last executing test programs: 11.586577166s ago: executing program 0 (id=2480): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x406, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11.399911091s ago: executing program 0 (id=2481): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r4, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000580)=""/71, 0x47}], 0x2, &(0x7f0000000600)=""/233, 0xe9}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/20, 0x14}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003100)=""/210, 0xd2}, {&(0x7f0000003200)=""/158, 0x9e}], 0x2}, 0x38000}], 0x4, 0x20, &(0x7f0000003680)) write(r4, &(0x7f0000000000)="0a000200010078", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) 11.110512385s ago: executing program 0 (id=2483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000caf600"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x40080c0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x8000, 0x8df6, 0x7, 0x5, 0x9, 0x2, 0x3}, 0x1c) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) 9.041137555s ago: executing program 0 (id=2492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r1) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x200100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x2) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)={0x1a8, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x24}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r5}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0) 8.002998704s ago: executing program 0 (id=2500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) 4.749881282s ago: executing program 3 (id=2516): ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x1010, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffff8}, 0x2f) r5 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r3}, {r3, 0x1220}], 0x2, 0x0, 0x0, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r5) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x12c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in6=@mcast1, {0x5, 0x1}, {0x0, 0x4, 0x2, 0x7}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@policy_type={0xa}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xa, 0x40, 0x2e}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 4.234417305s ago: executing program 4 (id=2520): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004004) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f00000000c0)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/93, 0x5d}, {&(0x7f0000000440)=""/248, 0xf8}, {0x0}], 0x9, &(0x7f00000006c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000016c0)=@xdp, 0x80, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000018c0)=""/90, 0x5a}, {0x0}], 0x3}, 0x80000001}], 0x2, 0x2020, &(0x7f0000001ac0)={0x77359400}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0xc040) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x1, 0xff01, 0x500, 0x7, 0x80080}) write(r0, &(0x7f0000000040)="0d000000010001", 0x7) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000054) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x1000) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x20000c00) 3.748109572s ago: executing program 3 (id=2522): r0 = socket$inet(0x2, 0x2, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4f23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x0, 0x9, 0x0, 0x7, 0x7fffffff}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 3.24213222s ago: executing program 4 (id=2523): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f00) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.16713035s ago: executing program 2 (id=2524): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r1, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.729138636s ago: executing program 2 (id=2526): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @remote}, &(0x7f0000000780)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xc, 0x6, 0x7}]}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x213, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xd7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc5}, 0x42000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000007400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000007440)=0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 2.418090388s ago: executing program 3 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) pselect6(0xffffffffffffff45, &(0x7f00000001c0)={0x5, 0xf1, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80000, 0x407, 0x0, 0xfffffffffffffff9, 0x10000000ebb8, 0x100000000}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 2.417290138s ago: executing program 1 (id=2538): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5) r4 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x9) 2.262029756s ago: executing program 4 (id=2528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000001c0)=""/63, &(0x7f0000000240)=0x3f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x171e6968, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='contention_end\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x6}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01d65310009222d4fdc694004d6a2b3f29bd"], 0x18}}, 0x4000004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r9, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) 2.225570636s ago: executing program 2 (id=2529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e24, @loopback}, {0x6, @broadcast}, 0x81764109abc7f5ae, {0x2, 0x0, @multicast1}, 'lo\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000600)="92cf412a1fc5dd065eddeec77dfc730ac1c85d3ae471aa70f1689850149b259745b464aabbac9f9f1969cd4a5a82e40b42adc57f3da034ae9395b58340657afaa628c64e656d76014d9f8a08e605b2322815f77b0114", 0x56}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x8844) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x50, 0x0, &(0x7f0000000100)) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x1abb01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0x1260, 0x1260, 0x0, 0xfeffffff, 0xffffffff, 0x1348, 0x1348, 0x1348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz1\x00', {0x4}}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [0xff, 0x0, 0x0, 0xffffff00], 'bond0\x00', 'bridge0\x00', {}, {}, 0xc, 0x0, 0x7, 0x11}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1cf7dd27b10f3d090f3f521da606590c44a04d846eb6900bc043bc2951a"}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x10001, 0x4, 0xb, 0xa33, 0x8, 0x9, 0x400, 0xf3d]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x814) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r6) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e", 0x33}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000700000000000700010000a5000000e3030000000000"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) 2.211622181s ago: executing program 1 (id=2530): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x401) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x8}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x2, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r2) listen(r2, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.930534738s ago: executing program 4 (id=2531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4001000010000100feffffff00000000ac1414aa0000000000000000000000007f0000010000000000000000000000004e22000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000206c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000100000000000008cb020001000000000600000000000000000000000000040000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000050000000000000008001f0004000000480003"], 0x140}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001100)={'tunl0\x00', &(0x7f0000001080)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x8000, 0x8001, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0xfff, 0xa0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast}}}}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x0, 0x6, 0x1ff, 0x4f, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r8, 0x257, 0x100}, &(0x7f00000004c0)=0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004) sendto$packet(r4, &(0x7f0000000580)='@', 0x1, 0x20004004, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r13, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r11, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x840) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="4029bd7000"/20, @ANYRES32=0x0, @ANYBLOB="0c710400200000001400030076657468315f6d616376746170000000040016800500110009000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.509351712s ago: executing program 2 (id=2533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x15, 0x4, 0x0, 0x3d, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x3, 0x29}, @ssrr={0x89, 0x1f, 0xa5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @multicast2]}, @generic={0x0, 0xe, "83dc61b1ce5707432dd0595d"}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x6, 0x2}, {0x1, 0x4, "9b09"}]}]}}}}}}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg1\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000820000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000180)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) accept4(r10, 0x0, 0x0, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xaa}]}, 0x2c}}, 0x0) socket$inet(0x2, 0x800, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) 1.236038999s ago: executing program 1 (id=2534): socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000280)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 1.101823673s ago: executing program 4 (id=2535): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r5, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@crypto_settings, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7, 0x5, 0xfffb, 0x3ff, 0x4, 0x7fff, 0xfffb, 0x9, 0xfc8d, 0x2, 0x1, 0x8, 0xc8, 0x8001, 0x9, 0x8000]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) r11 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 1.057779836s ago: executing program 2 (id=2536): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400040000000000000000f0ffffffb702000008000000187a5a23e07521684587ff7f98eaf0042e23a6684aa3a22774ee36c7fe1f7763ecf82a27fd3ba3b8b3b40c095495b62f3b30b8e280a98990e54f42c2dde5b2427e237e1ffd9dd9fd581192a228815c63273b8402b47457610add6f33968012c81d380a456c28cd8e9c07da144a300978573901594adc44a7f2bf29a1222f0090b1d7eb672436d509545229c10089c652fb9f1921", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000700)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x2, 'syz0\x00', @null, 0x1, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @default, @default]}) ioctl$SIOCNRDECOBS(r6, 0x89e2) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122400000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) readv(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0xffefffff}, 0x1c, 0x0}}], 0x1, 0x4000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004073010500000000009500000400000000d4ffc96d7908ec3d764a35dafe7bf2eaea6a46faa3e756e012413100a31db0a8b36882d4f5170ac1f55a57e6a4e4930e4c611099c8a0e8cae95175eb5f2340f099865a1dc2d16d39be342e3a66ef7d221fa51c4aa5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000a020000000000000100000d000000000000000001000000000017ba78c817701872d3fe5bd6bed5c0ec4f393268e278f7f1470a47eced7e0f7e4aaae96d501662071424ad7b782df730ec0d4fbe39a74dc164448c80e00ee6afaccf152bf9db96da1455ed1f994c6d5812a4"], &(0x7f0000000200)=""/149, 0x3a, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r9, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 924.154292ms ago: executing program 3 (id=2537): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x2d6) r1 = accept4(r0, &(0x7f0000000280)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000480)=0x80, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e"], 0x20}}, 0x44850) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x16, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x39fa}, @jmp={0x5, 0x1, 0x3, 0x6, 0x5, 0x80, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x82}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x8, 0xfa, &(0x7f0000000740)=""/250, 0x41100, 0x40, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xe, 0x14, 0xfffffff8}, 0x10, 0x20851, 0xffffffffffffffff, 0xa, &(0x7f00000008c0)=[0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000b80)=[{0x5, 0x8001, 0x0, 0x9}, {0x3, 0x1, 0xa, 0x3}, {0x4, 0x4, 0x5}, {0x0, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x10, 0x3}, {0x2, 0x1, 0xd, 0x7}, {0x10005, 0x2, 0x5}, {0x4, 0x1, 0xe, 0x2}, {0x2, 0x1, 0x6, 0xa}, {0x4, 0x1, 0xd, 0x3}], 0x10, 0x401, @void, @value}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004c00)={0x1c, 0x2c, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26000000}, 0x0) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c022b", 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000d00)={r0, r3}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x1}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r9) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB, @ANYBLOB="080001"], 0x30}}, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f00000000c0)=r7}, 0x20) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000240)=0x4, 0x4) 923.145611ms ago: executing program 1 (id=2539): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ac01000016000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000ac000700e000000100"/228, @ANYRES32=0x0, @ANYBLOB='\x00'/83], 0x1ac}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d746"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000"], 0x70}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg$inet(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c0945a285ed531c7034e5f9c5d5edd102a9c9bb3fa294dbaefa3b579b193eb03ffb9c43c8cca93eb435d8bcf97f8c3f", 0x30}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000"], 0x78}}], 0x1, 0x40805) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e23, @multicast2}, 'veth1_vlan\x00'}) 753.914231ms ago: executing program 3 (id=2540): unshare(0x8040480) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eade3d7b4cd07ec3ee777de774fc7987cca41989251bb817a02d64aed696ea022191ec1d"}}]}]}, 0x64}}, 0x4000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x4}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r6, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) 748.186885ms ago: executing program 4 (id=2541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="845a2e6c580109f038399547c5e4a721", 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x3}}, 0x14}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xf2ff, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0xc0000000, 0x3, 0x6, {0xa, 0x2, 0x0, 0xfffe, 0xfff9, 0x7ff}, {0x1, 0x1, 0x7, 0xd53c, 0xc000, 0x4}, 0xa6c}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000001, 0x8, 0x8001, 0x401, 0x3, 0xfffffffd, 0x2, 0xfffffff7, 0x8, 0x39a, 0x7, 0x0, 0xffff, 0x7, 0x7990e5b, 0x1, 0x45, 0x0, 0x7, 0x2, 0x8, 0x4, 0xd2, 0xb, 0x8, 0x6, 0x10, 0x6, 0x49, 0x7fffffff, 0x9, 0xa4ee, 0xae6, 0x6, 0xb, 0xb, 0x8, 0x8, 0x4, 0x5, 0xd2, 0x7, 0x0, 0x101, 0x6, 0x3, 0x6, 0x8, 0x5, 0x8, 0x4, 0x700, 0x98, 0x7, 0x7, 0xfff, 0x3, 0x1, 0x0, 0x7f, 0x9, 0x6, 0x7fff, 0x6, 0xe59, 0xd2, 0x5, 0x4, 0xfffffff9, 0x2, 0x4da9, 0x6, 0x80, 0x0, 0x2, 0x8, 0x7, 0x10, 0xfffff350, 0x4, 0xb, 0x7, 0x9, 0xfffffca2, 0x9, 0x2, 0x40, 0xffff, 0x6, 0x2, 0xbdd, 0x80000000, 0x292, 0x9, 0x0, 0x5, 0x40, 0x7cf, 0xfff, 0xc81b, 0x7fff, 0x6, 0x0, 0x57b, 0x10001, 0x9, 0xf, 0x3c83, 0x6, 0x7, 0xe, 0x6, 0x6, 0x0, 0xffffffff, 0x5, 0x11f7800, 0x5, 0x6, 0xff, 0x8, 0x200, 0x8e2, 0x9e, 0x7, 0x6, 0x7, 0x5, 0x27a, 0x10000, 0xfff, 0x3, 0xffffff80, 0x4, 0x80, 0x9, 0x800, 0x5, 0x4, 0x4, 0x4, 0x8, 0x5, 0x200, 0x7028, 0x4, 0x7, 0x298, 0x100, 0x5, 0x8001, 0x10, 0x1, 0xd4f, 0x816, 0x7, 0xe, 0x1, 0x1, 0x4, 0x8, 0x2e9610a9, 0x3, 0xd8, 0x80, 0x5, 0x9, 0x80000003, 0x1, 0x9, 0xa0, 0x9, 0x6, 0x1180, 0x1000, 0x3, 0x9, 0x5, 0xd6a, 0x2, 0x2, 0x8000, 0x2, 0x5, 0xe, 0x4a20e965, 0x0, 0x5, 0x2, 0x1, 0xb4, 0x98, 0x6, 0x40, 0x0, 0x7, 0x8, 0x72df, 0x9, 0x9, 0x8, 0x7, 0x7ff, 0x7, 0x9, 0x4, 0x9, 0xe8, 0xffffffff, 0x200, 0x8001, 0xfffffff9, 0x9, 0x31, 0xffff, 0x1000, 0x1, 0x747, 0x681c3fd2, 0x6, 0x10000, 0x2, 0x4, 0xffff, 0x7, 0xffff, 0x7, 0x8, 0x401, 0x36, 0x8, 0xd, 0x7ff, 0x436, 0x2, 0x7, 0x0, 0x9, 0x5b1, 0xfffffff8, 0x5b, 0x9, 0x7, 0x848, 0x7f, 0x4, 0x7fffffff, 0x5, 0x5, 0x1, 0x0, 0x0, 0x5, 0x5862, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x401, 0x6, 0x0, 0x0, 0x5, 0x2, 0x7ff, 0x7ff, 0x3, 0x4, 0x2, 0x153, 0x6, 0x6, 0xffff, 0x6, 0x5, 0x6, 0xcf13, 0x5, 0x8ef, 0x2, 0x80000001, 0x1, 0xfffffff7, 0x2, 0x4, 0x0, 0x7ff, 0x80000000, 0xffffffff, 0x1, 0xfff, 0xf, 0x7, 0x0, 0x4, 0x81, 0x6, 0x3, 0x80, 0x31d42533, 0x800, 0x0, 0xe2a, 0x9, 0x2000000, 0x7, 0x9, 0xb819, 0x6, 0x4, 0x3, 0x9, 0x7, 0xb84, 0x7, 0x3ff, 0x2, 0x0, 0xbfb, 0xd, 0x1, 0x5, 0x2, 0x40, 0x2, 0xf28, 0xb0, 0x6, 0x4, 0xdaf, 0x0, 0x4, 0x1bf, 0xb, 0x7, 0x1000, 0x8, 0x5, 0x0, 0x0, 0x800, 0x401, 0x0, 0x1000200, 0x8000, 0x0, 0xdee, 0x8695, 0x0, 0xf01, 0x1, 0x10001, 0xb, 0x7f, 0x9, 0x1, 0xfffffffd, 0x9, 0x7fff, 0xa93, 0x2, 0x0, 0x2, 0x40, 0x5, 0x0, 0x3, 0x76e, 0xd, 0x4, 0x1ff, 0x6, 0x9, 0x4, 0x4, 0x0, 0x5, 0x8, 0x8, 0x853, 0x80000000, 0x8, 0xbc, 0x8000, 0x3d8, 0x8, 0xfff, 0x200, 0x0, 0x61, 0xfffffeff, 0x4, 0x73294eaf, 0x0, 0x9, 0x80000001, 0xb319, 0x9, 0x8, 0x4077d5b8, 0x2, 0x3, 0x7, 0x2, 0x4, 0x3, 0x5491, 0x2, 0x7, 0x200000e, 0x2, 0x6, 0x5f3a, 0x5f24, 0x9, 0x4, 0x5, 0x9, 0x401, 0x3, 0x8, 0x80, 0x2, 0x1710dc0f, 0xffff, 0xb236, 0x100, 0xbff9, 0xfffffffe, 0x101, 0x9, 0x7fffffff, 0xffffff04, 0x7, 0xa93, 0x8, 0xd8b2, 0x1a2, 0x4, 0xaf93, 0xfff, 0x80, 0x3, 0x0, 0x0, 0x401, 0xfffffffe, 0x8, 0x9, 0x9, 0x2, 0xffff, 0x9, 0x5, 0xfffffffd, 0x4, 0x7, 0x0, 0x4, 0x2, 0x7, 0x8, 0xdbb, 0x9, 0x400, 0x6, 0x4, 0x3, 0x3, 0x9, 0x10001, 0x4, 0x65, 0x5, 0x2, 0x80000000, 0x6, 0x3, 0x4, 0xc8, 0x6, 0x9, 0x0, 0x2000000, 0x10001, 0x1, 0x7, 0x6, 0x72e, 0x3, 0x8, 0x8, 0x63, 0x4, 0x8, 0x0, 0x6, 0x6, 0x5, 0x80, 0x6, 0x4, 0x9, 0x4, 0x101, 0x6, 0x8, 0x1000, 0x5d8, 0x3, 0x8, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) bind$rds(r2, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) 681.519868ms ago: executing program 1 (id=2542): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5) r4 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x9) 613.374743ms ago: executing program 0 (id=2543): r0 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10001, 0x5, 0x10000, 0x1, 0x1}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) unshare(0xc000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1c000000000000, 0x9}, 0x0, &(0x7f0000000980)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c008014000000110005000000000000000000000000000001000000", @ANYRES64=r0, @ANYRES32=r7], 0x1c}}, 0x4000900) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000940)={&(0x7f0000000240)=@generic, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f00000007c0)=""/204, 0xcc}], 0x6, &(0x7f0000000440)=""/19, 0x13}, 0x2) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r9, 0x89e2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 597.676387ms ago: executing program 3 (id=2544): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xc, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000240)=0x69a1, 0x4) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x8, 0xbf, 0x4000, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xc, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r2, &(0x7f0000001840)={&(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000001780), 0x0, &(0x7f0000001800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x40041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r5, &(0x7f0000001480)=""/4096, 0x38) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 423.895768ms ago: executing program 1 (id=2545): socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 0s ago: executing program 2 (id=2546): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket(0x11, 0x3, 0x9) getsockopt$bt_BT_SECURITY(r1, 0x107, 0x11, 0x0, 0x20000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xc, 0x4, 0x2, 0x2b, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xf, 0x7d, [@empty, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x8, [{@rand_addr=0x64010100, 0x9}]}]}}}}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) accept4$ax25(r3, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0xffffffffffffffb8, 0x80c00) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) close(0x3) kernel console output (not intermixed with test programs): d0: (slave bond2): Releasing backup interface [ 273.115321][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 273.184261][T10054] bridge0: port 3(gretap0) entered blocking state [ 273.195902][T10054] bridge0: port 3(gretap0) entered disabled state [ 273.211144][T10054] gretap0: entered allmulticast mode [ 273.217972][T10054] gretap0: entered promiscuous mode [ 273.225342][T10054] bridge0: port 3(gretap0) entered blocking state [ 273.231942][T10054] bridge0: port 3(gretap0) entered forwarding state [ 273.256816][T10048] vlan2: entered allmulticast mode [ 273.261994][T10048] bond0: entered allmulticast mode [ 273.274635][T10048] bridge0: port 1(vlan2) entered blocking state [ 273.281530][T10048] bridge0: port 1(vlan2) entered disabled state [ 273.291202][T10048] vlan2: entered promiscuous mode [ 273.296540][T10048] bond0: entered promiscuous mode [ 273.560373][T10064] xt_hashlimit: invalid rate [ 273.793588][T10068] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 273.823674][T10068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1228'. [ 273.832416][T10070] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 273.884300][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 274.231036][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1232'. [ 275.241552][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 275.724264][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 275.737599][T10107] netlink: 'syz.4.1239': attribute type 29 has an invalid length. [ 275.765818][T10105] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 275.820158][T10105] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 276.894264][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 276.933755][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 277.558948][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 277.581767][T10136] pimreg0: tun_chr_ioctl cmd 1074025677 [ 277.621112][T10136] pimreg0: linktype set to 65534 [ 279.536410][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 279.617741][T10190] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.106850][T10202] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.159574][T10205] openvswitch: netlink: Message has 8 unknown bytes. [ 280.242082][T10205] netlink: 'syz.3.1268': attribute type 12 has an invalid length. [ 280.412057][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 280.512193][T10217] openvswitch: netlink: Missing valid actions attribute. [ 280.538540][T10217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.019198][T10228] netlink: 'syz.3.1273': attribute type 16 has an invalid length. [ 281.032418][T10228] netlink: 'syz.3.1273': attribute type 17 has an invalid length. [ 281.060509][T10228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.635629][T10250] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.720006][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 281.775329][T10254] gretap0: left allmulticast mode [ 281.781220][T10254] gretap0: left promiscuous mode [ 281.787825][T10254] bridge0: port 3(gretap0) entered disabled state [ 281.848842][T10254] veth3: left allmulticast mode [ 281.863742][T10254] bridge0: port 2(veth3) entered disabled state [ 281.894784][T10254] ip6gretap2: left allmulticast mode [ 281.900214][T10254] ip6gretap2: left promiscuous mode [ 281.905760][T10254] bridge0: port 1(ip6gretap2) entered disabled state [ 281.944841][T10265] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 282.190654][T10270] netlink: 'syz.0.1288': attribute type 16 has an invalid length. [ 282.235391][T10270] netlink: 'syz.0.1288': attribute type 17 has an invalid length. [ 282.317657][T10270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.485642][T10284] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1290'. [ 282.597839][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 283.040619][T10298] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.430123][T10309] openvswitch: netlink: Key type 216 is out of range max 32 [ 283.585838][T10314] netlink: 'syz.4.1305': attribute type 16 has an invalid length. [ 283.593833][T10314] netlink: 'syz.4.1305': attribute type 17 has an invalid length. [ 283.619056][T10318] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 283.629191][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 283.638196][T10314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.639357][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 283.673222][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 283.692778][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 284.045102][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 284.187285][T10333] veth0_vlan: left allmulticast mode [ 284.221865][T10333] macsec1: left promiscuous mode [ 284.231747][T10333] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.242486][T10333] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.256468][T10333] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.266404][T10333] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.279717][T10333] geneve2: left promiscuous mode [ 284.298600][T10336] vlan2: left promiscuous mode [ 284.304366][T10336] bond0: left promiscuous mode [ 284.309915][T10336] bridge0: port 1(vlan2) entered disabled state [ 284.667252][T10347] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.842187][T10356] netlink: 'syz.3.1317': attribute type 16 has an invalid length. [ 284.904207][T10356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.107850][T10366] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1322'. [ 285.339789][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 285.366803][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 285.378615][T10372] hsr_slave_0: left promiscuous mode [ 285.965435][T10387] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.109345][T10391] pim6reg: entered allmulticast mode [ 286.138955][T10390] pim6reg: left allmulticast mode [ 286.539210][T10415] validate_nla: 1 callbacks suppressed [ 286.539229][T10415] netlink: 'syz.4.1340': attribute type 16 has an invalid length. [ 286.553393][T10415] netlink: 'syz.4.1340': attribute type 17 has an invalid length. [ 286.563685][T10413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 286.579182][T10415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.588013][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 286.783034][T10424] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.989646][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1342'. [ 287.044986][T10440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1342'. [ 287.582543][T10461] netlink: 'syz.1.1355': attribute type 16 has an invalid length. [ 287.591027][T10461] netlink: 'syz.1.1355': attribute type 17 has an invalid length. [ 287.609966][T10461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.924425][T10477] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.930856][T10475] netlink: 'syz.1.1371': attribute type 16 has an invalid length. [ 287.949726][T10475] netlink: 'syz.1.1371': attribute type 17 has an invalid length. [ 287.971207][T10475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.028200][T10479] bridge0: port 1(gretap0) entered blocking state [ 288.043612][T10479] bridge0: port 1(gretap0) entered disabled state [ 288.073050][T10479] gretap0: entered allmulticast mode [ 288.129056][T10479] gretap0: entered promiscuous mode [ 288.179367][T10483] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 288.276211][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 288.326865][T10488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1374'. [ 289.132673][T10505] batman_adv: batadv0: Interface deactivated: vlan3 [ 289.143098][T10505] batman_adv: batadv0: Removing interface: vlan3 [ 289.171997][T10505] bond0: (slave bond2): Releasing active interface [ 289.211791][T10505] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.220520][T10505] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.229251][T10505] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.237748][T10505] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.327667][T10505] team0: Port device vxlan0 removed [ 289.442399][T10513] netlink: 'syz.0.1385': attribute type 303 has an invalid length. [ 289.878540][T10523] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 289.956074][T10525] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 289.989600][T10525] vlan0: entered promiscuous mode [ 289.994894][T10525] team0: entered promiscuous mode [ 290.001141][T10525] team0: Device vlan0 is already an upper device of the team interface [ 290.066373][T10527] netlink: 'syz.3.1380': attribute type 16 has an invalid length. [ 290.074641][T10527] netlink: 'syz.3.1380': attribute type 17 has an invalid length. [ 290.113601][T10527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.406282][T10538] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 290.731974][T10553] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.788518][T10555] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1391'. [ 290.840195][T10556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.103365][T10566] batman_adv: batadv0: Adding interface: dummy0 [ 291.109787][T10566] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 291.143884][T10566] batman_adv: batadv0: Interface activated: dummy0 [ 291.151759][T10568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1395'. [ 291.205830][T10566] batadv0: mtu less than device minimum [ 291.213828][T10566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 291.226381][T10566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 291.238521][T10566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 291.250881][T10566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 291.573269][T10576] validate_nla: 4 callbacks suppressed [ 291.573287][T10576] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 291.579201][T10574] netlink: 'syz.2.1399': attribute type 16 has an invalid length. [ 291.600129][T10577] batman_adv: batadv0: Interface deactivated: dummy0 [ 291.627944][T10577] batman_adv: batadv0: Removing interface: dummy0 [ 291.638440][T10574] netlink: 'syz.2.1399': attribute type 17 has an invalid length. [ 291.715551][T10574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.737325][T10574] net_ratelimit: 16 callbacks suppressed [ 291.737337][T10574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.877113][T10584] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.100361][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1407'. [ 292.145501][T10592] veth0: entered promiscuous mode [ 292.162699][T10593] netlink: 'syz.1.1406': attribute type 16 has an invalid length. [ 292.171191][T10593] netlink: 'syz.1.1406': attribute type 17 has an invalid length. [ 292.183310][T10592] veth0: left promiscuous mode [ 292.236888][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1408'. [ 292.264048][T10593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.743371][T10608] netlink: 'syz.0.1411': attribute type 16 has an invalid length. [ 292.752515][T10608] netlink: 'syz.0.1411': attribute type 17 has an invalid length. [ 292.792595][T10608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.854309][T10612] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 293.010146][T10616] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1413'. [ 293.025926][T10616] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1413'. [ 293.059721][T10618] gretap0: left allmulticast mode [ 293.065780][T10618] gretap0: left promiscuous mode [ 293.071245][T10618] bridge0: port 1(gretap0) entered disabled state [ 293.252558][T10624] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.257326][T10622] netlink: 'syz.4.1417': attribute type 16 has an invalid length. [ 293.298765][T10622] netlink: 'syz.4.1417': attribute type 17 has an invalid length. [ 293.312172][T10622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.521873][T10631] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1421'. [ 293.534829][T10632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.556537][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 293.567448][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 293.576654][T10631] nbd: error processing sock list [ 293.777227][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 293.820632][T10647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.840391][T10644] xt_hashlimit: size too large, truncated to 1048576 [ 294.436961][T10665] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 294.645839][T10675] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 294.666025][T10675] team0: Port device wlan1 added [ 294.701988][T10674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.730368][T10671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.031648][T10683] vlan0: entered promiscuous mode [ 295.229074][T10687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.288441][T10689] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 295.301163][T10689] CPU: 1 UID: 0 PID: 10689 Comm: syz.2.1441 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 295.301189][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.301205][T10689] Call Trace: [ 295.301211][T10689] [ 295.301219][T10689] dump_stack_lvl+0x241/0x360 [ 295.301255][T10689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.301278][T10689] ? __pfx__printk+0x10/0x10 [ 295.301303][T10689] ? __kmalloc_cache_noprof+0x243/0x390 [ 295.301348][T10689] ? sysfs_warn_dup+0x51/0xa0 [ 295.301380][T10689] sysfs_warn_dup+0x8e/0xa0 [ 295.301407][T10689] sysfs_do_create_link_sd+0xbe/0x110 [ 295.301438][T10689] device_add_class_symlinks+0x1c5/0x250 [ 295.301464][T10689] device_add+0x553/0xbf0 [ 295.301493][T10689] wiphy_register+0x1922/0x2650 [ 295.301540][T10689] ? __pfx_wiphy_register+0x10/0x10 [ 295.301569][T10689] ? minstrel_ht_alloc+0x84b/0x940 [ 295.301617][T10689] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 295.301660][T10689] ieee80211_register_hw+0x35d9/0x42e0 [ 295.301699][T10689] ? ieee80211_register_hw+0x1691/0x42e0 [ 295.301731][T10689] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 295.301767][T10689] ? __asan_memset+0x23/0x50 [ 295.301788][T10689] ? __hrtimer_init+0x170/0x250 [ 295.301816][T10689] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 295.301882][T10689] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 295.301910][T10689] ? trace_kmalloc+0x1f/0xd0 [ 295.301937][T10689] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 295.301968][T10689] ? kstrndup+0xbb/0x150 [ 295.302011][T10689] hwsim_new_radio_nl+0xece/0x2290 [ 295.302057][T10689] ? __pfx___nla_validate_parse+0x10/0x10 [ 295.302087][T10689] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 295.302156][T10689] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 295.302194][T10689] genl_rcv_msg+0xb1f/0xec0 [ 295.302232][T10689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.302291][T10689] ? __pfx_lock_acquire+0x10/0x10 [ 295.302323][T10689] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 295.302354][T10689] ? __pfx___might_resched+0x10/0x10 [ 295.302395][T10689] netlink_rcv_skb+0x206/0x480 [ 295.302428][T10689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.302457][T10689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.302527][T10689] genl_rcv+0x28/0x40 [ 295.302550][T10689] netlink_unicast+0x7f6/0x990 [ 295.302600][T10689] ? __pfx_netlink_unicast+0x10/0x10 [ 295.302642][T10689] ? __virt_addr_valid+0x45f/0x530 [ 295.302662][T10689] ? __phys_addr_symbol+0x2f/0x70 [ 295.302679][T10689] ? __check_object_size+0x47a/0x730 [ 295.302710][T10689] netlink_sendmsg+0x8de/0xcb0 [ 295.302741][T10689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.302764][T10689] ? aa_sock_msg_perm+0x91/0x160 [ 295.302799][T10689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.302816][T10689] __sock_sendmsg+0x221/0x270 [ 295.302847][T10689] ____sys_sendmsg+0x53a/0x860 [ 295.302880][T10689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.302901][T10689] ? __fget_files+0x2a/0x410 [ 295.302931][T10689] ? __fget_files+0x2a/0x410 [ 295.302968][T10689] __sys_sendmsg+0x269/0x350 [ 295.302997][T10689] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.303065][T10689] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.303096][T10689] ? do_syscall_64+0x100/0x230 [ 295.303128][T10689] ? do_syscall_64+0xb6/0x230 [ 295.303158][T10689] do_syscall_64+0xf3/0x230 [ 295.303185][T10689] ? clear_bhb_loop+0x35/0x90 [ 295.303214][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.303248][T10689] RIP: 0033:0x7f4bbc58d169 [ 295.303268][T10689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.303283][T10689] RSP: 002b:00007f4bbd4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.303310][T10689] RAX: ffffffffffffffda RBX: 00007f4bbc7a5fa0 RCX: 00007f4bbc58d169 [ 295.303324][T10689] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 295.303337][T10689] RBP: 00007f4bbc60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.303349][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.303360][T10689] R13: 0000000000000000 R14: 00007f4bbc7a5fa0 R15: 00007ffd5ac741e8 [ 295.303390][T10689] [ 295.820361][T10693] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 296.124324][T10703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.196414][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 296.354912][T10718] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 296.378779][T10713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.556142][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 296.571484][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 296.590015][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 296.781263][T10740] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 297.041305][T10750] validate_nla: 18 callbacks suppressed [ 297.041325][T10750] netlink: 'syz.0.1463': attribute type 16 has an invalid length. [ 297.055297][T10750] netlink: 'syz.0.1463': attribute type 17 has an invalid length. [ 297.066125][T10752] netlink: 'syz.4.1464': attribute type 16 has an invalid length. [ 297.078086][T10752] netlink: 'syz.4.1464': attribute type 17 has an invalid length. [ 297.088677][T10750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.110492][T10752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.269325][T10756] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 297.365607][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 297.384000][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 297.418629][T10758] syzkaller0: entered promiscuous mode [ 297.435201][T10758] syzkaller0: entered allmulticast mode [ 297.475593][T10765] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 297.598469][T10765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.948856][T10774] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 299.715281][T10792] netlink: 'syz.4.1476': attribute type 16 has an invalid length. [ 299.723281][T10792] netlink: 'syz.4.1476': attribute type 17 has an invalid length. [ 299.760486][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.882691][T10798] netlink: 'syz.3.1478': attribute type 16 has an invalid length. [ 299.916596][T10800] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 299.949831][T10798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.081122][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 300.127567][T10804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.154940][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 300.200510][T10806] macvtap1: entered promiscuous mode [ 300.207934][T10806] batadv0: entered promiscuous mode [ 300.213333][T10806] macvtap1: entered allmulticast mode [ 300.219410][T10806] batadv0: entered allmulticast mode [ 300.231654][T10806] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 300.597046][T10825] batman_adv: batadv0: Adding interface: ip6gretap3 [ 300.610501][T10825] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.638573][T10825] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active [ 300.642146][T10827] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1489'. [ 300.716805][T10829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.724160][T10825] xt_connbytes: Forcing CT accounting to be enabled [ 300.762273][T10825] SET target dimension over the limit! [ 301.084794][T10840] tipc: Failed to remove unknown binding: 66,1,1/4:3907697453/3907697455 [ 301.114553][T10841] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 301.140430][T10842] tipc: Failed to remove unknown binding: 66,1,1/4:3907697453/3907697455 [ 301.176897][T10841] team0: Port device wlan1 removed [ 301.205294][T10841] batman_adv: batadv0: Removing interface: ip6gretap3 [ 301.212219][T10842] tipc: Failed to remove unknown binding: 66,1,1/4:3907697453/3907697455 [ 301.291425][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 301.357458][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1496'. [ 301.403361][T10847] veth7: entered promiscuous mode [ 301.410550][T10847] bridge3: port 1(veth7) entered blocking state [ 301.417272][T10847] bridge3: port 1(veth7) entered disabled state [ 301.425889][T10847] veth7: entered allmulticast mode [ 301.666211][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 301.717766][T10856] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 301.730501][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 302.679659][T10879] validate_nla: 5 callbacks suppressed [ 302.679680][T10879] netlink: 'syz.1.1501': attribute type 16 has an invalid length. [ 302.693311][T10879] netlink: 'syz.1.1501': attribute type 17 has an invalid length. [ 302.883090][T10879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.956572][T10884] netlink: 'syz.3.1503': attribute type 16 has an invalid length. [ 302.975201][T10884] netlink: 'syz.3.1503': attribute type 17 has an invalid length. [ 303.010561][T10884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.446186][T10900] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 303.807630][T10912] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 303.989496][T10917] netlink: 'syz.0.1518': attribute type 16 has an invalid length. [ 304.022309][T10917] netlink: 'syz.0.1518': attribute type 17 has an invalid length. [ 304.104865][T10917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.122932][T10925] netlink: 'syz.1.1519': attribute type 16 has an invalid length. [ 304.155946][T10925] netlink: 'syz.1.1519': attribute type 17 has an invalid length. [ 304.208471][T10925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.344607][T10933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.426325][T10933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.554554][T10942] bond3: (slave ip6gretap2): Releasing backup interface [ 304.600317][T10942] veth7: left allmulticast mode [ 304.620451][T10942] bridge3: port 1(veth7) entered disabled state [ 305.279832][T10969] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 305.393396][T10973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.900523][T10981] bond0 (unregistering): Released all slaves [ 306.442574][T11000] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 306.557838][T11008] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 306.704546][T11018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.157797][T11034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.204250][T11031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.211488][T11031] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 307.275786][T11031] bond2: (slave vcan0): Error -95 calling set_mac_address [ 307.706238][T11054] validate_nla: 8 callbacks suppressed [ 307.706259][T11054] netlink: 'syz.3.1561': attribute type 10 has an invalid length. [ 307.746662][T11051] netlink: 'syz.0.1562': attribute type 16 has an invalid length. [ 307.755787][T11051] netlink: 'syz.0.1562': attribute type 17 has an invalid length. [ 307.784814][T11056] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.828454][T11051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.219627][T11068] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 308.256723][T11054] infiniband syz1: set down [ 308.270540][T11054] infiniband syz1: added team_slave_0 [ 308.345880][T11054] RDS/IB: syz1: added [ 308.381185][T11054] smc: adding ib device syz1 with port count 1 [ 308.402976][T11054] smc: ib device syz1 port 1 has pnetid [ 308.462131][T11076] netlink: 'syz.1.1566': attribute type 16 has an invalid length. [ 308.470415][T11076] netlink: 'syz.1.1566': attribute type 17 has an invalid length. [ 308.535407][T11076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.911074][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1571'. [ 308.925972][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 308.942723][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1571'. [ 308.974585][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1571'. [ 309.062603][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 309.122105][T11081] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 309.144059][T11081] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 309.225468][T11098] netlink: 'syz.4.1574': attribute type 16 has an invalid length. [ 309.233321][T11098] netlink: 'syz.4.1574': attribute type 17 has an invalid length. [ 309.259484][T11098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.477281][T11101] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 310.107189][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'. [ 310.139979][T11126] netlink: 'syz.2.1582': attribute type 16 has an invalid length. [ 310.161013][T11126] netlink: 'syz.2.1582': attribute type 17 has an invalid length. [ 310.199134][T11126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.724455][T11140] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 311.112365][T11163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.311285][T11173] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 311.511045][T11179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.027917][T11203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1615'. [ 312.124562][T11201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.710739][T11225] wireguard0: entered promiscuous mode [ 312.716776][T11232] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1623'. [ 312.726080][T11225] wireguard0: entered allmulticast mode [ 312.900602][T11234] validate_nla: 7 callbacks suppressed [ 312.900623][T11234] netlink: 'syz.1.1626': attribute type 16 has an invalid length. [ 312.930930][T11236] netlink: 'syz.0.1625': attribute type 16 has an invalid length. [ 312.953584][T11236] netlink: 'syz.0.1625': attribute type 17 has an invalid length. [ 312.962419][T11234] netlink: 'syz.1.1626': attribute type 17 has an invalid length. [ 313.001974][T11236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.083778][T11234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.216008][T11242] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1628'. [ 313.475033][T11254] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 313.604815][T11238] tipc: Bearer : already 2 bearers with priority 10 [ 313.612600][T11238] tipc: Bearer : trying with adjusted priority [ 313.626443][T11238] tipc: Enabling of bearer rejected, failed to enable media [ 314.035074][T11272] netlink: 'syz.2.1640': attribute type 16 has an invalid length. [ 314.042951][T11272] netlink: 'syz.2.1640': attribute type 17 has an invalid length. [ 314.074700][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1639'. [ 314.128128][T11272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.396047][T11284] netlink: 'syz.0.1643': attribute type 16 has an invalid length. [ 314.423853][T11284] netlink: 'syz.0.1643': attribute type 17 has an invalid length. [ 314.482937][T11284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.660265][T11290] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 315.341422][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 315.746212][T11321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.795071][T11324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.902980][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 316.682518][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1663'. [ 316.704347][T11338] macvlan0: entered promiscuous mode [ 316.710795][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 316.931952][T11338] macvlan0 (unregistering): left promiscuous mode [ 317.540021][T11365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.890476][T11376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.895026][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 318.871373][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1691'. [ 318.910404][T11418] validate_nla: 9 callbacks suppressed [ 318.910423][T11418] netlink: 'syz.3.1690': attribute type 16 has an invalid length. [ 318.960387][T11418] netlink: 'syz.3.1690': attribute type 17 has an invalid length. [ 319.082350][T11418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.539783][T11429] netlink: 'syz.3.1695': attribute type 16 has an invalid length. [ 319.550677][T11429] netlink: 'syz.3.1695': attribute type 17 has an invalid length. [ 319.605459][T11429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.292298][T11452] netlink: 'syz.0.1705': attribute type 16 has an invalid length. [ 320.322654][T11452] netlink: 'syz.0.1705': attribute type 17 has an invalid length. [ 320.367406][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.401629][T11459] netlink: 'syz.3.1706': attribute type 16 has an invalid length. [ 320.412926][T11459] netlink: 'syz.3.1706': attribute type 17 has an invalid length. [ 320.477373][T11459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.744261][T11478] netlink: 'syz.0.1713': attribute type 16 has an invalid length. [ 320.754780][T11478] netlink: 'syz.0.1713': attribute type 17 has an invalid length. [ 320.809602][T11478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.175927][T11492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.079316][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 322.109644][T11535] vlan0: entered allmulticast mode [ 322.130181][T11535] bond0: entered allmulticast mode [ 322.146506][T11535] bridge0: port 1(vlan0) entered blocking state [ 322.168099][T11535] bridge0: port 1(vlan0) entered disabled state [ 322.217711][T11541] pimreg0: tun_chr_ioctl cmd 1074025677 [ 322.237387][T11541] pimreg0: linktype set to 65534 [ 322.269363][T11540] bridge0: port 1(gretap0) entered blocking state [ 322.303725][T11540] bridge0: port 1(gretap0) entered disabled state [ 322.310433][T11540] gretap0: entered allmulticast mode [ 322.342006][T11540] gretap0: entered promiscuous mode [ 322.386878][T11540] bridge0: port 1(gretap0) entered blocking state [ 322.393528][T11540] bridge0: port 1(gretap0) entered forwarding state [ 324.193043][T11572] pim6reg: entered allmulticast mode [ 324.268929][T11574] pimreg0: tun_chr_ioctl cmd 1074025677 [ 324.303793][T11574] pimreg0: linktype set to 65534 [ 324.329608][T11570] pim6reg: left allmulticast mode [ 325.142259][T11587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1758'. [ 325.325413][T11564] dccp_close: ABORT with 116 bytes unread [ 325.589029][T11596] wireguard0: entered promiscuous mode [ 325.617420][T11596] wireguard0: entered allmulticast mode [ 325.874615][T11605] validate_nla: 3 callbacks suppressed [ 325.874633][T11605] netlink: 'syz.4.1750': attribute type 16 has an invalid length. [ 325.935439][T11605] netlink: 'syz.4.1750': attribute type 17 has an invalid length. [ 326.002444][T11605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.365770][T11607] vlan2: left promiscuous mode [ 326.393957][T11607] bond1: left promiscuous mode [ 326.398890][T11607] vlan2: left allmulticast mode [ 326.421903][T11607] bond1: left allmulticast mode [ 326.480551][T11607] veth7: left promiscuous mode [ 326.511347][T11607] wireguard0: left promiscuous mode [ 326.516849][T11607] wireguard0: left allmulticast mode [ 326.835458][T11629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1761'. [ 326.867393][T11631] bridge0: port 1(vlan0) entered disabled state [ 326.897058][T11626] can: request_module (can-proto-3) failed. [ 327.299952][T11639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.306003][T11641] netlink: 'syz.4.1766': attribute type 16 has an invalid length. [ 327.330457][T11641] netlink: 'syz.4.1766': attribute type 17 has an invalid length. [ 327.371297][T11641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.689390][T11652] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1769'. [ 328.684337][T11630] syz.1.1757: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.729267][T11630] CPU: 0 UID: 0 PID: 11630 Comm: syz.1.1757 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 328.729301][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.729325][T11630] Call Trace: [ 328.729334][T11630] [ 328.729343][T11630] dump_stack_lvl+0x241/0x360 [ 328.729380][T11630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.729406][T11630] ? __pfx__printk+0x10/0x10 [ 328.729439][T11630] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 328.729469][T11630] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 328.729501][T11630] warn_alloc+0x278/0x410 [ 328.729530][T11630] ? __pfx_warn_alloc+0x10/0x10 [ 328.729561][T11630] ? hash_ip_create+0x801/0x1670 [ 328.729593][T11630] ? __get_vm_area_node+0x1c8/0x2d0 [ 328.729634][T11630] ? __get_vm_area_node+0x25c/0x2d0 [ 328.729675][T11630] __vmalloc_node_range_noprof+0x62f/0x1380 [ 328.729727][T11630] ? rcu_is_watching+0x15/0xb0 [ 328.729752][T11630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.729775][T11630] ? rcu_is_watching+0x15/0xb0 [ 328.729800][T11630] ? trace_kmalloc+0x1f/0xd0 [ 328.729827][T11630] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 328.729858][T11630] ? __kvmalloc_node_noprof+0x72/0x190 [ 328.729896][T11630] __kvmalloc_node_noprof+0x142/0x190 [ 328.729930][T11630] ? hash_ip_create+0x801/0x1670 [ 328.729965][T11630] hash_ip_create+0x801/0x1670 [ 328.730002][T11630] ? __pfx_lock_acquire+0x10/0x10 [ 328.730046][T11630] ? __pfx_hash_ip_create+0x10/0x10 [ 328.730083][T11630] ? __nla_parse+0x40/0x60 [ 328.730109][T11630] ? __pfx_hash_ip_create+0x10/0x10 [ 328.730144][T11630] ip_set_create+0xa78/0x1960 [ 328.730174][T11630] ? ip_set_create+0x48a/0x1960 [ 328.730206][T11630] ? __pfx_ip_set_create+0x10/0x10 [ 328.730268][T11630] ? nfnetlink_rcv_msg+0x225/0x1180 [ 328.730296][T11630] nfnetlink_rcv_msg+0xbec/0x1180 [ 328.730333][T11630] ? nfnetlink_rcv_msg+0x225/0x1180 [ 328.730379][T11630] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 328.730402][T11630] ? stack_trace_save+0x118/0x1d0 [ 328.730450][T11630] ? dev_hard_start_xmit+0x27a/0x7d0 [ 328.730474][T11630] ? __dev_queue_xmit+0x1b73/0x3f40 [ 328.730497][T11630] ? __netlink_deliver_tap+0x561/0x7f0 [ 328.730527][T11630] ? netlink_deliver_tap+0x19d/0x1b0 [ 328.730556][T11630] ? netlink_unicast+0x7c4/0x990 [ 328.730581][T11630] ? netlink_sendmsg+0x8de/0xcb0 [ 328.730597][T11630] ? __sock_sendmsg+0x221/0x270 [ 328.730654][T11630] ? ____sys_sendmsg+0x53a/0x860 [ 328.730677][T11630] ? __sys_sendmsg+0x269/0x350 [ 328.730719][T11630] netlink_rcv_skb+0x206/0x480 [ 328.730753][T11630] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 328.730782][T11630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.730830][T11630] ? apparmor_capable+0x13b/0x1b0 [ 328.730858][T11630] ? bpf_lsm_capable+0x9/0x10 [ 328.730889][T11630] ? security_capable+0x7e/0x2d0 [ 328.730929][T11630] nfnetlink_rcv+0x297/0x2ab0 [ 328.730960][T11630] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 328.730993][T11630] ? __dev_queue_xmit+0x2f4/0x3f40 [ 328.731022][T11630] ? __dev_queue_xmit+0x1775/0x3f40 [ 328.731049][T11630] ? kasan_save_track+0x51/0x80 [ 328.731078][T11630] ? ____sys_sendmsg+0x53a/0x860 [ 328.731107][T11630] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 328.731131][T11630] ? __dev_queue_xmit+0x2f4/0x3f40 [ 328.731163][T11630] ? __pfx___dev_queue_xmit+0x10/0x10 [ 328.731210][T11630] ? ref_tracker_free+0x643/0x7e0 [ 328.731233][T11630] ? __asan_memcpy+0x40/0x70 [ 328.731253][T11630] ? __pfx_ref_tracker_free+0x10/0x10 [ 328.731273][T11630] ? __skb_clone+0x5c/0x6c0 [ 328.731316][T11630] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.731348][T11630] ? skb_clone+0x240/0x390 [ 328.731375][T11630] ? __pfx_lock_release+0x10/0x10 [ 328.731408][T11630] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 328.731453][T11630] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.731489][T11630] netlink_unicast+0x7f6/0x990 [ 328.731527][T11630] ? __pfx_netlink_unicast+0x10/0x10 [ 328.731555][T11630] ? __virt_addr_valid+0x45f/0x530 [ 328.731576][T11630] ? __phys_addr_symbol+0x2f/0x70 [ 328.731595][T11630] ? __check_object_size+0x47a/0x730 [ 328.731638][T11630] netlink_sendmsg+0x8de/0xcb0 [ 328.731671][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.731697][T11630] ? aa_sock_msg_perm+0x91/0x160 [ 328.731735][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.731754][T11630] __sock_sendmsg+0x221/0x270 [ 328.731791][T11630] ____sys_sendmsg+0x53a/0x860 [ 328.731827][T11630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.731852][T11630] ? __fget_files+0x2a/0x410 [ 328.731886][T11630] ? __fget_files+0x2a/0x410 [ 328.731928][T11630] __sys_sendmsg+0x269/0x350 [ 328.731953][T11630] ? __pfx_futex_wake+0x10/0x10 [ 328.731989][T11630] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.732063][T11630] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 328.732096][T11630] ? do_syscall_64+0x100/0x230 [ 328.732132][T11630] ? do_syscall_64+0xb6/0x230 [ 328.732166][T11630] do_syscall_64+0xf3/0x230 [ 328.732197][T11630] ? clear_bhb_loop+0x35/0x90 [ 328.732241][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.732278][T11630] RIP: 0033:0x7f3422f8d169 [ 328.732296][T11630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.732313][T11630] RSP: 002b:00007f3423d3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.732334][T11630] RAX: ffffffffffffffda RBX: 00007f34231a6160 RCX: 00007f3422f8d169 [ 328.732349][T11630] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000004 [ 328.732361][T11630] RBP: 00007f342300e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.732374][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.732385][T11630] R13: 0000000000000000 R14: 00007f34231a6160 R15: 00007ffe3f2d24c8 [ 328.732415][T11630] [ 329.281800][T11630] Mem-Info: [ 329.285601][T11630] active_anon:13169 inactive_anon:0 isolated_anon:0 [ 329.285601][T11630] active_file:1463 inactive_file:38405 isolated_file:0 [ 329.285601][T11630] unevictable:768 dirty:317 writeback:0 [ 329.285601][T11630] slab_reclaimable:12015 slab_unreclaimable:113932 [ 329.285601][T11630] mapped:31846 shmem:4330 pagetables:907 [ 329.285601][T11630] sec_pagetables:0 bounce:0 [ 329.285601][T11630] kernel_misc_reclaimable:0 [ 329.285601][T11630] free:1291969 free_pcp:5212 free_cma:0 [ 329.331375][T11630] Node 0 active_anon:52592kB inactive_anon:0kB active_file:5852kB inactive_file:153548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127308kB dirty:1268kB writeback:0kB shmem:15704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11648kB pagetables:3656kB sec_pagetables:0kB all_unreclaimable? no [ 329.363866][T11630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 329.394096][T11630] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.421274][T11630] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 329.427164][T11630] Node 0 DMA32 free:1242124kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:52552kB inactive_anon:0kB active_file:5852kB inactive_file:153224kB unevictable:1536kB writepending:1268kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:20508kB local_pcp:6220kB free_cma:0kB [ 329.457725][T11630] lowmem_reserve[]: 0 0 0 0 0 [ 329.459219][T11661] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 329.462491][T11630] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.497210][T11630] lowmem_reserve[]: 0 0 0 0 0 [ 329.502016][T11630] Node 1 Normal free:3910360kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:264kB local_pcp:264kB free_cma:0kB [ 329.531296][T11630] lowmem_reserve[]: 0 0 0 0 0 [ 329.538244][T11630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.551749][T11630] Node 0 DMA32: 385*4kB (UM) 401*8kB (UME) 195*16kB (M) 458*32kB (UME) 528*64kB (UME) 136*128kB (UME) 45*256kB (UME) 8*512kB (ME) 5*1024kB (M) 3*2048kB (M) 282*4096kB (UM) = 1255676kB [ 329.570321][T11630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 329.582079][T11630] Node 1 Normal: 204*4kB (UME) 55*8kB (UME) 45*16kB (UME) 205*32kB (UME) 82*64kB (UME) 24*128kB (UME) 13*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910360kB [ 329.600827][T11630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.610444][T11630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.619828][T11630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.629835][T11630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.639613][T11630] 44178 total pagecache pages [ 329.644476][T11630] 0 pages in swap cache [ 329.648663][T11630] Free swap = 124996kB [ 329.652838][T11630] Total swap = 124996kB [ 329.657131][T11630] 2097051 pages RAM [ 329.660963][T11630] 0 pages HighMem/MovableOnly [ 329.665713][T11630] 427906 pages reserved [ 329.669893][T11630] 0 pages cma reserved [ 329.687637][T11663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1773'. [ 329.717938][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 329.899327][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 330.447244][T11690] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 330.524594][T11696] macvlan0: entered promiscuous mode [ 330.558798][T11696] bridge0: entered promiscuous mode [ 330.620703][T11696] macvlan1: entered promiscuous mode [ 332.184192][T11728] netlink: 'syz.4.1799': attribute type 16 has an invalid length. [ 332.192082][T11728] netlink: 'syz.4.1799': attribute type 17 has an invalid length. [ 332.264467][T11728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.548825][T11745] xt_connbytes: Forcing CT accounting to be enabled [ 332.559457][T11745] SET target dimension over the limit! [ 333.287835][T11775] netlink: 'syz.4.1819': attribute type 16 has an invalid length. [ 333.325228][T11775] netlink: 'syz.4.1819': attribute type 17 has an invalid length. [ 333.354220][T11775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.457117][T11785] netlink: 'syz.3.1824': attribute type 16 has an invalid length. [ 333.490735][T11785] netlink: 'syz.3.1824': attribute type 17 has an invalid length. [ 333.520289][T11785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.005072][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 334.232732][T11805] gretap0: left allmulticast mode [ 334.244758][T11805] gretap0: left promiscuous mode [ 334.250219][T11805] bridge0: port 1(gretap0) entered disabled state [ 334.726902][T11814] netlink: 'syz.3.1835': attribute type 16 has an invalid length. [ 334.759067][T11814] netlink: 'syz.3.1835': attribute type 17 has an invalid length. [ 334.804352][T11814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.965609][T11821] netlink: 'syz.1.1838': attribute type 16 has an invalid length. [ 334.973943][T11821] netlink: 'syz.1.1838': attribute type 17 has an invalid length. [ 335.004351][T11821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.192213][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 335.975530][T11840] batman_adv: batadv0: Adding interface: ip6gretap0 [ 335.982189][T11840] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.093734][T11840] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active [ 336.329137][T11845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.180074][T11887] pimreg0: tun_chr_ioctl cmd 1074025677 [ 338.193771][T11887] pimreg0: linktype set to 65534 [ 338.232721][T11890] validate_nla: 2 callbacks suppressed [ 338.232744][T11890] netlink: 'syz.2.1863': attribute type 16 has an invalid length. [ 338.267219][T11890] netlink: 'syz.2.1863': attribute type 17 has an invalid length. [ 338.287881][T11890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.882879][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 339.782771][T11923] netlink: 'syz.3.1874': attribute type 16 has an invalid length. [ 339.791298][T11923] netlink: 'syz.3.1874': attribute type 17 has an invalid length. [ 339.814603][T11923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.551644][T11935] netlink: 'syz.4.1877': attribute type 16 has an invalid length. [ 340.568452][T11935] netlink: 'syz.4.1877': attribute type 17 has an invalid length. [ 340.624693][T11935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.897732][T11929] tipc: Enabling of bearer rejected, failed to enable media [ 341.087660][T11949] netlink: 'syz.0.1892': attribute type 16 has an invalid length. [ 341.107583][T11949] netlink: 'syz.0.1892': attribute type 17 has an invalid length. [ 341.183067][T11952] netlink: 'syz.2.1884': attribute type 2 has an invalid length. [ 341.193832][T11949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.221689][T11952] netlink: 'syz.2.1884': attribute type 9 has an invalid length. [ 341.297575][T11952] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1884'. [ 341.525000][T11959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1886'. [ 341.712482][T11961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1887'. [ 341.726837][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 341.736003][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 341.747090][T11961] nbd: error processing sock list [ 341.887547][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 342.743745][T11986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.004076][T11993] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1899'. [ 343.095199][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 343.993314][T12015] batman_adv: batadv0: Adding interface: ip6gretap0 [ 344.013738][T12015] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 344.073480][T12015] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active [ 344.483903][T12028] validate_nla: 3 callbacks suppressed [ 344.483921][T12028] netlink: 'syz.0.1909': attribute type 16 has an invalid length. [ 344.563706][T12028] netlink: 'syz.0.1909': attribute type 17 has an invalid length. [ 344.624894][T12028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.776600][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 346.003062][T12052] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 346.026842][T12052] netlink: 'syz.1.1916': attribute type 9 has an invalid length. [ 346.050933][T12052] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1916'. [ 346.455035][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1921'. [ 346.548460][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 347.784128][T12087] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 347.899857][T12091] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 347.939942][T12087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.962212][T12094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 348.074406][T12087] veth5: entered promiscuous mode [ 348.110396][T12087] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 348.992380][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 349.685984][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1941'. [ 350.705792][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 351.435586][T12163] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 351.667556][T12165] netlink: 'syz.3.1953': attribute type 16 has an invalid length. [ 351.683693][T12165] netlink: 'syz.3.1953': attribute type 17 has an invalid length. [ 351.875954][T12165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.564988][T12175] syzkaller0: entered promiscuous mode [ 352.570547][T12175] syzkaller0: entered allmulticast mode [ 352.592156][T12175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1956'. [ 353.097716][T12190] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 355.424844][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1963'. [ 355.914637][T12210] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 356.142794][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.282021][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.326919][T12211] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 356.352760][T12211] bond0: (slave vcan1): Error -95 calling set_mac_address [ 356.883751][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'. [ 356.917415][T12228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 356.956794][T12228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 356.970572][T12231] netlink: 'syz.0.1967': attribute type 2 has an invalid length. [ 359.664994][T12255] netlink: 'syz.1.1980': attribute type 16 has an invalid length. [ 359.693519][T12255] netlink: 'syz.1.1980': attribute type 17 has an invalid length. [ 359.748281][T12255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.737477][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 360.839694][T12279] raw_sendmsg: syz.4.1987 forgot to set AF_INET. Fix it! [ 361.758490][T12282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1989'. [ 361.932509][T12289] SET target dimension over the limit! [ 362.242055][T12300] netlink: 'syz.3.1995': attribute type 16 has an invalid length. [ 362.250170][T12300] netlink: 'syz.3.1995': attribute type 17 has an invalid length. [ 362.309042][T12300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.621048][T12299] netlink: 'syz.1.1994': attribute type 10 has an invalid length. [ 362.677444][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1994'. [ 363.398098][T12318] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2001'. [ 364.734208][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 365.746898][T12342] netlink: 'syz.0.2010': attribute type 1 has an invalid length. [ 365.789646][T12342] bond5: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 365.802072][T12342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.806580][ T6222] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 366.002515][ T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 366.049543][T12351] netlink: 'syz.2.2013': attribute type 10 has an invalid length. [ 367.335393][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 367.399816][T12359] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 367.453581][T12359] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.593501][T12381] x_tables: duplicate underflow at hook 2 [ 367.626788][T12381] netlink: 'syz.2.2017': attribute type 29 has an invalid length. [ 367.742458][T12382] netlink: 'syz.2.2017': attribute type 29 has an invalid length. [ 367.809778][T12381] netlink: 'syz.2.2017': attribute type 10 has an invalid length. [ 368.711750][T12394] block nbd2: not configured, cannot reconfigure [ 369.034871][T12407] xt_bpf: check failed: parse error [ 369.047195][T12407] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2030'. [ 371.924925][T12433] netlink: 'syz.4.2035': attribute type 10 has an invalid length. [ 371.936277][T12433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2035'. [ 372.961722][T12445] lo speed is unknown, defaulting to 1000 [ 372.983522][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2036'. [ 373.018090][T12445] lo speed is unknown, defaulting to 1000 [ 373.108812][T12445] lo speed is unknown, defaulting to 1000 [ 373.128259][T12445] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 373.223617][T12445] lo speed is unknown, defaulting to 1000 [ 373.273882][T12445] lo speed is unknown, defaulting to 1000 [ 373.307502][T12445] lo speed is unknown, defaulting to 1000 [ 373.340577][T12445] lo speed is unknown, defaulting to 1000 [ 373.415677][T12445] lo speed is unknown, defaulting to 1000 [ 373.525305][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 374.035011][T12466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2044'. [ 374.419209][T12474] netlink: 'syz.4.2046': attribute type 16 has an invalid length. [ 374.434549][T12474] netlink: 'syz.4.2046': attribute type 17 has an invalid length. [ 374.469097][T12474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.495317][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 374.503809][T12480] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2048'. [ 374.513803][ T5890] lo speed is unknown, defaulting to 1000 [ 374.527588][T12480] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2048'. [ 374.636217][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 374.679445][T12480] netlink: 'syz.3.2048': attribute type 10 has an invalid length. [ 374.693582][T12480] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2048'. [ 374.884085][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 375.378614][T12497] netlink: 'syz.2.2052': attribute type 1 has an invalid length. [ 375.386693][T12497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2052'. [ 376.210400][T12518] macvlan0: entered promiscuous mode [ 376.228579][T12518] macvlan0: entered allmulticast mode [ 376.553042][T12523] netlink: 'syz.0.2060': attribute type 16 has an invalid length. [ 376.586236][T12523] netlink: 'syz.0.2060': attribute type 17 has an invalid length. [ 376.624030][T12523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.867970][T12525] lo speed is unknown, defaulting to 1000 [ 377.916162][T12560] bond5: (slave ip6gretap0): Removing an active aggregator [ 377.941489][T12560] bond5: (slave ip6gretap0): Releasing backup interface [ 378.544439][T12574] __nla_validate_parse: 1 callbacks suppressed [ 378.544459][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 378.576472][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 378.632842][T12574] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 378.693968][T12574] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2076'. [ 378.731780][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 378.784024][T12574] nbd: socks must be embedded in a SOCK_ITEM attr [ 378.791257][T12574] block nbd2: shutting down sockets [ 379.865130][T12599] lo speed is unknown, defaulting to 1000 [ 380.418253][T12618] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2085'. [ 380.433984][T12614] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2085'. [ 380.491635][T12599] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2083'. [ 381.019054][T12629] bond0 (unregistering): Released all slaves [ 382.301476][T12651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2095'. [ 382.764188][T12677] netlink: 'syz.3.2101': attribute type 16 has an invalid length. [ 382.772185][T12677] netlink: 'syz.3.2101': attribute type 17 has an invalid length. [ 382.824734][T12677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.863302][T12668] lo speed is unknown, defaulting to 1000 [ 383.429942][T12700] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 383.540401][T12712] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 383.560858][T12708] IPVS: stopping backup sync thread 12712 ... [ 383.658706][T12691] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2108'. [ 383.690760][T12717] SET target dimension over the limit! [ 384.049316][T12697] lo speed is unknown, defaulting to 1000 [ 384.196820][T12727] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 384.240999][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 384.298150][T12738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2113'. [ 384.663221][T12744] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.2117'. [ 384.742499][T12747] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2117'. [ 384.761524][T12747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.901024][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'. [ 384.911149][T12749] Set syz1 is full, maxelem 65536 reached [ 384.918756][T12749] netlink: 'syz.1.2118': attribute type 1 has an invalid length. [ 384.965112][T12749] bond4: (slave gretap1): making interface the new active one [ 384.973651][T12749] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 384.984149][T12749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'. [ 385.173997][T12758] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 385.617248][T12778] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2128'. [ 385.646530][T12776] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2128'. [ 385.736090][T12767] netlink: 'syz.4.2125': attribute type 303 has an invalid length. [ 385.824731][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 385.893020][T12767] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 385.914254][T12767] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 388.893692][T12833] __nla_validate_parse: 2 callbacks suppressed [ 388.893710][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2144'. [ 388.965798][T12818] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 389.058043][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2137'. [ 389.561225][T12834] lo speed is unknown, defaulting to 1000 [ 389.605303][T12841] smc: removing ib device syz1 [ 389.625085][T12845] lo speed is unknown, defaulting to 1000 [ 390.380332][T12846] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2148'. [ 390.668209][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 392.151919][T12887] lo speed is unknown, defaulting to 1000 [ 392.202757][T12888] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2159'. [ 392.439868][T12895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.715847][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'. [ 393.417133][T12893] warn_alloc: 1 callbacks suppressed [ 393.417154][T12893] syz.3.2161: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 393.443176][T12893] CPU: 0 UID: 0 PID: 12893 Comm: syz.3.2161 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 393.443205][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.443219][T12893] Call Trace: [ 393.443226][T12893] [ 393.443235][T12893] dump_stack_lvl+0x241/0x360 [ 393.443269][T12893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.443300][T12893] ? __wake_up_klogd+0xcc/0x110 [ 393.443340][T12893] warn_alloc+0x278/0x410 [ 393.443371][T12893] ? __pfx_warn_alloc+0x10/0x10 [ 393.443407][T12893] ? veth_dev_init+0x35f/0x550 [ 393.443430][T12893] ? __get_vm_area_node+0x1c8/0x2d0 [ 393.443464][T12893] ? __get_vm_area_node+0x25c/0x2d0 [ 393.443506][T12893] __vmalloc_node_range_noprof+0x62f/0x1380 [ 393.443528][T12893] ? look_up_lock_class+0x77/0x170 [ 393.443587][T12893] ? rcu_is_watching+0x15/0xb0 [ 393.443612][T12893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 393.443636][T12893] ? rcu_is_watching+0x15/0xb0 [ 393.443661][T12893] ? trace_kmalloc+0x1f/0xd0 [ 393.443688][T12893] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 393.443720][T12893] ? __kvmalloc_node_noprof+0x72/0x190 [ 393.443759][T12893] __kvmalloc_node_noprof+0x142/0x190 [ 393.443795][T12893] ? veth_dev_init+0x35f/0x550 [ 393.443819][T12893] veth_dev_init+0x35f/0x550 [ 393.443851][T12893] register_netdevice+0x6d7/0x1b70 [ 393.443881][T12893] ? _get_random_bytes+0x25d/0x2c0 [ 393.443920][T12893] ? snprintf+0xda/0x120 [ 393.443950][T12893] ? __pfx_register_netdevice+0x10/0x10 [ 393.443979][T12893] ? __pfx_snprintf+0x10/0x10 [ 393.444006][T12893] ? __asan_memset+0x23/0x50 [ 393.444046][T12893] veth_newlink+0x66a/0xb70 [ 393.444075][T12893] ? __pfx_veth_newlink+0x10/0x10 [ 393.444171][T12893] ? alloc_netdev_mqs+0xe01/0x1210 [ 393.444210][T12893] ? rtnl_create_link+0x95b/0xc90 [ 393.444242][T12893] ? __pfx_veth_newlink+0x10/0x10 [ 393.444266][T12893] rtnl_newlink_create+0x37b/0xbd0 [ 393.444298][T12893] ? __mutex_lock+0x602/0x1010 [ 393.444335][T12893] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 393.444364][T12893] ? __pfx___mutex_lock+0x10/0x10 [ 393.444408][T12893] ? ns_capable+0x8a/0xf0 [ 393.444439][T12893] rtnl_newlink+0x167a/0x1d90 [ 393.444462][T12893] ? stack_depot_save_flags+0x37/0x940 [ 393.444513][T12893] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.444532][T12893] ? __netlink_deliver_tap+0x561/0x7f0 [ 393.444567][T12893] ? __pfx_validate_chain+0x10/0x10 [ 393.444589][T12893] ? __sock_sendmsg+0x221/0x270 [ 393.444620][T12893] ? ____sys_sendmsg+0x53a/0x860 [ 393.444644][T12893] ? __sys_sendmsg+0x269/0x350 [ 393.444668][T12893] ? do_syscall_64+0xf3/0x230 [ 393.444699][T12893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.444819][T12893] ? __pfx_lock_release+0x10/0x10 [ 393.444871][T12893] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.444894][T12893] rtnetlink_rcv_msg+0x791/0xcf0 [ 393.444926][T12893] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 393.444967][T12893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.445013][T12893] ? ref_tracker_free+0x643/0x7e0 [ 393.445050][T12893] netlink_rcv_skb+0x206/0x480 [ 393.445085][T12893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.445122][T12893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.445182][T12893] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.445219][T12893] netlink_unicast+0x7f6/0x990 [ 393.445261][T12893] ? __pfx_netlink_unicast+0x10/0x10 [ 393.445290][T12893] ? __virt_addr_valid+0x45f/0x530 [ 393.445313][T12893] ? __phys_addr_symbol+0x2f/0x70 [ 393.445334][T12893] ? __check_object_size+0x47a/0x730 [ 393.445369][T12893] netlink_sendmsg+0x8de/0xcb0 [ 393.445405][T12893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.445432][T12893] ? aa_sock_msg_perm+0x91/0x160 [ 393.445473][T12893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.445492][T12893] __sock_sendmsg+0x221/0x270 [ 393.445529][T12893] ____sys_sendmsg+0x53a/0x860 [ 393.445566][T12893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.445591][T12893] ? __fget_files+0x2a/0x410 [ 393.445627][T12893] ? __fget_files+0x2a/0x410 [ 393.445670][T12893] __sys_sendmsg+0x269/0x350 [ 393.445696][T12893] ? __pfx_futex_wake+0x10/0x10 [ 393.445734][T12893] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.445812][T12893] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.445847][T12893] ? do_syscall_64+0x100/0x230 [ 393.445883][T12893] ? do_syscall_64+0xb6/0x230 [ 393.445919][T12893] do_syscall_64+0xf3/0x230 [ 393.445951][T12893] ? clear_bhb_loop+0x35/0x90 [ 393.445986][T12893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.446015][T12893] RIP: 0033:0x7fbd7fd8d169 [ 393.446034][T12893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.446059][T12893] RSP: 002b:00007fbd80c55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.446082][T12893] RAX: ffffffffffffffda RBX: 00007fbd7ffa5fa0 RCX: 00007fbd7fd8d169 [ 393.446098][T12893] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 393.446112][T12893] RBP: 00007fbd7fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 393.446125][T12893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.446137][T12893] R13: 0000000000000000 R14: 00007fbd7ffa5fa0 R15: 00007ffc1d758318 [ 393.446169][T12893] [ 393.941772][T12893] Mem-Info: [ 393.945080][T12893] active_anon:20037 inactive_anon:0 isolated_anon:0 [ 393.945080][T12893] active_file:1480 inactive_file:38430 isolated_file:0 [ 393.945080][T12893] unevictable:768 dirty:373 writeback:0 [ 393.945080][T12893] slab_reclaimable:12135 slab_unreclaimable:121119 [ 393.945080][T12893] mapped:32978 shmem:8382 pagetables:944 [ 393.945080][T12893] sec_pagetables:0 bounce:0 [ 393.945080][T12893] kernel_misc_reclaimable:0 [ 393.945080][T12893] free:1279675 free_pcp:2314 free_cma:0 [ 393.990587][T12893] Node 0 active_anon:80148kB inactive_anon:0kB active_file:5920kB inactive_file:153648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131912kB dirty:1492kB writeback:0kB shmem:31992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:3776kB sec_pagetables:0kB all_unreclaimable? no [ 394.023183][T12893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 394.053585][T12893] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 394.080755][T12893] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 394.086690][T12893] Node 0 DMA32 free:1200588kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:80164kB inactive_anon:0kB active_file:5920kB inactive_file:153328kB unevictable:1536kB writepending:1412kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:1968kB local_pcp:596kB free_cma:0kB [ 394.118136][T12893] lowmem_reserve[]: 0 0 0 0 0 [ 394.122930][T12893] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 394.150011][T12893] lowmem_reserve[]: 0 0 0 0 0 [ 394.154863][T12893] Node 1 Normal free:3910356kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB [ 394.184456][T12893] lowmem_reserve[]: 0 0 0 0 0 [ 394.189291][T12893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 394.202144][T12893] Node 0 DMA32: 14*4kB (UE) 5*8kB (UE) 17*16kB (UE) 114*32kB (UE) 442*64kB (UE) 157*128kB (UE) 62*256kB (UM) 11*512kB (UM) 8*1024kB (UM) 4*2048kB (M) 271*4096kB (UM) = 1200304kB [ 394.220224][T12893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 394.232274][T12893] Node 1 Normal: 203*4kB (UME) 55*8kB (UME) 45*16kB (UME) 205*32kB (UME) 82*64kB (UME) 24*128kB (UME) 13*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910356kB [ 394.251061][T12893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.260659][T12893] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 394.270020][T12893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.279650][T12893] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 394.289000][T12893] 48294 total pagecache pages [ 394.293766][T12893] 0 pages in swap cache [ 394.297939][T12893] Free swap = 124996kB [ 394.302150][T12893] Total swap = 124996kB [ 394.306425][T12893] 2097051 pages RAM [ 394.310241][T12893] 0 pages HighMem/MovableOnly [ 394.315005][T12893] 427906 pages reserved [ 394.319195][T12893] 0 pages cma reserved [ 395.564351][T12922] set match dimension is over the limit! [ 395.639331][T12922] pim6reg: entered allmulticast mode [ 395.964479][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 395.992741][T12936] dummy0: entered promiscuous mode [ 395.998620][T12936] macvtap3: entered promiscuous mode [ 396.006907][T12936] macvtap3: entered allmulticast mode [ 396.026741][T12936] dummy0: entered allmulticast mode [ 396.226591][T12943] netlink: 'syz.2.2175': attribute type 16 has an invalid length. [ 396.234749][T12943] netlink: 'syz.2.2175': attribute type 17 has an invalid length. [ 396.247660][T12943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.352875][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 397.503219][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 397.522109][T12972] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2183'. [ 397.572539][T12970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 397.619484][T12970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 398.082439][T12988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2185'. [ 398.384041][T12993] netlink: 'syz.2.2188': attribute type 16 has an invalid length. [ 398.392275][T12993] netlink: 'syz.2.2188': attribute type 17 has an invalid length. [ 400.189910][T12993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.359403][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2190'. [ 400.397992][T13007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.432485][T13007] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.447967][T13007] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.474867][T13007] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.989667][T13042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2200'. [ 402.077570][T13040] syzkaller1: entered promiscuous mode [ 402.083206][T13040] syzkaller1: entered allmulticast mode [ 402.315050][T13050] netlink: 'syz.0.2203': attribute type 16 has an invalid length. [ 402.330639][T13044] lo speed is unknown, defaulting to 1000 [ 402.333186][T13050] netlink: 'syz.0.2203': attribute type 17 has an invalid length. [ 402.386332][T13050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.047550][T13072] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2216'. [ 403.130499][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 403.162509][T13074] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 403.220745][T13074] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 403.234905][T13072] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 403.289849][T13080] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 403.379466][T13080] bond3: entered promiscuous mode [ 403.385716][T13080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.539999][T13083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.603075][T13083] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 403.624241][T13083] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 403.841890][T13083] bond3: (slave ip6gre1): making interface the new active one [ 403.863180][T13083] ip6gre1: entered promiscuous mode [ 403.905761][T13083] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 404.415909][T13094] netlink: 'syz.4.2214': attribute type 16 has an invalid length. [ 404.439172][T13094] netlink: 'syz.4.2214': attribute type 17 has an invalid length. [ 404.473492][T13094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.573457][T13099] lo speed is unknown, defaulting to 1000 [ 404.585970][T13099] lo speed is unknown, defaulting to 1000 [ 404.622171][T13099] lo speed is unknown, defaulting to 1000 [ 404.708447][T13099] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 404.802753][T13099] lo speed is unknown, defaulting to 1000 [ 404.818259][T13099] lo speed is unknown, defaulting to 1000 [ 404.832394][T13099] lo speed is unknown, defaulting to 1000 [ 404.843169][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 404.853559][T13099] lo speed is unknown, defaulting to 1000 [ 404.860542][T13099] lo speed is unknown, defaulting to 1000 [ 405.569492][T13123] lo speed is unknown, defaulting to 1000 [ 405.577484][T13123] lo speed is unknown, defaulting to 1000 [ 405.622028][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 406.094204][T13143] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2227'. [ 406.694670][T13155] batman_adv: batadv0: Adding interface: dummy0 [ 406.701078][T13155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.778690][T13155] batman_adv: batadv0: Interface activated: dummy0 [ 406.907918][T13156] batadv0: mtu less than device minimum [ 406.955173][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 406.968069][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 406.980661][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 406.993224][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.005898][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.018546][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.031189][T13156] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.587766][T13174] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 407.638999][T13174] bond5: entered promiscuous mode [ 407.721301][T13174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.761298][T13178] lo speed is unknown, defaulting to 1000 [ 407.858616][T13183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.867646][T13186] netlink: 'syz.4.2238': attribute type 16 has an invalid length. [ 407.923842][T13186] netlink: 'syz.4.2238': attribute type 17 has an invalid length. [ 407.928877][T13183] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 408.006029][T13183] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 408.069209][T13183] bond5: (slave ip6gre1): making interface the new active one [ 408.101430][T13183] ip6gre1: entered promiscuous mode [ 408.122412][T13183] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 408.226870][T13178] lo speed is unknown, defaulting to 1000 [ 408.258758][T13186] net_ratelimit: 12 callbacks suppressed [ 408.258769][T13186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.745153][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 408.879197][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'. [ 409.103064][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 409.179701][T13209] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.627719][T13209] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.797180][T13209] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.889511][T13209] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.939130][T13220] tipc: Can't bind to reserved service type 2 [ 409.952029][T13220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2248'. [ 410.063207][T13209] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.090401][T13209] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.141318][T13209] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.185909][T13209] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.542622][T13243] bridge0: port 1(hsr0) entered blocking state [ 410.555904][T13243] bridge0: port 1(hsr0) entered disabled state [ 410.580478][T13243] hsr0: entered allmulticast mode [ 410.600870][T13243] hsr_slave_0: entered allmulticast mode [ 410.600963][T13249] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2255'. [ 410.608641][T13243] hsr_slave_1: entered allmulticast mode [ 410.636293][T13243] hsr0: entered promiscuous mode [ 410.734030][T13251] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2257'. [ 410.737638][T13243] tipc: Enabling not permitted [ 410.769318][T13243] tipc: Enabling of bearer rejected, failed to enable media [ 410.797872][T13249] tipc: Enabling of bearer rejected, failed to enable media [ 410.844604][T13255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.877568][T13253] veth1_macvtap: left promiscuous mode [ 410.887387][T13253] macsec0: entered allmulticast mode [ 411.083696][T13264] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2262'. [ 411.169097][T13264] netlink: 'syz.4.2262': attribute type 7 has an invalid length. [ 411.242991][T13272] sctp: [Deprecated]: syz.3.2263 (pid 13272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.242991][T13272] Use struct sctp_sack_info instead [ 411.343305][T13277] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 411.351304][T13277] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2265'. [ 411.670343][T13288] wg1: entered promiscuous mode [ 411.692037][T13288] wg1: entered allmulticast mode [ 412.089594][T13298] lo speed is unknown, defaulting to 1000 [ 412.104614][T13298] lo speed is unknown, defaulting to 1000 [ 412.207982][T13302] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 412.310232][T13309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2271'. [ 412.320044][T13311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2272'. [ 412.345950][T13304] xt_connbytes: Forcing CT accounting to be enabled [ 412.352908][T13304] Cannot find add_set index 2 as target [ 412.814425][T13324] pimreg: entered allmulticast mode [ 412.843882][T13324] 8021q: VLANs not supported on pimreg [ 413.106574][T13336] tls_set_device_offload_rx: netdev not found [ 413.231788][T13344] netlink: 'syz.2.2283': attribute type 16 has an invalid length. [ 413.240046][T13344] netlink: 'syz.2.2283': attribute type 17 has an invalid length. [ 413.357804][T13344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.815709][T13363] __nla_validate_parse: 1 callbacks suppressed [ 413.815730][T13363] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.2289'. [ 413.848547][T13366] netlink: 'syz.0.2288': attribute type 16 has an invalid length. [ 413.856593][T13366] netlink: 'syz.0.2288': attribute type 17 has an invalid length. [ 413.880822][T13366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.959933][T13369] netlink: 'syz.1.2289': attribute type 3 has an invalid length. [ 413.984316][T13363] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2289'. [ 414.003774][T13363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.183001][T13371] hsr0: left allmulticast mode [ 414.199021][T13371] hsr_slave_0: left allmulticast mode [ 414.211356][T13371] hsr_slave_1: left allmulticast mode [ 414.217342][T13371] hsr0: left promiscuous mode [ 414.222621][T13371] bridge0: port 1(hsr0) entered disabled state [ 414.244136][T13371] batman_adv: batadv0: Removing interface: ip6gretap0 [ 414.265094][T13371] bond3: (slave ip6gre1): Releasing backup interface [ 414.272135][T13371] ip6gre1: left promiscuous mode [ 414.307136][T13379] pim6reg: left allmulticast mode [ 414.339539][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 414.419077][T13382] syz.0.2291 uses old SIOCAX25GETINFO [ 414.674575][T13394] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2297'. [ 414.721866][T13394] GUP no longer grows the stack in syz.4.2297 (13394): 200000006000-20000000a000 (200000005000) [ 414.733512][T13394] CPU: 0 UID: 0 PID: 13394 Comm: syz.4.2297 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 414.733539][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.733553][T13394] Call Trace: [ 414.733561][T13394] [ 414.733570][T13394] dump_stack_lvl+0x241/0x360 [ 414.733602][T13394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.733626][T13394] ? __pfx__printk+0x10/0x10 [ 414.733646][T13394] ? find_vma+0xf9/0x170 [ 414.733680][T13394] __get_user_pages+0x3b07/0x4140 [ 414.733713][T13394] ? mark_lock+0x9a/0x360 [ 414.733760][T13394] ? __pfx___get_user_pages+0x10/0x10 [ 414.733780][T13394] ? __gup_longterm_locked+0xd2f/0x17f0 [ 414.733813][T13394] ? __pfx_down_read_killable+0x10/0x10 [ 414.733840][T13394] ? __pfx_lock_acquire+0x10/0x10 [ 414.733873][T13394] ? try_get_folio+0xf1/0x6f0 [ 414.733896][T13394] ? __pfx_lock_release+0x10/0x10 [ 414.733936][T13394] __gup_longterm_locked+0xe64/0x17f0 [ 414.733974][T13394] ? mark_lock+0x9a/0x360 [ 414.733999][T13394] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 414.734031][T13394] ? __pfx___gup_longterm_locked+0x10/0x10 [ 414.734054][T13394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 414.734092][T13394] ? gup_fast_fallback+0x207e/0x29c0 [ 414.734117][T13394] gup_fast_fallback+0x2266/0x29c0 [ 414.734174][T13394] ? __pfx_gup_fast_fallback+0x10/0x10 [ 414.734195][T13394] ? __lock_acquire+0x1397/0x2100 [ 414.734265][T13394] ? is_valid_gup_args+0x124/0x200 [ 414.734290][T13394] get_user_pages_fast+0xcc/0x160 [ 414.734315][T13394] ? __pfx_get_user_pages_fast+0x10/0x10 [ 414.734338][T13394] ? rcu_is_watching+0x15/0xb0 [ 414.734362][T13394] ? trace_contention_end+0x3c/0x120 [ 414.734391][T13394] __iov_iter_get_pages_alloc+0x39c/0xa90 [ 414.734425][T13394] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 414.734455][T13394] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 414.734489][T13394] iov_iter_get_pages2+0xcf/0x130 [ 414.734520][T13394] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 414.734572][T13394] __se_sys_vmsplice+0x739/0x14a0 [ 414.734597][T13394] ? plist_del+0x3f1/0x410 [ 414.734644][T13394] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 414.734674][T13394] ? __pfx_futex_wake+0x10/0x10 [ 414.734751][T13394] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 414.734788][T13394] ? do_syscall_64+0x100/0x230 [ 414.734827][T13394] ? do_syscall_64+0xb6/0x230 [ 414.734858][T13394] do_syscall_64+0xf3/0x230 [ 414.734886][T13394] ? clear_bhb_loop+0x35/0x90 [ 414.734918][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.734944][T13394] RIP: 0033:0x7f722fb8d169 [ 414.734961][T13394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.734977][T13394] RSP: 002b:00007f72309b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 414.734998][T13394] RAX: ffffffffffffffda RBX: 00007f722fda5fa0 RCX: 00007f722fb8d169 [ 414.735013][T13394] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 414.735025][T13394] RBP: 00007f722fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.735037][T13394] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 414.735049][T13394] R13: 0000000000000000 R14: 00007f722fda5fa0 R15: 00007ffd3dce25a8 [ 414.735081][T13394] [ 415.149323][T13395] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 415.714811][T13411] lo speed is unknown, defaulting to 1000 [ 415.721501][T13411] lo speed is unknown, defaulting to 1000 [ 415.730210][T13414] netlink: 'syz.0.2302': attribute type 16 has an invalid length. [ 415.753541][T13414] netlink: 'syz.0.2302': attribute type 17 has an invalid length. [ 415.795080][T13414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.925453][T13421] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2304'. [ 416.157664][T13431] syz.4.2308 (13431) used obsolete PPPIOCDETACH ioctl [ 416.426753][T13441] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2311'. [ 416.707943][T13448] batman_adv: batadv0: Adding interface: dummy0 [ 416.753884][T13448] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.793986][T13448] batman_adv: batadv0: Interface activated: dummy0 [ 416.825628][T13433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.829554][T13449] batadv0: mtu less than device minimum [ 416.850293][T13449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.862742][T13449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.874592][T13449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.886356][T13449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.898947][T13449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.151665][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2314'. [ 417.417945][T13462] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 417.431760][T13462] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2318'. [ 417.667940][T13470] netlink: 'syz.2.2320': attribute type 16 has an invalid length. [ 417.676175][T13470] netlink: 'syz.2.2320': attribute type 17 has an invalid length. [ 418.194816][T13474] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 418.200816][T13474] syzkaller1: Linktype set failed because interface is up [ 418.213983][ T9] syzkaller1: tun_net_xmit 90 [ 418.625519][T13494] netlink: 'syz.0.2330': attribute type 16 has an invalid length. [ 418.638083][T13494] netlink: 'syz.0.2330': attribute type 17 has an invalid length. [ 418.695077][T13494] net_ratelimit: 16 callbacks suppressed [ 418.695088][T13494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.972868][T13513] SET target dimension over the limit! [ 419.077832][T13515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 419.165073][T13520] ax25_connect(): syz.0.2339 uses autobind, please contact jreuter@yaina.de [ 419.463331][T13524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2341'. [ 419.583590][T13529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2342'. [ 419.598909][T13527] netlink: 'syz.2.2343': attribute type 10 has an invalid length. [ 420.061214][T13539] netlink: 'syz.4.2346': attribute type 16 has an invalid length. [ 420.080217][T13539] netlink: 'syz.4.2346': attribute type 17 has an invalid length. [ 420.097822][T13539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.318364][T13550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 420.765606][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 420.783652][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 421.620886][T13583] netlink: 'syz.4.2361': attribute type 20 has an invalid length. [ 421.873818][T13568] warn_alloc: 1 callbacks suppressed [ 421.873839][T13568] syz.1.2355: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 421.938622][T13568] CPU: 1 UID: 0 PID: 13568 Comm: syz.1.2355 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 421.938651][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.938664][T13568] Call Trace: [ 421.938671][T13568] [ 421.938680][T13568] dump_stack_lvl+0x241/0x360 [ 421.938712][T13568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.938735][T13568] ? __pfx__printk+0x10/0x10 [ 421.938760][T13568] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 421.938805][T13568] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 421.938836][T13568] warn_alloc+0x278/0x410 [ 421.938865][T13568] ? __pfx_warn_alloc+0x10/0x10 [ 421.938894][T13568] ? hash_mac_create+0x312/0xf00 [ 421.938923][T13568] ? __get_vm_area_node+0x1c8/0x2d0 [ 421.938955][T13568] ? __get_vm_area_node+0x25c/0x2d0 [ 421.938995][T13568] __vmalloc_node_range_noprof+0x62f/0x1380 [ 421.939046][T13568] ? rcu_is_watching+0x15/0xb0 [ 421.939078][T13568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.939100][T13568] ? rcu_is_watching+0x15/0xb0 [ 421.939124][T13568] ? trace_kmalloc+0x1f/0xd0 [ 421.939150][T13568] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 421.939197][T13568] ? __kvmalloc_node_noprof+0x72/0x190 [ 421.939236][T13568] __kvmalloc_node_noprof+0x142/0x190 [ 421.939270][T13568] ? hash_mac_create+0x312/0xf00 [ 421.939299][T13568] hash_mac_create+0x312/0xf00 [ 421.939334][T13568] ? __nla_parse+0x40/0x60 [ 421.939359][T13568] ? __pfx_hash_mac_create+0x10/0x10 [ 421.939389][T13568] ip_set_create+0xa78/0x1960 [ 421.939419][T13568] ? ip_set_create+0x48a/0x1960 [ 421.939451][T13568] ? __pfx_ip_set_create+0x10/0x10 [ 421.939514][T13568] ? nfnetlink_rcv_msg+0x225/0x1180 [ 421.939541][T13568] nfnetlink_rcv_msg+0xbec/0x1180 [ 421.939568][T13568] ? nfnetlink_rcv_msg+0x225/0x1180 [ 421.939620][T13568] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 421.939644][T13568] ? stack_trace_save+0x118/0x1d0 [ 421.939698][T13568] ? dev_hard_start_xmit+0x27a/0x7d0 [ 421.939724][T13568] ? __dev_queue_xmit+0x1b73/0x3f40 [ 421.939750][T13568] ? __netlink_deliver_tap+0x561/0x7f0 [ 421.939782][T13568] ? netlink_deliver_tap+0x19d/0x1b0 [ 421.939814][T13568] ? netlink_unicast+0x7c4/0x990 [ 421.939841][T13568] ? netlink_sendmsg+0x8de/0xcb0 [ 421.939860][T13568] ? __sock_sendmsg+0x221/0x270 [ 421.939889][T13568] ? ____sys_sendmsg+0x53a/0x860 [ 421.939913][T13568] ? __sys_sendmsg+0x269/0x350 [ 421.939955][T13568] netlink_rcv_skb+0x206/0x480 [ 421.939989][T13568] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 421.940019][T13568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.940079][T13568] ? apparmor_capable+0x13b/0x1b0 [ 421.940112][T13568] ? bpf_lsm_capable+0x9/0x10 [ 421.940144][T13568] ? security_capable+0x7e/0x2d0 [ 421.940186][T13568] nfnetlink_rcv+0x297/0x2ab0 [ 421.940219][T13568] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 421.940253][T13568] ? __dev_queue_xmit+0x2f4/0x3f40 [ 421.940284][T13568] ? __dev_queue_xmit+0x1775/0x3f40 [ 421.940312][T13568] ? kasan_save_track+0x51/0x80 [ 421.940354][T13568] ? ____sys_sendmsg+0x53a/0x860 [ 421.940383][T13568] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 421.940408][T13568] ? __dev_queue_xmit+0x2f4/0x3f40 [ 421.940440][T13568] ? __pfx___dev_queue_xmit+0x10/0x10 [ 421.940486][T13568] ? ref_tracker_free+0x643/0x7e0 [ 421.940508][T13568] ? __asan_memcpy+0x40/0x70 [ 421.940529][T13568] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.940548][T13568] ? __skb_clone+0x5c/0x6c0 [ 421.940591][T13568] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.940621][T13568] ? skb_clone+0x240/0x390 [ 421.940648][T13568] ? __pfx_lock_release+0x10/0x10 [ 421.940681][T13568] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 421.940737][T13568] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.940789][T13568] netlink_unicast+0x7f6/0x990 [ 421.940829][T13568] ? __pfx_netlink_unicast+0x10/0x10 [ 421.940856][T13568] ? __virt_addr_valid+0x45f/0x530 [ 421.940878][T13568] ? __phys_addr_symbol+0x2f/0x70 [ 421.940897][T13568] ? __check_object_size+0x47a/0x730 [ 421.940930][T13568] netlink_sendmsg+0x8de/0xcb0 [ 421.940963][T13568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.940989][T13568] ? aa_sock_msg_perm+0x91/0x160 [ 421.941028][T13568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.941046][T13568] __sock_sendmsg+0x221/0x270 [ 421.941090][T13568] ____sys_sendmsg+0x53a/0x860 [ 421.941126][T13568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.941150][T13568] ? __fget_files+0x2a/0x410 [ 421.941185][T13568] ? __fget_files+0x2a/0x410 [ 421.941245][T13568] __sys_sendmsg+0x269/0x350 [ 421.941271][T13568] ? __pfx_futex_wake+0x10/0x10 [ 421.941308][T13568] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.941384][T13568] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.941419][T13568] ? do_syscall_64+0x100/0x230 [ 421.941455][T13568] ? do_syscall_64+0xb6/0x230 [ 421.941490][T13568] do_syscall_64+0xf3/0x230 [ 421.941522][T13568] ? clear_bhb_loop+0x35/0x90 [ 421.941557][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.941586][T13568] RIP: 0033:0x7f3422f8d169 [ 421.941605][T13568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.941623][T13568] RSP: 002b:00007f3423d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.941647][T13568] RAX: ffffffffffffffda RBX: 00007f34231a6080 RCX: 00007f3422f8d169 [ 421.941663][T13568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 421.941676][T13568] RBP: 00007f342300e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 421.941690][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.941703][T13568] R13: 0000000000000000 R14: 00007f34231a6080 R15: 00007ffe3f2d24c8 [ 421.941736][T13568] [ 421.941745][T13568] Mem-Info: [ 422.491706][T13568] active_anon:13029 inactive_anon:0 isolated_anon:0 [ 422.491706][T13568] active_file:1480 inactive_file:38442 isolated_file:0 [ 422.491706][T13568] unevictable:768 dirty:419 writeback:0 [ 422.491706][T13568] slab_reclaimable:12001 slab_unreclaimable:123139 [ 422.491706][T13568] mapped:29023 shmem:1426 pagetables:964 [ 422.491706][T13568] sec_pagetables:0 bounce:0 [ 422.491706][T13568] kernel_misc_reclaimable:0 [ 422.491706][T13568] free:1285736 free_pcp:193 free_cma:0 [ 422.537329][T13568] Node 0 active_anon:52316kB inactive_anon:0kB active_file:5920kB inactive_file:153696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116092kB dirty:1676kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11148kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no [ 422.577725][T13568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 422.635822][T13568] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.663617][T13568] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 422.669535][T13568] Node 0 DMA32 free:1215208kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:52276kB inactive_anon:0kB active_file:5920kB inactive_file:153372kB unevictable:1536kB writepending:1676kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:2848kB local_pcp:1124kB free_cma:0kB [ 422.703269][T13568] lowmem_reserve[]: 0 0 0 0 0 [ 422.708411][T13568] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.735640][T13568] lowmem_reserve[]: 0 0 0 0 0 [ 422.740503][T13568] Node 1 Normal free:3910376kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB [ 422.780096][T13568] lowmem_reserve[]: 0 0 0 0 0 [ 422.785465][T13568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 422.804631][T13568] Node 0 DMA32: 101*4kB (UME) 1356*8kB (UME) 775*16kB (UME) 1591*32kB (UME) 340*64kB (UME) 61*128kB (UME) 21*256kB (UM) 8*512kB (UM) 5*1024kB (ME) 5*2048kB (ME) 266*4096kB (M) = 1218500kB [ 422.842100][T13568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 422.870817][T13568] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 45*16kB (UME) 205*32kB (UME) 82*64kB (UME) 24*128kB (UME) 13*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910376kB [ 422.898888][T13568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.923687][T13568] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.943370][T13568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.964112][T13568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.980861][T13568] 41348 total pagecache pages [ 422.987008][T13568] 0 pages in swap cache [ 423.013492][T13568] Free swap = 124996kB [ 423.017720][T13568] Total swap = 124996kB [ 423.021960][T13568] 2097051 pages RAM [ 423.034125][T13568] 0 pages HighMem/MovableOnly [ 423.038833][T13568] 427906 pages reserved [ 423.043006][T13568] 0 pages cma reserved [ 423.710631][T13621] lo speed is unknown, defaulting to 1000 [ 423.808122][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 423.886998][T13621] lo speed is unknown, defaulting to 1000 [ 424.496259][T13629] pimreg: entered allmulticast mode [ 424.501688][T13633] 8021q: VLANs not supported on pimreg [ 424.668281][T13629] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 424.676438][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'. [ 424.694065][T13629] pimreg: left allmulticast mode [ 424.870577][T13636] bond0: entered promiscuous mode [ 424.921180][T13636] bond0: entered allmulticast mode [ 424.933046][T13636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.192771][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 425.441089][T13636] bond0 (unregistering): Released all slaves [ 425.469285][T13535] Set syz1 is full, maxelem 65536 reached [ 425.480704][T13658] Cannot find del_set index 286 as target [ 425.703203][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 426.481762][T13679] lo speed is unknown, defaulting to 1000 [ 426.506033][T13692] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2390'. [ 426.566826][T13679] lo speed is unknown, defaulting to 1000 [ 426.583037][T13692] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 427.928000][T13710] lo speed is unknown, defaulting to 1000 [ 427.949837][T13710] lo speed is unknown, defaulting to 1000 [ 428.950570][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 429.002608][T13728] netlink: 'syz.0.2401': attribute type 10 has an invalid length. [ 429.017975][T13725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.083076][T13725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 430.099210][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2405'. [ 430.182643][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 430.217185][T13741] lo speed is unknown, defaulting to 1000 [ 430.242876][T13741] lo speed is unknown, defaulting to 1000 [ 430.260501][T13743] ipt_rpfilter: unknown options [ 430.262010][T13741] lo speed is unknown, defaulting to 1000 [ 430.282204][T13743] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 430.528043][T13741] infiniband syz0: set active [ 430.534258][T13741] infiniband syz0: added lo [ 430.562289][T13741] RDS/IB: syz0: added [ 430.566570][T13741] smc: adding ib device syz0 with port count 1 [ 430.573987][T13741] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 430.635894][ T5890] lo speed is unknown, defaulting to 1000 [ 430.637703][T13746] lo speed is unknown, defaulting to 1000 [ 430.643879][ T26] lo speed is unknown, defaulting to 1000 [ 430.649035][T13746] lo speed is unknown, defaulting to 1000 [ 430.654548][T13750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2408'. [ 430.693135][T13741] lo speed is unknown, defaulting to 1000 [ 430.706575][T13751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2408'. [ 430.736062][T13750] bond0: entered promiscuous mode [ 430.857950][T13741] lo speed is unknown, defaulting to 1000 [ 431.102552][T13746] lo speed is unknown, defaulting to 1000 [ 431.389180][T13741] lo speed is unknown, defaulting to 1000 [ 431.688894][T13741] lo speed is unknown, defaulting to 1000 [ 431.920320][T13741] lo speed is unknown, defaulting to 1000 [ 432.834134][T13766] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 432.920823][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2413'. [ 432.955287][T13766] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 433.124501][T13767] lo speed is unknown, defaulting to 1000 [ 433.158565][T13766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2413'. [ 433.197492][T13767] lo speed is unknown, defaulting to 1000 [ 433.217052][T13766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2413'. [ 433.244801][T13767] lo speed is unknown, defaulting to 1000 [ 433.274801][T13766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2413'. [ 433.340672][T13766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2413'. [ 433.407073][T13773] netlink: 'syz.4.2415': attribute type 4 has an invalid length. [ 433.432649][ T26] lo speed is unknown, defaulting to 1000 [ 433.673870][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 433.718306][T13777] xt_bpf: check failed: parse error [ 433.790737][T13784] netlink: 'syz.4.2418': attribute type 10 has an invalid length. [ 433.893816][T13784] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 434.149561][T13793] netlink: 'syz.3.2422': attribute type 16 has an invalid length. [ 434.169552][T13793] netlink: 'syz.3.2422': attribute type 17 has an invalid length. [ 434.325221][T13793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.344286][T13802] No such timeout policy "syz0" [ 434.372368][ T9] lo speed is unknown, defaulting to 1000 [ 434.995349][T13820] netlink: 'syz.4.2429': attribute type 16 has an invalid length. [ 435.003775][T13820] netlink: 'syz.4.2429': attribute type 17 has an invalid length. [ 435.022962][T13820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.039132][ T26] lo speed is unknown, defaulting to 1000 [ 435.920856][T13847] __nla_validate_parse: 2 callbacks suppressed [ 435.920877][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 436.822537][T13860] lo speed is unknown, defaulting to 1000 [ 436.870219][T13860] lo speed is unknown, defaulting to 1000 [ 436.904838][T13860] lo speed is unknown, defaulting to 1000 [ 436.996329][T13878] xt_l2tp: v2 doesn't support IP mode [ 437.078788][T13882] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 437.111654][T13882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2442'. [ 437.339690][T13887] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 440.021953][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 440.127136][T13891] lo speed is unknown, defaulting to 1000 [ 440.155619][T13891] lo speed is unknown, defaulting to 1000 [ 440.184453][T13891] lo speed is unknown, defaulting to 1000 [ 440.290487][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 440.352430][T13902] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2446'. [ 440.411398][T13908] openvswitch: netlink: Missing valid actions attribute. [ 440.419598][T13908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.888092][T13925] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 441.235418][T13934] lo speed is unknown, defaulting to 1000 [ 441.263828][T13934] lo speed is unknown, defaulting to 1000 [ 441.289506][T13934] lo speed is unknown, defaulting to 1000 [ 441.299206][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 442.287466][T13948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'. [ 442.334110][T13948] x_tables: duplicate underflow at hook 4 [ 442.758073][T13934] lo speed is unknown, defaulting to 1000 [ 442.870685][T13934] lo speed is unknown, defaulting to 1000 [ 442.898568][T13934] lo speed is unknown, defaulting to 1000 [ 443.879818][T13966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2464'. [ 444.165201][T13973] No such timeout policy "syz0" [ 445.120366][T14000] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.129341][T14000] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.137836][T14000] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.146147][T14000] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.260717][T14000] xt_CT: No such helper "snmp" [ 445.666838][T14014] wg1: left promiscuous mode [ 445.671696][T14014] wg1: left allmulticast mode [ 445.691041][T14014] bridge0: left promiscuous mode [ 445.707391][T14014] macvlan0: left promiscuous mode [ 445.718810][ T5890] lo speed is unknown, defaulting to 1000 [ 445.797686][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2482'. [ 445.807383][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2482'. [ 445.826398][T14018] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 445.840572][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'. [ 446.035879][T14023] lo speed is unknown, defaulting to 1000 [ 446.042644][T14023] lo speed is unknown, defaulting to 1000 [ 446.084598][T14023] lo speed is unknown, defaulting to 1000 [ 446.439085][T14031] lo speed is unknown, defaulting to 1000 [ 446.474825][T14031] lo speed is unknown, defaulting to 1000 [ 446.486576][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 447.214338][T14031] lo speed is unknown, defaulting to 1000 [ 447.460144][T14039] lo speed is unknown, defaulting to 1000 [ 447.541972][T14039] lo speed is unknown, defaulting to 1000 [ 447.590063][T14039] lo speed is unknown, defaulting to 1000 [ 447.772351][T14046] team0: entered allmulticast mode [ 447.801779][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 448.542791][T14058] xt_l2tp: missing protocol rule (udp|l2tpip) [ 448.994518][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 449.223544][T14067] xt_TCPMSS: Only works on TCP SYN packets [ 449.397417][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2502'. [ 449.435705][T14073] lo speed is unknown, defaulting to 1000 [ 449.447830][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 449.483917][T14073] lo speed is unknown, defaulting to 1000 [ 449.544473][T14073] lo speed is unknown, defaulting to 1000 [ 449.552287][T14079] lo speed is unknown, defaulting to 1000 [ 449.597019][T14079] lo speed is unknown, defaulting to 1000 [ 449.670446][T14083] xt_socket: unknown flags 0x8 [ 449.741694][T14085] netlink: 'syz.2.2504': attribute type 126 has an invalid length. [ 450.024799][T14079] lo speed is unknown, defaulting to 1000 [ 451.024872][T14107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2510'. [ 451.056967][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 451.366602][T14112] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 451.394058][T14112] batman_adv: batadv0: Adding interface: ip6gretap4 [ 451.400976][T14112] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.435401][T14112] batman_adv: batadv0: Interface activated: ip6gretap4 [ 451.443983][T14112] batadv0: mtu less than device minimum [ 451.480448][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.493679][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.506531][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.519239][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.532055][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.544704][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.557468][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.570256][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.582920][T14112] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 452.630630][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 454.140226][T14178] netlink: 'syz.2.2524': attribute type 16 has an invalid length. [ 454.153575][T14178] netlink: 'syz.2.2524': attribute type 17 has an invalid length. [ 454.362131][T14180] bridge0: port 1(team0) entered blocking state [ 454.391853][T14180] bridge0: port 1(team0) entered disabled state [ 455.005622][T14201] lo speed is unknown, defaulting to 1000 [ 455.024837][T14201] lo speed is unknown, defaulting to 1000 [ 455.042837][T14201] lo speed is unknown, defaulting to 1000 [ 456.026933][T14227] wireguard1: entered promiscuous mode [ 456.033122][T14227] wireguard1: entered allmulticast mode [ 456.246901][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2539'. [ 456.507748][T14248] ax25_connect(): syz.3.2544 uses autobind, please contact jreuter@yaina.de [ 457.115611][T14246] ------------[ cut here ]------------ [ 457.121447][T14246] refcount_t: decrement hit 0; leaking memory. [ 457.174845][T14246] WARNING: CPU: 1 PID: 14246 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 457.184584][T14246] Modules linked in: [ 457.188509][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.3.2544 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 457.199565][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.209852][T14246] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 457.216305][T14246] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 38 7b 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 15 7b 31 0b 01 90 48 c7 c7 [ 457.236103][T14246] RSP: 0018:ffffc90003d8fb68 EFLAGS: 00010246 [ 457.242203][T14246] RAX: c75475ae95d85500 RBX: ffff888021ec264c RCX: ffff888044313c00 [ 457.250666][T14246] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 457.258942][T14246] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 457.267160][T14246] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888021ec2608 [ 457.275329][T14246] R13: 0000000000000000 R14: ffff888021ec264c R15: dffffc0000000000 [ 457.283340][T14246] FS: 0000555592b52500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 457.292559][T14246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.299354][T14246] CR2: 0000001b30704ff8 CR3: 000000003522e000 CR4: 00000000003526f0 [ 457.307528][T14246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.315703][T14246] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.324203][T14246] Call Trace: [ 457.327525][T14246] [ 457.330481][T14246] ? __warn+0x165/0x4d0 [ 457.334841][T14246] ? refcount_warn_saturate+0xfa/0x1d0 [ 457.340410][T14246] ? report_bug+0x2b3/0x500 [ 457.345118][T14246] ? refcount_warn_saturate+0xfa/0x1d0 [ 457.350670][T14246] ? handle_bug+0x60/0x90 [ 457.355262][T14246] ? exc_invalid_op+0x1a/0x50 [ 457.359982][T14246] ? asm_exc_invalid_op+0x1a/0x20 [ 457.365241][T14246] ? __warn_printk+0x292/0x360 [ 457.370050][T14246] ? refcount_warn_saturate+0xfa/0x1d0 [ 457.375742][T14246] ? refcount_warn_saturate+0xf9/0x1d0 [ 457.381247][T14246] ref_tracker_free+0x6af/0x7e0 [ 457.386267][T14246] ? __pfx_ref_tracker_free+0x10/0x10 [ 457.391692][T14246] ? ax25_destroy_socket+0x551/0x5c0 [ 457.397151][T14246] ax25_release+0x368/0x960 [ 457.401736][T14246] sock_close+0xbc/0x240 [ 457.406325][T14246] ? __pfx_sock_close+0x10/0x10 [ 457.411227][T14246] __fput+0x3e9/0x9f0 [ 457.415391][T14246] task_work_run+0x24f/0x310 [ 457.420153][T14246] ? _raw_spin_unlock+0x28/0x50 [ 457.425173][T14246] ? __pfx_task_work_run+0x10/0x10 [ 457.430321][T14246] ? syscall_exit_to_user_mode+0xa3/0x340 [ 457.436175][T14246] syscall_exit_to_user_mode+0x13f/0x340 [ 457.441865][T14246] do_syscall_64+0x100/0x230 [ 457.446594][T14246] ? clear_bhb_loop+0x35/0x90 [ 457.451320][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.457340][T14246] RIP: 0033:0x7fbd7fd8d169 [ 457.460812][T14259] lo speed is unknown, defaulting to 1000 [ 457.461777][T14246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.487416][T14246] RSP: 002b:00007ffc1d758478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 457.495995][T14246] RAX: 0000000000000000 RBX: 00007fbd7ffa7ba0 RCX: 00007fbd7fd8d169 [ 457.504075][T14246] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 457.512073][T14246] RBP: 00007fbd7ffa7ba0 R08: 000000000000027c R09: 0000001b1d75876f [ 457.513245][T14259] lo speed is unknown, defaulting to 1000 [ 457.520165][T14246] R10: 00000000003ffb60 R11: 0000000000000246 R12: 000000000006fa4a [ 457.520186][T14246] R13: 00007fbd7ffa5fa0 R14: ffffffffffffffff R15: 00007ffc1d758590 [ 457.520224][T14246] [ 457.520250][T14246] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.520265][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.3.2544 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 457.520290][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.520303][T14246] Call Trace: [ 457.520312][T14246] [ 457.520333][T14246] dump_stack_lvl+0x241/0x360 [ 457.520364][T14246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.520387][T14246] ? __pfx__printk+0x10/0x10 [ 457.520406][T14246] ? _printk+0xd5/0x120 [ 457.520429][T14246] ? __init_begin+0x41000/0x41000 [ 457.520462][T14246] ? vscnprintf+0x5d/0x90 [ 457.520492][T14246] panic+0x349/0x880 [ 457.520514][T14246] ? __warn+0x174/0x4d0 [ 457.520545][T14246] ? __pfx_panic+0x10/0x10 [ 457.520603][T14246] __warn+0x344/0x4d0 [ 457.520621][T14246] ? refcount_warn_saturate+0xfa/0x1d0 [ 457.520656][T14246] report_bug+0x2b3/0x500 [ 457.520683][T14246] ? refcount_warn_saturate+0xfa/0x1d0 [ 457.520719][T14246] handle_bug+0x60/0x90 [ 457.520739][T14246] exc_invalid_op+0x1a/0x50 [ 457.520760][T14246] asm_exc_invalid_op+0x1a/0x20 [ 457.520788][T14246] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 457.520819][T14246] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 38 7b 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 15 7b 31 0b 01 90 48 c7 c7 [ 457.520837][T14246] RSP: 0018:ffffc90003d8fb68 EFLAGS: 00010246 [ 457.520859][T14246] RAX: c75475ae95d85500 RBX: ffff888021ec264c RCX: ffff888044313c00 [ 457.520875][T14246] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 457.520889][T14246] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 457.520904][T14246] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888021ec2608 [ 457.520929][T14246] R13: 0000000000000000 R14: ffff888021ec264c R15: dffffc0000000000 [ 457.520951][T14246] ? __warn_printk+0x292/0x360 [ 457.520980][T14246] ? refcount_warn_saturate+0xf9/0x1d0 [ 457.521010][T14246] ref_tracker_free+0x6af/0x7e0 [ 457.521035][T14246] ? __pfx_ref_tracker_free+0x10/0x10 [ 457.521074][T14246] ? ax25_destroy_socket+0x551/0x5c0 [ 457.521122][T14246] ax25_release+0x368/0x960 [ 457.521158][T14246] sock_close+0xbc/0x240 [ 457.521190][T14246] ? __pfx_sock_close+0x10/0x10 [ 457.521224][T14246] __fput+0x3e9/0x9f0 [ 457.521281][T14246] task_work_run+0x24f/0x310 [ 457.521303][T14246] ? _raw_spin_unlock+0x28/0x50 [ 457.521335][T14246] ? __pfx_task_work_run+0x10/0x10 [ 457.521363][T14246] ? syscall_exit_to_user_mode+0xa3/0x340 [ 457.521397][T14246] syscall_exit_to_user_mode+0x13f/0x340 [ 457.521432][T14246] do_syscall_64+0x100/0x230 [ 457.521478][T14246] ? clear_bhb_loop+0x35/0x90 [ 457.521512][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.521540][T14246] RIP: 0033:0x7fbd7fd8d169 [ 457.521559][T14246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.521577][T14246] RSP: 002b:00007ffc1d758478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 457.521599][T14246] RAX: 0000000000000000 RBX: 00007fbd7ffa7ba0 RCX: 00007fbd7fd8d169 [ 457.521614][T14246] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 457.521627][T14246] RBP: 00007fbd7ffa7ba0 R08: 000000000000027c R09: 0000001b1d75876f [ 457.521642][T14246] R10: 00000000003ffb60 R11: 0000000000000246 R12: 000000000006fa4a [ 457.521656][T14246] R13: 00007fbd7ffa5fa0 R14: ffffffffffffffff R15: 00007ffc1d758590 [ 457.521710][T14246] [ 457.526419][T14246] Kernel Offset: disabled