last executing test programs: 8.195481802s ago: executing program 3 (id=5309): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x8004, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.571221018s ago: executing program 3 (id=5316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xbc}}, 0x0) 7.455776969s ago: executing program 3 (id=5320): unshare(0x8040480) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) (async) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x4880) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0xfffffffffffffd2b, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x801) r7 = socket(0x28, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x200, 0x200, 0xff, 0x8, 0xa0, 0x6, 0x5}, &(0x7f0000000340)=0x9c) (async, rerun: 64) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020000000808000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="c16b"], 0x80}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000580)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @udp_ip4_spec={@empty, @multicast1}, {0x0, @random="339341c4940f"}, @esp_ip4_spec={@multicast1, @loopback}, {0x0, @local}}}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}]}, 0x3c}}, 0x0) 7.240407558s ago: executing program 3 (id=5325): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000004}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0xa, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x28, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x28) 7.10371797s ago: executing program 3 (id=5328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 7.030624992s ago: executing program 3 (id=5331): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xa5, "847411f6b50343207eda6c8e0361eee81a76ee5846bee707575ddced7660a08681cc27fb847e736e7b98fc3c31635495738a7b24155f6d30360dcd7af0f58cf9f047c1f8c24bf250d17984f7a87a2d49a40a255981ee0571080bf48553c4dcf5d95258d354cca77d2ead2223a163d75b66869f765908d17da8dd152502b1179c17413d8f127d9e2edfef93a5b699ef671792382cdf61d643d321dfc3db15a550d791f4eb4c"}, &(0x7f0000000180)=0xad) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000066000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1d00000016000000b40000007f00000044a00000", @ANYRES32=r5, @ANYBLOB="0000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYBLOB="236126dd2968ac60b1a9cab458b30dceafaeeb3cb9df32f8ac16fcfbf1681359580ca125f3a576b232480f473665392ff10819ff9fcaaf47f455665c5b5ae868a523b1f4c510b29a41df986271e0d27ce01f224bf7fdb8550903b22c25ee018227f64fc0827fb0daa09f7112ca53150ec7676ccb33d9689f44fe6ec22f614c3917ae86435daf89f03e7ef2d67c20db4756df297faed122773d05eaa8e8055d9447d6bbcc5360a45d3fb6d884e23347"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010000000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000f06c8a01864843255fbcc641d8148a841ea40a9b9c8b28a030f58d66bd2e829d26d93898b214150bcddc9037c70c8cfac91869f7b3288e2ad1f3479ca267b0634d2c034f70cdbb6f024efc44c1e66a67fb920801c4d6616ba2cb143093036f648f45785fc8257e961b65b380f36cdedea3bf419904cf77c1ad26ae90f1a06aebdd437c7b4547d027b27646593575d34a145abcb7631b43a8"], 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x2e2f76ab035b98ee) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x2000, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffe}}, 0xe8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$bt_hci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="01"], 0x27) connect$inet6(r7, &(0x7f00000000c0), 0x1c) socket$kcm(0x2, 0x0, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010926bd7000cd7a7165301a24c500000000021800000000000800000000"], 0x24}}, 0x800) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r10, &(0x7f0000000000)={0x2, 0x20, @loopback}, 0x10) 3.042458249s ago: executing program 1 (id=5373): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x41, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@generic={0x7, 0x2, 0x7, 0x360, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @exit, @func, @tail_call, @map_fd, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func, @exit, @call={0x85, 0x0, 0x0, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000050000003ff63e"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r9, 0x329, 0x0, 0x3, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0xb02, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b8408217f05"], 0xffdd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000200)=0x3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x1abb01, 0x0) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}) 2.144119673s ago: executing program 1 (id=5386): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="e1", 0x1, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x7, &(0x7f0000000080)=@framed={{}, [@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.077526809s ago: executing program 1 (id=5387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000002780)={{0x3, @netrom}, [@remote, @default, @remote, @netrom, @remote, @default, @remote, @null]}, &(0x7f0000002800)=0x48, 0x80000) sendmmsg$sock(r2, &(0x7f0000004100)=[{{&(0x7f0000000180)=@ethernet={0x40afc0c91d94b4f8, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)="6bab80d24e61b7711c5dbdf9c75045de0b1b9abf5fe8ddcb7920eec33f55dcdbb9c67e17f9d77806401bb1e05e2151c7ac67beead05f41f7b86844e0f0c5bfc2835f434519934b8a82a2f5714198240c25b386d557fc7649a699ecc2b933985a73f196a0b661c793ab4ca198c1993a1a49253f4fb35d93e69e006c3b235140b5feed48957b0338dd7f960d0c3dded538e4875ed7288cd2e2684f49190ebd3ef700cb1c825c1631169099823a815320c684162eafc60f3e98bb7f732309e24ae69c04dfc81c1f03328e591de781271e2797760bee5b62e6e5270b309727a91382d34aeb484b117b65dc57abaecd6e62ac7d818e09956b", 0xf6}, {&(0x7f0000000540)="8f81125a76f662fb7687668e2b1fa2dd3b487d7b5891a1ccf8047e0f30211e0e303665736f72741bc9a1623e6fd7accf4bb88433722e86cc756c5ddb119392e61b3092301a01c1468359df794be547c2c5231b2b5b429e229f75d084a399aba4be743ca048578f78e2641780f55564840cd2470318044d7e9dacb70902d8340c06b8303dabbe46ed239c68f2cc70a39bfab4d93db7894d459ad6d179c286cc413a6861eed16c7818cd9a76a1212d5b647638e51a8464d7cef73d74adafceb34d89bd144cf71db9026f0c1679d0cf0fad0a4ab83fa4c7cfab7acc48d34ee9a3128f", 0xe1}, {&(0x7f0000000080)="15dfcb04623e9635f753c886a8e9d1e15ce2ae4b3112d1613652954e7e82ac6fe9834aef2ed4e518fc12ecd8811391a3e66d06484ea102a9fb31d399ee58", 0x3e}, {&(0x7f0000000200)="fd642b56a5192edda0617717720d69b612d8a2a12cb3212a3f9bff7aa24e1b31dd14", 0x22}], 0x4}}, {{&(0x7f0000000640)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)="cd6977bed6bd2e52ae49a372c4323c15b60961b8", 0x14}, {&(0x7f00000006c0)="2762aa13a1c4005dc0ce8572d0119cdff4bd13fdb4a58e82091850bde716528f726badac0e6cc734c3290be0dba59ffc7a0cad89e0ef64c54d096e37aca9f912de922b9ea2f172186ad3f45038f119b3dfd7c86597f3d574437900ee227eae871266de41bebf740db66e1019456e097f5ac6bdf40f484c0c2b683a209cb33a134dc3536339662208d9bc18d0c1f78e1f54e27a67b36ee7924de32ed0b904008faf08601ede9bf55695cd6b4ba51d74eecd090b2817be22ac2dc02db7d6daa74d4995db3744017c15c2c76da7ae9ab67c38e6228eea78c49c901cf3aa296fbc7ddd5a960770", 0xe5}, {&(0x7f00000007c0)="73faf19b169f1283705fac7328cdbd9818f108b2f5392e4fcf1ea64e2181f4545b23e640c72caafe5a422c4b75", 0x2d}, {&(0x7f0000000800)="098f1a3df70383cb66c033805a8fb72214ef34804f17315350b9ee078b87b7ad7b86ee2efb0600e29a9dac235a6593fd71f1c8e2734df151a1567590b622e6c77defdfc6973b0a1d005e74751ca1f6aea84f80b81f60296ccdff8a7aaab18be5b05269c4f3822693cda06194c5890bd2d96da3a2818a85a78c6591eed9db874f633e3250b5dc7cf2f722dab7dc601eb5459a6dece405fb1d49b2776d34576bc56542d7b604e4c23bbe7984d871eb0c0b504050a31315ef86194ef719cd7af8d0de496f56788ff6992b8317355f4bae1731de9a76579859", 0xd7}], 0x4}}, {{&(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000009c0)="4d75d1c9ef6cb2e06132245b2cb3fb744c68505e94b5d23b594d30e2bdd7fce359ff960a7373090abc8b123561e0df2682ed45e3cf852ef3791cdc2596893b7b2e9904fdcb7ae4fead05b9345390e4401ee78ca1a8b47a53801e003218b44c691654b67fa7950261b0d7341bffdb145b281bab23ffc6f80d67cf71ef9cd77bab98e772e54f0ebc334469937ea19f7b294184294e58db47a5504b7b9d633ab80433df4bf4f223578e6a42ce905cc9", 0xae}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="2f4588906b938d0e8427f3362da9642233765c1d240d641c027b6d9320bdf838738a61ec564d293c4a6db1317ff083d28cf619314e07af4a7ba6ebcba347defbfa60af547a5728094828eb6706e2df76b885972023a1a8538895e1c60b977ef7af", 0x61}, {&(0x7f0000000b40)="3bda72a5c28f33b94de465215c237ae9f304ad1ba3fa8bced2c3339a8f67b3332c478f13bb76e69667c57357c977c90a182e5f95f535aea4fc569d16bd8396f3e634080371373261a0dce1fccc9bbb1badc8ff8c5ae098dff6898e8937af3f58b35b0082bf0e95b6b8d2ce38effa795d7f00c53f55c58237209e1f60d5fdeb2e4a6a75193e4c9e83a61727c049a32a199d3dcd3fb9af48ba55c61271e1031e26a64deb90ba3e35a412a2607eb1affea7f095ff5a0d0fa2", 0xb7}, {&(0x7f0000000c00)="8e15759c3a509f4ba032bc630f321d2b90d1a6172ce377dbf5b5a2db5b8a0d063fe610be47ce0dcbfaa66d565ec72cc2fc2496684d9359767571bbc09520be71a744b98f3c9b05e5dc66cd0d6d53b118a3cf38003c7ccd2b618cf3baa8013446b5436acc7af379ea9dd99ebb2fea1981db65792add0acb868857e045e1d31f49b08da3457df7c49eade94ea4832476c5460ac89ee5c9184261bcffe6839ab1fe7096cf07f4084b8f86d7893e39977600fc0193416cca6be9bd", 0xb9}, {&(0x7f0000001240)="9182fb9ca25366e374953aa4964e7ad1f31b3c1e6a9a45d3aaf1e87ebd05fe7f6a861047bfdb3a9c244919d056818b23c69d71d56da87343b3f65ac24cc6a51566505036a12677be17cd19df31d6d5b9a88910cd089cd2a8e0a4e31eec40ade6a4945c6c836c194b67785f143e2f6da70f3bd601f9633e9f298a9c9d27c367f4c80a7901232c6a1ef8b827e684f999aff7c3c92394dabb15ad61a96901dee23aa18d11a950165999ed93caf667acfaa5ec27f1b719413a83fdc8fb2835197f8a86d331f87dd6c6287e5762f48fd17fcbace7b6febf68123b65a0986cf2367e306a8ebcf5bcf5", 0xe6}], 0x4, &(0x7f0000000d00)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}}, {{&(0x7f0000000e00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001340)="9b8c6846749912fbfc7856487df9486ef46cca30ed8cc399398c842976ef71da34281edcc79026f0822f3c31e10a62f1448b76f6b8d212195cb1612403bc26ff5fa458b29c67515a440cd53acb1f231e6e9121f01c96cdde1f879c58f1c828302dde99bed72a0f59382b8c4c6a4bab832ccd10446404b62c54f8dfb6616401e973da665cc5cfd7882ee1019c99dbacd980d4db68c6e84e264192093c4ddf7c57390977f5664dac4a9c", 0xa9}, {&(0x7f0000001400)="6dbeb9a17af72d867d646ebfac0a87552ff92e319e2a0081520b94f5cfa26fde51b3962e1c133e13bcd8ced7664a9115eb6b595d4378f84fd76a8575d2bf43ec841ca65fc4f4f6e1af234c0417dbddf334d417355b8a99333d6ad3abd249e401ff268c370f14b64651401f9a52dcbd381b9c42f8fb98b14727b12b70838831074eedb5b7e4fdc703a5dfd387ac8216c0cc9309d28813926bfe046198f0e6f09bbb79bd2200f2e5c57d07500e3aa5f267bcc7bcc571d5749585563a642d9a5990732de793cb73b243afbfa9cd5e37abf7d27a936a5f676a358d7ed40caddf1ca553d33a6f91e61d19522092244fd3f768ede9", 0xf2}, {&(0x7f0000001500)}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="fab011", 0x3}, {&(0x7f0000002580)="a93df9fb36929a9d005ed44e584313cccbba210ab6d1e6fbc64fc2e336935dbce220cb0c4b4e78a18aa1fb624241f53e07ab2bfbfe3b69c48a5573c17d34ff46608fa1a94a0e64d88f275a840e96dd52acde7f035bb62632d100a01e654cb011d7902d5cd861a39086ed99237ed7fff5ad367b40d1eab77ddb6f1f6ef74a5acdb27e2da50371b3d867914dcd9514582bae7d86d1d90f7cb7d6829ce13bc78237cf3ca6d0eae0fb8926748ab4c80cd9b09467273b3ff13b8f21d5c735fc39222a9f6fe98a197037984af3eaa5187236e0f53b1df4c699776729c0110bb71709462f39dc9313c853de581eb1110c07b247e585", 0xf2}, {&(0x7f0000002680)="7792ba4567ae56a57ddb6edd1267332a01ea2d3ec1b5ddfac469be8e756d59085dcf35e20c269e46539094f83a5839126d3804b9b395c54be18a9f0782ae654c81126ed68f4487b6768c1cda5b62f0ab5243950955668f36b9d271cbefb59be55e6c5d5cfbee0da7d992af75fa1ab1e1f627e82360ce0190b5e23aea834b7b1b", 0x80}], 0x7}}, {{&(0x7f0000002840)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x4, 0x2}}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000028c0)="42568553e739186d54195b872b227dbbd0ee6c4a115ad41e93eb4badb8878f384ee946ceb90f9678def29f349a77b3e605288c998b39da8103d95d45a6ac2b1b7fae780367bf2bca847a4db02f540691fd3c91f5c7f0b74f2031bdf5162c3fff6b63e4f76d212b085403b8c9324cae063f423665ad81a18817b66fc0911ce074080d762c1aab74acebde9a88537e0599030678c4c8", 0x95}, {&(0x7f0000002980)="c4ebec2e7ffc6dbb304a4750baa55d699604d183c8f1ee37e5440595ed72c45ab69096ca938bca1a3366e26d760742bceb45f4b3e781b96926d72602df87c2de385ac99e6791cc28972a0f784164c3aa7343a6e648ef5a5ff96e5e40154f5837896d3c6c1311151d1df563e981442140d390f3c268a6d0b9b4b04ed0adb4ec979afa1ccd3a04890e089d8380a23d0852a564c45a2a705d11d430250d51f0ded31eaedd7f2f239d2771baf099733ccd", 0xaf}, {&(0x7f0000002a40)="194e8135ce00e2b4aab126925f9bb40f94bde8c79ffa7ca354032ba8e5f26d14f7566c7d550011771bfc01b35065e5e817801d11a4cdb8514e3d18f56627ff", 0x3f}, {&(0x7f0000002a80)="524b6247235fb2f407898887141f089c7381bcc74ee1003c2e873af11d1ef349feb4de7ae2cf909ae04f9e98c2d0163ebbccaba2cdab90e61f8d7947091cdd18dc0162595eba1d58fa93e29d1fdcf047f77d8a0ed0b50ddfd55152b294d43f270bc4edc817a5d1e80bf1dabdc524259c0e3112ba2dfafe14224f39dc83058826ac8c4919bd49772c2593036b354b0eb0f17c58e66283918e32fc4b9c162afdd5093c412e0fea0296976f30499dd58781e289c8ad0bc895628df94def362a1e5f0e5fa7700c833c400d7d931d6380f04143cbca1057680892eb3f00b3b40f97bfe0658370e9e8", 0xe6}, {&(0x7f0000002b80)="00c679deb8c2b0defcb5a4e95746d40b972b2e58841cb1f8d0f7aaf545ebda77f27669005c98dd937d66e2f69b621ab333540d0161d037f17a13ba03dfd7c82ce5d65a23da1309763db449dec7c7febb0c57f29c7a99488b6ad3ebe403", 0x5d}], 0x5, &(0x7f0000002c80)=[@timestamping={{0x14, 0x1, 0x25, 0x8024}}, @txtime={{0x18, 0x1, 0x3d, 0xd151}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1b}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xa8}}, {{&(0x7f0000002d40)=@in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002dc0)}, {&(0x7f0000002e00)="76a77d809fb6ee346750efb02afff531aae67fbd89867016f5db84f7e0c96466d564d9591e6244fb5b19a38c43bbd0703ce9c11b6909aab2e631d65c72973171247dc465706dbe842ebd67ad564359e714857fc1a538b547d7d79aaed1dcd2c369738b0e6d6990a366526bdea213ec203c0e8ad50f6497c5ea6a4add35044cd496f86964e6de5f1745331ea91aab1a12617e4997a14c89ad13ce081d961fb8ff91748f5d57e3027112d8446e1a318087cc", 0xb1}, {&(0x7f0000002ec0)="f9c3c8b10c713ddab3fbb65930378b3d33412832cee815e4345f2fba970599ca1acaeec18df654ed8457d8c682c3646f1584a85dc5431e3591ca017202f262eda3f9d6db2c021d41d9d563ba399f36a38f19af7a002eb30c4931ac1e13d006379df8b081160570cba171f672bbb9b635ca695bc268a86f593608d428549e7b7e2a066e35d519dfc8b2e0ca0182f716bc1a7d2cfaecc2b4dce59844bdbb3d3a0ddd9c92528899f3b2bb0634d640fae80252346bb29374edc5aba7e60e0598827510", 0xc1}], 0x3}}, {{&(0x7f0000003000)=@generic={0x19, "d9a175fc9513ac7b0605eda126ebdcaa62969f995befe5dc71d6b29f3438c9adc68318b455001e82015e784bbd4003388bb6fd30cb0f7c3d71271c07cecf60dd3bcac1f765f38751da2dd0280eb81ba937e9727d11f2ad2179fc352c357e21159bf8b5bdbc4952da3cc74446deb18e332066f8499a403e274cd029b4a1b5"}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003080)="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", 0x1000}], 0x1, &(0x7f00000040c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x8, 0x44800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x28}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 1.97182627s ago: executing program 0 (id=5388): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x1405, 0x8, 0x70bd2d, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40080}, 0x8a1) close(r1) (async) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@broadcast, @empty, @void, {@can={0xc, {{0x1}, 0x8, 0x2, 0x0, 0x0, "eefed1d18b669237"}}}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x6, 0x1, 0xff, 0xd, 0x6, 0x400}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) r4 = openat$cgroup_subtree(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r4, r2, 0x0, 0x4) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x2d, 0x2, 0x81) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2cc, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xc0, 0x45, "98ff49c187549c3db79a87bb54c99b605f2b067b14c25a64ff5c3e0a927357c6e328976542fe49f8459ee74171d75037edf887f53d9cb2fb48a427982b9c39873440c9e885ee6772dc556d3f407ca9dac81104990d202c5edc8f4c5d7198a2961748077e9726aafde8ca595fd28419ee955207f2dd9a675eeaae566181bb861994930b0fd12ca96e479d734aefc14f617f82b83c97241f4b7b1be007f9fa2808695942f079cb0f3c2a74fb28bb5a079c69e03babee8bc4af72eb8202"}, @NL80211_ATTR_TESTDATA={0x37, 0x45, "e52942738bddf6672c060baec1b28e17336a32c168efdd641f75a1e2160777fc26a03dd21b69551607485edf29d0cabd60c270"}, @NL80211_ATTR_TESTDATA={0xf5, 0x45, "1a772341b8d979b4b11012613048eb464879527f1a006e6a78dc58481c7b4263e1ba5ee06ec6042f56cc70bcdaf913d3368c2d01e20cddc74a2348959519458fdb9f160224ea971bf778273a3ea3e24846d75e73bde72c9302f32735187903a23a27da2d0deb2ddbd4fdff01b4defce140c16b206517ffbea1823f589f6d2230d4101f4a5ee00eee553ca89f8388d8ad28330d221950bbd0f3d3dc81b584e693f23412c8d3a6bccd3a0bc3bcb6fad6c9e3a258d20ff07556f0d8441502bedbad337e59db4897de52290de379981eb4e40b124a6f4633aefa26901a8d748472b5ff004b6e2b5e88cde679a7a6449c0a024f"}, @NL80211_ATTR_TESTDATA={0xc8, 0x45, "524e50274740ae1fda225ba39aa79f9260844ce84f88c2d5f8982c46a2268282c66520c653a47006554752d1380bd0411334d4e122872c54c3ecc9f69321e03f1e16f926884abc7f8517904e80a5658ea31e23896a4aadb2b73e3a16e2caed13c56f6dd0b27f1c6754b831171b0cbc31ed1b578f64edb201bff604c23a8c39f1a9ef96576401101c0773b41831048dae64019fcc389e3d5464a2ab6056375767042cf2eea3e728af71d8c46d9556591aa356e13b4f5e0af125d36fdeec91e5aa55db5b38"}]}, 0x2cc}}, 0x4040) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000006c0)={@broadcast, @initdev, 0x0}, &(0x7f0000000700)=0xc) (async) syz_extract_tcp_res(&(0x7f0000000740), 0x7, 0x9f55) (async) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x55215495f198f399, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x200000c0) socket$unix(0x1, 0x2, 0x0) (async) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000880), r7) (async) close(r1) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r8) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb0, r9, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e5e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc60}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x48}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={0xffffffffffffffff, 0x0, 0xe5, 0xe6, &(0x7f0000000ac0)="9bd6737100c0aa029f43bc025d8e5a7eac9527d834f302ab70e8061140af7f409de89defdd9afbe3e2215b60cd85731d11b37f0f049a0c691a9a78735494e2cd4c06ac4aae1f2927605245e7ae71087426e20405c921a4300fe82925c969b014aa3e5dfd1c9d9b3b0dd8a138b54d173942660e5f02849f98acf5394d8f83b5e6fd7c4b217aadcd62b709400acf620114ccf733fafee07859d0a31b08feff57ac084b6096342b65dcf94306c2e60076f910512d2f3a88e1965e36c84675b40bc8c074ecf02c8dbe168166e4a5331820e176ad3a311f7a665e5d5b52eef81554f5bfe1bee1ea", &(0x7f0000000bc0)=""/230, 0xfffffff7, 0x0, 0x6f, 0xd2, &(0x7f0000000cc0)="90e7a30ae846d16486c794ea991a1359ae95e80b891468a87e36b0fcb9ea13e0913f207f0e0d21a016230bdf060ad450bb7e961423ff57d18b6ef224191f0b69552cc5fdb3a47ff29d006cbf261e99482d941c38afd1c96ee5e956bc15196a649c4e0016ad5fed35d8926ec00d573c", &(0x7f0000000d40)="c3341aac9bf91441e8ba8e11df1067dd9d72e16f313cf10917838dafd4616ea4b8f12d32885846313608c0eeff09132bc3159371f6049be286c3f7ecf9802b1fc096a82a2c26f6bd7cdbc97c523209f44cf6bdbb1f0c78a34aefd88076a56932004e2d26d48098545e47cf6ac2e42cb83f28e4cad83200331ba35166aac8b666baf5d50a6c1de880affc6a49e67dbc0fcfb50b4bcf3f03bf47a27183104c9ff309f06dc50dc0bc319e77c59e6546e3574d5f63d9fe6a894a2b0b5148273746b266dd40ab1bce0456055bcff02fc2ec3ceca0", 0x4, 0x0, 0x99d1}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x13, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x90c4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@generic={0xc8, 0x3, 0xe, 0x7, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x8, 0x0, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f80)='syzkaller\x00', 0xfffffffa, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x0, r2, 0x8, &(0x7f0000000fc0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001000)=[{0x4, 0x2, 0x10, 0x8}], 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@fallback=r7, 0x20, 0x0, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@cgroup=r2, r10, 0x2c, 0x2000, 0x0, @value=r2, @void, @void, @void, r11}, 0x20) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_EXPIRE(r12, 0x810c9365, &(0x7f0000001280)={{0xf67, 0xff}, 0x100, './file0\x00'}) (async) syz_emit_ethernet(0x26, &(0x7f00000013c0)={@local, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x4, 0x0, 0x4}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "a596808009e30274"}}}}, 0x0) 1.969954809s ago: executing program 0 (id=5389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0xfffffffffffffcc1, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) (fail_nth: 4) 1.926488317s ago: executing program 1 (id=5390): r0 = epoll_create1(0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4000200c}) epoll_wait(r0, &(0x7f0000000380)=[{}], 0x1, 0x14e) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080)=0x80000001, 0x4) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x88}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0xc8, 0x29, 0x37, {0x16, 0x16, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9d, 0x64, "f2e8f42b1b59f3644a5feb1e391672af089858530f7446bc4c529770049cc7d15fd1af47e2112b25e064035e48b929bc63d0f66dbb5c62fa3c6f50255cd621d924f3cb9ab808548acfe9fc455fc4a6d457a39afc3728a8132bf38cb2a883417fa350f127"}, @ra={0x5, 0x2, 0xfff9}, @calipso={0x7, 0x38, {0x2, 0xc, 0x9, 0x1, [0x4, 0xffffffffffffff80, 0x6, 0x1, 0x4, 0x6]}}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x0, 0x21, 0x0, [@mcast2, @private0]}}}], 0x100}, 0x0) 1.881672358s ago: executing program 1 (id=5391): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13000000000000000000300000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0xfffffffffffffecd) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b000000007000000020000000000001103000000060000000200000006000006040000000c0000000400000001000000020000000900000037f300000400000001000000100000000021000001000000590a000002000000000000100c0000000600000000000001000000007c002c000000000000000003000000000300000003000000020000000300000000000002040000000300000002000004060000000e00000004000000070000000c00000000000000ff0f000000300030003000"], &(0x7f0000000500)=""/123, 0xcf, 0x7b, 0x0, 0xfffffffc, 0x0, @void, @value}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000470500"/28], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000470500"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x10, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r6, @ANYBLOB="000b000000000000b7080000fdffffff7b8af85a7f000000bfa20000badefb25337af6aaf8ffffffb703000008000000b7040000000000008500d560af9b0003000000181100000000000000a2c9fc827ad2b1d0863bdeab27811fc0b09bf1b4758de2fc7ef352c485fe150458ce5aa436ad707a3ac7ac309d04a56d781b2832da7230105ba81e87c0b263b992edbd1a8804f8d8c0ac33a90432b177c5ddd2f41c678d72ab768dd3b6ff2c82019095b70010f3508f3b5fafdc24b914c8a08619506d06af2dddf15b2c0f07648a9c650910ca68e4cfaabb5abf8552ea530c2e4130acb56e463ce2e138d3486551d087d8aa03fec8c506b7", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000010c0)={{}, &(0x7f0000001040), &(0x7f0000001080)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000010c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)='%pi6 \x00'}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0f008a62ce6e00000400001f120000000000000064983c68eb30f60261098936a23b349d074c27ec49c0ce2f9ace666e5f6e7e139009f79b9bac01c1b3e1cc8dac6181f503d63ed6429b1d8150ff0eccd8d3061b2949986a834cbc9a000071bdc9cc5793b0b01472e096ccd813c075fd52d054f5dc8787e1834f5833e9ce6f15ef3f19eabd8176088ed340dba87418e8180015a3808085a22576b63150ae9f64209f214415525313", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="d4ffffff0000725469a4f300", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r16}, &(0x7f00000006c0), &(0x7f0000000700)=r15}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r16}, &(0x7f00000006c0), &(0x7f0000000700)=r15}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x15, &(0x7f0000000b40)=ANY=[@ANYRES8=r8, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32, @ANYBLOB="000000000000000095000000000000005ada4019a9a843d680255a25b6582ac6ff030000000000005d526e8ed711ec282bebfc1380d84305a171"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x64, &(0x7f00000002c0)=""/100, 0x41100, 0x6d, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000005c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0xfffffffffffffcb9, 0x0, 0x0, 0x5, &(0x7f00000011c0)=[r8, r10, r11, r12, r13, r14, r16], &(0x7f0000001200)=[{0x1, 0x2, 0x9}, {0x1, 0x3, 0xa}, {0x0, 0x4, 0x10, 0xc}, {0x4, 0x5, 0x1, 0x5}, {0x5, 0x2, 0xe}], 0x10, 0x0, @void, @value}, 0x94) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x148, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@dst={{0x48}, {0xffffff7f, 0x4, 0x0, [0x9, 0x82, 0x3, 0x7, 0xd5c, 0x2, 0xa1, 0x2cb9, 0x8, 0x4, 0x8, 0x2, 0x4, 0x800, 0x79e4, 0x1], 0xa}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xffffffff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x0, 0x4000, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x33, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 1.599477245s ago: executing program 0 (id=5392): unshare(0x68000000) 1.572567069s ago: executing program 2 (id=5393): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x42, 0x4) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x3}}]}}]}, 0x38}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) getuid() sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}, @typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/4096, 0x1000, 0x0, &(0x7f00000017c0)=""/143, 0x8f}, &(0x7f00000004c0)=0x40) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007800010600000000000000000700000047"], 0x18}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r9, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fbdbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="0a000640080211000000000008001180120081002ceabd79acd96d6cf4572e72991b1dc8604cdba7c9c7bb18a2d1c7d34640e49749310300000000000000d3cff79101390206e01b2cd31dc3f5eac6484474f655168ff2934022482091d75cf152fcde0d6a1a98ba612e26a009e578ca4b6d7971ebe697b11313dde65dca673869c45d91c3809b4bf610ab05f47fcfe1d2829b0f05392d9c56648d09a83abdd997c643e0b6b4e12c6949e3cc52db9a25808d39b3520ddca43279da9fab6544525aa9f3e02f52c795"], 0x30}}, 0x0) 1.501963607s ago: executing program 1 (id=5394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = epoll_create(0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) r4 = socket$inet6(0xa, 0x3, 0x2f) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0xfffffffffffffffe, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xe8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) close(r6) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="fd712cbd7000fbdbdf2502000000080004000400000005000500040000001c000680080003007f000001060005004e220000080006000700000054000180060001000a00000014000400fc0000000000000000000000000000010800060004000000060001000a0000000800030064010101060001"], 0xac}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32=r0, @ANYBLOB="08ec007f"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1.419289547s ago: executing program 0 (id=5395): r0 = socket$inet(0x10, 0x3, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001000000ed00000000000a00000006"], 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdc02, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x880) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r8, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback=r0, 0xffffffffffffffff, 0x0, 0x4, 0x0, @void, @value=r6}, 0x20) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x79f7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1.164030524s ago: executing program 0 (id=5397): r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xa, 0x1, 0x9b5, 0x0, "b81af436cd0471587fdfb6733a7bd36f2562cbacb1804403be396c70c6d4fd7a3c580cfb59f696fe6595865dbd499d23158dd64f4d5ee4945043a4ce0ff4802d66a7752630daa299e625db14f08cfc11456fca95e920d876a37aeb6453a99f7404723f3bced127dcc4c45a928d3e629ce828afe41df4fcf193ad147131275f5b"}) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="85af10000000000000008400000005f4ff00"], 0x10}}], 0x2, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) unshare(0x22020600) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)={0xe, 0x1, 0xa, 0x0, 0x0, [{{r0}, 0x8}, {{}, 0x6}, {{r0}}, {{r2}, 0xf}, {{r0}, 0xb}, {{r0}, 0xb4a}, {{r5}, 0x1}, {{r1}, 0x8}, {{r1}, 0x3}, {{r6}, 0xea52}]}) 1.162124822s ago: executing program 2 (id=5398): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmmsg$unix(r2, &(0x7f0000003200)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0xc4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x8, 0xf}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x8, 0x70bd29, 0x25dfdbfc, {0xa, 0x40, 0x2d, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000001480)=0x5, 0x4) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000340)={0x0, &(0x7f0000000080)}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c020000", @ANYBLOB="34bdb04e92d0dd0bfb7089d343e36e35622aebecc9d52c985aa9cbf1d8e96c632c86d8060901df888b6512910c111eb9267c17f2e55f4959c07d2aac604714d3c1910b01a1d429f5cce1aee1c6b3054516b1fe1c384c3b46fad62ea174f0a43856f0c714db1114cd0db150787cec9c53c788fcb99bf6bfe2564307b5cf2c67b858c9b7c8383635774b6937e3610851e75ce6dd038eac0f0d697c03638a73cd27c1f423d78b4f9d84db04eec0516eab5c6404ab68d4bfa384435a3e56528e049441af66acfc7fd36af30927066008344d404623f3bd807f90b9823fa09510b6af306c2695ec2c8b898aee", @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001cff8180060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080"], 0x21c}}, 0x0) 971.585857ms ago: executing program 2 (id=5399): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu_fail\x00', r1}, 0x18) pselect6(0x73, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0) close(0x3) socket$packet(0x11, 0x3, 0x300) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu_fail\x00', r1}, 0x18) (async) pselect6(0x73, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0) (async) close(0x3) (async) 969.610577ms ago: executing program 4 (id=5400): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x54}}, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@deltclass={0x44, 0x29, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1, 0x10}, {0xd}, {0xfff3, 0xffe0}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x14}}, @TCA_RATE={0x6, 0x5, {0x2d, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 893.380336ms ago: executing program 4 (id=5401): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x8, 0x0, {{0xd, 0x4, 0x0, 0x2f, 0x34, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x0, [{@multicast1, 0x4}, {@rand_addr=0x64010101, 0x8001}, {@remote, 0x10}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@enum64={0x1, 0x4, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x2, 0x9a}, {0xe, 0x8, 0x1000000}, {0xf, 0x1000, 0x9}, {0xc, 0x3, 0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/179, 0x69, 0xb3, 0x0, 0xffffff81, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0xd7, 0xfffffffc, 0x7, 0x2000, r0, 0x1, '\x00', r1, r2, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000340)={{r3}, "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"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001340)={r3, 0xffffffffffffffff, 0x2, 0x2}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000001380)={0x0, 0x4, [0xffffffffffffffff, 0x2, 0x1ff, 0x8001, 0x2, 0x6]}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xf8, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x801}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x1, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x15, 0x1b, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x2, 0x0, 0x3, 0x1, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x1, 0xb, 0x6, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xdd6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000016c0)='GPL\x00', 0x8, 0x2, &(0x7f0000001700)=""/2, 0x41100, 0x7b, '\x00', r1, @fallback=0x2a, r2, 0x8, &(0x7f0000001740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0x2, 0xfffffff8, 0x3}, 0x10, r6, r4, 0x5, &(0x7f0000001800)=[r4], &(0x7f0000001840)=[{0x3, 0x3, 0x9, 0x9}, {0x1, 0x2, 0x3, 0x8}, {0x2, 0x4, 0x6, 0x1}, {0x0, 0x1, 0xc, 0x8}, {0x4, 0x4, 0x8, 0x9}], 0x10, 0x4, @void, @value}, 0x94) ioctl$int_in(r5, 0x5421, &(0x7f0000001980)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r4, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000001a80), 0xffffffffffffffff) connect$inet(r4, &(0x7f0000001ac0)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$bt_sco(r4, &(0x7f0000001b00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x200000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001b80)={'gre0\x00', 0x400}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001dc0)={'ip6gre0\x00', &(0x7f0000001d40)={'ip6tnl0\x00', r8, 0x2f, 0x7, 0x39, 0x4, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8, 0x10, 0x69, 0x7}}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e80)=@o_path={&(0x7f0000001e40)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f40)={0x11, 0x4, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x0, 0x6, 0x4, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}]}, &(0x7f0000001c00)='GPL\x00', 0x400, 0xdc, &(0x7f0000001c40)=""/220, 0x41000, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=[r3, r0, r11], &(0x7f0000001f00), 0x10, 0x6, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000002000)={r9, 0x5, 0xa, 0x401}) sendmsg$IPCTNL_MSG_EXP_GET(r12, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4040004) ioctl$FIBMAP(r4, 0x1, &(0x7f0000002140)=0x7) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) socketpair(0x39, 0x1, 0x1ff, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(r13, &(0x7f00000021c0)={0x18, 0x2, {0x2, @local}}, 0x1e) 837.820507ms ago: executing program 4 (id=5402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0xfffffffffffffcc1, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) (fail_nth: 5) 791.548757ms ago: executing program 2 (id=5403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x38}}, 0x0) 356.605211ms ago: executing program 2 (id=5404): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"caf5c49c0f4b9502bea91d28a1e065f5", r1, r2, {0x8, 0x7f}, {0xffffffffb7d5763b, 0x5}, 0x3, [0x3, 0x2, 0x80000001, 0x1, 0x4, 0xbdc, 0x8, 0xfffffffffffffff9, 0x7fffffffffffffff, 0xd, 0x400, 0x10001, 0x2, 0xd9d, 0x0, 0x101]}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010101, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff000000, 0x8, 0xa, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0xff]}}, 0xbaf, 0x5, 0xaa, 0x5, 0x4, 0x3, 'team0\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x170}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='btrfs_inode_mod_outstanding_extents\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000700)={'IDLETIMER\x00'}, &(0x7f0000000740)=0x1e) sendto$inet(r0, &(0x7f0000000780)="d7cefe64f7b380b5a79fb16505cb40f84252a9a60f", 0x15, 0x0, 0x0, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)=0x10, 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000840)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x86c8f1f1eccd36de, 0x11, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0x8, 0xc1, &(0x7f0000000980)=""/193, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0xe, 0x5, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000b00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x5, 0x3, 0x1}, {0x4, 0x4, 0x8, 0x1}, {0x0, 0x4, 0x10}, {0x1, 0x2, 0xb, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x5, 0x5, 0x5, 0xb}, {0x3, 0x2, 0x7, 0x4}, {0x0, 0x2, 0xb, 0x1}, {0x1, 0x2, 0x2, 0x4}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r6, 0x0, 0x1000, 0x73, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)=""/115, 0x4, 0x0, 0x0, 0x17, &(0x7f0000001d40), &(0x7f0000001d80)="d5b32a504a8ec267d073216a254e4b942fd52e1145b325", 0x2, 0x0, 0x760}, 0x50) socket$nl_crypto(0x10, 0x3, 0x15) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000001e40), &(0x7f0000001e80)=0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002f80)={&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=""/4096, 0x1000, 0x0, &(0x7f0000002ec0)=""/154, 0x9a}, &(0x7f0000002fc0)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000003000)=0x5, 0x4) read(r6, &(0x7f0000003040)=""/213, 0xd5) recvmmsg(r3, &(0x7f0000007400)=[{{&(0x7f0000003140)=@rc, 0x80, &(0x7f0000005340)=[{&(0x7f00000031c0)=""/10, 0xa}, {&(0x7f0000003200)=""/122, 0x7a}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/134, 0x86}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x5}, 0x6}, {{&(0x7f00000053c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005440)=""/190, 0xbe}, {&(0x7f0000005500)=""/112, 0x70}], 0x2, &(0x7f00000055c0)=""/25, 0x19}, 0xd8}, {{&(0x7f0000005600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005680)=""/135, 0x87}, {&(0x7f0000005740)=""/180, 0xb4}], 0x2, &(0x7f0000005840)=""/136, 0x88}, 0x10000}, {{&(0x7f0000005900)=@ax25={{0x3, @netrom}, [@remote, @bcast, @remote, @null, @default, @default, @remote, @default]}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005980)=""/43, 0x2b}, {&(0x7f00000059c0)=""/234, 0xea}, {&(0x7f0000005ac0)=""/86, 0x56}], 0x3, &(0x7f0000005b80)=""/180, 0xb4}, 0x400}, {{&(0x7f0000005c40)=@qipcrtr, 0x80, &(0x7f0000005d80)=[{&(0x7f0000005cc0)=""/72, 0x48}, {&(0x7f0000005d40)=""/53, 0x35}], 0x2, &(0x7f0000005dc0)=""/8, 0x8}, 0x80000001}, {{&(0x7f0000005e00)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/152, 0x98}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/17, 0x11}, {&(0x7f0000006fc0)=""/18, 0x12}, {&(0x7f0000007000)=""/199, 0xc7}, {&(0x7f0000007100)=""/200, 0xc8}, {&(0x7f0000007200)=""/27, 0x1b}, {&(0x7f0000007240)=""/64, 0x40}, {&(0x7f0000007280)=""/148, 0x94}], 0x8, &(0x7f00000073c0)=""/1, 0x1}, 0x8}], 0x7, 0x41, &(0x7f00000075c0)={0x77359400}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007640), r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000007680)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000076c0)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000007700)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000007880)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007840)={&(0x7f0000007740)={0xe8, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x840}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000007900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007a00)={&(0x7f00000078c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000079c0)={&(0x7f0000007940)={0x64, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20088800}, 0x64044080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000007ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000007a40), &(0x7f0000007a80)=r6}, 0x20) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000007b00), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007b40)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x10001, '\x00', r12, r15, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 297.351874ms ago: executing program 4 (id=5405): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8920, &(0x7f0000000000)={'tunl0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1000005}, 0x10) write(r3, &(0x7f0000000000)="110000001a005f0214f9f4070009040081", 0x11) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="4800000010001ffc25bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000600", @ANYRES32, @ANYBLOB="08002d88", @ANYRES32, @ANYBLOB="08000300", @ANYRESDEC], 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x7, 0x8000, {{0x8, 0x4, 0x0, 0x3d, 0x20, 0x65, 0x0, 0xbb, 0x4, 0x0, @multicast2, @private=0xa010102, {[@noop, @noop, @generic={0x41, 0xa, "e116dda5009ffe08"}]}}}}}) connect$packet(r3, &(0x7f00000000c0)={0x11, 0x6, r5, 0x1, 0x4, 0x6, @random="4f726a66fe04"}, 0x14) 206.555263ms ago: executing program 0 (id=5406): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) 107.713047ms ago: executing program 4 (id=5407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0xfffffffffffffcc1, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) 104.192742ms ago: executing program 2 (id=5408): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000007002100626204001c002280040000800000040003000000000004000d00000004000080040000800400008024fc008004000080"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000618d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x57) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000008064b36efea6a800000000000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) close(r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 0s ago: executing program 4 (id=5409): socket$isdn(0x22, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf6fd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): ) entered disabled state [ 402.247455][T17846] bridge_slave_1: left allmulticast mode [ 402.256663][T17846] bridge_slave_1: left promiscuous mode [ 402.275472][T17846] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.379499][T17846] team0: Port device team_slave_0 removed [ 402.404134][T17846] team0: Port device team_slave_1 removed [ 402.410583][T17846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.418408][T17846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.435948][T17846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.444010][T17846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.470986][T17848] __nla_validate_parse: 2 callbacks suppressed [ 402.471003][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 402.752205][T17884] syz.1.3583[17884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.753061][T17884] syz.1.3583[17884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.779256][T17884] syz.1.3583[17884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.955553][T17894] syzkaller1: entered promiscuous mode [ 402.988469][T17894] syzkaller1: entered allmulticast mode [ 403.103893][T17899] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3588'. [ 403.127594][T17899] netlink: 'syz.2.3588': attribute type 1 has an invalid length. [ 403.394810][T17907] dummy0: entered promiscuous mode [ 403.422945][T17907] dummy0: left promiscuous mode [ 403.603333][T17915] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3595'. [ 404.164155][T17937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.186566][T17937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.205124][T17937] bond0 (unregistering): Released all slaves [ 404.231517][T17946] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 404.239471][T17946] syzkaller0: linktype set to 6 [ 404.398396][T17954] netlink: 'syz.0.3606': attribute type 10 has an invalid length. [ 404.416098][T17954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3606'. [ 404.527908][T17958] batman_adv: batadv0: Adding interface: dummy0 [ 404.534647][T17958] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.579163][T17958] batman_adv: batadv0: Interface activated: dummy0 [ 404.651581][T17964] dvmrp8: entered allmulticast mode [ 404.677905][T17958] batadv0: mtu less than device minimum [ 404.694730][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.707635][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.720269][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.732957][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.745448][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.758042][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.770512][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.782970][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.795430][T17958] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.837603][T17964] dvmrp8: left allmulticast mode [ 405.308611][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3622'. [ 405.781504][T18028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3633'. [ 406.670592][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'. [ 406.886024][T18069] xt_TCPMSS: Only works on TCP SYN packets [ 407.044905][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.115615][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'. [ 407.200965][T18080] bridge0: entered promiscuous mode [ 407.238298][T18080] macsec1: entered promiscuous mode [ 407.256092][T18080] macsec1: entered allmulticast mode [ 407.281787][T18080] bridge0: entered allmulticast mode [ 407.341420][T18084] pim6reg: entered allmulticast mode [ 407.348516][T18084] pim6reg: left allmulticast mode [ 407.451500][T18096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3655'. [ 407.488433][T18096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3655'. [ 407.671867][T18110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3658'. [ 407.933418][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 407.984195][T18129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3664'. [ 408.322141][T18147] xt_connbytes: Forcing CT accounting to be enabled [ 408.372651][T18147] Cannot find del_set index 1 as target [ 411.084410][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3676'. [ 411.117410][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3676'. [ 411.166489][T18169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3675'. [ 411.187310][T18163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3675'. [ 411.314348][T18176] net_ratelimit: 13 callbacks suppressed [ 411.314368][T18176] Dead loop on virtual device ipvlan1, fix it urgently! [ 411.319974][T18175] netlink: 'syz.1.3678': attribute type 2 has an invalid length. [ 411.407898][T18182] netlink: 'syz.3.3680': attribute type 2 has an invalid length. [ 411.691359][T18192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3685'. [ 411.701494][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3685'. [ 412.068188][T18213] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 412.399445][T18230] lo speed is unknown, defaulting to 1000 [ 412.416945][T18230] lo speed is unknown, defaulting to 1000 [ 412.609865][T18248] vlan3: entered allmulticast mode [ 412.628153][T18248] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 412.648720][T18248] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 413.083443][T18265] lo speed is unknown, defaulting to 1000 [ 413.090271][T18265] lo speed is unknown, defaulting to 1000 [ 413.446807][T18280] netlink: 'syz.1.3710': attribute type 11 has an invalid length. [ 413.469003][T18276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.471411][T18280] netlink: 'syz.1.3710': attribute type 11 has an invalid length. [ 413.545691][T18280] __nla_validate_parse: 3 callbacks suppressed [ 413.545709][T18280] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3710'. [ 413.580047][T18281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3710'. [ 413.608338][T18286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3710'. [ 413.675617][T18276] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 413.735150][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3713'. [ 413.829440][T18297] xt_addrtype: ipv6 does not support BROADCAST matching [ 413.838285][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3714'. [ 413.966444][T18301] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 413.978080][T18301] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 414.003479][T18301] gretap1: entered promiscuous mode [ 414.009684][T18301] gretap1: entered allmulticast mode [ 414.044806][T18305] pim6reg: entered allmulticast mode [ 414.090821][T18305] pim6reg: left allmulticast mode [ 414.262936][T18318] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 414.302714][T18318] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 414.322651][T18318] bridge0: port 3(team0) entered blocking state [ 414.329516][T18318] bridge0: port 3(team0) entered disabled state [ 414.371796][T18318] team0: entered allmulticast mode [ 414.403171][T18318] team_slave_0: entered allmulticast mode [ 414.408953][T18318] team_slave_1: entered allmulticast mode [ 414.426527][T18318] team0: entered promiscuous mode [ 414.431600][T18318] team_slave_0: entered promiscuous mode [ 414.446015][T18318] team_slave_1: entered promiscuous mode [ 414.461496][T18323] tipc: MTU too low for tipc bearer [ 414.606067][T18318] netlink: 340 bytes leftover after parsing attributes in process `syz.1.3719'. [ 414.628840][T18328] pim6reg527: entered allmulticast mode [ 414.758006][T18350] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 414.794112][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 414.803575][T18350] team0: left allmulticast mode [ 414.810870][T18350] team_slave_0: left allmulticast mode [ 414.817300][T18350] team_slave_1: left allmulticast mode [ 414.822997][T18350] team0: left promiscuous mode [ 414.838656][T18350] team_slave_0: left promiscuous mode [ 414.845975][T18350] team_slave_1: left promiscuous mode [ 414.851953][T18350] bridge0: port 3(team0) entered disabled state [ 414.861101][T18350] bridge_slave_1: left allmulticast mode [ 414.867141][T18350] bridge_slave_1: left promiscuous mode [ 414.873449][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.889562][T18350] bridge_slave_0: left allmulticast mode [ 414.896826][T18350] bridge_slave_0: left promiscuous mode [ 414.903502][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.929631][T18350] bridge0 (unregistering): left allmulticast mode [ 415.129611][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3734'. [ 415.281345][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 415.323384][T18381] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 415.351253][T18381] netlink: 'syz.3.3737': attribute type 2 has an invalid length. [ 415.566452][T18397] lo speed is unknown, defaulting to 1000 [ 415.582245][T18397] lo speed is unknown, defaulting to 1000 [ 415.635557][T18399] lo speed is unknown, defaulting to 1000 [ 415.687137][T18399] lo speed is unknown, defaulting to 1000 [ 415.791006][T18405] syzkaller1: entered promiscuous mode [ 415.800463][T18405] syzkaller1: entered allmulticast mode [ 415.956276][T18418] vlan1: entered allmulticast mode [ 416.002473][T18418] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 416.037475][T18418] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 416.543208][T18440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3753'. [ 416.619462][T18440] veth0_to_team: entered promiscuous mode [ 416.634124][T18440] veth0_to_team: entered allmulticast mode [ 416.848685][T18457] netlink: 'syz.1.3756': attribute type 58 has an invalid length. [ 418.343997][T18530] x_tables: duplicate underflow at hook 1 [ 418.360881][T18532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 418.382618][T18532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.406375][T18532] vlan1: entered promiscuous mode [ 418.419529][T18532] dummy0: entered promiscuous mode [ 418.432685][T18532] dummy0: left promiscuous mode [ 418.591665][T18536] bond1: entered promiscuous mode [ 418.600974][T18551] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.607492][T18551] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 418.608114][T18536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.708927][T18558] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 418.888134][T18566] __nla_validate_parse: 61 callbacks suppressed [ 418.888153][T18566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3790'. [ 418.906134][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 418.915427][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 419.207735][T18586] vlan2: entered promiscuous mode [ 419.217188][T18586] bond0: entered promiscuous mode [ 419.223513][T18586] bond_slave_0: entered promiscuous mode [ 419.229627][T18586] bond_slave_1: entered promiscuous mode [ 419.244549][T18586] bond0: left promiscuous mode [ 419.249948][T18586] bond_slave_0: left promiscuous mode [ 419.262493][T18586] bond_slave_1: left promiscuous mode [ 419.814073][T18620] vlan2: entered allmulticast mode [ 419.842915][T18620] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 419.861150][T18620] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 420.031166][T18626] pim6reg: entered allmulticast mode [ 420.055728][T18626] pim6reg: left allmulticast mode [ 420.450837][T18635] netlink: 'syz.3.3811': attribute type 1 has an invalid length. [ 420.474668][T18635] netlink: 'syz.3.3811': attribute type 2 has an invalid length. [ 420.488457][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'. [ 420.509428][T18637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3813'. [ 420.530890][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3811'. [ 420.658862][T18648] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3818'. [ 420.721707][T18644] vlan2: entered allmulticast mode [ 420.741853][T18644] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 420.769891][T18644] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 420.905146][T18651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3819'. [ 420.960048][T18664] netlink: 'syz.4.3821': attribute type 8 has an invalid length. [ 420.978635][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 421.274577][T18683] bond0 (unregistering): Released all slaves [ 421.299763][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 422.251133][T18745] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 422.274545][T18745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 422.532834][T18755] netlink: 'syz.0.3849': attribute type 1 has an invalid length. [ 422.578246][T18758] netlink: 'syz.1.3850': attribute type 11 has an invalid length. [ 422.595832][T18755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.631635][T18760] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 423.416814][T18811] netlink: 'syz.1.3870': attribute type 5 has an invalid length. [ 423.438984][T18811] ip6erspan0: entered promiscuous mode [ 423.501032][T18819] IPv6: Can't replace route, no match found [ 423.538957][T18825] pim6reg: entered allmulticast mode [ 423.578132][T18825] pim6reg: left allmulticast mode [ 424.124231][T18864] pim6reg: entered allmulticast mode [ 424.137719][T18859] pim6reg: left allmulticast mode [ 424.411143][T18873] lo speed is unknown, defaulting to 1000 [ 424.438447][T18873] lo speed is unknown, defaulting to 1000 [ 424.885263][T18895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 424.911327][T18895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.939986][T18895] bridge0: port 3(vlan2) entered blocking state [ 424.946835][T18895] bridge0: port 3(vlan2) entered disabled state [ 424.953950][T18895] vlan2: entered allmulticast mode [ 424.959392][T18895] dummy0: entered allmulticast mode [ 424.972243][T18895] vlan2: entered promiscuous mode [ 424.977963][T18895] dummy0: entered promiscuous mode [ 424.984641][T18895] bridge0: port 3(vlan2) entered blocking state [ 424.992440][T18895] bridge0: port 3(vlan2) entered forwarding state [ 425.210552][T18908] vlan1: entered allmulticast mode [ 425.238654][T18908] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 425.283506][T18908] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 425.451951][T18915] __nla_validate_parse: 8 callbacks suppressed [ 425.451970][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3898'. [ 425.571419][T18918] wg2: entered promiscuous mode [ 425.595134][T18918] team0: Device wg2 is of different type [ 426.067692][T18939] pim6reg: entered allmulticast mode [ 426.075725][T18939] pim6reg: left allmulticast mode [ 426.293374][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3908'. [ 426.304300][T18947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3908'. [ 426.407950][ T8] IPVS: starting estimator thread 0... [ 426.502526][T18952] IPVS: using max 19 ests per chain, 45600 per kthread [ 426.667251][T18964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3915'. [ 426.831518][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3918'. [ 426.920118][T18981] netlink: 'syz.4.3917': attribute type 12 has an invalid length. [ 426.961686][T18983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3920'. [ 427.023539][T18983] lo speed is unknown, defaulting to 1000 [ 427.036546][T18983] lo speed is unknown, defaulting to 1000 [ 427.578418][T18993] netlink: 'syz.3.3923': attribute type 1 has an invalid length. [ 427.603652][T18993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3923'. [ 427.786543][T19006] netlink: 'syz.4.3926': attribute type 2 has an invalid length. [ 427.903564][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'. [ 427.933639][ T54] Bluetooth: hci0: command 0x0405 tx timeout [ 428.071240][T19011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.097227][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'. [ 428.304354][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 428.350441][T19030] netlink: 'syz.4.3934': attribute type 3 has an invalid length. [ 428.837930][T19065] vlan1: entered allmulticast mode [ 428.847465][T19065] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 428.858313][T19065] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 429.159086][T19087] netlink: 'syz.0.3953': attribute type 1 has an invalid length. [ 429.211999][T19087] netlink: 'syz.0.3953': attribute type 10 has an invalid length. [ 429.340899][T19096] vlan3: entered allmulticast mode [ 429.581095][T19110] netlink: 'syz.2.3961': attribute type 4 has an invalid length. [ 429.943330][T19133] netlink: 'syz.1.3965': attribute type 9 has an invalid length. [ 430.371502][T19160] delete_channel: no stack [ 430.428484][T19164] vlan3: entered allmulticast mode [ 430.441757][T19164] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 430.457271][T19160] delete_channel: no stack [ 430.467396][T19164] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 430.467425][T19160] delete_channel: no stack [ 430.489496][T19160] delete_channel: no stack [ 430.495000][T19160] delete_channel: no stack [ 430.503643][T19160] delete_channel: no stack [ 430.508218][T19160] delete_channel: no stack [ 430.524475][T19160] delete_channel: no stack [ 430.529003][T19160] delete_channel: no stack [ 430.539230][T19160] delete_channel: no stack [ 430.547226][T19160] delete_channel: no stack [ 430.551821][T19160] delete_channel: no stack [ 430.566123][T19160] delete_channel: no stack [ 430.570717][T19160] delete_channel: no stack [ 430.575643][T19160] delete_channel: no stack [ 430.580210][T19160] delete_channel: no stack [ 430.584850][T19160] delete_channel: no stack [ 430.589437][T19160] delete_channel: no stack [ 430.594224][T19160] delete_channel: no stack [ 430.598792][T19160] delete_channel: no stack [ 430.601082][T19169] __nla_validate_parse: 6 callbacks suppressed [ 430.601098][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 430.603468][T19160] delete_channel: no stack [ 430.623817][T19160] delete_channel: no stack [ 430.628381][T19160] delete_channel: no stack [ 430.633724][T19160] delete_channel: no stack [ 430.638301][T19160] delete_channel: no stack [ 430.643865][T19160] delete_channel: no stack [ 430.650872][T19160] delete_channel: no stack [ 430.662554][T19160] delete_channel: no stack [ 430.670146][T19160] delete_channel: no stack [ 430.680012][T19160] delete_channel: no stack [ 430.691027][T19160] delete_channel: no stack [ 430.702611][T19160] delete_channel: no stack [ 430.707185][T19160] delete_channel: no stack [ 430.848672][T19178] netlink: 'syz.2.3981': attribute type 1 has an invalid length. [ 430.866268][T19178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3981'. [ 430.969942][T19169] team0 (unregistering): Port device team_slave_1 removed [ 430.999851][T19169] team0 (unregistering): Port device virt_wifi0 removed [ 431.193847][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 431.459594][T19206] lo speed is unknown, defaulting to 1000 [ 431.479134][T19206] lo speed is unknown, defaulting to 1000 [ 431.956708][T19229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4001'. [ 432.058943][T19236] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4000'. [ 432.418171][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4005'. [ 432.474168][T10946] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 432.765976][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4007'. [ 433.005701][T19267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4009'. [ 433.383652][T19298] pim6reg: entered allmulticast mode [ 433.426838][T19298] pim6reg: left allmulticast mode [ 433.805666][T19314] vlan2: entered allmulticast mode [ 433.820388][T19314] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 433.838074][T19321] sctp: [Deprecated]: syz.0.4027 (pid 19321) Use of int in maxseg socket option. [ 433.838074][T19321] Use struct sctp_assoc_value instead [ 433.854368][T19314] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 433.959701][T19332] bridge2: entered promiscuous mode [ 433.965891][T19332] bridge2: entered allmulticast mode [ 433.993259][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4029'. [ 434.012754][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4029'. [ 434.063730][T19332] veth1_macvtap: left promiscuous mode [ 434.070485][T19332] macsec0: entered allmulticast mode [ 434.081782][T19337] FAULT_INJECTION: forcing a failure. [ 434.081782][T19337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.120674][T19335] veth1_macvtap: entered promiscuous mode [ 434.138186][T19337] CPU: 0 UID: 0 PID: 19337 Comm: syz.3.4032 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 434.148999][T19337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 434.149377][T19335] veth1_macvtap: entered allmulticast mode [ 434.159057][T19337] Call Trace: [ 434.159070][T19337] [ 434.159080][T19337] dump_stack_lvl+0x241/0x360 [ 434.159109][T19337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.159129][T19337] ? __pfx__printk+0x10/0x10 [ 434.185637][T19337] ? __pfx_lock_release+0x10/0x10 [ 434.190679][T19337] should_fail_ex+0x3b0/0x4e0 [ 434.195359][T19337] _copy_from_iter+0x21f/0x1e70 [ 434.200215][T19337] ? __virt_addr_valid+0x183/0x530 [ 434.205360][T19337] ? __pfx_lock_release+0x10/0x10 [ 434.210393][T19337] ? __alloc_skb+0x28f/0x440 [ 434.214980][T19337] ? __pfx__copy_from_iter+0x10/0x10 [ 434.220294][T19337] ? __virt_addr_valid+0x183/0x530 [ 434.225420][T19337] ? __virt_addr_valid+0x183/0x530 [ 434.230538][T19337] ? __virt_addr_valid+0x45f/0x530 [ 434.235661][T19337] ? __check_object_size+0x48e/0x900 [ 434.240955][T19337] netlink_sendmsg+0x73d/0xcb0 [ 434.245732][T19337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.251022][T19337] ? aa_sock_msg_perm+0x91/0x160 [ 434.255967][T19337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.261263][T19337] __sock_sendmsg+0x221/0x270 [ 434.265941][T19337] ____sys_sendmsg+0x52a/0x7e0 [ 434.270716][T19337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.276012][T19337] __sys_sendmsg+0x292/0x380 [ 434.280603][T19337] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.285725][T19337] ? __pfx_vfs_write+0x10/0x10 [ 434.290502][T19337] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.296831][T19337] ? do_syscall_64+0x100/0x230 [ 434.301595][T19337] ? do_syscall_64+0xb6/0x230 [ 434.306277][T19337] do_syscall_64+0xf3/0x230 [ 434.310775][T19337] ? clear_bhb_loop+0x35/0x90 [ 434.315450][T19337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.321343][T19337] RIP: 0033:0x7fe57dd7e719 [ 434.325755][T19337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.345363][T19337] RSP: 002b:00007fe57ec2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.353777][T19337] RAX: ffffffffffffffda RBX: 00007fe57df35f80 RCX: 00007fe57dd7e719 [ 434.361743][T19337] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 434.369707][T19337] RBP: 00007fe57ec2f090 R08: 0000000000000000 R09: 0000000000000000 [ 434.377691][T19337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.385656][T19337] R13: 0000000000000000 R14: 00007fe57df35f80 R15: 00007ffc414583d8 [ 434.393646][T19337] [ 434.422660][T19335] macsec0: left allmulticast mode [ 434.427770][T19335] veth1_macvtap: left allmulticast mode [ 434.591516][T19352] pim6reg: entered allmulticast mode [ 434.598195][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 434.623786][T19352] pim6reg: left allmulticast mode [ 434.734224][T19361] netlink: 'syz.1.4039': attribute type 5 has an invalid length. [ 435.147379][T19394] FAULT_INJECTION: forcing a failure. [ 435.147379][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 435.182362][T19394] CPU: 1 UID: 0 PID: 19394 Comm: syz.4.4047 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 435.193169][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 435.203223][T19394] Call Trace: [ 435.206497][T19394] [ 435.209468][T19394] dump_stack_lvl+0x241/0x360 [ 435.214152][T19394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.219348][T19394] ? __pfx__printk+0x10/0x10 [ 435.223946][T19394] ? ref_tracker_alloc+0x332/0x490 [ 435.229093][T19394] should_fail_ex+0x3b0/0x4e0 [ 435.233773][T19394] ? skb_clone+0x20c/0x390 [ 435.238185][T19394] should_failslab+0xac/0x100 [ 435.242863][T19394] ? skb_clone+0x20c/0x390 [ 435.247279][T19394] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 435.252657][T19394] skb_clone+0x20c/0x390 [ 435.256906][T19394] __netlink_deliver_tap+0x3cc/0x7f0 [ 435.262199][T19394] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.267395][T19394] netlink_deliver_tap+0x19d/0x1b0 [ 435.272513][T19394] netlink_unicast+0x7c4/0x990 [ 435.277279][T19394] ? __pfx_netlink_unicast+0x10/0x10 [ 435.282569][T19394] ? __virt_addr_valid+0x183/0x530 [ 435.287680][T19394] ? __check_object_size+0x48e/0x900 [ 435.292983][T19394] netlink_sendmsg+0x8e4/0xcb0 [ 435.297767][T19394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.303057][T19394] ? aa_sock_msg_perm+0x91/0x160 [ 435.308001][T19394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.313286][T19394] __sock_sendmsg+0x221/0x270 [ 435.317971][T19394] ____sys_sendmsg+0x52a/0x7e0 [ 435.322768][T19394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.328080][T19394] __sys_sendmsg+0x292/0x380 [ 435.332678][T19394] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.337808][T19394] ? __pfx_vfs_write+0x10/0x10 [ 435.342593][T19394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.348934][T19394] ? do_syscall_64+0x100/0x230 [ 435.353703][T19394] ? do_syscall_64+0xb6/0x230 [ 435.358380][T19394] do_syscall_64+0xf3/0x230 [ 435.362887][T19394] ? clear_bhb_loop+0x35/0x90 [ 435.367564][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.373462][T19394] RIP: 0033:0x7ff01457e719 [ 435.377877][T19394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.397484][T19394] RSP: 002b:00007ff0152b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.405906][T19394] RAX: ffffffffffffffda RBX: 00007ff014735f80 RCX: 00007ff01457e719 [ 435.413878][T19394] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 435.421844][T19394] RBP: 00007ff0152b3090 R08: 0000000000000000 R09: 0000000000000000 [ 435.430213][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.438196][T19394] R13: 0000000000000000 R14: 00007ff014735f80 R15: 00007ffcf0a696a8 [ 435.446201][T19394] [ 435.697006][T19412] __nla_validate_parse: 4 callbacks suppressed [ 435.697026][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4055'. [ 435.868006][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 435.897014][T19418] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 435.961027][T19418] netlink: 'syz.2.4057': attribute type 11 has an invalid length. [ 435.970591][T19418] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4057'. [ 436.057364][T19429] FAULT_INJECTION: forcing a failure. [ 436.057364][T19429] name failslab, interval 1, probability 0, space 0, times 0 [ 436.080455][T19429] CPU: 1 UID: 0 PID: 19429 Comm: syz.2.4061 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 436.091267][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 436.101344][T19429] Call Trace: [ 436.104638][T19429] [ 436.107580][T19429] dump_stack_lvl+0x241/0x360 [ 436.112283][T19429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.117515][T19429] ? __pfx__printk+0x10/0x10 [ 436.122143][T19429] ? __pfx_lock_acquire+0x10/0x10 [ 436.127546][T19429] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 436.133552][T19429] should_fail_ex+0x3b0/0x4e0 [ 436.138237][T19429] should_failslab+0xac/0x100 [ 436.142920][T19429] ? __alloc_skb+0x1c3/0x440 [ 436.147512][T19429] kmem_cache_alloc_node_noprof+0x71/0x320 [ 436.153326][T19429] __alloc_skb+0x1c3/0x440 [ 436.157742][T19429] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 436.163728][T19429] ? __pfx___alloc_skb+0x10/0x10 [ 436.168664][T19429] ? __local_bh_enable_ip+0x168/0x200 [ 436.174037][T19429] ? br_setlink+0x6f1/0x8b0 [ 436.178542][T19429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 436.184261][T19429] br_info_notify+0x113/0x270 [ 436.188942][T19429] br_setlink+0x36c/0x8b0 [ 436.193277][T19429] ? __pfx_br_setlink+0x10/0x10 [ 436.198156][T19429] ? rcu_read_unlock+0x87/0xa0 [ 436.202921][T19429] ? __dev_queue_xmit+0x1775/0x3f50 [ 436.208147][T19429] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 436.213254][T19429] ? __pfx_lock_release+0x10/0x10 [ 436.218278][T19429] ? mutex_trylock+0x101/0x130 [ 436.223042][T19429] ? mutex_is_locked+0x12/0x50 [ 436.227812][T19429] rtnl_bridge_setlink+0x46e/0x730 [ 436.232924][T19429] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 436.238553][T19429] rtnetlink_rcv_msg+0x73f/0xcf0 [ 436.243487][T19429] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 436.248602][T19429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.254068][T19429] ? ref_tracker_free+0x643/0x7e0 [ 436.259093][T19429] netlink_rcv_skb+0x1e3/0x430 [ 436.263857][T19429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.269310][T19429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.274609][T19429] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.279810][T19429] netlink_unicast+0x7f6/0x990 [ 436.284577][T19429] ? __pfx_netlink_unicast+0x10/0x10 [ 436.289857][T19429] ? __virt_addr_valid+0x183/0x530 [ 436.294969][T19429] ? __check_object_size+0x48e/0x900 [ 436.300257][T19429] netlink_sendmsg+0x8e4/0xcb0 [ 436.305028][T19429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.310317][T19429] ? aa_sock_msg_perm+0x91/0x160 [ 436.315260][T19429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.320542][T19429] __sock_sendmsg+0x221/0x270 [ 436.325221][T19429] ____sys_sendmsg+0x52a/0x7e0 [ 436.329994][T19429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.335292][T19429] __sys_sendmsg+0x292/0x380 [ 436.339882][T19429] ? __pfx___sys_sendmsg+0x10/0x10 [ 436.345001][T19429] ? __pfx_vfs_write+0x10/0x10 [ 436.349789][T19429] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.356130][T19429] ? do_syscall_64+0x100/0x230 [ 436.360892][T19429] ? do_syscall_64+0xb6/0x230 [ 436.365566][T19429] do_syscall_64+0xf3/0x230 [ 436.370072][T19429] ? clear_bhb_loop+0x35/0x90 [ 436.374746][T19429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.380645][T19429] RIP: 0033:0x7faaa397e719 [ 436.385061][T19429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.404675][T19429] RSP: 002b:00007faaa4786038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.413098][T19429] RAX: ffffffffffffffda RBX: 00007faaa3b35f80 RCX: 00007faaa397e719 [ 436.421085][T19429] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 436.429060][T19429] RBP: 00007faaa4786090 R08: 0000000000000000 R09: 0000000000000000 [ 436.437036][T19429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.445010][T19429] R13: 0000000000000000 R14: 00007faaa3b35f80 R15: 00007ffc5a314ec8 [ 436.452994][T19429] [ 436.528018][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4063'. [ 436.601083][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4066'. [ 436.643545][T19442] netlink: 'syz.4.4067': attribute type 12 has an invalid length. [ 436.651463][T19442] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4067'. [ 436.770164][T19448] lo speed is unknown, defaulting to 1000 [ 436.787493][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4070'. [ 436.806163][T19453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4070'. [ 436.833333][T19448] lo speed is unknown, defaulting to 1000 [ 436.850468][T19456] batadv_slave_1: entered promiscuous mode [ 436.863518][T19456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.981697][T19456] batadv_slave_1 (unregistering): left promiscuous mode [ 437.012637][T19456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.091293][T19469] FAULT_INJECTION: forcing a failure. [ 437.091293][T19469] name failslab, interval 1, probability 0, space 0, times 0 [ 437.114980][T19464] xt_CT: No such helper "netbios-ns" [ 437.134763][T19469] CPU: 1 UID: 0 PID: 19469 Comm: syz.4.4075 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 437.145556][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 437.155629][T19469] Call Trace: [ 437.158935][T19469] [ 437.161884][T19469] dump_stack_lvl+0x241/0x360 [ 437.166593][T19469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.171906][T19469] ? __pfx__printk+0x10/0x10 [ 437.176537][T19469] ? __pfx_lock_acquire+0x10/0x10 [ 437.181592][T19469] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 437.187607][T19469] should_fail_ex+0x3b0/0x4e0 [ 437.192310][T19469] should_failslab+0xac/0x100 [ 437.197013][T19469] ? __alloc_skb+0x1c3/0x440 [ 437.201631][T19469] kmem_cache_alloc_node_noprof+0x71/0x320 [ 437.207477][T19469] __alloc_skb+0x1c3/0x440 [ 437.211919][T19469] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 437.217929][T19469] ? __pfx___alloc_skb+0x10/0x10 [ 437.222888][T19469] ? __local_bh_enable_ip+0x168/0x200 [ 437.228286][T19469] ? br_setlink+0x6f1/0x8b0 [ 437.232813][T19469] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 437.238562][T19469] br_info_notify+0x113/0x270 [ 437.243270][T19469] br_setlink+0x36c/0x8b0 [ 437.247631][T19469] ? __pfx_br_setlink+0x10/0x10 [ 437.252548][T19469] ? rcu_read_unlock+0x87/0xa0 [ 437.257338][T19469] ? __dev_queue_xmit+0x1775/0x3f50 [ 437.262562][T19469] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 437.267698][T19469] ? __pfx_lock_release+0x10/0x10 [ 437.272755][T19469] ? mutex_trylock+0x101/0x130 [ 437.277545][T19469] ? mutex_is_locked+0x12/0x50 [ 437.282333][T19469] rtnl_bridge_setlink+0x46e/0x730 [ 437.287469][T19469] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 437.293125][T19469] rtnetlink_rcv_msg+0x73f/0xcf0 [ 437.298085][T19469] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 437.303222][T19469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.308708][T19469] ? ref_tracker_free+0x643/0x7e0 [ 437.313766][T19469] netlink_rcv_skb+0x1e3/0x430 [ 437.318555][T19469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.324033][T19469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.329367][T19469] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.334598][T19469] netlink_unicast+0x7f6/0x990 [ 437.339416][T19469] ? __pfx_netlink_unicast+0x10/0x10 [ 437.344722][T19469] ? __virt_addr_valid+0x183/0x530 [ 437.349865][T19469] ? __check_object_size+0x48e/0x900 [ 437.355186][T19469] netlink_sendmsg+0x8e4/0xcb0 [ 437.359993][T19469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.365316][T19469] ? aa_sock_msg_perm+0x91/0x160 [ 437.370270][T19469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.375548][T19469] __sock_sendmsg+0x221/0x270 [ 437.380235][T19469] ____sys_sendmsg+0x52a/0x7e0 [ 437.385017][T19469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.390324][T19469] __sys_sendmsg+0x292/0x380 [ 437.394916][T19469] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.400032][T19469] ? __pfx_vfs_write+0x10/0x10 [ 437.404830][T19469] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 437.411203][T19469] ? do_syscall_64+0x100/0x230 [ 437.415992][T19469] ? do_syscall_64+0xb6/0x230 [ 437.420699][T19469] do_syscall_64+0xf3/0x230 [ 437.425233][T19469] ? clear_bhb_loop+0x35/0x90 [ 437.429943][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.435869][T19469] RIP: 0033:0x7ff01457e719 [ 437.440303][T19469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.459933][T19469] RSP: 002b:00007ff0152b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.468373][T19469] RAX: ffffffffffffffda RBX: 00007ff014735f80 RCX: 00007ff01457e719 [ 437.476365][T19469] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 437.484357][T19469] RBP: 00007ff0152b3090 R08: 0000000000000000 R09: 0000000000000000 [ 437.492352][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.500343][T19469] R13: 0000000000000000 R14: 00007ff014735f80 R15: 00007ffcf0a696a8 [ 437.508360][T19469] [ 437.532224][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 437.718880][T19451] lo speed is unknown, defaulting to 1000 [ 437.732959][T19481] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 437.787989][T19451] lo speed is unknown, defaulting to 1000 [ 437.909569][T19489] netlink: 'syz.2.4081': attribute type 2 has an invalid length. [ 438.100810][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'. [ 438.405751][T19501] team0: Port device team_slave_0 removed [ 438.436887][T19501] team0: Port device team_slave_1 removed [ 438.453134][T19501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.462559][T19501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.483671][T19508] wg2: left promiscuous mode [ 438.512175][T19508] team0: Port device wg2 added [ 438.546692][T19513] tipc: Enabling of bearer rejected, failed to enable media [ 438.560511][T19501] lo speed is unknown, defaulting to 1000 [ 438.617800][T19501] lo speed is unknown, defaulting to 1000 [ 439.050031][T19535] Cannot find add_set index 0 as target [ 439.732090][T19542] lo speed is unknown, defaulting to 1000 [ 439.739379][T19542] lo speed is unknown, defaulting to 1000 [ 439.743039][T19561] netlink: 'syz.3.4101': attribute type 2 has an invalid length. [ 439.791906][T19561] Xÿ: entered promiscuous mode [ 440.224726][T19563] lo speed is unknown, defaulting to 1000 [ 440.231509][T19563] lo speed is unknown, defaulting to 1000 [ 440.463705][T19572] bridge0: port 3(vlan2) entered disabled state [ 440.470173][T19572] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.296383][T19614] FAULT_INJECTION: forcing a failure. [ 441.296383][T19614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.311185][T19614] CPU: 1 UID: 0 PID: 19614 Comm: syz.4.4118 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 441.321999][T19614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 441.332074][T19614] Call Trace: [ 441.335372][T19614] [ 441.338321][T19614] dump_stack_lvl+0x241/0x360 [ 441.343024][T19614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.348246][T19614] ? __pfx__printk+0x10/0x10 [ 441.352872][T19614] ? snprintf+0xda/0x120 [ 441.357136][T19614] should_fail_ex+0x3b0/0x4e0 [ 441.361825][T19614] _copy_to_user+0x31/0xb0 [ 441.366255][T19614] simple_read_from_buffer+0xca/0x150 [ 441.371647][T19614] proc_fail_nth_read+0x1e9/0x250 [ 441.376687][T19614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.382283][T19614] ? rw_verify_area+0x55e/0x6f0 [ 441.387165][T19614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.392743][T19614] vfs_read+0x1fc/0xb70 [ 441.396933][T19614] ? fdget_pos+0x24e/0x320 [ 441.401374][T19614] ? __pfx_vfs_read+0x10/0x10 [ 441.406088][T19614] ? __fget_files+0x3f3/0x470 [ 441.410800][T19614] ? fdget_pos+0x24e/0x320 [ 441.415241][T19614] ksys_read+0x183/0x2b0 [ 441.419507][T19614] ? __pfx_ksys_read+0x10/0x10 [ 441.424290][T19614] ? do_syscall_64+0x100/0x230 [ 441.429076][T19614] ? do_syscall_64+0xb6/0x230 [ 441.433775][T19614] do_syscall_64+0xf3/0x230 [ 441.438301][T19614] ? clear_bhb_loop+0x35/0x90 [ 441.442998][T19614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.448915][T19614] RIP: 0033:0x7ff01457d15c [ 441.453354][T19614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 441.472980][T19614] RSP: 002b:00007ff0152b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.481406][T19614] RAX: ffffffffffffffda RBX: 00007ff014735f80 RCX: 00007ff01457d15c [ 441.489387][T19614] RDX: 000000000000000f RSI: 00007ff0152b30a0 RDI: 0000000000000005 [ 441.497378][T19614] RBP: 00007ff0152b3090 R08: 0000000000000000 R09: 0000000000000000 [ 441.505367][T19614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.513357][T19614] R13: 0000000000000000 R14: 00007ff014735f80 R15: 00007ffcf0a696a8 [ 441.521348][T19614] [ 441.754065][T19621] netlink: 'syz.4.4120': attribute type 2 has an invalid length. [ 441.857069][T19627] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.926711][T19638] netlink: 'syz.0.4126': attribute type 4 has an invalid length. [ 442.113890][T19646] __nla_validate_parse: 37 callbacks suppressed [ 442.113911][T19646] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4128'. [ 442.158002][T19640] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4128'. [ 442.376982][T19658] netlink: 'syz.4.4133': attribute type 1 has an invalid length. [ 442.446705][T19662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4135'. [ 442.456777][T19662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4135'. [ 442.784039][T19674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4140'. [ 442.867095][T19678] xt_cluster: node mask cannot exceed total number of nodes [ 443.440760][T19697] vlan4: entered promiscuous mode [ 443.449266][T19697] bond0: entered promiscuous mode [ 443.461445][T19697] bond_slave_0: entered promiscuous mode [ 443.468771][T19697] bond_slave_1: entered promiscuous mode [ 443.497852][T19697] bond0: left promiscuous mode [ 443.506110][T19697] bond_slave_0: left promiscuous mode [ 443.513196][T19697] bond_slave_1: left promiscuous mode [ 443.547734][T19704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.555051][T19704] IPv6: NLM_F_CREATE should be set when creating new route [ 443.671168][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4157'. [ 443.692692][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4157'. [ 444.030366][T19737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.199256][T19744] macvlan0: entered allmulticast mode [ 444.205888][T19744] veth1_vlan: entered allmulticast mode [ 444.299711][T19744] veth1_vlan: left allmulticast mode [ 444.322210][T19744] macvlan0 (unregistering): left allmulticast mode [ 444.943967][T19773] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4179'. [ 444.972680][T19774] Bluetooth: MGMT ver 1.23 [ 445.027682][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 445.804250][T19808] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.4191'. [ 446.262011][T10948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.273900][T10948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.533365][T19838] Cannot find add_set index 2 as target [ 446.646759][T19847] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 447.123655][T19874] netlink: set zone limit has 4 unknown bytes [ 447.375948][T19885] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 447.406060][T19885] __nla_validate_parse: 7 callbacks suppressed [ 447.406078][T19885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4220'. [ 447.775943][T19909] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 447.784196][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 447.847912][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4231'. [ 447.868897][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4231'. [ 448.078321][T19919] can: request_module (can-proto-4) failed. [ 448.130235][T19925] lo speed is unknown, defaulting to 1000 [ 448.148958][T19925] lo speed is unknown, defaulting to 1000 [ 448.228965][T19930] tap0: tun_chr_ioctl cmd 1074025677 [ 448.242787][T19930] tap0: linktype set to 778 [ 448.289341][T19932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4236'. [ 448.421374][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 448.443100][T19935] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 448.451882][T19935] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 448.484172][T19937] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4237'. [ 448.512595][T19937] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4237'. [ 458.067685][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4245'. [ 458.293459][T19976] netlink: 'syz.2.4249': attribute type 21 has an invalid length. [ 458.302965][T19976] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4249'. [ 458.317342][T19976] netlink: 'syz.2.4249': attribute type 4 has an invalid length. [ 458.325804][T19976] netlink: 'syz.2.4249': attribute type 3 has an invalid length. [ 458.334565][T19976] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4249'. [ 458.344026][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 458.414315][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4249'. [ 458.451684][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 458.481541][T19978] ip6gretap0: entered promiscuous mode [ 458.487514][T19978] ip6gretap0: entered allmulticast mode [ 458.505519][T19978] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 458.515638][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4248'. [ 458.708451][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4256'. [ 458.737803][T19998] batadv1: entered promiscuous mode [ 458.859057][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 458.918443][T20004] netlink: 'syz.3.4259': attribute type 2 has an invalid length. [ 458.926902][T20004] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4259'. [ 459.383928][T20021] netlink: 'syz.1.4264': attribute type 4 has an invalid length. [ 460.319518][T20066] bridge2: entered promiscuous mode [ 460.325962][T20066] bridge2: entered allmulticast mode [ 460.341766][T20066] team0: Port device bridge2 added [ 460.351534][T20066] netlink: 'syz.0.4282': attribute type 10 has an invalid length. [ 460.369786][T20066] bridge0: port 4(ip6gretap0) entered blocking state [ 460.378194][T20066] bridge0: port 4(ip6gretap0) entered disabled state [ 460.386117][T20066] ip6gretap0: entered allmulticast mode [ 460.394836][T20066] ip6gretap0: entered promiscuous mode [ 460.531050][T20068] vlan3: entered allmulticast mode [ 460.536718][T20068] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 460.550077][T20068] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 460.707972][T20074] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:19491 [ 460.897070][T20085] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 460.904194][T20082] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 460.914841][T20082] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 461.195403][T20101] geneve2: entered promiscuous mode [ 461.200831][T20101] geneve2: entered allmulticast mode [ 461.477944][T20111] xt_cgroup: xt_cgroup: no path or classid specified [ 461.509913][T20113] lo speed is unknown, defaulting to 1000 [ 461.527279][T20113] lo speed is unknown, defaulting to 1000 [ 461.881992][T20126] netlink: 'syz.1.4301': attribute type 12 has an invalid length. [ 462.253555][T20147] netlink: 'syz.2.4311': attribute type 23 has an invalid length. [ 462.297934][T20147] netlink: 'syz.2.4311': attribute type 23 has an invalid length. [ 462.499093][T20160] lo speed is unknown, defaulting to 1000 [ 462.517096][T20160] lo speed is unknown, defaulting to 1000 [ 463.122834][ T54] Bluetooth: hci0: command 0x0405 tx timeout [ 463.213982][T20195] __nla_validate_parse: 16 callbacks suppressed [ 463.214001][T20195] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4326'. [ 463.418007][T20210] tipc: Started in network mode [ 463.446141][T20210] tipc: Node identity f7, cluster identity 4711 [ 463.485244][T20210] tipc: Node number set to 247 [ 463.986030][T20234] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.992553][T20234] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 464.101938][T20240] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4340'. [ 464.127058][T20238] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 464.294984][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4343'. [ 464.476779][T10951] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.681145][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4352'. [ 464.683210][T20276] sctp: [Deprecated]: syz.4.4353 (pid 20276) Use of int in maxseg socket option. [ 464.683210][T20276] Use struct sctp_assoc_value instead [ 465.787199][T20322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.793703][T20322] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.902805][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4366'. [ 465.977134][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 465.992679][T20329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.009362][T20329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.048115][T20329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.062705][T20329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.126374][T20342] Bluetooth: MGMT ver 1.23 [ 466.475523][T20355] rdma_op ffff888028e709f0 conn xmit_rdma 0000000000000000 [ 466.911010][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 466.986092][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4379'. [ 467.047279][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'. [ 467.133298][T20393] netlink: 70 bytes leftover after parsing attributes in process `syz.3.4385'. [ 467.231484][T20397] netlink: 'syz.0.4386': attribute type 10 has an invalid length. [ 467.441904][T20412] ipvlan2: entered promiscuous mode [ 467.590969][T20421] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 467.610439][T20423] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 467.815190][T20434] netlink: 'syz.2.4397': attribute type 12 has an invalid length. [ 467.846090][ T5855] Bluetooth: hci1: command 0x040f tx timeout [ 468.076425][T20450] macsec0: entered promiscuous mode [ 468.117777][T20450] macsec0: left promiscuous mode [ 468.228808][T20452] Bluetooth: MGMT ver 1.23 [ 468.588350][T20467] netlink: 'syz.0.4408': attribute type 9 has an invalid length. [ 468.614921][T20467] __nla_validate_parse: 5 callbacks suppressed [ 468.614942][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'. [ 468.636048][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 469.116540][T20495] lo speed is unknown, defaulting to 1000 [ 469.124333][T20495] lo speed is unknown, defaulting to 1000 [ 469.373511][T20511] ªªªªªª: renamed from vlan0 (while UP) [ 469.409488][T20509] can: request_module (can-proto-0) failed. [ 469.659351][T20523] netlink: 'syz.4.4427': attribute type 3 has an invalid length. [ 469.706521][T20523] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 469.722006][T20523] macvtap1: entered promiscuous mode [ 469.746767][T20523] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 470.042555][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4431'. [ 470.043146][T20543] netlink: 'syz.2.4432': attribute type 1 has an invalid length. [ 470.115767][T20546] netlink: 'syz.2.4432': attribute type 1 has an invalid length. [ 470.168402][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'. [ 470.193183][T20548] ip6gretap0: left allmulticast mode [ 470.207916][T20548] ip6gretap0: left promiscuous mode [ 470.218207][T20548] bridge0: port 4(ip6gretap0) entered disabled state [ 470.311127][T20548] vlan2: left allmulticast mode [ 470.316889][T20548] dummy0: left allmulticast mode [ 470.321944][T20548] vlan2: left promiscuous mode [ 470.327905][T20548] dummy0: left promiscuous mode [ 470.337059][T20548] bridge0: port 3(vlan2) entered disabled state [ 470.358131][T20548] bridge_slave_1: left allmulticast mode [ 470.364027][T20548] bridge_slave_1: left promiscuous mode [ 470.369732][T20548] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.381946][T20548] bridge_slave_0: left allmulticast mode [ 470.392557][T20548] bridge_slave_0: left promiscuous mode [ 470.398317][T20548] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.638406][T20558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4435'. [ 470.813755][T20572] veth0_macvtap: left promiscuous mode [ 470.858902][T20578] netlink: 'syz.2.4444': attribute type 10 has an invalid length. [ 471.334418][T20601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 471.367411][T20601] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 471.382498][T20601] gretap1: entered promiscuous mode [ 471.391910][T20601] gretap1: entered allmulticast mode [ 471.503134][T20615] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 471.556079][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 471.601769][T20621] set match dimension is over the limit! [ 471.666735][T20617] xt_CT: No such helper "snmp" [ 471.677133][T20621] pim6reg: entered allmulticast mode [ 471.701174][T20621] pim6reg: left allmulticast mode [ 471.946882][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4462'. [ 471.960506][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4462'. [ 472.158628][T20657] pim6reg: entered allmulticast mode [ 472.247444][T20665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4469'. [ 472.257357][T20665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4469'. [ 472.297070][T20665] Dead loop on virtual device ipvlan1, fix it urgently! [ 472.324178][T20667] netlink: 'syz.0.4470': attribute type 22 has an invalid length. [ 472.580310][T20683] netlink: 'syz.2.4475': attribute type 2 has an invalid length. [ 472.780153][T20695] lo speed is unknown, defaulting to 1000 [ 472.789001][T20695] lo speed is unknown, defaulting to 1000 [ 472.956350][T20695] IPVS: set_ctl: invalid protocol: 12635 224.0.0.2:20002 [ 473.040672][T20709] pim6reg: entered allmulticast mode [ 473.658078][T20737] xt_TCPMSS: Only works on TCP SYN packets [ 474.050221][T20757] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 474.168506][T20760] vlan2: entered allmulticast mode [ 474.190389][T20760] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 474.223240][T20760] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 474.517088][T20775] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.523614][T20775] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.565745][T20778] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 474.607977][T20775] vlan0: entered promiscuous mode [ 474.635470][T20775] bond0: entered promiscuous mode [ 474.640900][T20775] bond_slave_0: entered promiscuous mode [ 474.647753][T20775] bond_slave_1: entered promiscuous mode [ 474.658159][T20775] bond0: left promiscuous mode [ 474.664110][T20775] bond_slave_0: left promiscuous mode [ 474.670637][T20775] bond_slave_1: left promiscuous mode [ 474.791441][T20791] Dead loop on virtual device ipvlan1, fix it urgently! [ 474.914158][T20796] __nla_validate_parse: 6 callbacks suppressed [ 474.914178][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 474.933713][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4509'. [ 474.952896][T20796] netlink: 'syz.3.4509': attribute type 7 has an invalid length. [ 474.986060][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4509'. [ 475.002987][T20796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4509'. [ 475.024459][T20796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4509'. [ 475.042455][T20796] vlan0: entered allmulticast mode [ 475.056536][T20796] veth0_vlan: entered allmulticast mode [ 475.113497][T20804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4511'. [ 475.145667][T20803] vlan0: entered allmulticast mode [ 475.152966][T20803] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 475.168129][T20803] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 475.213916][T20812] xt_ipcomp: unknown flags 12 [ 475.229095][T20809] vlan2: entered promiscuous mode [ 475.369275][T20818] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 475.375784][T20818] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 475.406266][T20818] vlan0: entered promiscuous mode [ 475.418985][T20818] bond0: entered promiscuous mode [ 475.429826][T20818] bond_slave_0: entered promiscuous mode [ 475.446722][T20818] bond_slave_1: entered promiscuous mode [ 475.524236][T20818] bond0: left promiscuous mode [ 475.529174][T20818] bond_slave_0: left promiscuous mode [ 475.543627][T20829] xt_cgroup: invalid path, errno=-2 [ 475.545541][T20818] bond_slave_1: left promiscuous mode [ 475.669070][T20782] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 475.680650][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4518'. [ 476.071363][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4523'. [ 476.194652][T20857] vlan0: entered allmulticast mode [ 476.199819][T20857] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 476.215938][T20857] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 476.310381][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4528'. [ 476.410982][T20867] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 476.417510][T20867] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 476.430885][T20867] vlan0: entered promiscuous mode [ 476.436923][T20867] bond0: entered promiscuous mode [ 476.441987][T20867] bond_slave_0: entered promiscuous mode [ 476.448116][T20867] bond_slave_1: entered promiscuous mode [ 476.455217][T20867] bond0: left promiscuous mode [ 476.460014][T20867] bond_slave_0: left promiscuous mode [ 476.466460][T20867] bond_slave_1: left promiscuous mode [ 476.935216][T20875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4532'. [ 477.100095][T20884] syzkaller0: refused to change device tx_queue_len [ 477.305806][T20896] netlink: 'syz.1.4539': attribute type 19 has an invalid length. [ 477.384678][T20905] Dead loop on virtual device ipvlan1, fix it urgently! [ 477.394719][T20894] delete_channel: no stack [ 477.611521][T20915] netlink: 'syz.0.4547': attribute type 1 has an invalid length. [ 477.613365][T20916] netlink: 'syz.0.4547': attribute type 4 has an invalid length. [ 477.884513][T20937] netlink: 'syz.3.4553': attribute type 1 has an invalid length. [ 477.944680][T20937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.995784][T20947] bond2: (slave gretap2): making interface the new active one [ 478.049675][T20947] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 478.075849][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 478.234598][T20968] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 478.652495][T21005] netlink: 'syz.3.4571': attribute type 10 has an invalid length. [ 478.672098][T21005] bridge0: port 1(macvlan1) entered blocking state [ 478.691382][T21005] bridge0: port 1(macvlan1) entered disabled state [ 478.701892][T21005] macvlan1: entered allmulticast mode [ 478.721504][T21005] veth1_vlan: entered allmulticast mode [ 478.744861][T21005] macvlan1: entered promiscuous mode [ 478.751285][T21005] bridge0: port 1(macvlan1) entered blocking state [ 478.758000][T21005] bridge0: port 1(macvlan1) entered forwarding state [ 478.838939][T21015] netlink: 'syz.1.4574': attribute type 32 has an invalid length. [ 479.568422][T21044] netlink: 'syz.4.4583': attribute type 10 has an invalid length. [ 479.587830][T21044] syz_tun: entered promiscuous mode [ 479.610153][T21044] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 479.936076][T21066] lo speed is unknown, defaulting to 1000 [ 479.957331][T21066] lo speed is unknown, defaulting to 1000 [ 480.107907][T21081] __nla_validate_parse: 13 callbacks suppressed [ 480.107921][T21081] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4597'. [ 480.144842][T21081] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4597'. [ 480.250493][T21086] SET target dimension over the limit! [ 480.271264][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4599'. [ 480.528355][T21097] ip6t_srh: unknown srh match flags 5294 [ 480.555803][T21097] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 480.847946][T21104] netlink: 'syz.1.4603': attribute type 2 has an invalid length. [ 480.927837][T21109] netlink: 'syz.3.4606': attribute type 3 has an invalid length. [ 480.987852][T21111] netlink: 'syz.4.4604': attribute type 2 has an invalid length. [ 481.011358][T21116] xt_l2tp: invalid flags combination: 4 [ 481.109453][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 481.400649][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4609'. [ 481.621602][T21135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4612'. [ 481.633282][T21135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4612'. [ 481.943438][T21149] IPVS: set_ctl: invalid protocol: 52842 172.20.20.170:20002 [ 482.079592][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4620'. [ 482.308319][T21168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4621'. [ 482.312009][T21170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4622'. [ 482.372073][T21172] netlink: 'syz.2.4623': attribute type 2 has an invalid length. [ 482.970481][T21188] xt_cgroup: invalid path, errno=-2 [ 483.072000][T21192] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.196670][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 483.772790][T21219] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 484.173394][T21226] bridge0: entered promiscuous mode [ 484.222086][T21225] bridge0: left promiscuous mode [ 484.364702][T21239] netlink: 'syz.1.4647': attribute type 2 has an invalid length. [ 485.117953][T21270] pim6reg: entered allmulticast mode [ 485.125208][T21270] pim6reg: left allmulticast mode [ 485.227891][T21271] lo speed is unknown, defaulting to 1000 [ 485.254034][T21271] lo speed is unknown, defaulting to 1000 [ 485.799507][T21284] lo speed is unknown, defaulting to 1000 [ 485.843406][T21284] lo speed is unknown, defaulting to 1000 [ 485.852111][T21285] __nla_validate_parse: 7 callbacks suppressed [ 485.852129][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4659'. [ 486.412873][T21294] netlink: set zone limit has 4 unknown bytes [ 486.765523][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4662'. [ 487.114943][T21307] FAULT_INJECTION: forcing a failure. [ 487.114943][T21307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.180229][T21307] CPU: 1 UID: 0 PID: 21307 Comm: syz.2.4665 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 487.191053][T21307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 487.201130][T21307] Call Trace: [ 487.204425][T21307] [ 487.207366][T21307] dump_stack_lvl+0x241/0x360 [ 487.212067][T21307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.217279][T21307] ? __pfx__printk+0x10/0x10 [ 487.221891][T21307] ? __pfx_lock_release+0x10/0x10 [ 487.226946][T21307] should_fail_ex+0x3b0/0x4e0 [ 487.231644][T21307] _copy_from_user+0x2f/0xc0 [ 487.236258][T21307] copy_msghdr_from_user+0xae/0x680 [ 487.241479][T21307] ? __lock_acquire+0x1384/0x2050 [ 487.246526][T21307] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 487.252361][T21307] do_recvmmsg+0x3f9/0xad0 [ 487.256823][T21307] ? __pfx_do_recvmmsg+0x10/0x10 [ 487.261803][T21307] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 487.267720][T21307] ? ksys_write+0x229/0x2b0 [ 487.272238][T21307] ? __pfx_lock_release+0x10/0x10 [ 487.277290][T21307] ? vfs_write+0x730/0xd30 [ 487.281750][T21307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.287761][T21307] __x64_sys_recvmmsg+0x199/0x250 [ 487.292810][T21307] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 487.298380][T21307] ? do_syscall_64+0x100/0x230 [ 487.303165][T21307] ? do_syscall_64+0xb6/0x230 [ 487.307865][T21307] do_syscall_64+0xf3/0x230 [ 487.312395][T21307] ? clear_bhb_loop+0x35/0x90 [ 487.317093][T21307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.323011][T21307] RIP: 0033:0x7faaa397e719 [ 487.327439][T21307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.347063][T21307] RSP: 002b:00007faaa4786038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 487.355500][T21307] RAX: ffffffffffffffda RBX: 00007faaa3b35f80 RCX: 00007faaa397e719 [ 487.363488][T21307] RDX: 0000000000000600 RSI: 0000000020003700 RDI: 0000000000000004 [ 487.371472][T21307] RBP: 00007faaa4786090 R08: 0000000000000000 R09: 0000000000000000 [ 487.379456][T21307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.387499][T21307] R13: 0000000000000000 R14: 00007faaa3b35f80 R15: 00007ffc5a314ec8 [ 487.395501][T21307] [ 487.528477][T21309] netlink: 'syz.4.4668': attribute type 1 has an invalid length. [ 487.850330][T21317] tipc: Started in network mode [ 487.881095][T21317] tipc: Node identity f7, cluster identity 4711 [ 487.909886][T21317] tipc: Node number set to 247 [ 487.991299][T21317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4671'. [ 488.005901][T21324] netlink: 'syz.4.4670': attribute type 1 has an invalid length. [ 488.073670][T21328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4673'. [ 488.096736][T21324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.162050][T21327] pim6reg: entered allmulticast mode [ 488.171828][T21327] pim6reg: left allmulticast mode [ 488.253461][T21323] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 488.284753][T21323] bond2: (slave batadv1): making interface the new active one [ 488.313532][T21323] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 488.334293][T21292] Bluetooth: hci5: command 0x0406 tx timeout [ 488.392572][T21334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4670'. [ 488.449362][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4677'. [ 488.498649][T21323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4670'. [ 488.704088][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4678'. [ 488.787063][T21350] FAULT_INJECTION: forcing a failure. [ 488.787063][T21350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.803743][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4677'. [ 488.868166][T21350] CPU: 0 UID: 0 PID: 21350 Comm: syz.4.4679 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 488.878986][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 488.889061][T21350] Call Trace: [ 488.892355][T21350] [ 488.895300][T21350] dump_stack_lvl+0x241/0x360 [ 488.899998][T21350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.905213][T21350] ? __pfx__printk+0x10/0x10 [ 488.909835][T21350] ? __pfx_lock_release+0x10/0x10 [ 488.914884][T21350] ? __lock_acquire+0x1384/0x2050 [ 488.919938][T21350] should_fail_ex+0x3b0/0x4e0 [ 488.924650][T21350] _copy_from_user+0x2f/0xc0 [ 488.929271][T21350] kstrtouint_from_user+0xc6/0x190 [ 488.934428][T21350] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 488.940168][T21350] ? __pfx_lock_acquire+0x10/0x10 [ 488.945224][T21350] proc_fail_nth_write+0xaa/0x2d0 [ 488.950269][T21350] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 488.956182][T21350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 488.961845][T21350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 488.967501][T21350] vfs_write+0x2a3/0xd30 [ 488.971765][T21350] ? fdget_pos+0x24e/0x320 [ 488.976201][T21350] ? __pfx_vfs_write+0x10/0x10 [ 488.980991][T21350] ? __fget_files+0x3f3/0x470 [ 488.985701][T21350] ? fdget_pos+0x24e/0x320 [ 488.990142][T21350] ksys_write+0x183/0x2b0 [ 488.994490][T21350] ? __pfx_ksys_write+0x10/0x10 [ 488.999354][T21350] ? do_syscall_64+0x100/0x230 [ 489.004136][T21350] ? do_syscall_64+0xb6/0x230 [ 489.008828][T21350] do_syscall_64+0xf3/0x230 [ 489.013346][T21350] ? clear_bhb_loop+0x35/0x90 [ 489.018041][T21350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.023959][T21350] RIP: 0033:0x7ff01457d1ff [ 489.028393][T21350] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 489.048021][T21350] RSP: 002b:00007ff015292030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 489.056464][T21350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff01457d1ff [ 489.064458][T21350] RDX: 0000000000000001 RSI: 00007ff0152920a0 RDI: 0000000000000003 [ 489.072454][T21350] RBP: 00007ff015292090 R08: 0000000000000000 R09: 0000000000000000 [ 489.080446][T21350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 489.088439][T21350] R13: 0000000000000000 R14: 00007ff014736058 R15: 00007ffcf0a696a8 [ 489.096452][T21350] [ 489.172818][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4683'. [ 489.183530][T21357] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 489.638284][T21382] netlink: 'syz.2.4693': attribute type 8 has an invalid length. [ 490.502171][T21419] vlan0: entered promiscuous mode [ 490.526483][T21419] bond0: entered promiscuous mode [ 490.537014][T21419] bond_slave_0: entered promiscuous mode [ 490.560219][T21419] bond_slave_1: entered promiscuous mode [ 490.599953][T21419] bond0: left promiscuous mode [ 490.615302][T21419] bond_slave_0: left promiscuous mode [ 490.621056][T21419] bond_slave_1: left promiscuous mode [ 490.716404][T21425] vlan1: entered allmulticast mode [ 490.721903][T21425] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 490.733836][T21425] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 490.803893][T21435] lo speed is unknown, defaulting to 1000 [ 490.820982][T21435] lo speed is unknown, defaulting to 1000 [ 491.011865][T21440] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 491.242548][T21454] lo: entered allmulticast mode [ 491.248187][T21454] lo: left allmulticast mode [ 491.493079][T21462] vlan0: entered promiscuous mode [ 491.508950][T21462] bond0: entered promiscuous mode [ 491.532407][T21462] bond_slave_0: entered promiscuous mode [ 491.554830][T21462] bond_slave_1: entered promiscuous mode [ 491.561539][T21469] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 491.597592][T21462] bond0: left promiscuous mode [ 491.605350][T21462] bond_slave_0: left promiscuous mode [ 491.632783][T21462] bond_slave_1: left promiscuous mode [ 491.725678][T21463] netlink: 'syz.4.4717': attribute type 29 has an invalid length. [ 491.734379][T21463] __nla_validate_parse: 4 callbacks suppressed [ 491.734397][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4717'. [ 491.936946][T21477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.128965][T21483] tap0: tun_chr_ioctl cmd 1074025673 [ 492.417506][T21498] Dead loop on virtual device ipvlan1, fix it urgently! [ 492.755694][T21516] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 492.824254][T21516] netlink: 'syz.3.4732': attribute type 1 has an invalid length. [ 492.872893][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 492.911513][T21518] netlink: 'syz.2.4734': attribute type 2 has an invalid length. [ 493.219836][T21530] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4736'. [ 493.694479][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4739'. [ 493.703812][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4739'. [ 493.875119][T21548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4742'. [ 494.043193][T21555] tipc: Failed to obtain node identity [ 494.048729][T21555] tipc: Enabling of bearer rejected, failed to enable media [ 494.069697][T21550] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4743'. [ 494.229414][T21561] Dead loop on virtual device ip6_vti0, fix it urgently! [ 494.379113][T21566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4748'. [ 494.561869][T21570] netlink: 'syz.3.4750': attribute type 4 has an invalid length. [ 495.021076][T21592] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4756'. [ 496.474044][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 496.475809][T10955] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 506.400497][T21601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4758'. [ 506.512859][T21615] netlink: 'syz.3.4761': attribute type 1 has an invalid length. [ 506.581694][T21622] netlink: 'syz.1.4759': attribute type 10 has an invalid length. [ 506.607108][T21616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4763'. [ 507.634414][T21668] Dead loop on virtual device ipvlan1, fix it urgently! [ 507.671995][T21670] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4779'. [ 507.684003][T21671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4778'. [ 508.107138][T21694] netlink: 'syz.1.4788': attribute type 2 has an invalid length. [ 508.153650][T21697] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4789'. [ 508.192550][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4790'. [ 508.301561][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4792'. [ 508.685623][T21706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.709023][T21706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.723477][T21706] bond0 (unregistering): Released all slaves [ 508.739110][T21707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4792'. [ 508.748688][T21707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4792'. [ 508.859525][T21721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4795'. [ 509.169290][T21740] vlan0: entered allmulticast mode [ 509.175090][T21740] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 509.203216][T21740] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 509.271226][T21745] netlink: 'syz.1.4801': attribute type 3 has an invalid length. [ 509.338831][T21738] syzkaller0: entered allmulticast mode [ 509.396906][T21737] syzkaller0: left allmulticast mode [ 509.779406][T21773] lo speed is unknown, defaulting to 1000 [ 509.803604][T21773] lo speed is unknown, defaulting to 1000 [ 509.978425][T21794] @ÿ: renamed from veth0_vlan (while UP) [ 510.026177][T21799] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 510.043617][T21792] vlan0: entered allmulticast mode [ 510.056140][T21799] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 510.205769][T21807] xt_CT: No such helper "syz0" [ 510.480838][T21822] netlink: 'syz.0.4824': attribute type 1 has an invalid length. [ 514.004988][T21866] __nla_validate_parse: 9 callbacks suppressed [ 514.005008][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4839'. [ 514.194056][T21876] bond5: entered promiscuous mode [ 514.202577][T21876] bond5: entered allmulticast mode [ 514.208008][T21876] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.464765][T21889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4846'. [ 514.648052][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4853'. [ 514.818005][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4855'. [ 515.498076][T21950] team0: Port device wg2 removed [ 515.529639][T21956] netlink: 'syz.1.4869': attribute type 10 has an invalid length. [ 515.540284][T21956] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4869'. [ 515.550215][T21956] team0: entered promiscuous mode [ 515.602994][T21956] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.660423][T21955] lo speed is unknown, defaulting to 1000 [ 515.667523][T21955] lo speed is unknown, defaulting to 1000 [ 515.762837][T21969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4873'. [ 516.463592][T21996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4880'. [ 516.633628][T22002] sctp: [Deprecated]: syz.4.4881 (pid 22002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.633628][T22002] Use struct sctp_sack_info instead [ 516.899098][T21996] team0 (unregistering): left promiscuous mode [ 516.912552][T21996] team_slave_0: left promiscuous mode [ 516.925107][T21996] team_slave_1: left promiscuous mode [ 516.966397][T21996] team0 (unregistering): Port device team_slave_0 removed [ 517.010039][T21996] team0 (unregistering): Port device team_slave_1 removed [ 517.026393][T21996] team0 (unregistering): Port device bridge2 removed [ 517.067178][T21999] netlink: 'syz.2.4883': attribute type 1 has an invalid length. [ 517.110673][T22020] (unnamed net_device) (uninitialized): option lacp_active: invalid value (3) [ 517.228663][T22026] lo speed is unknown, defaulting to 1000 [ 517.328212][T22027] lo speed is unknown, defaulting to 1000 [ 517.337654][T22026] lo speed is unknown, defaulting to 1000 [ 517.351621][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4894'. [ 517.377501][T22038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4894'. [ 517.384709][T22036] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4893'. [ 517.413416][T22027] lo speed is unknown, defaulting to 1000 [ 517.413649][T22035] syzkaller1: entered promiscuous mode [ 517.475754][T22035] syzkaller1: entered allmulticast mode [ 517.893845][T22057] netlink: 'syz.2.4900': attribute type 3 has an invalid length. [ 517.989479][T22061] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 39473 - 0 [ 518.011089][T22061] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 39473 - 0 [ 518.026573][T22061] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 39473 - 0 [ 518.027876][T22059] xt_SECMARK: invalid mode: 0 [ 518.036311][T22061] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 39473 - 0 [ 518.049966][T22061] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 59318 - 0 [ 518.059018][T22061] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 59318 - 0 [ 518.071933][T22061] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 59318 - 0 [ 518.082097][T22061] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 59318 - 0 [ 518.107607][T22061] geneve3: entered promiscuous mode [ 518.153027][T22061] geneve3: entered allmulticast mode [ 518.215237][T22067] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 518.471975][T22076] lo speed is unknown, defaulting to 1000 [ 518.482683][T22076] lo speed is unknown, defaulting to 1000 [ 518.607950][ T2998] tipc: Subscription rejected, illegal request [ 518.665965][T22090] veth6: entered allmulticast mode [ 518.685356][T22090] veth7: entered promiscuous mode [ 518.899947][T22104] netlink: 'syz.3.4914': attribute type 1 has an invalid length. [ 519.031446][T22113] __nla_validate_parse: 8 callbacks suppressed [ 519.031465][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4916'. [ 519.050827][T22116] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002 [ 519.358430][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.365486][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.372645][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.379804][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.386755][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.393943][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.400753][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.407976][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.420781][T22132] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 519.448491][T22135] tipc: Started in network mode [ 519.467438][T22135] tipc: Node identity fec0000000000000400000000000002d, cluster identity 4711 [ 519.496859][T22135] tipc: Enabling of bearer rejected, failed to enable media [ 519.546265][T22138] syzkaller1: entered promiscuous mode [ 519.559175][T22138] syzkaller1: entered allmulticast mode [ 519.573123][T22138] netlink: 'syz.4.4923': attribute type 1 has an invalid length. [ 519.581286][T22138] netlink: 'syz.4.4923': attribute type 2 has an invalid length. [ 519.777802][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4926'. [ 520.092682][T22173] delete_channel: no stack [ 520.116522][T22173] delete_channel: no stack [ 520.631908][T22193] lo speed is unknown, defaulting to 1000 [ 520.653550][T22193] lo speed is unknown, defaulting to 1000 [ 520.981166][T22212] ipvlan1: entered promiscuous mode [ 521.396434][T22237] tipc: Trying to set illegal importance in message [ 521.406693][T22242] syz.3.4951: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 521.452016][T22242] CPU: 1 UID: 0 PID: 22242 Comm: syz.3.4951 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 521.462828][T22242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 521.472895][T22242] Call Trace: [ 521.476173][T22242] [ 521.479101][T22242] dump_stack_lvl+0x241/0x360 [ 521.483799][T22242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.488995][T22242] ? __pfx__printk+0x10/0x10 [ 521.493590][T22242] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 521.500015][T22242] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 521.506530][T22242] warn_alloc+0x278/0x410 [ 521.510865][T22242] ? stack_depot_save_flags+0x29/0x830 [ 521.516324][T22242] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 521.522396][T22242] ? __pfx_warn_alloc+0x10/0x10 [ 521.527248][T22242] ? kasan_save_track+0x3f/0x80 [ 521.532093][T22242] ? __kasan_kmalloc+0x98/0xb0 [ 521.536860][T22242] ? xsk_setsockopt+0x4ea/0x950 [ 521.541709][T22242] ? do_sock_setsockopt+0x3af/0x720 [ 521.546911][T22242] ? __sys_setsockopt+0x1a2/0x250 [ 521.551942][T22242] ? __x64_sys_setsockopt+0xb5/0xd0 [ 521.557153][T22242] ? do_syscall_64+0xf3/0x230 [ 521.561831][T22242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.567911][T22242] __vmalloc_node_range_noprof+0x126/0x13f0 [ 521.573848][T22242] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.580199][T22242] ? __kasan_kmalloc+0x98/0xb0 [ 521.584967][T22242] ? xskq_create+0x54/0x170 [ 521.589480][T22242] vmalloc_user_noprof+0x74/0x80 [ 521.594428][T22242] ? xskq_create+0xb6/0x170 [ 521.598958][T22242] xskq_create+0xb6/0x170 [ 521.603309][T22242] xsk_init_queue+0xa1/0x100 [ 521.607911][T22242] xsk_setsockopt+0x4ea/0x950 [ 521.612594][T22242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 521.617797][T22242] ? __pfx_aa_sk_perm+0x10/0x10 [ 521.622649][T22242] ? __pfx_lock_acquire+0x10/0x10 [ 521.627675][T22242] ? aa_sock_opt_perm+0x79/0x120 [ 521.632617][T22242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 521.637814][T22242] do_sock_setsockopt+0x3af/0x720 [ 521.642848][T22242] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 521.648402][T22242] ? __fget_files+0x29/0x470 [ 521.652999][T22242] ? __fget_files+0x3f3/0x470 [ 521.657673][T22242] ? __fget_files+0x29/0x470 [ 521.662270][T22242] __sys_setsockopt+0x1a2/0x250 [ 521.667135][T22242] __x64_sys_setsockopt+0xb5/0xd0 [ 521.672164][T22242] do_syscall_64+0xf3/0x230 [ 521.676670][T22242] ? clear_bhb_loop+0x35/0x90 [ 521.681347][T22242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.687244][T22242] RIP: 0033:0x7fe57dd7e719 [ 521.691657][T22242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.711266][T22242] RSP: 002b:00007fe57ebcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 521.719688][T22242] RAX: ffffffffffffffda RBX: 00007fe57df36208 RCX: 00007fe57dd7e719 [ 521.727659][T22242] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 521.735627][T22242] RBP: 00007fe57ddf139e R08: 0000000000000004 R09: 0000000000000000 [ 521.743594][T22242] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.751562][T22242] R13: 0000000000000000 R14: 00007fe57df36208 R15: 00007ffc414583d8 [ 521.759563][T22242] [ 521.786075][T22242] Mem-Info: [ 521.789378][T22242] active_anon:8778 inactive_anon:0 isolated_anon:0 [ 521.789378][T22242] active_file:1749 inactive_file:38380 isolated_file:0 [ 521.789378][T22242] unevictable:768 dirty:215 writeback:0 [ 521.789378][T22242] slab_reclaimable:10957 slab_unreclaimable:120753 [ 521.789378][T22242] mapped:21485 shmem:1407 pagetables:661 [ 521.789378][T22242] sec_pagetables:0 bounce:0 [ 521.789378][T22242] kernel_misc_reclaimable:0 [ 521.789378][T22242] free:1320774 free_pcp:537 free_cma:0 [ 521.892031][T22248] netlink: 'syz.2.4954': attribute type 12 has an invalid length. [ 521.894551][T22242] Node 0 active_anon:35912kB inactive_anon:0kB active_file:6996kB inactive_file:153448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85940kB dirty:860kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12904kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 521.945981][T22242] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 521.956391][T22249] netlink: 'syz.1.4955': attribute type 2 has an invalid length. [ 522.077586][T22242] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.108461][T22242] lowmem_reserve[]: 0 2463 2464 0 0 [ 522.156308][T22258] netlink: 'syz.4.4958': attribute type 4 has an invalid length. [ 522.165585][T22242] Node 0 DMA32 free:1365512kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:37024kB inactive_anon:0kB active_file:6996kB inactive_file:152880kB unevictable:1536kB writepending:916kB present:3129332kB managed:2550480kB mlocked:0kB bounce:0kB free_pcp:1080kB local_pcp:224kB free_cma:0kB [ 522.235242][T22242] lowmem_reserve[]: 0 0 0 0 0 [ 522.241630][T22242] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 522.302635][T22242] lowmem_reserve[]: 0 0 0 0 0 [ 522.307420][T22242] Node 1 Normal free:3900920kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 522.374681][T22242] lowmem_reserve[]: 0 0 0 0 0 [ 522.379984][T22242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 522.405100][T22242] Node 0 DMA32: 5*4kB (UME) 27*8kB (UE) 23*16kB (E) 333*32kB (UME) 197*64kB (UME) 200*128kB (UME) 526*256kB (UME) 299*512kB (UME) 239*1024kB (UM) 6*2048kB (UME) 187*4096kB (UM) = 1360188kB [ 522.475362][T22242] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 522.490994][T22242] Node 1 Normal: 202*4kB (UE) 48*8kB (UME) 35*16kB (UME) 241*32kB (UME) 110*64kB (UME) 27*128kB (UM) 10*256kB (UME) 5*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 943*4096kB (M) = 3900920kB [ 522.558696][T22242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.586055][T22242] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.628830][T22242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 522.639432][T22278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4964'. [ 522.663681][T22278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4964'. [ 522.682375][T22242] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 522.698431][T22242] 42061 total pagecache pages [ 522.713416][T22278] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073224678850) [ 522.714286][T22242] 0 pages in swap cache [ 522.744694][T22242] Free swap = 124728kB [ 522.753267][T22278] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 522.756826][T22242] Total swap = 124996kB [ 522.784607][T22242] 2097051 pages RAM [ 522.796391][T22242] 0 pages HighMem/MovableOnly [ 522.807512][T22242] 427645 pages reserved [ 522.814076][T22242] 0 pages cma reserved [ 522.815179][T22278] batman_adv: batadv0: Interface deactivated: dummy0 [ 523.454635][T22306] netlink: 'syz.4.4973': attribute type 10 has an invalid length. [ 523.483934][T22306] netlink: 'syz.4.4973': attribute type 10 has an invalid length. [ 523.516731][T22306] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 523.887585][T22324] xt_TCPMSS: Only works on TCP SYN packets [ 524.407132][T22350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4985'. [ 524.435621][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4986'. [ 524.465246][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 524.866966][T22372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4995'. [ 525.030257][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4996'. [ 525.042126][T22378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4998'. [ 525.196980][T22390] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 525.285367][T22390] netlink: 'syz.2.5001': attribute type 2 has an invalid length. [ 525.304618][T22390] netlink: 'syz.2.5001': attribute type 1 has an invalid length. [ 525.329185][T22390] netlink: 'syz.2.5001': attribute type 2 has an invalid length. [ 525.601736][T22423] netlink: 'syz.3.5010': attribute type 7 has an invalid length. [ 525.625062][T22420] x_tables: duplicate entry at hook 2 [ 525.671338][T22425] veth0_to_hsr: entered promiscuous mode [ 525.793772][T22425] hsr_slave_0 (unregistering): left promiscuous mode [ 525.805650][T22428] bridge0: port 1(macvlan1) entered disabled state [ 525.838018][T22426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5011'. [ 526.012140][T22447] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5019'. [ 526.098658][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5021'. [ 526.382766][T22473] hsr0: VLAN not yet supported [ 526.444102][T22474] lo speed is unknown, defaulting to 1000 [ 526.458130][T22474] lo speed is unknown, defaulting to 1000 [ 526.600685][T22479] pim6reg1: entered promiscuous mode [ 526.622990][T22479] pim6reg1: entered allmulticast mode [ 526.781258][T22495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5036'. [ 527.121370][T22516] xt_policy: too many policy elements [ 527.445812][T22531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 527.461901][T22531] batman_adv: batadv0: Adding interface: ip6gretap1 [ 527.482543][T22531] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.525931][T22531] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 527.548527][T22536] batman_adv: batadv0: Removing interface: ip6gretap1 [ 527.794003][T10951] bridge_slave_1: left allmulticast mode [ 527.807450][T10951] bridge_slave_1: left promiscuous mode [ 527.826699][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.853663][T10951] bridge_slave_0: left allmulticast mode [ 527.864290][T10951] bridge_slave_0: left promiscuous mode [ 527.887256][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.483741][ T65] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.750575][T10951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.761212][T10951] bond0 (unregistering): Released all slaves [ 528.772766][T10951] bond1 (unregistering): Released all slaves [ 528.785694][T10951] bond2 (unregistering): Released all slaves [ 528.798164][T10951] bond3 (unregistering): Released all slaves [ 528.816281][T22548] macvlan2: entered promiscuous mode [ 528.821708][T22548] vlan0: entered promiscuous mode [ 529.065766][T22577] batadv0: entered promiscuous mode [ 529.081858][T22577] erspan0: entered promiscuous mode [ 529.089278][T22577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.098058][T22577] Cannot create hsr debugfs directory [ 529.306681][T22575] netlink: 'syz.1.5058': attribute type 1 has an invalid length. [ 529.421747][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.440285][T22595] __nla_validate_parse: 8 callbacks suppressed [ 529.440303][T22595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5064'. [ 529.482896][T10951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.501171][T10951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.502848][T22595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5064'. [ 529.523772][T10951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.530981][T22595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5064'. [ 529.531040][T22595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5064'. [ 529.567763][T10951] veth1_macvtap: left promiscuous mode [ 529.573563][T10951] veth0_macvtap: left promiscuous mode [ 529.579333][T10951] veth1_vlan: left promiscuous mode [ 529.585200][T10951] veth0_vlan: left promiscuous mode [ 530.610942][T22608] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 530.614524][T22604] lo speed is unknown, defaulting to 1000 [ 530.630936][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5068'. [ 530.683117][T22604] lo speed is unknown, defaulting to 1000 [ 530.767520][T22620] batadv_slave_1: entered promiscuous mode [ 530.793587][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5070'. [ 531.102063][T10951] IPVS: stop unused estimator thread 0... [ 531.164062][T22634] Cannot find set identified by id 632 to match [ 531.942835][T22680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5090'. [ 532.183771][T22696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5096'. [ 532.340793][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5101'. [ 532.476086][T22708] team0 (unregistering): Port device team_slave_0 removed [ 532.533099][T22708] team0 (unregistering): Port device team_slave_1 removed [ 532.700276][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5107'. [ 532.828771][T22732] netlink: 'syz.2.5110': attribute type 1 has an invalid length. [ 533.294464][T22744] netlink: 'syz.3.5114': attribute type 39 has an invalid length. [ 533.625430][T22769] vlan0: entered promiscuous mode [ 533.659330][T22769] vlan0: entered allmulticast mode [ 533.786058][T22779] ebtables: ebtables: counters copy to user failed while replacing table [ 533.954771][T22784] pim6reg: entered allmulticast mode [ 534.536058][T22818] vlan0: entered promiscuous mode [ 534.541838][T22818] bond0: entered promiscuous mode [ 534.556096][T22818] bond_slave_0: entered promiscuous mode [ 534.572567][T22818] bond_slave_1: entered promiscuous mode [ 534.581882][T22818] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 534.594685][T22818] bond0: left promiscuous mode [ 534.599468][T22818] bond_slave_0: left promiscuous mode [ 534.605509][T22818] bond_slave_1: left promiscuous mode [ 534.611235][T22818] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 534.749872][T22830] IPv6: Can't replace route, no match found [ 535.259846][T22856] __nla_validate_parse: 6 callbacks suppressed [ 535.259866][T22856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5146'. [ 535.480543][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 535.528690][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5153'. [ 535.748684][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5158'. [ 535.775235][T22889] Dead loop on virtual device ipvlan1, fix it urgently! [ 535.823215][T22894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5160'. [ 535.961356][T22902] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 536.010808][T22903] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5162'. [ 536.041486][T22903] netlink: 'syz.2.5162': attribute type 9 has an invalid length. [ 536.618630][T22942] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5170'. [ 537.122802][T22920] batadv_slave_1: left promiscuous mode [ 537.370342][T22920] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.386587][T22920] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.395990][T22920] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.404998][T22920] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.508237][T22920] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 537.529375][T22930] lo: entered promiscuous mode [ 537.541571][T22930] lo: left promiscuous mode [ 538.200876][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5187'. [ 538.749699][T23046] syz.3.5198: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 538.775408][T23051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5199'. [ 538.804902][T23046] CPU: 0 UID: 0 PID: 23046 Comm: syz.3.5198 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 538.815724][T23046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 538.825808][T23046] Call Trace: [ 538.829111][T23046] [ 538.832059][T23046] dump_stack_lvl+0x241/0x360 [ 538.836769][T23046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.841999][T23046] ? __pfx__printk+0x10/0x10 [ 538.846625][T23046] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 538.853070][T23046] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 538.859602][T23046] warn_alloc+0x278/0x410 [ 538.863958][T23046] ? stack_depot_save_flags+0x29/0x830 [ 538.864306][T23056] ip6t_rpfilter: unknown options [ 538.869425][T23046] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 538.869461][T23046] ? __pfx_warn_alloc+0x10/0x10 [ 538.869483][T23046] ? kasan_save_track+0x3f/0x80 [ 538.890166][T23046] ? __kasan_kmalloc+0x98/0xb0 [ 538.894956][T23046] ? xsk_setsockopt+0x4ea/0x950 [ 538.899809][T23046] ? do_sock_setsockopt+0x3af/0x720 [ 538.905014][T23046] ? __sys_setsockopt+0x1a2/0x250 [ 538.910035][T23046] ? __x64_sys_setsockopt+0xb5/0xd0 [ 538.915235][T23046] ? do_syscall_64+0xf3/0x230 [ 538.919904][T23046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.925979][T23046] __vmalloc_node_range_noprof+0x126/0x13f0 [ 538.931898][T23046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 538.938230][T23046] ? __kasan_kmalloc+0x98/0xb0 [ 538.942991][T23046] ? xskq_create+0x54/0x170 [ 538.947496][T23046] vmalloc_user_noprof+0x74/0x80 [ 538.952436][T23046] ? xskq_create+0xb6/0x170 [ 538.956948][T23046] xskq_create+0xb6/0x170 [ 538.961278][T23046] xsk_init_queue+0xa1/0x100 [ 538.965872][T23046] xsk_setsockopt+0x4ea/0x950 [ 538.970549][T23046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 538.975744][T23046] ? __pfx_aa_sk_perm+0x10/0x10 [ 538.980590][T23046] ? __pfx_lock_acquire+0x10/0x10 [ 538.985616][T23046] ? aa_sock_opt_perm+0x79/0x120 [ 538.990556][T23046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 538.995752][T23046] do_sock_setsockopt+0x3af/0x720 [ 539.000785][T23046] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 539.006327][T23046] ? __fget_files+0x29/0x470 [ 539.010916][T23046] ? __fget_files+0x3f3/0x470 [ 539.015588][T23046] ? __fget_files+0x29/0x470 [ 539.020183][T23046] __sys_setsockopt+0x1a2/0x250 [ 539.025037][T23046] __x64_sys_setsockopt+0xb5/0xd0 [ 539.030059][T23046] do_syscall_64+0xf3/0x230 [ 539.034560][T23046] ? clear_bhb_loop+0x35/0x90 [ 539.039240][T23046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.045133][T23046] RIP: 0033:0x7fe57dd7e719 [ 539.049545][T23046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.069151][T23046] RSP: 002b:00007fe57ec2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 539.077564][T23046] RAX: ffffffffffffffda RBX: 00007fe57df35f80 RCX: 00007fe57dd7e719 [ 539.085533][T23046] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000029 [ 539.093500][T23046] RBP: 00007fe57ddf139e R08: 0000000000000004 R09: 0000000000000000 [ 539.101465][T23046] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.109431][T23046] R13: 0000000000000000 R14: 00007fe57df35f80 R15: 00007ffc414583d8 [ 539.117411][T23046] [ 539.172330][T23046] Mem-Info: [ 539.175494][T23046] active_anon:7839 inactive_anon:0 isolated_anon:0 [ 539.175494][T23046] active_file:1813 inactive_file:38386 isolated_file:0 [ 539.175494][T23046] unevictable:768 dirty:274 writeback:0 [ 539.175494][T23046] slab_reclaimable:10992 slab_unreclaimable:117163 [ 539.175494][T23046] mapped:21578 shmem:1407 pagetables:664 [ 539.175494][T23046] sec_pagetables:0 bounce:0 [ 539.175494][T23046] kernel_misc_reclaimable:0 [ 539.175494][T23046] free:1325339 free_pcp:402 free_cma:0 [ 539.262949][T23046] Node 0 active_anon:31256kB inactive_anon:0kB active_file:7252kB inactive_file:153472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86312kB dirty:1096kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12404kB pagetables:2656kB sec_pagetables:0kB all_unreclaimable? no [ 539.306068][T23046] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 539.406656][T23046] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.456975][T23046] lowmem_reserve[]: 0 2463 2464 0 0 [ 539.471774][T23046] Node 0 DMA32 free:1383568kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:31020kB inactive_anon:0kB active_file:7252kB inactive_file:152904kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2550480kB mlocked:0kB bounce:0kB free_pcp:2264kB local_pcp:1264kB free_cma:0kB [ 539.513879][T23046] lowmem_reserve[]: 0 0 0 0 0 [ 539.518660][T23046] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 539.560595][T23046] lowmem_reserve[]: 0 0 0 0 0 [ 539.571788][T23046] Node 1 Normal free:3900920kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 539.617655][T23046] lowmem_reserve[]: 0 0 0 0 0 [ 539.631713][T23046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 539.645219][T23046] Node 0 DMA32: 248*4kB (UE) 572*8kB (UME) 400*16kB (UME) 386*32kB (UME) 273*64kB (UME) 205*128kB (UME) 530*256kB (UME) 303*512kB (UME) 241*1024kB (UM) 6*2048kB (UME) 187*4096kB (UM) = 1383872kB [ 539.669436][T23046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 539.692133][T23046] Node 1 Normal: 202*4kB (UE) 48*8kB (UME) 35*16kB (UME) 241*32kB (UME) 110*64kB (UME) 27*128kB (UM) 10*256kB (UME) 5*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 943*4096kB (M) = 3900920kB [ 539.725794][T23046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.742106][T23046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.755251][T23046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.777903][T23046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.791799][T23046] 41606 total pagecache pages [ 539.807129][T23046] 0 pages in swap cache [ 539.811839][T23046] Free swap = 124728kB [ 539.820829][T23046] Total swap = 124996kB [ 539.831245][T23046] 2097051 pages RAM [ 539.839828][T23046] 0 pages HighMem/MovableOnly [ 539.845896][T23046] 427645 pages reserved [ 539.850074][T23046] 0 pages cma reserved [ 539.852034][T23091] lo speed is unknown, defaulting to 1000 [ 539.861263][T23091] lo speed is unknown, defaulting to 1000 [ 539.923608][T23092] lo speed is unknown, defaulting to 1000 [ 539.930464][T23092] lo speed is unknown, defaulting to 1000 [ 540.028506][T23091] syzkaller1: entered promiscuous mode [ 540.042508][T23091] syzkaller1: entered allmulticast mode [ 540.153195][T23101] xt_hashlimit: overflow, try lower: 18446744073709551615/2047 [ 540.178984][T23103] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5214'. [ 540.391232][T23115] macvlan0: entered allmulticast mode [ 540.427362][T23116] netlink: 'syz.3.5218': attribute type 12 has an invalid length. [ 540.619060][T23123] netlink: 'syz.0.5220': attribute type 10 has an invalid length. [ 540.641651][T23125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5220'. [ 540.690440][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5220'. [ 540.863238][T23141] netlink: 'syz.1.5226': attribute type 2 has an invalid length. [ 541.026378][T23153] pim6reg1: entered promiscuous mode [ 541.031736][T23153] pim6reg1: entered allmulticast mode [ 541.270335][T23165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5234'. [ 541.341921][T23167] netlink: 'syz.2.5235': attribute type 1 has an invalid length. [ 541.369414][T23167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.384453][T23167] bond0: (slave bridge5): Enslaving as an active interface with a down link [ 541.671944][T23167] bond0 (unregistering): (slave bridge5): Releasing active interface [ 541.687196][T23167] bond0 (unregistering): Released all slaves [ 541.708782][T23173] delete_channel: no stack [ 541.745583][T23186] IPv6: Can't replace route, no match found [ 542.246762][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5253'. [ 542.266935][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5255'. [ 542.339824][T23223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5252'. [ 542.370505][T23223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5252'. [ 542.479765][T23240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5260'. [ 542.505160][T23240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.703831][T23254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5264'. [ 542.728406][T23252] lo speed is unknown, defaulting to 1000 [ 542.748570][T23252] lo speed is unknown, defaulting to 1000 [ 542.851834][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5269'. [ 542.956653][T23265] bridge0: port 3(ipvlan1) entered blocking state [ 542.982693][T23265] bridge0: port 3(ipvlan1) entered disabled state [ 543.009830][T23265] ipvlan1: entered allmulticast mode [ 543.040045][T23265] bridge0: entered allmulticast mode [ 543.063860][T23265] ipvlan1: left allmulticast mode [ 543.078219][T23265] bridge0: left allmulticast mode [ 543.387087][T23286] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.435466][T23288] lo speed is unknown, defaulting to 1000 [ 543.466134][T23286] vlan0: entered promiscuous mode [ 543.471829][T23286] bond0: entered promiscuous mode [ 543.503110][T23286] bond_slave_0: entered promiscuous mode [ 543.519186][T23286] bond_slave_1: entered promiscuous mode [ 543.533233][T23286] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 543.562895][T23286] bond0: left promiscuous mode [ 543.567770][T23286] bond_slave_0: left promiscuous mode [ 543.582893][T23286] bond_slave_1: left promiscuous mode [ 543.600470][T23286] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 543.660805][T23288] lo speed is unknown, defaulting to 1000 [ 543.967613][ T8749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.982884][ T8749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.044792][T23314] netlink: 'syz.4.5286': attribute type 3 has an invalid length. [ 544.305772][T23327] vlan0: entered allmulticast mode [ 544.444392][T23341] IPv6: NLM_F_REPLACE set, but no existing node found! [ 544.513809][T23341] syzkaller1: entered promiscuous mode [ 544.532878][T23341] syzkaller1: entered allmulticast mode [ 544.581105][T23347] dccp_invalid_packet: P.Data Offset(172) too large [ 545.054920][T23382] netlink: 'syz.1.5307': attribute type 3 has an invalid length. [ 545.064967][T23382] netlink: 'syz.1.5307': attribute type 2 has an invalid length. [ 545.729651][T23399] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001 [ 546.031747][T23427] __nla_validate_parse: 11 callbacks suppressed [ 546.031767][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5321'. [ 546.070244][T23428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5324'. [ 546.462258][T23461] lo speed is unknown, defaulting to 1000 [ 546.471302][T23461] lo speed is unknown, defaulting to 1000 [ 546.965432][T23477] x_tables: duplicate underflow at hook 3 [ 546.987775][T23477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5337'. [ 547.011374][T23478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5337'. [ 547.164103][T23485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5338'. [ 547.193523][T23485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5338'. [ 547.234218][T23485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5338'. [ 547.258395][T23485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5338'. [ 547.437502][T23491] xfrm1: entered allmulticast mode [ 547.578607][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5341'. [ 547.621827][T23504] lo speed is unknown, defaulting to 1000 [ 547.626955][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5344'. [ 547.628767][T23504] lo speed is unknown, defaulting to 1000 [ 547.721567][T10943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.753767][T10943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.819891][T23516] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 547.844824][T23516] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 548.668756][T23551] netlink: 'syz.1.5355': attribute type 11 has an invalid length. [ 549.038802][T23560] netlink: 'syz.1.5358': attribute type 2 has an invalid length. [ 549.810300][T23578] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 549.838976][T23578] vlan0: entered promiscuous mode [ 549.848724][T23578] bond0: entered promiscuous mode [ 549.863274][T23578] bond_slave_0: entered promiscuous mode [ 549.869280][T23578] bond_slave_1: entered promiscuous mode [ 549.876399][T23578] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 549.895569][T23578] bond0: left promiscuous mode [ 549.900374][T23578] bond_slave_0: left promiscuous mode [ 549.910138][T23578] bond_slave_1: left promiscuous mode [ 549.916001][T23578] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 550.005689][T23590] netlink: 'syz.2.5368': attribute type 21 has an invalid length. [ 550.066236][T23592] netlink: 'syz.1.5369': attribute type 1 has an invalid length. [ 550.099912][T23592] bond0: entered promiscuous mode [ 550.107835][T23592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.148244][T23598] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 550.159553][T23598] bond0: (slave batadv2): making interface the new active one [ 550.182555][T23598] batadv2: entered promiscuous mode [ 550.191854][T23598] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 550.350285][T23610] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 550.407034][T23612] netlink: 'syz.0.5375': attribute type 2 has an invalid length. [ 550.505781][T23614] ip6gre0: entered allmulticast mode [ 550.890669][T23632] IPVS: set_ctl: invalid protocol: 63 127.0.0.1:20002 [ 551.104573][T23642] __nla_validate_parse: 13 callbacks suppressed [ 551.104593][T23642] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5383'. [ 551.187656][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5383'. [ 551.213632][T23648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.224528][T23648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.252629][T23648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.262225][T23648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.308993][T23658] xt_NFQUEUE: number of total queues is 0 [ 551.345045][T23665] FAULT_INJECTION: forcing a failure. [ 551.345045][T23665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.360856][T23665] CPU: 1 UID: 0 PID: 23665 Comm: syz.0.5389 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 551.371655][T23665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 551.381729][T23665] Call Trace: [ 551.385029][T23665] [ 551.387982][T23665] dump_stack_lvl+0x241/0x360 [ 551.392693][T23665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.397917][T23665] ? __pfx__printk+0x10/0x10 [ 551.402541][T23665] ? __pfx_lock_release+0x10/0x10 [ 551.407602][T23665] should_fail_ex+0x3b0/0x4e0 [ 551.412314][T23665] _copy_from_iter+0x21f/0x1e70 [ 551.417221][T23665] ? __virt_addr_valid+0x183/0x530 [ 551.422353][T23665] ? __pfx_lock_release+0x10/0x10 [ 551.427413][T23665] ? __alloc_skb+0x28f/0x440 [ 551.432005][T23665] ? __pfx__copy_from_iter+0x10/0x10 [ 551.437297][T23665] ? __virt_addr_valid+0x183/0x530 [ 551.442418][T23665] ? __virt_addr_valid+0x183/0x530 [ 551.447528][T23665] ? __virt_addr_valid+0x45f/0x530 [ 551.452646][T23665] ? __check_object_size+0x48e/0x900 [ 551.457939][T23665] netlink_sendmsg+0x73d/0xcb0 [ 551.462733][T23665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.468034][T23665] ? aa_sock_msg_perm+0x91/0x160 [ 551.472985][T23665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.478270][T23665] __sock_sendmsg+0x221/0x270 [ 551.482948][T23665] ____sys_sendmsg+0x52a/0x7e0 [ 551.487719][T23665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.493018][T23665] __sys_sendmsg+0x292/0x380 [ 551.497619][T23665] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.502752][T23665] ? __pfx_vfs_write+0x10/0x10 [ 551.507530][T23665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 551.513872][T23665] ? do_syscall_64+0x100/0x230 [ 551.518638][T23665] ? do_syscall_64+0xb6/0x230 [ 551.523352][T23665] do_syscall_64+0xf3/0x230 [ 551.527865][T23665] ? clear_bhb_loop+0x35/0x90 [ 551.532545][T23665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.538437][T23665] RIP: 0033:0x7f181537e719 [ 551.542849][T23665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.562462][T23665] RSP: 002b:00007f1816229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.570891][T23665] RAX: ffffffffffffffda RBX: 00007f1815535f80 RCX: 00007f181537e719 [ 551.578860][T23665] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 551.586862][T23665] RBP: 00007f1816229090 R08: 0000000000000000 R09: 0000000000000000 [ 551.594838][T23665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.602804][T23665] R13: 0000000000000000 R14: 00007f1815535f80 R15: 00007ffe94901788 [ 551.610792][T23665] [ 551.646145][T23670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5391'. [ 551.739503][T23675] lo speed is unknown, defaulting to 1000 [ 551.746857][T23675] lo speed is unknown, defaulting to 1000 [ 551.857587][T23677] netlink: 'syz.2.5393': attribute type 2 has an invalid length. [ 551.964703][T23688] netlink: 'syz.0.5395': attribute type 9 has an invalid length. [ 551.980133][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5394'. [ 552.007195][T23688] macvlan3: entered promiscuous mode [ 552.023344][T23682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5394'. [ 552.034870][T23688] bond0: entered promiscuous mode [ 552.040282][T23688] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 552.048612][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5394'. [ 552.082426][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5394'. [ 552.603170][T23717] FAULT_INJECTION: forcing a failure. [ 552.603170][T23717] name failslab, interval 1, probability 0, space 0, times 0 [ 552.632658][T23717] CPU: 1 UID: 0 PID: 23717 Comm: syz.4.5402 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 552.643470][T23717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 552.653555][T23717] Call Trace: [ 552.656852][T23717] [ 552.659798][T23717] dump_stack_lvl+0x241/0x360 [ 552.664505][T23717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.669717][T23717] ? __pfx__printk+0x10/0x10 [ 552.674337][T23717] ? ref_tracker_alloc+0x332/0x490 [ 552.679473][T23717] should_fail_ex+0x3b0/0x4e0 [ 552.684173][T23717] ? skb_clone+0x20c/0x390 [ 552.688600][T23717] should_failslab+0xac/0x100 [ 552.693309][T23717] ? skb_clone+0x20c/0x390 [ 552.697745][T23717] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 552.703143][T23717] skb_clone+0x20c/0x390 [ 552.707403][T23717] __netlink_deliver_tap+0x3cc/0x7f0 [ 552.712717][T23717] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.717942][T23717] netlink_deliver_tap+0x19d/0x1b0 [ 552.723086][T23717] netlink_unicast+0x7c4/0x990 [ 552.727881][T23717] ? __pfx_netlink_unicast+0x10/0x10 [ 552.733197][T23717] ? __virt_addr_valid+0x183/0x530 [ 552.738331][T23717] ? __check_object_size+0x48e/0x900 [ 552.743647][T23717] netlink_sendmsg+0x8e4/0xcb0 [ 552.748445][T23717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.753759][T23717] ? aa_sock_msg_perm+0x91/0x160 [ 552.758722][T23717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.764030][T23717] __sock_sendmsg+0x221/0x270 [ 552.768725][T23717] ____sys_sendmsg+0x52a/0x7e0 [ 552.773521][T23717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.778849][T23717] __sys_sendmsg+0x292/0x380 [ 552.783475][T23717] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.788624][T23717] ? __pfx_vfs_write+0x10/0x10 [ 552.793436][T23717] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 552.799797][T23717] ? do_syscall_64+0x100/0x230 [ 552.804580][T23717] ? do_syscall_64+0xb6/0x230 [ 552.809273][T23717] do_syscall_64+0xf3/0x230 [ 552.813792][T23717] ? clear_bhb_loop+0x35/0x90 [ 552.818491][T23717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.824405][T23717] RIP: 0033:0x7ff01457e719 [ 552.828834][T23717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.848456][T23717] RSP: 002b:00007ff0152b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.856898][T23717] RAX: ffffffffffffffda RBX: 00007ff014735f80 RCX: 00007ff01457e719 [ 552.864883][T23717] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 552.872869][T23717] RBP: 00007ff0152b3090 R08: 0000000000000000 R09: 0000000000000000 [ 552.880860][T23717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.888845][T23717] R13: 0000000000000000 R14: 00007ff014735f80 R15: 00007ffcf0a696a8 [ 552.896853][T23717] [ 552.938715][T23717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5402'. [ 553.086180][T23720] netlink: 'syz.4.5405': attribute type 6 has an invalid length. [ 553.100599][T23722] x_tables: duplicate underflow at hook 1 [ 553.168800][T23725] lo speed is unknown, defaulting to 1000 [ 553.213536][T23725] lo speed is unknown, defaulting to 1000 [ 553.220122][T23727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5407'. [ 553.344775][T23732] netlink: 'syz.4.5409': attribute type 1 has an invalid length. [ 553.361291][T23734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5408'. [ 553.382551][ T54] ================================================================== [ 553.390647][ T54] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 553.398306][ T54] Read of size 8 at addr ffff88802f785b98 by task kworker/u9:0/54 [ 553.406115][ T54] [ 553.408438][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 553.419114][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 553.429180][ T54] Workqueue: hci0 hci_cmd_sync_work [ 553.434409][ T54] Call Trace: [ 553.437706][ T54] [ 553.440656][ T54] dump_stack_lvl+0x241/0x360 [ 553.445363][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.450586][ T54] ? __pfx__printk+0x10/0x10 [ 553.455191][ T54] ? _printk+0xd5/0x120 [ 553.459369][ T54] ? __virt_addr_valid+0x183/0x530 [ 553.464510][ T54] ? __virt_addr_valid+0x183/0x530 [ 553.469631][ T54] print_report+0x169/0x550 [ 553.474150][ T54] ? __virt_addr_valid+0x183/0x530 [ 553.479270][ T54] ? __virt_addr_valid+0x183/0x530 [ 553.484396][ T54] ? __virt_addr_valid+0x45f/0x530 [ 553.489529][ T54] ? __phys_addr+0xba/0x170 [ 553.494044][ T54] ? set_powered_sync+0x3a/0xc0 [ 553.498909][ T54] kasan_report+0x143/0x180 [ 553.503437][ T54] ? set_powered_sync+0x3a/0xc0 [ 553.508304][ T54] set_powered_sync+0x3a/0xc0 [ 553.512994][ T54] ? __pfx_set_powered_sync+0x10/0x10 [ 553.518379][ T54] hci_cmd_sync_work+0x22b/0x400 [ 553.523339][ T54] ? process_scheduled_works+0x976/0x1850 [ 553.529078][ T54] process_scheduled_works+0xa63/0x1850 [ 553.534652][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.540648][ T54] ? assign_work+0x364/0x3d0 [ 553.545253][ T54] worker_thread+0x870/0xd30 [ 553.549864][ T54] ? __kthread_parkme+0x169/0x1d0 [ 553.554924][ T54] ? __pfx_worker_thread+0x10/0x10 [ 553.560051][ T54] kthread+0x2f0/0x390 [ 553.564132][ T54] ? __pfx_worker_thread+0x10/0x10 [ 553.569263][ T54] ? __pfx_kthread+0x10/0x10 [ 553.573869][ T54] ret_from_fork+0x4b/0x80 [ 553.578312][ T54] ? __pfx_kthread+0x10/0x10 [ 553.582916][ T54] ret_from_fork_asm+0x1a/0x30 [ 553.587711][ T54] [ 553.590736][ T54] [ 553.593066][ T54] Allocated by task 23734: [ 553.597484][ T54] kasan_save_track+0x3f/0x80 [ 553.602173][ T54] __kasan_kmalloc+0x98/0xb0 [ 553.606779][ T54] __kmalloc_cache_noprof+0x19c/0x2c0 [ 553.612168][ T54] mgmt_pending_new+0x65/0x250 [ 553.616947][ T54] mgmt_pending_add+0x36/0x120 [ 553.621732][ T54] set_powered+0x3cd/0x5e0 [ 553.626166][ T54] hci_mgmt_cmd+0xc47/0x11d0 [ 553.630771][ T54] hci_sock_sendmsg+0x7b8/0x11c0 [ 553.635728][ T54] __sock_sendmsg+0x221/0x270 [ 553.640424][ T54] sock_write_iter+0x2d7/0x3f0 [ 553.645196][ T54] vfs_write+0xaeb/0xd30 [ 553.649451][ T54] ksys_write+0x183/0x2b0 [ 553.653791][ T54] do_syscall_64+0xf3/0x230 [ 553.658305][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.664219][ T54] [ 553.666550][ T54] Freed by task 23456: [ 553.670623][ T54] kasan_save_track+0x3f/0x80 [ 553.675313][ T54] kasan_save_free_info+0x40/0x50 [ 553.680359][ T54] __kasan_slab_free+0x59/0x70 [ 553.685143][ T54] kfree+0x1a0/0x440 [ 553.689054][ T54] settings_rsp+0x2bc/0x390 [ 553.693578][ T54] mgmt_pending_foreach+0xd1/0x130 [ 553.698707][ T54] __mgmt_power_off+0x106/0x430 [ 553.703573][ T54] hci_dev_close_sync+0x6c4/0x11c0 [ 553.708702][ T54] hci_dev_close+0x112/0x210 [ 553.713311][ T54] sock_do_ioctl+0x158/0x460 [ 553.717914][ T54] sock_ioctl+0x626/0x8e0 [ 553.722258][ T54] __se_sys_ioctl+0xf9/0x170 [ 553.726865][ T54] do_syscall_64+0xf3/0x230 [ 553.731382][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.737303][ T54] [ 553.739633][ T54] The buggy address belongs to the object at ffff88802f785b80 [ 553.739633][ T54] which belongs to the cache kmalloc-96 of size 96 [ 553.753521][ T54] The buggy address is located 24 bytes inside of [ 553.753521][ T54] freed 96-byte region [ffff88802f785b80, ffff88802f785be0) [ 553.767156][ T54] [ 553.769517][ T54] The buggy address belongs to the physical page: [ 553.775945][ T54] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f785 [ 553.784715][ T54] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 553.792185][ T54] page_type: f5(slab) [ 553.796183][ T54] raw: 00fff00000000000 ffff88801ac41280 ffffea0000cf6d00 dead000000000003 [ 553.804775][ T54] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 553.813356][ T54] page dumped because: kasan: bad access detected [ 553.819785][ T54] page_owner tracks the page as allocated [ 553.825495][ T54] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5844, tgid 5844 (syz-executor), ts 64720713628, free_ts 64716892495 [ 553.844756][ T54] post_alloc_hook+0x1f3/0x230 [ 553.849542][ T54] get_page_from_freelist+0x303f/0x3190 [ 553.855079][ T54] __alloc_pages_noprof+0x292/0x710 [ 553.860279][ T54] alloc_pages_mpol_noprof+0x3e8/0x680 [ 553.865737][ T54] alloc_slab_page+0x6a/0x140 [ 553.870408][ T54] allocate_slab+0x5a/0x2f0 [ 553.874906][ T54] ___slab_alloc+0xcd1/0x14b0 [ 553.879579][ T54] __slab_alloc+0x58/0xa0 [ 553.883906][ T54] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 553.890315][ T54] kmemdup_noprof+0x2a/0x60 [ 553.894815][ T54] xt_register_table+0xcb/0x750 [ 553.899660][ T54] ipt_register_table+0x16b/0x7a0 [ 553.904677][ T54] iptable_security_table_init+0x42/0x70 [ 553.910306][ T54] xt_find_table_lock+0x322/0x400 [ 553.915323][ T54] xt_request_find_table_lock+0x26/0x100 [ 553.920947][ T54] do_ipt_get_ctl+0x89e/0x1810 [ 553.925700][ T54] page last free pid 5844 tgid 5844 stack trace: [ 553.932014][ T54] free_unref_page+0xcfb/0xf20 [ 553.936772][ T54] __slab_free+0x31b/0x3d0 [ 553.941177][ T54] qlist_free_all+0x9a/0x140 [ 553.945755][ T54] kasan_quarantine_reduce+0x14f/0x170 [ 553.951200][ T54] __kasan_slab_alloc+0x23/0x80 [ 553.956040][ T54] __kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 553.962450][ T54] kmemdup_noprof+0x2a/0x60 [ 553.966947][ T54] ebt_register_table+0x1ad/0x10c0 [ 553.972050][ T54] find_inlist_lock_noload+0x186/0x270 [ 553.977530][ T54] do_ebt_get_ctl+0x3d7/0x29f0 [ 553.982285][ T54] nf_getsockopt+0x299/0x2c0 [ 553.986877][ T54] ip_getsockopt+0x222/0x2e0 [ 553.991461][ T54] tcp_getsockopt+0x163/0x1c0 [ 553.996129][ T54] do_sock_getsockopt+0x3c4/0x7e0 [ 554.001146][ T54] __sys_getsockopt+0x267/0x330 [ 554.005991][ T54] __x64_sys_getsockopt+0xb5/0xd0 [ 554.011007][ T54] [ 554.013323][ T54] Memory state around the buggy address: [ 554.018938][ T54] ffff88802f785a80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 554.026988][ T54] ffff88802f785b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 554.035035][ T54] >ffff88802f785b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 554.043078][ T54] ^ [ 554.047912][ T54] ffff88802f785c00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 554.055960][ T54] ffff88802f785c80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 554.064005][ T54] ================================================================== [ 554.080683][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 554.087908][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc6-syzkaller-01249-g774ca6d3bf24 #0 [ 554.098596][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 554.108662][ T54] Workqueue: hci0 hci_cmd_sync_work [ 554.113893][ T54] Call Trace: [ 554.117182][ T54] [ 554.120117][ T54] dump_stack_lvl+0x241/0x360 [ 554.124810][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.130019][ T54] ? __pfx__printk+0x10/0x10 [ 554.134628][ T54] ? preempt_schedule+0xe1/0xf0 [ 554.139506][ T54] ? vscnprintf+0x5d/0x90 [ 554.143876][ T54] panic+0x349/0x880 [ 554.147808][ T54] ? check_panic_on_warn+0x21/0xb0 [ 554.152938][ T54] ? __pfx_panic+0x10/0x10 [ 554.157375][ T54] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 554.163376][ T54] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 554.169727][ T54] ? print_report+0x502/0x550 [ 554.174430][ T54] check_panic_on_warn+0x86/0xb0 [ 554.179384][ T54] ? set_powered_sync+0x3a/0xc0 [ 554.184253][ T54] end_report+0x77/0x160 [ 554.188510][ T54] kasan_report+0x154/0x180 [ 554.193031][ T54] ? set_powered_sync+0x3a/0xc0 [ 554.197902][ T54] set_powered_sync+0x3a/0xc0 [ 554.202599][ T54] ? __pfx_set_powered_sync+0x10/0x10 [ 554.207985][ T54] hci_cmd_sync_work+0x22b/0x400 [ 554.212942][ T54] ? process_scheduled_works+0x976/0x1850 [ 554.218682][ T54] process_scheduled_works+0xa63/0x1850 [ 554.224257][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.230260][ T54] ? assign_work+0x364/0x3d0 [ 554.234869][ T54] worker_thread+0x870/0xd30 [ 554.239481][ T54] ? __kthread_parkme+0x169/0x1d0 [ 554.244523][ T54] ? __pfx_worker_thread+0x10/0x10 [ 554.249649][ T54] kthread+0x2f0/0x390 [ 554.253730][ T54] ? __pfx_worker_thread+0x10/0x10 [ 554.258867][ T54] ? __pfx_kthread+0x10/0x10 [ 554.263466][ T54] ret_from_fork+0x4b/0x80 [ 554.267900][ T54] ? __pfx_kthread+0x10/0x10 [ 554.272507][ T54] ret_from_fork_asm+0x1a/0x30 [ 554.277290][ T54] [ 554.280578][ T54] Kernel Offset: disabled [ 554.284892][ T54] Rebooting in 86400 seconds..