last executing test programs: 14.154290913s ago: executing program 3 (id=3183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=0x0, @ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200100c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa436a0100f6177a88644507002800680000000190780a010101ac1414290d0090780400006a000004010000000300000008"], 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x5, 0x4}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @broadcast}, 0x10) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000f0007020000f8ffffffb7030000080d0000b70400000000000085000000030000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x52}, 0xfffffffffffffee3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x180000) 13.470764977s ago: executing program 3 (id=3186): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2201000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008005) (async) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x40, {{0x19, 0x4, 0x1, 0xa, 0x64, 0x64, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x94, 0x2}, @timestamp={0x44, 0x14, 0xb5, 0x0, 0x9, [0xdd7, 0x0, 0x41, 0x7ff]}, @end, @noop, @lsrr={0x83, 0x2b, 0x58, [@multicast2, @empty, @loopback, @remote, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x10}]}, @ssrr={0x89, 0xb, 0xa7, [@multicast2, @remote]}]}}}}}) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r14) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r6, @ANYBLOB="00032dbd7000fcdbdf25010000002400018008000300030000000800030000000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="14000200766c006e31002e66319c00000000000014000200776c616e300000000000000000000000140002007700000000000008000100"/64, @ANYRES32=r10, @ANYBLOB="3c000180087fabd20e8e4a25ade143dc9197aa47000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020070696d7265670000000000000000000014000200766c616e3100000000000000000000000400030004000300"], 0x1d4}}, 0x1) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 13.244610043s ago: executing program 3 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000110000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 12.866700104s ago: executing program 3 (id=3189): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0xc0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x4000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 10.774820157s ago: executing program 2 (id=3207): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) (async) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800c05002d00200000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="05", 0x1}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r4}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r4, @ANYRES32=r7, @ANYBLOB="0500330011"], 0x2c}}, 0x80) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000200)=@in6, 0x80, &(0x7f0000000480)=[{&(0x7f0000000680)=""/207, 0xcf}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)}, {&(0x7f0000000840)}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f0000000d40)=""/224, 0xe0}, {&(0x7f00000002c0)=""/25, 0x19}], 0x7, &(0x7f0000000580)=""/19, 0x13}, 0x6}, {{&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000980)=""/47, 0x2f}, {&(0x7f00000009c0)=""/197, 0xc5}, {&(0x7f0000000ac0)=""/24, 0x18}], 0x5, &(0x7f0000000b80)=""/249, 0xf9}, 0x4}], 0x2, 0x9f0b9e4fb0b1136b, &(0x7f00000008c0)) r11 = socket$netlink(0x10, 0x3, 0x10) (async) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) readv(r13, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) (async) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000040)={0x1000, 0x7fff, 0x3, 0x2}, 0x10) (async) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) 10.531984118s ago: executing program 2 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xb8, r4, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x4d}}}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7b5b3ddd30894ef6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "247d3a7ef65062da"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43478b51c96bcdc78d2d92b57f27c40e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0341e0b961a05974f7de14c76db4b345"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c386c6c727280b65"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="362d4d0592364076f149cc7fdebd4c95dd1d8cffaa6036586942f198a7a9f2b0"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="606d772bd9cd09d52a0403916185fb3c"}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4044}, 0x800) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r10, 0x40, 0x36, 0xb}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r8) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xf, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x300, 0x3, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.202371016s ago: executing program 0 (id=3241): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x12f000, 0x1c00, 0x8, 0x1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(0x0, r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x100, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c000580180004"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@deltclass={0x24, 0x29, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0x4, 0x10}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$key(0xf, 0x3, 0x2) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e23, 0x3, 'dh\x00', 0x21, 0x6, 0x47}, 0x2c) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82187201, 0x0) 4.653117432s ago: executing program 0 (id=3245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r3, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x6, 0x1, 'Y'}, 0x9) (async, rerun: 64) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000240000000000000000e6050c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x6) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x5}, 0x5, 0x2, 0x1, 0x0, 0x4, 0xfff9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4", 0x66}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="8000000000000000170100b175"], 0x80}], 0x1, 0x40800) recvmsg$qrtr(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9, 0x3, {0x0, 0xff}}, 0x18) (async) ioctl(r6, 0x8b32, &(0x7f0000000040)) (async) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="5e00000000000000d9ab3dd19924e6bacc25d6cbe6505cb45794cd9604f6c901993aa4331482c380f5ea13b6f5cb8c812b44d74a8041130bb74ec956210ecd5cccfe9aecc64aa0df111c92bb892adb5666f5ed5d1b6fa9089de3279fe69546c41cc0e57e3b1fbfa05b25e56e8f17fb1f4552e24cf50f0fd3a8a3b52af7336a55fa3b7402"], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)={0x32}, 0x8) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xc9b9, 0xb}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x4}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf5c}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}]]}, 0x8c}}, 0x0) 4.548301144s ago: executing program 0 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r2) r3 = socket$inet_sctp(0x2, 0x370841d08e5c48c2, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e23, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, [0x1, 0x2, 0xfffffffffffffffc, 0x2, 0xc, 0xac7bb29, 0x7, 0x6, 0x0, 0x97, 0x1200000000000000, 0x6, 0xc, 0x8000, 0x100000000]}, &(0x7f0000000140)=0x100) sendmsg$inet_sctp(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x4, @remote, 0x9}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)="afcf280580081ecb7c9c98d9dae1f280cacf53981950704fdaefc5e58f9dec43384142245545c20d8df8bf8ef93bb0ccbe16e9daaa162d", 0x37}, {&(0x7f00000000c0)="902a963685e3297442be29a547db2e465755063cec9aee508f4d6179be4ec3bb558f28113d1f88383753c42b03c18f5e1b91a725f879b2d1dc1576da93fb66f4e54a88a8097c4fa33ffb4ebf2f5b49c45e605facdd336cc4dd74262f57d33da729f1f1", 0x63}, {&(0x7f0000000340)="56fa464f27e1f768674b65662203d4a7d11994029552ac90c45fe4a63c255fb5ccd62dbb58d873f556d940e999a0d012d5e142241267b32c11d081454dff6b5b69f165ad2ba4a5a0ba9959eb14bff8bf9f585a79b611680416bb04523cf89cde39412de7a99f9e26e60fca9782c5e562a1bee6296aef144fbfbc68972a044019f3b8cd95d98fb8fd2b55bd6a489bc9d10742817358de360b711506c0611a3f8b5f30adae4ed84e4f61944de22e15d73b77108046522e66d70ad798dbc137922850cd637b3467c150d518191b332732bf735f0e", 0xd3}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000000240)="ceab0dcc3fe89d2a321cc2282f932c2bc9d82c8fc7bce5e25901472062cbbfbd235f2c2bcd43fc31e9aaf8ef4a990edce28273db157ab6e856cf6ced55d5c9fb38415f1a90dfa316e7eba3e4cd1c182bc4ed3e9c3397eb8ae551d805ff17dd6bb9bb2c0ead654dbaf6c0519858282e968143c350dbe365d0ee47593c0c7598a72d18a945", 0x84}, {&(0x7f0000000440)="533bc6240c2bbd4e6175bd3eeb11abaf36819ccb701f9d3f3b030fd3f0d146ef82ff1a9a87f94db44e0f3543c9fb36fe6bdebdf7c9a81f404528e2c4e1d920de8a5771271abe492c43340a42214470c6064586d9dafdae81262291965ee0ea610d4d748e768f93c5bb17ba8dbd68e980121d52a5ec3ddef18fd049b792f111d6eaed977a671a3ac9008b145e499651a2c20915994d65f26a3ded02841b016bd6731ca16296", 0xa5}], 0x6, &(0x7f0000000a80)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x1, 0x5, 0x9, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffffffff}}], 0x90, 0x1}, 0x2000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000b40)=""/274, 0x112}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000001a80)=""/4093, 0xffd}, {&(0x7f0000000540)=""/230, 0xe6}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0) 4.118299009s ago: executing program 0 (id=3248): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$netrom(r1, &(0x7f0000000180)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) getsockopt(r0, 0x5205, 0x5, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) 3.95977098s ago: executing program 0 (id=3249): socket$kcm(0xa, 0x1, 0x106) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="b569053bdd7598af42e1dbd9cea55232c1f58a0bd96bb40aca177ad6476fea63ffbbf23836ed193de1ef0efb349228246b0232c443979649342bc654dbf7dd333a193cc9a76538458921ced72e188fc8dd121dc6d3ae3f6d9b8a72754342dc44d6a2610407bca7707b8e929bdf94044cdb8757fc9ee631e8b4beb245848d9023b0e222aa224e2160bfeb8c139e61a5189642b6b1ff02a80614c2bd9d6065238c67d565b611749e1f00f9e50d1180c78420fbc6c3adb6c03b4fb9fe3dc1900426c5f661251733a8c6463f4858e4823c68605c2266", @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x105080, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newchain={0x8c, 0x64, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0x1}, {0xfff2, 0xc}, {0x6, 0xffff}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x9d, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48905}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1}, &(0x7f0000000180), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x27}, 0x2c) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x204140, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c00028008"], 0xc8}}, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) 3.568297268s ago: executing program 0 (id=3252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000002000000008000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002940)={r1, &(0x7f00000028c0), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @mcast1, 0x937}}}, &(0x7f0000000040)=0x84) 2.432003915s ago: executing program 1 (id=3259): socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x200, {[@fastopen={0x1e, 0xa, "351f3255786f8d5c"}]}}}}}}}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) socket(0x15, 0x2, 0x9) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f0000000100)="23830014", 0x4) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="9b4c8360033edbb72a52e4c51db5837a96b820a7d88d6b8a98dca0db7162723087f3ecc6a79f463b5d0d04b956bf536440108ae6ed18769e845848ef99699bf6b271b13ac1b3811b12c76222f13861340886402539bc09e34a4627c8dbd392b9446d94486fdd355cbd6b19ae240c44829475b3922c38f2c62b70a726108bbe6eb7154b3c59c2611775fdd413b076d9472deaf11adae1eebce8d69e1bafd281acc761c81cc962a0a84e9f00d18bb88ec3125fc95d1fd09ebde4034112c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 2.129215727s ago: executing program 1 (id=3261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="280100000000000001000000098b4d3af3d6cf3d5587f706d317b5138b89185fc9cc6685a9ba9f53a5ebec51b9f3e52c5f9712a8645111299a2655431d8d5f82d8f859f66020ba176258d0f42de0b202dfae67b115fa373e73468fb3014edd3bcc5f9dbb086e2ff6908f8b41c19f0a5cf1efbf636e3c2d1e7f5cb78d267d013ccc4742c43b80b531e4fdc031f614d563feb3946929741da78b28c53cdf0592"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100), 0x4) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f0000000940)={0x6, 'veth1_macvtap\x00', {0xc7}}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0b0000000500000002000000040001c3bd79ed349a944560e09d0e3a39786f9a353bacb978555dd8a6f2f58c1bae1df36b42ab945909656ac971de34610ecf500273f3d1e346a87b87abf976a3ee7ede6f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x1, r13, 0x7ff}, 0xc) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.088203708s ago: executing program 4 (id=3262): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08f12cbd7000ffdbdf2541000000070000000800a000000005001801170000120800270002000000050019010b000800000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40001) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0xe0}, 0x0, 0xfffffffe, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0xe0}, 0x0, 0xfffffffe, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000) 1.84957588s ago: executing program 4 (id=3263): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e, 0x80000) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/35, 0x23}], 0x3, &(0x7f0000000600)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40010000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13d1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x50, r5, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x3, 0x0, {0x4f81, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x8, 0x5, 0x1}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x4804) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x68, 0x2a, [@fast_bss_trans={0x37, 0x52, {0x9, 0x0, "a18f75c35fe75b9641c39ab4a1a5bbb2", "0eeebbe9c1363db6d588af7986ab7f61574d03cad57f2456422e0ff589492d76", "4da52cc137a3feeae9d0074712d4994919b2a1eee699deacd1f8092e100da633"}}, @mesh_chsw={0x76, 0x6, {0x25, 0xa, 0x3, 0xb}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6aaee19fe0e725e5}, 0x4) 1.632412121s ago: executing program 4 (id=3264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x1}}, @TCA_NETEM_SLOT={0x6, 0xc, {0x1, 0x8, 0x3ff, 0x4, 0xa0, 0x10}}]}}}]}, 0x84}}, 0x20000000) 1.496357559s ago: executing program 4 (id=3265): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x6, 0x1000, &(0x7f00000004c0)="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", 0x1, 0x3, 0x101, 0x7ff, 0xd9b8, 0x3, 0x5, 'syz1\x00'}) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) (async) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010003704000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="83040500000000002000128008000100677265070000028008000600ac1414bb08000700e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.288867662s ago: executing program 4 (id=3266): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) recvfrom$inet(r2, &(0x7f0000000040)=""/204, 0xcc, 0x100, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000007eba5212b06f3fbed195f60c1d7983133128e9dd4889c0b2b958f1194c1808e695efa434b30d80b68effd2bad165d949673845d3641e4eb1908e4c9f993ef5e79080d122eb45a914bb869e8c7e5b2dea210787b744a382d610", @ANYRES16=0x0, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x90, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1ecd886e1571ec0b1bebfd20b59e584c78faf1f48c392b2b32fe2e4ab33e41"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x28}, @TIPC_NLA_NODE_ID={0xd, 0x3, "4d07ef33a6659ca9e8"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40801}, 0x1) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltclass={0x3c, 0x29, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0x1, 0xfff3}, {0x5, 0x3}}, [@c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000f1ffffff070000000d00000000010800", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x0, 0x4}) 1.223740584s ago: executing program 2 (id=3267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000004eabb7a100"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="b26d6f18", @ANYRES16=r1, @ANYBLOB="000327bd7000fddbdf251b000000050092000000000008009a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f00000029c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}], 0x20}}], 0x1, 0x2004c040) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000014006b05c84e21000ab16d6e230675f803000000040002005817d30461bc24ee6bb556a705251e6182090036c23d3b48dfd8cdbf9367b098fa51f60a64c9ee08000000e786a6d0bad700007dc0504bb9189d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.115994428s ago: executing program 1 (id=3268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000010840)=[{{0x0, 0x0, &(0x7f000000bb40)=[{&(0x7f0000007600)="62978f558035378030b21aa11163fd256350f3d90733d49fe0b4a00dde8710bd6caea6fcef385fab82e8a4615fe1c4268486964be4fd4a33d78e05b988e1c5cf6d298e112aabdfb194ca794a27ddc366a1b22c8b01e14ee898919d134d83b1855a76084d6ea4c41badd740bcbd779f72", 0x70}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x50) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000020601010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6564000000d2d41ce86ffdc01300"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r4, 0x5}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYRESOCT, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x4040885) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000427bd7000ffdbdf256b0000000a00060008021100000100000a0006000f021100000100000a00060008021100000100000a0006000802110000b885000a0006000802110000010000e3dbf40eb6833ba6943456da32b6a33d1e52b1d3b924e0f1ce93e479e12ec5682ae0c1eb9d1bbddcdcbb0358cc35171ca68584baadc860428921db3221127caba8e97573b72c71db5726ed84794a4fad264c8a64"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020784400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.024342715s ago: executing program 3 (id=3191): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a140000001100010091444ed20b2be0c181415a0b7042faf0c5be9821a1283a75b833806be4558766e799c1e9b72bb41d6e3b5b7e1ad2c635990c967e569f86bdeacd07fa1aa91196d6ebb2f4c8a09c257eb0ccc3c4768846aedcb2c63d956fe6681b8cbe55f0bb1ed9be8697ef451f00447892ea10235b5e823f027be0a38da2f0a9a322660f2832ddb68a9560c9792f0326328f48d7f67067714e9ae3f555cf0c6ed921a7b02fb4ef6b5dd8c7cae82d1ecb96a6d9cd3a58e9e06443ca1bb91c1bb0c6d449319daf222c7d71"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0xff07, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)={0xa50, r4, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6e, 0x1, 0x9, 0x1}, {0x5, 0x8, 0x0, 0x7}, {0x3, 0x9, 0x81, 0xb6}, {0x7, 0xc, 0x5, 0xffff}, {0x9, 0x7, 0x7, 0x4}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x96}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1ff, 0xff, 0x0, 0xc}, {0x8, 0x2, 0x0, 0x1}, {0x2, 0x80, 0xf9, 0x57f}, {0x101, 0x19, 0x9, 0x6}, {0x7ff, 0x2, 0x7, 0xb}, {0x45f0, 0x6, 0x7, 0x5}, {0x7, 0xdf, 0xf0, 0x1}, {0x6, 0x2b, 0x33, 0xff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x70000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xa50}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r12) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r15, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfd, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 884.088756ms ago: executing program 2 (id=3269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRESOCT=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feff"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = socket(0x15, 0x5, 0x0) connect$netrom(r1, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) getsockname$tipc(r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) unshare(0x8040480) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000), 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 616.069609ms ago: executing program 2 (id=3270): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1403, 0x20, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8bef83dbac04e34c}, 0x44000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@alu={0x4, 0x1, 0x5, 0x7, 0xb, 0x4, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xf, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000280)=[0x1, r0], &(0x7f00000002c0)=[{0x2, 0x3, 0xc, 0x2}, {0x3, 0x4, 0x0, 0x2}, {0x1, 0x5, 0x3, 0x6}, {0x1, 0x2, 0x6, 0x4}, {0x2, 0x1, 0x7, 0x2}, {0x1, 0x0, 0xd, 0x7}, {0x2, 0x5, 0x8, 0x3}, {0x5, 0x2, 0x0, 0x5}], 0x10, 0xffffffe4}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x31b, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x48010) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000640)={0x0, 'pim6reg0\x00', 0x3}, 0x18) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000680)=0x22c0, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x1402, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48099}, 0x81) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x1, 0x0, r2, 0xae78, '\x00', 0x0, r7, 0x0, 0x3, 0x1}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002b80)={r1, 0x0, 0xdf, 0xa2, &(0x7f00000009c0)="e13925cca29a5ca31555d57381f90431217f00043e1ff495daf0c6f1b82ba0b080b86fd76c6bece506e212bfec4d29cde6666567fc89188e169a125d69e233c63190d479e1b6da03f34aaa475c34c31814e3f83c9a2fd93391ea4f5996f2248a336feb91733c3d7cda9749f0cbc727e41019b0079375476cccb3743abc37bbaea342af7016ec73848b562a060fcb7d670205fa87de6f4ab7a1aa1c5cb806c632953275ed6e39dc6c26164bbcd608c776e7ddc0ab50a1c18a897213253af8ee61d1c1291e7ecfdc4f60cf7afa536de4a402be93430b4fa431451d9db5ec8a27", &(0x7f0000000ac0)=""/162, 0x6, 0x0, 0x1000, 0x1000, &(0x7f0000000b80)="a10ffb0474de4b3503de55381664578e8a43804f3528c89969c7cbeb05e8c059d60f4e5ddbaed084f859980f79e70d2f669126418ec5d248c463a479cac6324a3a6721e80bd5e6bd602b0a87e38db0fdcef27fb0d0ed5e237db1ae5b91d5c43fb7e2103c5ed0fcb9630054914a790680f0163a75b4787c2fafc03e7a26b083da020c95fcb14e2761f431fb2077e95caf01a2a169258675c28f863fa5ef46a8d3bb3977d916500f44c702b46066d432a2a1643e0c47e855d11bb41b99c849800fff5c200bef1926d93f6a908b70ab247be1210a43cd2a19f0f3523dd92fd35a25f497ec0f3f1c5dbb5cac35948023f89103a96b6920e043a53d810827173c86efbc084ad7e44f397a1b92e651d48db2e577a0a9f96e8624671360b486d19711e67a2db51c740d003c4786b7c1102caa77dee9fe811fc41b539d5cfb8d390c9b04d6e346703c1a6ee1e288c7f00e1760bd71a4d781471623a19dbb244a3f3e816434df814ee6eebf0378728b85d8bfc5f2c3ac0f84a23eb235de30a2eeeded8f5b566397347ae59afc30b3ff5e6ebc8b74a1f3c5c19d61cfe0d0cb9d670d5cef3fc2c18eef92f36cdb27f783c9bd7e5c43e519a25a0cdc829f1940e36b3a6ac87d4ce8c173d05ffd38c9574f4a73fbda6b5e59f31230794c96c4d0deccc8ed85bbc5d1ecd26ab13a33a0fae5b3209c9f0d992e5324cbeec09f6bccc2210704ae4fbb0ab837e687e349a0c45f7772cedd310c19c1509d17e56bf009011f2d41b3c9313376b2c0e56e0227bfb156485c2084f99f68ad0ad6dec1656505869d608c79f1d93d6b66c3c7dae7e0684b326b52b8a18bd0d098ca5511cb7dd840d50d4a01cd6ca94b5f924b2680f2f33bae96cd0ba7b52fb676ae8828cb445e916e98199c01120aea3372c2aa8e773f1cd6fb1df5ed7ca425f94c2e5e5fd42dc924a006c5dbc2dcd196841f2f0bdb5381f4bd5abe3242715eddf117e98dd652159f82be1326f656012a0995e5a06ed22de540eab893865d76ec4c8eacf908d175faf6d5dd78f355a46158db41c7c0f155b6259d875d673b1259df74c9bae09fd5f9c86f5b4711086a74da3287a11f2c29f53aa74fb4f91600203c58fefdbb5e27c0f2dddd8e2c25b069c4f024d6809471ca51bc95ea3c7644dcd9d561546598e129a282141be6afa8c968913a6d9af985aa96f190225d435d4ca969045bef087f87b95a0fc1eb62b420d14570a3b1ceadcd88f3c1a2776518d283fa5e873578c5d2c07c47395cd1a4c476ebcfaf82056ebd1810f886009429af4fc65f078a04792871fff3d933ede13f682d10e727c53ce1845e7869b24323e7ba25bceb2f2592c075228e9eb390584d9cf5905c185c2bd4657481c0357bf83fdc3e7416435dc01b749c401c2bbad85c8649be60f8664031856a77d03db5f2063038ab0c6528feb2a6655f48eb57ce06c5bb9cc13daa5d53560c5574e96b1446f67a4cc8858b6693bdb8f338756de75f1d7421554d05d1239b5e3c36813f552ab65bb5f5b54d5d5f500d8266d70fe0f5160d765b3918b97dc9b01b436f0a7a968907fc0730bc018a59e5ad9adb9429e42ff209c9bb677a4e65ea6728823b00cc053d357aa4d1fcee815125f4192925fd4085221e388bc022f24476e7a10adc7ba2385034b409a3ce499102d1c36bfaed762aae406fd537e47b2aa07ea90485ac9579f98ec0679b4a2b862be513fea3b632e0a5aedf6ad4298d81ca44cd6a0606d5c5c0d5baa9cac4ed017694cb20af6b0187cdeb555f33bb386a89bdc150b4248ae5a8938dc28be1384a463aad0f4b762560438760e61cbc0d6497a1ba4a34bf1eaf487314534adf116a324ccbea961edcdc1aba9ab270a67e764c7a96ec5934eeca6d2a27c2ffc8f978d62f8c26a0ae05f72276e60b0483fcd76ae9a2e968bf6ae0c757fb0f1282ed24f72d4bd97e55c811a91c3359b23b32a99aa6b1dbb4663c2df0c528e3276c2c4278934d32a4c4bc2a14b60f169b4daa163c616a5d05ffd3a2da88b71ab563a5075f5c9749d3440cdda6eb2e3ab43ac0dab45f1421b7a3577b869d48ef5df03f8aeb8ce05e2456f1061daa5c6d34243dec29a34a2bd027b19167db27a53d94a6d5bb2715722e7df1a47543da2867e2d5e6877628f5cffe32618e57f0ce88a5bb2b43bdaaa2901d529acdcf59c9a31040b0b4f87ed1f6059ce24b73adf2a692de9c024b321297d1b4ae0b60cf3f27af53932a67c7c329725c50f25d175acee543be9377356e48df7dac2a669068f48532704913e47f2cd0e6b103879ee5bdaae85b20564170f02e7a06a205015862688e4399e199601f75d015d92ea79aed6ff426e10f14983ad1db5e833dcafa06c2ca6879fad2a35c5a1f7220c9046c75ec5b2d7d13704b531c0c49fe13a070987e14c14bcf6712e05d4c09e4d6a72fc50d206d748ff33e06e69661454105c23dc2daa6b36ec7e02a2a942780c27b595bb67662e142cc702810add4afa066e8c82fd91cbd5c31f1edd1b542d82a4c7ef7b174d7b74be222e24628e0a2fe2d27b303d05caaedc12f4f25974b298d36f413cf966c95c7f6218829e642902add811c3414a8e0d0b538186c977483c50a990415b1c928f587762f2bf9293c48bd4b16064fcd7c54c8ea93d2c52540b8291b492cd078aaf62330f552302a38636ebaa1cb0e7ffddaa0762f0eddc379b6584c3774d2c08f64cb2f7efb51ebcf73e117416be640a078fc6dcc289c4888aa00c9c2ff3ba19705207351625142e807d408ef71c4c51620fdd90bbefcd4a0f922b3f286a20cee96a8e667a86ef5261730596bf7b6ba14256ba7a5431486266d242c2f6905533a00a06ca5e754a8de8fd917a606cdb2c44ca0d270fcb3875c67bb1b4c6d37397954a60435faae5b2d066401b8b88b2836cc6d9ac63ac2af7eeaed8b18f38dbce88a4be686402cb5f685fb6b1851bcc00fe0f3c64939bb4e1db8cf1a16c209cfd0f542e4b50a100cb85eee717cd9fb384050ea5775628d88812c1745f1d132928a27f75807e56d92f59982cd2b8adc847129c81a3692347c9de656144d806711ca2fec3747e4bde82349f680fb8b08fd285728f5a1db4c4449e7ceaffc842a79b8d6e6444d4ad5c7af1913f44ff57084b47c844d43381355c986ec92b3d8cde41b5790ee0786c49fd9a251851b81ca3ced87f7c85c37be4724cdb11ec95f1d98ca28bda57980a297c4f0672beffad17e4d0da4fdc7c5597571e2fc4e0302334bc53597f3ee7d46b19bfcd7549a602e8208e066866182039231d5362a0ed826ffb82a0b74815c9c07f083ad2b4df39a402ab06b76101b68ac7772de56228eb49d02db511cd7f60d6bee84a0984aefdec72c01e62fb56a4ce93604dde623f0b0b3842373cd9d9d422f87af54cb48c12ddc804c57467e9f3196202c8e969cc2f6724c684a50431cd5c5a67b677248612947e1806805a3df5941ae2ee2fa96ad5530f3b0cd58219b05888d0632e4b64c51a6ce80c07a17126f167fd8355d211f6d1a7bd7ad7a9f74624cb938418e5dc257cbbfbccdc0fce4493e5531ee89faee4259a0b9b675c3ad238dbb05e5f289b09fbe11c6968ace16c92b42c4ba292a2a9b69846d80f65f1907417c45ebecc0c8c74a6bc30ea2b1eb51e7aabeafcada3c6d1c19b0c7ce2fcf772aaa622fa122c5923a2523d2b0b795e3c27415afdc945346d441cb1d105d64c3463c5189855df04179e9a3adc1188b7e69d2aa9fec058228571bd3051c2a64c57af09b06959fae19e780f1bd3908604cc01a753a6dbed67d1667cb32dd87aa54281c1b97a7e7588305523f2e9489ff6af27d76967e355231f93d23641e10b4eb11a09da05ed492e59581dd0742baaf2486b4a44b24b6e9dfdccdc5d8c85f84a465af02a561e7fea4df4443f1e30dd4f00032104c8f0ec4d322fbabf315a4bacd6d874bb2ea1402eb6ab0c9af58500ff26c758ab5e277b3295894f80ae3d4a4dd784455b90a1e9aae50e609bbc42e736fd1c868d89ec48eace3a1fbb11528768a2b89fc43cb4ba4795aa410782305ed179cf75c81f8003f5e5d63e2c94c305a2da7b3db409ed766d293e1e6c9e4d6b6da3528389f8d88903b07ae80979c3f5e3c1966aafe394d330530388259679e2ef6f74f26c5146ec5aed1128c653e96a4673d44c7a088605917a8c6d24242f8ef57cc9afb72ba369cf686e1a45c068a976b59771e0ee16d13195dfa24531a895d9d22167d84c34f84456ab8f4aba5e0fcdfab35096f94e5e4c55f29240c5767911bc4913e984224dd70f0478e9335ffe299977c9a8295f0380cb4a363b197f4fdfc7c9b6a4648976933de1b7e21d1f455977f72a86f6c2ec85af7d8547222f544ba5d517ab2da298cb5292893835b3891bf280909f635611c596ba06fbbaefa71b5e05d78863eb98dfe1a145b863cd1297bd2a2dd4f0aa9a0fe6f23f96d9763fa856f6b6e056bc972cf560162dd28fedef8567b142460554fdaa7cabc2349889145e7d71674d876ba501fe1005089371658a15a7ec7e7da00ffd3f5e53d1dd47967db53f3a434dba62d5973e3e39fa7bc35931d2381cfaa7715df298f65749108003d03160b1464966b353000407e7e4ed78dbd1c132372686cc65c752eb4052dbdf92170762e6a63fa2d2b5b029302bbb938e029e57f9ba7e2c33076231d356ad5170e1218b8e8213149d80781c14ce00e9d193bc91ada7dffb5bc23c1db8018dc4c24bdcc25550ea528bdb11cd2a69aa96960f7db99d8cd6bf96d1a76902f2992f238569805f9343f541793856069c8de3d2c0f639b40a5f8afe3c4b4d74cc395f15d58c0c6bed2f892672edc413b4172cac52578240677c2b55fbd260c9c6dafc0be53b3e9ee02337ca37cd24cbf12bccfe41be1bf7df015f4305a2356774fb350fedb77c827395e62b6be316e7801211ab793927b9bad3a0f403cc8b95681f15eccbdb10960e67ec360c02ba5d3ce2267e80250584769c7a4b78a68dfac754627b4833081e8203a7f52c2b4c5586d6a01c1c1f8d687820bc0ff6d9efb835988533352e31b1c912dc3678c7dadb4a0c34c351cf486cb027f2c6d2c210b1ee903241b9eff189f20e7b7aa68c8a1d85fc412569452b1091b6dce4dca088463c25f3aa8f83a007749beb28800507672c9c00e8cbbec893d05e9e2b8c82b7a5d65447aa77257fa057483132d0595a82de3430799ccc4ee8f19cad0e7da50d286f69ec44477ffa1b0bba1eb49e3185e9d5c96b9cab5881406476ed3ec5f2acdbd75f219476a599b4d7c0a2a50b696f47ff322552d4de6206826a9815c23569468fd718d89bdff5ced6a043c711d65c6974fd86d72f11d07593b8d49808409b33618b5f97d5cdbc7139888a8a40713a0f60416a1a67b6b0b82e8f4306490df893fc049bdf565f6d37db5db7fa3e30d46b8b8eda577b5228e9332705752cd010eb6b5dec7624030581c3737af2daeaaa05af677c0402ec171810ce6432dd81ccece9559e582ccc2bc1503489929505e0b401dfa3f638d78d5a7590cee28ab1d85e147e0ce21a573d4ab6f4fc1ea3a8a775b6b035eb6708d317804293f36efe015c0093067c566f11afd3441888204acf76c2f5ffebb2011d86f1bb50e05c0744788304ece1063ba8248459c856772bf94969cb21f28ab069a40452beeee048de2b814e47faded14a4f361b810af386592d5dbc736b201e105d4b02064f998290233471096c026db0b098cb830c553d0c9c6f3e79a155f1b58b7298cb902c85d8befa954147d1e439344e04aaaef", &(0x7f0000001b80)="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", 0x7, 0x0, 0x1}, 0x50) pipe(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(r10, &(0x7f0000002c40)={0x18, 0x0, {0x1, @random="fd643161536b", 'hsr0\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000002c80)={0x0, 0xec, "fda2a1a028cf0546eaebae4e5742612c7eba5e209db565af73367448922bf6e7358281b4566dd6e905c7d0f5e8d576571e18e8690cc6ab1c63faea3f3ef3879f1cb59db23fa32d07973cec5b862e348618fbc5feb39e08a1eed719e1b7517209d1f36d9a226f9446af47eca9269a20d815d3afd40c1ded7f0132458d6695263e26557a901ac799ac53ab1255611fe76e7fb4dd30476677ba8a195b47b46f0d1586f85ae0f554dbdc72e66d939fda3c6b5e37323258d5dc6ac41b99633b1455c1c2108e06219916dcd2bd63806a64318bf297f3ba0b3f0f40c456fc2690429eda8df19cc0acf83b4ac4b20ae2"}, &(0x7f0000002d80)=0xf4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000002dc0)={r12, 0x7}, &(0x7f0000002e00)=0x8) connect$netlink(r10, &(0x7f0000002e40)=@unspec, 0xc) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ec0), r3) sendmsg$TIPC_CMD_GET_LINKS(r10, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x24, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x752}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x28000008}, 0x20000000) bpf$ENABLE_STATS(0x20, &(0x7f0000002fc0), 0x4) sendmsg$nl_netfilter(r11, &(0x7f0000003280)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003240)={&(0x7f0000003040)={0x1e0, 0x5, 0x5, 0x801, 0x70bd25, 0x25dfdbfe, {0x3, 0x0, 0x6}, [@nested={0x19f, 0x89, 0x0, 0x1, [@generic="15a2f60da72641aadd375f1fcbdd98e22a29cbd69b55bfedf39a3f3eeafc1d9b1f847df2ee615b130ad78e21845ea52994d7e0ed1ab869cb39673f75a3662c1403e1a7913e262fa30bf88fe121c78fdfe1c9e5fb98e72a8779eed122aa59e7c8ff74f95b6c1be4626b3d", @typed={0x4, 0x115}, @nested={0x4, 0x8}, @nested={0x4, 0x68}, @generic="a6695093c10d2fe216357a482ec23c79cba7903596b5af25f1808dffb9e12d003d9015b46e913eb97d18849c3ee9804a22ae0fd99a1887c1f4598df2387d4732f21b036d9778babffa624406c8f60dfb900d23522ec3d876d7b75db8c94b1734fb40d7fac061ded92271bc4700539e8405fd8e2b6edbacc10b59dff63c85dc3ba3615239960bfc1fcd9e7fbbc92a91a18560b4b007a263a855c5e257fd9174605a64d4cfefb2e413f97fbc90d8826ab34bb23552cd064dbc0138b3f533359cf78464fb89af0e6f291ad4b9bb4aea21d826c0efe45017bc8dacb09bf5a874f8b043201f25c76675d1f3df", @nested={0x4, 0x7a}, @generic="f508aa72d1a76b0381e5691a832f039f8b5ce7471ba94b53b180c6", @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @generic="edee8c9aad17f97edfa9a6e35600f49bea721dddc697d78eb9591862717fe470698ddc124155515b46d6"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8050) syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r11) 603.225715ms ago: executing program 1 (id=3271): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) syz_emit_ethernet(0x3b6, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x20040000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000002c0)="36513394cea617b18dd44c3546d4146fcad132971bc72475cec208740502d3230619401ff19782d4f5f6fe0eb9", &(0x7f0000000900)=""/104, &(0x7f00000009c0)="d7dd57922adcda777170e0a001d5adf0f17c920035ed93be28ec73c36f9ed24f1ef39255a7ad65d0e826bca7940d48a113b2df669a1a1018c66167f8cc60fa997469798385e8bd4300ff90b9ef5f769b53fc1b81798009c3bee3a070c2918dea2bd5b56f56067ee239e5298c5fc4efe5904a4febbb9638872b2fd21b7278cb47ac4d1453f0676eaeb9af245269de8e06c01c4c9fa6b8d81e7856bc5a1ec66e4f323757ad1aa7732d141303ef0346fa5737975ea2e2", &(0x7f0000000a80)="32eab4be9648c3e10d0bddd69274777343ecc49e64fbf4a7d2255525d4e09e1919b649fea8e43062c2d85dd470077b10a97e0259316949bca3121fc0a09bad5e06baadc9469d63de9b2ab45379ecb0514a41d05591ef85c9346672bcce4d6ddda44f43cd634d7afc014510cd70a539dd690072c598899f17b254bced6b60530999fa582dfa7802b420fe37ba6f3165bf56ccbb6c3dc4032a5b6fd27ed0ded90326a096e0313806d7aa2625a9b7f61ac8236b61c1c75f8b9c4a0b11c0dff418195472c182ed28fa7afa06f0ba41a030bed0a0d3d2486ede94eb21", 0x8, r4, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xf, 0x75, &(0x7f00000000c0)="5fdf3c0a709e119a7139db5960c935", &(0x7f0000000100)=""/117, 0x5, 0x0, 0x49, 0x16, &(0x7f0000000180)="74a3ff2dfb66c8a474990b096d26996c928b75ea6471fd03edf50fdf691d3a515791e7cfa90216bf914fbfbd1c79452a45842933bac973c7fc48bd61e748fb8f0b2bc993e48ac19b5d", &(0x7f0000000200)="b6b6361c32e5d1a12cd60d6cf7d34227986afa51d742", 0x1, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'rose0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000001180)=[{}, {}], 0x10, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x91, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=r8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r6, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000000dc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r12, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0xc, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x0, 0x2, 0x3, 0xa, 0x3, 0xfffffffffffffff0, 0xfffffffffffffff0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xc6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffff7f}]}, &(0x7f0000000780)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @sk_msg, r9, 0x8, &(0x7f0000000c80)={0xa1bb, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0xe, 0x26c, 0x3ff}, 0x10, r10, r12, 0x0, 0x0, &(0x7f0000001000), 0x10, 0x8}, 0x94) 369.499841ms ago: executing program 2 (id=3272): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010d57b90b013f4159400", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008004040"], 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/16, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$pppoe(0x18, 0x1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 220.543948ms ago: executing program 3 (id=3273): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000180)={0x3, {{0x2, 0x4e24, @private=0xa010100}}}, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000030801010000000000000000120000080c00048008000140000000030500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x87228d7a23dfea4c}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000084000000000000007b8903000600000420000000000000008400000002000000803624bdd1350e66699b4d750bb49cf02e38c9acd500"/77, @ANYRES32=0x0], 0x38, 0x4014}, 0x2c0408d0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) 214.950035ms ago: executing program 4 (id=3274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xa, 0xa00d292c39cc5774}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x80}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x220040a8}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x15, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x6, 0x3, 0x3, 0xffffffffffffffff, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r7, 0x0, 0x4}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380), 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) recvmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4055, 0xfd7}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000080)=""/31, 0x1f}], 0x3}, 0x12100) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) 155.460549ms ago: executing program 1 (id=3275): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x14, 0x401, 0x70bd2b, 0x25dfdbfc, {0x10, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x22}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 0s ago: executing program 1 (id=3276): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3e, 0x0, 0x6}, 0x28) accept4$netrom(r4, &(0x7f0000000440)={{0x3, @bcast}, [@remote, @rose, @null, @bcast, @null, @default, @netrom]}, &(0x7f00000004c0)=0x48, 0x81800) r5 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x8000400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005000000c7498301dfd05cdee2175d82083369aaad1bc5bbee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r6}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r6}, 0x38) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@fwd={0x10}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xe}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x5f, 0x5f]}}, &(0x7f00000002c0)=""/123, 0x58, 0x7b, 0x0, 0xc}, 0x28) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x12, 0x5, 0xc, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000040), 0x0}, 0x20) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): fffda RBX: 00007f2620db5fa0 RCX: 00007f2620b8e9a9 [ 362.982258][T12892] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 000000000000000a [ 362.982281][T12892] RBP: 00007f2621ad8090 R08: 0000000000000000 R09: 0000000000000000 [ 362.982294][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.982306][T12892] R13: 0000000000000000 R14: 00007f2620db5fa0 R15: 00007ffd17606b08 [ 362.982340][T12892] [ 363.606896][ T30] audit: type=1800 audit(1753947506.624:6): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2058" name="cgroup.controllers" dev="tmpfs" ino=2400 res=0 errno=0 [ 364.179190][T12923] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2069'. [ 364.232812][T12926] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2070'. [ 364.527561][T12943] FAULT_INJECTION: forcing a failure. [ 364.527561][T12943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.540736][T12943] CPU: 0 UID: 0 PID: 12943 Comm: syz.1.2076 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 364.540769][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.540786][T12943] Call Trace: [ 364.540796][T12943] [ 364.540809][T12943] dump_stack_lvl+0x189/0x250 [ 364.540838][T12943] ? __pfx____ratelimit+0x10/0x10 [ 364.540869][T12943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.540892][T12943] ? __pfx__printk+0x10/0x10 [ 364.540926][T12943] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 364.540956][T12943] should_fail_ex+0x414/0x560 [ 364.540998][T12943] strncpy_from_user+0x36/0x290 [ 364.541028][T12943] ? __local_bh_disable_ip+0xf1/0x190 [ 364.541065][T12943] strncpy_from_user_nofault+0x72/0x150 [ 364.541097][T12943] bpf_probe_read_user_str+0x2a/0x70 [ 364.541134][T12943] bpf_prog_0c70681b89b9d13a+0x69/0x71 [ 364.541154][T12943] ? bpf_test_run+0x197/0x7b0 [ 364.541184][T12943] bpf_test_run+0x2d7/0x7b0 [ 364.541214][T12943] ? 0xffffffffa02057c0 [ 364.541256][T12943] ? __pfx_bpf_test_run+0x10/0x10 [ 364.541313][T12943] ? _copy_from_user+0x94/0xb0 [ 364.541350][T12943] ? bpf_test_init+0x133/0x170 [ 364.541378][T12943] ? xdp_convert_md_to_buff+0x5b/0x330 [ 364.541414][T12943] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 364.541465][T12943] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 364.541504][T12943] ? __fget_files+0x2a/0x420 [ 364.541531][T12943] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 364.541564][T12943] bpf_prog_test_run+0x2c4/0x340 [ 364.541602][T12943] __sys_bpf+0x581/0x870 [ 364.541634][T12943] ? __pfx___sys_bpf+0x10/0x10 [ 364.541679][T12943] ? ksys_write+0x22a/0x250 [ 364.541712][T12943] ? __pfx_ksys_write+0x10/0x10 [ 364.541740][T12943] ? rcu_is_watching+0x15/0xb0 [ 364.541783][T12943] __x64_sys_bpf+0x7c/0x90 [ 364.541811][T12943] do_syscall_64+0xfa/0x3b0 [ 364.541842][T12943] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.541872][T12943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.541894][T12943] ? clear_bhb_loop+0x60/0xb0 [ 364.541920][T12943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.541941][T12943] RIP: 0033:0x7fc88778e9a9 [ 364.541960][T12943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.541979][T12943] RSP: 002b:00007fc888620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.542003][T12943] RAX: ffffffffffffffda RBX: 00007fc8879b5fa0 RCX: 00007fc88778e9a9 [ 364.542020][T12943] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 000000000000000a [ 364.542034][T12943] RBP: 00007fc888620090 R08: 0000000000000000 R09: 0000000000000000 [ 364.542048][T12943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.542061][T12943] R13: 0000000000000000 R14: 00007fc8879b5fa0 R15: 00007ffc17cad898 [ 364.542095][T12943] [ 364.843071][T12942] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.864377][T12945] tipc: Started in network mode [ 364.874987][T12945] tipc: Node identity 2ed5a6cfe18d, cluster identity 4711 [ 364.883213][T12945] tipc: Enabled bearer , priority 0 [ 364.892368][T12945] syzkaller0: entered promiscuous mode [ 364.898233][T12945] syzkaller0: entered allmulticast mode [ 365.048230][T12947] tipc: Resetting bearer [ 365.092876][T12944] tipc: Resetting bearer [ 365.123552][T12944] tipc: Disabling bearer [ 365.202028][T12955] lo speed is unknown, defaulting to 1000 [ 365.250435][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'. [ 365.259751][T12964] openvswitch: netlink: Flow key attr not present in new flow. [ 365.284092][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'. [ 365.492851][T12972] erspan0: entered allmulticast mode [ 365.540478][T12972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2085'. [ 365.930246][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 365.940112][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 366.092159][T12990] FAULT_INJECTION: forcing a failure. [ 366.092159][T12990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.105381][T12990] CPU: 0 UID: 0 PID: 12990 Comm: syz.2.2090 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 366.105412][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.105426][T12990] Call Trace: [ 366.105435][T12990] [ 366.105445][T12990] dump_stack_lvl+0x189/0x250 [ 366.105473][T12990] ? __pfx____ratelimit+0x10/0x10 [ 366.105505][T12990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.105527][T12990] ? __pfx__printk+0x10/0x10 [ 366.105563][T12990] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 366.105594][T12990] should_fail_ex+0x414/0x560 [ 366.105634][T12990] strncpy_from_user+0x36/0x290 [ 366.105665][T12990] ? __local_bh_disable_ip+0xf1/0x190 [ 366.105702][T12990] strncpy_from_user_nofault+0x72/0x150 [ 366.105735][T12990] bpf_probe_read_user_str+0x2a/0x70 [ 366.105773][T12990] bpf_prog_0c70681b89b9d13a+0x69/0x71 [ 366.105793][T12990] ? bpf_test_run+0x197/0x7b0 [ 366.105824][T12990] bpf_test_run+0x2d7/0x7b0 [ 366.105854][T12990] ? 0xffffffffa02057c0 [ 366.105897][T12990] ? __pfx_bpf_test_run+0x10/0x10 [ 366.105954][T12990] ? _copy_from_user+0x94/0xb0 [ 366.105986][T12990] ? bpf_test_init+0x133/0x170 [ 366.106014][T12990] ? xdp_convert_md_to_buff+0x5b/0x330 [ 366.106050][T12990] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 366.106101][T12990] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 366.106140][T12990] ? __fget_files+0x2a/0x420 [ 366.106170][T12990] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 366.106212][T12990] bpf_prog_test_run+0x2c4/0x340 [ 366.106249][T12990] __sys_bpf+0x581/0x870 [ 366.106282][T12990] ? __pfx___sys_bpf+0x10/0x10 [ 366.106327][T12990] ? ksys_write+0x22a/0x250 [ 366.106361][T12990] ? __pfx_ksys_write+0x10/0x10 [ 366.106389][T12990] ? rcu_is_watching+0x15/0xb0 [ 366.106432][T12990] __x64_sys_bpf+0x7c/0x90 [ 366.106460][T12990] do_syscall_64+0xfa/0x3b0 [ 366.106491][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.106521][T12990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.106542][T12990] ? clear_bhb_loop+0x60/0xb0 [ 366.106569][T12990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.106590][T12990] RIP: 0033:0x7fefe298e9a9 [ 366.106610][T12990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.106630][T12990] RSP: 002b:00007fefe37b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.106655][T12990] RAX: ffffffffffffffda RBX: 00007fefe2bb5fa0 RCX: 00007fefe298e9a9 [ 366.106672][T12990] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 000000000000000a [ 366.106686][T12990] RBP: 00007fefe37b3090 R08: 0000000000000000 R09: 0000000000000000 [ 366.106699][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.106712][T12990] R13: 0000000000000000 R14: 00007fefe2bb5fa0 R15: 00007ffd6dc509e8 [ 366.106746][T12990] [ 366.148156][T12955] lo speed is unknown, defaulting to 1000 [ 366.499169][T12995] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 366.603602][T13001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.747227][T13010] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 366.795332][T13010] veth5: entered promiscuous mode [ 367.414882][T13043] FAULT_INJECTION: forcing a failure. [ 367.414882][T13043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.428056][T13043] CPU: 0 UID: 0 PID: 13043 Comm: syz.1.2105 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 367.428099][T13043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.428114][T13043] Call Trace: [ 367.428123][T13043] [ 367.428132][T13043] dump_stack_lvl+0x189/0x250 [ 367.428160][T13043] ? __pfx____ratelimit+0x10/0x10 [ 367.428192][T13043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.428216][T13043] ? __pfx__printk+0x10/0x10 [ 367.428250][T13043] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 367.428281][T13043] should_fail_ex+0x414/0x560 [ 367.428322][T13043] strncpy_from_user+0x36/0x290 [ 367.428353][T13043] ? __local_bh_disable_ip+0xf1/0x190 [ 367.428390][T13043] strncpy_from_user_nofault+0x72/0x150 [ 367.428421][T13043] bpf_probe_read_user_str+0x2a/0x70 [ 367.428459][T13043] bpf_prog_0c70681b89b9d13a+0x69/0x71 [ 367.428480][T13043] ? bpf_test_run+0x197/0x7b0 [ 367.428511][T13043] bpf_test_run+0x2d7/0x7b0 [ 367.428541][T13043] ? 0xffffffffa02057c0 [ 367.428585][T13043] ? __pfx_bpf_test_run+0x10/0x10 [ 367.428643][T13043] ? _copy_from_user+0x94/0xb0 [ 367.428674][T13043] ? bpf_test_init+0x133/0x170 [ 367.428703][T13043] ? xdp_convert_md_to_buff+0x5b/0x330 [ 367.428739][T13043] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 367.428791][T13043] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 367.428831][T13043] ? __fget_files+0x2a/0x420 [ 367.428859][T13043] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 367.428893][T13043] bpf_prog_test_run+0x2c4/0x340 [ 367.428930][T13043] __sys_bpf+0x581/0x870 [ 367.428963][T13043] ? __pfx___sys_bpf+0x10/0x10 [ 367.429009][T13043] ? ksys_write+0x22a/0x250 [ 367.429042][T13043] ? __pfx_ksys_write+0x10/0x10 [ 367.429079][T13043] ? rcu_is_watching+0x15/0xb0 [ 367.429122][T13043] __x64_sys_bpf+0x7c/0x90 [ 367.429151][T13043] do_syscall_64+0xfa/0x3b0 [ 367.429182][T13043] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.429213][T13043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.429234][T13043] ? clear_bhb_loop+0x60/0xb0 [ 367.429261][T13043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.429282][T13043] RIP: 0033:0x7fc88778e9a9 [ 367.429301][T13043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.429320][T13043] RSP: 002b:00007fc888620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.429345][T13043] RAX: ffffffffffffffda RBX: 00007fc8879b5fa0 RCX: 00007fc88778e9a9 [ 367.429361][T13043] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 000000000000000a [ 367.429375][T13043] RBP: 00007fc888620090 R08: 0000000000000000 R09: 0000000000000000 [ 367.429388][T13043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.429401][T13043] R13: 0000000000000000 R14: 00007fc8879b5fa0 R15: 00007ffc17cad898 [ 367.429435][T13043] [ 368.143209][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 368.409599][T13065] netlink: 'syz.3.2112': attribute type 10 has an invalid length. [ 368.895057][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 369.049381][T13092] FAULT_INJECTION: forcing a failure. [ 369.049381][T13092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.062687][T13092] CPU: 0 UID: 0 PID: 13092 Comm: syz.4.2119 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 369.062720][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.062733][T13092] Call Trace: [ 369.062742][T13092] [ 369.062751][T13092] dump_stack_lvl+0x189/0x250 [ 369.062780][T13092] ? __pfx____ratelimit+0x10/0x10 [ 369.062824][T13092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.062846][T13092] ? __pfx__printk+0x10/0x10 [ 369.062886][T13092] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 369.062916][T13092] should_fail_ex+0x414/0x560 [ 369.062956][T13092] strncpy_from_user+0x36/0x290 [ 369.062985][T13092] ? __local_bh_disable_ip+0xf1/0x190 [ 369.063022][T13092] strncpy_from_user_nofault+0x72/0x150 [ 369.063054][T13092] bpf_probe_read_user_str+0x2a/0x70 [ 369.063091][T13092] bpf_prog_0c70681b89b9d13a+0x69/0x71 [ 369.063110][T13092] ? bpf_test_run+0x197/0x7b0 [ 369.063140][T13092] bpf_test_run+0x2d7/0x7b0 [ 369.063169][T13092] ? 0xffffffffa02057c0 [ 369.063210][T13092] ? __pfx_bpf_test_run+0x10/0x10 [ 369.063266][T13092] ? _copy_from_user+0x94/0xb0 [ 369.063297][T13092] ? bpf_test_init+0x133/0x170 [ 369.063324][T13092] ? xdp_convert_md_to_buff+0x5b/0x330 [ 369.063359][T13092] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 369.063427][T13092] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.063465][T13092] ? __fget_files+0x2a/0x420 [ 369.063493][T13092] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.063527][T13092] bpf_prog_test_run+0x2c4/0x340 [ 369.063564][T13092] __sys_bpf+0x581/0x870 [ 369.063597][T13092] ? __pfx___sys_bpf+0x10/0x10 [ 369.063643][T13092] ? ksys_write+0x22a/0x250 [ 369.063678][T13092] ? __pfx_ksys_write+0x10/0x10 [ 369.063717][T13092] ? rcu_is_watching+0x15/0xb0 [ 369.063759][T13092] __x64_sys_bpf+0x7c/0x90 [ 369.063787][T13092] do_syscall_64+0xfa/0x3b0 [ 369.063817][T13092] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.063846][T13092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.063867][T13092] ? clear_bhb_loop+0x60/0xb0 [ 369.063900][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.063919][T13092] RIP: 0033:0x7f2620b8e9a9 [ 369.063938][T13092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.063957][T13092] RSP: 002b:00007f2621ad8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.063980][T13092] RAX: ffffffffffffffda RBX: 00007f2620db5fa0 RCX: 00007f2620b8e9a9 [ 369.063996][T13092] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 000000000000000a [ 369.064009][T13092] RBP: 00007f2621ad8090 R08: 0000000000000000 R09: 0000000000000000 [ 369.064022][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.064034][T13092] R13: 0000000000000000 R14: 00007f2620db5fa0 R15: 00007ffd17606b08 [ 369.064067][T13092] [ 370.703582][T13125] syzkaller1: entered promiscuous mode [ 370.712886][T13137] FAULT_INJECTION: forcing a failure. [ 370.712886][T13137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.726044][T13137] CPU: 1 UID: 0 PID: 13137 Comm: syz.2.2132 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 370.726076][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.726089][T13137] Call Trace: [ 370.726099][T13137] [ 370.726109][T13137] dump_stack_lvl+0x189/0x250 [ 370.726136][T13137] ? __pfx____ratelimit+0x10/0x10 [ 370.726173][T13137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.726197][T13137] ? __pfx__printk+0x10/0x10 [ 370.726231][T13137] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 370.726263][T13137] should_fail_ex+0x414/0x560 [ 370.726303][T13137] strncpy_from_user+0x36/0x290 [ 370.726333][T13137] ? __local_bh_disable_ip+0xf1/0x190 [ 370.726371][T13137] strncpy_from_user_nofault+0x72/0x150 [ 370.726403][T13137] bpf_probe_read_user_str+0x2a/0x70 [ 370.726440][T13137] bpf_prog_0c70681b89b9d13a+0x69/0x71 [ 370.726459][T13137] ? bpf_test_run+0x197/0x7b0 [ 370.726489][T13137] bpf_test_run+0x2d7/0x7b0 [ 370.726518][T13137] ? 0xffffffffa02057c0 [ 370.726561][T13137] ? __pfx_bpf_test_run+0x10/0x10 [ 370.726618][T13137] ? _copy_from_user+0x94/0xb0 [ 370.726650][T13137] ? bpf_test_init+0x133/0x170 [ 370.726678][T13137] ? xdp_convert_md_to_buff+0x5b/0x330 [ 370.726714][T13137] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 370.726773][T13137] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 370.726812][T13137] ? __fget_files+0x2a/0x420 [ 370.726840][T13137] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 370.726874][T13137] bpf_prog_test_run+0x2c4/0x340 [ 370.726911][T13137] __sys_bpf+0x581/0x870 [ 370.726944][T13137] ? __pfx___sys_bpf+0x10/0x10 [ 370.726989][T13137] ? ksys_write+0x22a/0x250 [ 370.727023][T13137] ? __pfx_ksys_write+0x10/0x10 [ 370.727051][T13137] ? rcu_is_watching+0x15/0xb0 [ 370.727093][T13137] __x64_sys_bpf+0x7c/0x90 [ 370.727122][T13137] do_syscall_64+0xfa/0x3b0 [ 370.727154][T13137] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.727184][T13137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.727206][T13137] ? clear_bhb_loop+0x60/0xb0 [ 370.727234][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.727255][T13137] RIP: 0033:0x7fefe298e9a9 [ 370.727274][T13137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.727292][T13137] RSP: 002b:00007fefe37b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.727316][T13137] RAX: ffffffffffffffda RBX: 00007fefe2bb5fa0 RCX: 00007fefe298e9a9 [ 370.727332][T13137] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 000000000000000a [ 370.727345][T13137] RBP: 00007fefe37b3090 R08: 0000000000000000 R09: 0000000000000000 [ 370.727358][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.727370][T13137] R13: 0000000000000000 R14: 00007fefe2bb5fa0 R15: 00007ffd6dc509e8 [ 370.727403][T13137] [ 371.001810][T13125] syzkaller1: entered allmulticast mode [ 371.653785][T13145] delete_channel: no stack [ 371.837731][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 371.878459][T13159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.351890][T13182] lo speed is unknown, defaulting to 1000 [ 372.639136][T13182] lo speed is unknown, defaulting to 1000 [ 372.801326][T13193] lo speed is unknown, defaulting to 1000 [ 372.819020][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 373.187011][T13208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2153'. [ 373.364971][T13215] pim6reg9: entered allmulticast mode [ 373.615917][T13220] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2156'. [ 374.282328][T13193] lo speed is unknown, defaulting to 1000 [ 374.391839][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2165'. [ 374.426322][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 374.557466][T13252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2164'. [ 374.614157][T13253] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 374.654305][T13253] dvmrp1: linktype set to 773 [ 374.848522][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 375.000629][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2167'. [ 375.669937][T13288] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 376.670602][T13312] pim6reg1: entered promiscuous mode [ 376.675984][T13312] pim6reg1: entered allmulticast mode [ 376.873372][T13321] tipc: Enabled bearer , priority 0 [ 376.885435][T13321] syzkaller0: entered promiscuous mode [ 376.896795][T13321] syzkaller0: entered allmulticast mode [ 376.935077][T13321] tipc: Resetting bearer [ 377.122697][T13329] netlink: 'syz.2.2187': attribute type 7 has an invalid length. [ 377.152811][T13327] bridge0: port 1(netdevsim2) entered blocking state [ 377.164796][T13327] bridge0: port 1(netdevsim2) entered disabled state [ 377.204595][T13327] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 377.216033][T13327] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 377.270438][T13329] : entered promiscuous mode [ 377.287802][T13335] bridge0: port 1(ipvlan2) entered blocking state [ 377.296021][T13335] bridge0: port 1(ipvlan2) entered disabled state [ 377.304460][T13335] ipvlan2: entered allmulticast mode [ 377.310993][T13335] bridge0: entered allmulticast mode [ 377.320189][T13335] ipvlan2: left allmulticast mode [ 377.325511][T13335] bridge0: left allmulticast mode [ 377.910067][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 377.947131][ T5904] tipc: Node number set to 3478693583 [ 377.952263][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2199'. [ 377.995067][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'. [ 378.039440][T13363] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 378.277115][T13383] __nla_validate_parse: 2 callbacks suppressed [ 378.277136][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2205'. [ 378.445483][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 378.473264][T13392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2207'. [ 378.519469][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'. [ 378.740720][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.089326][T13396] kthread_run failed with err -4 [ 380.107897][T13396] netlink: 'syz.0.2210': attribute type 3 has an invalid length. [ 380.165916][T13408] netlink: 'syz.3.2212': attribute type 13 has an invalid length. [ 380.187292][T13408] netlink: 'syz.3.2212': attribute type 17 has an invalid length. [ 380.285270][T13408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.302677][T13408] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.342217][T13408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.407113][T13416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2214'. [ 380.469893][T13413] lo speed is unknown, defaulting to 1000 [ 380.950455][T13413] lo speed is unknown, defaulting to 1000 [ 381.109154][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 381.323550][T13457] lo speed is unknown, defaulting to 1000 [ 381.645649][T13468] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 382.012984][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2229'. [ 382.111438][T13488] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2232'. [ 382.156129][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 382.190140][T13457] lo speed is unknown, defaulting to 1000 [ 382.645199][T13512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2239'. [ 383.134996][T13524] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 383.734363][T13538] netlink: 'syz.0.2245': attribute type 13 has an invalid length. [ 383.751486][T13538] netlink: 'syz.0.2245': attribute type 17 has an invalid length. [ 383.794201][T13541] __nla_validate_parse: 2 callbacks suppressed [ 383.794224][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 383.885796][T13538] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.900005][T13538] bridge0: port 3(dummy0) entered blocking state [ 383.906941][T13538] bridge0: port 3(dummy0) entered forwarding state [ 383.924770][T13538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.962347][ T5990] lo speed is unknown, defaulting to 1000 [ 383.970207][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 383.994327][ T5990] syz1: Port: 1 Link ACTIVE [ 384.009559][T13544] macvtap1: entered promiscuous mode [ 384.033162][T13544] erspan0: entered promiscuous mode [ 384.041029][T13544] macvtap1: entered allmulticast mode [ 384.071036][ T5946] lo speed is unknown, defaulting to 1000 [ 384.145780][T13544] erspan0: left promiscuous mode [ 384.225993][T13545] lo speed is unknown, defaulting to 1000 [ 384.506347][T13554] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2250'. [ 384.572591][T13556] IPVS: length: 220 != 24 [ 384.899075][T13540] lo speed is unknown, defaulting to 1000 [ 384.908121][T13545] lo speed is unknown, defaulting to 1000 [ 385.340170][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 385.370115][T13573] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2258'. [ 385.400319][ T30] audit: type=1800 audit(1753947528.424:7): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2259" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2429 res=0 errno=0 [ 385.499967][T13540] lo speed is unknown, defaulting to 1000 [ 385.666583][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2261'. [ 385.815096][T13589] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 387.125784][T13597] lo speed is unknown, defaulting to 1000 [ 387.918406][T13647] tipc: Can't bind to reserved service type 2 [ 387.958248][T13650] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2280'. [ 387.966411][T13648] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2280'. [ 388.007949][T13648] 0ªî{X¹¦: entered promiscuous mode [ 388.015623][T13647] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2280'. [ 388.028999][T13647] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 388.040316][T13648] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2280'. [ 388.062757][T13647] 1ªî{X¹¦: left promiscuous mode [ 388.069470][T13647] 1ªî{X¹¦: entered allmulticast mode [ 388.080882][T13647] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 388.098337][T13597] lo speed is unknown, defaulting to 1000 [ 388.107707][T13648] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 388.341307][T13648] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 388.770667][T13675] netlink: 'syz.2.2289': attribute type 11 has an invalid length. [ 389.717902][T13710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'. [ 389.748768][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 390.477896][T13750] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 390.491472][T13750] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 390.507745][T13750] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 390.526279][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2306'. [ 390.879239][T13761] syzkaller0: entered promiscuous mode [ 390.885007][T13761] syzkaller0: entered allmulticast mode [ 391.057424][T13736] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 392.326712][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 392.661321][T13775] 8021q: VLANs not supported on caif0 [ 392.765696][T13793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.851938][T13801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2323'. [ 392.909467][T13804] ipvlan2: entered promiscuous mode [ 392.914732][T13804] ipvlan2: entered allmulticast mode [ 392.957966][T13804] batadv0: entered allmulticast mode [ 392.964733][T13804] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 393.136904][T13806] debugfs: 'netdev:nicvf0' already exists in '.€(' [ 393.153355][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 393.250685][T13807] lo speed is unknown, defaulting to 1000 [ 393.542649][T13844] tun0: tun_chr_ioctl cmd 2147767520 [ 393.842227][T13853] veth0_virt_wifi: renamed from vlan0 [ 394.055982][T13807] lo speed is unknown, defaulting to 1000 [ 394.381419][T13881] !: renamed from dummy0 (while UP) [ 395.013043][T13881] lo speed is unknown, defaulting to 1000 [ 395.878712][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2344'. [ 396.170886][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 396.182083][T13944] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2347'. [ 396.195175][T13944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2347'. [ 396.242438][T13941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2348'. [ 396.308457][T13881] lo speed is unknown, defaulting to 1000 [ 396.662346][T13961] : entered promiscuous mode [ 396.820976][T13967] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.835435][T13967] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.304969][T13977] netlink: 'syz.1.2358': attribute type 39 has an invalid length. [ 397.946772][T14006] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2365'. [ 398.003221][T13999] lo speed is unknown, defaulting to 1000 [ 398.446115][T13999] lo speed is unknown, defaulting to 1000 [ 398.499215][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 399.187123][T14035] tipc: Enabling of bearer rejected, already enabled [ 399.207471][T14035] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 399.214937][T14035] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 399.236819][T14035] tipc: Resetting bearer [ 399.315739][ T3517] tipc: Resetting bearer [ 399.495220][T14043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2375'. [ 399.685746][T14047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2377'. [ 400.014553][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 400.952175][T14088] netlink: 'syz.4.2385': attribute type 4 has an invalid length. [ 400.961073][T14088] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2385'. [ 401.123999][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2389'. [ 401.206388][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 401.973393][T14143] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20001 [ 402.017980][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2403'. [ 402.032852][T14136] bridge0: port 3(dummy0) entered disabled state [ 402.049477][T14143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2403'. [ 402.098678][T14136] dummy0 (unregistering): left allmulticast mode [ 402.105159][T14136] dummy0 (unregistering): left promiscuous mode [ 402.117849][T14136] bridge0: port 3(dummy0) entered disabled state [ 402.545204][T14161] syzkaller0: entered promiscuous mode [ 402.603520][T14161] syzkaller0: entered allmulticast mode [ 402.798764][T14171] ipvlan2: entered promiscuous mode [ 402.805067][T14171] bridge0: port 1(ipvlan2) entered blocking state [ 402.812102][T14171] bridge0: port 1(ipvlan2) entered disabled state [ 402.820584][T14171] ipvlan2: entered allmulticast mode [ 402.826065][T14171] bridge0: entered allmulticast mode [ 402.834822][T14171] ipvlan2: left allmulticast mode [ 402.840188][T14171] bridge0: left allmulticast mode [ 402.975963][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2409'. [ 403.405291][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2412'. [ 404.724202][T14188] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 404.919583][T14196] ieee802154 phy0 wpan0: encryption failed: -22 [ 405.060643][T14196] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2414'. [ 405.086836][T14214] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2414'. [ 405.108055][T14215] sctp: [Deprecated]: syz.3.2421 (pid 14215) Use of int in max_burst socket option deprecated. [ 405.108055][T14215] Use struct sctp_assoc_value instead [ 405.119525][T14196] 8021q: VLANs not supported on ip6_vti0 [ 405.188985][T14214] 8021q: VLANs not supported on ip6_vti0 [ 405.207355][T14216] lo speed is unknown, defaulting to 1000 [ 405.734535][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 406.072242][T14216] lo speed is unknown, defaulting to 1000 [ 406.911989][T14276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.103946][T14279] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 407.167987][T14280] __nla_validate_parse: 1 callbacks suppressed [ 407.168008][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 407.183356][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 407.784945][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 407.867945][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2440'. [ 407.888346][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2440'. [ 407.904739][T14282] netlink: 'syz.4.2440': attribute type 21 has an invalid length. [ 407.920540][T14282] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 407.937490][T14282] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2440'. [ 408.162498][T14303] netlink: 62 bytes leftover after parsing attributes in process `syz.3.2446'. [ 408.182659][T14295] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 408.210423][T14295] pim6reg0: linktype set to 768 [ 408.220596][T14304] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.274704][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 408.310118][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'. [ 408.324944][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'. [ 408.344036][T14308] netlink: 'syz.4.2449': attribute type 1 has an invalid length. [ 408.441451][T14308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.628533][T14311] bond3: (slave veth5): Enslaving as an active interface with a down link [ 410.158169][T14381] syzkaller1: entered allmulticast mode [ 410.259336][T14384] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 411.163711][T14413] netlink: 'syz.3.2473': attribute type 9 has an invalid length. [ 411.172169][T14413] netlink: 'syz.3.2473': attribute type 6 has an invalid length. [ 411.707078][T14437] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 411.719017][T14437] netlink: 'syz.1.2479': attribute type 2 has an invalid length. [ 411.964442][T14448] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 412.004455][T14447] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 412.012167][T14447] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 412.029889][T14447] 0ªî{X¹¦: entered promiscuous mode [ 412.036085][T14447] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 412.042968][T14447] bridge0: port 3(30ªî{X¹¦) entered forwarding state [ 412.052775][T14448] dummy0: entered promiscuous mode [ 412.061737][T14448] bridge0: port 1(dummy0) entered blocking state [ 412.069930][T14448] bridge0: port 1(dummy0) entered disabled state [ 412.081194][T14448] dummy0: entered allmulticast mode [ 412.271184][T14460] netlink: 'syz.2.2485': attribute type 2 has an invalid length. [ 412.299716][T14460] netlink: 'syz.2.2485': attribute type 8 has an invalid length. [ 412.324830][T14460] __nla_validate_parse: 12 callbacks suppressed [ 412.324862][T14460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2485'. [ 412.342490][T14459] tipc: Enabling of bearer rejected, already enabled [ 412.359696][T14459] tipc: Resetting bearer [ 412.574761][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'. [ 412.682000][T14475] nbd: nbd2 already in use [ 412.739386][T14481] netlink: 'syz.1.2493': attribute type 9 has an invalid length. [ 412.776930][T14481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2493'. [ 412.831911][T14488] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2494'. [ 412.957414][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 413.050941][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2495'. [ 413.223939][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2499'. [ 413.417419][T14510] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 413.622491][T14513] tap0: tun_chr_ioctl cmd 1074025677 [ 413.651045][T14513] tap0: linktype set to 825 [ 413.925420][T14530] pim6reg1: entered promiscuous mode [ 413.945461][T14530] pim6reg1: entered allmulticast mode [ 414.244283][T14547] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 414.276314][T14547] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2511'. [ 414.297852][T14548] openvswitch: netlink: Message has 8 unknown bytes. [ 414.409541][T14551] netlink: 'syz.0.2512': attribute type 4 has an invalid length. [ 414.430477][T14555] syzkaller0: entered promiscuous mode [ 414.443763][T14555] syzkaller0: entered allmulticast mode [ 414.451948][T14560] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 414.460187][T14554] tipc: Enabled bearer , priority 0 [ 414.538902][T14554] tipc: Resetting bearer [ 414.574161][T14554] tipc: Disabling bearer [ 414.765627][T14561] vlan3: entered allmulticast mode [ 414.771642][T14561] bond2: entered allmulticast mode [ 415.083436][T14575] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.398016][T14590] netlink: 'syz.1.2526': attribute type 13 has an invalid length. [ 416.144874][T14609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2532'. [ 416.331788][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2536'. [ 416.568667][T14636] sctp: [Deprecated]: syz.1.2541 (pid 14636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.568667][T14636] Use struct sctp_sack_info instead [ 416.882061][T14661] syz.4.2549: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.936193][T14661] CPU: 0 UID: 0 PID: 14661 Comm: syz.4.2549 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 416.936226][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.936239][T14661] Call Trace: [ 416.936248][T14661] [ 416.936257][T14661] dump_stack_lvl+0x189/0x250 [ 416.936288][T14661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.936311][T14661] ? __pfx__printk+0x10/0x10 [ 416.936339][T14661] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.936364][T14661] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.936391][T14661] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 416.936419][T14661] warn_alloc+0x214/0x310 [ 416.936442][T14661] ? stack_depot_save_flags+0x40/0x900 [ 416.936468][T14661] ? __pfx_warn_alloc+0x10/0x10 [ 416.936493][T14661] ? kasan_save_track+0x4f/0x80 [ 416.936524][T14661] ? xskq_create+0x56/0x170 [ 416.936553][T14661] ? xsk_init_queue+0xb0/0x110 [ 416.936579][T14661] ? xsk_setsockopt+0x4dc/0x8d0 [ 416.936603][T14661] ? do_sock_setsockopt+0x17c/0x1b0 [ 416.936623][T14661] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 416.936642][T14661] ? do_syscall_64+0xfa/0x3b0 [ 416.936673][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.936704][T14661] __vmalloc_node_range_noprof+0x125/0x12f0 [ 416.936759][T14661] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.936788][T14661] ? __kasan_kmalloc+0x93/0xb0 [ 416.936824][T14661] vmalloc_user_noprof+0xad/0xf0 [ 416.936845][T14661] ? xskq_create+0xbf/0x170 [ 416.936876][T14661] xskq_create+0xbf/0x170 [ 416.936921][T14661] xsk_init_queue+0xb0/0x110 [ 416.936954][T14661] xsk_setsockopt+0x4dc/0x8d0 [ 416.936985][T14661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.937014][T14661] ? __pfx_aa_sk_perm+0x10/0x10 [ 416.937047][T14661] ? aa_sock_opt_perm+0x74/0x110 [ 416.937078][T14661] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.937103][T14661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.937133][T14661] do_sock_setsockopt+0x17c/0x1b0 [ 416.937160][T14661] __x64_sys_setsockopt+0x13f/0x1b0 [ 416.937189][T14661] do_syscall_64+0xfa/0x3b0 [ 416.937220][T14661] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.937250][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.937271][T14661] ? clear_bhb_loop+0x60/0xb0 [ 416.937298][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.937319][T14661] RIP: 0033:0x7f2620b8e9a9 [ 416.937338][T14661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.937357][T14661] RSP: 002b:00007f2621ad8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.937382][T14661] RAX: ffffffffffffffda RBX: 00007f2620db5fa0 RCX: 00007f2620b8e9a9 [ 416.937398][T14661] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 416.937412][T14661] RBP: 00007f2620c10d69 R08: 0000000000000004 R09: 0000000000000000 [ 416.937426][T14661] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.937440][T14661] R13: 0000000000000000 R14: 00007f2620db5fa0 R15: 00007ffd17606b08 [ 416.937474][T14661] [ 416.937497][T14661] Mem-Info: [ 417.308338][T14661] active_anon:3860 inactive_anon:0 isolated_anon:0 [ 417.308338][T14661] active_file:1953 inactive_file:39957 isolated_file:0 [ 417.308338][T14661] unevictable:768 dirty:167 writeback:0 [ 417.308338][T14661] slab_reclaimable:12392 slab_unreclaimable:232217 [ 417.308338][T14661] mapped:29429 shmem:1369 pagetables:1083 [ 417.308338][T14661] sec_pagetables:0 bounce:0 [ 417.308338][T14661] kernel_misc_reclaimable:0 [ 417.308338][T14661] free:1190540 free_pcp:14775 free_cma:0 [ 417.440455][T14661] Node 0 active_anon:15740kB inactive_anon:0kB active_file:7812kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117716kB dirty:668kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12120kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.518960][T14661] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.603864][T14661] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.716208][T14661] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 417.742415][T14661] Node 0 DMA32 free:845116kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19796kB inactive_anon:0kB active_file:7812kB inactive_file:157788kB unevictable:1536kB writepending:668kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:36548kB local_pcp:19964kB free_cma:0kB [ 417.794643][T14695] netlink: 'syz.0.2555': attribute type 2 has an invalid length. [ 417.842197][T14661] lowmem_reserve[]: 0 0 1 1 1 [ 417.874733][T14661] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 417.955582][T14661] lowmem_reserve[]: 0 0 0 0 0 [ 417.968585][T14661] Node 1 Normal free:3901540kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17480kB local_pcp:10600kB free_cma:0kB [ 418.055543][T14661] lowmem_reserve[]: 0 0 0 0 0 [ 418.062808][T14661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.086874][T14661] Node 0 DMA32: 2805*4kB (UME) 1063*8kB (UME) 569*16kB (UME) 465*32kB (UME) 497*64kB (UME) 125*128kB (UME) 70*256kB (UM) 151*512kB (UM) 123*1024kB (UM) 12*2048kB (UME) 124*4096kB (M) = 845180kB [ 418.123480][T14661] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 418.135720][T14661] Node 1 Normal: 195*4kB (UE) 49*8kB (UME) 43*16kB (UME) 117*32kB (UME) 28*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (UM) = 3901540kB [ 418.175190][T14661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.186917][T14661] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.211094][T14661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.234873][T14661] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.264507][T14661] 44317 total pagecache pages [ 418.275691][T14661] 0 pages in swap cache [ 418.309162][T14661] Free swap = 124996kB [ 418.325626][T14661] Total swap = 124996kB [ 418.344806][T14661] 2097051 pages RAM [ 418.356974][T14661] 0 pages HighMem/MovableOnly [ 418.378789][T14661] 424872 pages reserved [ 418.389114][T14661] 0 pages cma reserved [ 418.983533][T14732] __nla_validate_parse: 1 callbacks suppressed [ 418.983556][T14732] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2563'. [ 419.087122][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 419.317695][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'. [ 419.504722][T14757] netlink: 'syz.1.2572': attribute type 11 has an invalid length. [ 419.781664][T14779] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2573'. [ 419.862586][T14781] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 420.328357][T14805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 420.364772][T14802] netlink: 'syz.0.2584': attribute type 7 has an invalid length. [ 420.384934][T14802] netlink: 'syz.0.2584': attribute type 8 has an invalid length. [ 420.393412][T14802] netlink: 'syz.0.2584': attribute type 4 has an invalid length. [ 420.401351][T14802] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2584'. [ 420.475567][T14809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2585'. [ 420.488292][ T51] Bluetooth: hci4: link tx timeout [ 420.493586][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 420.679549][T14815] netlink: 'syz.3.2586': attribute type 4 has an invalid length. [ 420.722303][T14815] netlink: 'syz.3.2586': attribute type 4 has an invalid length. [ 421.196487][T14838] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 421.681700][T14861] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 421.700649][T14866] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 422.567624][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 422.631965][T14906] netlink: 'syz.4.2612': attribute type 13 has an invalid length. [ 422.832034][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2614'. [ 423.423055][T14906] tipc: Resetting bearer [ 423.466795][ T9] lo speed is unknown, defaulting to 1000 [ 423.472668][ T9] syz0: Port: 1 Link DOWN [ 423.482376][ T9] lo speed is unknown, defaulting to 1000 [ 423.488867][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 423.551639][T14911] lo speed is unknown, defaulting to 1000 [ 423.662249][T14935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 423.835045][T14945] 8021q: VLANs not supported on wg2 [ 423.934088][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 424.035990][T14911] lo speed is unknown, defaulting to 1000 [ 424.353289][T14967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2627'. [ 424.384471][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'. [ 424.403026][T14967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2627'. [ 424.418155][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 424.573129][T14971] lo speed is unknown, defaulting to 1000 [ 424.747038][T14976] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2633'. [ 424.774671][T14145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.790837][T14145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.270655][T14987] can: request_module (can-proto-0) failed. [ 425.280248][T14990] netlink: 'syz.2.2638': attribute type 5 has an invalid length. [ 425.406901][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'. [ 425.502602][T14972] netlink: 'syz.4.2631': attribute type 13 has an invalid length. [ 425.648541][T15008] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 425.855365][T14972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.057789][T15018] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2645'. [ 426.230098][T14972] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.267052][T14972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.298731][T14921] lo speed is unknown, defaulting to 1000 [ 426.305048][T14921] syz0: Port: 1 Link ACTIVE [ 426.305123][T14971] lo speed is unknown, defaulting to 1000 [ 426.316405][ T30] audit: type=1800 audit(1753947569.314:8): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2643" name="cgroup.controllers" dev="tmpfs" ino=2973 res=0 errno=0 [ 426.371688][T15021] netlink: 'syz.3.2646': attribute type 21 has an invalid length. [ 426.442697][T15008] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.563114][T15009] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.577820][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 426.601940][T15009] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 426.651380][T15009] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 426.758268][T15010] veth3: entered promiscuous mode [ 426.771292][T15010] bond6: (slave veth3): Enslaving as an active interface with a down link [ 426.819271][T14921] lo speed is unknown, defaulting to 1000 [ 426.819987][T15021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2646'. [ 427.169286][T15037] lo speed is unknown, defaulting to 1000 [ 427.287394][T15056] openvswitch: netlink: Key type 16144 is out of range max 32 [ 427.517798][T15061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'. [ 427.654385][T15051] lo speed is unknown, defaulting to 1000 [ 428.118851][T15051] lo speed is unknown, defaulting to 1000 [ 428.431848][T15093] dummy0: left allmulticast mode [ 428.444587][T15093] bridge0: port 1(dummy0) entered disabled state [ 428.482030][T15097] xfrm1: entered allmulticast mode [ 428.675697][T15107] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2671'. [ 428.731297][T15037] lo speed is unknown, defaulting to 1000 [ 428.793934][T15110] gretap1: entered promiscuous mode [ 428.801476][T15107] gretap0: entered promiscuous mode [ 428.808973][T15107] gretap0: left allmulticast mode [ 428.814810][T15111] 0ªî{X¹¦: renamed from gretap0 [ 428.832553][T15111] 0ªî{X¹¦: left promiscuous mode [ 428.846865][T15111] 0ªî{X¹¦: entered allmulticast mode [ 428.859169][T15111] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 429.176635][T15115] batadv_slave_1: entered promiscuous mode [ 429.357097][T15127] __nla_validate_parse: 5 callbacks suppressed [ 429.357118][T15127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2678'. [ 429.403236][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 429.413369][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 429.440053][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 429.462653][T15129] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 430.166957][T15114] batadv_slave_1: left promiscuous mode [ 430.498121][T15162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.565094][T15159] lo speed is unknown, defaulting to 1000 [ 431.260642][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 431.505645][T15159] lo speed is unknown, defaulting to 1000 [ 431.526221][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.638751][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 431.690944][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2699'. [ 431.813847][T15212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2700'. [ 431.939112][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 431.949553][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 432.029984][T15219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.975847][T15260] netlink: 'syz.3.2715': attribute type 39 has an invalid length. [ 433.531661][T15294] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 433.948698][T15330] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 433.978552][T15330] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 434.001360][T15330] tipc: Resetting bearer [ 434.383414][T15353] __nla_validate_parse: 12 callbacks suppressed [ 434.383436][T15353] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2737'. [ 434.472997][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 434.516929][T15356] netlink: 'syz.1.2739': attribute type 10 has an invalid length. [ 434.551730][T15358] netlink: 'syz.3.2747': attribute type 21 has an invalid length. [ 434.575909][T15358] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.625274][T15358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.632596][T15358] IPv6: NLM_F_CREATE should be set when creating new route [ 434.640056][T15358] IPv6: NLM_F_CREATE should be set when creating new route [ 434.647358][T15358] IPv6: NLM_F_CREATE should be set when creating new route [ 434.741596][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2744'. [ 434.839748][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 434.860373][T15371] macvlan2: entered promiscuous mode [ 434.865946][T15371] macvlan2: entered allmulticast mode [ 434.873335][T15371] bond4: entered promiscuous mode [ 434.879916][T15371] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.920814][T15371] bond4: left promiscuous mode [ 434.982211][T15387] netlink: 'syz.2.2746': attribute type 39 has an invalid length. [ 435.014922][T15392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2748'. [ 435.194003][T15401] gtp1: entered promiscuous mode [ 435.199288][T15401] gtp1: entered allmulticast mode [ 435.526679][T15416] veth0_to_bridge: entered promiscuous mode [ 435.977255][T15412] veth0_to_bridge: left promiscuous mode [ 436.104881][T15432] syzkaller1: entered promiscuous mode [ 436.135603][T15432] syzkaller1: entered allmulticast mode [ 436.268259][T15437] veth7: entered promiscuous mode [ 436.421712][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.433058][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.448446][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.462918][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.472063][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.586559][T15443] lo speed is unknown, defaulting to 1000 [ 436.867200][T15451] netlink: 'syz.1.2764': attribute type 21 has an invalid length. [ 436.898392][T15451] netlink: 'syz.1.2764': attribute type 6 has an invalid length. [ 436.929625][T15451] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2764'. [ 436.991852][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 437.047337][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 437.107853][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 437.157127][T15449] lo speed is unknown, defaulting to 1000 [ 437.165668][T15443] lo speed is unknown, defaulting to 1000 [ 437.178119][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 437.452985][T15463] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 437.504445][T15463] 0ªî{X¹¦: left promiscuous mode [ 437.509891][T15463] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 437.536016][T15463] bridge_slave_0: left allmulticast mode [ 437.554817][T15463] bridge_slave_0: left promiscuous mode [ 437.581490][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.637710][T15468] netlink: 'syz.0.2767': attribute type 10 has an invalid length. [ 437.711955][T15463] bridge_slave_1: left allmulticast mode [ 437.726684][T15463] bridge_slave_1: left promiscuous mode [ 437.734308][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.808682][T15463] team0: Port device team_slave_0 removed [ 437.839087][T15463] team0: Port device team_slave_1 removed [ 437.862832][T15463] batman_adv: batadv0: Removing interface: »»»»»» [ 437.908252][T15463] bond1: (slave wireguard0): Releasing backup interface [ 437.928734][T15463] bond1: (slave wireguard1): making interface the new active one [ 437.967583][T15463] bond1: (slave wireguard1): Releasing backup interface [ 437.978329][T15463] tipc: Resetting bearer [ 437.991738][T15463] bond3: (slave geneve2): Releasing backup interface [ 438.010417][T15463] bond6: (slave veth3): Releasing active interface [ 438.022477][T15468] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 438.062639][T15449] lo speed is unknown, defaulting to 1000 [ 438.252752][T15479] tipc: Enabling of bearer rejected, failed to enable media [ 438.578524][ T51] Bluetooth: hci2: command tx timeout [ 438.775066][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 438.786682][T15493] siw: device registration error -23 [ 438.816448][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 438.824544][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 438.877983][T15492] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 438.903048][T15443] chnl_net:caif_netlink_parms(): no params data found [ 438.920441][T15492] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 439.029979][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.179406][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.235808][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.318203][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.319375][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.339316][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.346860][T15443] bridge_slave_0: entered allmulticast mode [ 439.355096][T15443] bridge_slave_0: entered promiscuous mode [ 439.364568][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.372254][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.379724][T15443] bridge_slave_1: entered allmulticast mode [ 439.387734][T15443] bridge_slave_1: entered promiscuous mode [ 439.394996][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.403682][T15511] netlink: 'syz.0.2779': attribute type 29 has an invalid length. [ 439.450604][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.464998][T15512] netlink: 'syz.0.2779': attribute type 29 has an invalid length. [ 439.480698][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.511030][T15492] syzkaller0 speed is unknown, defaulting to 1000 [ 439.527266][T15443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.575863][T15443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.666680][T15510] lo speed is unknown, defaulting to 1000 [ 439.936818][T15443] team0: Port device team_slave_0 added [ 439.960328][T15443] team0: Port device team_slave_1 added [ 440.171957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.189850][T15443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.206679][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.306584][T15443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.376586][T15443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.383594][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.412212][T15518] __nla_validate_parse: 1 callbacks suppressed [ 440.412232][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 440.461030][T15443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.533531][T15510] lo speed is unknown, defaulting to 1000 [ 440.563060][T15518] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2782'. [ 440.646956][ T51] Bluetooth: hci2: command tx timeout [ 440.690648][T15443] hsr_slave_0: entered promiscuous mode [ 440.717054][T15443] hsr_slave_1: entered promiscuous mode [ 440.737316][T15443] debugfs: 'hsr0' already exists in 'hsr' [ 440.743109][T15443] Cannot create hsr debugfs directory [ 441.162095][T15532] ..@ÿ: renamed from bond_slave_0 [ 441.374199][T15532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2785'. [ 441.541107][T15443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.562157][T15443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.697395][T15443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.725699][T15443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.888731][T15443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.907146][T15443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.075333][T15443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.109954][T15443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.259062][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2795'. [ 442.295652][T15561] netlink: 'syz.1.2794': attribute type 10 has an invalid length. [ 442.305493][T15561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2794'. [ 442.309577][T15564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2796'. [ 442.340854][T15561] dummy0: entered allmulticast mode [ 442.361222][T15561] bridge0: port 1(dummy0) entered blocking state [ 442.395082][T15561] bridge0: port 1(dummy0) entered disabled state [ 442.554982][T15559] lo speed is unknown, defaulting to 1000 [ 442.561575][T15576] tipc: Enabling of bearer rejected, already enabled [ 442.573776][ T978] syzkaller0 speed is unknown, defaulting to 1000 [ 442.623657][T15576] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 442.673689][T15443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.713814][T15443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.727843][ T51] Bluetooth: hci2: command tx timeout [ 442.788720][T15443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.834169][T15443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.135832][T15443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.212966][T15443] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.253808][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.261067][T14145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.335224][T14145] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.342592][T14145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.426084][T15559] lo speed is unknown, defaulting to 1000 [ 443.437903][T15595] lo speed is unknown, defaulting to 1000 [ 443.939028][T15625] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 444.140562][T15443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.155688][T15559] syzkaller0 speed is unknown, defaulting to 1000 [ 444.294141][T15595] lo speed is unknown, defaulting to 1000 [ 444.302510][T15443] veth0_vlan: entered promiscuous mode [ 444.324887][T15443] veth1_vlan: entered promiscuous mode [ 444.378314][T15443] veth0_macvtap: entered promiscuous mode [ 444.389562][T15443] veth1_macvtap: entered promiscuous mode [ 444.417677][T15443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.434254][T15443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.462321][T14147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.477822][T14147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.504322][T14147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.514797][T14147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.635297][T14147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.652309][T14147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.717062][T15595] syzkaller0 speed is unknown, defaulting to 1000 [ 444.746578][T14149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.750604][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 444.755277][T14149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.769780][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 444.807736][ T51] Bluetooth: hci2: command tx timeout [ 445.365576][T15651] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2818'. [ 445.404402][T15649] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2817'. [ 445.601891][T15660] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2819'. [ 445.926379][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 446.033989][T15660] lo speed is unknown, defaulting to 1000 [ 446.474319][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 446.517843][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 446.748393][T15669] lo speed is unknown, defaulting to 1000 [ 446.755358][T15660] lo speed is unknown, defaulting to 1000 [ 446.922178][T15689] sctp: [Deprecated]: syz.4.2828 (pid 15689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.922178][T15689] Use struct sctp_sack_info instead [ 446.959669][T15691] tipc: Enabling of bearer rejected, failed to enable media [ 447.091153][T15695] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 447.100270][T15695] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2829'. [ 447.109698][T15695] NCSI netlink: No device for ifindex 0 [ 447.367477][T15701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.403913][T15701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2831'. [ 447.418138][T15660] syzkaller0 speed is unknown, defaulting to 1000 [ 447.419147][T15669] lo speed is unknown, defaulting to 1000 [ 447.950410][T15669] syzkaller0 speed is unknown, defaulting to 1000 [ 448.081013][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 448.241127][T15718] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 448.331556][T15720] netlink: 'syz.4.2836': attribute type 7 has an invalid length. [ 448.347896][T15720] netlink: 'syz.4.2836': attribute type 8 has an invalid length. [ 448.355689][T15720] netlink: 'syz.4.2836': attribute type 4 has an invalid length. [ 448.404924][T15720] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2836'. [ 448.924266][T15735] tipc: Resetting bearer [ 448.948946][T15729] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2838'. [ 449.040575][T15735] team0: Mode changed to "activebackup" [ 449.211823][T15738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.223385][T15738] batadv_slave_1: entered promiscuous mode [ 449.580672][T15754] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2848'. [ 449.580672][T15756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2848'. [ 450.198191][T15789] tls_set_device_offload: netdev not found [ 450.385153][T15798] netlink: 'syz.3.2858': attribute type 9 has an invalid length. [ 450.811979][T15822] netlink: 'syz.4.2866': attribute type 5 has an invalid length. [ 450.934195][T15827] syzkaller1: entered promiscuous mode [ 450.939896][T15827] syzkaller1: entered allmulticast mode [ 451.394100][T15840] tipc: Enabling of bearer rejected, already enabled [ 451.746989][T15852] __nla_validate_parse: 2 callbacks suppressed [ 451.747011][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 451.846758][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2874'. [ 452.370328][T15884] vti0: entered promiscuous mode [ 452.375496][T15884] vti0: entered allmulticast mode [ 452.517255][T15895] tipc: Enabling of bearer rejected, already enabled [ 452.534141][T15895] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 452.543096][T15895] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 452.553294][T15895] tipc: Resetting bearer [ 453.328723][T15944] dvmrp0: entered allmulticast mode [ 453.352644][T15946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.381982][T15949] netlink: 'syz.2.2899': attribute type 28 has an invalid length. [ 453.510810][T15963] syz.3.2902: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 453.533359][T15963] CPU: 0 UID: 0 PID: 15963 Comm: syz.3.2902 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 453.533394][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.533408][T15963] Call Trace: [ 453.533418][T15963] [ 453.533427][T15963] dump_stack_lvl+0x189/0x250 [ 453.533462][T15963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.533485][T15963] ? __pfx__printk+0x10/0x10 [ 453.533513][T15963] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 453.533539][T15963] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 453.533567][T15963] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 453.533594][T15963] warn_alloc+0x214/0x310 [ 453.533616][T15963] ? stack_depot_save_flags+0x40/0x900 [ 453.533643][T15963] ? __pfx_warn_alloc+0x10/0x10 [ 453.533669][T15963] ? kasan_save_track+0x4f/0x80 [ 453.533702][T15963] ? xskq_create+0x56/0x170 [ 453.533730][T15963] ? xsk_init_queue+0xb0/0x110 [ 453.533756][T15963] ? xsk_setsockopt+0x4dc/0x8d0 [ 453.533780][T15963] ? do_sock_setsockopt+0x17c/0x1b0 [ 453.533799][T15963] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 453.533819][T15963] ? do_syscall_64+0xfa/0x3b0 [ 453.533849][T15963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.533879][T15963] __vmalloc_node_range_noprof+0x125/0x12f0 [ 453.533934][T15963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.533963][T15963] ? __kasan_kmalloc+0x93/0xb0 [ 453.533997][T15963] vmalloc_user_noprof+0xad/0xf0 [ 453.534017][T15963] ? xskq_create+0xbf/0x170 [ 453.534046][T15963] xskq_create+0xbf/0x170 [ 453.534078][T15963] xsk_init_queue+0xb0/0x110 [ 453.534108][T15963] xsk_setsockopt+0x4dc/0x8d0 [ 453.534139][T15963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 453.534167][T15963] ? __pfx_aa_sk_perm+0x10/0x10 [ 453.534200][T15963] ? aa_sock_opt_perm+0x74/0x110 [ 453.534230][T15963] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 453.534254][T15963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 453.534283][T15963] do_sock_setsockopt+0x17c/0x1b0 [ 453.534323][T15963] __x64_sys_setsockopt+0x13f/0x1b0 [ 453.534350][T15963] do_syscall_64+0xfa/0x3b0 [ 453.534379][T15963] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.534409][T15963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.534429][T15963] ? clear_bhb_loop+0x60/0xb0 [ 453.534455][T15963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.534475][T15963] RIP: 0033:0x7f2f26b8e9a9 [ 453.534493][T15963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.534512][T15963] RSP: 002b:00007f2f279a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 453.534537][T15963] RAX: ffffffffffffffda RBX: 00007f2f26db5fa0 RCX: 00007f2f26b8e9a9 [ 453.534554][T15963] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 453.534567][T15963] RBP: 00007f2f26c10d69 R08: 0000000000000004 R09: 0000000000000000 [ 453.534580][T15963] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.534594][T15963] R13: 0000000000000000 R14: 00007f2f26db5fa0 R15: 00007ffe225d2048 [ 453.534629][T15963] [ 453.534638][T15963] Mem-Info: [ 453.583470][T15966] macvlan0: entered allmulticast mode [ 453.614969][T15963] active_anon:3710 inactive_anon:0 isolated_anon:0 [ 453.614969][T15963] active_file:1953 inactive_file:39973 isolated_file:0 [ 453.614969][T15963] unevictable:768 dirty:228 writeback:0 [ 453.614969][T15963] slab_reclaimable:12853 slab_unreclaimable:236709 [ 453.614969][T15963] mapped:29499 shmem:1369 pagetables:1109 [ 453.614969][T15963] sec_pagetables:0 bounce:0 [ 453.614969][T15963] kernel_misc_reclaimable:0 [ 453.614969][T15963] free:1183848 free_pcp:16497 free_cma:0 [ 453.657082][T15966] veth1_vlan: entered allmulticast mode [ 453.657413][T15963] Node 0 active_anon:14840kB inactive_anon:0kB active_file:7812kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117996kB dirty:912kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12932kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.752269][T15966] team0: Port device macvlan0 added [ 453.757032][T15963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.981263][T15968] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2902'. [ 453.981370][T15963] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.025904][T15963] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 454.089640][T15963] Node 0 DMA32 free:822572kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14868kB inactive_anon:0kB active_file:7812kB inactive_file:157852kB unevictable:1536kB writepending:912kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:44812kB local_pcp:26312kB free_cma:0kB [ 454.152436][T15963] lowmem_reserve[]: 0 0 1 1 1 [ 454.165077][T15963] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 454.260726][T15963] lowmem_reserve[]: 0 0 0 0 0 [ 454.276877][T15984] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2908'. [ 454.285303][T15963] Node 1 Normal free:3901540kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17576kB local_pcp:6944kB free_cma:0kB [ 454.330991][T15963] lowmem_reserve[]: 0 0 0 0 0 [ 454.335981][T15963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.364462][T15963] Node 0 DMA32: 1980*4kB (UM) 670*8kB (UM) 54*16kB (UME) 448*32kB (UM) 167*64kB (UM) 148*128kB (UME) 89*256kB (UME) 159*512kB (UM) 125*1024kB (UM) 8*2048kB (UM) 126*4096kB (UM) = 822784kB [ 454.385603][T15963] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 454.406704][T15963] Node 1 Normal: 195*4kB (UE) 49*8kB (UME) 43*16kB (UME) 117*32kB (UME) 28*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (UM) = 3901540kB [ 454.433283][T15963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.487310][T15963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.504747][T15963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.521686][T15963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.532197][T15963] 43292 total pagecache pages [ 454.542289][T15989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2910'. [ 454.552239][T15963] 0 pages in swap cache [ 454.552257][T15963] Free swap = 124996kB [ 454.552270][T15963] Total swap = 124996kB [ 454.552281][T15963] 2097051 pages RAM [ 454.552291][T15963] 0 pages HighMem/MovableOnly [ 454.552301][T15963] 424872 pages reserved [ 454.552310][T15963] 0 pages cma reserved [ 454.695528][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 454.788719][T16000] tipc: Resetting bearer [ 454.799507][T16004] syzkaller1: entered promiscuous mode [ 454.807962][T16004] syzkaller1: entered allmulticast mode [ 454.854798][T16010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.915196][T16012] ipvlan2: entered promiscuous mode [ 454.933933][T16012] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 455.239320][T16023] syzkaller1: entered promiscuous mode [ 455.258951][T16023] syzkaller1: entered allmulticast mode [ 455.364253][T16038] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2922'. [ 455.365286][T16037] netlink: 'syz.0.2921': attribute type 1 has an invalid length. [ 456.131410][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.156739][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.169752][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.178414][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.187120][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.240290][T16037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 456.249106][T16028] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2922'. [ 456.285720][T16045] veth7: entered promiscuous mode [ 456.304023][T16045] bond7: (slave veth7): Enslaving as an active interface with a down link [ 456.455749][T16060] lo speed is unknown, defaulting to 1000 [ 456.497630][T16065] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 456.535176][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 456.544317][T16067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2930'. [ 456.682193][T16075] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 456.706049][T16073] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 456.782359][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2929'. [ 456.826907][T16065] batadv_slave_1: left promiscuous mode [ 456.941308][T16060] lo speed is unknown, defaulting to 1000 [ 457.081260][T16089] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 457.624528][T16060] syzkaller0 speed is unknown, defaulting to 1000 [ 457.750388][T16118] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 458.024394][T16126] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2946'. [ 458.196340][T16126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 458.237438][T16137] syzkaller1: entered promiscuous mode [ 458.243065][T16137] syzkaller1: entered allmulticast mode [ 458.248799][ T5843] Bluetooth: hci5: command tx timeout [ 458.324478][T16060] chnl_net:caif_netlink_parms(): no params data found [ 458.668515][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.675816][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.684437][T16060] bridge_slave_0: entered allmulticast mode [ 458.692482][T16060] bridge_slave_0: entered promiscuous mode [ 458.706997][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.723878][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.752015][T16060] bridge_slave_1: entered allmulticast mode [ 458.771503][T16060] bridge_slave_1: entered promiscuous mode [ 458.940778][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.983947][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.077766][T16060] team0: Port device team_slave_0 added [ 459.088484][T16060] team0: Port device team_slave_1 added [ 459.162128][T16177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 459.231202][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.255079][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.287665][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.310828][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.341530][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.417887][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.544680][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 459.623511][T16060] hsr_slave_0: entered promiscuous mode [ 459.633321][T16060] hsr_slave_1: entered promiscuous mode [ 459.648925][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 459.661510][T16060] Cannot create hsr debugfs directory [ 459.783223][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'. [ 460.305362][T16229] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 460.326889][ T5843] Bluetooth: hci5: command tx timeout [ 460.369821][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2972'. [ 460.431186][T16236] pim6reg: entered allmulticast mode [ 460.442191][T16230] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.525443][T16238] netlink: 'syz.4.2974': attribute type 64 has an invalid length. [ 460.568774][T16240] openvswitch: netlink: Multiple metadata blocks provided [ 460.587505][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 461.010340][T16060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.053779][T16060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.115839][T16060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.147710][T16265] lo speed is unknown, defaulting to 1000 [ 461.148232][T16060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.262032][T16270] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 461.375573][T16265] lo speed is unknown, defaulting to 1000 [ 461.526392][T16281] lo speed is unknown, defaulting to 1000 [ 461.713949][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.802259][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.963056][T16265] syzkaller0 speed is unknown, defaulting to 1000 [ 461.978274][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.985486][T14147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.014069][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.021331][T14147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.103862][T16281] lo speed is unknown, defaulting to 1000 [ 462.407389][ T5843] Bluetooth: hci5: command tx timeout [ 462.767801][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.790060][T16281] syzkaller0 speed is unknown, defaulting to 1000 [ 463.233153][T16328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2993'. [ 463.412466][T16060] veth0_vlan: entered promiscuous mode [ 463.528358][T16335] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2995'. [ 463.547442][T16060] veth1_vlan: entered promiscuous mode [ 463.634787][T16060] veth0_macvtap: entered promiscuous mode [ 463.657154][T16060] veth1_macvtap: entered promiscuous mode [ 463.678219][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 463.687899][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 463.757415][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.812737][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.925477][T16347] netlink: 'syz.3.2998': attribute type 10 has an invalid length. [ 463.949437][T16347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2998'. [ 464.013208][T16347] team0: Port device geneve0 added [ 464.035121][ T9467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.055129][ T9467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.144585][ T9467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.174450][ T9467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.242843][T16343] lo speed is unknown, defaulting to 1000 [ 464.276728][ T9467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.288372][ T9467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.361876][T14148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.391795][T14148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.487638][ T5843] Bluetooth: hci5: command tx timeout [ 464.548033][T14146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.580439][T14146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.662623][T16359] IPVS: Scheduler module ip_vs_sip not found [ 464.769401][T14148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.814334][T14148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.895184][T16343] lo speed is unknown, defaulting to 1000 [ 465.135548][T16377] netlink: 'syz.0.3004': attribute type 29 has an invalid length. [ 465.175495][T16377] netlink: 'syz.0.3004': attribute type 29 has an invalid length. [ 465.201805][T16377] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3004'. [ 465.232334][T16377] unsupported nla_type 58 [ 465.435345][T16343] syzkaller0 speed is unknown, defaulting to 1000 [ 465.772589][T14145] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 465.998010][T16410] netlink: 'syz.1.3012': attribute type 16 has an invalid length. [ 466.030696][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 466.045777][T16410] netlink: 'syz.1.3012': attribute type 17 has an invalid length. [ 466.090772][T16409] smc: removing ib device syz0 [ 466.098175][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'. [ 466.151329][T16412] IPv6: NLM_F_REPLACE set, but no existing node found! [ 466.458087][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.465893][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.527485][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.538347][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.547921][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.582568][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.606503][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.945697][T16410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.974559][T16410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.463995][T16420] tipc: Enabling of bearer rejected, already enabled [ 467.515612][T14146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.551983][T14146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.574207][T14146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.633713][T14146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.749837][T16415] lo speed is unknown, defaulting to 1000 [ 468.574426][T16415] syzkaller0 speed is unknown, defaulting to 1000 [ 468.578017][T16426] lo speed is unknown, defaulting to 1000 [ 468.736319][ T5843] Bluetooth: hci0: command tx timeout [ 469.010453][T16415] chnl_net:caif_netlink_parms(): no params data found [ 469.045067][T16426] syzkaller0 speed is unknown, defaulting to 1000 [ 469.045087][T16434] lo speed is unknown, defaulting to 1000 [ 469.245772][T16415] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.262792][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.272343][T16415] bridge_slave_0: entered allmulticast mode [ 469.293147][T16415] bridge_slave_0: entered promiscuous mode [ 469.308295][T16415] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.324800][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.333865][T16415] bridge_slave_1: entered allmulticast mode [ 469.351782][T16415] bridge_slave_1: entered promiscuous mode [ 469.379738][T16434] syzkaller0 speed is unknown, defaulting to 1000 [ 469.403794][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.460033][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.515375][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'. [ 469.538134][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 469.564472][T16445] netlink: 'syz.2.3017': attribute type 1 has an invalid length. [ 469.627846][T16446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3017'. [ 469.753682][T16415] team0: Port device team_slave_0 added [ 469.775223][T16415] team0: Port device team_slave_1 added [ 469.940894][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.953865][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.982951][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.010538][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.018148][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.044577][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.268269][T16458] netlink: 'syz.4.3020': attribute type 1 has an invalid length. [ 470.312797][T16457] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3020'. [ 470.362593][T16458] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 470.369975][T16415] hsr_slave_0: entered promiscuous mode [ 470.386098][T16415] hsr_slave_1: entered promiscuous mode [ 470.392980][T16415] debugfs: 'hsr0' already exists in 'hsr' [ 470.399034][T16415] Cannot create hsr debugfs directory [ 470.801253][T16490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3025'. [ 470.812007][ T5843] Bluetooth: hci0: command tx timeout [ 470.953340][T16490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.959743][T16483] macsec1: entered promiscuous mode [ 470.990588][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 471.001860][T16483] bridge0: entered promiscuous mode [ 471.012486][T16483] bridge0: port 3(macsec1) entered blocking state [ 471.042060][T16483] bridge0: port 3(macsec1) entered disabled state [ 471.062373][T16483] macsec1: entered allmulticast mode [ 471.082339][T16483] bridge0: entered allmulticast mode [ 471.111695][T16483] macsec1: left allmulticast mode [ 471.128065][T16483] bridge0: left allmulticast mode [ 471.151932][T16483] bridge0: left promiscuous mode [ 471.239761][T16505] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3031'. [ 471.519506][T16523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3037'. [ 471.628115][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 471.791723][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 471.932660][T16537] netlink: 'syz.4.3042': attribute type 1 has an invalid length. [ 472.094185][T16526] bridge_slave_1 (unregistering): left allmulticast mode [ 472.102022][T16526] bridge_slave_1 (unregistering): left promiscuous mode [ 472.109280][T16526] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.225747][T16537] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.289907][T16548] dvmrp1: entered allmulticast mode [ 472.329267][T16531] lo speed is unknown, defaulting to 1000 [ 472.355572][T16415] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.387833][T16553] netlink: 'syz.1.3045': attribute type 3 has an invalid length. [ 472.395718][T16553] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 472.400694][T16415] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.427384][T16415] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.605668][T16415] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.723746][T16531] syzkaller0 speed is unknown, defaulting to 1000 [ 472.731120][T16558] lo speed is unknown, defaulting to 1000 [ 472.886345][ T5843] Bluetooth: hci0: command tx timeout [ 473.212330][T16415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.283784][T16587] raw_sendmsg: syz.4.3053 forgot to set AF_INET. Fix it! [ 473.287835][T16415] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.333909][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.341130][T14147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.399608][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.406908][T14147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.445982][T16558] syzkaller0 speed is unknown, defaulting to 1000 [ 473.772758][T16601] netlink: 'syz.1.3055': attribute type 13 has an invalid length. [ 473.792861][T16601] netlink: 'syz.1.3055': attribute type 17 has an invalid length. [ 473.971242][T16601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.981934][T16601] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.994066][T16601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.659445][T16415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.773195][T16619] lo speed is unknown, defaulting to 1000 [ 474.787106][T16415] veth0_vlan: entered promiscuous mode [ 474.835992][T16415] veth1_vlan: entered promiscuous mode [ 474.939923][T16415] veth0_macvtap: entered promiscuous mode [ 474.962074][T16415] veth1_macvtap: entered promiscuous mode [ 474.967658][ T5843] Bluetooth: hci0: command tx timeout [ 475.015051][T16629] __nla_validate_parse: 1 callbacks suppressed [ 475.015073][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 475.299812][T16415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.373267][T16415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.403910][T14146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.439035][T14146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.545597][T14148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.624870][T14148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.769366][T14148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.811716][T14148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.933841][ T9471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.943225][ T9471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.017487][T16619] syzkaller0 speed is unknown, defaulting to 1000 [ 476.298879][T16659] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 476.748463][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3071'. [ 476.802305][T16670] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 476.893955][T16671] nr0: left promiscuous mode [ 477.024072][T16687] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3075'. [ 477.251822][T16695] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3079'. [ 477.272219][T16695] netlink: zone id is out of range [ 477.282909][T16695] netlink: zone id is out of range [ 477.301658][T16695] netlink: zone id is out of range [ 477.310437][T16695] netlink: zone id is out of range [ 477.315811][T16695] netlink: zone id is out of range [ 477.331584][T16695] netlink: zone id is out of range [ 477.342585][T16695] netlink: zone id is out of range [ 477.351634][T16698] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3080'. [ 477.353924][T16695] netlink: get zone limit has 8 unknown bytes [ 477.534074][T16698] caif0: entered allmulticast mode [ 477.702916][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 477.714791][T16698] caif0: left allmulticast mode [ 478.122015][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'. [ 478.243741][T16744] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 478.878317][T16773] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3099'. [ 478.978318][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3101'. [ 478.988218][T16781] 8021q: VLANs not supported on vxcan0 [ 479.273448][T16788] netlink: 'syz.1.3103': attribute type 14 has an invalid length. [ 479.527606][T16792] tipc: Started in network mode [ 479.532554][T16792] tipc: Node identity a2a75a8c2601, cluster identity 4711 [ 479.578060][T16792] tipc: Enabled bearer , priority 0 [ 479.671046][T16800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3106'. [ 479.814219][T16792] tipc: Disabling bearer [ 480.137108][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.146721][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.155408][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.178313][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.188735][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.350554][ T5946] IPVS: starting estimator thread 0... [ 480.419997][T16832] erspan1: entered promiscuous mode [ 480.425352][T16832] erspan1: entered allmulticast mode [ 480.452557][T16821] lo speed is unknown, defaulting to 1000 [ 480.466579][T16830] IPVS: using max 30 ests per chain, 72000 per kthread [ 480.742996][T16837] netlink: 'syz.1.3115': attribute type 3 has an invalid length. [ 480.758340][T16821] syzkaller0 speed is unknown, defaulting to 1000 [ 480.758398][T16818] lo speed is unknown, defaulting to 1000 [ 481.302435][T16818] syzkaller0 speed is unknown, defaulting to 1000 [ 481.303074][T16848] lo speed is unknown, defaulting to 1000 [ 481.572115][T14147] bridge_slave_1: left allmulticast mode [ 481.589641][T14147] bridge_slave_1: left promiscuous mode [ 481.597268][T14147] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.629810][T14147] bridge_slave_0: left allmulticast mode [ 481.635549][T14147] bridge_slave_0: left promiscuous mode [ 481.641921][T14147] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.247288][ T51] Bluetooth: hci1: command tx timeout [ 482.974832][T14147] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 482.987725][T14147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.998570][T14147] bond0 (unregistering): Released all slaves [ 483.019988][T14147] bond1 (unregistering): Released all slaves [ 483.037198][T14147] bond2 (unregistering): Released all slaves [ 483.169913][T14147] bond3 (unregistering): (slave veth5): Releasing active interface [ 483.180465][T14147] bond3 (unregistering): Released all slaves [ 483.196901][T14147] bond4 (unregistering): Released all slaves [ 483.315017][T14147] bond5 (unregistering): Released all slaves [ 483.362822][T16848] syzkaller0 speed is unknown, defaulting to 1000 [ 483.624875][T14147] tipc: Disabling bearer [ 483.647279][T14147] tipc: Left network mode [ 484.021123][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 484.172874][T16818] chnl_net:caif_netlink_parms(): no params data found [ 484.326801][ T51] Bluetooth: hci1: command tx timeout [ 484.859113][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3132'. [ 484.939463][T16909] netlink: 'syz.0.3131': attribute type 1 has an invalid length. [ 484.984514][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.005599][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.053580][T16818] bridge_slave_0: entered allmulticast mode [ 485.118908][T16818] bridge_slave_0: entered promiscuous mode [ 485.271094][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.302939][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.334711][T16818] bridge_slave_1: entered allmulticast mode [ 485.376039][T16818] bridge_slave_1: entered promiscuous mode [ 485.495303][T14147] hsr_slave_0: left promiscuous mode [ 485.511004][T14147] hsr_slave_1: left promiscuous mode [ 485.587095][T14147] pim6reg9 (unregistering): left allmulticast mode [ 485.856017][T14147] team0 (unregistering): Port device team_slave_1 removed [ 485.912071][T14147] team0 (unregistering): Port device team_slave_0 removed [ 486.416685][ T51] Bluetooth: hci1: command tx timeout [ 486.431982][T16928] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 486.448921][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.493776][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.629986][T16818] team0: Port device team_slave_0 added [ 486.671322][T16818] team0: Port device team_slave_1 added [ 487.002344][T16945] syzkaller1: entered promiscuous mode [ 487.008095][T16945] syzkaller1: entered allmulticast mode [ 487.017241][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.031481][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.073903][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.113943][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.122986][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.155327][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.225869][T16956] lo speed is unknown, defaulting to 1000 [ 487.317922][T14147] IPVS: stop unused estimator thread 0... [ 487.382882][T16818] hsr_slave_0: entered promiscuous mode [ 487.398139][T16818] hsr_slave_1: entered promiscuous mode [ 487.418416][T16818] debugfs: 'hsr0' already exists in 'hsr' [ 487.429947][T16818] Cannot create hsr debugfs directory [ 487.850831][T16969] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3146'. [ 487.860626][T16969] netlink: zone id is out of range [ 487.865872][T16969] netlink: zone id is out of range [ 487.873110][T16969] netlink: zone id is out of range [ 487.878693][T16971] syzkaller1: entered promiscuous mode [ 487.892563][T16971] syzkaller1: entered allmulticast mode [ 487.892859][T16969] netlink: zone id is out of range [ 487.904730][T16969] netlink: zone id is out of range [ 487.958990][T16969] netlink: zone id is out of range [ 487.964233][T16969] netlink: get zone limit has 8 unknown bytes [ 488.487445][ T5843] Bluetooth: hci1: command tx timeout [ 488.490522][ T30] audit: type=1107 audit(1753947631.494:9): pid=16995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 488.908326][T16818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 488.910432][T17009] IPVS: length: 8 != 446622349272 [ 488.935515][T16818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 489.003451][T16818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 489.045252][T16818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 489.156615][T17021] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3161'. [ 489.214888][T17030] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3161'. [ 489.267102][T17021] netlink: 'syz.1.3161': attribute type 4 has an invalid length. [ 489.488316][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.511318][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 489.534713][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.556317][T17041] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 489.570205][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3165'. [ 489.590489][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.597757][ T9467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.683574][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.690820][ T9467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.821270][T17046] lo speed is unknown, defaulting to 1000 [ 489.906694][T17053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.962537][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3169'. [ 490.177430][T17066] batadv0: entered promiscuous mode [ 490.197851][T17063] batadv0: left promiscuous mode [ 490.427660][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.536863][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 490.569835][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 491.419990][T16818] veth0_vlan: entered promiscuous mode [ 491.468834][T16818] veth1_vlan: entered promiscuous mode [ 491.608498][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 491.695949][T16818] veth0_macvtap: entered promiscuous mode [ 491.765006][T16818] veth1_macvtap: entered promiscuous mode [ 491.895062][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.964511][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.037931][T14148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.066784][T14148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.101803][T14148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.161651][T14148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.375523][T14145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.408794][T14145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.514725][T14149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.557460][T14149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.726800][T17134] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 493.001313][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 493.032491][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 493.187633][T17142] netlink: 'syz.4.3193': attribute type 4 has an invalid length. [ 493.272834][T17145] netlink: 'syz.4.3193': attribute type 4 has an invalid length. [ 493.528194][T17149] netlink: 'syz.4.3196': attribute type 42 has an invalid length. [ 493.871387][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.886390][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.898162][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.919841][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.934382][T14148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.947461][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.030665][T17161] lo speed is unknown, defaulting to 1000 [ 494.136407][T14148] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode [ 494.181841][T14148] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 494.221538][T14148] bridge0: port 1(netdevsim2) entered disabled state [ 494.264403][T14148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.371773][T17171] netlink: 'syz.4.3202': attribute type 6 has an invalid length. [ 494.530855][T14148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.537062][T17181] digital: digital_start_poll: Unknown protocol [ 494.708219][T14148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.759111][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 494.914457][T17195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.010881][T17195] team0: Device gtp0 is of different type [ 495.125078][T17203] lo speed is unknown, defaulting to 1000 [ 495.220236][T17203] lo speed is unknown, defaulting to 1000 [ 495.338028][T14148] tipc: Resetting bearer [ 495.436758][T17218] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3212'. [ 495.835322][T14148] dvmrp8 (unregistering): left allmulticast mode [ 495.863920][T14148] dvmrp0 (unregistering): left allmulticast mode [ 495.880444][T14148] dvmrp1 (unregistering): left allmulticast mode [ 495.961436][T14148] team0: Port device geneve0 removed [ 496.009299][ T5843] Bluetooth: hci3: command tx timeout [ 496.072460][T14148] tipc: Disabling bearer [ 496.456732][T14148] bond0 (unregistering): Released all slaves [ 496.569043][T14148] bond1 (unregistering): Released all slaves [ 496.584931][T14148] bond2 (unregistering): Released all slaves [ 496.702485][T14148] bond3 (unregistering): Released all slaves [ 496.717551][T14148] bond4 (unregistering): Released all slaves [ 496.733352][T14148] bond5 (unregistering): Released all slaves [ 496.751710][T14148] bond6 (unregistering): Released all slaves [ 496.776527][T14148] bond7 (unregistering): Released all slaves [ 496.792293][T14148] bond8 (unregistering): Released all slaves [ 496.815993][T17199] tipc: Enabled bearer , priority 0 [ 496.824713][T17203] lo speed is unknown, defaulting to 1000 [ 496.837795][T17211] syzkaller0: entered promiscuous mode [ 496.843326][T17211] syzkaller0: entered allmulticast mode [ 496.903207][T17215] bridge_slave_1: default FDB implementation only supports local addresses [ 497.011939][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 497.056700][T17226] bridge: RTM_NEWNEIGH with invalid ether address [ 497.077606][T17229] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3215'. [ 497.135658][T17230] tipc: Resetting bearer [ 497.146790][T17197] tipc: Resetting bearer [ 497.197615][T17197] tipc: Disabling bearer [ 497.245105][T14148] : left promiscuous mode [ 497.280361][T17233] veth0: entered promiscuous mode [ 497.293340][T17203] infiniband syz0: set active [ 497.299325][T17203] infiniband syz0: added lo [ 497.307393][T17233] veth0: left promiscuous mode [ 497.311621][T17203] syz0: rxe_create_cq: returned err = -12 [ 497.338145][T17203] infiniband syz0: Couldn't create ib_mad CQ [ 497.345152][T17203] infiniband syz0: Couldn't open port 1 [ 497.394803][T17203] RDS/IB: syz0: added [ 497.400279][T17203] smc: adding ib device syz0 with port count 1 [ 497.406979][T17203] smc: ib device syz0 port 1 has pnetid [ 497.455733][ T5959] lo speed is unknown, defaulting to 1000 [ 497.462012][T14148] tipc: Left network mode [ 497.515065][T14921] lo speed is unknown, defaulting to 1000 [ 497.542295][T17203] lo speed is unknown, defaulting to 1000 [ 497.746426][T17244] only policy match revision 0 supported [ 497.746453][T17244] unable to load match [ 497.853531][T17161] chnl_net:caif_netlink_parms(): no params data found [ 497.893901][T17249] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3221'. [ 497.951232][T17249] gretap0: entered promiscuous mode [ 498.086761][ T5843] Bluetooth: hci3: command tx timeout [ 498.118275][T17253] netlink: 'syz.1.3221': attribute type 25 has an invalid length. [ 498.179097][T17255] tipc: Started in network mode [ 498.190476][T17255] tipc: Node identity fec2c0a711da, cluster identity 4711 [ 498.217619][T17255] tipc: Enabled bearer , priority 0 [ 498.242310][T17203] lo speed is unknown, defaulting to 1000 [ 498.250896][T17258] syzkaller0: entered promiscuous mode [ 498.256976][T17258] syzkaller0: entered allmulticast mode [ 498.380998][T17255] tipc: Resetting bearer [ 498.475499][T17161] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.493104][T17161] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.511245][T17161] bridge_slave_0: entered allmulticast mode [ 498.528561][T17161] bridge_slave_0: entered promiscuous mode [ 498.539337][T17254] tipc: Resetting bearer [ 498.567898][T17254] tipc: Disabling bearer [ 498.597138][T17161] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.608176][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.615654][T17161] bridge_slave_1: entered allmulticast mode [ 498.642053][T17161] bridge_slave_1: entered promiscuous mode [ 498.686973][T17277] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 498.812098][T17203] lo speed is unknown, defaulting to 1000 [ 498.828430][T17161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.856047][T17161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.865564][T17280] tipc: Started in network mode [ 498.870760][T17280] tipc: Node identity a6b2ef1cff24, cluster identity 4711 [ 498.880835][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 498.890553][T17280] tipc: Enabled bearer , priority 0 [ 498.937517][T17284] syzkaller0: entered promiscuous mode [ 498.945375][T17284] syzkaller0: entered allmulticast mode [ 499.018624][T17286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.043757][T17280] tipc: Resetting bearer [ 499.088390][T17161] team0: Port device team_slave_0 added [ 499.118753][T17161] team0: Port device team_slave_1 added [ 499.190824][T17279] tipc: Resetting bearer [ 499.231547][T17279] tipc: Disabling bearer [ 499.234087][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'. [ 499.282196][T17161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.312192][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.339802][T17161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.475328][T17289] geneve2: entered promiscuous mode [ 499.490683][T17203] lo speed is unknown, defaulting to 1000 [ 499.508110][T17161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.528317][T17161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.634521][T17161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.824979][T17161] hsr_slave_0: entered promiscuous mode [ 499.868820][T17161] hsr_slave_1: entered promiscuous mode [ 499.890759][T17161] debugfs: 'hsr0' already exists in 'hsr' [ 499.910614][T17161] Cannot create hsr debugfs directory [ 500.035644][T17314] netlink: 'syz.4.3238': attribute type 3 has an invalid length. [ 500.045697][T17314] netlink: 'syz.4.3238': attribute type 3 has an invalid length. [ 500.055709][T17314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3238'. [ 500.166303][ T5843] Bluetooth: hci3: command tx timeout [ 500.192830][T17320] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3239'. [ 500.202599][T17320] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 500.211103][T17320] openvswitch: netlink: Duplicate key (type 0). [ 500.227417][T17203] lo speed is unknown, defaulting to 1000 [ 500.394298][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'. [ 500.448706][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3242'. [ 500.550557][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 500.883717][T17336] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.891605][T17336] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.023754][T17336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.041386][T17336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.209874][T17203] lo speed is unknown, defaulting to 1000 [ 501.277713][ T9467] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.290867][ T9467] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.389152][T17349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3247'. [ 501.438024][ T9467] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.466799][ T9467] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.618822][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.695827][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'. [ 501.715230][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'. [ 501.804695][T17203] lo speed is unknown, defaulting to 1000 [ 502.248124][ T5843] Bluetooth: hci3: command tx timeout [ 502.267716][T17161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 502.299403][T17161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 502.310235][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3255'. [ 502.323636][T17161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 502.377398][T17161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 502.450188][T17203] lo speed is unknown, defaulting to 1000 [ 502.706494][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.741800][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.762775][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.770019][T14145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.822962][T14150] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.830239][T14150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.929392][T17203] lo speed is unknown, defaulting to 1000 [ 503.131164][T17399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.180163][T17400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3259'. [ 503.331191][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.451041][T17412] netlink: 'syz.4.3262': attribute type 9 has an invalid length. [ 503.458451][T17161] veth0_vlan: entered promiscuous mode [ 503.525802][T17161] veth1_vlan: entered promiscuous mode [ 503.543896][T17203] lo speed is unknown, defaulting to 1000 [ 503.598885][T17161] veth0_macvtap: entered promiscuous mode [ 503.611690][T17161] veth1_macvtap: entered promiscuous mode [ 503.655228][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.688217][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.693339][T17419] netlink: ct family unspecified [ 503.701417][T17419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.735992][T14150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.758254][T14150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.776940][T14150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.815219][T14150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.858249][T17421] netem: change failed [ 504.001182][T14150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.025865][T14150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.161719][T17369] lo speed is unknown, defaulting to 1000 [ 504.195254][T14149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.215807][T14149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.390940][T17429] netlink: 'syz.2.3267': attribute type 2 has an invalid length. [ 504.655090][T17435] sctp: [Deprecated]: syz.1.3268 (pid 17435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.655090][T17435] Use struct sctp_sack_info instead [ 504.704572][T17441] tipc: Started in network mode [ 504.745346][T17441] tipc: Node identity 72cb50d83a05, cluster identity 4711 [ 504.788649][T17441] tipc: Enabled bearer , priority 0 [ 504.827794][T17445] syzkaller0: entered promiscuous mode [ 504.858096][T17445] syzkaller0: entered allmulticast mode [ 504.923863][T17441] tipc: Resetting bearer [ 504.969063][T17437] tipc: Resetting bearer [ 505.026655][T17437] tipc: Disabling bearer [ 505.233065][T14148] hsr_slave_0: left promiscuous mode [ 505.286363][T14148] hsr_slave_1: left promiscuous mode [ 505.378407][T14148] pim6reg (unregistering): left allmulticast mode [ 505.702602][T17471] Bluetooth: MGMT ver 1.23 [ 505.968306][T14148] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 505.980281][T14148] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 505.989924][T14148] CPU: 1 UID: 0 PID: 14148 Comm: kworker/u8:24 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 506.001929][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.012012][T14148] Workqueue: netns cleanup_net [ 506.016838][T14148] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 506.022532][T14148] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 506.042592][T14148] RSP: 0018:ffffc9000bb8f340 EFLAGS: 00010206 [ 506.048685][T14148] RAX: 000000001fffe000 RBX: 1ffff1100f836c02 RCX: ffff88802b485a00 [ 506.056667][T14148] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 506.064756][T14148] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 506.072757][T14148] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 506.081019][T14148] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88807c1b6010 [ 506.089025][T14148] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 506.097988][T14148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.104595][T14148] CR2: 00007f8cb965b6b0 CR3: 0000000093748000 CR4: 00000000003526f0 [ 506.112714][T14148] Call Trace: [ 506.115998][T14148] [ 506.118939][T14148] mld_clear_delrec+0x160/0x660 [ 506.123817][T14148] ipv6_mc_destroy_dev+0x45/0x5a0 [ 506.128878][T14148] ? addrconf_ifdown+0x1396/0x1880 [ 506.134034][T14148] addrconf_ifdown+0x139e/0x1880 [ 506.139021][T14148] ? tls_dev_event+0x717/0xec0 [ 506.143801][T14148] ? __pfx_addrconf_ifdown+0x10/0x10 [ 506.149189][T14148] addrconf_notify+0x1bc/0x1010 [ 506.154065][T14148] notifier_call_chain+0x1b3/0x3e0 [ 506.159205][T14148] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 506.165644][T14148] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 506.172429][T14148] ? unregister_netdevice_queue+0x1b3/0x380 [ 506.178384][T14148] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 506.184685][T14148] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 506.190913][T14148] default_device_exit_batch+0x819/0x890 [ 506.196583][T14148] ? __pfx___might_resched+0x10/0x10 [ 506.201906][T14148] ? __pfx_default_device_exit_batch+0x10/0x10 [ 506.208089][T14148] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 506.213575][T14148] ? net_generic+0x1e/0x240 [ 506.218105][T14148] ? __pfx_default_device_exit_batch+0x10/0x10 [ 506.224354][T14148] ops_undo_list+0x522/0x990 [ 506.228985][T14148] ? __pfx_ops_undo_list+0x10/0x10 [ 506.234144][T14148] ? preempt_schedule_thunk+0x16/0x30 [ 506.239534][T14148] cleanup_net+0x4c5/0x800 [ 506.243993][T14148] ? __pfx_cleanup_net+0x10/0x10 [ 506.248953][T14148] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.254425][T14148] ? process_scheduled_works+0x9ef/0x17b0 [ 506.260258][T14148] ? process_scheduled_works+0x9ef/0x17b0 [ 506.265994][T14148] process_scheduled_works+0xae1/0x17b0 [ 506.271587][T14148] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.277605][T14148] worker_thread+0x8a0/0xda0 [ 506.282241][T14148] ? __kthread_parkme+0x7b/0x200 [ 506.287190][T14148] kthread+0x70e/0x8a0 [ 506.291276][T14148] ? __pfx_worker_thread+0x10/0x10 [ 506.296409][T14148] ? __pfx_kthread+0x10/0x10 [ 506.301020][T14148] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.306273][T14148] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.311485][T14148] ? __pfx_kthread+0x10/0x10 [ 506.316233][T14148] ret_from_fork+0x3fc/0x770 [ 506.320841][T14148] ? __pfx_ret_from_fork+0x10/0x10 [ 506.325986][T14148] ? __switch_to_asm+0x39/0x70 [ 506.330765][T14148] ? __switch_to_asm+0x33/0x70 [ 506.335560][T14148] ? __pfx_kthread+0x10/0x10 [ 506.340166][T14148] ret_from_fork_asm+0x1a/0x30 [ 506.344954][T14148] [ 506.347983][T14148] Modules linked in: [ 506.353500][T14148] ---[ end trace 0000000000000000 ]--- [ 506.362035][T14148] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 506.367875][T14148] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 506.387788][T14148] RSP: 0018:ffffc9000bb8f340 EFLAGS: 00010206 [ 506.393885][T14148] RAX: 000000001fffe000 RBX: 1ffff1100f836c02 RCX: ffff88802b485a00 [ 506.402119][T14148] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 506.410165][T14148] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 506.418208][T14148] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 506.426444][T14148] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88807c1b6010 [ 506.434452][T14148] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 506.443515][T14148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.450158][T14148] CR2: 00007f8cb965b6b0 CR3: 0000000074f04000 CR4: 00000000003526f0 [ 506.458232][T14148] Kernel panic - not syncing: Fatal exception [ 506.464658][T14148] Kernel Offset: disabled [ 506.469016][T14148] Rebooting in 86400 seconds..