] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 159.508430][ T8244] netlink: 48 bytes leftover after parsing attributes in process `syz.1.584'. [ 159.838395][ T8257] ax25_connect(): syz.1.588 uses autobind, please contact jreuter@yaina.de [ 159.884258][ T8263] lo speed is unknown, defaulting to 1000 [ 160.086441][ T8269] lo speed is unknown, defaulting to 1000 [ 160.382016][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 160.420189][ T8292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.598'. [ 160.526595][ T8295] netlink: 'syz.4.599': attribute type 7 has an invalid length. [ 160.536710][ T8296] netlink: 'syz.4.599': attribute type 7 has an invalid length. [ 160.568661][ T8295] netlink: 'syz.4.599': attribute type 3 has an invalid length. [ 160.601842][ T8296] netlink: 'syz.4.599': attribute type 3 has an invalid length. [ 160.667337][ T8290] netlink: 'syz.1.596': attribute type 2 has an invalid length. [ 160.700416][ T8295] netlink: 204 bytes leftover after parsing attributes in process `syz.4.599'. [ 161.004794][ T8313] nicvf0: tun_chr_ioctl cmd 1074025676 [ 161.028644][ T8313] nicvf0: owner set to 0 [ 161.038579][ T8317] tipc: Enabling of bearer rejected, failed to enable media [ 161.441062][ T8330] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 161.684592][ T8343] ip6t_srh: unknown srh invflags 92A7 [ 162.199397][ T8356] __nla_validate_parse: 4 callbacks suppressed [ 162.199420][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 162.252520][ T8361] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 162.431937][ T8366] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 162.478674][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 162.658323][ T8379] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 162.691667][ T8379] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 162.951915][ T8394] FAULT_INJECTION: forcing a failure. [ 162.951915][ T8394] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.024366][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.2.629 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 163.035034][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.045137][ T8394] Call Trace: [ 163.048457][ T8394] [ 163.051427][ T8394] dump_stack_lvl+0x241/0x360 [ 163.056178][ T8394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.061435][ T8394] ? __pfx__printk+0x10/0x10 [ 163.066074][ T8394] ? __pfx_lock_release+0x10/0x10 [ 163.071166][ T8394] should_fail_ex+0x3b0/0x4e0 [ 163.075879][ T8394] _copy_from_iter+0x1e9/0x1c20 [ 163.080777][ T8394] ? __virt_addr_valid+0x183/0x530 [ 163.085954][ T8394] ? __alloc_skb+0x28f/0x440 [ 163.090605][ T8394] ? __pfx__copy_from_iter+0x10/0x10 [ 163.095959][ T8394] ? __virt_addr_valid+0x183/0x530 [ 163.101106][ T8394] ? __virt_addr_valid+0x183/0x530 [ 163.106235][ T8394] ? __virt_addr_valid+0x45f/0x530 [ 163.111624][ T8394] ? __phys_addr_symbol+0x2f/0x70 [ 163.116672][ T8394] ? __check_object_size+0x47a/0x730 [ 163.121979][ T8394] netlink_sendmsg+0x73d/0xcb0 [ 163.126772][ T8394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.132079][ T8394] ? aa_sock_msg_perm+0x91/0x160 [ 163.137119][ T8394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.142414][ T8394] __sock_sendmsg+0x221/0x270 [ 163.147103][ T8394] ____sys_sendmsg+0x52a/0x7e0 [ 163.151888][ T8394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.157183][ T8394] ? __fget_files+0x2a/0x410 [ 163.161788][ T8394] ? __fget_files+0x2a/0x410 [ 163.166399][ T8394] __sys_sendmsg+0x269/0x350 [ 163.171005][ T8394] ? __pfx_lock_release+0x10/0x10 [ 163.176132][ T8394] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.181261][ T8394] ? __pfx_vfs_write+0x10/0x10 [ 163.186076][ T8394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.192420][ T8394] ? do_syscall_64+0x100/0x230 [ 163.197198][ T8394] ? do_syscall_64+0xb6/0x230 [ 163.201896][ T8394] do_syscall_64+0xf3/0x230 [ 163.206419][ T8394] ? clear_bhb_loop+0x35/0x90 [ 163.211109][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.217028][ T8394] RIP: 0033:0x7f72f7385d29 [ 163.221462][ T8394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.241078][ T8394] RSP: 002b:00007f72f8215038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.249503][ T8394] RAX: ffffffffffffffda RBX: 00007f72f7576080 RCX: 00007f72f7385d29 [ 163.257481][ T8394] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000004 [ 163.265462][ T8394] RBP: 00007f72f8215090 R08: 0000000000000000 R09: 0000000000000000 [ 163.273438][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.281417][ T8394] R13: 0000000000000001 R14: 00007f72f7576080 R15: 00007fff47c7a7d8 [ 163.289411][ T8394] [ 164.199447][ T8437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.636'. [ 164.240268][ T5205] udevd[5205]: worker [5854] terminated by signal 33 (Unknown signal 33) [ 164.280104][ T5205] udevd[5205]: worker [5854] failed while handling '/devices/virtual/block/loop3' [ 164.334624][ T8448] ip6gre2: entered allmulticast mode [ 164.343610][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 164.554780][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 164.607605][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.669828][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.639'. [ 164.715089][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 164.750124][ T8455] xt_bpf: check failed: parse error [ 164.769909][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 164.790885][ T8455] netlink: 'syz.1.639': attribute type 10 has an invalid length. [ 164.822622][ T8455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 164.843444][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 164.855202][ T8471] netlink: 'syz.2.643': attribute type 9 has an invalid length. [ 164.894228][ T8471] netlink: 'syz.2.643': attribute type 9 has an invalid length. [ 164.902220][ T8471] netlink: 'syz.2.643': attribute type 9 has an invalid length. [ 164.915146][ T8471] netlink: 'syz.2.643': attribute type 9 has an invalid length. [ 165.017066][ T8459] bond0: (slave bridge0): Releasing backup interface [ 165.176700][ T8487] 0ªX¹¦À: left allmulticast mode [ 165.348980][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.403391][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.775561][ T8514] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.651'. [ 165.900974][ T8512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.072550][ T8487] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.094396][ T8487] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.104295][ T8487] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.113210][ T8487] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.500089][ T8538] gtp0: entered promiscuous mode [ 166.864939][ T8560] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 166.873189][ T8560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.368269][ T8574] delete_channel: no stack [ 167.402305][ T8576] __nla_validate_parse: 1 callbacks suppressed [ 167.402328][ T8576] netlink: 80 bytes leftover after parsing attributes in process `syz.3.664'. [ 167.536675][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 167.585623][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 167.786603][ T8592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.669'. [ 167.822533][ T8592] x_tables: duplicate underflow at hook 3 [ 168.180414][ T8607] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 168.234444][ T8607] team0: Port device netdevsim0 added [ 168.471948][ T8620] netlink: 'syz.4.676': attribute type 10 has an invalid length. [ 168.584631][ T8620] syz_tun: entered promiscuous mode [ 168.614979][ T8620] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 169.045543][ T8629] ip6tnl2: entered allmulticast mode [ 169.080988][ T8628] lo speed is unknown, defaulting to 1000 [ 169.240929][ T8629] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.293040][ T8633] netlink: 'syz.4.680': attribute type 21 has an invalid length. [ 169.326271][ T8626] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 169.334316][ T8633] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 169.346063][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.678'. [ 169.386048][ T8626] veth0_vlan: entered allmulticast mode [ 169.403880][ T8626] bridge0: port 3(veth0_vlan) entered blocking state [ 169.476318][ T8626] bridge0: port 3(veth0_vlan) entered disabled state [ 169.594765][ T8626] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 169.680371][ T8639] netlink: 188 bytes leftover after parsing attributes in process `syz.3.682'. [ 170.776919][ T8655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.791920][ T8655] Bluetooth: MGMT ver 1.23 [ 171.015409][ T8662] tipc: Enabled bearer , priority 0 [ 171.044952][ T8664] syzkaller1: entered promiscuous mode [ 171.050655][ T8664] syzkaller1: entered allmulticast mode [ 171.072217][ T8662] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 171.095773][ T8662] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 171.106424][ T8662] tipc: Resetting bearer [ 171.176033][ T8670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 171.271802][ T8674] bridge: RTM_NEWNEIGH with unconfigured vlan 251 on bridge_slave_0 [ 171.286701][ T8675] bridge: RTM_NEWNEIGH with unconfigured vlan 251 on bridge_slave_0 [ 171.890638][ T2979] tipc: Resetting bearer [ 172.102166][ T8692] netlink: 72 bytes leftover after parsing attributes in process `syz.0.695'. [ 172.175726][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 172.225101][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 172.375742][ T8701] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 172.454608][ T8703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.515400][ T8705] netlink: 'syz.0.700': attribute type 10 has an invalid length. [ 172.586842][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.664927][ T8705] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.729062][ T8712] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:4422:c9ff:fe42:83ea error=-28 [ 172.805481][ T8710] tipc: Enabling of bearer rejected, already enabled [ 172.829202][ T8716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.704'. [ 172.851633][ T8705] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 172.871881][ T8721] bridge_slave_0: left allmulticast mode [ 172.914254][ T8721] bridge_slave_0: left promiscuous mode [ 172.919998][ T8705] netlink: 152 bytes leftover after parsing attributes in process `syz.0.700'. [ 172.920103][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.997807][ T8721] bridge_slave_1: left allmulticast mode [ 173.030964][ T8721] bridge_slave_1: left promiscuous mode [ 173.043074][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.084701][ T8721] bond0: (slave bond_slave_0): Releasing backup interface [ 173.124836][ T8721] bond0: (slave bond_slave_1): Releasing backup interface [ 173.171573][ T8721] team0: Port device team_slave_0 removed [ 173.209015][ T8721] team0: Port device team_slave_1 removed [ 173.214740][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 173.222908][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.235556][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.294317][ T8712] infiniband syz1: set active [ 173.300466][ T8712] infiniband syz1: added team_slave_0 [ 173.425949][ T8712] RDS/IB: syz1: added [ 173.441301][ T8712] smc: adding ib device syz1 with port count 1 [ 173.472995][ T8712] smc: ib device syz1 port 1 has pnetid [ 173.944871][ T8752] netlink: 348 bytes leftover after parsing attributes in process `syz.3.714'. [ 173.979270][ T8752] netlink: 348 bytes leftover after parsing attributes in process `syz.3.714'. [ 174.233291][ T8757] tipc: Enabled bearer , priority 0 [ 174.312599][ T8757] syzkaller0: entered promiscuous mode [ 174.332235][ T8757] syzkaller0: entered allmulticast mode [ 174.359918][ T8757] tipc: Resetting bearer [ 174.393719][ T8755] tipc: Resetting bearer [ 176.052667][ T8755] tipc: Disabling bearer [ 176.063534][ T8768] tipc: Enabling of bearer rejected, already enabled [ 176.239829][ T8781] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.724'. [ 176.310902][ T8790] macvlan2: entered promiscuous mode [ 176.324236][ T8790] bridge0: entered promiscuous mode [ 176.343866][ T8790] bridge0: port 1(macvlan2) entered blocking state [ 176.351632][ T8790] bridge0: port 1(macvlan2) entered disabled state [ 176.366301][ T8790] macvlan2: entered allmulticast mode [ 176.371875][ T8790] bridge0: entered allmulticast mode [ 176.402677][ T8790] macvlan2: left allmulticast mode [ 176.421725][ T8790] bridge0: left allmulticast mode [ 176.464927][ T8790] bridge0: left promiscuous mode [ 176.776769][ T8815] sctp: [Deprecated]: syz.0.732 (pid 8815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.776769][ T8815] Use struct sctp_sack_info instead [ 176.825269][ T8815] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 176.860095][ T8817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.731'. [ 176.985436][ T8816] netlink: 'syz.2.731': attribute type 32 has an invalid length. [ 177.015209][ T8818] netlink: 'syz.0.732': attribute type 11 has an invalid length. [ 177.097310][ T8822] netlink: 140 bytes leftover after parsing attributes in process `syz.3.735'. [ 177.283334][ T8831] tipc: Enabling of bearer rejected, already enabled [ 177.322990][ T8834] lo speed is unknown, defaulting to 1000 [ 177.457409][ T8841] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 178.050412][ T8865] netlink: 96 bytes leftover after parsing attributes in process `syz.4.743'. [ 178.477880][ T8885] tipc: Enabled bearer , priority 0 [ 178.537201][ T8885] syzkaller0: entered promiscuous mode [ 178.542831][ T8885] syzkaller0: entered allmulticast mode [ 178.550663][ T8885] tipc: Resetting bearer [ 178.580773][ T8884] tipc: Resetting bearer [ 178.796281][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.737'. [ 180.026874][ T8911] netlink: 68 bytes leftover after parsing attributes in process `syz.4.753'. [ 180.702450][ T8884] tipc: Disabling bearer [ 180.718912][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 181.226908][ T8925] netlink: 'syz.3.758': attribute type 11 has an invalid length. [ 181.419584][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 181.463202][ T8932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.759'. [ 181.530158][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 181.812543][ T8952] netlink: 'syz.4.762': attribute type 21 has an invalid length. [ 181.845226][ T8952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.948408][ T8952] bond0: (slave wlan1): Releasing backup interface [ 182.298911][ T8974] tipc: Enabling of bearer rejected, already enabled [ 182.894536][ T9004] netlink: 'syz.0.772': attribute type 2 has an invalid length. [ 182.944704][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 183.179135][ T9015] pim6reg1: entered promiscuous mode [ 183.225748][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 183.235016][ T9015] pim6reg1: entered allmulticast mode [ 183.614493][ T9040] netlink: 'syz.4.781': attribute type 2 has an invalid length. [ 183.645764][ T9040] netlink: 'syz.4.781': attribute type 8 has an invalid length. [ 183.653482][ T9040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.781'. [ 183.908205][ T9052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.785'. [ 184.174532][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 184.216662][ T9063] x_tables: unsorted underflow at hook 1 [ 184.279243][ T9069] netlink: 'syz.1.787': attribute type 2 has an invalid length. [ 184.514372][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 184.527478][ T9077] netlink: 22 bytes leftover after parsing attributes in process `syz.4.792'. [ 184.770317][ T9087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.794'. [ 185.394522][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 185.403357][ T9129] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 185.478072][ T9129] netlink: 'syz.0.804': attribute type 2 has an invalid length. [ 185.486309][ T9129] netlink: 72 bytes leftover after parsing attributes in process `syz.0.804'. [ 185.534594][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 185.543469][ T9133] batadv1: left allmulticast mode [ 185.549119][ T9133] batadv1: left promiscuous mode [ 185.562096][ T9133] bridge0: port 3(batadv1) entered disabled state [ 185.696690][ T9133] bridge_slave_1: left allmulticast mode [ 185.702405][ T9133] bridge_slave_1: left promiscuous mode [ 185.714966][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.781321][ T9133] bridge_slave_0: left allmulticast mode [ 185.794434][ T9133] bridge_slave_0: left promiscuous mode [ 185.803611][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.013087][ T9150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.030717][ T9150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.041737][ T9150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.051642][ T9150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.060808][ T9150] geneve2: entered promiscuous mode [ 186.066320][ T9150] geneve2: entered allmulticast mode [ 186.116780][ T9150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.141491][ T9150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.165443][ T9150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.184238][ T9150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.312308][ T9223] netlink: 'syz.2.822': attribute type 29 has an invalid length. [ 187.346729][ T9223] netlink: 'syz.2.822': attribute type 29 has an invalid length. [ 187.703406][ T9232] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 187.722143][ T9232] veth0_vlan: entered allmulticast mode [ 187.731614][ T9232] veth0_vlan: left promiscuous mode [ 187.737911][ T9232] veth0_vlan: entered promiscuous mode [ 187.857455][ T9239] nbd: must specify at least one socket [ 187.874778][ T9239] tipc: Enabling of bearer rejected, failed to enable media [ 188.150299][ T9245] bridge0: entered promiscuous mode [ 188.173695][ T9245] bridge0: entered allmulticast mode [ 188.211586][ T9255] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 188.221800][ T9256] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 188.240019][ T9245] team0: Port device bridge0 added [ 188.248595][ T9256] __nla_validate_parse: 10 callbacks suppressed [ 188.248613][ T9256] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.833'. [ 188.269072][ T9249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 188.282601][ T9256] openvswitch: netlink: Message has 7 unknown bytes. [ 188.295579][ T9255] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 188.310122][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 188.726880][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 189.081843][ T9283] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 189.306866][ T9293] IPVS: set_ctl: invalid protocol: 135 172.20.20.55:20001 [ 189.320245][ T9295] IPVS: set_ctl: invalid protocol: 135 172.20.20.55:20001 [ 189.508449][ T9303] xt_hashlimit: size too large, truncated to 1048576 [ 189.537087][ T9304] pimreg: entered allmulticast mode [ 189.771691][ T9318] sctp: [Deprecated]: syz.3.851 (pid 9318) Use of int in maxseg socket option. [ 189.771691][ T9318] Use struct sctp_assoc_value instead [ 189.848327][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 190.215731][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'. [ 190.266808][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 190.344666][ T9343] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 190.367142][ T9343] netlink: 'syz.2.858': attribute type 11 has an invalid length. [ 190.384243][ T9343] netlink: 220 bytes leftover after parsing attributes in process `syz.2.858'. [ 190.460394][ T9343] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.858'. [ 190.484211][ T9343] openvswitch: netlink: Flow key attribute not present in set flow. [ 190.508233][ T9341] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.546832][ T9342] vlan3: entered promiscuous mode [ 190.563222][ T9342] xfrm0: entered promiscuous mode [ 190.614395][ T9342] vlan3: entered allmulticast mode [ 191.066449][ T9368] openvswitch: netlink: IPv4 tunnel dst address is zero [ 191.139919][ T9369] netlink: 104 bytes leftover after parsing attributes in process `syz.0.862'. [ 191.171374][ T9372] netlink: 'syz.2.865': attribute type 5 has an invalid length. [ 191.859152][ T9391] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 191.952603][ T9397] xt_l2tp: v2 sid > 0xffff: 262144 [ 192.457456][ T9414] syz.0.877[9414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.457552][ T9414] syz.0.877[9414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.532999][ T9417] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 192.561932][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.577432][ T9419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.577472][ T9417] macvlan2: entered allmulticast mode [ 192.596780][ T9417] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 192.618189][ T9417] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 192.885038][ T9432] netlink: 'syz.0.882': attribute type 21 has an invalid length. [ 193.186794][ T9446] syzkaller1: entered promiscuous mode [ 193.192336][ T9446] syzkaller1: entered allmulticast mode [ 193.503356][ T9459] __nla_validate_parse: 5 callbacks suppressed [ 193.503378][ T9459] netlink: 91 bytes leftover after parsing attributes in process `syz.0.892'. [ 193.527965][ T9459] syzkaller1: entered promiscuous mode [ 193.533681][ T9459] syzkaller1: entered allmulticast mode [ 193.592221][ T9466] netlink: 5 bytes leftover after parsing attributes in process `syz.4.894'. [ 193.681046][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.688678][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.933723][ T9459] infiniband syz1: set down [ 193.968958][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.010087][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.123567][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 194.145304][ T9459] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.153985][ T9459] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.163042][ T9459] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.172335][ T9459] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.266993][ T9466] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 194.295872][ T9466] 0ªX¹¦Dö»: entered allmulticast mode [ 194.314700][ T9494] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 194.459801][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 194.661928][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 194.768182][ T9516] 0ªX¹¦Dö»: left allmulticast mode [ 194.778268][ T9516] syz_tun: left promiscuous mode [ 194.791201][ T9516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.197733][ T9529] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.911'. [ 195.327486][ T9532] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 195.391224][ T9532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.458134][ T9537] bond3: (slave gretap2): making interface the new active one [ 195.467823][ T9537] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 195.538691][ T9539] Cannot find del_set index 1 as target [ 196.203265][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 196.306343][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 196.331379][ T9568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.917'. [ 196.444995][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 196.457142][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.463209][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 196.491823][ T9584] ebt_among: src integrity fail: 30a [ 196.527320][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 197.056347][ T9614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.624373][ T9636] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 197.643724][ T9636] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 197.734158][ T9641] netlink: 'syz.4.931': attribute type 8 has an invalid length. [ 197.753917][ T9642] netlink: 'syz.4.931': attribute type 8 has an invalid length. [ 197.970727][ T9652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.978473][ T9652] IPv6: NLM_F_CREATE should be set when creating new route [ 198.157016][ T9655] lo speed is unknown, defaulting to 1000 [ 198.713152][ T9686] hsr0: entered promiscuous mode [ 198.736596][ T9686] hsr_slave_0: left promiscuous mode [ 198.757448][ T9686] hsr_slave_1: left promiscuous mode [ 198.806790][ T9686] hsr0 (unregistering): left promiscuous mode [ 198.843368][ T9691] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 198.948340][ T9693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.029673][ T9695] __nla_validate_parse: 4 callbacks suppressed [ 199.029695][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 199.045245][ T9695] tipc: Enabling of bearer rejected, failed to enable media [ 199.305673][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 199.327814][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 199.492890][ T9706] netlink: zone id is out of range [ 199.507081][ T9706] netlink: zone id is out of range [ 199.513095][ T9706] netlink: zone id is out of range [ 199.522230][ T9706] netlink: zone id is out of range [ 199.533262][ T9706] netlink: zone id is out of range [ 199.541550][ T9706] netlink: zone id is out of range [ 199.556971][ T9706] netlink: zone id is out of range [ 199.566090][ T9706] netlink: zone id is out of range [ 199.914443][ T9723] netlink: 'syz.0.949': attribute type 4 has an invalid length. [ 199.967550][ T9723] netlink: 'syz.0.949': attribute type 4 has an invalid length. [ 200.000132][ T9723] x_tables: unsorted underflow at hook 3 [ 200.191917][ T9724] lo speed is unknown, defaulting to 1000 [ 200.331637][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 200.429529][ T9730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.451834][ T9730] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.470171][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.512566][ T9730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.523042][ T9730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.538754][ T9730] veth0_to_hsr: left promiscuous mode [ 200.556112][ T9730] veth1_vlan: left promiscuous mode [ 200.562213][ T9730] veth0_vlan: left allmulticast mode [ 200.571325][ T9730] tipc: Resetting bearer [ 200.580360][ T9730] tipc: Resetting bearer [ 200.589439][ T9730] veth1_vlan: entered promiscuous mode [ 200.600661][ T9730] veth1_macvtap: left promiscuous mode [ 200.610041][ T9730] veth0_macvtap: left promiscuous mode [ 200.618739][ T9730] veth0_macvtap: entered promiscuous mode [ 200.627966][ T9730] veth1_macvtap: entered promiscuous mode [ 200.637419][ T9730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.649990][ T9730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.660834][ T9730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.672395][ T9730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.693871][ T9730] batman_adv: batadv0: Interface activated: ip6gretap1 [ 200.701293][ T9730] veth1_to_hsr: entered promiscuous mode [ 200.710866][ T9730] veth0_to_hsr: entered promiscuous mode [ 200.719707][ T9730] batman_adv: batadv0: Interface activated: macsec2 [ 200.727744][ T9730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.738680][ T9730] gtp0: left promiscuous mode [ 200.784190][ T9738] geneve2: entered promiscuous mode [ 200.800704][ T9738] geneve2: entered allmulticast mode [ 200.857063][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.864273][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.878650][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.885884][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.420620][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 201.599854][ T9762] lo speed is unknown, defaulting to 1000 [ 201.882677][ T9783] sctp: [Deprecated]: syz.0.964 (pid 9783) Use of int in max_burst socket option. [ 201.882677][ T9783] Use struct sctp_assoc_value instead [ 202.161865][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 202.214392][ T9800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 202.293155][ T9796] gretap1: entered promiscuous mode [ 202.820482][ T9817] netlink: 'syz.1.972': attribute type 2 has an invalid length. [ 202.846659][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 202.858989][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 203.127019][ T9837] nftables ruleset with unbound chain [ 203.307912][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 203.614683][ T9855] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 204.644726][ T9907] bridge0: entered allmulticast mode [ 204.700277][ T9912] sctp: [Deprecated]: syz.1.1002 (pid 9912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.700277][ T9912] Use struct sctp_sack_info instead [ 204.799554][ T9913] pim6reg: entered allmulticast mode [ 204.891673][ T9918] __nla_validate_parse: 3 callbacks suppressed [ 204.891694][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 204.970404][ T9916] bond4: entered promiscuous mode [ 204.983722][ T9916] bond4: entered allmulticast mode [ 204.990296][ T9916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.405787][ T9916] bond4 (unregistering): Released all slaves [ 205.576362][ T9931] netlink: 'syz.3.1007': attribute type 4 has an invalid length. [ 205.661409][ T9933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1008'. [ 205.936542][ T9947] net_ratelimit: 2 callbacks suppressed [ 205.936582][ T9947] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 205.955559][ T9945] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 206.551541][ T9977] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 206.597325][ T9977] batadv0: entered promiscuous mode [ 207.015112][T10002] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma? [ 207.501887][T10028] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 207.510474][T10028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1039'. [ 207.519967][T10028] team0: entered promiscuous mode [ 207.525130][T10028] team_slave_0: entered promiscuous mode [ 207.530955][T10028] team_slave_1: entered promiscuous mode [ 207.537493][T10028] batadv0: entered promiscuous mode [ 207.543976][T10028] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.565073][T10028] bond0: (slave team0): Releasing backup interface [ 207.588068][T10028] bridge0: port 3(team0) entered blocking state [ 207.602764][T10028] bridge0: port 3(team0) entered disabled state [ 207.615602][T10028] team0: entered allmulticast mode [ 207.628218][T10028] team_slave_0: entered allmulticast mode [ 207.639829][T10028] team_slave_1: entered allmulticast mode [ 207.651886][T10028] batadv0: entered allmulticast mode [ 207.698023][ T8561] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 207.707441][ T8561] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 207.788230][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 208.426184][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 208.555449][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 208.572112][T10073] ip6gretap0: entered promiscuous mode [ 208.589127][T10073] batadv_slave_0: entered promiscuous mode [ 208.612105][T10073] ip6gretap0: left promiscuous mode [ 208.619005][T10073] batadv_slave_0: left promiscuous mode [ 208.705224][T10080] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1054'. [ 208.999751][T10093] netlink: 'syz.2.1057': attribute type 21 has an invalid length. [ 209.323758][T10123] syz.2.1066[10123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.323882][T10123] syz.2.1066[10123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.336153][T10123] syz.2.1066[10123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.913645][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 210.087414][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 210.178788][T10154] team0: Port device bridge0 removed [ 210.273300][T10162] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1076'. [ 210.301932][T10162] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 210.768797][T10188] netlink: 'syz.0.1085': attribute type 8 has an invalid length. [ 210.951518][T10204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1090'. [ 211.146854][T10209] lo speed is unknown, defaulting to 1000 [ 211.187416][T10211] lo speed is unknown, defaulting to 1000 [ 211.228115][T10215] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 211.307544][T10215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.393997][T10223] vcan1: entered promiscuous mode [ 211.437095][T10223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.444954][T10223] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 211.459157][T10223] bond1: (slave vcan1): Error -95 calling set_mac_address [ 211.506380][T10229] pim6reg1: entered promiscuous mode [ 211.520898][T10229] pim6reg1: entered allmulticast mode [ 211.823955][T10237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1098'. [ 212.043908][T10241] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 212.146632][T10241] bond2: entered promiscuous mode [ 212.153494][T10241] bond2: entered allmulticast mode [ 212.232250][T10253] FAULT_INJECTION: forcing a failure. [ 212.232250][T10253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.252547][T10253] CPU: 0 UID: 0 PID: 10253 Comm: syz.1.1102 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 212.259584][T10248] syzkaller0: entered promiscuous mode [ 212.263366][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.271312][T10248] syzkaller0: entered allmulticast mode [ 212.278863][T10253] Call Trace: [ 212.278877][T10253] [ 212.278887][T10253] dump_stack_lvl+0x241/0x360 [ 212.278927][T10253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.278958][T10253] ? __pfx__printk+0x10/0x10 [ 212.278989][T10253] ? __pfx_lock_release+0x10/0x10 [ 212.279041][T10253] should_fail_ex+0x3b0/0x4e0 [ 212.279070][T10253] _copy_from_user+0x2f/0xc0 [ 212.279113][T10253] copy_msghdr_from_user+0xae/0x680 [ 212.325021][T10253] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 212.330848][T10253] ? __fget_files+0x2a/0x410 [ 212.335466][T10253] ? __fget_files+0x2a/0x410 [ 212.340088][T10253] __sys_sendmsg+0x209/0x350 [ 212.344706][T10253] ? __pfx_lock_release+0x10/0x10 [ 212.349752][T10253] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.354893][T10253] ? __pfx_vfs_write+0x10/0x10 [ 212.359694][T10253] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.366045][T10253] ? do_syscall_64+0x100/0x230 [ 212.370856][T10253] ? do_syscall_64+0xb6/0x230 [ 212.375558][T10253] do_syscall_64+0xf3/0x230 [ 212.380081][T10253] ? clear_bhb_loop+0x35/0x90 [ 212.384767][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.390690][T10253] RIP: 0033:0x7f68b8985d29 [ 212.395115][T10253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.415167][T10253] RSP: 002b:00007f68b9701038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.423607][T10253] RAX: ffffffffffffffda RBX: 00007f68b8b75fa0 RCX: 00007f68b8985d29 [ 212.431589][T10253] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 212.439569][T10253] RBP: 00007f68b9701090 R08: 0000000000000000 R09: 0000000000000000 [ 212.447549][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.455548][T10253] R13: 0000000000000000 R14: 00007f68b8b75fa0 R15: 00007ffc36be6638 [ 212.463541][T10253] [ 212.486401][T10247] batadv2: entered allmulticast mode [ 212.493246][T10247] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 212.533943][T10247] bond2: (slave batadv2): making interface the new active one [ 212.541971][T10247] batadv2: entered promiscuous mode [ 212.553207][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'. [ 212.576452][T10247] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 213.276573][T10284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 213.425923][T10291] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 213.441082][T10291] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1110'. [ 213.541601][T10295] can: request_module (can-proto-3) failed. [ 215.054490][T10291] team0: entered promiscuous mode [ 215.059597][T10291] team_slave_0: entered promiscuous mode [ 215.066606][T10291] team_slave_1: entered promiscuous mode [ 215.072456][T10291] batadv0: entered promiscuous mode [ 215.249863][T10304] FAULT_INJECTION: forcing a failure. [ 215.249863][T10304] name failslab, interval 1, probability 0, space 0, times 1 [ 215.294880][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.1.1113 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 215.305712][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 215.315809][T10304] Call Trace: [ 215.319120][T10304] [ 215.322083][T10304] dump_stack_lvl+0x241/0x360 [ 215.326816][T10304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.332061][T10304] ? __pfx__printk+0x10/0x10 [ 215.336690][T10304] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 215.342712][T10304] ? __pfx___might_resched+0x10/0x10 [ 215.348034][T10304] should_fail_ex+0x3b0/0x4e0 [ 215.352728][T10304] should_failslab+0xac/0x100 [ 215.357419][T10304] kmem_cache_alloc_node_noprof+0x77/0x380 [ 215.363241][T10304] ? __alloc_skb+0x1c3/0x440 [ 215.367846][T10304] __alloc_skb+0x1c3/0x440 [ 215.372275][T10304] ? __pfx___alloc_skb+0x10/0x10 [ 215.377242][T10304] ? netlink_autobind+0xd6/0x2f0 [ 215.382278][T10304] ? netlink_autobind+0x2b0/0x2f0 [ 215.387317][T10304] netlink_sendmsg+0x638/0xcb0 [ 215.392094][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.397396][T10304] ? aa_sock_msg_perm+0x91/0x160 [ 215.402341][T10304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.407632][T10304] __sock_sendmsg+0x221/0x270 [ 215.412317][T10304] ____sys_sendmsg+0x52a/0x7e0 [ 215.417101][T10304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.422404][T10304] ? __fget_files+0x2a/0x410 [ 215.427009][T10304] ? __fget_files+0x2a/0x410 [ 215.431627][T10304] __sys_sendmsg+0x269/0x350 [ 215.436239][T10304] ? __pfx_lock_release+0x10/0x10 [ 215.441277][T10304] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.446407][T10304] ? __pfx_vfs_write+0x10/0x10 [ 215.451203][T10304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.457541][T10304] ? do_syscall_64+0x100/0x230 [ 215.462321][T10304] ? do_syscall_64+0xb6/0x230 [ 215.467012][T10304] do_syscall_64+0xf3/0x230 [ 215.471530][T10304] ? clear_bhb_loop+0x35/0x90 [ 215.476217][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.482135][T10304] RIP: 0033:0x7f68b8985d29 [ 215.486558][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.506174][T10304] RSP: 002b:00007f68b9701038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.514600][T10304] RAX: ffffffffffffffda RBX: 00007f68b8b75fa0 RCX: 00007f68b8985d29 [ 215.522578][T10304] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 215.530554][T10304] RBP: 00007f68b9701090 R08: 0000000000000000 R09: 0000000000000000 [ 215.538529][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.546505][T10304] R13: 0000000000000000 R14: 00007f68b8b75fa0 R15: 00007ffc36be6638 [ 215.554501][T10304] [ 216.238433][T10328] lo speed is unknown, defaulting to 1000 [ 216.366430][T10332] ªªªªª: renamed from bridge0 (while UP) [ 216.385998][T10332] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 216.393281][T10332] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 216.404435][T10332] ªªªªª: entered promiscuous mode [ 216.409606][T10332] ªªªªª: entered allmulticast mode [ 216.588470][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'. [ 216.647122][T10336] lo speed is unknown, defaulting to 1000 [ 216.884399][T10343] netlink: 'syz.2.1126': attribute type 30 has an invalid length. [ 217.132058][T10349] netlink: 'syz.0.1127': attribute type 10 has an invalid length. [ 217.159742][T10328] lo speed is unknown, defaulting to 1000 [ 217.161698][T10349] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1127'. [ 217.194858][T10349] bridge0: entered promiscuous mode [ 217.510590][T10359] net veth1_virt_wifi €Â: renamed from virt_wifi0 (while UP) [ 217.522927][T10361] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 217.700073][T10359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.709270][T10359] bond3: (slave bond4): making interface the new active one [ 217.719190][T10359] bond3: (slave bond4): Enslaving as an active interface with an up link [ 218.556202][ T5886] IPVS: starting estimator thread 0... [ 218.602153][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 218.619823][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 218.675002][T10375] IPVS: using max 18 ests per chain, 43200 per kthread [ 219.192408][T10384] tipc: Enabling of bearer rejected, already enabled [ 219.456596][T10394] FAULT_INJECTION: forcing a failure. [ 219.456596][T10394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.481861][T10395] tipc: Enabled bearer , priority 0 [ 219.489008][T10394] CPU: 1 UID: 0 PID: 10394 Comm: syz.3.1140 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 219.499828][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 219.509925][T10394] Call Trace: [ 219.513238][T10394] [ 219.516209][T10394] dump_stack_lvl+0x241/0x360 [ 219.520966][T10394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.526213][T10394] ? __pfx__printk+0x10/0x10 [ 219.530863][T10394] ? __pfx_lock_release+0x10/0x10 [ 219.535936][T10394] should_fail_ex+0x3b0/0x4e0 [ 219.540696][T10394] _copy_from_iter+0x1e9/0x1c20 [ 219.545592][T10394] ? __virt_addr_valid+0x183/0x530 [ 219.550751][T10394] ? __alloc_skb+0x28f/0x440 [ 219.555459][T10394] ? __pfx__copy_from_iter+0x10/0x10 [ 219.560797][T10394] ? __virt_addr_valid+0x183/0x530 [ 219.565943][T10394] ? __virt_addr_valid+0x183/0x530 [ 219.571096][T10394] ? __virt_addr_valid+0x45f/0x530 [ 219.576267][T10394] ? __phys_addr_symbol+0x2f/0x70 [ 219.581342][T10394] ? __check_object_size+0x47a/0x730 [ 219.586669][T10394] netlink_sendmsg+0x73d/0xcb0 [ 219.591491][T10394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.596822][T10394] ? aa_sock_msg_perm+0x91/0x160 [ 219.601796][T10394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.607115][T10394] __sock_sendmsg+0x221/0x270 [ 219.611825][T10394] ____sys_sendmsg+0x52a/0x7e0 [ 219.616639][T10394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.621975][T10394] ? __fget_files+0x2a/0x410 [ 219.626617][T10394] ? __fget_files+0x2a/0x410 [ 219.631264][T10394] __sys_sendmsg+0x269/0x350 [ 219.635889][T10394] ? __pfx_lock_release+0x10/0x10 [ 219.640949][T10394] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.646101][T10394] ? __pfx_vfs_write+0x10/0x10 [ 219.650920][T10394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.657275][T10394] ? do_syscall_64+0x100/0x230 [ 219.662068][T10394] ? do_syscall_64+0xb6/0x230 [ 219.666777][T10394] do_syscall_64+0xf3/0x230 [ 219.671311][T10394] ? clear_bhb_loop+0x35/0x90 [ 219.676005][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.681919][T10394] RIP: 0033:0x7f9661f85d29 [ 219.686348][T10394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.705964][T10394] RSP: 002b:00007f965fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.714407][T10394] RAX: ffffffffffffffda RBX: 00007f9662175fa0 RCX: 00007f9661f85d29 [ 219.722387][T10394] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 219.730363][T10394] RBP: 00007f965fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.738348][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.746351][T10394] R13: 0000000000000000 R14: 00007f9662175fa0 R15: 00007fff55029d08 [ 219.754354][T10394] [ 219.793736][T10396] syzkaller0: entered promiscuous mode [ 219.799388][T10396] syzkaller0: entered allmulticast mode [ 219.805682][T10396] tipc: Resetting bearer [ 220.000264][ T3503] tipc: Resetting bearer [ 220.008028][T10393] tipc: Resetting bearer [ 221.721976][T10393] tipc: Disabling bearer [ 221.730431][T10400] netlink: 798 bytes leftover after parsing attributes in process `syz.3.1142'. [ 221.753542][T10407] veth0_virt_wifi: entered promiscuous mode [ 221.762076][T10407] veth0_virt_wifi: left promiscuous mode [ 221.833143][T10411] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 221.932601][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 221.976535][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 222.073697][T10422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1149'. [ 222.611002][T10445] tipc: Enabling of bearer rejected, already enabled [ 222.942689][T10460] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 223.258624][ T8558] IPVS: stop unused estimator thread 0... [ 223.633543][T10491] netlink: 'syz.0.1167': attribute type 10 has an invalid length. [ 223.659427][T10488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 223.686348][T10491] syz_tun: entered promiscuous mode [ 223.709612][T10491] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.751577][T10483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1167'. [ 223.811477][T10496] tipc: Enabling of bearer rejected, already enabled [ 224.088402][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 224.718645][T10522] netlink: 'syz.2.1179': attribute type 13 has an invalid length. [ 224.863700][T10528] tipc: Enabling of bearer rejected, already enabled [ 224.886642][T10526] netlink: zone id is out of range [ 224.893657][T10526] netlink: zone id is out of range [ 224.905666][T10526] netlink: zone id is out of range [ 224.912575][T10526] netlink: zone id is out of range [ 224.931926][T10526] netlink: zone id is out of range [ 224.941447][T10526] netlink: zone id is out of range [ 224.951331][T10526] netlink: set zone limit has 8 unknown bytes [ 225.089346][T10531] lo speed is unknown, defaulting to 1000 [ 225.482804][T10554] xt_recent: Unsupported userspace flags (00000042) [ 226.182076][T10569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.198711][T10569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.241314][T10572] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 226.276592][T10569] batadv0 (unregistering): left promiscuous mode [ 226.282966][T10569] batadv0 (unregistering): left allmulticast mode [ 226.297691][T10569] team0: Port device batadv0 removed [ 226.373945][T10575] tipc: Enabled bearer , priority 0 [ 226.437195][T10575] syzkaller0: entered promiscuous mode [ 226.442739][T10575] syzkaller0: entered allmulticast mode [ 226.456264][T10578] FAULT_INJECTION: forcing a failure. [ 226.456264][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.456591][T10575] tipc: Resetting bearer [ 226.473986][T10578] CPU: 1 UID: 0 PID: 10578 Comm: syz.2.1195 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 226.486065][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.496163][T10578] Call Trace: [ 226.499472][T10578] [ 226.502429][T10578] dump_stack_lvl+0x241/0x360 [ 226.507136][T10578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.512371][T10578] ? __pfx__printk+0x10/0x10 [ 226.516967][T10578] ? __pfx_lock_release+0x10/0x10 [ 226.521998][T10578] should_fail_ex+0x3b0/0x4e0 [ 226.526698][T10578] _copy_from_iter+0x424/0x1c20 [ 226.531596][T10578] ? __local_bh_enable_ip+0x168/0x200 [ 226.537028][T10578] ? __pfx__copy_from_iter+0x10/0x10 [ 226.542331][T10578] ? __netdev_alloc_frag_align+0x1a2/0x1f0 [ 226.548155][T10578] ? __virt_addr_valid+0x183/0x530 [ 226.553269][T10578] ? __virt_addr_valid+0x183/0x530 [ 226.558398][T10578] ? __virt_addr_valid+0x45f/0x530 [ 226.563547][T10578] ? __phys_addr_symbol+0x2f/0x70 [ 226.568627][T10578] ? __check_object_size+0x47a/0x730 [ 226.573963][T10578] ? __netdev_alloc_frag_align+0x1a2/0x1f0 [ 226.579819][T10578] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 226.585607][T10578] ? iov_iter_single_seg_count+0x87/0x300 [ 226.591353][T10578] tun_get_user+0x193c/0x48a0 [ 226.596071][T10578] ? __pfx_tun_get_user+0x10/0x10 [ 226.601122][T10578] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 226.606590][T10578] ? tun_get+0x1e/0x2f0 [ 226.610781][T10578] ? __pfx_lock_release+0x10/0x10 [ 226.615827][T10578] ? tun_get+0x1e/0x2f0 [ 226.620002][T10578] ? tun_get+0x27d/0x2f0 [ 226.624271][T10578] tun_chr_write_iter+0x10d/0x1f0 [ 226.629347][T10578] do_iter_readv_writev+0x600/0x880 [ 226.634579][T10578] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 226.640311][T10578] ? bpf_lsm_file_permission+0x9/0x10 [ 226.645698][T10578] ? security_file_permission+0x74/0x280 [ 226.651347][T10578] ? rw_verify_area+0x1c3/0x6f0 [ 226.656208][T10578] vfs_writev+0x376/0xba0 [ 226.660569][T10578] ? __pfx_lock_acquire+0x10/0x10 [ 226.665601][T10578] ? __pfx_vfs_writev+0x10/0x10 [ 226.670473][T10578] ? __pfx_vfs_write+0x10/0x10 [ 226.675254][T10578] ? __fget_files+0x2a/0x410 [ 226.679885][T10578] ? __fget_files+0x395/0x410 [ 226.684602][T10578] ? __fget_files+0x2a/0x410 [ 226.689206][T10578] do_writev+0x1b6/0x360 [ 226.693480][T10578] ? __pfx_do_writev+0x10/0x10 [ 226.698281][T10578] ? do_syscall_64+0x100/0x230 [ 226.703057][T10578] ? do_syscall_64+0xb6/0x230 [ 226.707744][T10578] do_syscall_64+0xf3/0x230 [ 226.712258][T10578] ? clear_bhb_loop+0x35/0x90 [ 226.716940][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.722839][T10578] RIP: 0033:0x7f72f7385d29 [ 226.727269][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.747004][T10578] RSP: 002b:00007f72f8215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 226.755474][T10578] RAX: ffffffffffffffda RBX: 00007f72f7576080 RCX: 00007f72f7385d29 [ 226.763474][T10578] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000003 [ 226.771449][T10578] RBP: 00007f72f8215090 R08: 0000000000000000 R09: 0000000000000000 [ 226.779444][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.787448][T10578] R13: 0000000000000001 R14: 00007f72f7576080 R15: 00007fff47c7a7d8 [ 226.795603][T10578] [ 226.829418][T10574] tipc: Resetting bearer [ 227.046391][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 228.856295][T10574] tipc: Disabling bearer [ 228.875500][T10586] tipc: Enabling of bearer rejected, already enabled [ 228.901601][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 228.924944][T10606] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 229.033813][T10608] syzkaller0: entered promiscuous mode [ 229.057555][T10608] syzkaller0: entered allmulticast mode [ 229.314580][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1200'. [ 229.503083][T10631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1203'. [ 230.975386][T10624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1203'. [ 230.990784][T10624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1203'. [ 231.341017][T10642] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.362759][T10645] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 231.550724][T10655] FAULT_INJECTION: forcing a failure. [ 231.550724][T10655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.583668][T10642] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.609294][T10655] CPU: 1 UID: 0 PID: 10655 Comm: syz.3.1210 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 231.620142][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.630238][T10655] Call Trace: [ 231.633527][T10655] [ 231.636486][T10655] dump_stack_lvl+0x241/0x360 [ 231.641214][T10655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.646465][T10655] ? __pfx__printk+0x10/0x10 [ 231.651112][T10655] ? __pfx_lock_release+0x10/0x10 [ 231.656187][T10655] should_fail_ex+0x3b0/0x4e0 [ 231.660899][T10655] _copy_from_iter+0x424/0x1c20 [ 231.665809][T10655] ? __local_bh_enable_ip+0x168/0x200 [ 231.671230][T10655] ? __pfx__copy_from_iter+0x10/0x10 [ 231.676553][T10655] ? __netdev_alloc_frag_align+0x1a2/0x1f0 [ 231.682404][T10655] ? __virt_addr_valid+0x183/0x530 [ 231.687567][T10655] ? __virt_addr_valid+0x183/0x530 [ 231.692716][T10655] ? __virt_addr_valid+0x45f/0x530 [ 231.697874][T10655] ? __phys_addr_symbol+0x2f/0x70 [ 231.702998][T10655] ? __check_object_size+0x47a/0x730 [ 231.708350][T10655] ? __netdev_alloc_frag_align+0x1a2/0x1f0 [ 231.714196][T10655] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 231.719963][T10655] ? iov_iter_single_seg_count+0x87/0x300 [ 231.725731][T10655] tun_get_user+0x193c/0x48a0 [ 231.730479][T10655] ? __pfx_tun_get_user+0x10/0x10 [ 231.735581][T10655] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 231.741100][T10655] ? tun_get+0x1e/0x2f0 [ 231.745313][T10655] ? __pfx_lock_release+0x10/0x10 [ 231.750389][T10655] ? tun_get+0x1e/0x2f0 [ 231.754583][T10655] ? tun_get+0x27d/0x2f0 [ 231.758872][T10655] tun_chr_write_iter+0x10d/0x1f0 [ 231.763943][T10655] do_iter_readv_writev+0x600/0x880 [ 231.769189][T10655] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 231.774953][T10655] ? bpf_lsm_file_permission+0x9/0x10 [ 231.780364][T10655] ? security_file_permission+0x74/0x280 [ 231.786043][T10655] ? rw_verify_area+0x1c3/0x6f0 [ 231.790944][T10655] vfs_writev+0x376/0xba0 [ 231.795326][T10655] ? __pfx_lock_acquire+0x10/0x10 [ 231.800394][T10655] ? __pfx_vfs_writev+0x10/0x10 [ 231.805318][T10655] ? __pfx_vfs_write+0x10/0x10 [ 231.810124][T10655] ? __fget_files+0x2a/0x410 [ 231.814780][T10655] ? __fget_files+0x395/0x410 [ 231.819503][T10655] ? __fget_files+0x2a/0x410 [ 231.824147][T10655] do_writev+0x1b6/0x360 [ 231.828443][T10655] ? __pfx_do_writev+0x10/0x10 [ 231.833254][T10655] ? do_syscall_64+0x100/0x230 [ 231.838065][T10655] ? do_syscall_64+0xb6/0x230 [ 231.842789][T10655] do_syscall_64+0xf3/0x230 [ 231.847346][T10655] ? clear_bhb_loop+0x35/0x90 [ 231.852087][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.858028][T10655] RIP: 0033:0x7f9661f85d29 [ 231.862480][T10655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.882167][T10655] RSP: 002b:00007f965fdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 231.890632][T10655] RAX: ffffffffffffffda RBX: 00007f9662176080 RCX: 00007f9661f85d29 [ 231.898644][T10655] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000003 [ 231.906656][T10655] RBP: 00007f965fdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 231.914663][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.922671][T10655] R13: 0000000000000000 R14: 00007f9662176080 R15: 00007fff55029d08 [ 231.930710][T10655] [ 231.967367][T10653] tipc: Enabled bearer , priority 0 [ 232.030773][T10659] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 232.125900][T10656] syzkaller0: entered promiscuous mode [ 232.131425][T10656] syzkaller0: entered allmulticast mode [ 232.149652][T10656] tipc: Resetting bearer [ 232.157609][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 232.215443][T10642] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.260895][T10666] syzkaller0: entered promiscuous mode [ 232.267423][T10666] syzkaller0: entered allmulticast mode [ 232.273646][T10678] netlink: 'syz.1.1213': attribute type 5 has an invalid length. [ 232.306630][T10652] tipc: Resetting bearer [ 233.024744][ T5925] tipc: Node number set to 1596850279 [ 234.026019][T10652] tipc: Disabling bearer [ 234.054985][T10642] bond0: (slave netdevsim0): Releasing backup interface [ 234.063816][T10642] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.692620][T10685] netlink: 'syz.0.1215': attribute type 21 has an invalid length. [ 235.704495][T10685] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1215'. [ 235.713609][T10685] netlink: 'syz.0.1215': attribute type 4 has an invalid length. [ 235.721525][T10685] netlink: 'syz.0.1215': attribute type 3 has an invalid length. [ 235.744242][T10685] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1215'. [ 235.910469][T10695] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 235.932778][T10642] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.962967][T10642] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.036957][T10695] bond4: entered promiscuous mode [ 236.042357][T10695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.102928][T10642] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.143378][T10642] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.273017][T10713] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 236.289115][T10713] netlink: 'syz.4.1222': attribute type 2 has an invalid length. [ 236.360288][T10707] syzkaller0: entered promiscuous mode [ 236.375984][T10707] syzkaller0: entered allmulticast mode [ 238.720843][T10719] bridge0: port 1(gretap0) entered blocking state [ 238.728314][T10719] bridge0: port 1(gretap0) entered disabled state [ 238.735121][T10719] gretap0: entered allmulticast mode [ 238.741942][T10719] gretap0: entered promiscuous mode [ 238.750544][T10720] gretap0: left allmulticast mode [ 238.757076][T10720] gretap0: left promiscuous mode [ 238.762339][T10720] bridge0: port 1(gretap0) entered disabled state [ 238.796588][T10736] tipc: Enabled bearer , priority 0 [ 238.947309][T10736] tipc: Disabling bearer [ 238.990096][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1233'. [ 238.999675][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 239.223048][T10768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1235'. [ 239.529905][T10778] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 239.853703][T10794] tipc: Enabled bearer , priority 0 [ 240.043103][T10794] syzkaller0: entered promiscuous mode [ 240.049227][T10808] netlink: 'syz.2.1243': attribute type 39 has an invalid length. [ 240.090172][T10794] syzkaller0: entered allmulticast mode [ 240.128845][T10794] tipc: Resetting bearer [ 240.291302][T10793] tipc: Resetting bearer [ 242.102083][T10793] tipc: Disabling bearer [ 242.120718][T10816] lo speed is unknown, defaulting to 1000 [ 242.294362][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 243.264690][T10865] netlink: 'syz.1.1258': attribute type 10 has an invalid length. [ 243.305186][T10865] batman_adv: batadv0: Adding interface: team0 [ 243.311397][T10865] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.344718][T10865] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 243.368701][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1260'. [ 243.425781][T10866] dvmrp8: entered allmulticast mode [ 243.442779][T10870] tipc: Enabled bearer , priority 0 [ 243.531120][T10874] syzkaller0: entered promiscuous mode [ 243.544085][T10874] syzkaller0: entered allmulticast mode [ 243.550337][T10874] tipc: Resetting bearer [ 243.566271][T10867] dvmrp8: left allmulticast mode [ 243.631058][T10869] tipc: Resetting bearer [ 243.711723][T10887] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 243.936355][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1266'. [ 244.122475][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1266'. [ 244.483748][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 245.822938][T10869] tipc: Disabling bearer [ 245.831344][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 245.862252][T10903] lo speed is unknown, defaulting to 1000 [ 245.968103][T10914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1270'. [ 246.126332][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 246.294298][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 246.924267][T10955] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 247.343301][T10962] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1283'. [ 247.691796][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1285'. [ 247.707850][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1285'. [ 247.985179][T10988] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 248.018585][T10988] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1291'. [ 248.168716][T11000] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.125137][T11030] __nla_validate_parse: 1 callbacks suppressed [ 249.125160][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 249.602870][T11051] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1307'. [ 249.624555][T11058] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 249.829618][T11067] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1311'. [ 249.957109][T11071] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 250.104425][ T5852] Bluetooth: hci4: link tx timeout [ 250.109688][ T5852] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 250.232183][T11087] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 250.327409][T11095] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1313'. [ 250.418163][T11087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.643962][T11103] netlink: zone id is out of range [ 250.664267][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1317'. [ 251.134856][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 252.126064][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 252.266956][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 252.437596][ T9083] ------------[ cut here ]------------ [ 252.443132][ T9083] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 252.443286][ T9083] WARNING: CPU: 1 PID: 9083 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 252.459035][ T9083] Modules linked in: [ 252.462964][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 252.474180][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.484469][ T9083] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 252.489824][ T9083] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 252.510033][ T9083] RSP: 0018:ffffc90004277920 EFLAGS: 00010246 [ 252.513088][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 252.516381][ T9083] RAX: 203ab523683a3700 RBX: ffff888059286cb0 RCX: ffff88802edb3c00 [ 252.516406][ T9083] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 252.516421][ T9083] RBP: ffffc90004277ab0 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 252.516439][ T9083] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 252.516455][ T9083] R13: 0000000000000000 R14: 1ffff9200084ef38 R15: dffffc0000000000 [ 252.516472][ T9083] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 252.516491][ T9083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.516507][ T9083] CR2: 00000000203b5000 CR3: 0000000024c9e000 CR4: 00000000003526f0 [ 252.516526][ T9083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.516540][ T9083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.516554][ T9083] Call Trace: [ 252.516562][ T9083] [ 252.516572][ T9083] ? __warn+0x165/0x4d0 [ 252.516601][ T9083] ? __mutex_lock+0xdac/0xee0 [ 252.516633][ T9083] ? report_bug+0x2b3/0x500 [ 252.516657][ T9083] ? __mutex_lock+0xdac/0xee0 [ 252.612700][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1329'. [ 252.614395][ T9083] ? handle_bug+0x60/0x90 [ 252.614436][ T9083] ? exc_invalid_op+0x1a/0x50 [ 252.614469][ T9083] ? asm_exc_invalid_op+0x1a/0x20 [ 252.614508][ T9083] ? __warn_printk+0x292/0x360 [ 252.614542][ T9083] ? __mutex_lock+0xdac/0xee0 [ 252.614588][ T9083] ? free_netdev+0x2d9/0x610 [ 252.614621][ T9083] ? __pfx___mutex_lock+0x10/0x10 [ 252.614651][ T9083] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 252.614690][ T9083] ? dev_addr_check+0x6f/0x240 [ 252.614718][ T9083] ? dev_addr_flush+0x192/0x210 [ 252.614747][ T9083] free_netdev+0x2d9/0x610 [ 252.614784][ T9083] netdev_run_todo+0xf21/0x10d0 [ 252.614828][ T9083] ? __pfx_netdev_run_todo+0x10/0x10 [ 252.614857][ T9083] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 252.712560][ T9083] ? down_write+0x18c/0x220 [ 252.717422][ T9083] ? __pfx_down_write+0x10/0x10 [ 252.722336][ T9083] bnep_session+0x2e3c/0x3030 [ 252.727159][ T9083] ? __pfx_bnep_session+0x10/0x10 [ 252.732226][ T9083] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 252.738926][ T9083] ? __pfx_woken_wake_function+0x10/0x10 [ 252.744656][ T9083] ? __kthread_parkme+0x169/0x1d0 [ 252.749731][ T9083] ? __pfx_bnep_session+0x10/0x10 [ 252.754832][ T9083] kthread+0x2f0/0x390 [ 252.758948][ T9083] ? __pfx_bnep_session+0x10/0x10 [ 252.764673][ T9083] ? __pfx_kthread+0x10/0x10 [ 252.769310][ T9083] ret_from_fork+0x4b/0x80 [ 252.773929][ T9083] ? __pfx_kthread+0x10/0x10 [ 252.778588][ T9083] ret_from_fork_asm+0x1a/0x30 [ 252.783400][ T9083] [ 252.786481][ T9083] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.793786][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 252.804653][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.814728][ T9083] Call Trace: [ 252.818028][ T9083] [ 252.820972][ T9083] dump_stack_lvl+0x241/0x360 [ 252.825682][ T9083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.830914][ T9083] ? __pfx__printk+0x10/0x10 [ 252.835538][ T9083] ? _printk+0xd5/0x120 [ 252.839728][ T9083] ? __init_begin+0x41000/0x41000 [ 252.844811][ T9083] ? vscnprintf+0x5d/0x90 [ 252.849170][ T9083] panic+0x349/0x880 [ 252.853090][ T9083] ? __warn+0x174/0x4d0 [ 252.857276][ T9083] ? __pfx_panic+0x10/0x10 [ 252.861718][ T9083] ? ret_from_fork_asm+0x1a/0x30 [ 252.866650][ T9083] __warn+0x344/0x4d0 [ 252.870632][ T9083] ? __mutex_lock+0xdac/0xee0 [ 252.875315][ T9083] report_bug+0x2b3/0x500 [ 252.879647][ T9083] ? __mutex_lock+0xdac/0xee0 [ 252.884327][ T9083] handle_bug+0x60/0x90 [ 252.888503][ T9083] exc_invalid_op+0x1a/0x50 [ 252.893016][ T9083] asm_exc_invalid_op+0x1a/0x20 [ 252.897878][ T9083] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 252.903176][ T9083] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 252.922784][ T9083] RSP: 0018:ffffc90004277920 EFLAGS: 00010246 [ 252.928857][ T9083] RAX: 203ab523683a3700 RBX: ffff888059286cb0 RCX: ffff88802edb3c00 [ 252.936829][ T9083] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 252.944817][ T9083] RBP: ffffc90004277ab0 R08: ffffffff81602ac2 R09: 1ffff110170e519a [ 252.952792][ T9083] R10: dffffc0000000000 R11: ffffed10170e519b R12: 0000000000000000 [ 252.960772][ T9083] R13: 0000000000000000 R14: 1ffff9200084ef38 R15: dffffc0000000000 [ 252.968753][ T9083] ? __warn_printk+0x292/0x360 [ 252.973536][ T9083] ? free_netdev+0x2d9/0x610 [ 252.978133][ T9083] ? __pfx___mutex_lock+0x10/0x10 [ 252.983168][ T9083] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 252.988465][ T9083] ? dev_addr_check+0x6f/0x240 [ 252.993229][ T9083] ? dev_addr_flush+0x192/0x210 [ 252.998084][ T9083] free_netdev+0x2d9/0x610 [ 253.002511][ T9083] netdev_run_todo+0xf21/0x10d0 [ 253.007367][ T9083] ? __pfx_netdev_run_todo+0x10/0x10 [ 253.012657][ T9083] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 253.018908][ T9083] ? down_write+0x18c/0x220 [ 253.023420][ T9083] ? __pfx_down_write+0x10/0x10 [ 253.028288][ T9083] bnep_session+0x2e3c/0x3030 [ 253.032989][ T9083] ? __pfx_bnep_session+0x10/0x10 [ 253.038034][ T9083] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 253.044379][ T9083] ? __pfx_woken_wake_function+0x10/0x10 [ 253.050055][ T9083] ? __kthread_parkme+0x169/0x1d0 [ 253.055113][ T9083] ? __pfx_bnep_session+0x10/0x10 [ 253.060169][ T9083] kthread+0x2f0/0x390 [ 253.064262][ T9083] ? __pfx_bnep_session+0x10/0x10 [ 253.069300][ T9083] ? __pfx_kthread+0x10/0x10 [ 253.073912][ T9083] ret_from_fork+0x4b/0x80 [ 253.078345][ T9083] ? __pfx_kthread+0x10/0x10 [ 253.082952][ T9083] ret_from_fork_asm+0x1a/0x30 [ 253.087733][ T9083] [ 253.091103][ T9083] Kernel Offset: disabled [ 253.095451][ T9083] Rebooting in 86400 seconds..