last executing test programs: 8.161937156s ago: executing program 4 (id=1284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4084895) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 7.861600644s ago: executing program 4 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r12) sendmsg$NLBL_CALIPSO_C_LISTALL(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r13, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r13, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r15, r16, 0x100000af5, 0x0) 7.046753662s ago: executing program 2 (id=1295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40, 0x7, 0x48, 0x1}, {0x28, 0x4, 0x76, 0xfffff038}, {0x6, 0x25, 0x3, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 6.892856465s ago: executing program 4 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x1, 0x4}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f00000001c0), 0x38, 0x0, 0x0, 0x1}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400030008000300", @ANYRES32=r6, @ANYBLOB="050033"], 0x2c}}, 0x80) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001900010000000000fedbdf251c"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000014001680100001800c000700090000e4060000000500110009"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) select(0x40, &(0x7f0000000000)={0x9, 0x1, 0x7fffffffffffffff, 0x9, 0x3c, 0x0, 0x80000000, 0x4}, &(0x7f0000000040)={0x100000001, 0x9, 0x9, 0x6, 0x81b, 0x4, 0x2, 0x8}, &(0x7f0000000080)={0x6, 0xd, 0x7, 0x7, 0x2, 0x10, 0x7, 0x7d5}, &(0x7f00000000c0)={0x0, 0xea60}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x1, 0x4}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f00000001c0), 0x38, 0x0, 0x0, 0x1}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400030008000300", @ANYRES32=r6, @ANYBLOB="050033"], 0x2c}}, 0x80) (async) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001900010000000000fedbdf251c"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000014001680100001800c000700090000e4060000000500110009"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) select(0x40, &(0x7f0000000000)={0x9, 0x1, 0x7fffffffffffffff, 0x9, 0x3c, 0x0, 0x80000000, 0x4}, &(0x7f0000000040)={0x100000001, 0x9, 0x9, 0x6, 0x81b, 0x4, 0x2, 0x8}, &(0x7f0000000080)={0x6, 0xd, 0x7, 0x7, 0x2, 0x10, 0x7, 0x7d5}, &(0x7f00000000c0)={0x0, 0xea60}) (async) 6.877641805s ago: executing program 2 (id=1299): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x2, 0x7af8, 0x8, 0xe}, 0x8) r1 = socket(0xd69f7c0fa273dcb9, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x4c, 0x48, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, r2, 0xa60}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008008}, 0x4010) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0xec, "72434de2e7a3e268324a5adefa64d5bd10f8ae578ba1c01497377c41c300b808fa41f5bcf57ef18e4b3a8bec09e6cc90027d13aa288b83dde3056943a3bbc30c59b2867c4df6eb135a9ce4b4cf2d6569f52eb8308253014d3459432ef3b94bcfa1158e016928354e70a2dbf489aceb32af786af96e18180e8ea674842b18f473930077f4ff507a05d01d2272fa8c0602f486d84937e78415e5c4ac805f21a1794ff1b7defe7a8ea5623096b74dc67ae54b61cbb72b8ef49a26021c332824c502256788a769786330b9d27c682c255dabfbfaa3517ffa64c312bd19934a5eef0c0a0444d7f12f2541d7130b0b"}, &(0x7f00000003c0)=0x110) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202080, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast2, 0x4}}, 0x998, 0x7}, 0x90) syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r5 = accept4(r0, 0x0, &(0x7f0000000700), 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000740)={{0x2, 0x4e23, @multicast1}, {0x30eccd0a3843fcb3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, 0x10, {0x2, 0x4e22, @local}, 'batadv0\x00'}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000007c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000800)="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", 0xfd}, {&(0x7f0000000900)="006f4ba85f18c696391325a257fdbd5275853a27989984cc6d277ef2d7dabea44640053e2944a98aabdfe9d958f1d309a513b1cf83f837bfe50395a7", 0x3c}], 0x2, &(0x7f0000000980)=[@rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x1, 0x4e, 0x0, [@mcast1, @empty]}}}, @dstopts={{0xd0, 0x29, 0x37, {0x5c, 0x16, '\x00', [@generic={0x6, 0xa8, "d3dee2eef9eeaf77b178bf660a71baa2f5672ce78f190bbc21e6971cd88891655df29ecdb50adbf0be407e1efc928470c815c35a4b68c7b01cf20046556ead2a55cb85bdcd5aa527e6907f8493b6beefeb0afef545fc987a21f41a9f263869272b22c7da4fc838ea09113c357c45c58399ef084f8f1129cc7b72ae82b5d667f9832df5a05856b8d8ce7c435c1df6f3d50b24fd84f04adf620ab9dc7ec0658b1aad226ff37ecd05fd"}, @jumbo={0xc2, 0x4, 0xff}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r2}}}], 0x148}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x15c, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xec, @private1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffbff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9b4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @empty, 0x7b0f}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x810}, 0x44810) r7 = socket(0x3, 0xa, 0x9) r8 = accept4(r7, &(0x7f0000000dc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000e40)=0x80, 0x80000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x8}, {0xffe0, 0x1001d}, {0xfff1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x8004) bind$inet(r0, &(0x7f0000000f80)={0x2, 0x4e22, @private=0xa010101}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x3b, 0x10, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x72a6}, [@map_fd={0x18, 0x6, 0x1, 0x0, r9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000001080)='syzkaller\x00', 0x8, 0x6f, &(0x7f00000010c0)=""/111, 0x41000, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0x100, 0x24, 0xfffffff6}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000011c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, r3, 0xffffffffffffffff], &(0x7f0000001200)=[{0x3, 0x2, 0x8, 0x1}, {0x2, 0x1, 0xa, 0x6}, {0x4, 0x4, 0x9, 0x4}, {0x4, 0x5, 0xf, 0x7}, {0x2, 0x1, 0x4, 0x7}, {0x0, 0x1, 0x9, 0xd}, {0x4, 0x5, 0x4, 0x6}], 0x10, 0x7fff}, 0x94) sendmsg$nl_route(r1, &(0x7f0000001440)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)=@newnexthop={0xa4, 0x68, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x9}, [@NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xd46}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}, @NHA_GROUP={0x3c, 0x2, [{0x1, 0x9}, {0x1, 0x10}, {0x1, 0x7}, {0x1, 0x87}, {0x0, 0xc}, {0x1, 0x8}, {0x2, 0xbf}]}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r10}}}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004011}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001500)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r11, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0xa4, r12, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xfb, 0x7f}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x69}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff86}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x53}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6.741598997s ago: executing program 2 (id=1301): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900042300fe880000000000000000040000000001fe8000000000000000000000000000aa042088be0000000000000800000086dd080088be0000000010005300000100000000000000080022eb000000002000000002000000000000000000a75ae3790aeb6b7c92"], 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 6.601146681s ago: executing program 4 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000200)) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0x3ff}, 0x1c) bind$rxrpc(r3, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x401}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFT_MSG_NEWSET={0x368, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_DESC={0x238, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9c62}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd392}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x412}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3bf4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5f8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5eb}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10000}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, @NFTA_SET_USERDATA={0xdb, 0xd, 0x1, 0x0, "34df02091204d9d54e260ac0c45dceb7cb1959d9072084ae2069aefee2bbc61a71b706ffe7d4809e8e41514bb6f83b757b69105f5adfb7c9e2d7d71cd80c6f5111520c7ad4411e9bcdee5492a3f67542ad0a39be36678d478498d9cf386fa0a707d95c898b62bcb47a650f14e24df0b25407eb592abf8817a75ca9305241c70720b05d459f4ce41d4fd1e9112ab053f09461962f0727b31e24e8171f24ad5e8f96471ef27af5f13e8d048d2827b81b5cc2a06e7f91d2485f2887b2e9ce3cd082cd7c5ac9008c6d7abf74dbfc680461186b086544353b8b"}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x450}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000080) 6.548682381s ago: executing program 2 (id=1305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, r3}, 0x14) sendto$inet6(r2, &(0x7f0000000000)="8000647dd38061ea", 0x8, 0x4004034, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) 6.345931612s ago: executing program 2 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10804000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xffbf) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00', 0x400}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10804000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xffbf) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x40) (async) 6.344124157s ago: executing program 4 (id=1308): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) socket$kcm(0x29, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @random="6c3e7d65df10"}) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @broadcast}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)={'pimreg\x00', 0x600}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000740)="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", &(0x7f0000000080)=@tcp=r9, 0x1}, 0x20) setsockopt$sock_attach_bpf(r7, 0x84, 0x8, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790020000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 4.622485122s ago: executing program 0 (id=1315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000300)="5766b1b82cf604d3748ee7d7000800", 0x10) shutdown(r7, 0x0) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="20df1100", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf251e00000008000300", @ANYRES32=0x0, @ANYBLOB="04002f80"], 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x64048080) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13, @ANYBLOB="2e8e3bef17b5d29cae241030e1becde344e1646b688ec43be80070dc98b1fc697605c389e81d580f9b6d18d4e8b1b01561afed54426e8633815403a8c8c07c494b35282342995240fed4781edc2bda875a2a542050bf92cfd087a84dc81a4ec60d37bf74fc8f260c136215ae2d91c439ddf2743126df10d2cdf11032f64fe25c806423045b6f055b0dbae4b48141f3430db0f1f7ac3e0ad5a4236eef48579a9ab67762af95eb097673458f0ab955b97b769938add0e227c39f10096e230e8e79abec2a66930bc0956dd7de9a69f2986fc7b909ef"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012021, 0x0) 3.829857828s ago: executing program 2 (id=1317): unshare(0x64000600) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) unshare(0x50700) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000030000180000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000842000/0x3000)=nil, 0x3000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, 0x0, 0x3d) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00', @ANYBLOB="21012cbd70000000000014000000", @ANYBLOB="060036", @ANYRES32=0x0], 0x2c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cdd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r0, 0xe2c52000) socket$inet(0x2, 0x5, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x18, 0x0, 0x8}, 0x28) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00), 0x0, 0x4c040) unshare(0x2c020400) 3.82047662s ago: executing program 4 (id=1318): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000e0000611075000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0xe0000000, 0xffffbff8, 0x20000008, 0x3f, 0x5]}, &(0x7f0000000000)=0x54) 3.634262374s ago: executing program 0 (id=1321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, 0x0, 0xc800) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'bond0\x00', 0x4000}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)}], 0x1, 0x1) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) listen(r7, 0x4) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x7}, {0xa664a0f1934bf58c, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffc}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000001a40)={0x0, 0x100000021, &(0x7f0000001a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="091f34ddf800ffdbdd252e000000b8bd57dc02d9b307738c4a59233462dffed15c2fc1fc11ecb607af019ebb913f6b472627481a2a36524d3ef10846eb77f0901644236f41778dbb007727197916abc8c77b25acc3b68464288a609dff4cebcd1aa69ac7fdaa464fc285de0b71e0d3e5a0a5ebe7d13a800dee0e9e"], 0x14}}, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r12, @ANYBLOB="be3cfd72180c5e3fc132942fd86acd5cd32c84e935d282cd92e28e0a1445883d731ff44cee3ecd4dc78dbe6179f2ea95ba1ea7066e5d3ffca6dbc5b0069dbe3e854cff0fc696cfeea47becbef27bde9fe32d8ea74a64f4549cb71aa7d844558959ec3649afec0bafdc76de4e83f9962ab3a69c6bd0", @ANYRESOCT=r7, @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYRES16=r13, @ANYRES32=r12, @ANYBLOB="000000ee00000000", @ANYRESOCT=r3, @ANYRESDEC=r11], 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x40090) (async) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.38483142s ago: executing program 0 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) syz_emit_ethernet(0x7c, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "5dba33", 0x0, 0x2f, 0xff, @empty, @mcast2, {[@routing={0x2f, 0x0, 0x2, 0xff, 0x0, [@mcast2, @remote, @private1, @loopback, @mcast1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x5], "20fb91ca1f6ef33bdb93220363731a6374b45c2b92acbb6200d6afdf874854c9bda7d1dcf9917df6c65145b30ae5aed29c8dc0e586d979777d0030852cfeee2ca98a7461018ea1e0c5f0721ca14791c3648cb19240c170eebe78f42d5f2c59ef098a7ede2c01b722375453f5498bbeebeb07258299730ea90948e1ce781c91017c14d37e1c9b12e5074063e4215b5a4be6892bd0939adbf3acb9ec21bda71711dd07a5a9512f14e30f729a9ad8c4e3e50f5ed75823df1ac42e33229ef75408002e3dd917d1a19e832e0b7bf4426ebf55ff58ffeb1ae17df948d6bb99584421601bbf5088a1733886b094b9720cdf4a5df82ac4f5b5a2"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x7, 0x1000, 0xa], "89cbb0a123ec6edbaa4b497893cfe94e0fb5bf8d879d97e54c949e685ee9d76ba33bae1550377b17983720660349"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x7fff, 0x3], "bcacda403c250e7831a8a1f2c9d1eecbff849a9344d34370a8ce1a575d639c11d4248151d0b8be843cff18ca00d7aec87b3daafaaeda85266d75fe08bf13f386df2e36d46dc3e295cbec195ec07336291520c5d5564dc5c67739dc5821c9cf9f765b87b9c41a294f2bbc97ee42c54387a5a7489635d464a4f38dcb"}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x40, 0x2, 0x1, 0x2, 0x4, 0x6}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x8}, 0x2, {0x0, 0x9, 0x3, 0x1d, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x1, "6ae83fb6e4d67929a95af6ce7bae2619e1d4dffea98f661e8e6a3131424158ffeed8e39da30378177b37a3df8f3c7e40e6a992a622fe3f1e76b34ecf1902329a47872757492818ab0a7cd636ffc5ff4d1daa17826e4915d5e99fc095f0bb0e919e73edc5dceba11dc7bc3cc188d62d749424010e2e67efcde1d22dce87c94b87f7f930de33e9da72444972439681ec2da547c0fcadfaae46d3f102a37cf4073f43d52b598c3965c3e0a95a2aa1ba308523ae0a132ee7d5c8990c0f6c8b8e75"}}}}}}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r1}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.064425867s ago: executing program 0 (id=1327): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="044000000800000008000000000000003136e2ddad91e47bcce18993328f647ed89e5b85126290fc6c", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400008001000000030000e0040300008187dc4bf6d0fd86"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 2.793944218s ago: executing program 1 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @init={0x18, 0x84, 0x0, {0x897b, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0xb, 0xfffffffe, 0xff}}], 0x50, 0x4014}, 0x2c0408d0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0d00000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="10006e"], 0x2c}}, 0xc054) 2.793327355s ago: executing program 0 (id=1330): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000160a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.646278649s ago: executing program 0 (id=1331): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)={0x28, 0x1a, 0x1, 0x70bd29, 0x6, "", [@typed={0x8, 0x28, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x4, 0x131}, @generic="0118516c4fc3490cc12f"]}, 0x28}, {&(0x7f0000000740)={0x178, 0x38, 0x112, 0x70bd2b, 0x25dfdbff, "", [@generic="7537a27cf441c4789caf22d4f0d28906fc83887ffd9768852c13a4ff3faa4d57c419dba44b8b95529629c6b72cc4868b395126275771a295057c8924a2a060da6764b3ffa2fa8b7f68eb0e4172c9e3b1", @nested={0x68, 0xe8, 0x0, 0x1, [@typed={0x46, 0xa5, 0x0, 0x0, @binary="f9f00fac55ec90dd2b3d2e4854414c632e1522b466046039baf680752bbc8b2fdec63aa5456dfc4b91fe13ff8a0caa1e6f92c73e064438b65efe155371f5c9816afb"}, @nested={0x4, 0x21}, @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x20}]}, @generic="75a00d76e00d53b2e8943974d6c8e4ca60df972ca57ba794545c84e10fda69bd5a61d0f39d62ca1622cbb56c750b161b145b4cfbc58b53691d6e8a821eb7af0a5717b748626460cb5c413d603321f97edb17e5c1fac6e06ebc1d66f8df52e29b398804891ced4c50a085014fb8e0e32fe266689761b1c85e3d3ee853b3b8150c85a4661a2f8e705f0818a1ecfcb87703b9626b96218e2a89e0a95e03d644dae84d57d2be562b54545703e434e62058"]}, 0x178}, {&(0x7f0000000500)={0x28, 0x1b, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@generic="f6431d0522557a7eb4fe201cba985928410c3dc9a353ef0c"]}, 0x28}], 0x3}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x14e22, 0x0, @private0}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x302002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRESHEX=r4], 0x1a4}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000) (async) unshare(0x62040200) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0x71c, 0x3, 0xd38d, 0x6}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @remote}}}, 0x9c) (async, rerun: 32) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 32) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r6, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000181000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071123887461ba78ce5130ab1bbc749b62a6c7683ab1b4c33c8b0900357b6545afd4215149b1530d98f9eb0922c8d71987294dab7e7dabddff7df8e8012287e14015e112dd03a47894d19f13a58571b3a2e9f03300875e459dae26df9dd5f84a33782891c13b8773ca3681336661c73c9b1402b163bdf8cb1217df8f92df284d72797012ce224c68e9dff395c425693ccb4e81d7881960ddea1560bfb77d1898b384e267909f76bdb47c81f53ac385abe856df6554ed4669fd48c0e0abf3eac8fde6b0b6ccdfee4fa87db620d5b6cbaf858c127dad21b2a01d3d099883ee9e3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 2.393923731s ago: executing program 1 (id=1333): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0xfffffffffffffffa}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x120, 0x258, 0xffffffff, 0x348, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x95e02486dc98f4f1, @ipv4=@local, @ipv4=@multicast2, @gre_key=0x3, @port=0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@multicast1, @ipv4=@multicast2, @icmp_id=0x67, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x64, @gre_key}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x27}, [0xff, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010100, @ipv6=@local, @icmp_id=0x64, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) 1.479123199s ago: executing program 3 (id=1334): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10020) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) syz_emit_ethernet(0x168, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x156, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfffffe67, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}, "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"}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x8) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10020) (async) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x168, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x156, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfffffe67, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}, "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"}}}}}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x8) (async) 1.42417323s ago: executing program 1 (id=1335): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060300000000000000"], 0x48}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r10, r7, 0x4, r8}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = socket$inet6(0xa, 0x6, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) (async) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4, @ANYBLOB="b4ed1d248823a3eaa0df9c4a08a94948e22d7362170c07c627cb703f21b83bfb44188443eb4b19fd76e7fa285cbe776aa1a29208fa98033fbe3708dc5b8cd851e098dcc129cb1de231be9f6ec482fb7c41c6abe04601caddf71fdbfb011b0871416543011b5c8daef55704338cffa19f031cccc7c8815bda227ab8499b13d2e055af672d1bac0acb001cfe450b507ce6adb0028e4b368f6f9791805e63cafd86bf9295c4c97110aeba70a265b1662542f855fe8b490d9aedf614dc10b61e74e8446b0540310f9af5066d1a9d"], 0x40}}, 0x0) (rerun: 64) unshare(0x2c060000) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) unshare(0x24020400) 1.166050637s ago: executing program 3 (id=1336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24000000010401025fafbb61b9cbe71b0000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/138, 0x8a}], 0x1, 0x597, 0x0) close(r0) 1.056497468s ago: executing program 3 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r2, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) socketpair(0x1e, 0x80801, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x3c, r6, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x2, '%g'}, 0xa) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 954.683993ms ago: executing program 3 (id=1338): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) close(r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400c0084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/26, 0x1a}], 0x4, &(0x7f0000000580)=""/7, 0x7}, 0x4}], 0x1, 0x2000, &(0x7f0000000600)={0x77359400}) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x3fa, 0x100, 0x70bd29, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x8004) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0xc) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000880)={r3, r4/1000+10000}, 0x10) listen(0xffffffffffffffff, 0x8000) sendmsg$can_j1939(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)="15ab9ee511f14c6094bf111eb1e9844a1d133a3f03ccda31656bd5471e22c2743a7e4151fffee2539ba5875341a66108640e993748da1e073d8eccc74a8b91269bf591616ec2439d2ddc0382ccf5d1de6ddcdcac37c5b4af75e5615cda53141fb6c4f9b062", 0x65}, 0x1, 0x0, 0x0, 0x8840}, 0x2000c804) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000009c0)={0x0, 0x1000, "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"}, &(0x7f0000001a00)=0x1008) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001a40)={r5, 0x1}, &(0x7f0000001a80)=0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(r6, &(0x7f0000001ac0)="e4472f5c67cf5d146e14c1c3c1323e0c9e5ecb819d91922184abf9c79162cab268df1656b142ed1f6fc42ca4dbfce5fee43f52402ba24e00dd1d676c6c13aecc8b592d5a16c747e3bc4cf42e16483dee457756aeea9e8dda8833e91ff6f4dc31d03ed94ca0b9e97969aac4d4ae01e101c024e9745b07078c0e1b851c39f8ce7b5df63660ffd77a520f483edf64a1e00eae6fd382b23b77f70d6a41e8e87ce25fe8527e0a9112e5f9e9b122b49041dcba02b9201edfd85439ba93db2fd71d599eaa8ceb2dbcd1c72f84e65876f12c88b6c8b453afc5e05cd8ab1414759b3ce76e1d155d", 0xe3) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(r0, &(0x7f0000002d80)={&(0x7f0000001bc0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc, &(0x7f0000002d40)=[{0xfffffffffffffffc}, {&(0x7f0000001c00)={0x1124, 0x3b, 0x1, 0x70bd29, 0x25dfdbfe, "", [@typed={0xb, 0xc1, 0x0, 0x0, @str='#&#!(]\x00'}, @generic="6684382f51c419734d040ce12e1e28b589e8cbd1399431c5c836345f0862c1bd85f722b287939b8494c42f698e1edffc6dec342a0dc1f8c05442386ac45881db028bffc5b7161f1fa3704d49ea20a022f0cb1acc64405500426be9719eb410763c0ebceccfa51efde1d09f2e4bedacb4a9e97aaa13c37e48867f39195642e5711d829687afda165b11dfedd4c26401fe9310da74d28ccb08864c18d020d927e506d510942eb199849372004bb661a82132d36cd39438ff7e116d7a045810a36dac71f52a94482b9e54f1cc714422b017cec8a25d935d7dc8335d7a73131ce2ff9c1444302f816893962596dacdce3cc2b33d06f80c", @generic="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", @generic="f73bf327f563defe", @typed={0x8, 0xc2, 0x0, 0x0, @fd=r6}]}, 0x1124}], 0x2, 0x0, 0x0, 0x4000}, 0x8080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x70, r8, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xff, 0x8}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]]}, 0x70}, 0x1, 0x0, 0x0, 0x14050}, 0x20000805) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000002f40)=0x13d, 0x4) clock_gettime(0x0, &(0x7f0000003040)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002f80)={0x2, 0x9, 0x0, 0x2, 0x9, 0x1, 0x3ff, 0x10001}, &(0x7f0000002fc0)={0x1, 0x10000, 0x2, 0x6, 0x9, 0x6, 0x100000000, 0x8}, &(0x7f0000003000)={0x4, 0x5, 0x5, 0x2, 0x7, 0xe0, 0x609, 0x10000}, &(0x7f0000003080)={r9, r10+10000000}, &(0x7f0000003100)={&(0x7f00000030c0)={[0x6]}, 0x8}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003180)=@o_path={&(0x7f0000003140)='./file0\x00', r6, 0x4000, r7}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000031c0)) syz_emit_ethernet(0xd8, &(0x7f0000003200)={@local, @link_local, @void, {@mpls_mc={0x8848, {[{0x10, 0x0, 0x1}, {0x401, 0x0, 0x1}], @llc={@snap={0x1, 0xab, 'D', "c69043", 0x805, "07366958d2223d036beea77196596154588e87781eb2c505e864bfecf8ad9273deab8eea9280cc0ec54b6a47186bc21d0387bc79a1749ebd43ce37ff767812c67db93f3693b2971abaa9e68309f031c9f2c5736e4585bc8e27296f79b098852c2b67ef2998a2b5f8d90a7456d3f0f4cdc144c1138bc4bbabfe635212883ca5cb6688f23d89ef2a5640a800fd45bd78ca39584d72d144bb950b4dd8bef26253251f5b9378bc71cad5ff12630931ecfea88bba67cee73f116cdb8f"}}}}}}, &(0x7f0000003300)={0x0, 0x4, [0x7fb, 0x495, 0xb80, 0x91d]}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000003340)={'ip6tnl0\x00', {0x2, 0x0, @remote}}) bind$xdp(r0, &(0x7f0000003380)={0x2c, 0x0, r2, 0x30}, 0x10) 781.904097ms ago: executing program 3 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000006a0001002abd7000fddbdf250a000000000002"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 775.06953ms ago: executing program 1 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff54}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x9, 0x5a1f, 0xc, 0x40, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x9}, {0x3, 0x9}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x7}, {0x3, 0x6}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x1}, {0x2}, {0x2}, {0x1, 0x7}, {0x7, 0x5}, {}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x3}, {0x1, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x101, 0x9, 0x0, 0xdc79, 0x7e12, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x36, 0x6, 0x6, 0xc, 0x16, 0xb, 0x1b, 0x12, 0x5]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x9, 0x12, 0x12, 0x36, 0x18, 0x1, 0x4, 0x6, 0xb, 0x9, 0x48, 0x36, 0x6a73f549410ca8ba, 0x2, 0x18, 0x16, 0x9, 0x24, 0x4, 0x30, 0x5, 0x36, 0x2, 0x9, 0xb, 0x5, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x66, 0x5b6, 0x1, 0xfffd, 0x2, 0x8, 0x6, 0x9d]}}]}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_SSID={0xd, 0x34, @random="243053acb34fc05308"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x44}, 0x24000004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xff, 0xd, 0x24, @private1, @private2, 0x10, 0x40, 0x401}}) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv4_getnetconf={0x34, 0x52, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NETCONFA_PROXY_NEIGH={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_FORWARDING={0x8, 0x2, 0xf}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x2, &(0x7f0000000780)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[r6, r7, r8, r9, 0x1, r10, r11, 0xffffffffffffffff, r3], &(0x7f0000000b40)=[{0x1, 0x1, 0xc}, {0x4, 0x5, 0xa, 0x1}, {0x5, 0x1, 0xf}, {0x2, 0x5, 0xb, 0x2}], 0x10, 0x9}, 0x94) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000c40)='veth0_virt_wifi\x00') r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x3, 0x3, 0x4, 0x1050, r12, 0x8, '\x00', r4, r7, 0x5, 0x3, 0x1}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x128, 0x1403, 0x100, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r13, &(0x7f0000001200)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x1fc, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2800}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7b2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc25}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @loopback, 0x80000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r11) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r14, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r15, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c000}, 0x1) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f00000014c0), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r14) 668.975498ms ago: executing program 1 (id=1341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xddb570b1765b8763}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x40400c4) r6 = accept4(r2, &(0x7f00000004c0)=@x25={0x9, @remote}, &(0x7f0000000540)=0x80, 0x800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x140, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1b9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x424, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfd, {0x1, 0x2, 0x27, [0x57fd, 0x8, 0x1, 0xd7, 0xffffffff, 0x401, 0xfffffffc, 0x8, 0xfb1, 0x9, 0x8e7, 0x1, 0x6, 0xfffffc01, 0x4, 0x0, 0x4, 0x0, 0x3, 0x5, 0x7ff, 0x9, 0x7, 0xb6, 0xd, 0x80000000, 0x1, 0x400, 0x13a4, 0x4, 0x0, 0x2, 0x6, 0x80, 0xfffffff9, 0xfffffff4, 0x80000000, 0x7fff, 0x2, 0x8, 0xc00000, 0x9, 0x3, 0x4, 0x1, 0x8, 0x7, 0xee0e, 0x8, 0x5e, 0xddd, 0x5, 0x2, 0xdd2a, 0x8, 0x1, 0x193, 0x3ff, 0x1ff, 0x9, 0xb, 0x8, 0x0, 0x4], [0xfffffff9, 0x7, 0x1, 0x0, 0x0, 0x3ff, 0x7, 0xe9ea, 0x4, 0x0, 0x60000, 0xe45, 0x8, 0x0, 0x7, 0x9, 0x5, 0x4, 0x3, 0xd, 0x5, 0x3, 0x86b, 0xa671, 0x0, 0x5, 0x2, 0xd, 0x9, 0xa49, 0x14, 0xbe, 0x0, 0x0, 0x7, 0x8, 0x8, 0x5de2, 0x5, 0x7, 0x6, 0x7, 0x9adb, 0x81, 0x2, 0x5, 0xf, 0x9, 0x9, 0x5, 0x7, 0x1, 0x0, 0x10001, 0x6, 0x9, 0x0, 0x3, 0xfff, 0x0, 0x7, 0x7, 0x0, 0x4], [0x19, 0x2, 0x3, 0x6, 0x4, 0x1, 0x16, 0x5, 0x7, 0x8, 0x7ff, 0x2, 0x1, 0x800, 0x0, 0x3, 0x7, 0x4, 0x46c8, 0x1, 0x9d, 0xfffff827, 0x88e, 0x1ff, 0xec, 0x8bf2, 0x5, 0x7, 0x6, 0x5, 0x48, 0x2e71, 0x42fc, 0x4, 0x5, 0x8, 0xfffffffa, 0x3, 0x8, 0x80, 0x4, 0x8, 0x9f6c, 0xdb, 0xd, 0xfff, 0x0, 0x6, 0x2, 0x1a, 0xffffffff, 0xb0, 0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0x6926, 0x800, 0x9, 0x0, 0x1, 0xfffffffc], [0x9, 0x3, 0x4, 0x7, 0x7, 0x7f, 0x10, 0x7ff, 0xa, 0x7ff, 0x3a1, 0x4, 0x7fffffff, 0x2ab, 0x2, 0xff, 0x5, 0x7, 0x2, 0x800, 0x4, 0x6, 0x1, 0xd003, 0xfffffff8, 0x3, 0xfffffffd, 0x80000000, 0x0, 0x7, 0x9, 0xfffffff2, 0xcdc, 0x0, 0x58, 0x10001, 0xfffffbff, 0x6, 0x3, 0x8, 0x43c, 0xc1a8, 0x101, 0xbb6c, 0x4, 0x4, 0x190b8354, 0x400, 0x1, 0x1, 0xff9, 0x1, 0x9, 0xd9dc, 0x6, 0x1e, 0x1, 0xfff, 0x5, 0x9, 0x8, 0x8, 0x0, 0x80000000], 0x1, ['\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x8000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ec0)={@ifindex=0x0, 0x26, 0x0, 0xfff, &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000f00)={0x0, 0x5, 0x2, 0x5, 0x0, 0x8}) r10 = socket$inet6(0xa, 0x800, 0xc2) sendmsg$can_bcm(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x1d, r9}, 0x10, &(0x7f0000001000)={&(0x7f0000000f80)={0x0, 0x0, 0x5, {0x77359400}, {0x0, 0x2710}, {0x2, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "cfdbaba5c28d3bbd"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000001080)={{0xa, 0x4e24, 0x4, @mcast1, 0x7fff}, {0xa, 0x4e22, 0x9, @empty, 0x7}, 0x0, {[0x200, 0xffffffd5, 0x2, 0x80000001, 0x46, 0x400, 0x718, 0x2]}}, 0x5c) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x140c, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={r9, @multicast1, @multicast2}, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x3925efdd9142f486}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfd}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xb2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048080}, 0x8000) connect$inet6(r6, &(0x7f0000001340)={0xa, 0x4e24, 0x8, @private2, 0x2}, 0x1c) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="5cf469bce690b3dfe18c9313ee"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000855) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001640)={'syztnl2\x00', r9, 0x2f, 0x1, 0x60, 0x7ff, 0x4f, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x8, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001800)={'ip_vti0\x00', &(0x7f0000001700)={'syztnl1\x00', r9, 0x700, 0x8000, 0x3, 0x9, {{0x2f, 0x4, 0x2, 0x4, 0xbc, 0x66, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @remote, {[@timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x0, [{@remote, 0x8}]}, @noop, @cipso={0x86, 0x85, 0x2, [{0x1, 0x10, "a4625e4cce8bf750ba851cc31c83"}, {0x1, 0x11, "af4c164b2a77912bb402ef646b633f"}, {0x0, 0xa, "3c4bb63dbaf41aa6"}, {0x0, 0xf, "0420120cd7fc1b134259d0d300"}, {0x6, 0xe, "3608037a854386baa6b88cd2"}, {0x6, 0x11, "38aa11f91b03036837a471788eaf74"}, {0x5, 0xc, "2bc08824685ec142a180"}, {0x1, 0xf, "44766b1db0aafaa66107b04d20"}, {0x7, 0xb, "198af4b28842dbaa50"}]}, @timestamp={0x44, 0x14, 0x8e, 0x0, 0xb, [0xae75, 0x100, 0x6, 0x2]}, @end]}}}}}) sendmmsg$inet6(r2, &(0x7f0000004000)=[{{&(0x7f0000001480)={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x5}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000014c0)="eedfd8917b76f6f0485b", 0xa}, {&(0x7f0000001500)="399ba0158d09f8b149d25471a0b6a233bf42f0b46f8a64b00316a5f0351b05bd22f3902db8ff438050208706a5baaea468429a97b60d4ad8c5fa332c50621b3e5c18fd17dbe6f2491a89abbf185cad7000430e81fba1f642e6b111e1537b0791f0ba488d75b125df4899c61de5e3e869d9c34e9950a1210c9e11fa2a235eb4273b67b6d48b228e7f1375760f449c6c6f2b57ed03c89836fbe3efd672f916063102a01babd28d9ec08dc95e90083945954fafc766e190b8effa1ce976f2cd12bd5cd742809fe7747845fa959f02498584d2459ae1d6dd3ef07b", 0xd9}], 0x2, &(0x7f0000001840)=[@hopopts={{0x68, 0x29, 0x36, {0x3c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x7, [0x9, 0x5, 0x6]}}, @jumbo={0xc2, 0x4, 0x5}]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x32, 0xb, '\x00', [@pad1, @pad1, @calipso={0x7, 0x48, {0x3, 0x10, 0x80, 0x7, [0x101, 0x4, 0x1, 0x1, 0x40, 0x8, 0x6, 0x1]}}, @ra={0x5, 0x2, 0x3ff}, @ra={0x5, 0x2, 0xfb39}]}}}, @hopopts={{0x20, 0x29, 0x36, {0xc0, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}, r12}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xa}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r13}}}, @rthdr={{0x48, 0x29, 0x39, {0x7ca3ad206acaaf5d, 0x6, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private0]}}}, @flowinfo={{0x14}}], 0x1f0}}, {{&(0x7f0000001a40)={0xa, 0x4e22, 0x3a21, @mcast1, 0xfff}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000001a80)="f4478a96dfb59fa9f5cc25e3bb4a3a276f56c9ce1bb45ec763e5f4a3e89684aa8ca917af32485b30e7f6eea92e7478c1d79a52c119eb58c4b370ceb64bb1f6db17c2464a7cd3d7d253e91e6df29435000ba900634ca3b6f2c1e6be5c49ba41ffb25b1cbb57789501a43f4c2d37e1d3d824714fa4bf71099ef0e0e8b2e52a300491820921e241cd767959f5ba680c541e077b70", 0x93}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="c595597161be9a0892121a154eab56f19109ad3a673c90dd1af87aa43f881200a8d3e4797bc4ee11b2631fc07bd16263e233e400d1b87df37d5ede19e7ddf366dba7f51b1d1bec8455041d7a45836aa6aee7201654018c49f364ca3588c33fd63ceeb1e42094", 0x66}, {&(0x7f0000002bc0)="e0c698849eb647bd481781b751c9a973e7dd94adc1339bd7750ef687991748e0954ffbef4e9ea829a7b3a8274e3bee733b049144c9e8210c3ef33214c0542a749499ebcc1b5c773ad114", 0x4a}, {&(0x7f0000002c40)="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", 0x1000}], 0x5, &(0x7f0000003cc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1000}}], 0x18}}, {{&(0x7f0000003d00)={0xa, 0x4e23, 0x7, @mcast2, 0x5}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003d40)="30bc685df6941be117138bf706996d", 0xf}, {&(0x7f0000003d80)="76c4d3638068f47b92519a989cbeab2ecf05e399cd91bfe8d12d351b65b321a14159010e4c5bceed5caac64d0f1cd88a2a1bd91c37a4d93c9ea05e261353be7b3db598dea2a0ee8af1803e73b2b0b92ab53c0da0c7cc5cf811ebd3cf1811246e7078d790ba63cab0139f089c626369c9a4c97cee5a93142150f5a1a1d3e6b3ec2c12e0c6ae34ce9bb63f687a7c54286cd9d6f9a35b709077960db342c29e7d0b0e0b594f8da38d32ebf1af8b38e220f49a1959f857b3cb67b2f7c4369ea16f1454071160afe9f408305ec1bdcce603bc76dbbaf7126bd94d4e28ea", 0xdb}, {&(0x7f0000003e80)="c81f01ced48c4241a2d23db6ec4a1fdfa337ca1a04140c56a99105c71848c4b141d43d75dcfc58464aabead258dd42866470b25ff4885745a63d21bd4cb405873b80e6d6963e84245bc15e21d700d05b8363cbef0197f586940f29a722a01fd0bf8084813f62cb942c6d4d1c5cc58f650dd50e95bcce5cf278d63443466a41f5d103db3114baa33d04077a8d044f4714004283c8a2677648e50af9d21a4077ee829ae7664263f6397e6c3cb8efb178d7b05b677b", 0xb4}, {&(0x7f0000003f40)="d56a860911fda14b0628f2d0b27d7a3f1913166b3680fc2ba918050377af5b3c9c5721e5cdd1f261eab42f1620f76b31", 0x30}], 0x4, &(0x7f0000003fc0)}}], 0x3, 0x4000) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f00000040c0)=0x8) 286.070894ms ago: executing program 1 (id=1342): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fefffffb000000000000000085000000bc000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="087143592bf27c57ccf7e249a561", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 0s ago: executing program 3 (id=1343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x6, &(0x7f0000000640)={[0x5]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x5e3293d7c8c8a871}}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd25, 0x6, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x188517eb, 0x66}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48008}, 0xc0000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xaf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 79.499208][ T5834] cgroup: Unknown subsys name 'net' [ 79.613346][ T5834] cgroup: Unknown subsys name 'cpuset' [ 79.623144][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.288833][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.947069][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.958302][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.968144][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.976689][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.007035][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.021056][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.029516][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.038912][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.053864][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.061781][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.070187][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.077615][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.085215][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.085823][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.094410][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.100199][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.107422][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.116801][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.122305][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.128376][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.135994][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.154565][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.161739][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.170121][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.177753][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.827620][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 84.945887][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.021908][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.163055][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 85.217595][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.225738][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.234658][ T5855] bridge_slave_0: entered allmulticast mode [ 85.242060][ T5855] bridge_slave_0: entered promiscuous mode [ 85.251240][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 85.282644][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.290294][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.297444][ T5855] bridge_slave_1: entered allmulticast mode [ 85.304830][ T5855] bridge_slave_1: entered promiscuous mode [ 85.443821][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.467000][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.474563][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.482171][ T5847] bridge_slave_0: entered allmulticast mode [ 85.489744][ T5847] bridge_slave_0: entered promiscuous mode [ 85.496905][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.506302][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.513607][ T5846] bridge_slave_0: entered allmulticast mode [ 85.522391][ T5846] bridge_slave_0: entered promiscuous mode [ 85.530546][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.537662][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.544961][ T5846] bridge_slave_1: entered allmulticast mode [ 85.552216][ T5846] bridge_slave_1: entered promiscuous mode [ 85.569587][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.608442][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.615850][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.623129][ T5847] bridge_slave_1: entered allmulticast mode [ 85.631086][ T5847] bridge_slave_1: entered promiscuous mode [ 85.682105][ T5855] team0: Port device team_slave_0 added [ 85.749966][ T5855] team0: Port device team_slave_1 added [ 85.756186][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.763548][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.771305][ T5854] bridge_slave_0: entered allmulticast mode [ 85.778495][ T5854] bridge_slave_0: entered promiscuous mode [ 85.813124][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.826689][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.850156][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.857363][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.865849][ T5854] bridge_slave_1: entered allmulticast mode [ 85.873177][ T5854] bridge_slave_1: entered promiscuous mode [ 85.897132][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.924767][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.972613][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.980223][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.987376][ T5844] bridge_slave_0: entered allmulticast mode [ 85.996246][ T5844] bridge_slave_0: entered promiscuous mode [ 86.033004][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.042253][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.073163][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.087924][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.097380][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.105162][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.112649][ T5844] bridge_slave_1: entered allmulticast mode [ 86.120849][ T5844] bridge_slave_1: entered promiscuous mode [ 86.129833][ T5846] team0: Port device team_slave_0 added [ 86.150927][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.157914][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.184276][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.198113][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.209656][ T5853] Bluetooth: hci3: command tx timeout [ 86.215747][ T5853] Bluetooth: hci4: command tx timeout [ 86.221321][ T5849] Bluetooth: hci1: command tx timeout [ 86.226951][ T5849] Bluetooth: hci2: command tx timeout [ 86.232553][ T51] Bluetooth: hci0: command tx timeout [ 86.255005][ T5846] team0: Port device team_slave_1 added [ 86.276341][ T5847] team0: Port device team_slave_0 added [ 86.286105][ T5847] team0: Port device team_slave_1 added [ 86.344654][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.356428][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.399505][ T5854] team0: Port device team_slave_0 added [ 86.420988][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.427959][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.454611][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.467808][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.474992][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.501120][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.513251][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.520471][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.546454][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.559954][ T5854] team0: Port device team_slave_1 added [ 86.614702][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.622588][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.649284][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.676397][ T5844] team0: Port device team_slave_0 added [ 86.685352][ T5844] team0: Port device team_slave_1 added [ 86.699520][ T5855] hsr_slave_0: entered promiscuous mode [ 86.706082][ T5855] hsr_slave_1: entered promiscuous mode [ 86.774274][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.784090][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.810671][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.918908][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.925894][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.952860][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.965773][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.973050][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.999254][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.012439][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.019795][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.046173][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.180061][ T5846] hsr_slave_0: entered promiscuous mode [ 87.186895][ T5846] hsr_slave_1: entered promiscuous mode [ 87.194513][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.202710][ T5846] Cannot create hsr debugfs directory [ 87.244859][ T5847] hsr_slave_0: entered promiscuous mode [ 87.253351][ T5847] hsr_slave_1: entered promiscuous mode [ 87.260185][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.267759][ T5847] Cannot create hsr debugfs directory [ 87.366432][ T5854] hsr_slave_0: entered promiscuous mode [ 87.379886][ T5854] hsr_slave_1: entered promiscuous mode [ 87.385946][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.396247][ T5854] Cannot create hsr debugfs directory [ 87.456565][ T5844] hsr_slave_0: entered promiscuous mode [ 87.463403][ T5844] hsr_slave_1: entered promiscuous mode [ 87.470413][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.477979][ T5844] Cannot create hsr debugfs directory [ 87.887731][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.937305][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.983894][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.025389][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.141474][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.158301][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.175972][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.188449][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.284806][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.291717][ T5849] Bluetooth: hci2: command tx timeout [ 88.291790][ T5849] Bluetooth: hci0: command tx timeout [ 88.291827][ T5849] Bluetooth: hci1: command tx timeout [ 88.291864][ T5849] Bluetooth: hci3: command tx timeout [ 88.302988][ T5853] Bluetooth: hci4: command tx timeout [ 88.367271][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.402387][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.438077][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.446777][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.514421][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.531184][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.559675][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.579126][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.586424][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.613413][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.624745][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.674765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.681958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.716203][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.727554][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.752568][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.777859][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.801377][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.846013][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.901916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.909089][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.974350][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.981661][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.306695][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.332265][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.389923][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.411230][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.456100][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.463311][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.476141][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.483372][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.518950][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.538113][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.545370][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.568280][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.575487][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.596648][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.680452][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.764144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.771382][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.793862][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.821397][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.872000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.879653][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.234712][ T5846] veth0_vlan: entered promiscuous mode [ 90.353433][ T5846] veth1_vlan: entered promiscuous mode [ 90.371376][ T5853] Bluetooth: hci4: command tx timeout [ 90.376923][ T5853] Bluetooth: hci3: command tx timeout [ 90.378902][ T51] Bluetooth: hci0: command tx timeout [ 90.384012][ T5853] Bluetooth: hci2: command tx timeout [ 90.387925][ T5849] Bluetooth: hci1: command tx timeout [ 90.445082][ T5855] veth0_vlan: entered promiscuous mode [ 90.523312][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.547730][ T5855] veth1_vlan: entered promiscuous mode [ 90.603310][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.655382][ T5846] veth0_macvtap: entered promiscuous mode [ 90.681934][ T5855] veth0_macvtap: entered promiscuous mode [ 90.695483][ T5846] veth1_macvtap: entered promiscuous mode [ 90.726973][ T5855] veth1_macvtap: entered promiscuous mode [ 90.740199][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.800514][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.827958][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.848667][ T5844] veth0_vlan: entered promiscuous mode [ 90.858676][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.876943][ T5854] veth0_vlan: entered promiscuous mode [ 90.896210][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.915370][ T5844] veth1_vlan: entered promiscuous mode [ 90.942318][ T1324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953991][ T1324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.978470][ T5854] veth1_vlan: entered promiscuous mode [ 90.985458][ T1324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994697][ T1324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.031639][ T5847] veth0_vlan: entered promiscuous mode [ 91.041478][ T1324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050818][ T3518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.080252][ T3518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093304][ T3518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.152985][ T5847] veth1_vlan: entered promiscuous mode [ 91.208072][ T5844] veth0_macvtap: entered promiscuous mode [ 91.276490][ T5844] veth1_macvtap: entered promiscuous mode [ 91.304030][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.316248][ T5854] veth0_macvtap: entered promiscuous mode [ 91.318860][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.355156][ T5847] veth0_macvtap: entered promiscuous mode [ 91.398642][ T5854] veth1_macvtap: entered promiscuous mode [ 91.414948][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.425344][ T5847] veth1_macvtap: entered promiscuous mode [ 91.443555][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.462237][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.476724][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.496618][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.505946][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.537688][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.553659][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.558278][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.573941][ T3518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.593189][ T3518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.624261][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.634175][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.659072][ T3518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675722][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.735209][ T3518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.754279][ T3518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799168][ T3518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816011][ T5970] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 91.831789][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.854720][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.900586][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949851][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.961930][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.990610][ T1069] cfg80211: failed to load regulatory.db [ 92.012826][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.026572][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.080969][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.092574][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.237706][ T5977] netlink: 'syz.0.6': attribute type 7 has an invalid length. [ 92.261041][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.269413][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.282383][ T5977] : entered promiscuous mode [ 92.446320][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.459106][ T5849] Bluetooth: hci1: command tx timeout [ 92.459427][ T5858] Bluetooth: hci0: command tx timeout [ 92.464560][ T5849] Bluetooth: hci3: command tx timeout [ 92.470490][ T5853] Bluetooth: hci4: command tx timeout [ 92.475440][ T5849] Bluetooth: hci2: command tx timeout [ 92.509767][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.554202][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.574125][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.604191][ T5982] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7'. [ 92.697977][ T5982] batadv1: entered promiscuous mode [ 92.715186][ T5982] batadv1: entered allmulticast mode [ 92.826769][ T5996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7'. [ 92.979674][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.002055][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.084778][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.122744][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.522068][ T6009] Zero length message leads to an empty skb [ 94.158944][ T6030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.185905][ T6030] team0: Port device bond1 added [ 94.296137][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 94.417137][ T6046] warning: `syz.4.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.457504][ T6050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20'. [ 94.669250][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 95.265333][ T6073] !: renamed from dummy0 (while UP) [ 95.464839][ T6064] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 96.716758][ T6127] netlink: 56 bytes leftover after parsing attributes in process `syz.3.39'. [ 96.787831][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 96.788689][ T6119] bridge_slave_0: left allmulticast mode [ 96.809011][ T6119] bridge_slave_0: left promiscuous mode [ 96.819653][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.872237][ T6119] bridge_slave_1: left allmulticast mode [ 96.883228][ T6119] bridge_slave_1: left promiscuous mode [ 96.895726][ T5849] block nbd0: Receive control failed (result -32) [ 96.909787][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.941518][ T6119] bond0: (slave bond_slave_0): Releasing backup interface [ 96.984938][ T6139] Cannot find add_set index 3 as target [ 97.015755][ T6119] bond0: (slave bond_slave_1): Releasing backup interface [ 97.084139][ T6119] team0: Port device team_slave_0 removed [ 97.142154][ T6119] team0: Port device team_slave_1 removed [ 97.162580][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.174867][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.185064][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.198252][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.232054][ T6119] team0: Port device bond1 removed [ 97.478011][ T6152] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 97.829045][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 97.838057][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 97.949500][ T6176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46'. [ 98.283876][ T6193] netlink: 52 bytes leftover after parsing attributes in process `syz.4.51'. [ 98.351891][ T6187] netlink: 'syz.3.50': attribute type 2 has an invalid length. [ 98.922912][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 99.543339][ T6242] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 99.565784][ T6242] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 99.604008][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 99.628265][ T6250] netlink: 4224 bytes leftover after parsing attributes in process `syz.4.65'. [ 99.664918][ T6250] openvswitch: netlink: Flow key attr not present in new flow. [ 100.045183][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.093262][ T6259] batadv_slave_0: entered promiscuous mode [ 100.507082][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 100.551906][ T6290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.023744][ T6315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.78'. [ 101.284539][ T6305] wireguard0: entered promiscuous mode [ 101.299518][ T6305] wireguard0: entered allmulticast mode [ 101.336766][ T6324] netlink: 'syz.4.79': attribute type 7 has an invalid length. [ 101.425493][ T6320] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 101.431908][ T6306] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.490418][ T6306] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.903871][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 102.097112][ T6347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.224928][ T6347] Illegal XDP return value 67 on prog (id 46) dev N/A, expect packet loss! [ 103.117345][ T6385] __nla_validate_parse: 1 callbacks suppressed [ 103.117365][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 103.189734][ T6380] netlink: 'syz.3.95': attribute type 11 has an invalid length. [ 103.206202][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.313526][ T6385] gretap0: entered promiscuous mode [ 103.382729][ T6397] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.435752][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.462648][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.671537][ T6399] bridge1: entered promiscuous mode [ 103.683607][ T6399] bridge1: entered allmulticast mode [ 104.091811][ T6419] gre1: entered allmulticast mode [ 104.229231][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.285904][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'. [ 104.462063][ T6432] batadv1: entered promiscuous mode [ 104.547582][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 104.815857][ T6445] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 106.849882][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 107.008459][ T6494] wireguard0: entered promiscuous mode [ 107.032223][ T6494] wireguard0: entered allmulticast mode [ 108.061216][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880583a4000: rx timeout, send abort [ 108.070652][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033d67c00: rx timeout, send abort [ 108.081367][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583a4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.096722][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033d67c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.277094][ T6520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.130'. [ 108.656200][ T6534] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 108.672174][ T6537] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 108.708765][ T6537] netlink: 224 bytes leftover after parsing attributes in process `syz.0.135'. [ 108.720377][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 108.768530][ T6542] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 108.805344][ T6542] netlink: 224 bytes leftover after parsing attributes in process `syz.0.135'. [ 108.866791][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 108.978535][ T6548] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000 [ 109.186043][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'. [ 109.230686][ T6560] pim6reg1: entered promiscuous mode [ 109.258197][ T6560] pim6reg1: entered allmulticast mode [ 109.294677][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 109.331971][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 109.695966][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.148'. [ 109.903278][ T6593] bridge0: port 3(syz_tun) entered blocking state [ 109.919931][ T6599] xt_TCPMSS: Only works on TCP SYN packets [ 109.948189][ T6593] bridge0: port 3(syz_tun) entered disabled state [ 109.989499][ T6593] syz_tun: entered allmulticast mode [ 109.998589][ T6593] syz_tun: entered promiscuous mode [ 110.020378][ T6593] bridge0: port 3(syz_tun) entered blocking state [ 110.027641][ T6593] bridge0: port 3(syz_tun) entered forwarding state [ 110.064504][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 110.408930][ T6602] syz.2.155 (6602) used greatest stack depth: 19528 bytes left [ 111.098842][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 111.796759][ T6668] bridge0: port 3(syz_tun) entered disabled state [ 111.833390][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.841286][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.091721][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.124783][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.387430][ T5905] syz1: Port: 1 Link DOWN [ 112.408990][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.470403][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.550107][ T998] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.579351][ T998] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.642883][ T6691] xt_l2tp: missing protocol rule (udp|l2tpip) [ 112.915776][ T6700] Bluetooth: MGMT ver 1.23 [ 113.201694][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.235007][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.274963][ T6697] bond0 (unregistering): Released all slaves [ 113.431113][ T6701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.631906][ T6701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.866399][ T6701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.159514][ T6730] sock: sock_timestamping_bind_phc: sock not bind to device [ 114.182018][ T6701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.487683][ T6737] __nla_validate_parse: 13 callbacks suppressed [ 114.487706][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 114.616379][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.858049][ T1324] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.957647][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.052620][ T6746] !: renamed from dummy0 (while UP) [ 115.112013][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.152128][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.196'. [ 115.191129][ T6746] syzkaller1: entered promiscuous mode [ 115.199239][ T6752] netlink: 14 bytes leftover after parsing attributes in process `syz.3.196'. [ 115.218540][ T6746] syzkaller1: entered allmulticast mode [ 115.253020][ T6743] syz.0.193: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 115.301286][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.0.193 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 115.301314][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.301325][ T6743] Call Trace: [ 115.301333][ T6743] [ 115.301341][ T6743] dump_stack_lvl+0x189/0x250 [ 115.301374][ T6743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.301397][ T6743] ? __pfx__printk+0x10/0x10 [ 115.301423][ T6743] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 115.301447][ T6743] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 115.301474][ T6743] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 115.301501][ T6743] warn_alloc+0x214/0x310 [ 115.301534][ T6743] ? __pfx_warn_alloc+0x10/0x10 [ 115.301569][ T6743] ? __get_vm_area_node+0x28f/0x300 [ 115.301594][ T6743] ? nf_tables_newset+0x132b/0x2530 [ 115.301626][ T6743] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 115.301678][ T6743] ? nft_hash_estimate+0x102/0x260 [ 115.301705][ T6743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 115.301733][ T6743] ? rcu_is_watching+0x15/0xb0 [ 115.301756][ T6743] ? nf_tables_newset+0x132b/0x2530 [ 115.301782][ T6743] ? nf_tables_newset+0x132b/0x2530 [ 115.301807][ T6743] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 115.301829][ T6743] ? nf_tables_newset+0x132b/0x2530 [ 115.301855][ T6743] ? nft_table_lookup+0x211/0x230 [ 115.301870][ T6743] ? nft_set_lookup+0x128/0x150 [ 115.301886][ T6743] ? nft_hash_privsize+0xbf/0xf0 [ 115.301913][ T6743] nf_tables_newset+0x132b/0x2530 [ 115.301968][ T6743] ? __pfx_nf_tables_newset+0x10/0x10 [ 115.302022][ T6743] ? __nla_parse+0x40/0x60 [ 115.302047][ T6743] nfnetlink_rcv+0x1132/0x2520 [ 115.302105][ T6743] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.302140][ T6743] ? __lock_acquire+0xab9/0xd20 [ 115.302218][ T6743] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.302244][ T6743] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.302275][ T6743] netlink_unicast+0x759/0x8e0 [ 115.302311][ T6743] netlink_sendmsg+0x805/0xb30 [ 115.302341][ T6743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.302366][ T6743] ? aa_sock_msg_perm+0x94/0x160 [ 115.302391][ T6743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.302413][ T6743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.302435][ T6743] __sock_sendmsg+0x21c/0x270 [ 115.302458][ T6743] ____sys_sendmsg+0x505/0x830 [ 115.302487][ T6743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.302520][ T6743] ? import_iovec+0x74/0xa0 [ 115.302546][ T6743] ___sys_sendmsg+0x21f/0x2a0 [ 115.302568][ T6743] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.302629][ T6743] ? __fget_files+0x2a/0x420 [ 115.302652][ T6743] ? __fget_files+0x3a0/0x420 [ 115.302705][ T6743] __x64_sys_sendmsg+0x19b/0x260 [ 115.302725][ T6743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.302756][ T6743] ? rcu_is_watching+0x15/0xb0 [ 115.302784][ T6743] ? do_syscall_64+0xbe/0x3b0 [ 115.302815][ T6743] do_syscall_64+0xfa/0x3b0 [ 115.302837][ T6743] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.302861][ T6743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.302880][ T6743] ? clear_bhb_loop+0x60/0xb0 [ 115.302902][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.302918][ T6743] RIP: 0033:0x7f2d4c78e929 [ 115.302935][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.302950][ T6743] RSP: 002b:00007f2d4d64a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.302980][ T6743] RAX: ffffffffffffffda RBX: 00007f2d4c9b5fa0 RCX: 00007f2d4c78e929 [ 115.302992][ T6743] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 115.303004][ T6743] RBP: 00007f2d4c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.303015][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.303025][ T6743] R13: 0000000000000000 R14: 00007f2d4c9b5fa0 R15: 00007ffe7c0c5a88 [ 115.303057][ T6743] [ 115.303141][ T6743] Mem-Info: [ 115.556753][ T6760] netlink: 'syz.4.197': attribute type 4 has an invalid length. [ 115.598801][ T6743] active_anon:7606 inactive_anon:0 isolated_anon:0 [ 115.598801][ T6743] active_file:1209 inactive_file:39831 isolated_file:0 [ 115.598801][ T6743] unevictable:768 dirty:107 writeback:0 [ 115.598801][ T6743] slab_reclaimable:10352 slab_unreclaimable:97042 [ 115.598801][ T6743] mapped:31945 shmem:4233 pagetables:1014 [ 115.598801][ T6743] sec_pagetables:0 bounce:0 [ 115.598801][ T6743] kernel_misc_reclaimable:0 [ 115.598801][ T6743] free:1324219 free_pcp:16924 free_cma:0 [ 115.770826][ T6757] can: request_module (can-proto-3) failed. [ 115.800717][ T6752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.848797][ T6743] Node 0 active_anon:30424kB inactive_anon:0kB active_file:4836kB inactive_file:159124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127780kB dirty:424kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11644kB pagetables:3988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.908761][ T6743] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 116.020925][ T6752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.029587][ T6743] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.096893][ T6752] bond0 (unregistering): Released all slaves [ 116.125654][ T6743] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 116.159696][ T6743] Node 0 DMA32 free:1389052kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30204kB inactive_anon:0kB active_file:4836kB inactive_file:157548kB unevictable:1536kB writepending:424kB present:3129332kB managed:2558264kB mlocked:0kB bounce:0kB free_pcp:45632kB local_pcp:25764kB free_cma:0kB [ 116.221786][ T6743] lowmem_reserve[]: 0 0 1 1 1 [ 116.229040][ T6743] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 116.322107][ T6743] lowmem_reserve[]: 0 0 0 0 0 [ 116.338848][ T6743] Node 1 Normal free:3889740kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25152kB local_pcp:12896kB free_cma:0kB [ 116.417425][ T6743] lowmem_reserve[]: 0 0 0 0 0 [ 116.425484][ T6768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 116.432532][ T6743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.477916][ T6743] Node 0 DMA32: 1*4kB (E) 1*8kB (E) 3*16kB (UME) 2*32kB (UM) 2*64kB (ME) 2*128kB (UM) 2*256kB (UE) 3*512kB (ME) 3*1024kB (M) 4*2048kB (M) 335*4096kB (M) = 1385980kB [ 116.525519][ T6743] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 116.558384][ T6743] Node 1 Normal: 211*4kB (UME) 66*8kB (UME) 47*16kB (UME) 78*32kB (UME) 27*64kB (UME) 9*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3889740kB [ 116.587331][ T6743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.608985][ T6743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.638788][ T6743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.658674][ T6743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.694379][ T6743] 45270 total pagecache pages [ 116.707791][ T6743] 0 pages in swap cache [ 116.718746][ T6743] Free swap = 124996kB [ 116.732086][ T6743] Total swap = 124996kB [ 116.738767][ T6743] 2097051 pages RAM [ 116.742610][ T6743] 0 pages HighMem/MovableOnly [ 116.762093][ T6743] 425443 pages reserved [ 116.767707][ T6743] 0 pages cma reserved [ 117.833012][ T6810] syz_tun: left allmulticast mode [ 117.838113][ T6810] syz_tun: left promiscuous mode [ 117.849054][ T6810] bridge0: port 3(syz_tun) entered disabled state [ 117.860919][ T6810] bridge_slave_1: left allmulticast mode [ 117.868047][ T6810] bridge_slave_1: left promiscuous mode [ 117.878676][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.914378][ T6810] bridge_slave_0: left allmulticast mode [ 117.926568][ T6810] bridge_slave_0: left promiscuous mode [ 117.937193][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.422693][ T6821] tipc: Started in network mode [ 118.427726][ T6821] tipc: Node identity da67a3d89638, cluster identity 4711 [ 118.438081][ T6821] tipc: Enabled bearer , priority 0 [ 118.447159][ T6821] syzkaller0: entered promiscuous mode [ 118.455852][ T6821] syzkaller0: entered allmulticast mode [ 118.479228][ T6821] tipc: Resetting bearer [ 118.490515][ T6821] tipc: Invalid UDP bearer configuration [ 118.490577][ T6821] tipc: Enabling of bearer rejected, failed to enable media [ 118.609073][ T6818] tipc: Resetting bearer [ 118.637230][ T6818] tipc: Disabling bearer [ 118.984425][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 119.151158][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 119.173633][ T6836] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 119.198129][ T6834] syzkaller0: entered promiscuous mode [ 119.216983][ T6834] syzkaller0: entered allmulticast mode [ 119.221865][ T6836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.390826][ T6846] netlink: zone id is out of range [ 119.396458][ T6846] netlink: zone id is out of range [ 119.404320][ T6846] netlink: zone id is out of range [ 119.416629][ T6846] netlink: zone id is out of range [ 119.429087][ T6846] netlink: zone id is out of range [ 119.475335][ T6846] netlink: zone id is out of range [ 119.487769][ T6846] netlink: zone id is out of range [ 119.502353][ T6846] netlink: zone id is out of range [ 119.513134][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 119.783940][ T6856] netlink: 'syz.4.217': attribute type 2 has an invalid length. [ 119.812043][ T6856] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 119.834076][ T6856] netlink: 'syz.4.217': attribute type 2 has an invalid length. [ 119.839055][ T6857] batman_adv: batadv0: Adding interface: vlan2 [ 119.868076][ T6857] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.871740][ T6856] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 119.933872][ T6856] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 119.944277][ T6856] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 119.950930][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.953880][ T6856] netlink: 'syz.4.217': attribute type 2 has an invalid length. [ 119.976644][ T6856] netlink: 'syz.4.217': attribute type 2 has an invalid length. [ 119.980568][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.019054][ T6857] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 120.401045][ T5913] IPVS: starting estimator thread 0... [ 120.427169][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'. [ 120.519732][ T6890] IPVS: using max 25 ests per chain, 60000 per kthread [ 120.688108][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.230'. [ 121.184472][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 121.561002][ T6800] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 122.990380][ T6963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.247'. [ 123.214591][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 123.334368][ T6800] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 123.466837][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 123.520910][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 123.700971][ T7005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.258'. [ 123.971507][ T7025] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 123.981621][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.990058][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.125799][ T7028] IPv6: Can't replace route, no match found [ 124.179207][ T7033] netlink: 'syz.3.264': attribute type 3 has an invalid length. [ 124.194383][ T7033] netlink: 'syz.3.264': attribute type 5 has an invalid length. [ 124.244657][ T7035] syzkaller0: entered promiscuous mode [ 124.250912][ T7035] syzkaller0: entered allmulticast mode [ 124.446058][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 124.672587][ T7058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.735230][ T7053] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.128122][ T7082] netlink: 'syz.2.278': attribute type 11 has an invalid length. [ 125.225822][ T7102] Cannot find del_set index 1 as target [ 125.435158][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.285'. [ 125.470954][ T7113] netlink: 52 bytes leftover after parsing attributes in process `syz.4.286'. [ 125.723474][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 126.295500][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.318671][ T7152] batadv_slave_1: entered promiscuous mode [ 126.362461][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 126.632102][ T10] IPVS: starting estimator thread 0... [ 126.745462][ T7171] xt_hashlimit: size too large, truncated to 1048576 [ 126.759061][ T7167] IPVS: using max 23 ests per chain, 55200 per kthread [ 127.011188][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 127.022456][ T7174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.302'. [ 127.047557][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 127.115729][ T7176] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 127.483237][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 127.504093][ T7202] netlink: 'syz.2.309': attribute type 4 has an invalid length. [ 127.512110][ T7203] netlink: 'syz.2.309': attribute type 4 has an invalid length. [ 127.528804][ T7199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.308'. [ 127.538896][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 128.739882][ T7264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.747191][ T7264] IPv6: NLM_F_CREATE should be set when creating new route [ 129.024737][ T7280] bridge0: entered promiscuous mode [ 129.482412][ T7302] netlink: 'syz.2.335': attribute type 13 has an invalid length. [ 129.980768][ T7317] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 129.998415][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.0.340 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 129.998446][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.998457][ T7317] Call Trace: [ 129.998465][ T7317] [ 129.998473][ T7317] dump_stack_lvl+0x189/0x250 [ 129.998507][ T7317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.998533][ T7317] ? __pfx__printk+0x10/0x10 [ 129.998560][ T7317] ? kernfs_path_from_node+0x2c/0x260 [ 129.998585][ T7317] ? kernfs_path_from_node+0x2c/0x260 [ 129.998610][ T7317] ? kernfs_path_from_node+0x2c/0x260 [ 129.998638][ T7317] ? kernfs_path_from_node+0x22c/0x260 [ 129.998668][ T7317] ? kernfs_path_from_node+0x2c/0x260 [ 129.998696][ T7317] sysfs_warn_dup+0x8e/0xa0 [ 129.998721][ T7317] sysfs_do_create_link_sd+0xc0/0x110 [ 129.998751][ T7317] device_add_class_symlinks+0x1cf/0x240 [ 129.998781][ T7317] device_add+0x475/0xb50 [ 129.998812][ T7317] wiphy_register+0x1ba6/0x28d0 [ 129.998858][ T7317] ? __pfx_wiphy_register+0x10/0x10 [ 129.998886][ T7317] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 129.998917][ T7317] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 129.998951][ T7317] ieee80211_register_hw+0x33e1/0x4120 [ 129.999002][ T7317] ? ieee80211_register_hw+0x14b1/0x4120 [ 129.999033][ T7317] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 129.999059][ T7317] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.999092][ T7317] ? __hrtimer_setup+0x187/0x210 [ 129.999113][ T7317] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 129.999146][ T7317] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 129.999214][ T7317] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 129.999238][ T7317] ? trace_kmalloc+0x1f/0xd0 [ 129.999257][ T7317] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 129.999280][ T7317] ? kstrndup+0xbf/0x160 [ 129.999316][ T7317] hwsim_new_radio_nl+0xea4/0x1b10 [ 129.999346][ T7317] ? __pfx___nla_validate_parse+0x10/0x10 [ 129.999383][ T7317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 129.999428][ T7317] ? __nla_parse+0x40/0x60 [ 129.999453][ T7317] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 129.999485][ T7317] genl_family_rcv_msg_doit+0x212/0x300 [ 129.999516][ T7317] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.999554][ T7317] ? bpf_lsm_capable+0x9/0x20 [ 129.999576][ T7317] ? security_capable+0x7e/0x2e0 [ 129.999614][ T7317] genl_rcv_msg+0x60e/0x790 [ 129.999644][ T7317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.999664][ T7317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 129.999712][ T7317] netlink_rcv_skb+0x205/0x470 [ 129.999740][ T7317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.999763][ T7317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.999813][ T7317] ? down_read+0x1ad/0x2e0 [ 129.999846][ T7317] genl_rcv+0x28/0x40 [ 129.999864][ T7317] netlink_unicast+0x759/0x8e0 [ 129.999905][ T7317] netlink_sendmsg+0x805/0xb30 [ 129.999946][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.999989][ T7317] ? aa_sock_msg_perm+0x94/0x160 [ 130.000021][ T7317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.000050][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.000080][ T7317] __sock_sendmsg+0x21c/0x270 [ 130.000109][ T7317] ____sys_sendmsg+0x505/0x830 [ 130.000149][ T7317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.000194][ T7317] ? import_iovec+0x74/0xa0 [ 130.000222][ T7317] ___sys_sendmsg+0x21f/0x2a0 [ 130.000246][ T7317] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.000315][ T7317] ? __fget_files+0x2a/0x420 [ 130.000340][ T7317] ? __fget_files+0x3a0/0x420 [ 130.000381][ T7317] __x64_sys_sendmsg+0x19b/0x260 [ 130.000404][ T7317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.000448][ T7317] ? rcu_is_watching+0x15/0xb0 [ 130.000479][ T7317] ? do_syscall_64+0xbe/0x3b0 [ 130.000513][ T7317] do_syscall_64+0xfa/0x3b0 [ 130.000538][ T7317] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.000564][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.000584][ T7317] ? clear_bhb_loop+0x60/0xb0 [ 130.000610][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.000629][ T7317] RIP: 0033:0x7f2d4c78e929 [ 130.000649][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.000665][ T7317] RSP: 002b:00007f2d4d64a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.000688][ T7317] RAX: ffffffffffffffda RBX: 00007f2d4c9b5fa0 RCX: 00007f2d4c78e929 [ 130.000702][ T7317] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 130.000713][ T7317] RBP: 00007f2d4c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.000725][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.000736][ T7317] R13: 0000000000000000 R14: 00007f2d4c9b5fa0 R15: 00007ffe7c0c5a88 [ 130.000772][ T7317] [ 130.693243][ T7327] geneve2: entered promiscuous mode [ 131.282848][ T7368] netlink: 'syz.4.353': attribute type 14 has an invalid length. [ 131.554562][ T7379] __nla_validate_parse: 5 callbacks suppressed [ 131.554584][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 131.580702][ T7379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.358'. [ 131.618672][ T7385] bridge_slave_0: left allmulticast mode [ 131.633015][ T7385] bridge_slave_0: left promiscuous mode [ 131.646580][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.664868][ T7385] bridge_slave_1: left allmulticast mode [ 131.676629][ T7385] bridge_slave_1: left promiscuous mode [ 131.684325][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.715690][ T7385] bond0: (slave bond_slave_0): Releasing backup interface [ 131.736985][ T7385] bond0: (slave bond_slave_1): Releasing backup interface [ 131.781778][ T7385] team0: Port device team_slave_0 removed [ 131.803672][ T7385] team0: Port device team_slave_1 removed [ 131.819431][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.835321][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 131.844873][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.852408][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.859689][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 131.877760][ T7379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.358'. [ 132.069419][ T7089] hid-generic 0005:04F3:8002.0001: collection stack underflow [ 132.069700][ T7406] xt_hashlimit: max too large, truncated to 1048576 [ 132.077775][ T7089] hid-generic 0005:04F3:8002.0001: item 0 0 0 12 parsing failed [ 132.078520][ T7089] hid-generic 0005:04F3:8002.0001: probe with driver hid-generic failed with error -22 [ 132.133250][ T7406] Cannot find add_set index 3 as target [ 132.184477][ T7411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 132.444848][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.514143][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 132.561456][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 132.686405][ T7435] bridge0: port 3(gretap0) entered blocking state [ 132.708903][ T7435] bridge0: port 3(gretap0) entered disabled state [ 132.716312][ T7435] gretap0: entered allmulticast mode [ 132.740040][ T7435] gretap0: entered promiscuous mode [ 132.757209][ T7435] bridge0: port 3(gretap0) entered blocking state [ 132.763878][ T7435] bridge0: port 3(gretap0) entered forwarding state [ 132.771976][ T7441] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.379'. [ 132.791687][ T7441] net_ratelimit: 10 callbacks suppressed [ 132.791707][ T7441] netlink: zone id is out of range [ 132.804298][ T7441] netlink: zone id is out of range [ 132.846788][ T7441] netlink: zone id is out of range [ 132.875750][ T7441] netlink: get zone limit has 8 unknown bytes [ 132.935520][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.984448][ T7448] team_slave_0: entered promiscuous mode [ 132.990291][ T7448] team_slave_1: entered promiscuous mode [ 133.001244][ T7448] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 133.014851][ T7450] tipc: Started in network mode [ 133.020533][ T7450] tipc: Node identity 1a8aa5a35445, cluster identity 4711 [ 133.028354][ T7450] tipc: Enabled bearer , priority 0 [ 133.041865][ T7450] syzkaller0: entered promiscuous mode [ 133.047562][ T7450] syzkaller0: entered allmulticast mode [ 133.048786][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 133.247703][ T7457] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 133.304021][ T7462] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 133.321867][ T7449] tipc: Resetting bearer [ 133.346582][ T7449] tipc: Disabling bearer [ 133.679655][ T7473] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 133.946836][ T7482] tipc: Can't bind to reserved service type 2 [ 133.991469][ T7482] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 134.709888][ T7513] netlink: 'syz.3.401': attribute type 29 has an invalid length. [ 134.726384][ T7513] netlink: 'syz.3.401': attribute type 29 has an invalid length. [ 135.218133][ T7523] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 135.255624][ T7528] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 135.343156][ T7532] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 135.512484][ T7533] bond1: entered promiscuous mode [ 135.528865][ T7533] bond1: entered allmulticast mode [ 135.542756][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.564313][ T7540] netlink: 'syz.4.409': attribute type 21 has an invalid length. [ 135.596822][ T7529] bridge3: entered promiscuous mode [ 135.603623][ T7529] bridge3: entered allmulticast mode [ 135.615975][ T7529] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 135.626830][ T3476] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 135.692284][ T7546] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 135.750188][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 135.824615][ T7551] trusted_key: syz.0.412 sent an empty control message without MSG_MORE. [ 137.060008][ T7568] __nla_validate_parse: 8 callbacks suppressed [ 137.060022][ T7568] netlink: 270 bytes leftover after parsing attributes in process `syz.2.418'. [ 137.096375][ T6800] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.119417][ T6800] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.128445][ T6800] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.144536][ T6800] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.306626][ T7583] netlink: 3 bytes leftover after parsing attributes in process `syz.2.422'. [ 137.342784][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 137.377639][ T7589] netlink: 'syz.3.420': attribute type 30 has an invalid length. [ 137.384974][ T7583] batadv1: entered promiscuous mode [ 137.497761][ T7583] batadv1: entered allmulticast mode [ 137.569777][ T6800] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.569922][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 137.580504][ T6800] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.636798][ T7589] netlink: 'syz.3.420': attribute type 30 has an invalid length. [ 137.646706][ T6800] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.680969][ T6800] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.772473][ T7612] xt_addrtype: ipv6 does not support BROADCAST matching [ 137.806117][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 138.092506][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 138.118344][ T7625] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 138.149793][ T7625] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 138.177463][ T7629] syzkaller0: refused to change device tx_queue_len [ 138.186088][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 138.186133][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 138.877836][ T7659] netlink: 64 bytes leftover after parsing attributes in process `syz.4.442'. [ 138.895243][ T7659] netlink: 64 bytes leftover after parsing attributes in process `syz.4.442'. [ 139.087609][ T7668] netlink: 'syz.0.445': attribute type 3 has an invalid length. [ 139.768609][ T7708] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 139.887348][ T7715] @ÿ: renamed from veth0_vlan [ 140.333798][ T7737] validate_nla: 1 callbacks suppressed [ 140.333818][ T7737] netlink: 'syz.1.465': attribute type 29 has an invalid length. [ 140.449492][ T7745] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 140.470329][ T7741] netlink: zone id is out of range [ 140.480818][ T7741] netlink: zone id is out of range [ 140.485993][ T7741] netlink: zone id is out of range [ 140.520500][ T7741] netlink: zone id is out of range [ 140.546402][ T7741] netlink: zone id is out of range [ 140.557819][ T7745] : entered promiscuous mode [ 140.570561][ T7741] netlink: zone id is out of range [ 140.587626][ T7741] netlink: zone id is out of range [ 140.611263][ T7741] netlink: zone id is out of range [ 140.635835][ T7741] netlink: zone id is out of range [ 140.743312][ T7757] Bluetooth: MGMT ver 1.23 [ 140.772139][ T7761] syzkaller0: entered promiscuous mode [ 140.779339][ T7761] syzkaller0: entered allmulticast mode [ 140.788438][ T7761] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 141.206465][ T7775] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 141.527514][ T5905] IPVS: starting estimator thread 0... [ 141.554012][ T7787] netlink: 'syz.2.480': attribute type 8 has an invalid length. [ 141.638861][ T7795] IPVS: using max 25 ests per chain, 60000 per kthread [ 142.284520][ T7825] delete_channel: no stack [ 142.292939][ T7825] delete_channel: no stack [ 142.360688][ T7836] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.463147][ T7843] __nla_validate_parse: 12 callbacks suppressed [ 142.463166][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 142.804442][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 143.395162][ T7877] vlan3: entered promiscuous mode [ 143.419333][ T7877] bridge0: entered promiscuous mode [ 143.439235][ T7877] vlan3: entered allmulticast mode [ 143.454720][ T7877] bridge0: entered allmulticast mode [ 143.807401][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 143.811244][ T7903] tipc: Enabling of bearer rejected, failed to enable media [ 144.287414][ T7913] xt_TCPMSS: Only works on TCP SYN packets [ 144.575686][ T7925] syzkaller1: entered promiscuous mode [ 144.595670][ T7925] syzkaller1: entered allmulticast mode [ 144.615286][ T7930] tun0: tun_chr_ioctl cmd 2147767507 [ 145.030827][ T7963] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 145.087580][ T7968] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 145.107003][ T7968] netlink: 224 bytes leftover after parsing attributes in process `syz.4.526'. [ 145.120823][ T7972] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 145.205126][ T7971] netlink: 'syz.3.528': attribute type 8 has an invalid length. [ 145.343067][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 145.355149][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.532'. [ 145.558961][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.534'. [ 145.585521][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.534'. [ 145.652516][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 145.663387][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 145.687770][ T7994] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 146.027256][ T8025] net_ratelimit: 163 callbacks suppressed [ 146.027277][ T8025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.049330][ T8025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.210915][ T8031] unsupported nlmsg_type 40 [ 146.261972][ T8034] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 146.276373][ T8034] !: entered promiscuous mode [ 146.290526][ T8034] !: entered allmulticast mode [ 146.338642][ T8034] bridge0: port 1(0!) entered blocking state [ 146.371680][ T8034] bridge0: port 1(0!) entered disabled state [ 147.137607][ T8069] tipc: Started in network mode [ 147.158032][ T8069] tipc: Node identity 96d9f12943f5, cluster identity 4711 [ 147.199961][ T8069] tipc: Enabled bearer , priority 0 [ 147.304394][ T8072] syzkaller0: entered promiscuous mode [ 147.370963][ T8072] syzkaller0: entered allmulticast mode [ 147.508487][ T8088] __nla_validate_parse: 6 callbacks suppressed [ 147.508507][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 147.521159][ T8086] netlink: 140 bytes leftover after parsing attributes in process `syz.4.561'. [ 147.637510][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.562'. [ 148.122583][ T8106] netlink: 'syz.2.564': attribute type 21 has an invalid length. [ 148.168925][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'. [ 148.191531][ T8105] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 148.226302][ T8105] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 148.319620][ T7943] tipc: Node number set to 3576492329 [ 149.096763][ T8141] netlink: 'syz.4.569': attribute type 10 has an invalid length. [ 149.152579][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.569'. [ 149.289212][ T8141] dummy0: entered promiscuous mode [ 149.305751][ T8141] dummy0: entered allmulticast mode [ 149.371311][ T8141] bridge0: port 4(dummy0) entered blocking state [ 149.416260][ T8141] bridge0: port 4(dummy0) entered disabled state [ 149.636212][ T8141] bridge0: port 4(dummy0) entered blocking state [ 149.642782][ T8141] bridge0: port 4(dummy0) entered forwarding state [ 149.753614][ T8151] netlink: 248 bytes leftover after parsing attributes in process `syz.2.572'. [ 149.818490][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 149.882189][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 149.945615][ T8157] netlink: 124 bytes leftover after parsing attributes in process `syz.2.572'. [ 150.117224][ T8162] netlink: 'syz.4.576': attribute type 23 has an invalid length. [ 150.143043][ T8166] Cannot find set identified by id 0 to match [ 150.508852][ T30] audit: type=1800 audit(1752695777.357:2): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.581" name="memory.events" dev="tmpfs" ino=556 res=0 errno=0 [ 150.730042][ T8192] tipc: Enabled bearer , priority 0 [ 150.752313][ T8192] tipc: Resetting bearer [ 150.786561][ T8190] tipc: Disabling bearer [ 150.856615][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'. [ 151.251015][ T8230] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 151.265036][ T8231] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 151.285441][ T8232] bridge_slave_0: left allmulticast mode [ 151.309894][ T8232] bridge_slave_0: left promiscuous mode [ 151.327844][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.358118][ T8232] bridge_slave_1: left allmulticast mode [ 151.388924][ T8232] bridge_slave_1: left promiscuous mode [ 151.394780][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.406679][ T8241] netlink: 'syz.1.597': attribute type 7 has an invalid length. [ 151.445503][ T8232] team0: Port device team_slave_0 removed [ 151.455674][ T8241] netlink: 'syz.1.597': attribute type 8 has an invalid length. [ 151.471828][ T8232] team0: Port device team_slave_1 removed [ 151.479187][ T8232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.487963][ T8232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.505248][ T8232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.605716][ T8241] veth0_to_bridge: entered promiscuous mode [ 151.667589][ T8241] gretap0: entered promiscuous mode [ 151.701473][ T8241] veth0_to_bridge: left promiscuous mode [ 151.711819][ T8241] gretap0: left promiscuous mode [ 151.935028][ T8259] netlink: 'syz.3.602': attribute type 2 has an invalid length. [ 151.946644][ T8259] netlink: 'syz.3.602': attribute type 2 has an invalid length. [ 152.236945][ T8272] unsupported nla_type 52263 [ 152.699222][ T8290] ±ÿ: renamed from batadv_slave_1 [ 152.924860][ T8298] netlink: 'syz.3.616': attribute type 3 has an invalid length. [ 152.934412][ T8298] __nla_validate_parse: 6 callbacks suppressed [ 152.934430][ T8298] netlink: 666 bytes leftover after parsing attributes in process `syz.3.616'. [ 153.683738][ T8342] netlink: 224 bytes leftover after parsing attributes in process `syz.3.628'. [ 153.997004][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 154.062354][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 154.086844][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 154.123170][ T8358] netlink: 'syz.1.634': attribute type 7 has an invalid length. [ 154.136887][ T8358] netlink: 'syz.1.634': attribute type 8 has an invalid length. [ 154.159078][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 154.227107][ T8358] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 154.240547][ T8361] netlink: 'syz.2.635': attribute type 2 has an invalid length. [ 154.257732][ T8358] batadv_slave_1: entered promiscuous mode [ 154.258957][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 154.266135][ T8363] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 154.379565][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 154.451900][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 154.986304][ T8386] sctp: [Deprecated]: syz.4.641 (pid 8386) Use of int in maxseg socket option. [ 154.986304][ T8386] Use struct sctp_assoc_value instead [ 155.655643][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 156.325618][ T8448] openvswitch: netlink: Flow key attr not present in new flow. [ 156.710973][ T8470] nbd: nbd0 already in use [ 156.727257][ T8470] block nbd0: NBD_DISCONNECT [ 156.755052][ T8470] block nbd0: Send disconnect failed -32 [ 156.773141][ T8470] block nbd0: shutting down sockets [ 157.494757][ T8492] gretap0: left allmulticast mode [ 157.516449][ T8492] gretap0: left promiscuous mode [ 157.532859][ T8492] bridge0: port 3(gretap0) entered disabled state [ 157.567790][ T8492] bridge0: port 4(dummy0) entered disabled state [ 157.631212][ T8492] bridge_slave_0: left allmulticast mode [ 157.652413][ T8492] bridge_slave_0: left promiscuous mode [ 157.670820][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.705764][ T8492] bridge_slave_1: left allmulticast mode [ 157.713608][ T8492] bridge_slave_1: left promiscuous mode [ 157.719904][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.741119][ T8492] bond0: (slave bond_slave_0): Releasing backup interface [ 157.759760][ T8492] bond0: (slave bond_slave_1): Releasing backup interface [ 157.791488][ T8492] team_slave_0: left promiscuous mode [ 157.816395][ T8492] team0: Port device team_slave_0 removed [ 157.825190][ T8492] team_slave_1: left promiscuous mode [ 157.837194][ T8492] team0: Port device team_slave_1 removed [ 157.847722][ T8492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.855606][ T8492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.867922][ T8492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.876070][ T8492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.975002][ T8501] dummy0: left promiscuous mode [ 157.984366][ T8501] dummy0: left allmulticast mode [ 158.008794][ T8501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.074257][ T8515] tipc: Enabling of bearer rejected, failed to enable media [ 158.096269][ T8522] __nla_validate_parse: 10 callbacks suppressed [ 158.096289][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 158.139448][ T8516] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.673'. [ 158.635598][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 158.682130][ T8541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.837318][ T8546] validate_nla: 1 callbacks suppressed [ 158.837339][ T8546] netlink: 'syz.1.682': attribute type 2 has an invalid length. [ 158.884002][ T8546] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.682'. [ 159.342480][ T8552] netlink: 'syz.1.683': attribute type 33 has an invalid length. [ 159.350642][ T8552] netlink: 152 bytes leftover after parsing attributes in process `syz.1.683'. [ 159.354269][ T8554] pim6reg9: entered allmulticast mode [ 159.452152][ T8556] netlink: 'syz.0.685': attribute type 4 has an invalid length. [ 159.488110][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 159.507205][ T8556] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 159.525452][ T8556] team0: Device ipvlan2 is already an upper device of the team interface [ 160.094772][ T8577] vlan2: entered promiscuous mode [ 160.117455][ T8577] bond0: entered promiscuous mode [ 160.429632][ T8585] xt_CT: No such helper "pptp" [ 160.700709][ T8607] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 160.764933][ T8607] : entered promiscuous mode [ 161.042935][ T8613] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 161.117036][ T8615] bond1: (slave gretap2): making interface the new active one [ 161.126938][ T8615] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 161.682510][ T8629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.869971][ T8642] netlink: 'syz.0.707': attribute type 39 has an invalid length. [ 161.976076][ T7946] IPVS: starting estimator thread 0... [ 162.068840][ T8647] IPVS: using max 23 ests per chain, 55200 per kthread [ 162.647765][ T8676] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 162.656133][ T8676] netlink: 'syz.0.719': attribute type 4 has an invalid length. [ 162.664089][ T8676] netlink: 208 bytes leftover after parsing attributes in process `syz.0.719'. [ 162.673706][ T8676] NCSI netlink: No device for ifindex 3088861696 [ 162.683516][ T8674] pim6reg1: entered promiscuous mode [ 162.704349][ T8674] pim6reg1: entered allmulticast mode [ 162.866087][ T8687] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 162.994000][ T8693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.005134][ T8695] xt_TCPMSS: Only works on TCP SYN packets [ 163.018435][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 163.208984][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 163.383232][ T8708] netlink: 48 bytes leftover after parsing attributes in process `syz.4.728'. [ 163.392598][ T8708] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 163.477114][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 163.690038][ T8716] team0: Port device dummy0 added [ 163.718591][ T8716] team0: Port device dummy0 removed [ 163.988436][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 164.308926][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 164.336284][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 164.399061][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 164.434389][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 164.452277][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.742'. [ 164.468902][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 164.816862][ T8767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.165465][ T8790] validate_nla: 3 callbacks suppressed [ 165.165484][ T8790] netlink: 'syz.3.754': attribute type 4 has an invalid length. [ 165.241311][ T8791] netlink: 'syz.1.755': attribute type 39 has an invalid length. [ 165.307233][ T8793] netlink: 'syz.3.756': attribute type 99 has an invalid length. [ 165.775853][ T5849] Bluetooth: hci4: link tx timeout [ 165.783804][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 165.794215][ T5849] Bluetooth: hci4: link tx timeout [ 165.799975][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.808917][ T5849] Bluetooth: hci4: link tx timeout [ 165.815302][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 165.823458][ T5849] Bluetooth: hci4: link tx timeout [ 165.828614][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.413699][ T8846] wireguard0: entered promiscuous mode [ 166.419431][ T8846] wireguard0: entered allmulticast mode [ 167.414943][ T8845] syz.2.774 (8845) used greatest stack depth: 16184 bytes left [ 167.748806][ T3476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.773271][ T3476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.888838][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 167.991198][ T8891] syzkaller1: entered promiscuous mode [ 168.007853][ T8891] syzkaller1: entered allmulticast mode [ 168.066330][ T3476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.077283][ T3476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.100551][ T8911] netlink: 'syz.4.788': attribute type 16 has an invalid length. [ 168.117291][ T8911] netlink: 'syz.4.788': attribute type 17 has an invalid length. [ 168.179507][ T8911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.547778][ T8936] __nla_validate_parse: 6 callbacks suppressed [ 168.547798][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'. [ 168.693928][ T8945] IPVS: Error connecting to the multicast addr [ 169.076203][ T8964] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 169.108273][ T8964] netlink: 232 bytes leftover after parsing attributes in process `syz.0.803'. [ 169.134418][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 169.137516][ T8970] syzkaller0: entered promiscuous mode [ 169.156151][ T8970] syzkaller0: entered allmulticast mode [ 169.727546][ T8993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.808'. [ 169.767491][ T8993] netlink: 43 bytes leftover after parsing attributes in process `syz.0.808'. [ 169.824494][ T8993] netlink: 'syz.0.808': attribute type 6 has an invalid length. [ 169.868789][ T8993] netlink: 43 bytes leftover after parsing attributes in process `syz.0.808'. [ 169.939576][ T9002] veth0: entered promiscuous mode [ 169.970013][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 170.032942][ T9004] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 170.346949][ T9007] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 170.384214][ T9007] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 170.430967][ T9007] bond1: (slave vti0): making interface the new active one [ 170.469007][ T9007] bond1: (slave vti0): Enslaving as an active interface with an up link [ 170.643624][ T8994] veth0: left promiscuous mode [ 171.828985][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 171.854307][ T9070] veth0: entered promiscuous mode [ 171.878000][ T9070] veth0: left promiscuous mode [ 172.122593][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 172.520430][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'. [ 172.596613][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'. [ 172.653405][ T9109] Cannot find del_set index 0 as target [ 173.422643][ T9142] IPVS: Scheduler module ip_vs_sip not found [ 173.633563][ T9152] __nla_validate_parse: 3 callbacks suppressed [ 173.633583][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 173.699829][ T9152] netlink: 120 bytes leftover after parsing attributes in process `syz.1.845'. [ 173.859504][ T9165] TCP: TCP_TX_DELAY enabled [ 174.094704][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 174.417091][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 174.426079][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 174.483069][ T9178] netlink: 'syz.3.853': attribute type 13 has an invalid length. [ 174.541444][ T9179] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.608463][ T9184] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.855'. [ 174.726353][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 174.874948][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 174.889494][ T9185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.854'. [ 174.927823][ T9188] macsec1: entered promiscuous mode [ 174.951828][ T9188] macsec1: entered allmulticast mode [ 175.123498][ T9201] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 175.131855][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 175.754206][ T9234] netlink: 'syz.4.871': attribute type 3 has an invalid length. [ 175.983090][ T9247] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 175.985824][ T9251] macsec1: entered promiscuous mode [ 176.012774][ T9251] bridge0: port 1(macsec1) entered blocking state [ 176.020013][ T9251] bridge0: port 1(macsec1) entered disabled state [ 176.026834][ T9251] macsec1: entered allmulticast mode [ 176.043369][ T9251] macsec1: left allmulticast mode [ 176.057928][ T9256] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 176.078376][ T9247] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 176.406429][ T9267] netlink: 'syz.4.879': attribute type 10 has an invalid length. [ 176.522230][ T9267] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 176.537422][ T30] audit: type=1800 audit(1752695803.397:3): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.882" name="blkio.bfq.time_recursive" dev="tmpfs" ino=921 res=0 errno=0 [ 176.738270][ T30] audit: type=1800 audit(1752695803.447:4): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.882" name="blkio.bfq.time_recursive" dev="tmpfs" ino=921 res=0 errno=0 [ 176.884445][ T9254] infiniband syz!: set down [ 176.890851][ T9254] infiniband syz!: added team_slave_0 [ 177.045228][ T9254] RDS/IB: syz!: added [ 177.062117][ T9254] smc: adding ib device syz! with port count 1 [ 177.068597][ T9254] smc: ib device syz! port 1 has pnetid [ 177.079031][ T9293] syzkaller1: entered promiscuous mode [ 177.084514][ T9293] syzkaller1: entered allmulticast mode [ 178.548834][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.248051][ T9352] __nla_validate_parse: 13 callbacks suppressed [ 179.248072][ T9352] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.904'. [ 179.266458][ T9352] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 179.275032][ T9352] openvswitch: netlink: Message has 1 unknown bytes. [ 179.492476][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'. [ 179.758056][ T9364] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.136362][ T9385] netlink: 596 bytes leftover after parsing attributes in process `syz.0.913'. [ 180.148352][ T9383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.264206][ T9389] netlink: 96 bytes leftover after parsing attributes in process `syz.0.915'. [ 180.371472][ T9392] netlink: 248 bytes leftover after parsing attributes in process `syz.0.916'. [ 180.383089][ T9392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.916'. [ 180.772682][ T9403] vlan3: entered promiscuous mode [ 180.777851][ T9403] team0: entered promiscuous mode [ 180.783123][ T9403] team_slave_0: entered promiscuous mode [ 180.789277][ T9403] team_slave_1: entered promiscuous mode [ 181.351531][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.923'. [ 181.410969][ T9425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.922'. [ 181.528424][ T9425] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 181.701334][ T9436] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 181.815429][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 181.855762][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 182.475038][ T9464] tap0: tun_chr_ioctl cmd 1074025680 [ 182.533315][ T9467] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 182.628452][ T9467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.763323][ T9473] bond2: (slave bridge4): making interface the new active one [ 182.773938][ T9473] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 182.888428][ T9467] gretap1: entered promiscuous mode [ 183.107149][ T9480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.601430][ T9498] netlink: 'syz.3.941': attribute type 2 has an invalid length. [ 183.662710][ T9498] þ: entered promiscuous mode [ 183.983476][ T9506] tc_dump_action: action bad kind [ 184.137951][ T9514] GUP no longer grows the stack in syz.1.944 (9514): 200000004000-200000008000 (200000002000) [ 184.168854][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.1.944 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 184.168886][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.168897][ T9514] Call Trace: [ 184.168906][ T9514] [ 184.168915][ T9514] dump_stack_lvl+0x189/0x250 [ 184.168951][ T9514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.168976][ T9514] ? __pfx__printk+0x10/0x10 [ 184.168999][ T9514] ? find_vma+0xe7/0x160 [ 184.169040][ T9514] __get_user_pages+0x2a60/0x30b0 [ 184.169103][ T9514] ? __pfx___get_user_pages+0x10/0x10 [ 184.169123][ T9514] ? __gup_longterm_locked+0x309/0x15b0 [ 184.169143][ T9514] ? down_read_killable+0x1d1/0x350 [ 184.169171][ T9514] ? try_get_folio+0x633/0x660 [ 184.169198][ T9514] __gup_longterm_locked+0x3e3/0x15b0 [ 184.169259][ T9514] gup_fast_fallback+0x1cd4/0x2260 [ 184.169339][ T9514] ? __pfx_gup_fast_fallback+0x10/0x10 [ 184.169365][ T9514] ? rcu_is_watching+0x15/0xb0 [ 184.169393][ T9514] ? is_valid_gup_args+0x11f/0x200 [ 184.169417][ T9514] ? pin_user_pages_fast+0x4d/0xb0 [ 184.169441][ T9514] rds_cmsg_rdma_args+0x8f4/0x1240 [ 184.169504][ T9514] rds_cmsg_send+0x33d/0x5c0 [ 184.169547][ T9514] rds_sendmsg+0x1129/0x1f00 [ 184.169595][ T9514] ? __pfx_rds_sendmsg+0x10/0x10 [ 184.169620][ T9514] ? aa_sk_perm+0x81e/0x950 [ 184.169654][ T9514] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.169678][ T9514] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 184.169706][ T9514] ? aa_sock_msg_perm+0x94/0x160 [ 184.169736][ T9514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.169765][ T9514] ? __pfx_rds_sendmsg+0x10/0x10 [ 184.169793][ T9514] __sock_sendmsg+0x21c/0x270 [ 184.169822][ T9514] ____sys_sendmsg+0x505/0x830 [ 184.169861][ T9514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.169904][ T9514] ? import_iovec+0x74/0xa0 [ 184.169933][ T9514] ___sys_sendmsg+0x21f/0x2a0 [ 184.169956][ T9514] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.170022][ T9514] ? __fget_files+0x2a/0x420 [ 184.170046][ T9514] ? __fget_files+0x3a0/0x420 [ 184.170085][ T9514] __x64_sys_sendmsg+0x19b/0x260 [ 184.170107][ T9514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.170140][ T9514] ? rcu_is_watching+0x15/0xb0 [ 184.170170][ T9514] ? do_syscall_64+0xbe/0x3b0 [ 184.170200][ T9514] do_syscall_64+0xfa/0x3b0 [ 184.170223][ T9514] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.170246][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.170266][ T9514] ? clear_bhb_loop+0x60/0xb0 [ 184.170301][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.170319][ T9514] RIP: 0033:0x7fc63538e929 [ 184.170338][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.170352][ T9514] RSP: 002b:00007fc63614b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.170374][ T9514] RAX: ffffffffffffffda RBX: 00007fc6355b6240 RCX: 00007fc63538e929 [ 184.170388][ T9514] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009 [ 184.170400][ T9514] RBP: 00007fc635410b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.170411][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.170423][ T9514] R13: 0000000000000000 R14: 00007fc6355b6240 R15: 00007ffeaf9c8fe8 [ 184.170458][ T9514] [ 184.982824][ T9530] __nla_validate_parse: 6 callbacks suppressed [ 184.982846][ T9530] netlink: 260 bytes leftover after parsing attributes in process `syz.0.950'. [ 185.163154][ T9541] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 185.234522][ T9543] netlink: 'syz.3.954': attribute type 11 has an invalid length. [ 185.249390][ T9543] netlink: 'syz.3.954': attribute type 11 has an invalid length. [ 185.278129][ T9543] netlink: 224 bytes leftover after parsing attributes in process `syz.3.954'. [ 185.481599][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 185.915345][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.961'. [ 186.406449][ T9584] netlink: 52 bytes leftover after parsing attributes in process `syz.0.968'. [ 186.422162][ T9584] netlink: 248 bytes leftover after parsing attributes in process `syz.0.968'. [ 186.609943][ T9586] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma? [ 186.834291][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.969'. [ 187.137391][ T9606] batadv_slave_0: left promiscuous mode [ 187.165038][ T9609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.176640][ T9606] bond1: left promiscuous mode [ 187.182187][ T9606] bridge3: left promiscuous mode [ 187.188478][ T9606] bond1: left allmulticast mode [ 187.193667][ T9606] bridge3: left allmulticast mode [ 187.215842][ T9606] vlan2: left promiscuous mode [ 187.221156][ T9606] bond0: left promiscuous mode [ 187.239727][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 187.243075][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.973'. [ 187.272666][ T9611] netlink: 196 bytes leftover after parsing attributes in process `syz.0.975'. [ 188.542214][ T9684] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 188.560013][ T9684] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 188.579950][ T9684] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 188.594412][ T9684] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 188.967426][ T9707] ip6gretap1: entered promiscuous mode [ 189.167120][ T9714] Can't find ip_set type bitmap:ip,mac [ 189.178734][ T9718] Can't find ip_set type bitmap:ip,mac [ 189.640975][ T9749] tipc: Started in network mode [ 189.646787][ T9749] tipc: Node identity 5e2b6eb85752, cluster identity 4711 [ 189.669300][ T9749] tipc: Enabled bearer , priority 0 [ 189.709329][ T9753] syzkaller0: entered promiscuous mode [ 189.739452][ T9753] syzkaller0: entered allmulticast mode [ 189.761639][ T9744] netlink: 'syz.0.1012': attribute type 10 has an invalid length. [ 189.775490][ T9744] team0: Device ipvlan1 failed to register rx_handler [ 189.822864][ T9737] tipc: Resetting bearer [ 189.850909][ T9736] tipc: Resetting bearer [ 189.895321][ T9736] tipc: Disabling bearer [ 190.804055][ T9807] __nla_validate_parse: 6 callbacks suppressed [ 190.804074][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 191.869173][ T9787] gre1: left allmulticast mode [ 192.124405][ T59] netdevsim netdevsim4 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.154598][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.307084][ T9825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.330579][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.418913][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.564390][ T9851] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1039'. [ 192.753491][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 192.757697][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'. [ 193.026441][ T9860] x_tables: duplicate underflow at hook 3 [ 193.621869][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 193.637523][ T9892] veth0_to_bridge: entered promiscuous mode [ 193.646976][ T9883] netlink: 'syz.0.1048': attribute type 20 has an invalid length. [ 193.694391][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 193.695413][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.755925][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.761503][ T9883] netlink: 'syz.0.1048': attribute type 20 has an invalid length. [ 193.796620][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.821234][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.283722][ T9879] veth0_to_bridge: left promiscuous mode [ 194.440133][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 194.539967][ T9919] macsec1: entered allmulticast mode [ 194.545325][ T9919] hsr0: entered allmulticast mode [ 194.550771][ T30] audit: type=1800 audit(1752695821.397:5): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1059" name="blkio.bfq.time_recursive" dev="tmpfs" ino=924 res=0 errno=0 [ 194.613153][ T9919] hsr_slave_0: entered allmulticast mode [ 194.629072][ T9919] hsr_slave_1: entered allmulticast mode [ 194.629362][ T9928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1057'. [ 194.681537][ T9919] hsr0: left allmulticast mode [ 194.697027][ T9919] hsr_slave_0: left allmulticast mode [ 194.741861][ T9919] hsr_slave_1: left allmulticast mode [ 194.946890][ T9941] delete_channel: no stack [ 195.025709][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 195.109059][ T9945] nbd: illegal input index -381222912 [ 195.516785][ T9925] infiniband syz0: set down [ 195.539423][ T9925] infiniband syz0: added ipvlan1 [ 195.554849][ T9925] syz0: rxe_create_cq: returned err = -12 [ 195.571667][ T9925] infiniband syz0: Couldn't create ib_mad CQ [ 195.581931][ T9925] infiniband syz0: Couldn't open port 1 [ 195.654144][ T9925] RDS/IB: syz0: added [ 195.658237][ T9925] smc: adding ib device syz0 with port count 1 [ 195.680212][ T9925] smc: ib device syz0 port 1 has pnetid [ 196.097635][ T9972] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1071'. [ 196.214912][ T9976] openvswitch: netlink: IP tunnel dst address not specified [ 196.286770][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 196.322754][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 196.615469][ T9995] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 196.661899][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 196.993123][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 197.093470][T10007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.190850][T10014] warn_alloc: 1 callbacks suppressed [ 197.190869][T10014] syz.0.1084: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.214355][T10014] CPU: 1 UID: 0 PID: 10014 Comm: syz.0.1084 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 197.214384][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.214394][T10014] Call Trace: [ 197.214403][T10014] [ 197.214411][T10014] dump_stack_lvl+0x189/0x250 [ 197.214445][T10014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.214479][T10014] ? __pfx__printk+0x10/0x10 [ 197.214506][T10014] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.214532][T10014] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.214560][T10014] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 197.214588][T10014] warn_alloc+0x214/0x310 [ 197.214622][T10014] ? __pfx_warn_alloc+0x10/0x10 [ 197.214660][T10014] ? __get_vm_area_node+0x28f/0x300 [ 197.214684][T10014] ? htable_create+0xfc/0x7a0 [ 197.214709][T10014] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 197.214772][T10014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.214806][T10014] ? rcu_is_watching+0x15/0xb0 [ 197.214831][T10014] ? htable_create+0xfc/0x7a0 [ 197.214847][T10014] ? htable_create+0xfc/0x7a0 [ 197.214863][T10014] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 197.214887][T10014] ? htable_create+0xfc/0x7a0 [ 197.214902][T10014] ? hashlimit_pernet+0x23/0x240 [ 197.214930][T10014] htable_create+0xfc/0x7a0 [ 197.214957][T10014] hashlimit_mt_check_common+0x719/0xa10 [ 197.214988][T10014] hashlimit_mt_check_v1+0x221/0x360 [ 197.215011][T10014] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 197.215038][T10014] ? xt_find_match+0x1f7/0x250 [ 197.215075][T10014] xt_check_match+0x3d1/0xab0 [ 197.215103][T10014] ? __pfx___mutex_lock+0x10/0x10 [ 197.215134][T10014] ? __pfx_xt_check_match+0x10/0x10 [ 197.215167][T10014] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 197.215202][T10014] ? xt_find_match+0x1f7/0x250 [ 197.215238][T10014] translate_table+0x150b/0x2000 [ 197.215293][T10014] ? __pfx_translate_table+0x10/0x10 [ 197.215322][T10014] ? __might_fault+0xb0/0x130 [ 197.215369][T10014] ? _copy_from_user+0x94/0xb0 [ 197.215399][T10014] do_ipt_set_ctl+0x967/0xcd0 [ 197.215434][T10014] ? rcu_is_watching+0x15/0xb0 [ 197.215456][T10014] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 197.215514][T10014] ? __pfx___mutex_lock+0x10/0x10 [ 197.215540][T10014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.215564][T10014] ? aa_sk_perm+0x81e/0x950 [ 197.215597][T10014] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.215632][T10014] nf_setsockopt+0x26f/0x290 [ 197.215653][T10014] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 197.215681][T10014] do_sock_setsockopt+0x25a/0x3e0 [ 197.215713][T10014] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 197.215748][T10014] ? __fget_files+0x2a/0x420 [ 197.215784][T10014] __x64_sys_setsockopt+0x18b/0x220 [ 197.215821][T10014] do_syscall_64+0xfa/0x3b0 [ 197.215845][T10014] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.215869][T10014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.215888][T10014] ? clear_bhb_loop+0x60/0xb0 [ 197.215912][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.215930][T10014] RIP: 0033:0x7f2d4c78e929 [ 197.215948][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.215963][T10014] RSP: 002b:00007f2d4d64a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.215984][T10014] RAX: ffffffffffffffda RBX: 00007f2d4c9b5fa0 RCX: 00007f2d4c78e929 [ 197.215997][T10014] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 197.216010][T10014] RBP: 00007f2d4c810b39 R08: 0000000000000518 R09: 0000000000000000 [ 197.216021][T10014] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 197.216032][T10014] R13: 0000000000000000 R14: 00007f2d4c9b5fa0 R15: 00007ffe7c0c5a88 [ 197.216067][T10014] [ 197.216074][T10014] Mem-Info: [ 197.292541][T10007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.294722][T10014] active_anon:3791 inactive_anon:0 isolated_anon:0 [ 197.294722][T10014] active_file:1424 inactive_file:39871 isolated_file:0 [ 197.294722][T10014] unevictable:768 dirty:187 writeback:0 [ 197.294722][T10014] slab_reclaimable:11845 slab_unreclaimable:102948 [ 197.294722][T10014] mapped:30989 shmem:1531 pagetables:949 [ 197.294722][T10014] sec_pagetables:0 bounce:0 [ 197.294722][T10014] kernel_misc_reclaimable:0 [ 197.294722][T10014] free:1322149 free_pcp:17902 free_cma:0 [ 197.322396][T10007] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 197.326309][T10014] Node 0 active_anon:15164kB inactive_anon:0kB active_file:5696kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123956kB dirty:744kB writeback:0kB shmem:4588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12312kB pagetables:3628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.369677][T10007] bond3: (slave vti0): Error -95 calling set_mac_address [ 197.382692][T10014] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.725436][T10014] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.754586][T10014] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 197.761234][T10014] Node 0 DMA32 free:1381556kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15016kB inactive_anon:0kB active_file:5696kB inactive_file:157708kB unevictable:1536kB writepending:744kB present:3129332kB managed:2558264kB mlocked:0kB bounce:0kB free_pcp:48436kB local_pcp:15872kB free_cma:0kB [ 197.794038][T10014] lowmem_reserve[]: 0 0 1 1 1 [ 197.798853][T10014] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 197.828165][T10014] lowmem_reserve[]: 0 0 0 0 0 [ 197.837135][T10014] Node 1 Normal free:3891568kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23588kB local_pcp:11904kB free_cma:0kB [ 197.869372][T10014] lowmem_reserve[]: 0 0 0 0 0 [ 197.874147][T10014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.887094][T10014] Node 0 DMA32: 301*4kB (M) 909*8kB (UME) 290*16kB (UME) 524*32kB (UM) 167*64kB (UME) 82*128kB (UM) 49*256kB (UME) 32*512kB (UME) 27*1024kB (UME) 4*2048kB (UME) 309*4096kB (M) = 1381500kB [ 197.939008][T10014] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 197.983038][T10014] Node 1 Normal: 212*4kB (UME) 66*8kB (UME) 47*16kB (UME) 115*32kB (UME) 37*64kB (UME) 9*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3891568kB [ 198.029238][T10014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.042477][T10014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.082972][T10014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.139767][T10014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.164316][T10014] 42823 total pagecache pages [ 198.174454][T10014] 0 pages in swap cache [ 198.178646][T10014] Free swap = 124996kB [ 198.191795][T10014] Total swap = 124996kB [ 198.196006][T10014] 2097051 pages RAM [ 198.210854][T10014] 0 pages HighMem/MovableOnly [ 198.215579][T10014] 425443 pages reserved [ 198.240544][T10014] 0 pages cma reserved [ 198.339750][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 198.631867][T10037] can: request_module (can-proto-0) failed. [ 198.743979][T10042] tipc: Enabled bearer , priority 0 [ 198.771939][T10042] syzkaller0: entered promiscuous mode [ 198.777467][T10042] syzkaller0: entered allmulticast mode [ 198.852598][T10042] tipc: Resetting bearer [ 198.899668][T10041] tipc: Resetting bearer [ 198.949029][T10041] tipc: Disabling bearer [ 199.217855][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 199.258175][T10054] tipc: Cannot configure node identity twice [ 199.698336][T10065] netlink: 'syz.4.1096': attribute type 5 has an invalid length. [ 200.349831][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 200.662897][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 201.054534][T10087] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 201.075225][T10087] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1101'. [ 201.106982][T10087] tc_dump_action: action bad kind [ 201.404545][T10101] netlink: 'syz.2.1105': attribute type 5 has an invalid length. [ 202.672403][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 202.795300][ T6797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.814487][ T6797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.890813][T10143] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1116'. [ 202.904808][T10143] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1116'. [ 202.919787][T10143] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1116'. [ 203.209838][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1121'. [ 203.250256][T10169] sctp: [Deprecated]: syz.1.1122 (pid 10169) Use of int in max_burst socket option. [ 203.250256][T10169] Use struct sctp_assoc_value instead [ 203.272224][T10164] veth3: entered allmulticast mode [ 203.442085][T10177] bridge1: entered allmulticast mode [ 203.717709][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1128'. [ 204.079454][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1133'. [ 204.170028][T10215] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1134'. [ 204.199479][T10217] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 204.209928][T10217] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 204.228355][T10218] tipc: Resetting bearer [ 204.261211][T10218] syzkaller0: left promiscuous mode [ 204.292110][T10216] tipc: Enabling of bearer rejected, already enabled [ 204.363180][T10221] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 204.381782][T10221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1135'. [ 204.391459][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 204.668944][T10232] dvmrp1: entered allmulticast mode [ 204.677208][T10232] dvmrp1: left allmulticast mode [ 205.085486][T10255] netlink: 'syz.0.1142': attribute type 8 has an invalid length. [ 205.300166][T10267] bond_slave_1: mtu greater than device maximum [ 205.589598][T10281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.330800][T10316] netlink: 'syz.1.1163': attribute type 13 has an invalid length. [ 206.527416][T10325] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 206.690903][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 206.693533][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 206.699015][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 206.933628][T10339] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 207.368270][T10356] delete_channel: no stack [ 207.443265][T10358] bridge6: entered promiscuous mode [ 208.099160][T10371] __nla_validate_parse: 13 callbacks suppressed [ 208.099181][T10371] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1177'. [ 208.886486][ T3476] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.911250][T10395] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1184'. [ 208.913282][ T3476] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.952554][ T3476] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.973393][ T3476] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.304006][T10402] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1186'. [ 210.116768][T10441] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.626223][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 210.639148][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 210.827233][T10468] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1202'. [ 210.867430][T10468] 0·: renamed from hsr_slave_1 (while UP) [ 210.880634][T10468] 0·: entered allmulticast mode [ 210.886044][T10468] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 211.041354][T10471] vxlan0: entered promiscuous mode [ 211.064770][T10471] team0: Port device vxlan0 added [ 211.098398][ T6797] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.146529][ T3518] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.154979][ T3518] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.168006][ T3518] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.320893][T10481] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1207'. [ 211.433208][T10486] wireguard0: entered promiscuous mode [ 211.465740][T10486] wireguard0: entered allmulticast mode [ 211.490849][T10488] netlink: 'syz.3.1209': attribute type 3 has an invalid length. [ 211.772211][T10502] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 211.859249][T10506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 212.264447][T10520] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 212.313653][T10520] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1217'. [ 212.591478][T10533] tun0: tun_chr_ioctl cmd 1074025677 [ 212.597087][T10533] tun0: linktype set to 768 [ 213.156173][T10550] ..@ÿ: renamed from bond_slave_0 [ 213.219846][T10554] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1231'. [ 213.285384][T10556] xt_hashlimit: size too large, truncated to 1048576 [ 213.382597][T10560] netlink: 'syz.4.1233': attribute type 64 has an invalid length. [ 213.396027][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 213.406070][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 213.503267][T10566] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1234'. [ 213.523955][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 213.552020][T10568] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1235'. [ 213.566508][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 213.687116][T10568] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 213.696992][T10568] netlink: 'syz.2.1235': attribute type 2 has an invalid length. [ 213.709012][T10572] openvswitch: netlink: IP tunnel dst address not specified [ 214.297793][T10601] openvswitch: netlink: Missing valid actions attribute. [ 214.310017][T10596] dvmrp8: entered allmulticast mode [ 214.316004][T10601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.601768][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 214.723042][T10633] vlan3: entered allmulticast mode [ 214.729200][T10633] bridge_slave_0: entered allmulticast mode [ 214.775247][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 214.880061][T10642] netlink: 'syz.1.1256': attribute type 4 has an invalid length. [ 214.904821][T10642] netlink: 'syz.1.1256': attribute type 17 has an invalid length. [ 214.916333][T10594] dvmrp8: left allmulticast mode [ 215.145318][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.170574][ T59] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.198926][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.296973][T10657] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 216.591636][T10648] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.617748][T10710] netlink: 'syz.0.1275': attribute type 1 has an invalid length. [ 216.753759][T10719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1277'. [ 216.769650][T10648] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.843862][T10648] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.166624][ T78] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.256795][ T78] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.289646][ T78] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.333034][ T78] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.624783][T10741] xt_bpf: check failed: parse error [ 217.946794][T10755] xt_hashlimit: size too large, truncated to 1048576 [ 217.974168][T10756] netlink: 'syz.4.1287': attribute type 1 has an invalid length. [ 218.013492][T10755] xt_hashlimit: max too large, truncated to 1048576 [ 218.102289][T10756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.125370][T10753] bond4: (slave bridge2): making interface the new active one [ 218.137489][T10753] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 218.481228][T10776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.553867][T10781] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 218.568944][T10781] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 218.585748][T10781] __nla_validate_parse: 2 callbacks suppressed [ 218.585770][T10781] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1293'. [ 219.266792][T10816] nbd: must specify a device to reconfigure [ 219.406119][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 219.419320][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 219.432808][T10823] netlink: 'syz.3.1309': attribute type 13 has an invalid length. [ 219.441569][T10823] netlink: 'syz.3.1309': attribute type 12 has an invalid length. [ 219.459971][T10824] netlink: 814 bytes leftover after parsing attributes in process `syz.3.1309'. [ 219.594917][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 220.143771][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 220.228014][T10841] IPVS: length: 92 != 24 [ 221.196614][T10855] netlink: 'syz.0.1315': attribute type 4 has an invalid length. [ 221.218324][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 222.155788][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 222.329343][T10890] netlink: 'syz.3.1324': attribute type 7 has an invalid length. [ 222.351535][T10890] netlink: 'syz.3.1324': attribute type 3 has an invalid length. [ 222.361646][T10890] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1324'. [ 222.371024][T10893] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1325'. [ 224.312094][T10929] __nla_validate_parse: 2 callbacks suppressed [ 224.312114][T10929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1335'. [ 224.524356][T10927] wireguard0: entered promiscuous mode [ 224.539540][T10927] wireguard0: entered allmulticast mode [ 224.926925][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 225.943528][ T6797] smc: removing ib device syz0 [ 226.134773][ T7085] ================================================================== [ 226.142961][ T7085] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 226.151736][ T7085] Read of size 8 at addr ffff88807bc842e8 by task kworker/1:14/7085 [ 226.159714][ T7085] [ 226.162038][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: kworker/1:14 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 226.162055][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.162063][ T7085] Workqueue: events smc_ib_port_event_work [ 226.162081][ T7085] Call Trace: [ 226.162087][ T7085] [ 226.162093][ T7085] dump_stack_lvl+0x189/0x250 [ 226.162109][ T7085] ? __virt_addr_valid+0x1c8/0x5c0 [ 226.162124][ T7085] ? rcu_is_watching+0x15/0xb0 [ 226.162138][ T7085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.162150][ T7085] ? rcu_is_watching+0x15/0xb0 [ 226.162162][ T7085] ? lock_release+0x4b/0x3e0 [ 226.162175][ T7085] ? __virt_addr_valid+0x1c8/0x5c0 [ 226.162188][ T7085] ? __virt_addr_valid+0x4a5/0x5c0 [ 226.162202][ T7085] print_report+0xd2/0x2b0 [ 226.162213][ T7085] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 226.162230][ T7085] kasan_report+0x118/0x150 [ 226.162245][ T7085] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 226.162264][ T7085] __ethtool_get_link_ksettings+0x6e/0x190 [ 226.162282][ T7085] ib_get_eth_speed+0x15e/0x7b0 [ 226.162294][ T7085] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 226.162307][ T7085] ? do_raw_spin_unlock+0x122/0x240 [ 226.162331][ T7085] rxe_query_port+0x93/0x3b0 [ 226.162347][ T7085] ib_query_port+0x170/0x830 [ 226.162360][ T7085] smc_ib_port_event_work+0x15a/0x940 [ 226.162376][ T7085] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.162389][ T7085] ? process_scheduled_works+0x9ef/0x17b0 [ 226.162402][ T7085] ? process_scheduled_works+0x9ef/0x17b0 [ 226.162414][ T7085] process_scheduled_works+0xae1/0x17b0 [ 226.162434][ T7085] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.162451][ T7085] worker_thread+0x8a0/0xda0 [ 226.162470][ T7085] kthread+0x70e/0x8a0 [ 226.162486][ T7085] ? __pfx_worker_thread+0x10/0x10 [ 226.162498][ T7085] ? __pfx_kthread+0x10/0x10 [ 226.162513][ T7085] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.162525][ T7085] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.162538][ T7085] ? __pfx_kthread+0x10/0x10 [ 226.162553][ T7085] ret_from_fork+0x3fc/0x770 [ 226.162566][ T7085] ? __pfx_ret_from_fork+0x10/0x10 [ 226.162579][ T7085] ? __switch_to_asm+0x39/0x70 [ 226.162592][ T7085] ? __switch_to_asm+0x33/0x70 [ 226.162606][ T7085] ? __pfx_kthread+0x10/0x10 [ 226.162620][ T7085] ret_from_fork_asm+0x1a/0x30 [ 226.162639][ T7085] [ 226.162643][ T7085] [ 226.387903][ T7085] Allocated by task 5847: [ 226.392231][ T7085] kasan_save_track+0x3e/0x80 [ 226.396905][ T7085] __kasan_kmalloc+0x93/0xb0 [ 226.401491][ T7085] __kvmalloc_node_noprof+0x30d/0x5f0 [ 226.406855][ T7085] alloc_netdev_mqs+0xa3/0x1170 [ 226.411698][ T7085] rtnl_create_link+0x31f/0xd10 [ 226.416574][ T7085] rtnl_newlink_create+0x25c/0xb00 [ 226.421804][ T7085] rtnl_newlink+0x16d6/0x1c70 [ 226.426746][ T7085] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.431681][ T7085] netlink_rcv_skb+0x205/0x470 [ 226.436440][ T7085] netlink_unicast+0x759/0x8e0 [ 226.441194][ T7085] netlink_sendmsg+0x805/0xb30 [ 226.445957][ T7085] __sock_sendmsg+0x21c/0x270 [ 226.450652][ T7085] __sys_sendto+0x3bd/0x520 [ 226.455153][ T7085] __x64_sys_sendto+0xde/0x100 [ 226.459910][ T7085] do_syscall_64+0xfa/0x3b0 [ 226.464408][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.470288][ T7085] [ 226.472602][ T7085] Freed by task 10956: [ 226.476656][ T7085] kasan_save_track+0x3e/0x80 [ 226.481328][ T7085] kasan_save_free_info+0x46/0x50 [ 226.486354][ T7085] __kasan_slab_free+0x62/0x70 [ 226.491128][ T7085] kfree+0x18e/0x440 [ 226.495015][ T7085] device_release+0x99/0x1c0 [ 226.499601][ T7085] kobject_put+0x22b/0x480 [ 226.504015][ T7085] netdev_run_todo+0xd2e/0xea0 [ 226.508780][ T7085] rtnl_dellink+0x537/0x710 [ 226.513295][ T7085] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.518225][ T7085] netlink_rcv_skb+0x205/0x470 [ 226.523245][ T7085] netlink_unicast+0x759/0x8e0 [ 226.528044][ T7085] netlink_sendmsg+0x805/0xb30 [ 226.532805][ T7085] __sock_sendmsg+0x21c/0x270 [ 226.537472][ T7085] ____sys_sendmsg+0x505/0x830 [ 226.542230][ T7085] ___sys_sendmsg+0x21f/0x2a0 [ 226.546899][ T7085] __x64_sys_sendmsg+0x19b/0x260 [ 226.551833][ T7085] do_syscall_64+0xfa/0x3b0 [ 226.556326][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.562203][ T7085] [ 226.564529][ T7085] The buggy address belongs to the object at ffff88807bc84000 [ 226.564529][ T7085] which belongs to the cache kmalloc-cg-4k of size 4096 [ 226.578844][ T7085] The buggy address is located 744 bytes inside of [ 226.578844][ T7085] freed 4096-byte region [ffff88807bc84000, ffff88807bc85000) [ 226.592716][ T7085] [ 226.595040][ T7085] The buggy address belongs to the physical page: [ 226.601464][ T7085] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bc80 [ 226.610234][ T7085] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 226.618748][ T7085] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 226.626306][ T7085] page_type: f5(slab) [ 226.630276][ T7085] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 226.638846][ T7085] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 226.647419][ T7085] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 226.656084][ T7085] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 226.664741][ T7085] head: 00fff00000000003 ffffea0001ef2001 00000000ffffffff 00000000ffffffff [ 226.673405][ T7085] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 226.682070][ T7085] page dumped because: kasan: bad access detected [ 226.688484][ T7085] page_owner tracks the page as allocated [ 226.694188][ T7085] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5854, tgid 5854 (syz-executor), ts 87605396542, free_ts 87582073256 [ 226.717363][ T7085] post_alloc_hook+0x240/0x2a0 [ 226.722128][ T7085] get_page_from_freelist+0x21e4/0x22c0 [ 226.727671][ T7085] __alloc_frozen_pages_noprof+0x181/0x370 [ 226.733470][ T7085] alloc_pages_mpol+0x232/0x4a0 [ 226.738313][ T7085] allocate_slab+0x8a/0x3b0 [ 226.742824][ T7085] ___slab_alloc+0xbfc/0x1480 [ 226.747492][ T7085] __kvmalloc_node_noprof+0x429/0x5f0 [ 226.752856][ T7085] alloc_netdev_mqs+0xa3/0x1170 [ 226.757696][ T7085] rtnl_create_link+0x31f/0xd10 [ 226.762534][ T7085] rtnl_newlink_create+0x25c/0xb00 [ 226.767639][ T7085] rtnl_newlink+0x16d6/0x1c70 [ 226.772306][ T7085] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.777243][ T7085] netlink_rcv_skb+0x205/0x470 [ 226.782035][ T7085] netlink_unicast+0x759/0x8e0 [ 226.786803][ T7085] netlink_sendmsg+0x805/0xb30 [ 226.791569][ T7085] __sock_sendmsg+0x21c/0x270 [ 226.796237][ T7085] page last free pid 5846 tgid 5846 stack trace: [ 226.802647][ T7085] __free_frozen_pages+0xc71/0xe70 [ 226.807768][ T7085] __slab_free+0x326/0x400 [ 226.812176][ T7085] qlist_free_all+0x97/0x140 [ 226.816752][ T7085] kasan_quarantine_reduce+0x148/0x160 [ 226.822198][ T7085] __kasan_slab_alloc+0x22/0x80 [ 226.827043][ T7085] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 226.832403][ T7085] alloc_netdev_mqs+0xa3/0x1170 [ 226.837248][ T7085] rtnl_create_link+0x31f/0xd10 [ 226.842100][ T7085] rtnl_newlink_create+0x25c/0xb00 [ 226.847208][ T7085] rtnl_newlink+0x16d6/0x1c70 [ 226.851895][ T7085] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.856825][ T7085] netlink_rcv_skb+0x205/0x470 [ 226.861577][ T7085] netlink_unicast+0x759/0x8e0 [ 226.866327][ T7085] netlink_sendmsg+0x805/0xb30 [ 226.871081][ T7085] __sock_sendmsg+0x21c/0x270 [ 226.875745][ T7085] __sys_sendto+0x3bd/0x520 [ 226.880351][ T7085] [ 226.882663][ T7085] Memory state around the buggy address: [ 226.888277][ T7085] ffff88807bc84180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.896327][ T7085] ffff88807bc84200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.904380][ T7085] >ffff88807bc84280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.912429][ T7085] ^ [ 226.919872][ T7085] ffff88807bc84300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.928094][ T7085] ffff88807bc84380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.936154][ T7085] ================================================================== [ 226.948282][ T7085] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 226.955517][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: kworker/1:14 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 226.967675][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.977738][ T7085] Workqueue: events smc_ib_port_event_work [ 226.983553][ T7085] Call Trace: [ 226.986858][ T7085] [ 226.989793][ T7085] dump_stack_lvl+0x99/0x250 [ 226.994410][ T7085] ? __asan_memcpy+0x40/0x70 [ 226.999008][ T7085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.004219][ T7085] ? __pfx__printk+0x10/0x10 [ 227.008818][ T7085] panic+0x2db/0x790 [ 227.012729][ T7085] ? __pfx_panic+0x10/0x10 [ 227.017153][ T7085] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 227.023041][ T7085] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.029371][ T7085] ? print_memory_metadata+0x314/0x400 [ 227.034842][ T7085] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 227.040816][ T7085] check_panic_on_warn+0x89/0xb0 [ 227.045760][ T7085] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 227.051760][ T7085] end_report+0x78/0x160 [ 227.056019][ T7085] kasan_report+0x129/0x150 [ 227.060533][ T7085] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 227.066534][ T7085] __ethtool_get_link_ksettings+0x6e/0x190 [ 227.072347][ T7085] ib_get_eth_speed+0x15e/0x7b0 [ 227.077203][ T7085] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 227.082578][ T7085] ? do_raw_spin_unlock+0x122/0x240 [ 227.087783][ T7085] rxe_query_port+0x93/0x3b0 [ 227.092383][ T7085] ib_query_port+0x170/0x830 [ 227.096974][ T7085] smc_ib_port_event_work+0x15a/0x940 [ 227.102355][ T7085] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.107554][ T7085] ? process_scheduled_works+0x9ef/0x17b0 [ 227.113271][ T7085] ? process_scheduled_works+0x9ef/0x17b0 [ 227.118991][ T7085] process_scheduled_works+0xae1/0x17b0 [ 227.124558][ T7085] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.130546][ T7085] worker_thread+0x8a0/0xda0 [ 227.135147][ T7085] kthread+0x70e/0x8a0 [ 227.139222][ T7085] ? __pfx_worker_thread+0x10/0x10 [ 227.144333][ T7085] ? __pfx_kthread+0x10/0x10 [ 227.148932][ T7085] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.154131][ T7085] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.159331][ T7085] ? __pfx_kthread+0x10/0x10 [ 227.163926][ T7085] ret_from_fork+0x3fc/0x770 [ 227.168514][ T7085] ? __pfx_ret_from_fork+0x10/0x10 [ 227.173626][ T7085] ? __switch_to_asm+0x39/0x70 [ 227.178402][ T7085] ? __switch_to_asm+0x33/0x70 [ 227.183163][ T7085] ? __pfx_kthread+0x10/0x10 [ 227.187759][ T7085] ret_from_fork_asm+0x1a/0x30 [ 227.192528][ T7085] [ 227.195682][ T7085] Kernel Offset: disabled [ 227.199993][ T7085] Rebooting in 86400 seconds..