last executing test programs: 23.585702602s ago: executing program 2 (id=404): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="810029bd7000ffdbdf252600000008000300", @ANYRES32=r1, @ANYBLOB="0a82fbecb301010101010000"], 0x28}}, 0x200400c4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='tunl0\x00', 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000540)={@local}, 0x14) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffd4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x49) bind$inet6(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000000}}) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r10, &(0x7f0000004a00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @remote, 0x1ff}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x198}}], 0x1, 0x20004100) 22.559541429s ago: executing program 2 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012081, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)={0xbb8, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x5}, 0x4f, 0x0, 0x2, 0xb7, 0x24, 'syz1\x00', "3c0a03df8f3fe5d55bee5b42cba2a88dd28539211b7ff9e7571bd533e5b3fd1a", "aed0dc472132d79b8d2b6bb4e44be30022c17540d1cf3a49b3623259c6e33471", [{0x10, 0x2, {0x1, 0xe2a}}, {0x6, 0x140, {0x3}}, {0x1000, 0x8, {0x0, 0x5}}, {0x5, 0xd, {0x3, 0xc00}}, {0x5, 0x800, {0x2, 0x6}}, {0xffff, 0x7, {0x1, 0x2}}, {0x1, 0x25, {0x3, 0x8000}}, {0x401, 0x10, {0x1, 0x6}}, {0x9, 0x100, {0x3, 0x2}}, {0x0, 0x5, {0x0, 0x8}}, {0x4, 0xd, {0x1, 0x1}}, {0x5, 0x4, {0x0, 0x2}}, {0x9, 0x7, {0x0, 0x1422}}, {0x6, 0x2, {0x0, 0x8}}, {0x8, 0xaf, {0x1, 0xfffff800}}, {0x7, 0x100, {0x3, 0x1}}, {0xf4, 0x1, {0x3, 0x2b9d}}, {0x7, 0x4, {0x3, 0x9}}, {0xe, 0x6, {0x1, 0xa}}, {0x47, 0x6a, {0x3, 0xe3}}, {0x6780, 0x6, {0x3, 0xff}}, {0x5, 0x1000, {0x1, 0xfffffff8}}, {0x8000, 0x8c4, {0x2, 0x2}}, {0x9, 0x9, {0x0, 0x2}}, {0x63, 0x3, {0x1}}, {0x8, 0x725, {0x0, 0x2}}, {0x5, 0x1, {0x0, 0x9}}, {0x0, 0x93a, {0x3, 0x5}}, {0x2, 0x9d9, {0x2}}, {0x6, 0x3, {0x3, 0x9}}, {0x6, 0x5, {0x1, 0x12000}}, {0x5, 0x9}, {0x2, 0x7, {0x3, 0xc}}, {0x5, 0xa2, {0x0, 0x9}}, {0x3, 0x2, {0x0, 0x3}}, {0x6, 0x200, {0x0, 0xffffffff}}, {0xc8d, 0x5, {0x1, 0x5}}, {0xe, 0x5, {0x0, 0xfffff801}}, {0x5, 0x2, {0x2, 0x1}}, {0x4, 0x3, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x9, 0x2a, 0xf, 0x2, 0x3, 'syz0\x00', "ebafdd5ccdceeca7f641f5c8fd184cd7c95ba15c2c677b0f883a0f493a213639", "274bae30743c4709bc34aef0c640dc3efa6d477dc2716b7ae598b7b466a2d6ff", [{0x4d5, 0x4316}, {0x570b, 0x0, {0x2, 0x2}}, {0x7, 0xab73, {0x2, 0xa}}, {0x1, 0x7, {0x2, 0x7}}, {0x5, 0x4, {0x3, 0xe00000}}, {0xad, 0x7, {0x0, 0x10001}}, {0x3, 0x1000, {0x1, 0xd}}, {0x7, 0x2, {0x3, 0x8}}, {0x1b, 0x38ee}, {0x7, 0x9, {0x1, 0xaf}}, {0x800, 0x8, {0x0, 0x401}}, {0x8, 0x5c, {0x1, 0x10}}, {0x80, 0xb, {0x1, 0x6}}, {0x0, 0x2, {0x3, 0x4}}, {0x101, 0x1, {0x3, 0x80000000}}, {0x2952, 0x9, {0x2, 0x8}}, {0x8, 0x6, {0x3, 0x2}}, {0x9, 0x6, {0x3, 0x3c6}}, {0x5, 0x5a, {0x2, 0x7fffffff}}, {0x6, 0xd, {0x3, 0x400}}, {0x7ff, 0x800, {0x1, 0x1ff}}, {0x5, 0x0, {0x1, 0x5}}, {0x1, 0xd, {0x0, 0x80000000}}, {0x6, 0x4, {0x0, 0x6}}, {0x1, 0x7, {0x2, 0x2}}, {0x7, 0x4, {0x2, 0x8}}, {0x0, 0x3, {0x2, 0x8}}, {0x4, 0x2, {0x0, 0x9}}, {0x6, 0x330, {0x0, 0x8}}, {0x3, 0xb, {0x1, 0x5}}, {0x5, 0x3ff, {0x3, 0x9}}, {0x6, 0x61f, {0x2, 0x5}}, {0x1, 0x3, {0x0, 0x3}}, {0x4, 0x13, {0x0, 0x3}}, {0x4, 0x7d5, {0x3, 0x5}}, {0x9, 0x1ff, {0x3, 0x7}}, {0x2, 0x4, {0x3, 0x8}}, {0x6, 0x0, {0x1, 0x7}}, {0x4, 0x12, {0xe9a0e833534ebeba, 0x3}}, {0x0, 0x53c8, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x4, 0x2, 0x3, 0x7ff, 0x23, 'syz1\x00', "3c9d129610707a7e0e3edc83ac1c59f0491759024a60224435b1969c105b849b", "49c17c1ba728b15f2d7d53821d0e479fcf0ebdb2d2fc6676a95f7c62d54fe80f", [{0x101, 0x7, {0x3, 0xfffffffe}}, {0x6, 0x4, {0x3, 0x1}}, {0x7fff, 0x9, {0x1, 0xa541}}, {0x9d6d, 0x6, {0x0, 0x8}}, {0x3, 0x4, {0x2, 0x9}}, {0x85, 0x7, {0x2, 0x3}}, {0x5, 0x81, {0x1, 0x6827}}, {0x4, 0x9, {0x0, 0xd}}, {0x0, 0x6, {0x3, 0x8}}, {0xff, 0x0, {0x1, 0x5}}, {0xe2, 0x5, {0x1, 0x4}}, {0x2, 0xfff, {0x2, 0x1}}, {0x6b, 0x6, {0x3, 0x80000001}}, {0x7ff, 0x7f, {0x1, 0x2}}, {0x976a, 0x2, {0x1, 0xfffffc00}}, {0x1, 0x666b, {0x0, 0xfffff000}}, {0x5, 0x0, {0x2, 0xd}}, {0x7, 0x16c6, {0x2, 0x3fff8000}}, {0x2, 0x80, {0x3, 0x9}}, {0x3, 0x7, {0x2, 0x5b3}}, {0x284, 0x1, {0x1, 0x1}}, {0x7, 0xc, {0x1, 0xffff941a}}, {0x8001, 0x3, {0x1, 0xf}}, {0xd, 0x5, {0x0, 0xe8b}}, {0x9, 0x29, {0x3, 0xb}}, {0x8, 0x4, {0x2}}, {0x8000, 0x9, {0x2, 0x73b}}, {0x4559, 0xfffe, {0x0, 0x7}}, {0x7, 0x9, {0x3, 0x19}}, {0x6, 0x6, {0x2, 0x9}}, {0x3, 0x8, {0x0, 0x9}}, {0x63c8, 0x0, {0x3, 0xffffffff}}, {0xcc67, 0x3e67, {0x0, 0xce5}}, {0xa9f, 0x8, {0x1, 0x24}}, {0x80, 0x9, {0x3, 0x1}}, {0x8, 0x5, {0x2, 0x7}}, {0xfff8, 0x9, {0x2, 0xc}}, {0x4, 0x200, {0x2, 0x7}}, {0xfffa, 0xffcd, {0x1, 0x7}}, {0x8, 0xff3a, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0xffff}, 0x73, 0x1, 0xff, 0x1, 0x10, 'syz0\x00', "65316f1f60ac6100630d8160ccd4bca36e6ead3618055510e17e24cd5d99729d", "3cc04536834286136ea801e1527836582c540290891e710a849294d5355c9118", [{0x3, 0x5, {0x0, 0x80}}, {0x2fa, 0x7, {0x3, 0x3}}, {0xff49, 0x3, {0x0, 0xff}}, {0x3, 0x0, {0x3, 0x6e78}}, {0x0, 0x13, {0x0, 0x7c}}, {0x4, 0x7ff, {0x3, 0x1000}}, {0x0, 0x4, {0x0, 0xae8e}}, {0xfff5, 0x4, {0x3, 0x40}}, {0x1, 0x1, {0x3, 0x3}}, {0x3, 0x5, {0x1, 0x80}}, {0xa7e, 0x2, {0x2, 0x8}}, {0x6, 0x4af, {0x1, 0x3}}, {0x0, 0x1, {0x0, 0x69cd}}, {0xf7, 0x3, {0x2, 0x9}}, {0x2, 0x81, {0x0, 0x8}}, {0x817d, 0x40, {0x2, 0x8}}, {0x84, 0x2, {0x0, 0xffffffff}}, {0x0, 0x1, {0x2}}, {0x7, 0x6, {0x3, 0xe2}}, {0xe3b, 0x9, {0x3, 0x4}}, {0x0, 0x9460, {0x0, 0x10001}}, {0x0, 0x3, {0x3, 0x1}}, {0x2, 0xa04, {0x2, 0x8}}, {0xfe7, 0x4, {0x2, 0xe9b2}}, {0x1932, 0x3, {0x1, 0x2}}, {0x7, 0xdc8e, {0x2, 0x8}}, {0x1, 0x94f7, {0x1, 0x8}}, {0x6, 0x1, {0x2, 0x8}}, {0x4, 0xfe57, {0x2, 0x40d2}}, {0x1, 0x4, {0x1, 0x6}}, {0x5, 0x0, {0x1, 0x8001}}, {0x2, 0x1, {0x0, 0xf7}}, {0x2, 0x1, {0x0, 0x3}}, {0x5, 0x52, {0x0, 0x4}}, {0x1000, 0x6, {0x0, 0x10000}}, {0x0, 0x5, {0x1, 0x400}}, {0x5, 0x1, {0x2, 0xfa55}}, {0x6, 0x4, {0x1, 0x45d9af9d}}, {0xfff, 0x1, {0x1, 0x3}}, {0x19d, 0x6, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x20000000}, 0xa7, 0x1, 0x70e, 0x6, 0x23, 'syz0\x00', "b08e5234fd05aed8a3177017e8ec58f1e72a273dfffe1f57cb000be26eb524c3", "ffa3699d97bdf3cf18f9cc12bfb38d441777d03abb4c2190d64fd2a8dbb20d70", [{0x6, 0x4023, {0x1, 0x3}}, {0x5, 0x9e8, {0x2, 0x3a}}, {0xfe01, 0xfff7, {0x1, 0x9}}, {0x459, 0xdb2, {0x0, 0x4}}, {0x52a, 0xfff, {0x2, 0x3}}, {0x81, 0x7, {0x0, 0x2}}, {0x3, 0xffab, {0x2, 0x2}}, {0x4, 0x3, {0x3, 0xb5}}, {0xfff, 0x9, {0x2, 0x9}}, {0x9, 0xfffe, {0x0, 0x5}}, {0x5, 0x4, {0x3, 0x7}}, {0x7, 0x8c6, {0x2, 0xffffffff}}, {0x6, 0x4, {0x1, 0x2}}, {0x7, 0x1, {0x2, 0x1}}, {0x4, 0x0, {0x0, 0x1ea}}, {0xfff8, 0x42, {0x1, 0x3}}, {0x6, 0x7, {0x3, 0x2}}, {0x2, 0x7, {0x2, 0xfffffff9}}, {0x80, 0x6, {0x2, 0x4}}, {0x0, 0xc, {0x0, 0x1}}, {0x9, 0x9, {0x3, 0x1}}, {0xa, 0x1, {0x2, 0x3}}, {0x8, 0x1000, {0x2, 0x8000}}, {0x7fff, 0x0, {0x3, 0x4}}, {0x9, 0x8, {0x2, 0x7}}, {0x7, 0xeb11, {0xcf3497f28ab7fa2e, 0x4}}, {0x8f, 0x49d, {0x3, 0x101}}, {0xf, 0x7, {0x0, 0x3}}, {0x4, 0x6d, {0x3, 0x100}}, {0x8, 0x6, {0x3, 0x8}}, {0x8001, 0xffff, {0x0, 0x3}}, {0x7, 0x6, {0x0, 0x5f}}, {0x7, 0x1, {0x0, 0x8}}, {0x7, 0x5, {0x1, 0x8}}, {0x3, 0x8, {0x3, 0x1}}, {0xffff, 0x6, {0x2, 0x8001}}, {0x8, 0x3, {0x2, 0x5}}, {0xc, 0x3, {0x0, 0x800}}, {0x7, 0x44e6, {0x2, 0x3}}, {0x200, 0x7, {0x1, 0x3}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) 22.383761335s ago: executing program 2 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x18, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000200)={0x4c, 0x3, 0x7, 0xb, 0x7, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181209000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x700, 0x0, 0x2, {{0x38, 0x4, 0x0, 0x7, 0xe0, 0x68, 0x0, 0xf0, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xda, [@remote]}, @ssrr={0x89, 0xf, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x61, 0x0, [{0x7, 0x10, "ec825d90fede40985f870e32de20"}, {0x0, 0xc, "52ef39521d8659eb62b4"}, {0x5, 0xe, "50b09d538be45968ad993860"}, {0x6, 0xb, "1f25650ac85cd7fc25"}, {0x5, 0x9, "e6877bd19c3094"}, {0x6, 0xb, "afc76be9ca210d8a92"}, {0x0, 0xc, "3424f4eca896abe1baa1"}, {0x1, 0x6, "e05f502a"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa3, 0x0, 0x7, [0xffffffff, 0x2, 0x4, 0x5]}, @timestamp={0x44, 0x8, 0x51, 0x0, 0xe, [0x2]}, @timestamp_prespec={0x44, 0x2c, 0x10, 0x3, 0x5, [{@empty, 0x1}, {@remote, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@broadcast, 0x7}, {@broadcast, 0x80000000}]}, @ra={0x94, 0x4}]}}}}}) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0xb, r3, 0x19, r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) 22.177527535s ago: executing program 2 (id=426): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016020000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x110}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 22.041898521s ago: executing program 2 (id=428): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x7, 0x6, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1, 0x20, 0x1}}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x0, 0xe1, 0x1000e0}], "f188"}, @datasec={0x5, 0x0, 0x0, 0xf, 0x2, [], "5ede"}]}, {0x0, [0x2e, 0x2e, 0x61, 0x30]}}, 0x0, 0x46, 0x0, 0x1, 0x100}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'erspan0\x00', r1, 0x80, 0x700, 0x3, 0x6, {{0xc, 0x4, 0x2, 0xd, 0x30, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x18, 0x24, 0x0, 0x8, [0x800, 0xfffffff7, 0x4, 0x5, 0x8]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc0, r0, 0x300, 0x70bd27, 0x25dfdbfd}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x4044080) 21.107470068s ago: executing program 2 (id=435): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001380)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendto$rxrpc(r8, &(0x7f00000027c0)="dc9df149", 0x4, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x7, 0x0}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0xa, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xf}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0xa, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xf}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 6.09652607s ago: executing program 32 (id=435): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001380)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendto$rxrpc(r8, &(0x7f00000027c0)="dc9df149", 0x4, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x7, 0x0}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0xa, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xf}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0xa, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xf}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 3.755687436s ago: executing program 3 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 3.561394782s ago: executing program 3 (id=592): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'rose0\x00', 0x0}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) close(0xffffffffffffffff) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xc}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) bind$packet(r0, &(0x7f0000000280)={0x11, 0x11, r2, 0x1, 0x3, 0x6, @local}, 0x14) (async) bind$packet(r0, &(0x7f0000000100)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 3.179352939s ago: executing program 1 (id=597): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.041021777s ago: executing program 3 (id=598): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ffcc000000a50052e226c5000056080000000000008500000007000000b70000000000fc009500000000000004ef8ff49d1a"], &(0x7f0000000980)='GPL\x00', 0x405, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000016c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b7f6289a7000fd002b00000000000a70a042cfbf00000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000e0000000000000000000000000079110000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008f9ffffff00000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2.631874068s ago: executing program 1 (id=602): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xa, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 2.415798499s ago: executing program 3 (id=604): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, &(0x7f0000000700)=@can, &(0x7f0000000400)=0x80, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000010900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a01010000000000000000070000000900010073797a30"], 0xb0}, 0x1, 0x0, 0x0, 0x4008050}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) (async) unshare(0x64000600) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240281, 0x0) syz_emit_ethernet(0x16e, &(0x7f0000000e00)=ANY=[@ANYBLOB="0180c2000003ffffffffffff884800000000000000000000000000000000002fdd0449ff0902020400685c8df301243a0000000000000000000000ffffe0000001fe8800000000000000000000000000013c0007006700000087000211680000002f1d000000000000040103040105000100c20400000004e7ca58d6ceaeea5adc0803593bf2e07bd1ea72b15fa77acbddc103a49db2a63d33cdb6f478c32e089cca82ef22d37690aab9d6bf1b1709f84188854ae8ff7ff00cc1868b83e6ed833d7c700a0d7f4bae15eb69ada823ce287d7d918f1e5638b42bfdad141ae535d02b0cdebb267ef7f5749aa3acac34e59410f6f816ac494c20241c9904a5b8ccbaef9a089cf75cc8e3fdcd78bae1c4fac4ecef6ccf274611233ae3ca417e3989534fd24379e6b92b68b369606c7745312c1b7a324258a14efc33c109614d48c82d3be2e28f01020000c20400000001010100c204000000070000840001d06600000087009078fe8000000000000000"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r4) (async) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xee, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000002000000080000000000008000000000", @ANYRES32=r1, @ANYBLOB='\v\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000002000200000000000000000000e3b29b09000000000000090000"], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r6, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r6, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000001800000030000000100000000800600", @ANYRES32=r7, @ANYBLOB='\t\x00'/20, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYRES16=r9], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000640)="7e017eeee8bd59c5fcaa017171634fad35b3ccfd5a09115c8f893beeb3fa18ff9ade32df008473866c25b26e340c150f956add884d688166f0f7dcfc9a62033cba321c194eac28e38798c9d5c75f8571d4501f1cfc4ac09f7b52900d", &(0x7f0000000b00)=""/261, &(0x7f0000000c40)="35d50fee490c504ebbe607826a24adee9254d6177f208f4d85851e2918d9e8055d6618519ec5d9a82e2f86366ff493eae9cb371f98ce89b6a85d58c2f2e0b6179970f6d756ab25f81665c26ce3307418d4f5d6923d0eefa9fef355d083ac64e689d201d7142c55fe07ce2a98162eb15d8d4960f3ffd052032d11c2db4397f2454fa88a490a4c92ecb78c4097ea", &(0x7f0000000840)="bc8f2f3b49a8d9ae3f927c92f86933f67a48710900676ad5daa4d3ccdce4a147b9818029a47609c8089e6458d96267bd7ed3b12e41f77ef6f833f5b6b0adcd9f4081c2b1b876545170ca73fa42109b87abe58461811fc323fee64fd683d28ee9b9633a", 0x80100001, r7, 0x4}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r10}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r11}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00'}) 1.81148898s ago: executing program 4 (id=607): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x7c, 0x7, 0xa, 0x4, 0x2, 0x81}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r3 = accept4(r2, 0x0, 0x0, 0x80000) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) listen(r4, 0xfb) setsockopt$sock_int(r3, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007910100c000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000180), 0x4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r9, 0x1, 0x20, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x28}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x124) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bind$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x38000000}}, 0x24) 1.479763845s ago: executing program 0 (id=610): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x110, 0xa, 0x148, 0x110, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2f}, 0x0, 0xf0, 0x110, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x100000000000000, 0xff, 0x0, 0x0, 0x8, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="09a7def625d3f143f30bfeb099ecaf114557085f3666db4fa968b258cf944a6b3185e4ddd45f3bd1be8e5a8bdda5514c8627362e004cd7d20f7a93af228cc58220d01302844e02abd739dd9f04cacfb4ce4644c65438f47092040b49adeb0d35f5ef833d56a296f426c80dd7dbc8cfd20c8a19f7c1f37a379db866d12732cc69621d50ef8491728881437f2c9bde52f2a4320af55332945b35cffd89c19b5896ed88c924faba54f6156322f96a9fcbf39b328684e80a"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000004f0000007b0a00ff000000001d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000950000000000000045cfd5a234496b3c9514c7b244788bb2b624722340e769031220873ef65ef56cb77ed831628791e4ba8c26ed2bedac10a17c0e7768e9f36e10b8993000fcd2f3275f3ba5f51138"], &(0x7f0000000140)='GPL\x00', 0x2, 0x10, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.410777515s ago: executing program 1 (id=611): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x7, 0x1, 0x48, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, 0x700, 0x40, 0x7, 0x1}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) socket(0x200000000000011, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x400000008000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r7 = socket(0x11, 0x2, 0x0) write(r1, &(0x7f0000000000)="fc0000", 0x3) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000000c0)={0x3, 0x3ff, 0x2, 0x6, 0x5, 0x2, 0xb}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r8, 0x0, 0x4a0a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r9, @ANYRES16=r5], 0x1c}], 0x1}, 0x0) 1.186850984s ago: executing program 4 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 1.043533321s ago: executing program 0 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.043105678s ago: executing program 4 (id=614): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) (fail_nth: 7) 891.708751ms ago: executing program 4 (id=615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="e146", 0x2}, {&(0x7f0000000240)="ece4c7f8", 0x4}], 0x2}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800008004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000004000000850000000e0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 890.756832ms ago: executing program 0 (id=616): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001600000000000000000000000700290094040001"], 0x38}, 0x0) 789.318049ms ago: executing program 0 (id=617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040080) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000210400f2fffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c00028006000500810000000a000100aaaaaaaaaa2e0000"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000210400f2fffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c00028006000500810000000a000100aaaaaaaaaa2e0000"], 0x48}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x9}, &(0x7f00000002c0)=0x8) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x14, 0x0, &(0x7f00000000c0)) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="6803", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="a4e26125e4", 0x5}], 0x1}}], 0x3, 0x40448c0) (async) sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="6803", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="a4e26125e4", 0x5}], 0x1}}], 0x3, 0x40448c0) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) gettid() (async) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r5, &(0x7f00000000c0)=r6, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e0700000000ebffffff0700010004"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e0700000000ebffffff0700010004"], 0x3c}}, 0x0) 517.926203ms ago: executing program 3 (id=618): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00075bac88262ae4c0c5060d57f251c078ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffe1ff", 0x58}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0x31, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x2, 0x2, {0xa, 0x4e23, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}}, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x2c, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xfffd}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x2, 0x0, 0x3, 0x4, 0x100}, "3d8971389f7b"}}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000500)=""/117, 0x75, 0x0, &(0x7f0000000580)=""/123, 0x7b}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000040e08b000000b000000017630000fcffffff950000000000000045eb6050923ec3688e11d4779da72df63ee180248a47c80a696b441bebf85f12c2f543eb70234a181e97399a37d218f64438407f776ad30ec4079eeec9013600f49e0b015459fe5cf3791a8a0864eea8a06c7f638958efcd21f87bc7bfd07aa5a0fcf1dc033e30933e779e4bae5e3f818b072a5d30a8c97e9520ae38c72bd4deb9"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}], 0x1c) 455.865204ms ago: executing program 4 (id=619): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000400000000140000000000000029000000"], 0x48}}], 0x1, 0x8000) 438.513107ms ago: executing program 1 (id=620): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000080)='\x00\x00Z\xd9\xccf[2P\xf0\x1c\xdc\x8e\xab\x00\x00\xb4\xdd\x8d\xc5\xd5,\xf9\xcf\x00\x00\x00'}, 0x30) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7ffbc72b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) close(r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9630560f", @ANYRES16=r5, @ANYBLOB="010000000080fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c002380060001007a000000"], 0x28}, 0x1, 0x0, 0x0, 0x24009085}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0xfffffffc) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="30a8ab00558204f016dbafef61", @ANYRES16=r12, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 286.434477ms ago: executing program 0 (id=621): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x42, 0x4, 0x1460, 0xffffffff, 0x11a8, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x13c8, 0x13c8, 0x13c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0xff, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0xfffffffffffffffe}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x5, 0x5, 0x1, 0x4], 0x6, 0x1}, {0x2, [0x0, 0x4, 0x5, 0x1, 0x2, 0x5], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x14f9) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8000) 187.764925ms ago: executing program 4 (id=622): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x110, 0xa, 0x148, 0x110, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2f}, 0x0, 0xf0, 0x110, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x100000000000000, 0xff, 0x0, 0x0, 0x8, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x460) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="09a7def625d3f143f30bfeb099ecaf114557085f3666db4fa968b258cf944a6b3185e4ddd45f3bd1be8e5a8bdda5514c8627362e004cd7d20f7a93af228cc58220d01302844e02abd739dd9f04cacfb4ce4644c65438f47092040b49adeb0d35f5ef833d56a296f426c80dd7dbc8cfd20c8a19f7c1f37a379db866d12732cc69621d50ef8491728881437f2c9bde52f2a4320af55332945b35cffd89c19b5896ed88c924faba54f6156322f96a9fcbf39b328684e80a"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000004f0000007b0a00ff000000001d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000950000000000000045cfd5a234496b3c9514c7b244788bb2b624722340e769031220873ef65ef56cb77ed831628791e4ba8c26ed2bedac10a17c0e7768e9f36e10b8993000fcd2f3275f3ba5f51138"], &(0x7f0000000140)='GPL\x00', 0x2, 0x10, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 187.54659ms ago: executing program 1 (id=623): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000005e007f", 0x7}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0xb0, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x6, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffc9a, 0x1, 0x88}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 103.501507ms ago: executing program 3 (id=624): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r7, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f0000000440)=""/86, &(0x7f0000000740)=0x56) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@private, @loopback, 0x0}, &(0x7f0000000300)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x90, r11, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000668c30fb1b000300", @ANYRES32=r10, @ANYBLOB="08002600940900000400b8000800b70099000000"], 0x30}}, 0x0) 67.613546ms ago: executing program 1 (id=625): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x46d24912c17041a6}, 0x200040d4) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 0s ago: executing program 0 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd28, 0x800}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 65.372072][ T5823] cgroup: Unknown subsys name 'net' [ 65.521134][ T5823] cgroup: Unknown subsys name 'cpuset' [ 65.532029][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.902513][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.322255][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.331783][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.340171][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.349751][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.357070][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.368499][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.389630][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.397511][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.406452][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.416265][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.423588][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.431269][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.438881][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.447150][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.448830][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.454600][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.463739][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.469716][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.476554][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.491091][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.500537][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.514051][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.522709][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.530181][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.544395][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.106581][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.157192][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.268112][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 70.419878][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 70.436844][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.444207][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.452905][ T5839] bridge_slave_0: entered allmulticast mode [ 70.460091][ T5839] bridge_slave_0: entered promiscuous mode [ 70.469286][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.476459][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.483735][ T5839] bridge_slave_1: entered allmulticast mode [ 70.491892][ T5839] bridge_slave_1: entered promiscuous mode [ 70.499262][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.591836][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.599440][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.606574][ T5834] bridge_slave_0: entered allmulticast mode [ 70.615516][ T5834] bridge_slave_0: entered promiscuous mode [ 70.625628][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.638389][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.678465][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.686023][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.693749][ T5834] bridge_slave_1: entered allmulticast mode [ 70.701688][ T5834] bridge_slave_1: entered promiscuous mode [ 70.747853][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.755174][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.762852][ T5845] bridge_slave_0: entered allmulticast mode [ 70.770194][ T5845] bridge_slave_0: entered promiscuous mode [ 70.784762][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.791964][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.799702][ T5845] bridge_slave_1: entered allmulticast mode [ 70.806654][ T5845] bridge_slave_1: entered promiscuous mode [ 70.838499][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.886639][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.899051][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.910467][ T5839] team0: Port device team_slave_0 added [ 70.940520][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.953540][ T5839] team0: Port device team_slave_1 added [ 71.044651][ T5834] team0: Port device team_slave_0 added [ 71.078260][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.085447][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.111937][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.123656][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.132302][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.139756][ T5838] bridge_slave_0: entered allmulticast mode [ 71.147217][ T5838] bridge_slave_0: entered promiscuous mode [ 71.154584][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.161826][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.169140][ T5846] bridge_slave_0: entered allmulticast mode [ 71.176054][ T5846] bridge_slave_0: entered promiscuous mode [ 71.184666][ T5834] team0: Port device team_slave_1 added [ 71.205184][ T5845] team0: Port device team_slave_0 added [ 71.214504][ T5845] team0: Port device team_slave_1 added [ 71.228841][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.235798][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.262273][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.283206][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.291048][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.298661][ T5838] bridge_slave_1: entered allmulticast mode [ 71.305638][ T5838] bridge_slave_1: entered promiscuous mode [ 71.313137][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.321773][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.329288][ T5846] bridge_slave_1: entered allmulticast mode [ 71.336351][ T5846] bridge_slave_1: entered promiscuous mode [ 71.400866][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.409617][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.426966][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.434288][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.460560][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.513945][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.524928][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.532760][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.558615][ T5852] Bluetooth: hci0: command tx timeout [ 71.562583][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.569369][ T5847] Bluetooth: hci2: command tx timeout [ 71.581354][ T5156] Bluetooth: hci1: command tx timeout [ 71.599139][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.606116][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.634984][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.647621][ T5156] Bluetooth: hci3: command tx timeout [ 71.651907][ T5847] Bluetooth: hci4: command tx timeout [ 71.656292][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.668680][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.698130][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.714653][ T5839] hsr_slave_0: entered promiscuous mode [ 71.721929][ T5839] hsr_slave_1: entered promiscuous mode [ 71.731270][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.744018][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.755173][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.835626][ T5846] team0: Port device team_slave_0 added [ 71.844584][ T5846] team0: Port device team_slave_1 added [ 71.884801][ T5838] team0: Port device team_slave_0 added [ 71.893165][ T5838] team0: Port device team_slave_1 added [ 71.957742][ T5834] hsr_slave_0: entered promiscuous mode [ 71.964109][ T5834] hsr_slave_1: entered promiscuous mode [ 71.971320][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.979406][ T5834] Cannot create hsr debugfs directory [ 72.009772][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.016744][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.043191][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.056319][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.063615][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.090082][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.130496][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.137450][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.164258][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.177224][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.184289][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.210431][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.238572][ T5845] hsr_slave_0: entered promiscuous mode [ 72.244960][ T5845] hsr_slave_1: entered promiscuous mode [ 72.251293][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.259104][ T5845] Cannot create hsr debugfs directory [ 72.360628][ T5846] hsr_slave_0: entered promiscuous mode [ 72.366980][ T5846] hsr_slave_1: entered promiscuous mode [ 72.373742][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.381482][ T5846] Cannot create hsr debugfs directory [ 72.516325][ T5838] hsr_slave_0: entered promiscuous mode [ 72.522871][ T5838] hsr_slave_1: entered promiscuous mode [ 72.531549][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.539158][ T5838] Cannot create hsr debugfs directory [ 72.885205][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.897471][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.923437][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.954638][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.020802][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.036995][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.062144][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.090149][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.139868][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.168818][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.180373][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.203250][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.264660][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.296827][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.340396][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.366044][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.403938][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.464311][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.487326][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.504057][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.515842][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.527438][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.560712][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.568007][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.613400][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.620535][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.638142][ T5847] Bluetooth: hci1: command tx timeout [ 73.638166][ T5156] Bluetooth: hci2: command tx timeout [ 73.643570][ T5852] Bluetooth: hci0: command tx timeout [ 73.675954][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.717995][ T5847] Bluetooth: hci4: command tx timeout [ 73.723697][ T5852] Bluetooth: hci3: command tx timeout [ 73.731176][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.744600][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.804620][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.813638][ T3998] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.820810][ T3998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.833578][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.840920][ T3998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.895906][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.903136][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.934451][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.941648][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.042086][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.091531][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.132604][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.139782][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.159994][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.167128][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.184248][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.225246][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.271553][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.350935][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.358366][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.380751][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.387947][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.436363][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.569660][ T5839] veth0_vlan: entered promiscuous mode [ 74.659781][ T5839] veth1_vlan: entered promiscuous mode [ 74.703910][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.718128][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.790539][ T5839] veth0_macvtap: entered promiscuous mode [ 74.847544][ T5839] veth1_macvtap: entered promiscuous mode [ 74.973278][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.012181][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.021872][ T5834] veth0_vlan: entered promiscuous mode [ 75.047849][ T5834] veth1_vlan: entered promiscuous mode [ 75.076364][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.085888][ T3998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.122805][ T3998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.132951][ T3998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159816][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.197490][ T3998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.256206][ T5834] veth0_macvtap: entered promiscuous mode [ 75.290389][ T5834] veth1_macvtap: entered promiscuous mode [ 75.374031][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.392400][ T5846] veth0_vlan: entered promiscuous mode [ 75.394613][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.409084][ T5846] veth1_vlan: entered promiscuous mode [ 75.422818][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.432006][ T5845] veth0_vlan: entered promiscuous mode [ 75.491794][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.502322][ T5845] veth1_vlan: entered promiscuous mode [ 75.513824][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.529897][ T5838] veth0_vlan: entered promiscuous mode [ 75.535629][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.563671][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.573297][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.595578][ T5846] veth0_macvtap: entered promiscuous mode [ 75.606768][ T5846] veth1_macvtap: entered promiscuous mode [ 75.624787][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.636638][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.642536][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.658187][ T5838] veth1_vlan: entered promiscuous mode [ 75.720132][ T5852] Bluetooth: hci0: command tx timeout [ 75.724824][ T5156] Bluetooth: hci2: command tx timeout [ 75.725855][ T5847] Bluetooth: hci1: command tx timeout [ 75.798590][ T5847] Bluetooth: hci4: command tx timeout [ 75.798675][ T5156] Bluetooth: hci3: command tx timeout [ 75.820780][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.851093][ T5845] veth0_macvtap: entered promiscuous mode [ 75.876659][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.894359][ T5845] veth1_macvtap: entered promiscuous mode [ 75.911967][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.926904][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.942087][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.957203][ T5838] veth0_macvtap: entered promiscuous mode [ 75.983651][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.993627][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.011383][ T5838] veth1_macvtap: entered promiscuous mode [ 76.030376][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.030934][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039585][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.107259][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.130051][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.175009][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.200748][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.241676][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.309940][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.320233][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.330782][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.373328][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.387435][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.414847][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427020][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.451417][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.468767][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.477825][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.512789][ T5953] Illegal XDP return value 4270368200 on prog (id 4) dev N/A, expect packet loss! [ 76.655953][ T3998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.686307][ T3998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.724264][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.768371][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.853808][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.882990][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.987815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.997558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.100629][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.180640][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.233637][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.295674][ T5965] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 77.324836][ T5964] ipvlan2: entered promiscuous mode [ 77.339383][ T5965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.351847][ T5964] bridge0: port 3(ipvlan2) entered blocking state [ 77.358690][ T5964] bridge0: port 3(ipvlan2) entered disabled state [ 77.381122][ T5964] ipvlan2: entered allmulticast mode [ 77.396215][ T5964] bridge0: entered allmulticast mode [ 77.411553][ T5964] ipvlan2: left allmulticast mode [ 77.417253][ T5964] bridge0: left allmulticast mode [ 77.525345][ T5975] Bluetooth: MGMT ver 1.23 [ 77.551948][ T5959] Bluetooth: MGMT ver 1.23 [ 77.656468][ T5980] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.799309][ T5156] Bluetooth: hci1: command tx timeout [ 77.806506][ T5156] Bluetooth: hci0: command tx timeout [ 77.815963][ T5156] Bluetooth: hci2: command tx timeout [ 77.880377][ T5156] Bluetooth: hci4: command tx timeout [ 77.880445][ T5852] Bluetooth: hci3: command tx timeout [ 78.068975][ T5987] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 78.356844][ T5989] syz.4.5: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 78.435888][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.4.5 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 78.435915][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.435931][ T5989] Call Trace: [ 78.435942][ T5989] [ 78.435951][ T5989] dump_stack_lvl+0x189/0x250 [ 78.435989][ T5989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.436015][ T5989] ? __pfx__printk+0x10/0x10 [ 78.436035][ T5989] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 78.436053][ T5989] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 78.436074][ T5989] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 78.436096][ T5989] warn_alloc+0x214/0x310 [ 78.436115][ T5989] ? stack_depot_save_flags+0x429/0x900 [ 78.436141][ T5989] ? __pfx_warn_alloc+0x10/0x10 [ 78.436162][ T5989] ? kasan_save_track+0x4f/0x80 [ 78.436186][ T5989] ? xskq_create+0x56/0x170 [ 78.436202][ T5989] ? xsk_init_queue+0xb0/0x110 [ 78.436218][ T5989] ? xsk_setsockopt+0x43f/0x710 [ 78.436232][ T5989] ? do_sock_setsockopt+0x257/0x3e0 [ 78.436253][ T5989] ? __x64_sys_setsockopt+0x18b/0x220 [ 78.436273][ T5989] ? do_syscall_64+0xfa/0x3b0 [ 78.436291][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.436317][ T5989] __vmalloc_node_range_noprof+0x125/0x12f0 [ 78.436366][ T5989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.436385][ T5989] ? xskq_create+0x56/0x170 [ 78.436403][ T5989] ? __kasan_kmalloc+0x93/0xb0 [ 78.436424][ T5989] vmalloc_user_noprof+0xad/0xf0 [ 78.436441][ T5989] ? xskq_create+0xbf/0x170 [ 78.436474][ T5989] xskq_create+0xbf/0x170 [ 78.436497][ T5989] xsk_init_queue+0xb0/0x110 [ 78.436516][ T5989] xsk_setsockopt+0x43f/0x710 [ 78.436535][ T5989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.436549][ T5989] ? __lock_acquire+0xab9/0xd20 [ 78.436576][ T5989] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 78.436594][ T5989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.436610][ T5989] do_sock_setsockopt+0x257/0x3e0 [ 78.436638][ T5989] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 78.436662][ T5989] ? __fget_files+0x2a/0x420 [ 78.436684][ T5989] __x64_sys_setsockopt+0x18b/0x220 [ 78.436714][ T5989] do_syscall_64+0xfa/0x3b0 [ 78.436733][ T5989] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.436751][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.436768][ T5989] ? clear_bhb_loop+0x60/0xb0 [ 78.436789][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.436806][ T5989] RIP: 0033:0x7f760038e929 [ 78.436829][ T5989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.436843][ T5989] RSP: 002b:00007f760112f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.436863][ T5989] RAX: ffffffffffffffda RBX: 00007f76005b5fa0 RCX: 00007f760038e929 [ 78.436875][ T5989] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 78.436887][ T5989] RBP: 00007f7600410b39 R08: 0000000000000004 R09: 0000000000000000 [ 78.436898][ T5989] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.436910][ T5989] R13: 0000000000000000 R14: 00007f76005b5fa0 R15: 00007ffe0f9ae608 [ 78.436940][ T5989] [ 78.436980][ T5989] Mem-Info: [ 78.768130][ T5989] active_anon:5536 inactive_anon:0 isolated_anon:0 [ 78.768130][ T5989] active_file:981 inactive_file:39820 isolated_file:0 [ 78.768130][ T5989] unevictable:768 dirty:1522 writeback:0 [ 78.768130][ T5989] slab_reclaimable:10289 slab_unreclaimable:95828 [ 78.768130][ T5989] mapped:31272 shmem:1376 pagetables:1143 [ 78.768130][ T5989] sec_pagetables:0 bounce:0 [ 78.768130][ T5989] kernel_misc_reclaimable:0 [ 78.768130][ T5989] free:1304226 free_pcp:46445 free_cma:0 [ 78.790324][ T5996] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 78.848211][ T5989] Node 0 active_anon:22164kB inactive_anon:0kB active_file:3980kB inactive_file:159076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125096kB dirty:6120kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11840kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.935848][ T5989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.996099][ T5989] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.031440][ T5996] ipvlan2: entered promiscuous mode [ 79.042697][ T5996] bridge0: port 3(ipvlan2) entered blocking state [ 79.052123][ T5996] bridge0: port 3(ipvlan2) entered disabled state [ 79.062253][ T5996] ipvlan2: entered allmulticast mode [ 79.067576][ T5996] bridge0: entered allmulticast mode [ 79.076129][ T5996] ipvlan2: left allmulticast mode [ 79.076335][ T5989] lowmem_reserve[]: [ 79.081596][ T5996] bridge0: left allmulticast mode [ 79.106238][ T5989] 0 2500 2502 2502 2502 [ 79.114111][ T5989] Node 0 DMA32 free:1308256kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22152kB inactive_anon:0kB active_file:4076kB inactive_file:157240kB unevictable:1536kB writepending:6148kB present:3129332kB managed:2560944kB mlocked:0kB bounce:0kB free_pcp:158460kB local_pcp:81992kB free_cma:0kB [ 79.151027][ T5989] lowmem_reserve[]: 0 0 1 1 1 [ 79.156914][ T5989] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 79.190275][ T5989] lowmem_reserve[]: 0 0 0 0 0 [ 79.195541][ T5989] Node 1 Normal free:3900084kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21632kB local_pcp:15232kB free_cma:0kB [ 79.229746][ T5989] lowmem_reserve[]: 0 0 0 0 0 [ 79.234503][ T5989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 79.253830][ T5989] Node 0 DMA32: 59*4kB (U) 19*8kB (UME) 8*16kB (UE) 0*32kB 3*64kB (UME) 5*128kB (U) 4*256kB (U) 4*512kB (UE) 5*1024kB (UM) 2*2048kB (UE) 316*4096kB (M) = 1307972kB [ 79.284453][ T5989] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 79.300199][ T5989] Node 1 Normal: 199*4kB (UE) 73*8kB (UME) 43*16kB (UME) 51*32kB (UME) 19*64kB (UME) 9*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3900084kB [ 79.320521][ T5989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.331065][ T5989] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 79.411329][ T5989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 79.446187][ T5989] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 79.463236][ T5989] 42228 total pagecache pages [ 79.490246][ T5989] 0 pages in swap cache [ 79.497277][ T5989] Free swap = 124996kB [ 79.546266][ T5989] Total swap = 124996kB [ 79.572008][ T5989] 2097051 pages RAM [ 79.608484][ T5989] 0 pages HighMem/MovableOnly [ 79.611847][ T6009] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 79.630567][ T5989] 424709 pages reserved [ 79.662804][ T5989] 0 pages cma reserved [ 79.887211][ T6005] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 79.896508][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 79.955622][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 80.136290][ T6025] 8021q: VLANs not supported on ipvlan1 [ 80.804106][ T889] cfg80211: failed to load regulatory.db [ 81.169536][ T6046] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 81.367412][ T6046] ipvlan2: entered promiscuous mode [ 81.374721][ T6046] bridge0: port 3(ipvlan2) entered blocking state [ 81.381758][ T6046] bridge0: port 3(ipvlan2) entered disabled state [ 81.388712][ T6046] ipvlan2: entered allmulticast mode [ 81.397075][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 81.411098][ T6046] bridge0: entered allmulticast mode [ 81.418505][ T6046] ipvlan2: left allmulticast mode [ 81.445163][ T6046] bridge0: left allmulticast mode [ 81.453629][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 81.462831][ T6058] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 81.521220][ T6029] netlink: 'syz.1.18': attribute type 6 has an invalid length. [ 81.624816][ T6060] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 82.428135][ T6081] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 82.494475][ T6067] netlink: 64 bytes leftover after parsing attributes in process `syz.4.27'. [ 82.698606][ T6086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 83.255407][ T6096] Zero length message leads to an empty skb [ 83.381497][ T6103] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 83.398719][ T6103] netlink: 184 bytes leftover after parsing attributes in process `syz.3.36'. [ 83.410248][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36'. [ 83.429715][ T6102] ipvlan2: entered promiscuous mode [ 83.473910][ T6102] bridge0: port 3(ipvlan2) entered blocking state [ 83.484986][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 83.518025][ T6102] bridge0: port 3(ipvlan2) entered disabled state [ 83.539740][ T6106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.36'. [ 83.561868][ T6102] ipvlan2: entered allmulticast mode [ 83.567210][ T6102] bridge0: entered allmulticast mode [ 83.593822][ T6102] ipvlan2: left allmulticast mode [ 83.599393][ T6102] bridge0: left allmulticast mode [ 84.085031][ T6121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.41'. [ 84.245206][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.42'. [ 84.576821][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'. [ 84.921374][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 84.954587][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 84.990226][ T6148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.054177][ T6196] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 86.159872][ T6196] batman_adv: batadv0: Adding interface: team0 [ 86.187207][ T6196] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.260509][ T6196] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 86.986538][ T6225] x_tables: duplicate underflow at hook 1 [ 87.364607][ T6240] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 87.456988][ T6240] ipvlan2: entered promiscuous mode [ 87.492705][ T6240] bridge0: port 3(ipvlan2) entered blocking state [ 87.499767][ T6240] bridge0: port 3(ipvlan2) entered disabled state [ 87.506411][ T6240] ipvlan2: entered allmulticast mode [ 87.512361][ T6240] bridge0: entered allmulticast mode [ 87.520258][ T6240] ipvlan2: left allmulticast mode [ 87.525462][ T6240] bridge0: left allmulticast mode [ 87.666845][ T6246] __nla_validate_parse: 7 callbacks suppressed [ 87.666865][ T6246] netlink: 452 bytes leftover after parsing attributes in process `syz.3.76'. [ 87.786416][ T6250] netlink: 256 bytes leftover after parsing attributes in process `syz.0.77'. [ 88.395899][ T6275] xt_TCPMSS: Only works on TCP SYN packets [ 88.427504][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 88.448954][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 88.474608][ T6273] dummy0: entered promiscuous mode [ 88.517100][ T6273] macvtap1: entered promiscuous mode [ 88.566824][ T6273] macvtap1: entered allmulticast mode [ 88.597988][ T6273] dummy0: entered allmulticast mode [ 88.615101][ T6281] openvswitch: netlink: Key type 30 is not supported [ 88.642677][ T6241] bond0: (slave bond_slave_1): Releasing backup interface [ 88.808786][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 88.868074][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 88.948044][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 88.957981][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 89.263134][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 89.277137][ T6311] tun0: tun_chr_ioctl cmd 1074025681 [ 89.682885][ T6322] ipt_ECN: cannot use operation on non-tcp rule [ 89.844796][ T6331] syzkaller0: entered allmulticast mode [ 89.935574][ T6333] sctp: [Deprecated]: syz.3.97 (pid 6333) Use of int in max_burst socket option. [ 89.935574][ T6333] Use struct sctp_assoc_value instead [ 89.993518][ T6331] syzkaller0 (unregistering): left allmulticast mode [ 90.071703][ T6336] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 90.213496][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.222498][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.408232][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.415536][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.424139][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.431377][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.491035][ T6336] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.531889][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.572125][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.583412][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.612079][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.631551][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.636496][ T6344] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 90.781196][ T6344] ipvlan2: entered promiscuous mode [ 90.794469][ T6344] bridge0: port 3(ipvlan2) entered blocking state [ 90.800287][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 90.805162][ T6344] bridge0: port 3(ipvlan2) entered disabled state [ 90.834057][ T6344] ipvlan2: entered allmulticast mode [ 90.851980][ T6344] bridge0: entered allmulticast mode [ 90.859831][ T6344] ipvlan2: left allmulticast mode [ 90.865441][ T6344] bridge0: left allmulticast mode [ 91.172508][ T6360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.180143][ T6360] IPv6: NLM_F_CREATE should be set when creating new route [ 91.538877][ T6375] !: renamed from dummy0 (while UP) [ 91.804605][ T6384] x_tables: duplicate underflow at hook 1 [ 91.903068][ T6389] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 91.940444][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.948433][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.047277][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.054564][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.062136][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.069360][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.144102][ T6389] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.223922][ T6386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.419740][ T6414] netlink: 'syz.4.121': attribute type 7 has an invalid length. [ 92.427775][ T6414] netlink: 'syz.4.121': attribute type 8 has an invalid length. [ 92.592713][ T6414] bridge0: entered promiscuous mode [ 92.600689][ T6414] ip6gretap0: entered promiscuous mode [ 92.609697][ T6414] gretap0: entered promiscuous mode [ 92.934438][ T6431] Bluetooth: MGMT ver 1.23 [ 93.240383][ T6444] __nla_validate_parse: 3 callbacks suppressed [ 93.240402][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 93.518859][ T6460] netlink: 312 bytes leftover after parsing attributes in process `syz.4.129'. [ 93.544993][ T6457] bond0: entered promiscuous mode [ 93.625515][ T6457] bond_slave_0: entered promiscuous mode [ 93.652014][ T6457] bond_slave_1: entered promiscuous mode [ 93.724679][ T6457] bond0: left promiscuous mode [ 93.738595][ T6457] bond_slave_0: left promiscuous mode [ 93.746682][ T6457] bond_slave_1: left promiscuous mode [ 93.843994][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 94.460576][ T6467] bridge_slave_1: left allmulticast mode [ 94.470702][ T6467] bridge_slave_1: left promiscuous mode [ 94.486231][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.537582][ T6467] bridge_slave_0: left allmulticast mode [ 94.544902][ T6467] bridge_slave_0: left promiscuous mode [ 94.558550][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.652569][ T6502] tipc: Enabling of bearer rejected, failed to enable media [ 95.026740][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 95.075068][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 95.125915][ T6511] netlink: 'syz.4.137': attribute type 15 has an invalid length. [ 95.141843][ T6518] ipt_ECN: cannot use operation on non-tcp rule [ 95.179984][ T6511] netlink: 'syz.4.137': attribute type 18 has an invalid length. [ 95.477110][ T6505] syz.1.128: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.597154][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 95.608714][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.1.128 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 95.608749][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.608760][ T6505] Call Trace: [ 95.608768][ T6505] [ 95.608776][ T6505] dump_stack_lvl+0x189/0x250 [ 95.608811][ T6505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.608835][ T6505] ? __pfx__printk+0x10/0x10 [ 95.608853][ T6505] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.608873][ T6505] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.608893][ T6505] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 95.608914][ T6505] warn_alloc+0x214/0x310 [ 95.608939][ T6505] ? __pfx_warn_alloc+0x10/0x10 [ 95.608966][ T6505] ? __get_vm_area_node+0x28f/0x300 [ 95.609052][ T6505] ? __do_replace+0xb4/0xaa0 [ 95.609077][ T6505] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 95.609097][ T6505] ? stack_depot_save_flags+0x40/0x900 [ 95.609141][ T6505] ? translate_table+0x1b4d/0x1f90 [ 95.609169][ T6505] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.609197][ T6505] ? __do_replace+0xb4/0xaa0 [ 95.609213][ T6505] vzalloc_noprof+0xb2/0xf0 [ 95.609241][ T6505] ? __do_replace+0xb4/0xaa0 [ 95.609259][ T6505] __do_replace+0xb4/0xaa0 [ 95.609279][ T6505] ? __pfx_translate_table+0x10/0x10 [ 95.609311][ T6505] ? __pfx___do_replace+0x10/0x10 [ 95.609336][ T6505] ? _copy_from_user+0x94/0xb0 [ 95.609359][ T6505] do_arpt_set_ctl+0xa2a/0xf10 [ 95.609380][ T6505] ? __mutex_trylock_common+0x153/0x260 [ 95.609404][ T6505] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 95.609433][ T6505] ? rcu_is_watching+0x15/0xb0 [ 95.609476][ T6505] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 95.609498][ T6505] ? __pfx___mutex_lock+0x10/0x10 [ 95.609523][ T6505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.609542][ T6505] ? aa_sk_perm+0x81e/0x950 [ 95.609569][ T6505] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.609596][ T6505] nf_setsockopt+0x26c/0x290 [ 95.609622][ T6505] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 95.609646][ T6505] do_sock_setsockopt+0x257/0x3e0 [ 95.609674][ T6505] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 95.609702][ T6505] ? __fget_files+0x2a/0x420 [ 95.609731][ T6505] __x64_sys_setsockopt+0x18b/0x220 [ 95.609760][ T6505] do_syscall_64+0xfa/0x3b0 [ 95.609781][ T6505] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.609800][ T6505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.609818][ T6505] ? clear_bhb_loop+0x60/0xb0 [ 95.609839][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.609858][ T6505] RIP: 0033:0x7f4da198e929 [ 95.609877][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.609890][ T6505] RSP: 002b:00007f4da2836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.609909][ T6505] RAX: ffffffffffffffda RBX: 00007f4da1bb6240 RCX: 00007f4da198e929 [ 95.609923][ T6505] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.609934][ T6505] RBP: 00007f4da1a10b39 R08: 0000000000000068 R09: 0000000000000000 [ 95.609946][ T6505] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 95.609957][ T6505] R13: 0000000000000000 R14: 00007f4da1bb6240 R15: 00007fffaa167188 [ 95.609985][ T6505] [ 95.609993][ T6505] Mem-Info: [ 95.843747][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 95.929698][ T6505] active_anon:8477 inactive_anon:0 isolated_anon:0 [ 95.929698][ T6505] active_file:1441 inactive_file:39826 isolated_file:0 [ 95.929698][ T6505] unevictable:768 dirty:327 writeback:0 [ 95.929698][ T6505] slab_reclaimable:10350 slab_unreclaimable:98050 [ 95.929698][ T6505] mapped:34348 shmem:4229 pagetables:1221 [ 95.929698][ T6505] sec_pagetables:0 bounce:0 [ 95.929698][ T6505] kernel_misc_reclaimable:0 [ 95.929698][ T6505] free:1320661 free_pcp:15789 free_cma:0 [ 95.985348][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 95.992095][ T6505] Node 0 active_anon:33904kB inactive_anon:0kB active_file:5764kB inactive_file:159104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137436kB dirty:1220kB writeback:0kB shmem:15380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12300kB pagetables:4772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.992155][ T6505] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.992228][ T6505] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.992283][ T6505] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 96.229917][ T6505] Node 0 DMA32 free:1363324kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33752kB inactive_anon:0kB active_file:5764kB inactive_file:157268kB unevictable:1536kB writepending:1216kB present:3129332kB managed:2560944kB mlocked:0kB bounce:0kB free_pcp:44584kB local_pcp:20608kB free_cma:0kB [ 96.286356][ T6505] lowmem_reserve[]: 0 0 1 1 1 [ 96.377770][ T6505] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 96.477577][ T6505] lowmem_reserve[]: 0 0 0 0 0 [ 96.544615][ T6505] Node 1 Normal free:3900908kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:15008kB free_cma:0kB [ 96.717733][ T6505] lowmem_reserve[]: 0 0 0 0 0 [ 96.722653][ T6505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.784343][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 96.817910][ T6505] Node 0 DMA32: 81*4kB (M) 20*8kB (UME) 8*16kB (UM) 42*32kB (UME) 53*64kB (ME) 26*128kB (ME) 12*256kB (M) 8*512kB (UM) 7*1024kB (UM) 3*2048kB (ME) 306*4096kB (M) = 1282532kB [ 96.821243][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 96.896810][ T6548] netlink: 'syz.0.149': attribute type 5 has an invalid length. [ 96.911804][ T6505] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 96.972756][ T6505] Node 1 Normal: 197*4kB (UE) 73*8kB (UME) 43*16kB (UME) 67*32kB (UME) 22*64kB (UME) 10*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3900908kB [ 97.047905][ T6491] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.078746][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.118879][ T6505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.147900][ T1149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.174034][ T6505] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.178734][ T1149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.195305][ T6552] IPVS: Scheduler module ip_vs_sip not found [ 97.206472][ T6505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.224177][ T6548] IPVS: length: 24 != 16106127384 [ 97.247906][ T6505] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.270117][ T6505] 46458 total pagecache pages [ 97.290480][ T6505] 0 pages in swap cache [ 97.306377][ T6505] Free swap = 124996kB [ 97.343810][ T6505] Total swap = 124996kB [ 97.365251][ T6505] 2097051 pages RAM [ 97.405048][ T6505] 0 pages HighMem/MovableOnly [ 97.425410][ T6505] 424709 pages reserved [ 97.445619][ T6505] 0 pages cma reserved [ 97.828538][ T6567] netlink: 'syz.3.154': attribute type 5 has an invalid length. [ 97.938643][ T6573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.968736][ T6573] batadv_slave_0: entered promiscuous mode [ 98.282314][ T6585] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 98.592980][ T6585] bridge0: Device is already in use. [ 98.741102][ T6598] __nla_validate_parse: 1 callbacks suppressed [ 98.741121][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 98.801151][ T6598] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.161'. [ 98.983398][ T6605] veth2: entered allmulticast mode [ 98.992918][ T6602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 99.034590][ T24] IPVS: starting estimator thread 0... [ 99.073921][ T6602] syzkaller1: entered promiscuous mode [ 99.081720][ T6602] syzkaller1: entered allmulticast mode [ 99.147914][ T6609] IPVS: using max 29 ests per chain, 69600 per kthread [ 99.269559][ T6614] veth1_to_bridge: default FDB implementation only supports local addresses [ 99.804521][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.173'. [ 99.838443][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.173'. [ 100.245574][ T6656] netlink: 672 bytes leftover after parsing attributes in process `syz.1.178'. [ 100.256080][ T6656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'. [ 100.287309][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 100.303105][ T6656] netlink: 48 bytes leftover after parsing attributes in process `syz.1.178'. [ 100.327701][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 100.375587][ T6659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 100.538393][ T6671] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 100.620937][ T6659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 100.712796][ T6671] bridge0: Device is already in use. [ 101.084229][ T6690] hsr0: entered promiscuous mode [ 101.121561][ T6690] macvtap1: entered promiscuous mode [ 101.149577][ T6690] macvtap1: entered allmulticast mode [ 101.170507][ T6690] hsr0: entered allmulticast mode [ 101.181384][ T6690] hsr_slave_0: entered allmulticast mode [ 101.200988][ T6690] hsr_slave_1: entered allmulticast mode [ 101.211294][ T6690] hsr0: left allmulticast mode [ 101.216457][ T6690] hsr_slave_0: left allmulticast mode [ 101.252015][ T6690] hsr_slave_1: left allmulticast mode [ 101.614757][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.624683][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.809614][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.845382][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.900942][ T6703] hsr0: left promiscuous mode [ 102.144191][ T6702] veth2: entered allmulticast mode [ 102.197063][ T1149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.243938][ T1149] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.287876][ T1149] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.297583][ T1149] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.417820][ T6746] warning: `syz.0.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.746690][ T6759] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.083040][ T6766] syzkaller1: entered promiscuous mode [ 103.097694][ T6766] syzkaller1: entered allmulticast mode [ 103.455823][ T6782] netlink: 'syz.2.209': attribute type 21 has an invalid length. [ 103.800284][ T6787] __nla_validate_parse: 10 callbacks suppressed [ 103.800315][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.211'. [ 103.977310][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'. [ 105.228484][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.224'. [ 105.299184][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 105.422523][ T6840] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 105.598173][ T6861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'. [ 105.874644][ T6868] netlink: 'syz.2.232': attribute type 14 has an invalid length. [ 105.913926][ T6868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.837256][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 106.877343][ T6887] veth0: entered promiscuous mode [ 106.913999][ T6887] veth0: left promiscuous mode [ 107.423176][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.433075][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.314615][ T6898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.720460][ T6491] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.768527][ T6485] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.926268][ T6926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.976137][ T6930] xt_bpf: check failed: parse error [ 108.982138][ T6485] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.012432][ T6485] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.033857][ T6932] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 109.065792][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 109.151617][ T6930] netlink: 'syz.2.249': attribute type 8 has an invalid length. [ 109.520951][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 109.562490][ T6957] vlan3: entered promiscuous mode [ 109.591193][ T6957] dummy0: entered promiscuous mode [ 109.620754][ T6959] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 109.700661][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 109.833289][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 109.921371][ T6972] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 110.022725][ T6972] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.196352][ T6980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.264'. [ 110.237065][ T6980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.264'. [ 110.252624][ T6981] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 110.353706][ T6987] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 110.479451][ T6987] ipvlan2: entered promiscuous mode [ 110.516891][ T6987] bridge0: port 3(ipvlan2) entered blocking state [ 110.547093][ T6987] bridge0: port 3(ipvlan2) entered disabled state [ 110.573551][ T6987] ipvlan2: entered allmulticast mode [ 110.594574][ T6987] bridge0: entered allmulticast mode [ 110.616557][ T6987] ipvlan2: left allmulticast mode [ 110.637836][ T6987] bridge0: left allmulticast mode [ 110.733612][ T6995] bridge: RTM_NEWNEIGH with invalid ether address [ 111.535055][ T7024] SET target dimension over the limit! [ 111.579215][ T5921] IPVS: starting estimator thread 0... [ 111.599833][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 111.613818][ T7024] netlink: 72 bytes leftover after parsing attributes in process `syz.1.278'. [ 111.621639][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 111.651389][ T7027] syz.2.279 (7027) used greatest stack depth: 14976 bytes left [ 111.698159][ T7038] IPVS: using max 29 ests per chain, 69600 per kthread [ 111.881801][ T7047] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 111.895906][ T7050] netlink: 168 bytes leftover after parsing attributes in process `syz.1.285'. [ 111.979224][ T7058] xt_ipcomp: unknown flags F7 [ 111.989938][ T7047] bridge0: Device is already in use. [ 112.662631][ T7092] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 112.693479][ T7092] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 112.956801][ T7100] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 112.976125][ T7100] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.211081][ T7107] syzkaller1: entered promiscuous mode [ 113.223785][ T7107] syzkaller1: entered allmulticast mode [ 114.347460][ T7151] __nla_validate_parse: 3 callbacks suppressed [ 114.347478][ T7151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.308'. [ 114.372361][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.310'. [ 114.458434][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 114.632827][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 114.671428][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 115.375915][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 115.515137][ T7194] xt_TCPMSS: Only works on TCP SYN packets [ 116.046818][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 116.555622][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.331'. [ 116.586677][ T7211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.660467][ T7233] veth0: entered promiscuous mode [ 116.670097][ T7233] veth0: left promiscuous mode [ 117.094404][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 118.250772][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 119.028948][ T7327] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 119.055421][ T7327] openvswitch: netlink: Message has 8454 unknown bytes. [ 119.972315][ T7351] __nla_validate_parse: 3 callbacks suppressed [ 119.972333][ T7351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.361'. [ 120.201079][ T7356] netlink: 'syz.4.364': attribute type 102 has an invalid length. [ 120.534624][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.367'. [ 120.811525][ T7373] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 120.820012][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 120.842787][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.850231][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.888131][ T7371] bridge_slave_1: left allmulticast mode [ 120.894137][ T7371] bridge_slave_1: left promiscuous mode [ 120.902021][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.009519][ T7371] ¾x9ÿ: left allmulticast mode [ 121.041214][ T7371] ¾x9ÿ: left promiscuous mode [ 121.064105][ T7377] can: request_module (can-proto-0) failed. [ 121.068826][ T7371] bridge0: port 1(1¾x9ÿ) entered disabled state [ 121.194345][ T7371] bridge0 (unregistering): left promiscuous mode [ 121.547480][ T7395] IPVS: Error connecting to the multicast addr [ 121.798642][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'. [ 122.218960][ T7426] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 122.374892][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 122.526296][ T7436] bridge_slave_1: left allmulticast mode [ 122.565148][ T7436] bridge_slave_1: left promiscuous mode [ 122.589660][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.618679][ T7436] bridge_slave_0: left allmulticast mode [ 122.627497][ T7436] bridge_slave_0: left promiscuous mode [ 122.634754][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.690621][ T7436] bond0: (slave bridge0): Releasing backup interface [ 122.901150][ T7458] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 122.915322][ T7458] veth0_vlan: left promiscuous mode [ 122.931100][ T7458] veth0_vlan: entered promiscuous mode [ 122.943083][ T7458] team0: Device veth0_vlan failed to register rx_handler [ 123.012078][ T7458] netlink: 52 bytes leftover after parsing attributes in process `syz.3.395'. [ 123.338703][ T7471] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.359738][ T7471] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 123.405368][ T7471] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 123.442869][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 123.561225][ T7484] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 123.855788][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 124.174468][ T7517] bpq0: entered promiscuous mode [ 124.192042][ T7517] bpq0: entered allmulticast mode [ 124.274488][ T7533] netlink: 104 bytes leftover after parsing attributes in process `syz.4.418'. [ 124.590043][ T7538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.652982][ T7537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.682731][ T7587] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 125.692604][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.433'. [ 125.726195][ T7587] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 125.927955][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 125.952444][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 126.175192][ T7609] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 126.265630][ T7609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.284371][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 126.330575][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.440'. [ 126.404210][ T7611] bond2: (slave gretap1): making interface the new active one [ 126.437506][ T7611] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 126.501116][ T7627] sctp: [Deprecated]: syz.3.446 (pid 7627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.501116][ T7627] Use struct sctp_sack_info instead [ 126.584806][ T7629] sctp: [Deprecated]: syz.3.446 (pid 7629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.584806][ T7629] Use struct sctp_sack_info instead [ 126.665820][ T7627] dvmrp1: entered allmulticast mode [ 126.676218][ T7627] dvmrp1: left allmulticast mode [ 126.678574][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 126.758204][ T7631] macsec1: entered allmulticast mode [ 126.763558][ T7631] veth0: entered allmulticast mode [ 126.800802][ T7631] veth0: left allmulticast mode [ 127.026518][ T7625] atomic_op ffff88814d1e5198 conn xmit_atomic 0000000000000000 [ 127.083320][ T7645] raw_sendmsg: syz.3.450 forgot to set AF_INET. Fix it! [ 127.106602][ T7645] x_tables: duplicate underflow at hook 1 [ 127.107102][ T7646] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 127.235434][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 127.264838][ T7652] netlink: 3 bytes leftover after parsing attributes in process `syz.3.453'. [ 127.285385][ T7652] batadv1: entered promiscuous mode [ 127.316411][ T7652] batadv1: entered allmulticast mode [ 127.416127][ T7656] veth0_macvtap: left promiscuous mode [ 127.823562][ T7660] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 127.832525][ T7667] syzkaller1: entered promiscuous mode [ 127.843781][ T7667] syzkaller1: entered allmulticast mode [ 128.636785][ T7684] netlink: 'syz.3.461': attribute type 2 has an invalid length. [ 129.483265][ T7700] syzkaller1: entered promiscuous mode [ 129.495789][ T7700] syzkaller1: entered allmulticast mode [ 129.796611][ T30] audit: type=1800 audit(1750956228.355:2): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.471" name="blkio.bfq.time_recursive" dev="tmpfs" ino=532 res=0 errno=0 [ 129.858876][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.471'. [ 129.869291][ T30] audit: type=1800 audit(1750956228.435:3): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.471" name="blkio.bfq.time_recursive" dev="tmpfs" ino=532 res=0 errno=0 [ 130.224174][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 130.263829][ T7725] openvswitch: netlink: Flow actions attr not present in new flow. [ 130.879272][ T7756] __nla_validate_parse: 1 callbacks suppressed [ 130.879290][ T7756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.480'. [ 130.903746][ T7756] netlink: 5 bytes leftover after parsing attributes in process `syz.3.480'. [ 131.177142][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 131.232796][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 131.607547][ T7787] nftables ruleset with unbound chain [ 132.343650][ T7807] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 132.549272][ T7807] bond1: (slave gretap1): making interface the new active one [ 132.557556][ T7807] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.831532][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 132.851850][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.239029][ T7844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.244380][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 133.281778][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 133.295549][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 133.398989][ T7855] veth0: entered promiscuous mode [ 133.415662][ T7857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.505'. [ 133.436751][ T7857] netlink: 43 bytes leftover after parsing attributes in process `syz.1.505'. [ 133.453931][ T7859] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 133.461613][ T7857] netlink: 'syz.1.505': attribute type 6 has an invalid length. [ 133.469804][ T7857] netlink: 'syz.1.505': attribute type 5 has an invalid length. [ 133.492295][ T7859] ipvlan2: entered promiscuous mode [ 133.498577][ T7859] bridge0: port 1(ipvlan2) entered blocking state [ 133.505127][ T7859] bridge0: port 1(ipvlan2) entered disabled state [ 133.518856][ T7859] ipvlan2: entered allmulticast mode [ 133.525470][ T7859] bridge0: entered allmulticast mode [ 133.534148][ T7859] ipvlan2: left allmulticast mode [ 133.558134][ T7859] bridge0: left allmulticast mode [ 133.608300][ T7849] veth0: left promiscuous mode [ 133.926973][ T7875] macvlan2: entered promiscuous mode [ 133.933201][ T7875] macvlan2: entered allmulticast mode [ 134.825208][ T7910] x_tables: duplicate underflow at hook 2 [ 134.827331][ T7911] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 134.934118][ T7911] ipvlan2: entered promiscuous mode [ 134.971756][ T7911] bridge0: port 3(ipvlan2) entered blocking state [ 135.008967][ T7911] bridge0: port 3(ipvlan2) entered disabled state [ 135.015660][ T7911] ipvlan2: entered allmulticast mode [ 135.030878][ T7911] bridge0: entered allmulticast mode [ 135.055227][ T7911] ipvlan2: left allmulticast mode [ 135.148002][ T7911] bridge0: left allmulticast mode [ 135.841645][ T7942] vlan2: entered promiscuous mode [ 135.857288][ T7942] bridge0: entered promiscuous mode [ 136.106055][ T7953] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 136.130534][ T7953] ipvlan2: entered promiscuous mode [ 136.136918][ T7953] bridge0: port 3(ipvlan2) entered blocking state [ 136.144335][ T7953] bridge0: port 3(ipvlan2) entered disabled state [ 136.151620][ T7953] ipvlan2: entered allmulticast mode [ 136.157114][ T7953] bridge0: entered allmulticast mode [ 136.169268][ T7953] ipvlan2: left allmulticast mode [ 136.175888][ T7953] bridge0: left allmulticast mode [ 136.648550][ T7960] __nla_validate_parse: 18 callbacks suppressed [ 136.648571][ T7960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.533'. [ 136.665993][ T7960] netlink: 37 bytes leftover after parsing attributes in process `syz.0.533'. [ 136.670732][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 136.675538][ T7960] netlink: 37 bytes leftover after parsing attributes in process `syz.0.533'. [ 136.756460][ T7966] bridge_slave_1: left allmulticast mode [ 136.768486][ T7966] bridge_slave_1: left promiscuous mode [ 136.778881][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.804088][ T7966] bridge_slave_0: left allmulticast mode [ 136.831114][ T7966] bridge_slave_0: left promiscuous mode [ 136.839961][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.424374][ T7984] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 137.520044][ T7987] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 137.548095][ T7987] CPU: 0 UID: 0 PID: 7987 Comm: syz.1.541 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 137.548121][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.548131][ T7987] Call Trace: [ 137.548138][ T7987] [ 137.548147][ T7987] dump_stack_lvl+0x189/0x250 [ 137.548179][ T7987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.548202][ T7987] ? __pfx__printk+0x10/0x10 [ 137.548230][ T7987] ? kernfs_path_from_node+0x2c/0x260 [ 137.548250][ T7987] ? kernfs_path_from_node+0x2c/0x260 [ 137.548267][ T7987] ? kernfs_path_from_node+0x2c/0x260 [ 137.548287][ T7987] ? kernfs_path_from_node+0x22c/0x260 [ 137.548304][ T7987] ? kernfs_path_from_node+0x2c/0x260 [ 137.548327][ T7987] sysfs_warn_dup+0x8e/0xa0 [ 137.548346][ T7987] sysfs_do_create_link_sd+0xc0/0x110 [ 137.548368][ T7987] device_add_class_symlinks+0x1cf/0x240 [ 137.548392][ T7987] device_add+0x475/0xb50 [ 137.548415][ T7987] wiphy_register+0x1ba6/0x28d0 [ 137.548456][ T7987] ? __pfx_wiphy_register+0x10/0x10 [ 137.548474][ T7987] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 137.548506][ T7987] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 137.548535][ T7987] ieee80211_register_hw+0x33e1/0x4120 [ 137.548578][ T7987] ? ieee80211_register_hw+0x1471/0x4120 [ 137.548610][ T7987] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 137.548638][ T7987] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 137.548663][ T7987] ? __hrtimer_setup+0x187/0x210 [ 137.548685][ T7987] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 137.548711][ T7987] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 137.548769][ T7987] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 137.548787][ T7987] ? trace_kmalloc+0x1f/0xd0 [ 137.548801][ T7987] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 137.548818][ T7987] ? kstrndup+0xbf/0x160 [ 137.548849][ T7987] hwsim_new_radio_nl+0xea4/0x1b10 [ 137.548872][ T7987] ? __pfx___nla_validate_parse+0x10/0x10 [ 137.548911][ T7987] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 137.548946][ T7987] ? __nla_parse+0x40/0x60 [ 137.548972][ T7987] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 137.548999][ T7987] genl_family_rcv_msg_doit+0x215/0x300 [ 137.549024][ T7987] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.549057][ T7987] ? bpf_lsm_capable+0x9/0x20 [ 137.549072][ T7987] ? security_capable+0x7e/0x2e0 [ 137.549104][ T7987] genl_rcv_msg+0x60e/0x790 [ 137.549129][ T7987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.549144][ T7987] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 137.549181][ T7987] netlink_rcv_skb+0x205/0x470 [ 137.549203][ T7987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.549227][ T7987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.549268][ T7987] ? down_read+0x1ad/0x2e0 [ 137.549292][ T7987] genl_rcv+0x28/0x40 [ 137.549313][ T7987] netlink_unicast+0x758/0x8d0 [ 137.549346][ T7987] netlink_sendmsg+0x805/0xb30 [ 137.549378][ T7987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.549402][ T7987] ? aa_sock_msg_perm+0x94/0x160 [ 137.549425][ T7987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.549444][ T7987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.549466][ T7987] __sock_sendmsg+0x21c/0x270 [ 137.549489][ T7987] ____sys_sendmsg+0x505/0x830 [ 137.549519][ T7987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.549553][ T7987] ? import_iovec+0x74/0xa0 [ 137.549575][ T7987] ___sys_sendmsg+0x21f/0x2a0 [ 137.549601][ T7987] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.549665][ T7987] ? __fget_files+0x2a/0x420 [ 137.549682][ T7987] ? __fget_files+0x3a0/0x420 [ 137.549712][ T7987] __x64_sys_sendmsg+0x19b/0x260 [ 137.549737][ T7987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.549773][ T7987] ? do_user_addr_fault+0xc8a/0x1390 [ 137.549799][ T7987] ? do_syscall_64+0xbe/0x3b0 [ 137.549824][ T7987] do_syscall_64+0xfa/0x3b0 [ 137.549842][ T7987] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.549860][ T7987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.549876][ T7987] ? clear_bhb_loop+0x60/0xb0 [ 137.549897][ T7987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.549913][ T7987] RIP: 0033:0x7f4da198e929 [ 137.549930][ T7987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.549943][ T7987] RSP: 002b:00007f4da2857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.549961][ T7987] RAX: ffffffffffffffda RBX: 00007f4da1bb6160 RCX: 00007f4da198e929 [ 137.549973][ T7987] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 137.549984][ T7987] RBP: 00007f4da1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 137.549995][ T7987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.550004][ T7987] R13: 0000000000000001 R14: 00007f4da1bb6160 R15: 00007fffaa167188 [ 137.550036][ T7987] [ 138.028640][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 138.102188][ T7990] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 138.117888][ T7990] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 138.208760][ T7994] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 138.608249][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'. [ 138.649167][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.682207][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.718370][ T8017] tipc: Started in network mode [ 138.729857][ T8017] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 138.744561][ T8017] tipc: Enabling of bearer rejected, failed to enable media [ 138.771971][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.798782][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.960202][ T8037] netlink: 'syz.1.551': attribute type 8 has an invalid length. [ 139.000258][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.551'. [ 139.316304][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 139.584040][ T8071] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 139.612472][ T8071] ipvlan2: entered promiscuous mode [ 139.622145][ T8071] bridge0: port 1(ipvlan2) entered blocking state [ 139.630736][ T8071] bridge0: port 1(ipvlan2) entered disabled state [ 139.641582][ T8071] ipvlan2: entered allmulticast mode [ 139.646895][ T8071] bridge0: entered allmulticast mode [ 139.655381][ T8071] ipvlan2: left allmulticast mode [ 139.661119][ T8071] bridge0: left allmulticast mode [ 139.845958][ T8078] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.560'. [ 139.863128][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 139.872908][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 139.964752][ T8077] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 140.354387][ T8113] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 140.371632][ T8115] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 140.382032][ T36] bond0: (slave bond_slave_0): interface is now down [ 140.384208][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.390319][ T36] bond0: (slave bond_slave_1): interface is now down [ 140.408780][ T8113] team0: Port device bond0 added [ 140.418913][ T1149] bond0: (slave bond_slave_0): interface is now down [ 140.428888][ T1149] bond0: (slave bond_slave_1): interface is now down [ 140.444428][ T8115] ipvlan2: entered promiscuous mode [ 140.459596][ T1149] bond0: (slave bond_slave_0): interface is now down [ 140.461543][ T8115] bridge0: port 1(ipvlan2) entered blocking state [ 140.466302][ T1149] bond0: (slave bond_slave_1): interface is now down [ 140.488724][ T6489] bond0: (slave bond_slave_0): interface is now down [ 140.500557][ T6489] bond0: (slave bond_slave_1): interface is now down [ 140.528653][ T8115] bridge0: port 1(ipvlan2) entered disabled state [ 140.541860][ T8115] ipvlan2: entered allmulticast mode [ 140.548368][ T8115] bridge0: entered allmulticast mode [ 140.550317][ T6489] bond0: (slave bond_slave_0): interface is now down [ 140.564463][ T6489] bond0: (slave bond_slave_1): interface is now down [ 140.568547][ T8115] ipvlan2: left allmulticast mode [ 140.589330][ T6489] bond0: (slave bond_slave_0): interface is now down [ 140.591787][ T8115] bridge0: left allmulticast mode [ 140.596358][ T6489] bond0: (slave bond_slave_1): interface is now down [ 140.647812][ T1149] bond0: (slave bond_slave_0): interface is now down [ 140.677723][ T1149] bond0: (slave bond_slave_1): interface is now down [ 140.700159][ T6487] bond0: (slave bond_slave_0): interface is now down [ 140.718507][ T6487] bond0: (slave bond_slave_1): interface is now down [ 140.746732][ T6487] bond0: now running without any active interface! [ 141.418431][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.427809][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.437138][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.445265][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.463892][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.922054][ T8161] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 142.114229][ T8157] bridge0: port 1(vlan2) entered blocking state [ 142.123740][ T8157] bridge0: port 1(vlan2) entered disabled state [ 142.133017][ T8157] vlan2: entered allmulticast mode [ 142.138587][ T8157] bond0: entered allmulticast mode [ 142.144220][ T8157] bond_slave_0: entered allmulticast mode [ 142.153361][ T8157] bond_slave_1: entered allmulticast mode [ 142.160973][ T8157] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 142.171553][ T8157] vlan2: entered promiscuous mode [ 142.176910][ T8157] bond0: entered promiscuous mode [ 142.182155][ T8157] bond_slave_0: entered promiscuous mode [ 142.188366][ T8157] bond_slave_1: entered promiscuous mode [ 142.194166][ T8157] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 142.223054][ T8161] team0: Device hsr_slave_0 failed to register rx_handler [ 142.403863][ T8167] netlink: 'syz.1.584': attribute type 11 has an invalid length. [ 142.421774][ T8167] __nla_validate_parse: 2 callbacks suppressed [ 142.421790][ T8167] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.584'. [ 142.460666][ T8167] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 142.552185][ T8167] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.594762][ T8166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.596834][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.585'. [ 142.782603][ T8179] netlink: 88 bytes leftover after parsing attributes in process `syz.1.586'. [ 142.796311][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 143.201626][ T8191] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 143.312980][ T8158] chnl_net:caif_netlink_parms(): no params data found [ 143.354659][ T8191] ipvlan2: entered promiscuous mode [ 143.374191][ T8191] bridge0: port 1(ipvlan2) entered blocking state [ 143.428053][ T8191] bridge0: port 1(ipvlan2) entered disabled state [ 143.434769][ T8191] ipvlan2: entered allmulticast mode [ 143.501349][ T8191] bridge0: entered allmulticast mode [ 143.547045][ T8191] ipvlan2: left allmulticast mode [ 143.557938][ T5852] Bluetooth: hci5: command tx timeout [ 143.588279][ T8191] bridge0: left allmulticast mode [ 143.682541][ T8213] netlink: 324 bytes leftover after parsing attributes in process `syz.1.595'. [ 143.845921][ T8219] bridge0: entered allmulticast mode [ 143.899649][ T8219] bridge_slave_1: left allmulticast mode [ 143.905400][ T8219] bridge_slave_1: left promiscuous mode [ 143.933148][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.990936][ T8219] bridge_slave_0: left allmulticast mode [ 143.996767][ T8219] bridge_slave_0: left promiscuous mode [ 144.012414][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.093900][ T8219] bond0: (slave bridge0): Releasing backup interface [ 144.500074][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 144.512655][ T8241] FAULT_INJECTION: forcing a failure. [ 144.512655][ T8241] name failslab, interval 1, probability 0, space 0, times 1 [ 144.526509][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.4.603 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 144.526533][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.526543][ T8241] Call Trace: [ 144.526550][ T8241] [ 144.526557][ T8241] dump_stack_lvl+0x189/0x250 [ 144.526586][ T8241] ? __pfx____ratelimit+0x10/0x10 [ 144.526605][ T8241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.526628][ T8241] ? __pfx__printk+0x10/0x10 [ 144.526652][ T8241] ? __pfx___might_resched+0x10/0x10 [ 144.526675][ T8241] ? fs_reclaim_acquire+0x7d/0x100 [ 144.526698][ T8241] should_fail_ex+0x414/0x560 [ 144.526733][ T8241] should_failslab+0xa8/0x100 [ 144.526753][ T8241] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 144.526770][ T8241] ? __alloc_skb+0x112/0x2d0 [ 144.526795][ T8241] __alloc_skb+0x112/0x2d0 [ 144.526820][ T8241] netlink_ack+0x146/0xa50 [ 144.526837][ T8241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.526855][ T8241] ? ref_tracker_free+0x63a/0x7d0 [ 144.526874][ T8241] ? __copy_skb_header+0xa7/0x550 [ 144.526898][ T8241] ? __pfx_ref_tracker_free+0x10/0x10 [ 144.526918][ T8241] ? __skb_clone+0x63/0x7a0 [ 144.526948][ T8241] netlink_rcv_skb+0x28c/0x470 [ 144.526968][ T8241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.526988][ T8241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.527021][ T8241] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.527039][ T8241] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.527064][ T8241] netlink_unicast+0x758/0x8d0 [ 144.527094][ T8241] netlink_sendmsg+0x805/0xb30 [ 144.527124][ T8241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.527146][ T8241] ? aa_sock_msg_perm+0x94/0x160 [ 144.527168][ T8241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.527188][ T8241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.527209][ T8241] __sock_sendmsg+0x21c/0x270 [ 144.527231][ T8241] ____sys_sendmsg+0x505/0x830 [ 144.527259][ T8241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.527292][ T8241] ? import_iovec+0x74/0xa0 [ 144.527312][ T8241] ___sys_sendmsg+0x21f/0x2a0 [ 144.527337][ T8241] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.527397][ T8241] ? __fget_files+0x2a/0x420 [ 144.527414][ T8241] ? __fget_files+0x3a0/0x420 [ 144.527442][ T8241] __x64_sys_sendmsg+0x19b/0x260 [ 144.527467][ T8241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.527500][ T8241] ? rcu_is_watching+0x15/0xb0 [ 144.527528][ T8241] ? do_syscall_64+0xbe/0x3b0 [ 144.527551][ T8241] do_syscall_64+0xfa/0x3b0 [ 144.527569][ T8241] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.527592][ T8241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.527605][ T8241] ? clear_bhb_loop+0x60/0xb0 [ 144.527623][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.527638][ T8241] RIP: 0033:0x7f760038e929 [ 144.527652][ T8241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.527664][ T8241] RSP: 002b:00007f760112f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.527681][ T8241] RAX: ffffffffffffffda RBX: 00007f76005b5fa0 RCX: 00007f760038e929 [ 144.527691][ T8241] RDX: 0000000024008084 RSI: 0000200000000200 RDI: 0000000000000004 [ 144.527701][ T8241] RBP: 00007f760112f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.527711][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.527727][ T8241] R13: 0000000000000000 R14: 00007f76005b5fa0 R15: 00007ffe0f9ae608 [ 144.527755][ T8241] [ 144.944579][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.954971][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.962379][ T8158] bridge_slave_0: entered allmulticast mode [ 144.970278][ T8158] bridge_slave_0: entered promiscuous mode [ 144.983632][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.991088][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.999769][ T8158] bridge_slave_1: entered allmulticast mode [ 145.007530][ T8158] bridge_slave_1: entered promiscuous mode [ 145.090554][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.104106][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.196073][ T8158] team0: Port device team_slave_0 added [ 145.208973][ T8158] team0: Port device team_slave_1 added [ 145.493633][ T8263] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 145.530862][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.552325][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.597031][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.616312][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.625374][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.639170][ T5852] Bluetooth: hci5: command tx timeout [ 145.663183][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.692648][ T8263] ipvlan2: entered promiscuous mode [ 145.701207][ T8263] bridge0: port 2(ipvlan2) entered blocking state [ 145.708898][ T8263] bridge0: port 2(ipvlan2) entered disabled state [ 145.716885][ T8263] ipvlan2: entered allmulticast mode [ 145.723535][ T8263] bridge0: entered allmulticast mode [ 145.732649][ T8263] ipvlan2: left allmulticast mode [ 145.738473][ T8263] bridge0: left allmulticast mode [ 145.964045][ T8158] hsr_slave_0: entered promiscuous mode [ 145.971035][ T8158] hsr_slave_1: entered promiscuous mode [ 145.977534][ T8158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.994521][ T8158] Cannot create hsr debugfs directory [ 146.316485][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 146.325583][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 146.589498][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.618'. [ 146.721158][ T8301] netlink: 'syz.0.621': attribute type 11 has an invalid length. [ 146.766175][ T8301] netlink: 224 bytes leftover after parsing attributes in process `syz.0.621'. [ 146.786801][ T8303] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 146.857688][ T8303] ipvlan2: entered promiscuous mode [ 146.865102][ T8303] bridge0: port 1(ipvlan2) entered blocking state [ 146.872724][ T8303] bridge0: port 1(ipvlan2) entered disabled state [ 146.885018][ T8303] ipvlan2: entered allmulticast mode [ 146.892568][ T8303] bridge0: entered allmulticast mode [ 146.923657][ T8303] ipvlan2: left allmulticast mode [ 146.982405][ T8303] bridge0: left allmulticast mode [ 147.042912][ T8309] ================================================================== [ 147.051017][ T8309] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 147.058937][ T8309] Read of size 8 at addr ffff8881427be630 by task syz.3.624/8309 [ 147.066644][ T8309] [ 147.068958][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.3.624 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 147.068976][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.068985][ T8309] Call Trace: [ 147.068993][ T8309] [ 147.069000][ T8309] dump_stack_lvl+0x189/0x250 [ 147.069023][ T8309] ? __virt_addr_valid+0x1c8/0x5c0 [ 147.069038][ T8309] ? rcu_is_watching+0x15/0xb0 [ 147.069055][ T8309] ? __kasan_check_byte+0x12/0x40 [ 147.069069][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.069086][ T8309] ? rcu_is_watching+0x15/0xb0 [ 147.069104][ T8309] ? lock_release+0x4b/0x3e0 [ 147.069121][ T8309] ? __virt_addr_valid+0x1c8/0x5c0 [ 147.069133][ T8309] ? __virt_addr_valid+0x4a5/0x5c0 [ 147.069146][ T8309] print_report+0xd2/0x2b0 [ 147.069162][ T8309] ? pause_parse_request+0x40/0x160 [ 147.069176][ T8309] kasan_report+0x118/0x150 [ 147.069189][ T8309] ? pause_parse_request+0x40/0x160 [ 147.069204][ T8309] ? __pfx_pause_parse_request+0x10/0x10 [ 147.069218][ T8309] pause_parse_request+0x40/0x160 [ 147.069234][ T8309] ? __pfx_pause_parse_request+0x10/0x10 [ 147.069247][ T8309] ethnl_default_set_doit+0x2c1/0xa40 [ 147.069266][ T8309] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 147.069283][ T8309] genl_family_rcv_msg_doit+0x215/0x300 [ 147.069298][ T8309] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.069314][ T8309] ? bpf_lsm_capable+0x9/0x20 [ 147.069326][ T8309] ? security_capable+0x7e/0x2e0 [ 147.069343][ T8309] genl_rcv_msg+0x60e/0x790 [ 147.069356][ T8309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.069367][ T8309] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 147.069388][ T8309] netlink_rcv_skb+0x205/0x470 [ 147.069403][ T8309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.069414][ T8309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.069434][ T8309] ? down_read+0x1ad/0x2e0 [ 147.069450][ T8309] genl_rcv+0x28/0x40 [ 147.069466][ T8309] netlink_unicast+0x758/0x8d0 [ 147.069485][ T8309] netlink_sendmsg+0x805/0xb30 [ 147.069504][ T8309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.069520][ T8309] ? __lock_acquire+0xab9/0xd20 [ 147.069536][ T8309] ? aa_sock_msg_perm+0x94/0x160 [ 147.069553][ T8309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.069567][ T8309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.069582][ T8309] __sock_sendmsg+0x21c/0x270 [ 147.069597][ T8309] ____sys_sendmsg+0x505/0x830 [ 147.069615][ T8309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.069635][ T8309] ? import_iovec+0x74/0xa0 [ 147.069648][ T8309] ___sys_sendmsg+0x21f/0x2a0 [ 147.069666][ T8309] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.069694][ T8309] ? __fget_files+0x2a/0x420 [ 147.069707][ T8309] ? __fget_files+0x3a0/0x420 [ 147.069729][ T8309] __x64_sys_sendmsg+0x19b/0x260 [ 147.069747][ T8309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.069768][ T8309] ? rcu_is_watching+0x15/0xb0 [ 147.069787][ T8309] ? do_syscall_64+0xbe/0x3b0 [ 147.069805][ T8309] do_syscall_64+0xfa/0x3b0 [ 147.069819][ T8309] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.069833][ T8309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.069845][ T8309] ? clear_bhb_loop+0x60/0xb0 [ 147.069858][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.069871][ T8309] RIP: 0033:0x7fb9b6d8e929 [ 147.069884][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.069895][ T8309] RSP: 002b:00007fb9b7be9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.069909][ T8309] RAX: ffffffffffffffda RBX: 00007fb9b6fb5fa0 RCX: 00007fb9b6d8e929 [ 147.069919][ T8309] RDX: 0000000000000040 RSI: 0000200000000580 RDI: 0000000000000007 [ 147.069928][ T8309] RBP: 00007fb9b6e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.069936][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.069944][ T8309] R13: 0000000000000000 R14: 00007fb9b6fb5fa0 R15: 00007ffdf3a7b6a8 [ 147.069960][ T8309] [ 147.069965][ T8309] [ 147.445142][ T8309] Allocated by task 8309: [ 147.449449][ T8309] kasan_save_track+0x3e/0x80 [ 147.454117][ T8309] __kasan_kmalloc+0x93/0xb0 [ 147.458687][ T8309] __kmalloc_noprof+0x27a/0x4f0 [ 147.463517][ T8309] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 147.469566][ T8309] genl_family_rcv_msg_doit+0xb8/0x300 [ 147.475006][ T8309] genl_rcv_msg+0x60e/0x790 [ 147.479486][ T8309] netlink_rcv_skb+0x205/0x470 [ 147.484239][ T8309] genl_rcv+0x28/0x40 [ 147.488204][ T8309] netlink_unicast+0x758/0x8d0 [ 147.492950][ T8309] netlink_sendmsg+0x805/0xb30 [ 147.497698][ T8309] __sock_sendmsg+0x21c/0x270 [ 147.502354][ T8309] ____sys_sendmsg+0x505/0x830 [ 147.507101][ T8309] ___sys_sendmsg+0x21f/0x2a0 [ 147.511764][ T8309] __x64_sys_sendmsg+0x19b/0x260 [ 147.516687][ T8309] do_syscall_64+0xfa/0x3b0 [ 147.521175][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.527048][ T8309] [ 147.529351][ T8309] The buggy address belongs to the object at ffff8881427be600 [ 147.529351][ T8309] which belongs to the cache kmalloc-64 of size 64 [ 147.543220][ T8309] The buggy address is located 8 bytes to the right of [ 147.543220][ T8309] allocated 40-byte region [ffff8881427be600, ffff8881427be628) [ 147.557626][ T8309] [ 147.559947][ T8309] The buggy address belongs to the physical page: [ 147.566347][ T8309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1427be [ 147.575175][ T8309] ksm flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 147.582698][ T8309] page_type: f5(slab) [ 147.586660][ T8309] raw: 057ff00000000000 ffff88801a4418c0 ffffea000532bf00 dead000000000003 [ 147.595223][ T8309] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 147.603785][ T8309] page dumped because: kasan: bad access detected [ 147.610195][ T8309] page_owner tracks the page as allocated [ 147.615889][ T8309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 7530538023, free_ts 0 [ 147.633412][ T8309] post_alloc_hook+0x240/0x2a0 [ 147.638172][ T8309] get_page_from_freelist+0x21e4/0x22c0 [ 147.643698][ T8309] __alloc_frozen_pages_noprof+0x181/0x370 [ 147.649486][ T8309] alloc_pages_mpol+0x232/0x4a0 [ 147.654316][ T8309] allocate_slab+0x8a/0x3b0 [ 147.658799][ T8309] ___slab_alloc+0xbfc/0x1480 [ 147.663455][ T8309] __kmalloc_cache_noprof+0x296/0x3d0 [ 147.668810][ T8309] percpu_ref_init+0xc5/0x360 [ 147.673471][ T8309] blk_alloc_queue+0x419/0x620 [ 147.678217][ T8309] __blk_mq_alloc_disk+0x162/0x340 [ 147.683312][ T8309] nbd_dev_add+0x476/0xb00 [ 147.687718][ T8309] nbd_init+0x21a/0x2d0 [ 147.691866][ T8309] do_one_initcall+0x233/0x820 [ 147.696606][ T8309] do_initcall_level+0x137/0x1f0 [ 147.701524][ T8309] do_initcalls+0x69/0xd0 [ 147.705831][ T8309] kernel_init_freeable+0x3d9/0x570 [ 147.711009][ T8309] page_owner free stack trace missing [ 147.716355][ T8309] [ 147.718660][ T8309] Memory state around the buggy address: [ 147.724271][ T8309] ffff8881427be500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 147.732309][ T8309] ffff8881427be580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 147.740347][ T8309] >ffff8881427be600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 147.748385][ T8309] ^ [ 147.754005][ T8309] ffff8881427be680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 147.762059][ T8309] ffff8881427be700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 147.770106][ T8309] ================================================================== [ 147.798086][ T8309] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.805322][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.3.624 Not tainted 6.16.0-rc2-syzkaller-00867-ga9b24b3583ae #0 PREEMPT(full) [ 147.817221][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.827287][ T8309] Call Trace: [ 147.830574][ T8309] [ 147.833506][ T8309] dump_stack_lvl+0x99/0x250 [ 147.838109][ T8309] ? __asan_memcpy+0x40/0x70 [ 147.842728][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.847928][ T8309] ? __pfx__printk+0x10/0x10 [ 147.852511][ T8309] panic+0x2db/0x790 [ 147.856398][ T8309] ? __pfx_panic+0x10/0x10 [ 147.860806][ T8309] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 147.866690][ T8309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.873006][ T8309] ? print_memory_metadata+0x314/0x400 [ 147.878463][ T8309] ? pause_parse_request+0x40/0x160 [ 147.883647][ T8309] check_panic_on_warn+0x89/0xb0 [ 147.888594][ T8309] ? pause_parse_request+0x40/0x160 [ 147.893778][ T8309] end_report+0x78/0x160 [ 147.898001][ T8309] kasan_report+0x129/0x150 [ 147.902488][ T8309] ? pause_parse_request+0x40/0x160 [ 147.907673][ T8309] ? __pfx_pause_parse_request+0x10/0x10 [ 147.913309][ T8309] pause_parse_request+0x40/0x160 [ 147.918315][ T8309] ? __pfx_pause_parse_request+0x10/0x10 [ 147.923933][ T8309] ethnl_default_set_doit+0x2c1/0xa40 [ 147.929299][ T8309] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 147.935610][ T8309] genl_family_rcv_msg_doit+0x215/0x300 [ 147.941151][ T8309] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.947221][ T8309] ? bpf_lsm_capable+0x9/0x20 [ 147.951900][ T8309] ? security_capable+0x7e/0x2e0 [ 147.956847][ T8309] genl_rcv_msg+0x60e/0x790 [ 147.961351][ T8309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.966372][ T8309] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 147.972271][ T8309] netlink_rcv_skb+0x205/0x470 [ 147.977034][ T8309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.982050][ T8309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.987328][ T8309] ? down_read+0x1ad/0x2e0 [ 147.991909][ T8309] genl_rcv+0x28/0x40 [ 147.995887][ T8309] netlink_unicast+0x758/0x8d0 [ 148.000647][ T8309] netlink_sendmsg+0x805/0xb30 [ 148.005501][ T8309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.010784][ T8309] ? __lock_acquire+0xab9/0xd20 [ 148.015621][ T8309] ? aa_sock_msg_perm+0x94/0x160 [ 148.020591][ T8309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.025865][ T8309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.031133][ T8309] __sock_sendmsg+0x21c/0x270 [ 148.035795][ T8309] ____sys_sendmsg+0x505/0x830 [ 148.040548][ T8309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.045824][ T8309] ? import_iovec+0x74/0xa0 [ 148.050311][ T8309] ___sys_sendmsg+0x21f/0x2a0 [ 148.054976][ T8309] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.060183][ T8309] ? __fget_files+0x2a/0x420 [ 148.064760][ T8309] ? __fget_files+0x3a0/0x420 [ 148.069423][ T8309] __x64_sys_sendmsg+0x19b/0x260 [ 148.074349][ T8309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.079797][ T8309] ? rcu_is_watching+0x15/0xb0 [ 148.084726][ T8309] ? do_syscall_64+0xbe/0x3b0 [ 148.089389][ T8309] do_syscall_64+0xfa/0x3b0 [ 148.093876][ T8309] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.099057][ T8309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.105104][ T8309] ? clear_bhb_loop+0x60/0xb0 [ 148.109764][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.115637][ T8309] RIP: 0033:0x7fb9b6d8e929 [ 148.120034][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.139623][ T8309] RSP: 002b:00007fb9b7be9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.148024][ T8309] RAX: ffffffffffffffda RBX: 00007fb9b6fb5fa0 RCX: 00007fb9b6d8e929 [ 148.155980][ T8309] RDX: 0000000000000040 RSI: 0000200000000580 RDI: 0000000000000007 [ 148.163933][ T8309] RBP: 00007fb9b6e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.171888][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.179844][ T8309] R13: 0000000000000000 R14: 00007fb9b6fb5fa0 R15: 00007ffdf3a7b6a8 [ 148.187803][ T8309] [ 148.191117][ T8309] Kernel Offset: disabled [ 148.195455][ T8309] Rebooting in 86400 seconds..