last executing test programs: 6.08808645s ago: executing program 0 (id=1071): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0x2012}) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={r8, 0x5}, 0x8) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x5, 0x4) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000040)={r8, 0xf}, 0x8) (rerun: 64) 5.600131266s ago: executing program 0 (id=1073): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) 5.022306072s ago: executing program 0 (id=1080): socket(0xf, 0x6, 0x80000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYRESOCT, @ANYRESHEX=r4, @ANYRES16=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000050}, 0x40) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)}], 0x1}}], 0x1, 0x60048000) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 4.076251769s ago: executing program 0 (id=1088): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.864009592s ago: executing program 0 (id=1092): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e34000014000700ff02000000000000000000000000000108000800e0000002050004000100000008000b00", @ANYRES32=0x0, @ANYBLOB="e7abba4dabfcb486dc21be4cf3251fc8f178da3d1eb5c31dcd409618e995a69f72418c9a6c8a656a093d33a14e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x110) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10100, 0x0) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791004000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 3.310221861s ago: executing program 4 (id=1096): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x10, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}}}}}) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400030000000b2fa2560d18"], 0x20, 0x2400e044}, 0x0) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000003c0)={0x1, 0x1}, 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000070000001400080069705f767469300000000000000000009042d11e5d2ed7f50528ee9a0f72850cc9b51154f5e6d948ef7a945dae7404b4b405d6d6943031830be42160cf9f140052b5ccb7231e412afab81cace1dd7fe8e804af9afbade0f607e3497def784fd07074b61b9f64e2919d05cf7c60d6b821a77c07e5dc0b471b895776de3e4199719349c9326ad1124598b2cfd6ee328d884d379b4f84cc843e23cf7db36320cf36bad1666f756e0088aa45cfa8e178e9ce19619e70af381e6765162f6c6547070184d31ae6d4ffaab3427bdb387f3e4572c3c47824343af5328eef35ed472a206c28"], 0x28}}, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 2.540075051s ago: executing program 2 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000089120f0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x42049, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x42049, 0x4) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x10022, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) (async) sendmsg$kcm(r4, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val, @void, @eth={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @empty, @rand_addr=0x64010100}, "a6b867ad593bee5d"}}}}}, 0x2e) (async) write$tun(r3, &(0x7f0000000280)={@val, @void, @eth={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @empty, @rand_addr=0x64010100}, "a6b867ad593bee5d"}}}}}, 0x2e) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 2.488980764s ago: executing program 3 (id=1105): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r6 = socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r9, 0x29, 0x4a, 0x0, &(0x7f0000000180)) (async) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 2.264110283s ago: executing program 4 (id=1107): unshare(0x6a040000) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x20}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async, rerun: 64) r2 = epoll_create1(0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = epoll_create1(0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r6, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) close(0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) splice(r5, &(0x7f0000000140)=0x10001, r4, &(0x7f00000001c0)=0xf26c, 0xffffffff, 0x3) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x18}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.828683785s ago: executing program 3 (id=1109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100)=0xffffffff, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a40fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r6, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000480)={0x3, [0x6, 0x9, 0x9]}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 1.643884401s ago: executing program 1 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newsa={0x14c, 0x10, 0x633, 0x0, 0x10, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350755, 0xc}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffff8b2}]}, 0x14c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002f0012800a00f90a000000000000000000000000000000000d6b541f1c4e46247b10b68e915e0c5ceb7b1f55fc4fa0616ee99503d2155e209ee4d16af729d953329d9718341ab2078cc565a0655943801d94465fabcec3150762f1a5d4455d5375698eb78797689523cffbc7de38a519a80167bc58f5b32c78eedf0f74877aba629fe27b8b09180dc281b33ecd0cc27876a9edab43c691d0342ad6f9d7b0d76e28eab475f718cc427465dfd9ec68ad9e2246e0e573d749fa8211e74669b47a8ac786877f4e53ed5d8cee8f7045b46685e629761be35cca1df1de3ea22098d7fa4d", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00'}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xa0, @mcast1, 0x7}, 0x1c) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@ipv6_newaddr={0x50, 0x14, 0x400, 0x70bd27, 0x25dfdbfe, {0xa, 0x9e, 0x80, 0x1b6, r8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd8b}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x5c, r11, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x48, 0x1b, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000007c1fbcef4753ff78997224d4b36473ff0ba06905542fb0315a02fc4b60a99fcec5ca9424", @ANYRES16=r11, @ANYBLOB="100026bd7000fddbdf254500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000005a000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010) sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x2, 0x11, 0x20, 0x2, 0x11, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, @in6={0xa, 0x4e22, 0xdaef, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @private=0xa010101}}]}, 0x88}}, 0x2000c011) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.642942876s ago: executing program 2 (id=1111): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000001c0)=0x40000000, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)={r0, r0, 0x0, 0xa1, &(0x7f0000000280)="93604314c3d681c4f8e92d9acb20a39b43255869787f7b92d58f3aa7734f6ea9e463ce53d0e06893e311e8e8dcd135188ba93b3d762472ea1d576f742b766ffb412157a47522940e05bb2ab6077bb492e0fac659d48a1e3e694151a9ae8f27e93a2304286fa7f58e109e108b5426e47bf623aecfdb95da840836fee741a02c1c5e7f49d56266332e0857c8d38f184db02c42dbbfc296eea0c299968d947ab5c02d", 0x9, 0x3, 0x8, 0x7, 0x4, 0x3, 0x81, 'syz0\x00'}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xe) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r5, &(0x7f0000000500)="0c4b280413d26a", &(0x7f0000000640)=""/86}, 0x20) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000005e670470f47132d158d8ebee8f8456ea5314e8b48f9e66a3985a5634eb04c005f3ffff73780de081ab8766585370fa779470ea28f059d27868e1c3fdf023b4d900"/83, @ANYRES16=r8, @ANYBLOB="010000000000000000000300000014000200ff010000000000000000000000000001130007002f7362696e2f6468636c69656e74000008000400e0000002140006006261746164763000000000000000000014000300"/102], 0x6c}}, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 1.505548734s ago: executing program 2 (id=1112): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000006800010000000000000000400aa000000017000004000b00080005"], 0x24}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000006800010000000000000000400aa000000017000004000b00080005"], 0x24}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) sendmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) (async) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) (async) 1.374960475s ago: executing program 2 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00", 0xb, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000150a03090000034000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) 1.271528467s ago: executing program 3 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40840}, 0x44080) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4081) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)={0x3b8, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x85, 0x3, "5a822b6e334737e4fcffd53edd3747b83012bd64b4a39dade2aa22b98fc85e33a855add4aacc498e732b9e509d6e660c88d914ea8c6a1a1d6abcd00985654762a7ef2ea54f9a21bb7975468ba24cede57165f39c7122cec0ceb70388416933dcbc34e8171537b1e034d35ba66181078fb6e5718f6045bec292fb68e4d23412fcb1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a58b32d8b813b254b83f521b72526f792a90fc52b4fc766ff3"}}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa3, @mcast2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4e05d5a0}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x35de}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff5c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf52b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd, @dev={0xfe, 0x80, '\x00', 0x27}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4cc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40001}, 0x408c1) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r8, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000a80)={0x7, 'vlan0\x00', {0x6}, 0xeda}) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004041}, 0x24014880) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x47}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x48}}, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d80), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000001000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0x1, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000011c0)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001400)={@dev, @initdev, 0x0}, &(0x7f0000001440)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x17, 0x2e, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @map_fd={0x18, 0x4, 0x1, 0x0, r13}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @exit]}, &(0x7f0000001380)='GPL\x00', 0x5, 0x34, &(0x7f00000013c0)=""/52, 0x41100, 0x0, '\x00', r16, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x2, 0x6, 0x74ac, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2, @void, @value}, 0x94) 1.217156068s ago: executing program 1 (id=1115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x80, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[], 0x41) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) (async) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000160a01010000000000000000020000000900020073797a31000000000900010073797a30000000002c000380080002400000000008000140000000001800038014000100776c616e3000000000000000000000000800074000000001"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400d4}, 0x4000890) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYBLOB="036beb0baa"], 0x1c}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @loopback}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) close(r8) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x36) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.158070485s ago: executing program 3 (id=1116): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7004ffdbdf25180000005c0030805800018008000100000000000c000500018000000000000034000380060003009aaa000006000100020000000800020003000000080002000000000006000300a2aa000008000200030000000c0005"], 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x8014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) close(0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffffffdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="300030802c00018008"], 0x4c}, 0x1, 0x0, 0x1000000, 0x4004080}, 0x810) 1.064427814s ago: executing program 4 (id=1117): socket$inet_icmp_raw(0x2, 0x3, 0x1) nanosleep(&(0x7f00000025c0)={0x0, 0x3938700}, 0x0) 1.062408421s ago: executing program 1 (id=1118): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES8=r2], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010022bd7000fedbdf252300000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) sendmmsg$inet(r0, &(0x7f0000004200)=[{{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)="de871eb8dfd8ba", 0x7}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000042c0)=ANY=[], 0x130}}], 0x2, 0x1) 1.061256902s ago: executing program 2 (id=1119): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000680)="00ca104fd8991fd4e1c1e0a5d695fd06e410c93ab52893cf471fb14dc88eda2330a710276f7167a80fb48dd9c94b0ef129af35c504ff53bfd4a176d03ef7d3e3cc4aa86eadc5c1c0b2a196d00ce99fa28ec00c17d645d1a69466c793821a3e22ef3e4b4de2086ed5e60a52c76484da56929dfde7317aee78dfd7819d771f1818d055b007e3832f50dfc3a2a174189f643d43855ed649f64d", 0x98, 0x4090, &(0x7f00000001c0)={0xa, 0x2, 0x398, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044810}, 0x800) shutdown(r2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800124be6da91a0fede96000c04028007000e0012000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x3e000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00007d000000684cdb787c0f58029595865007bd287d6f434f3fbe434fb4befb96f96dc2ff140f2af67badc053de500527d4fc729e8b9e31c96362b6802818cd67b1f9d2155df82de287c18acd8334c2ce827d3591316b324076560ff204589c2397aab0fc2045dc57612f62e4e7eecff2125822723c25d1ae8b8629573e07450d8d225c5a956a7559b91f2399b9e28ffbf06aedd5db2ef3f83cc9ce6cc883ea3e725ed12bf47fc582e6d63caba1e9ee800009e511050a46bb2426c46a9db969f78032860acb420813b20ca02e65574c4aee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x5, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400280}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) r8 = socket$inet_sctp(0x2, 0x1a394367b395476, 0x84) splice(r7, &(0x7f0000000440)=0x7f, r2, &(0x7f0000000480)=0x40, 0x3, 0xf) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x400000, @private2, 0x3}}, 0x6, 0x9}, &(0x7f0000000200)=0x90) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0xb4, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xb4}}, 0x8000) 939.147759ms ago: executing program 3 (id=1120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYRESHEX=r0], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x8001) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xc3, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x1c, {[@timestamp={0x5, 0xa, 0x0, 0x500}]}}, {"a706faed3cf692307e75e5"}}}}}, 0x4d) 875.849977ms ago: executing program 1 (id=1121): socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 874.417039ms ago: executing program 4 (id=1122): socket$kcm(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) close(0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000906000000e0e1bc1bdfa566587200fedbdf2500000000b4e7df1170c3cb4861f6b1b6f484ce7125bae67ff890a2dac264f5e76ff2d5683cc878db4860f7134389888e39d9c12ec28b255e1caecbf262cad9369318720ab93897ffcf71928307c276573f1faad4aad554c346d01324fab42cf283e8825033d40d625917b38aec8ac292336e55bc5e51ab6bf7798f46591302cf6ff8d956d02ce9aab6ed7ac6bc5c4521667e5307d9cb9e13c3db11ae754416220f91ee33ce71a7d8b722018e72aa32a32ac44131edcd9e903820b4", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r13, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 735.810297ms ago: executing program 0 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000240)={r3, r6, 0x1, 0xfa, &(0x7f0000000340)="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", 0x5, 0x80, 0x29c, 0x1, 0x4, 0x1, 0x6, 'syz1\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x119}, @NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "416c1598435f278946e9bc4b4993e40a"}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r10 = epoll_create1(0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0xa0000003}) r12 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES64], 0x40}, 0x24040090) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 675.458379ms ago: executing program 1 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x828, 0x70bd2d, 0x25dfdbfd}, 0x4a}, 0x1, 0x0, 0x0, 0x40009c0}, 0x20040015) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 580.673306ms ago: executing program 3 (id=1125): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0c000000010001", 0x7) (async) write(r1, &(0x7f0000000000)="0c000000010001", 0x7) unshare(0x68040200) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl(r4, 0x3, &(0x7f0000000140)="a3447a3c2c7223ef29801ab6a9f48036931a58b65750cd721fccac89d0") (async) ioctl(r4, 0x3, &(0x7f0000000140)="a3447a3c2c7223ef29801ab6a9f48036931a58b65750cd721fccac89d0") socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000480)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2f, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="2f0000001800000004000000", @ANYBLOB="b73af34cab"], 0x20) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x222, &(0x7f0000001040)='o\xb3\xf0\x96d\x10\xa96\xc70\t9\x00\xd8\xcc\\\x85\xacl\x8ae\xed_\x89Sr\x1c\xea\x00\x944J1tL\xb7X\xfb\x9b\f\x9d:\x91xtw\x10\x06y\xb6@\x9b!\xefcS\x10\x98o\x12\xb6\xf0$MJ\x8f\xc9x\xd8\x95\xe7\x93\xa3\xa3\t\xafZc\xa9\f\x9fm\x9d\xf6\xaa\xd9\x97\x17z\xb1\x86\x91\xaa\xedV9^\xd5>TC\x83\r\x1e\x17\xbbR\\\x9d\xb5g\x9d$\xf4\xaf\x1b\x1aR\x0e\x8d\xc5\xf0\x1b?s\xc5\b\x00\x00\x00\t$\xbf\xf1\xb8-\xf8\xffC\xf9\x83\x86\xe5\xadp\xb4\xfe\xb2\xf2\xf5\x99\x94\xd2\x97[\xaaX^It\xaax\x03\xe6\xcdb\x887:x>GK\x1b.\xc7\xbe\x98m\x872\x94\xdf]\xca\x82\x99\xad\xdf\xe0=\xcaS\x8d\x9el\xd8*\xa3\xcc\xd9dv\xc9\xe5`\x8a\xa4\xb5\xe8wJ\x00\xc8P\xecy\xb0\xfd]XR\xbe\xc2\x18\xfa\x95\xa2e\xb4A\xfc8\xe8\x9e\xfdv\xcdB\xf7/\xf44\xf9\x05\x12\xc3HF\xf9\xaf}\xc6\x18>\xa8\\\xd0\x98\x97\xd1\f\xe0F\xcdO\x8f&\xd0Y\xc1\xeb\x8e\rj\x13~>\x18$\xb4{\"\xde\x7f\xa7Z\xcekc\xcbQPt\xbc?\x02\xd2<\xfbI\x1fN\x7f\x04\xec\xdb\xae\xfc\xfe\xb7:_\xa2`Q\xa0\x88\x7fU\x9fj\xc9#=?y\xa0\xed'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x222, &(0x7f0000001040)='o\xb3\xf0\x96d\x10\xa96\xc70\t9\x00\xd8\xcc\\\x85\xacl\x8ae\xed_\x89Sr\x1c\xea\x00\x944J1tL\xb7X\xfb\x9b\f\x9d:\x91xtw\x10\x06y\xb6@\x9b!\xefcS\x10\x98o\x12\xb6\xf0$MJ\x8f\xc9x\xd8\x95\xe7\x93\xa3\xa3\t\xafZc\xa9\f\x9fm\x9d\xf6\xaa\xd9\x97\x17z\xb1\x86\x91\xaa\xedV9^\xd5>TC\x83\r\x1e\x17\xbbR\\\x9d\xb5g\x9d$\xf4\xaf\x1b\x1aR\x0e\x8d\xc5\xf0\x1b?s\xc5\b\x00\x00\x00\t$\xbf\xf1\xb8-\xf8\xffC\xf9\x83\x86\xe5\xadp\xb4\xfe\xb2\xf2\xf5\x99\x94\xd2\x97[\xaaX^It\xaax\x03\xe6\xcdb\x887:x>GK\x1b.\xc7\xbe\x98m\x872\x94\xdf]\xca\x82\x99\xad\xdf\xe0=\xcaS\x8d\x9el\xd8*\xa3\xcc\xd9dv\xc9\xe5`\x8a\xa4\xb5\xe8wJ\x00\xc8P\xecy\xb0\xfd]XR\xbe\xc2\x18\xfa\x95\xa2e\xb4A\xfc8\xe8\x9e\xfdv\xcdB\xf7/\xf44\xf9\x05\x12\xc3HF\xf9\xaf}\xc6\x18>\xa8\\\xd0\x98\x97\xd1\f\xe0F\xcdO\x8f&\xd0Y\xc1\xeb\x8e\rj\x13~>\x18$\xb4{\"\xde\x7f\xa7Z\xcekc\xcbQPt\xbc?\x02\xd2<\xfbI\x1fN\x7f\x04\xec\xdb\xae\xfc\xfe\xb7:_\xa2`Q\xa0\x88\x7fU\x9fj\xc9#=?y\xa0\xed'}, 0x30) socket(0x1d, 0x2, 0x6) (async) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r10, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@deltfilter={0x88c, 0x2d, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xd, 0x10}, {}, {0xe, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x1ff}]}}, @filter_kind_options=@f_route={{0xa}, {0x844, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x93}, @TCA_ROUTE4_POLICE={0x82c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xff, 0x0, 0x7, 0x76, 0xffff, 0x81, 0xfffffffc, 0xffffffff, 0x2, 0xc7, 0x5ec, 0xbd6, 0x1, 0xd, 0x400, 0x8000, 0x7, 0x8, 0x7, 0x80000000, 0x5, 0x8907, 0x0, 0x4, 0x1, 0x1, 0x100, 0x7, 0xba, 0xfffffff1, 0x7, 0x9, 0x0, 0x4, 0x78, 0x1, 0xd, 0x9, 0x2, 0xea0, 0x3, 0x3, 0x9, 0x26, 0xe, 0x2000000, 0x6, 0x4, 0x5, 0x7f, 0xffff0001, 0x0, 0x3, 0xfffffefb, 0x0, 0xc, 0x1, 0x4, 0x9, 0x1, 0x7, 0x5, 0x4000000, 0x9, 0x7a31, 0x8, 0x9, 0xff, 0xe6, 0x5, 0x0, 0x9, 0x9, 0x2, 0x8000, 0x1, 0x2, 0x4, 0x0, 0x7, 0x193b, 0x10001, 0x1, 0xe, 0xc, 0x1, 0x8, 0x80000001, 0x5, 0x0, 0xa, 0x7, 0x7, 0x7, 0x7fffffff, 0x1, 0x4, 0xe2, 0x3, 0xaf, 0x4, 0x81, 0x5, 0x81, 0xfffffffe, 0x3, 0x808, 0x2, 0x4, 0x8, 0xbb5, 0x7, 0x100, 0xdb, 0x5a163fac, 0x9, 0xae8, 0x8, 0x7, 0x4, 0x920d, 0x8, 0x1, 0x0, 0x1a36, 0x8001, 0x4, 0x8, 0x7, 0x6e, 0x6, 0xbe, 0x9, 0x7, 0x1, 0x1, 0x5, 0x93, 0x4, 0x40, 0xb, 0x3ff, 0x3, 0x70efeb61, 0x9, 0x1ff, 0x5, 0x8, 0xaf4c, 0x7, 0x6, 0x2, 0xcd6, 0x5, 0x7fffffff, 0x9, 0x96, 0xfffffff9, 0x2a, 0x5, 0xffff, 0x0, 0x3, 0x9, 0x7, 0x9, 0xeb6, 0x7, 0x81, 0x6, 0x100, 0x100, 0x6, 0x800, 0x7, 0x1c020887, 0x4, 0x1, 0xd, 0x101, 0x80000000, 0x400, 0x4, 0x1, 0xa, 0x4, 0x4, 0x4fb7, 0x1, 0x5, 0x5, 0xfffffff8, 0x9, 0x10001, 0x4, 0x6, 0x5, 0x4c8, 0x6dd, 0x7, 0x7f80000, 0x5, 0x3ff, 0x3928, 0xa5c, 0xfec, 0x5, 0x5, 0x5, 0x2, 0x1, 0x8, 0xffffffff, 0x7, 0x3, 0x5d, 0x76, 0x6, 0x4, 0x6, 0xff, 0x6, 0xfffffffa, 0x4, 0x80000001, 0x2, 0x8, 0x40, 0x35c, 0x10d, 0x81, 0x56b3, 0x7, 0x4, 0x6, 0x8, 0xa7, 0x8, 0x8, 0x7, 0x4, 0xfffffff7, 0x8, 0x2, 0xa2, 0x5, 0xfffffff8, 0xe26, 0x1, 0x7, 0xfffffff8, 0x3a6, 0x43, 0x0, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x3, 0x80000000, 0x7, 0x2, 0x1, 0x8, 0x1, 0x7, 0x8, 0x880, 0x2, 0x6, 0xc, 0x13be, 0xda, 0x9, 0x4, 0x0, 0x9, 0x3fe8, 0xe, 0x800, 0x8000, 0x1, 0x6, 0xfffff734, 0xb, 0x370a, 0x4, 0x43, 0x1ff, 0xffffffff, 0xb, 0x6, 0x4, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffa, 0x7, 0x10000, 0x2, 0xff, 0x4, 0x9, 0x6, 0x1, 0x81, 0xfffffffb, 0x3, 0x0, 0x2c3, 0xcc55, 0x1000, 0x3, 0x5, 0x29, 0x2, 0x20000000, 0x3, 0x0, 0x3, 0x3, 0x7eab9505, 0x950, 0x50ebc83b, 0x92, 0xf, 0x8000, 0x8, 0xe342, 0x8000, 0x8, 0x10, 0x80000001, 0xe35, 0xd25, 0x3, 0x400, 0x10e, 0x10, 0xa5, 0x3, 0x8, 0x7, 0x5, 0x80000000, 0xdd75, 0xd9, 0x1, 0x757e, 0x3, 0x0, 0x2, 0x8001, 0x3ff, 0x7, 0x5, 0x8, 0x38, 0x401, 0x5, 0xffffffff, 0x10001, 0x3ff, 0xd, 0x8, 0x200, 0x100, 0x8000, 0x396, 0x578, 0x0, 0x4, 0x3, 0x4, 0x1, 0x6, 0x77c4884d, 0x3, 0x8, 0x401, 0x7, 0x1000, 0x1, 0x100, 0x3, 0x4, 0xc4, 0x2, 0x5, 0x5, 0x1, 0x7, 0x200, 0x7, 0x2, 0x3028, 0x2, 0xc1, 0x7, 0x1, 0x9, 0x0, 0x0, 0xc2d, 0xfffffff7, 0x67, 0x3, 0x7, 0x10000, 0x4, 0xfffffffe, 0x5d, 0x10000, 0x5, 0x8, 0x2, 0x7, 0x8, 0x7fffffff, 0x5, 0x3a8, 0x9, 0x7ff, 0x7, 0x1, 0x0, 0xb0, 0x1, 0x4, 0x4, 0x5, 0x9, 0x3a0, 0x0, 0x1, 0x7e12, 0x8a660000, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x80000000, 0xa7c, 0xccf, 0xa, 0xd3, 0x3ff, 0xffffffff, 0xff, 0x0, 0xff, 0x5, 0x1, 0xffffffff, 0x7, 0x61, 0x97c2, 0xeefe, 0x9a94, 0x1, 0x6, 0x775, 0x7fff, 0x6, 0xf, 0x7, 0x800, 0x800, 0x1, 0x6, 0x5, 0x6, 0x1, 0x2, 0x2, 0x2, 0x3, 0xff, 0x7, 0x1a7, 0xfffffffb, 0x5, 0xfffffffa, 0x8f, 0x4, 0x1, 0x5, 0xbcad, 0x8001, 0x7, 0xfffffffa, 0xbf1, 0xf, 0x4, 0xfffffff8, 0x7, 0xe, 0xd1, 0x7, 0x8, 0x1, 0x100, 0x9, 0x2, 0x6, 0x1, 0x0, 0x261, 0x3]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa3d}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 400.209507ms ago: executing program 4 (id=1126): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff010000000000000000000000000001050006"], 0xa8}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYRES64], 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x8014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) close(0xffffffffffffffff) 359.75528ms ago: executing program 1 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x22, 0x2, 0x2) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000001080)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x208) r11 = accept4(r10, 0x0, 0x0, 0x80000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x9}, 0x8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xac, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0xb6c5f2cd54ae8f00}, 0x8800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000340)=0x10001, 0x4) 208.316953ms ago: executing program 4 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x0, 0x82, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) 0s ago: executing program 2 (id=1129): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x198, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0xd3da6fa7e17febdb}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}, @IFLA_VFINFO_LIST={0x164, 0x16, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @multicast}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x3c}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x71f, 0x6, 0x88a8}}, {0x14, 0x1, {0x0, 0x935, 0x4, 0x88a8}}, {0x14, 0x1, {0x9, 0xa8b, 0x9, 0x8100}}, {0x14, 0x1, {0x2, 0xa1, 0x9, 0x8100}}, {0x14, 0x1, {0x7f, 0xe93, 0xf, 0x8100}}, {0x14, 0x1, {0xffffffff, 0xd1a, 0x1, 0x8100}}, {0x14, 0x1, {0xfffffff9, 0x7e4, 0x5, 0x88a8}}, {0x14, 0x1, {0x0, 0x404, 0x5, 0x88a8}}, {0x14, 0x1, {0x800, 0xde8, 0x1, 0x88a8}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_VLAN={0x10, 0x2, {0xa, 0x4fe, 0xd}}, @IFLA_VF_RATE={0xffffff84, 0x6, {0x1, 0x1, 0x100}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffa, 0x6f15}}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40810}, 0x20008010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={0x0, 0x0, 0x8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f00000001c0)="402a55c6"}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000006000000000000000000000000000000000000000045549c0145e5fd6200feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000001302"], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 79.227660][ T5822] cgroup: Unknown subsys name 'net' [ 79.358474][ T5822] cgroup: Unknown subsys name 'cpuset' [ 79.367656][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.131332][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.652573][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.684891][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.692893][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.701336][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.709897][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.779749][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.789259][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.797049][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.808381][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.817408][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.825968][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.833883][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.874867][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.885633][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.894498][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.905927][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.928902][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.966226][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.974028][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.974487][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.982568][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.996059][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.996468][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.011665][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.021274][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.497256][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 84.799540][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.811422][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 84.891002][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.900148][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.909994][ T5832] bridge_slave_0: entered allmulticast mode [ 84.919604][ T5832] bridge_slave_0: entered promiscuous mode [ 84.942711][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.967633][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.975024][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.982178][ T5832] bridge_slave_1: entered allmulticast mode [ 84.990436][ T5832] bridge_slave_1: entered promiscuous mode [ 85.022124][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.135720][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.200406][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.237007][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.244178][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.252101][ T5838] bridge_slave_0: entered allmulticast mode [ 85.259685][ T5838] bridge_slave_0: entered promiscuous mode [ 85.313527][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.321039][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.328690][ T5838] bridge_slave_1: entered allmulticast mode [ 85.337736][ T5838] bridge_slave_1: entered promiscuous mode [ 85.367073][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.374250][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.381666][ T5839] bridge_slave_0: entered allmulticast mode [ 85.389990][ T5839] bridge_slave_0: entered promiscuous mode [ 85.415951][ T5832] team0: Port device team_slave_0 added [ 85.422015][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.429347][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.437223][ T5837] bridge_slave_0: entered allmulticast mode [ 85.444432][ T5837] bridge_slave_0: entered promiscuous mode [ 85.483708][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.491300][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.499239][ T5839] bridge_slave_1: entered allmulticast mode [ 85.507116][ T5839] bridge_slave_1: entered promiscuous mode [ 85.516192][ T5832] team0: Port device team_slave_1 added [ 85.522271][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.529544][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.536903][ T5837] bridge_slave_1: entered allmulticast mode [ 85.543990][ T5837] bridge_slave_1: entered promiscuous mode [ 85.622355][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.635458][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.644869][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.652234][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.659972][ T5846] bridge_slave_0: entered allmulticast mode [ 85.667478][ T5846] bridge_slave_0: entered promiscuous mode [ 85.676433][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.683795][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.691148][ T5846] bridge_slave_1: entered allmulticast mode [ 85.698911][ T5846] bridge_slave_1: entered promiscuous mode [ 85.776927][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.790620][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.801350][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.808726][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.835548][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.846835][ T5849] Bluetooth: hci0: command tx timeout [ 85.849001][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.859385][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.885465][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.900055][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.958925][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.971586][ T5838] team0: Port device team_slave_0 added [ 85.977559][ T5849] Bluetooth: hci3: command tx timeout [ 85.977567][ T5154] Bluetooth: hci1: command tx timeout [ 85.992123][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.019003][ T5839] team0: Port device team_slave_0 added [ 86.042638][ T5838] team0: Port device team_slave_1 added [ 86.051237][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.060743][ T5154] Bluetooth: hci2: command tx timeout [ 86.061129][ T5849] Bluetooth: hci4: command tx timeout [ 86.084911][ T5839] team0: Port device team_slave_1 added [ 86.190460][ T5837] team0: Port device team_slave_0 added [ 86.217365][ T5846] team0: Port device team_slave_0 added [ 86.224472][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.231597][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.258708][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.275808][ T5832] hsr_slave_0: entered promiscuous mode [ 86.282174][ T5832] hsr_slave_1: entered promiscuous mode [ 86.293713][ T5837] team0: Port device team_slave_1 added [ 86.300399][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.308200][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.334480][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.347844][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.354907][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.381570][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.394208][ T5846] team0: Port device team_slave_1 added [ 86.401078][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.408454][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.434865][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.501892][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.509281][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.537152][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.603353][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.610713][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.637336][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.657850][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.664897][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.691033][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.752616][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.759800][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.785992][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.827135][ T5839] hsr_slave_0: entered promiscuous mode [ 86.833482][ T5839] hsr_slave_1: entered promiscuous mode [ 86.841097][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.848940][ T5839] Cannot create hsr debugfs directory [ 86.910886][ T5838] hsr_slave_0: entered promiscuous mode [ 86.922898][ T5838] hsr_slave_1: entered promiscuous mode [ 86.929981][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.942718][ T5838] Cannot create hsr debugfs directory [ 87.109276][ T5846] hsr_slave_0: entered promiscuous mode [ 87.116536][ T5846] hsr_slave_1: entered promiscuous mode [ 87.125480][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.154633][ T5846] Cannot create hsr debugfs directory [ 87.179320][ T5837] hsr_slave_0: entered promiscuous mode [ 87.192688][ T5837] hsr_slave_1: entered promiscuous mode [ 87.203984][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.214021][ T5837] Cannot create hsr debugfs directory [ 87.785005][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.799892][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.827013][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.839804][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.895114][ T5849] Bluetooth: hci0: command tx timeout [ 87.900704][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.915324][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.944511][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.973365][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.042475][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.054834][ T5849] Bluetooth: hci1: command tx timeout [ 88.054863][ T5154] Bluetooth: hci3: command tx timeout [ 88.076678][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.101878][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.128568][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.150103][ T5154] Bluetooth: hci4: command tx timeout [ 88.150124][ T5849] Bluetooth: hci2: command tx timeout [ 88.228872][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.246869][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.258344][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.292790][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.403443][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.421637][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.443610][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.487471][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.505689][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.525673][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.539808][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.567743][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.575172][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.606741][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.613880][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.673665][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.736982][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.744136][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.766467][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.792192][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.799386][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.824399][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.920804][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.957612][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.980869][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.988062][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.026797][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.034033][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.073875][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.081153][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.119019][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.126266][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.170394][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.311213][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.352441][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.359707][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.471811][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.479134][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.692201][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.830339][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.975675][ T5849] Bluetooth: hci0: command tx timeout [ 89.999868][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.085767][ T5832] veth0_vlan: entered promiscuous mode [ 90.128119][ T5832] veth1_vlan: entered promiscuous mode [ 90.137122][ T5849] Bluetooth: hci1: command tx timeout [ 90.137133][ T5154] Bluetooth: hci3: command tx timeout [ 90.189568][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.215497][ T5849] Bluetooth: hci2: command tx timeout [ 90.216098][ T5154] Bluetooth: hci4: command tx timeout [ 90.321304][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.421283][ T5832] veth0_macvtap: entered promiscuous mode [ 90.433360][ T5832] veth1_macvtap: entered promiscuous mode [ 90.447049][ T5846] veth0_vlan: entered promiscuous mode [ 90.509645][ T5839] veth0_vlan: entered promiscuous mode [ 90.541062][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.564106][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.573600][ T5846] veth1_vlan: entered promiscuous mode [ 90.592976][ T5837] veth0_vlan: entered promiscuous mode [ 90.599667][ T5839] veth1_vlan: entered promiscuous mode [ 90.611570][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.622662][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.634657][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.643412][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.663310][ T5838] veth0_vlan: entered promiscuous mode [ 90.688658][ T5838] veth1_vlan: entered promiscuous mode [ 90.700638][ T5837] veth1_vlan: entered promiscuous mode [ 90.819141][ T5839] veth0_macvtap: entered promiscuous mode [ 90.830656][ T5839] veth1_macvtap: entered promiscuous mode [ 90.860754][ T5846] veth0_macvtap: entered promiscuous mode [ 90.906958][ T5838] veth0_macvtap: entered promiscuous mode [ 90.918435][ T5846] veth1_macvtap: entered promiscuous mode [ 90.930609][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.950632][ T5838] veth1_macvtap: entered promiscuous mode [ 90.961079][ T5837] veth0_macvtap: entered promiscuous mode [ 90.978426][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.980455][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.997363][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.037856][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.046940][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.060297][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.069280][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083591][ T5837] veth1_macvtap: entered promiscuous mode [ 91.109431][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.135350][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.154872][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.157182][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.180460][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.220844][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.232141][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.241445][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250191][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.290598][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.315781][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.358832][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.449843][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.461247][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.473779][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.483213][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.492328][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.516076][ T5957] syz_tun: entered allmulticast mode [ 91.549585][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563277][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572571][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583245][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.596838][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.605114][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.703635][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.730079][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.765561][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.773452][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.843002][ T5930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.881641][ T5930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.930906][ T5962] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.998191][ T881] cfg80211: failed to load regulatory.db [ 92.004079][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.013268][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.055454][ T5154] Bluetooth: hci0: command tx timeout [ 92.125928][ T5964] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.189660][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.215847][ T5154] Bluetooth: hci1: command tx timeout [ 92.215858][ T5849] Bluetooth: hci3: command tx timeout [ 92.245636][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.296195][ T5154] Bluetooth: hci2: command tx timeout [ 92.296354][ T5849] Bluetooth: hci4: command tx timeout [ 92.377423][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.396972][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.448248][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.497954][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.918758][ T5980] tipc: Started in network mode [ 92.944107][ T5980] tipc: Node identity 2000007, cluster identity 4711 [ 92.975381][ T5980] tipc: Node number set to 33554439 [ 93.243772][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.282975][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.485333][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 93.724870][ T5996] wireguard0: entered promiscuous mode [ 93.749655][ T5996] wireguard0: entered allmulticast mode [ 93.937965][ T6017] Zero length message leads to an empty skb [ 94.471826][ T6024] hsr0: entered promiscuous mode [ 94.517816][ T6032] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21'. [ 94.537121][ T6024] macvtap1: entered promiscuous mode [ 94.549444][ T6024] macvtap1: entered allmulticast mode [ 94.566268][ T6032] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 94.577824][ T6024] hsr0: entered allmulticast mode [ 94.597351][ T6024] hsr_slave_0: entered allmulticast mode [ 94.632559][ T6024] hsr_slave_1: entered allmulticast mode [ 94.679110][ T6024] hsr0: left allmulticast mode [ 94.683964][ T6024] hsr_slave_0: left allmulticast mode [ 94.706576][ T6043] netlink: 248 bytes leftover after parsing attributes in process `syz.4.23'. [ 94.707726][ T6024] hsr_slave_1: left allmulticast mode [ 95.344316][ T6051] hsr0: entered promiscuous mode [ 95.363269][ T6051] macvtap1: entered promiscuous mode [ 95.369032][ T6051] macvtap1: entered allmulticast mode [ 95.374455][ T6051] hsr0: entered allmulticast mode [ 95.382469][ T6051] hsr_slave_0: entered allmulticast mode [ 95.408198][ T6051] hsr_slave_1: entered allmulticast mode [ 95.584183][ T6051] hsr0: left allmulticast mode [ 95.591341][ T6051] hsr_slave_0: left allmulticast mode [ 95.629709][ T6051] hsr_slave_1: left allmulticast mode [ 96.067705][ T6071] x_tables: duplicate underflow at hook 3 [ 96.308929][ T6081] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 96.635714][ T6094] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.35'. [ 96.660982][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 96.713251][ T6096] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.936984][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.011485][ T6117] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 97.703697][ T6136] netlink: 'syz.3.46': attribute type 2 has an invalid length. [ 97.971915][ T6136] syz.3.46 (6136) used greatest stack depth: 20008 bytes left [ 98.252068][ T6156] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.302930][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 99.003370][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 99.018042][ T6192] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 99.137438][ T6193] vlan2: entered promiscuous mode [ 99.152990][ T6193] bond0: entered promiscuous mode [ 99.164800][ T6193] bond_slave_0: entered promiscuous mode [ 99.180055][ T6193] bond_slave_1: entered promiscuous mode [ 99.291836][ T6192] team0: Device veth1_macvtap failed to register rx_handler [ 99.334048][ T6205] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 99.382447][ T6201] can: request_module (can-proto-0) failed. [ 99.751895][ T6216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 99.936910][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.67'. [ 99.975539][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 100.050354][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 100.068674][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 100.078617][ T6229] sctp: [Deprecated]: syz.0.68 (pid 6229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.078617][ T6229] Use struct sctp_sack_info instead [ 100.162740][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 100.491618][ T30] audit: type=1107 audit(1749382826.349:2): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 100.507358][ T6250] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.520701][ T6247] sctp: [Deprecated]: syz.1.72 (pid 6247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.520701][ T6247] Use struct sctp_sack_info instead [ 100.821007][ T6263] netlink: 'syz.1.78': attribute type 11 has an invalid length. [ 100.868182][ T6263] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.78'. [ 100.965163][ T6263] netlink: zone id is out of range [ 100.970363][ T6263] netlink: zone id is out of range [ 101.020544][ T6263] netlink: zone id is out of range [ 101.084760][ T6263] netlink: zone id is out of range [ 101.105043][ T6263] netlink: zone id is out of range [ 101.116564][ T6263] netlink: zone id is out of range [ 101.132015][ T6263] netlink: zone id is out of range [ 101.162467][ T6263] netlink: zone id is out of range [ 101.204754][ T6263] netlink: zone id is out of range [ 101.215631][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 101.483498][ T6286] TCP: TCP_TX_DELAY enabled [ 101.742371][ T6295] syz.4.85 uses old SIOCAX25GETINFO [ 102.531615][ T6325] __nla_validate_parse: 3 callbacks suppressed [ 102.531636][ T6325] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.92'. [ 102.564908][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 102.593814][ T6309] syzkaller1: entered promiscuous mode [ 102.624047][ T6309] syzkaller1: entered allmulticast mode [ 102.663931][ T6327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 102.693268][ T6327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 103.056999][ T6339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.068418][ T6340] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 103.100116][ T6340] netlink: 152 bytes leftover after parsing attributes in process `syz.3.97'. [ 103.365372][ T6346] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.171040][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 104.187294][ T6383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.112'. [ 104.470937][ T6376] syz.4.109 (6376) used greatest stack depth: 16584 bytes left [ 104.862964][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.118'. [ 104.962497][ T6407] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 105.017956][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 105.402411][ T6426] vlan0: entered promiscuous mode [ 105.513728][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 105.709106][ T6428] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 105.995322][ T6431] 8021q: adding VLAN 0 to HW filter on device team1 [ 106.240454][ T6450] syzkaller0: entered promiscuous mode [ 106.265354][ T6450] syzkaller0: entered allmulticast mode [ 106.634470][ T6480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.672255][ T6480] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 107.782437][ T6461] __nla_validate_parse: 4 callbacks suppressed [ 107.782453][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.132'. [ 107.865118][ T6480] net_ratelimit: 8135 callbacks suppressed [ 107.865139][ T6480] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 107.901767][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 108.094971][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 108.271203][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 108.603736][ T6514] tipc: Enabling of bearer rejected, failed to enable media [ 108.931495][ T6524] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 109.098213][ T6524] team0: Device ipvlan1 failed to register rx_handler [ 109.112812][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 109.142098][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.153'. [ 109.322226][ T6550] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.155'. [ 109.547284][ T6554] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.563785][ T6554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.157'. [ 109.664057][ T6562] netlink: 68 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.995204][ T6571] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 110.159958][ T6582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'. [ 110.178892][ T6582] netlink: 9 bytes leftover after parsing attributes in process `syz.1.166'. [ 110.330028][ T6590] netlink: 'syz.4.168': attribute type 13 has an invalid length. [ 110.544843][ T6598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.170'. [ 110.553042][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.563120][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.876262][ T6613] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 111.173570][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.306656][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.777248][ T6590] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.846438][ T6590] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.870743][ T6590] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.900056][ T6590] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.538594][ T6646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.665145][ T6655] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 113.212596][ T6659] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 113.393472][ T6670] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.411719][ T6672] __nla_validate_parse: 7 callbacks suppressed [ 113.411738][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 113.422765][ T6670] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 113.535817][ T6679] netlink: 'syz.4.186': attribute type 3 has an invalid length. [ 113.640946][ T6679] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.186'. [ 113.692327][ T6691] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.799781][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.815230][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.836015][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.850232][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.865341][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.874479][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.900204][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.912389][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.986749][ T6699] ip6tnl1: entered promiscuous mode [ 114.882012][ T6747] openvswitch: netlink: IP tunnel dst address not specified [ 114.893172][ T6748] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 117.229827][ T6844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.262070][ T6847] netlink: 'syz.1.230': attribute type 21 has an invalid length. [ 117.271156][ T6847] netlink: 'syz.1.230': attribute type 5 has an invalid length. [ 117.291740][ T6851] Bluetooth: MGMT ver 1.23 [ 117.295861][ T6844] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 117.313740][ T6847] netlink: 'syz.1.230': attribute type 12 has an invalid length. [ 117.730037][ T6869] xt_hashlimit: size too large, truncated to 1048576 [ 117.737280][ T6872] netlink: 'syz.3.239': attribute type 97 has an invalid length. [ 117.782595][ T6877] xt_hashlimit: size too large, truncated to 1048576 [ 117.845932][ T6877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.527515][ T6913] __nla_validate_parse: 63 callbacks suppressed [ 118.527536][ T6913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.249'. [ 118.684443][ T6918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.857147][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 118.973226][ T6918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.998616][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 119.099332][ T6918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.189108][ T6918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.474683][ T6943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.257'. [ 119.493192][ T6943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.257'. [ 119.631306][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 119.665149][ T6950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'. [ 119.684154][ T6918] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.706776][ T6950] nbd: must specify at least one socket [ 119.863085][ T6918] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.994459][ T6918] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.064374][ T6918] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.141186][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.150430][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.425974][ T6987] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 120.458423][ T6987] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.967963][ T7011] smc: net device bond0 applied user defined pnetid SYZ2 [ 120.988691][ T7011] smc: net device bond0 erased user defined pnetid SYZ2 [ 121.187518][ T7021] bridge_slave_1: left allmulticast mode [ 121.193248][ T7021] bridge_slave_1: left promiscuous mode [ 121.219766][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.242809][ T7021] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 121.351408][ T7033] netlink: 248 bytes leftover after parsing attributes in process `syz.0.280'. [ 121.597374][ T7039] syzkaller1: entered promiscuous mode [ 121.623998][ T7039] syzkaller1: entered allmulticast mode [ 121.893366][ T7057] tc_dump_action: action bad kind [ 121.991520][ T7062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.287'. [ 122.087465][ T7065] tipc: Started in network mode [ 122.093620][ T7065] tipc: Node identity 8, cluster identity 3 [ 122.112612][ T7065] tipc: Node number set to 8 [ 123.434634][ T30] audit: type=1800 audit(1749382849.289:3): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.307" name="memory.events" dev="tmpfs" ino=314 res=0 errno=0 [ 123.498562][ T30] audit: type=1804 audit(1749382849.339:4): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.307" name="/newroot/57/memory.events" dev="tmpfs" ino=314 res=1 errno=0 [ 123.795363][ T7172] __nla_validate_parse: 2 callbacks suppressed [ 123.795383][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 123.888569][ T7172] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 123.896633][ T7172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.313'. [ 123.916079][ T7182] netlink: 'syz.3.316': attribute type 39 has an invalid length. [ 123.941644][ T7182] veth0_macvtap: left promiscuous mode [ 124.315385][ T7200] netlink: 'syz.2.320': attribute type 4 has an invalid length. [ 124.510168][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 124.520371][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'. [ 124.752081][ T7225] netlink: 'syz.1.327': attribute type 5 has an invalid length. [ 124.759986][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 125.122588][ T7235] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000 [ 125.640588][ T7248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.733560][ T7259] netlink: 'syz.2.333': attribute type 29 has an invalid length. [ 125.760514][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'. [ 125.849819][ T7259] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 125.915721][ T7248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.037657][ T7248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.165458][ T7248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.373904][ T7248] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.448761][ T7248] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.462993][ T7278] netlink: 64 bytes leftover after parsing attributes in process `syz.1.338'. [ 126.487757][ T7248] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.573830][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 126.579230][ T7248] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.583388][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.339'. [ 126.618759][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 126.931235][ T7295] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 127.075181][ T7295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.143500][ T7299] bond1: (slave gretap1): making interface the new active one [ 127.163465][ T7299] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 127.301404][ T7314] tipc: Enabled bearer , priority 22 [ 127.674494][ T7329] openvswitch: netlink: Missing key (keys=40, expected=100) [ 127.762303][ T7339] Bluetooth: MGMT ver 1.23 [ 127.779037][ T7339] geneve2: entered promiscuous mode [ 127.851733][ T7344] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 127.932981][ T7344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.293156][ T7366] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (255) [ 128.472225][ T7374] syzkaller0: entered promiscuous mode [ 128.479904][ T7374] syzkaller0: entered allmulticast mode [ 128.577110][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.656849][ T7378] bridge_slave_1 (unregistering): left allmulticast mode [ 128.664282][ T7378] bridge_slave_1 (unregistering): left promiscuous mode [ 128.673770][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.550997][ T7416] __nla_validate_parse: 7 callbacks suppressed [ 129.551019][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 129.627971][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'. [ 130.242704][ T7452] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 130.258684][ T7438] team0 (unregistering): Port device team_slave_0 removed [ 130.271706][ T7438] team0 (unregistering): Port device team_slave_1 removed [ 130.323736][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 130.373869][ T7452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.413958][ T7450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.603389][ T7466] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.389'. [ 130.636283][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 130.747887][ T7471] sctp: [Deprecated]: syz.1.389 (pid 7471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.747887][ T7471] Use struct sctp_sack_info instead [ 130.828137][ T7440] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 130.837048][ T7440] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 131.368915][ T7490] syzkaller0: entered promiscuous mode [ 131.385567][ T7490] syzkaller0: entered allmulticast mode [ 131.786557][ T7508] Bluetooth: MGMT ver 1.23 [ 131.811293][ T7504] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 132.941804][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948315][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.103417][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.131816][ T7512] netlink: 42 bytes leftover after parsing attributes in process `syz.3.402'. [ 133.287302][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 133.374852][ T7519] geneve2: entered promiscuous mode [ 133.416716][ T7527] syzkaller1: entered promiscuous mode [ 133.424308][ T7527] syzkaller1: entered allmulticast mode [ 133.440564][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 133.606855][ T7532] sctp: [Deprecated]: syz.1.408 (pid 7532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.606855][ T7532] Use struct sctp_sack_info instead [ 133.662437][ T7527] hsr_slave_0: left promiscuous mode [ 133.685915][ T7527] hsr_slave_1: left promiscuous mode [ 134.507623][ T7556] netlink: 'syz.0.414': attribute type 39 has an invalid length. [ 134.588120][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 134.633207][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 134.649525][ T7556] syz_tun (unregistering): left allmulticast mode [ 134.792423][ T7573] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.841982][ T7573] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.892012][ T7573] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.901862][ T7573] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.911828][ T7573] geneve3: entered allmulticast mode [ 135.104104][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 135.149271][ T7594] IPVS: length: 78 != 8 [ 135.151436][ T7592] netlink: 76 bytes leftover after parsing attributes in process `syz.4.422'. [ 135.215709][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 135.248606][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 135.283063][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 135.441939][ T7601] Illegal XDP return value 4294967274 on prog (id 161) dev N/A, expect packet loss! [ 135.631658][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 136.150711][ T7638] netlink: 'syz.0.434': attribute type 3 has an invalid length. [ 136.388177][ T7648] vlan0: entered promiscuous mode [ 137.353079][ T7680] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.448'. [ 137.432009][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 137.579566][ T7688] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 137.654416][ T7697] IPv6: Can't replace route, no match found [ 138.560002][ T7711] netlink: 'syz.2.458': attribute type 83 has an invalid length. [ 138.696155][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 138.706439][ T7716] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 139.226569][ T7732] bridge0: port 2(erspan0) entered blocking state [ 139.245626][ T7732] bridge0: port 2(erspan0) entered disabled state [ 139.252307][ T7732] erspan0: entered allmulticast mode [ 139.285595][ T7732] erspan0: entered promiscuous mode [ 139.335665][ T7735] erspan0: left allmulticast mode [ 139.340792][ T7735] erspan0: left promiscuous mode [ 139.357430][ T7735] bridge0: port 2(erspan0) entered disabled state [ 139.682561][ T7745] tipc: Resetting bearer [ 139.735961][ T7745] tipc: Resetting bearer [ 139.781606][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.800500][ T7759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.472'. [ 139.868888][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.535323][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.542241][ T5154] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.658359][ T7755] tipc: Resetting bearer [ 140.800639][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.846867][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.994825][ T7755] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.007774][ T7755] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.029866][ T7755] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.039358][ T7755] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.296271][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 141.396348][ T7804] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.439957][ T7804] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.476991][ T7804] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.493977][ T7804] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.503883][ T7804] geneve2: entered allmulticast mode [ 141.618993][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.480'. [ 141.655718][ T7805] syzkaller1: entered promiscuous mode [ 141.668487][ T7805] syzkaller1: entered allmulticast mode [ 141.812311][ T7822] syzkaller0: entered promiscuous mode [ 141.820701][ T7822] syzkaller0: entered allmulticast mode [ 141.967653][ T7839] netlink: 'syz.1.481': attribute type 11 has an invalid length. [ 142.057830][ T30] audit: type=1804 audit(1749382867.919:5): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.486" name="/newroot/98/cgroup.controllers" dev="tmpfs" ino=521 res=1 errno=0 [ 142.120265][ T30] audit: type=1800 audit(1749382867.939:6): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.486" name="cgroup.controllers" dev="tmpfs" ino=521 res=0 errno=0 [ 142.912022][ T7870] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 144.070106][ T7869] netlink: 64 bytes leftover after parsing attributes in process `syz.4.491'. [ 144.104727][ T7869] netlink: 64 bytes leftover after parsing attributes in process `syz.4.491'. [ 144.146083][ T7870] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.157390][ T7871] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.281981][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 144.349152][ T7886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'. [ 144.387283][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 144.392570][ T7886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.496'. [ 144.405498][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 144.603662][ T7905] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 144.773009][ T7915] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 144.832704][ T7918] __nla_validate_parse: 2 callbacks suppressed [ 144.832726][ T7918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.504'. [ 144.841648][ T7915] bond1: entered promiscuous mode [ 144.862913][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 144.869876][ T7915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.872165][ T7919] netlink: 3 bytes leftover after parsing attributes in process `syz.1.505'. [ 144.947209][ T7919] batadv1: entered promiscuous mode [ 144.953620][ T7919] batadv1: entered allmulticast mode [ 144.965136][ T7924] veth0: entered promiscuous mode [ 145.032327][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 145.318202][ T7935] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 145.337338][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 146.347264][ T7989] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 146.355356][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 146.615014][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 146.888297][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'. [ 146.905275][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.528'. [ 146.956430][ T30] audit: type=1800 audit(1749382872.819:7): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.527" name="xffffffffffffffff00000000000000000000004" dev="tmpfs" ino=572 res=0 errno=0 [ 147.298833][ T8014] trusted_key: syz.2.532 sent an empty control message without MSG_MORE. [ 147.500130][ T8022] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 147.533060][ T8022] netlink: 244 bytes leftover after parsing attributes in process `syz.0.534'. [ 148.359593][ T8032] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 148.604323][ T8039] tipc: Enabled bearer , priority 0 [ 148.628842][ T8039] syzkaller0: entered promiscuous mode [ 148.634404][ T8039] syzkaller0: entered allmulticast mode [ 148.670838][ T8038] tipc: Resetting bearer [ 148.745460][ T8038] tipc: Disabling bearer [ 149.450519][ T8071] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 149.468901][ T8069] netlink: 'syz.1.550': attribute type 3 has an invalid length. [ 149.696872][ T5154] Bluetooth: hci4: link tx timeout [ 149.702755][ T5154] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.152630][ T8113] netlink: 'syz.2.565': attribute type 3 has an invalid length. [ 150.200306][ T8116] __nla_validate_parse: 6 callbacks suppressed [ 150.200326][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 150.235739][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 150.246693][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 150.259114][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 150.269526][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 150.281897][ T7774] IPVS: starting estimator thread 0... [ 150.299053][ T8115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 150.395026][ T8120] IPVS: using max 23 ests per chain, 55200 per kthread [ 150.535559][ T8124] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 150.662337][ T8131] xt_CT: No such helper "snmp" [ 151.006801][ T8141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.575'. [ 151.079339][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.103890][ T8145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.139786][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.240974][ T8152] x_tables: duplicate underflow at hook 3 [ 151.242984][ T8153] x_tables: duplicate underflow at hook 3 [ 151.734883][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 151.759468][ T8166] netlink: 'syz.1.580': attribute type 303 has an invalid length. [ 151.907817][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 152.085484][ T8175] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.094035][ T8175] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.102395][ T8175] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.110701][ T8175] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.367393][ T8182] sit0: entered promiscuous mode [ 152.382841][ T8182] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 152.392445][ T8182] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 152.491976][ T8193] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 152.652207][ T8196] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.664652][ T8196] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.673010][ T8200] x_tables: duplicate underflow at hook 2 [ 152.679423][ T8196] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.708529][ T8196] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.764082][ T8196] bond3: (slave geneve3): making interface the new active one [ 152.775239][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 152.794263][ T8196] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 152.820884][ T8197] netlink: 'syz.1.587': attribute type 29 has an invalid length. [ 152.879102][ T8200] netlink: 'syz.1.587': attribute type 29 has an invalid length. [ 152.901444][ T30] audit: type=1800 audit(1749382878.759:8): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.584" name="cgroup.controllers" dev="tmpfs" ino=625 res=0 errno=0 [ 153.041593][ T8207] netlink: 'syz.4.591': attribute type 3 has an invalid length. [ 153.061999][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 153.192226][ T7778] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 153.228898][ T7778] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 153.285234][ T7778] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 153.719511][ T8221] netlink: 56 bytes leftover after parsing attributes in process `syz.3.594'. [ 153.862835][ T8229] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 154.730515][ T8255] ip6gretap0: entered promiscuous mode [ 154.748271][ T8255] vlan3: entered promiscuous mode [ 155.241570][ T8282] __nla_validate_parse: 5 callbacks suppressed [ 155.241592][ T8282] netlink: 52 bytes leftover after parsing attributes in process `syz.0.612'. [ 155.323411][ T8286] openvswitch: netlink: Flow key attr not present in new flow. [ 155.909559][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'. [ 155.940146][ T8312] netlink: 56 bytes leftover after parsing attributes in process `syz.3.620'. [ 155.961000][ T8311] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 155.992987][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.619'. [ 156.009799][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.619'. [ 156.021327][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 156.718248][ T8310] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 156.821334][ T5154] block nbd0: Receive control failed (result -32) [ 156.950816][ T7782] hid-generic 0005:0458:0A0B.0002: item fetching failed at offset 1/3 [ 156.960317][ T7782] hid-generic 0005:0458:0A0B.0002: probe with driver hid-generic failed with error -22 [ 157.179255][ T8360] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 157.212755][ T8360] netlink: 224 bytes leftover after parsing attributes in process `syz.1.632'. [ 157.248106][ T8363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 157.285611][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 157.479974][ T8360] sch_tbf: burst 1 is lower than device veth1_to_hsr mtu (1514) ! [ 157.633806][ T8344] infiniband syz1: set down [ 157.678457][ T8344] infiniband syz1: added macvlan1 [ 157.713162][ T8344] syz1: rxe_create_cq: returned err = -12 [ 157.735623][ T8365] netlink: 56 bytes leftover after parsing attributes in process `syz.2.633'. [ 157.741903][ T8344] infiniband syz1: Couldn't create ib_mad CQ [ 157.778796][ T8378] vlan2: entered promiscuous mode [ 157.783921][ T8378] hsr_slave_1: entered promiscuous mode [ 157.790046][ T8344] infiniband syz1: Couldn't open port 1 [ 157.804036][ T8378] vlan2: entered allmulticast mode [ 157.813631][ T8378] hsr_slave_1: entered allmulticast mode [ 157.898346][ T8344] RDS/IB: syz1: added [ 157.902964][ T8344] smc: adding ib device syz1 with port count 1 [ 157.921864][ T8344] smc: ib device syz1 port 1 has pnetid [ 158.927563][ T30] audit: type=1800 audit(1749382884.789:9): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.647" name="memory.events" dev="tmpfs" ino=641 res=0 errno=0 [ 159.260617][ T8435] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 159.290695][ T8434] netlink: 'syz.3.646': attribute type 2 has an invalid length. [ 159.329263][ T8434] gretap0: entered promiscuous mode [ 159.343823][ T8434] vlan2: entered promiscuous mode [ 160.477821][ T8476] netlink: 'syz.2.661': attribute type 7 has an invalid length. [ 160.558343][ T8480] ip6gre1: entered allmulticast mode [ 160.800577][ T8496] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 160.895394][ T8501] __nla_validate_parse: 6 callbacks suppressed [ 160.895418][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.670'. [ 161.394325][ T8518] sit0: left promiscuous mode [ 161.615719][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.623096][ T8518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.645352][ T7778] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 161.673098][ T8518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.871765][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 161.996989][ T8524] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 161.998408][ T8527] batman_adv: batadv0: Adding interface: ip6gretap1 [ 162.011235][ T8532] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 162.013783][ T7779] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.037257][ T8527] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.072595][ T8527] batman_adv: batadv0: Interface activated: ip6gretap1 [ 162.073390][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 162.085182][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.675'. [ 162.788333][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 162.940616][ T49] syzkaller0: tun_net_xmit 76 [ 162.947719][ T49] syzkaller0: tun_net_xmit 48 [ 163.192084][ T8562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.685'. [ 163.224121][ T8565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.686'. [ 163.720366][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 164.846172][ T8579] netlink: 5 bytes leftover after parsing attributes in process `syz.1.689'. [ 166.029446][ T8586] veth0_to_bridge: entered promiscuous mode [ 166.065787][ T8591] sctp: [Deprecated]: syz.1.692 (pid 8591) Use of int in max_burst socket option. [ 166.065787][ T8591] Use struct sctp_assoc_value instead [ 166.115992][ T8591] netlink: 248 bytes leftover after parsing attributes in process `syz.1.692'. [ 166.283890][ T8600] x_tables: duplicate underflow at hook 1 [ 166.323963][ T8600] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 166.334992][ T8585] veth0_to_bridge: left promiscuous mode [ 166.383689][ T8600] netlink: 84 bytes leftover after parsing attributes in process `syz.2.695'. [ 166.393926][ T8600] netlink: 72 bytes leftover after parsing attributes in process `syz.2.695'. [ 166.516017][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 166.530485][ T8605] lo speed is unknown, defaulting to 1000 [ 166.535867][ T8607] bridge_slave_0: left allmulticast mode [ 166.548305][ T8607] bridge_slave_0: left promiscuous mode [ 166.554240][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.577788][ T8607] bridge_slave_1: left allmulticast mode [ 166.583506][ T8607] bridge_slave_1: left promiscuous mode [ 166.596535][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.598695][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 166.619814][ T8607] bond0: (slave bond_slave_0): Releasing backup interface [ 166.630691][ T8607] bond0: (slave bond_slave_1): Releasing backup interface [ 166.646368][ T8607] team0: Port device team_slave_0 removed [ 166.664118][ T8607] team0: Port device team_slave_1 removed [ 166.671001][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.687829][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.718621][ T8605] lo speed is unknown, defaulting to 1000 [ 166.725666][ T8610] syzkaller0: mtu less than device minimum [ 166.736640][ T8605] lo speed is unknown, defaulting to 1000 [ 166.760109][ T8605] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.812381][ T8605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 167.008726][ T8605] lo speed is unknown, defaulting to 1000 [ 167.038845][ T8605] lo speed is unknown, defaulting to 1000 [ 167.162336][ T8605] lo speed is unknown, defaulting to 1000 [ 167.186873][ T8605] lo speed is unknown, defaulting to 1000 [ 167.212373][ T8605] lo speed is unknown, defaulting to 1000 [ 167.239717][ T8605] lo speed is unknown, defaulting to 1000 [ 167.636220][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.705'. [ 167.867375][ T8643] netlink: 96 bytes leftover after parsing attributes in process `syz.3.707'. [ 168.497880][ T8661] netlink: 196 bytes leftover after parsing attributes in process `syz.2.714'. [ 168.677980][ T8669] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 168.721611][ T8669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.715'. [ 168.751141][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 169.109358][ T8682] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.311467][ T8682] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.422743][ T8682] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.513937][ T8708] sctp: [Deprecated]: syz.1.726 (pid 8708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.513937][ T8708] Use struct sctp_sack_info instead [ 169.573476][ T8699] netlink: 'syz.0.725': attribute type 5 has an invalid length. [ 169.677350][ T8682] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.866144][ T8682] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.974105][ T8682] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.103627][ T8682] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.248943][ T8682] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.469998][ T8721] netlink: 'syz.4.730': attribute type 33 has an invalid length. [ 170.579557][ T8723] team0: Device gtp0 is of different type [ 171.307125][ T30] audit: type=1107 audit(1749382897.169:10): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 171.323959][ T8763] __nla_validate_parse: 7 callbacks suppressed [ 171.323979][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 171.344114][ T8759] : renamed from bond_slave_0 [ 171.644892][ T8783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 171.668578][ T8785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 171.692795][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 171.978996][ T8794] bond3 (unregistering): Released all slaves [ 172.102611][ T8803] batadv_slave_0: entered promiscuous mode [ 172.119585][ T8803] netlink: 'syz.4.750': attribute type 2 has an invalid length. [ 172.331370][ T8809] netlink: 'syz.3.752': attribute type 3 has an invalid length. [ 172.637710][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 172.979363][ T8840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.762'. [ 173.060632][ T8835] netlink: 332 bytes leftover after parsing attributes in process `syz.1.760'. [ 173.080557][ T8846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'. [ 173.171244][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 173.564282][ T8837] lo speed is unknown, defaulting to 1000 [ 173.661547][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 173.968138][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.767'. [ 174.448335][ T8881] syzkaller1: entered promiscuous mode [ 174.453879][ T8881] syzkaller1: entered allmulticast mode [ 174.934066][ T8899] gtp0: entered promiscuous mode [ 174.960372][ T8899] gtp0: entered allmulticast mode [ 174.999440][ T8905] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 175.017878][ T8899] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 175.041570][ T8908] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.243222][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 176.212406][ T8960] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 176.237099][ T8963] netlink: 'syz.2.795': attribute type 1 has an invalid length. [ 176.277521][ T8963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.296907][ T8962] bond3: (slave veth0_to_bond): making interface the new active one [ 176.308524][ T8962] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 176.328097][ T8960] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.517906][ T1160] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 176.582481][ T1160] bond3: now running without any active interface! [ 176.960952][ T8980] __nla_validate_parse: 1 callbacks suppressed [ 176.960972][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 177.000649][ T8981] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 177.022665][ T8980] vlan0: entered promiscuous mode [ 177.055694][ T8980] bridge0: entered promiscuous mode [ 177.251684][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 177.561111][ T8999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.804'. [ 177.737696][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 177.777202][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 177.809179][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 178.297355][ T9039] netlink: 112 bytes leftover after parsing attributes in process `syz.1.811'. [ 178.336977][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 178.611700][ T9049] tap0: tun_chr_ioctl cmd 1074025676 [ 178.620666][ T9049] tap0: owner set to 0 [ 178.838571][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 178.868975][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 179.061611][ T9069] batadv_slave_0: entered allmulticast mode [ 179.188699][ T9060] batadv_slave_0: left allmulticast mode [ 180.308684][ T9064] lo speed is unknown, defaulting to 1000 [ 180.730738][ T9084] lo speed is unknown, defaulting to 1000 [ 181.822591][ T9140] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 182.535123][ T9154] __nla_validate_parse: 2 callbacks suppressed [ 182.535143][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 182.574292][ T9127] lo speed is unknown, defaulting to 1000 [ 182.823240][ T9165] sctp: [Deprecated]: syz.4.847 (pid 9165) Use of int in maxseg socket option. [ 182.823240][ T9165] Use struct sctp_assoc_value instead [ 183.106428][ T9175] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.228155][ T9175] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.401132][ T9175] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.421868][ T9184] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 183.463659][ T9175] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.636668][ T9175] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.686683][ T9175] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.731083][ T9175] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.757658][ T9196] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 183.765570][ T9175] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.785409][ T9196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.857'. [ 183.940276][ T9205] netlink: 64 bytes leftover after parsing attributes in process `syz.0.861'. [ 183.951661][ T9205] netlink: 64 bytes leftover after parsing attributes in process `syz.0.861'. [ 184.071377][ T9210] ip6gretap1: entered promiscuous mode [ 184.256938][ T9224] netlink: 'syz.1.866': attribute type 7 has an invalid length. [ 184.616809][ T9238] x_tables: duplicate underflow at hook 1 [ 184.636664][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 184.754501][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 185.264168][ T9261] netlink: 14 bytes leftover after parsing attributes in process `syz.4.874'. [ 185.439108][ T9261] bond0 (unregistering): Released all slaves [ 185.470517][ T9209] lo speed is unknown, defaulting to 1000 [ 185.476595][ T9269] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 185.972281][ T9243] lo speed is unknown, defaulting to 1000 [ 185.992311][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 186.008618][ T9280] netlink: 'syz.0.880': attribute type 21 has an invalid length. [ 186.526408][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 186.608718][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 186.631956][ T9310] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 186.650134][ T9310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.698821][ T9310] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 186.722253][ T9310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.113212][ T9329] ªªªªª@: renamed from bridge_slave_0 (while UP) [ 187.241012][ T9334] 8021q: VLANs not supported on vcan0 [ 187.545778][ T9289] lo speed is unknown, defaulting to 1000 [ 187.631953][ T9351] __nla_validate_parse: 6 callbacks suppressed [ 187.631973][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 187.879792][ T9354] wireguard0: entered promiscuous mode [ 187.887456][ T9354] wireguard0: entered allmulticast mode [ 187.993728][ T9359] netlink: 'syz.2.901': attribute type 29 has an invalid length. [ 188.003216][ T9359] netlink: 'syz.2.901': attribute type 29 has an invalid length. [ 188.012350][ T9359] netlink: 508 bytes leftover after parsing attributes in process `syz.2.901'. [ 188.247538][ T9365] netlink: 56 bytes leftover after parsing attributes in process `syz.2.903'. [ 188.304638][ T9365] netlink: 56 bytes leftover after parsing attributes in process `syz.2.903'. [ 188.521931][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 188.563069][ T9375] sctp: [Deprecated]: syz.1.909 (pid 9375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.563069][ T9375] Use struct sctp_sack_info instead [ 188.623911][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 188.654095][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 188.791505][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 188.819517][ T9387] sctp: [Deprecated]: syz.4.912 (pid 9387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.819517][ T9387] Use struct sctp_sack_info instead [ 188.838441][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 189.081553][ T9402] bridge0: port 1(erspan0) entered blocking state [ 189.095382][ T9402] bridge0: port 1(erspan0) entered disabled state [ 189.113307][ T9402] erspan0: entered allmulticast mode [ 189.127360][ T9402] erspan0: entered promiscuous mode [ 189.144976][ T9409] erspan0: left allmulticast mode [ 189.150173][ T9409] erspan0: left promiscuous mode [ 189.165018][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 189.166153][ T9409] bridge0: port 1(erspan0) entered disabled state [ 189.523355][ T9422] netlink: 'syz.0.921': attribute type 27 has an invalid length. [ 189.647841][ T9427] macvlan2: entered promiscuous mode [ 189.662912][ T9427] bridge0: entered promiscuous mode [ 189.672270][ T9427] bridge0: port 3(macvlan2) entered blocking state [ 189.683270][ T9427] bridge0: port 3(macvlan2) entered disabled state [ 189.692645][ T9427] macvlan2: entered allmulticast mode [ 189.703822][ T9427] bridge0: entered allmulticast mode [ 189.783049][ T9427] macvlan2: left allmulticast mode [ 189.783277][ T9429] xt_CT: No such helper "pptp" [ 189.791754][ T9427] bridge0: left allmulticast mode [ 189.810059][ T9427] bridge0: left promiscuous mode [ 189.907248][ T9437] bridge0: port 2(syz_tun) entered blocking state [ 189.921212][ T9437] bridge0: port 2(syz_tun) entered disabled state [ 189.932439][ T9437] syz_tun: entered allmulticast mode [ 189.946681][ T9437] syz_tun: entered promiscuous mode [ 189.953165][ T9437] bridge0: port 2(syz_tun) entered blocking state [ 189.959801][ T9437] bridge0: port 2(syz_tun) entered forwarding state [ 190.190075][ T9461] IPVS: Unknown mcast interface: bond_slave_0 [ 190.229338][ T9461] syzkaller0: entered promiscuous mode [ 190.249694][ T9461] syzkaller0: entered allmulticast mode [ 190.638014][ T9469] team0 (unregistering): Port device team_slave_0 removed [ 190.657963][ T9469] team0 (unregistering): Port device team_slave_1 removed [ 190.843457][ T9490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.213406][ T9518] FAULT_INJECTION: forcing a failure. [ 191.213406][ T9518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.227724][ T9518] CPU: 1 UID: 0 PID: 9518 Comm: syz.4.951 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 191.227751][ T9518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.227761][ T9518] Call Trace: [ 191.227769][ T9518] [ 191.227777][ T9518] dump_stack_lvl+0x189/0x250 [ 191.227813][ T9518] ? __pfx____ratelimit+0x10/0x10 [ 191.227839][ T9518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.227868][ T9518] ? __pfx__printk+0x10/0x10 [ 191.227889][ T9518] ? __might_fault+0xb0/0x130 [ 191.227922][ T9518] should_fail_ex+0x414/0x560 [ 191.227951][ T9518] _copy_from_user+0x2d/0xb0 [ 191.227972][ T9518] ___sys_sendmsg+0x158/0x2a0 [ 191.227996][ T9518] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.228058][ T9518] ? __fget_files+0x2a/0x420 [ 191.228079][ T9518] ? __fget_files+0x3a0/0x420 [ 191.228110][ T9518] __x64_sys_sendmsg+0x19b/0x260 [ 191.228133][ T9518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.228164][ T9518] ? __pfx_ksys_write+0x10/0x10 [ 191.228179][ T9518] ? rcu_is_watching+0x15/0xb0 [ 191.228202][ T9518] ? do_syscall_64+0xbe/0x3b0 [ 191.228232][ T9518] do_syscall_64+0xfa/0x3b0 [ 191.228254][ T9518] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.228276][ T9518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.228293][ T9518] ? clear_bhb_loop+0x60/0xb0 [ 191.228315][ T9518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.228332][ T9518] RIP: 0033:0x7f1ef9b8e929 [ 191.228350][ T9518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.228364][ T9518] RSP: 002b:00007f1efa953038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.228384][ T9518] RAX: ffffffffffffffda RBX: 00007f1ef9db5fa0 RCX: 00007f1ef9b8e929 [ 191.228396][ T9518] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 191.228408][ T9518] RBP: 00007f1efa953090 R08: 0000000000000000 R09: 0000000000000000 [ 191.228419][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.228430][ T9518] R13: 0000000000000000 R14: 00007f1ef9db5fa0 R15: 00007ffd6143d968 [ 191.228461][ T9518] [ 191.521091][ T9521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.667695][ T9527] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 191.747475][ T9535] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 191.761726][ T9536] batadv_slave_0: entered promiscuous mode [ 191.991434][ T9545] bridge1: entered allmulticast mode [ 192.091554][ T9542] syzkaller0: entered promiscuous mode [ 192.097513][ T9542] syzkaller0: entered allmulticast mode [ 192.282199][ T9559] FAULT_INJECTION: forcing a failure. [ 192.282199][ T9559] name failslab, interval 1, probability 0, space 0, times 1 [ 192.338284][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.1.963 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 192.338313][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.338324][ T9559] Call Trace: [ 192.338331][ T9559] [ 192.338338][ T9559] dump_stack_lvl+0x189/0x250 [ 192.338373][ T9559] ? __pfx____ratelimit+0x10/0x10 [ 192.338399][ T9559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.338427][ T9559] ? __pfx__printk+0x10/0x10 [ 192.338454][ T9559] ? __pfx___might_resched+0x10/0x10 [ 192.338476][ T9559] should_fail_ex+0x414/0x560 [ 192.338508][ T9559] should_failslab+0xa8/0x100 [ 192.338530][ T9559] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 192.338551][ T9559] ? __alloc_skb+0x112/0x2d0 [ 192.338572][ T9559] __alloc_skb+0x112/0x2d0 [ 192.338604][ T9559] netlink_sendmsg+0x5c6/0xb30 [ 192.338638][ T9559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.338661][ T9559] ? aa_sock_msg_perm+0x94/0x160 [ 192.338689][ T9559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.338712][ T9559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.338732][ T9559] __sock_sendmsg+0x219/0x270 [ 192.338761][ T9559] ____sys_sendmsg+0x505/0x830 [ 192.338788][ T9559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.338818][ T9559] ? import_iovec+0x74/0xa0 [ 192.338842][ T9559] ___sys_sendmsg+0x21f/0x2a0 [ 192.338865][ T9559] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.338926][ T9559] ? __fget_files+0x2a/0x420 [ 192.338946][ T9559] ? __fget_files+0x3a0/0x420 [ 192.338979][ T9559] __x64_sys_sendmsg+0x19b/0x260 [ 192.339002][ T9559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.339034][ T9559] ? __pfx_ksys_write+0x10/0x10 [ 192.339050][ T9559] ? rcu_is_watching+0x15/0xb0 [ 192.339073][ T9559] ? do_syscall_64+0xbe/0x3b0 [ 192.339102][ T9559] do_syscall_64+0xfa/0x3b0 [ 192.339125][ T9559] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.339148][ T9559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.339166][ T9559] ? clear_bhb_loop+0x60/0xb0 [ 192.339190][ T9559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.339207][ T9559] RIP: 0033:0x7f3d3198e929 [ 192.339225][ T9559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.339240][ T9559] RSP: 002b:00007f3d328a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.339263][ T9559] RAX: ffffffffffffffda RBX: 00007f3d31bb5fa0 RCX: 00007f3d3198e929 [ 192.339276][ T9559] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 192.339288][ T9559] RBP: 00007f3d328a1090 R08: 0000000000000000 R09: 0000000000000000 [ 192.339300][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.339311][ T9559] R13: 0000000000000000 R14: 00007f3d31bb5fa0 R15: 00007ffc2f2affc8 [ 192.339341][ T9559] [ 192.614648][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.190840][ T9579] __nla_validate_parse: 9 callbacks suppressed [ 193.190861][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 193.362188][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 194.383513][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393463][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.948900][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.967'. [ 195.011141][ T5930] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 195.183623][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 195.236346][ T9595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.970'. [ 195.474883][ T9606] xt_bpf: check failed: parse error [ 195.576436][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.979'. [ 195.619977][ T9569] lo speed is unknown, defaulting to 1000 [ 195.714381][ T9609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.979'. [ 195.775118][ T9617] dvmrp0: entered allmulticast mode [ 195.793052][ T9609] syzkaller1: entered promiscuous mode [ 195.798894][ T9609] syzkaller1: entered allmulticast mode [ 196.262933][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 196.450870][ T9638] ªªªªª@: left allmulticast mode [ 196.460690][ T9638] ªªªªª@: left promiscuous mode [ 196.484027][ T9638] bridge0: port 1(ªªªªª@) entered disabled state [ 196.628926][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.989'. [ 196.821907][ T9654] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 196.930389][ T9656] netlink: 'syz.3.991': attribute type 11 has an invalid length. [ 196.939447][ T9656] netlink: 224 bytes leftover after parsing attributes in process `syz.3.991'. [ 196.982447][ T9661] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 196.995358][ T9661] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 197.020814][ T9660] syzkaller1: entered promiscuous mode [ 197.027371][ T9660] syzkaller1: entered allmulticast mode [ 197.236269][ T9669] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 197.267514][ T9673] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 197.387898][ T9679] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 197.519727][ T9682] !: renamed from dummy0 (while UP) [ 198.136809][ T9708] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 198.346321][ T9717] __nla_validate_parse: 5 callbacks suppressed [ 198.346341][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1005'. [ 198.399842][ T9721] netlink: 'syz.3.1005': attribute type 11 has an invalid length. [ 199.467798][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 200.305683][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 200.610613][ T7774] IPVS: starting estimator thread 0... [ 200.666076][ T9778] IPVS: set_ctl: invalid protocol: 16 17.0.0.0:32775 [ 200.694252][ T9779] IPVS: set_ctl: invalid protocol: 16 17.0.0.0:32775 [ 200.724904][ T9780] IPVS: using max 26 ests per chain, 62400 per kthread [ 200.811590][ T9686] lo speed is unknown, defaulting to 1000 [ 201.329968][ T9794] netlink: 'syz.1.1017': attribute type 303 has an invalid length. [ 201.530044][ T9796] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1018'. [ 201.626289][ T9796] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1018'. [ 202.625733][ T9819] netlink: 'syz.3.1024': attribute type 5 has an invalid length. [ 203.295005][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 203.474272][ T9849] x_tables: duplicate underflow at hook 3 [ 203.535997][ T9849] netlink: 'syz.3.1032': attribute type 2 has an invalid length. [ 203.573657][ T9849] k›*·]‘: entered promiscuous mode [ 203.797131][ T9803] lo speed is unknown, defaulting to 1000 [ 203.922606][ T9859] netlink: 'syz.3.1035': attribute type 5 has an invalid length. [ 203.922754][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 203.931010][ T9859] FAULT_INJECTION: forcing a failure. [ 203.931010][ T9859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.988036][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.3.1035 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 203.988066][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.988077][ T9859] Call Trace: [ 203.988085][ T9859] [ 203.988093][ T9859] dump_stack_lvl+0x189/0x250 [ 203.988127][ T9859] ? __pfx____ratelimit+0x10/0x10 [ 203.988152][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.988181][ T9859] ? __pfx__printk+0x10/0x10 [ 203.988218][ T9859] should_fail_ex+0x414/0x560 [ 203.988249][ T9859] _copy_to_user+0x31/0xb0 [ 203.988272][ T9859] simple_read_from_buffer+0xe1/0x170 [ 203.988300][ T9859] proc_fail_nth_read+0x1df/0x250 [ 203.988328][ T9859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.988355][ T9859] ? rw_verify_area+0x258/0x650 [ 203.988383][ T9859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.988408][ T9859] vfs_read+0x200/0x980 [ 203.988434][ T9859] ? __pfx___mutex_lock+0x10/0x10 [ 203.988461][ T9859] ? __pfx_vfs_read+0x10/0x10 [ 203.988490][ T9859] ? __fget_files+0x2a/0x420 [ 203.988517][ T9859] ? __fget_files+0x3a0/0x420 [ 203.988537][ T9859] ? __fget_files+0x2a/0x420 [ 203.988569][ T9859] ksys_read+0x145/0x250 [ 203.988591][ T9859] ? __pfx_ksys_read+0x10/0x10 [ 203.988606][ T9859] ? rcu_is_watching+0x15/0xb0 [ 203.988631][ T9859] ? do_syscall_64+0xbe/0x3b0 [ 203.988660][ T9859] do_syscall_64+0xfa/0x3b0 [ 203.988687][ T9859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.988705][ T9859] ? asm_common_interrupt+0x26/0x40 [ 203.988722][ T9859] ? clear_bhb_loop+0x60/0xb0 [ 203.988745][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.988763][ T9859] RIP: 0033:0x7fcb6a38d33c [ 203.988782][ T9859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.988797][ T9859] RSP: 002b:00007fcb681f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.988818][ T9859] RAX: ffffffffffffffda RBX: 00007fcb6a5b5fa0 RCX: 00007fcb6a38d33c [ 203.988830][ T9859] RDX: 000000000000000f RSI: 00007fcb681f60a0 RDI: 0000000000000003 [ 203.988840][ T9859] RBP: 00007fcb681f6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.988851][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.988860][ T9859] R13: 0000000000000000 R14: 00007fcb6a5b5fa0 R15: 00007ffe173d8318 [ 203.988891][ T9859] [ 204.375596][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 204.435972][ T9871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.951819][ T9882] syz.3.1041: vmalloc error: size 41943040, failed to allocated page array size 81920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.958459][ T9885] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.978855][ T9885] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.987801][ T9885] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.997192][ T9885] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.001259][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.3.1041 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 205.001282][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.001291][ T9882] Call Trace: [ 205.001298][ T9882] [ 205.001306][ T9882] dump_stack_lvl+0x189/0x250 [ 205.001339][ T9882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.001364][ T9882] ? __pfx__printk+0x10/0x10 [ 205.001383][ T9882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.001403][ T9882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.001423][ T9882] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 205.001444][ T9882] warn_alloc+0x214/0x310 [ 205.001470][ T9882] ? __pfx_warn_alloc+0x10/0x10 [ 205.001499][ T9882] ? __get_vm_area_node+0x28f/0x300 [ 205.001518][ T9882] ? translate_table+0x1a8/0x1f90 [ 205.001542][ T9882] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 205.001591][ T9882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.001615][ T9882] ? rcu_is_watching+0x15/0xb0 [ 205.001633][ T9882] ? translate_table+0x1a8/0x1f90 [ 205.001651][ T9882] ? translate_table+0x1a8/0x1f90 [ 205.001667][ T9882] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 205.001686][ T9882] ? translate_table+0x1a8/0x1f90 [ 205.001703][ T9882] ? xt_alloc_table_info+0x3b/0xa0 [ 205.001731][ T9882] translate_table+0x1a8/0x1f90 [ 205.001780][ T9882] ? __pfx_translate_table+0x10/0x10 [ 205.001818][ T9882] ? _copy_from_user+0x94/0xb0 [ 205.001842][ T9882] do_arpt_set_ctl+0x993/0xf10 [ 205.001866][ T9882] ? __mutex_trylock_common+0x153/0x260 [ 205.001888][ T9882] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 205.001912][ T9882] ? rcu_is_watching+0x15/0xb0 [ 205.001944][ T9882] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 205.001971][ T9882] ? __pfx___mutex_lock+0x10/0x10 [ 205.001993][ T9882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.002013][ T9882] ? aa_sk_perm+0x81e/0x950 [ 205.002038][ T9882] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.002065][ T9882] nf_setsockopt+0x26c/0x290 [ 205.002086][ T9882] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.002112][ T9882] do_sock_setsockopt+0x25a/0x3e0 [ 205.002133][ T9882] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 205.002162][ T9882] ? __fget_files+0x2a/0x420 [ 205.002190][ T9882] __x64_sys_setsockopt+0x18b/0x220 [ 205.002214][ T9882] do_syscall_64+0xfa/0x3b0 [ 205.002235][ T9882] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.002255][ T9882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.002272][ T9882] ? clear_bhb_loop+0x60/0xb0 [ 205.002292][ T9882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.002308][ T9882] RIP: 0033:0x7fcb6a38e929 [ 205.002324][ T9882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.002337][ T9882] RSP: 002b:00007fcb681f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.002356][ T9882] RAX: ffffffffffffffda RBX: 00007fcb6a5b5fa0 RCX: 00007fcb6a38e929 [ 205.002369][ T9882] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 000000000000000d [ 205.002378][ T9882] RBP: 00007fcb6a410b39 R08: 0000000000000068 R09: 0000000000000000 [ 205.002388][ T9882] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 205.002398][ T9882] R13: 0000000000000000 R14: 00007fcb6a5b5fa0 R15: 00007ffe173d8318 [ 205.002426][ T9882] [ 205.002433][ T9882] Mem-Info: [ 205.104847][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 205.154592][ T9882] active_anon:7517 inactive_anon:0 isolated_anon:0 [ 205.154592][ T9882] active_file:1477 inactive_file:39876 isolated_file:0 [ 205.154592][ T9882] unevictable:768 dirty:258 writeback:0 [ 205.154592][ T9882] slab_reclaimable:10807 slab_unreclaimable:117191 [ 205.154592][ T9882] mapped:30018 shmem:5173 pagetables:1070 [ 205.154592][ T9882] sec_pagetables:0 bounce:0 [ 205.154592][ T9882] kernel_misc_reclaimable:0 [ 205.154592][ T9882] free:1302871 free_pcp:15348 free_cma:0 [ 205.346708][ T9841] lo speed is unknown, defaulting to 1000 [ 205.400379][ T9882] Node 0 active_anon:33468kB inactive_anon:0kB active_file:5908kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120072kB dirty:1028kB writeback:0kB shmem:19156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:4132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.448250][ T9882] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.549693][ T9882] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.624869][ T9882] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 205.640224][ T9882] Node 0 DMA32 free:1295376kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23324kB inactive_anon:0kB active_file:5908kB inactive_file:157476kB unevictable:1536kB writepending:1028kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:53112kB local_pcp:26660kB free_cma:0kB [ 205.715067][ T9882] lowmem_reserve[]: 0 0 1 1 1 [ 205.719900][ T9882] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 205.810907][ T9882] lowmem_reserve[]: 0 0 0 0 0 [ 205.838605][ T9882] Node 1 Normal free:3899712kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:10624kB free_cma:0kB [ 205.941321][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 205.955451][ T9882] lowmem_reserve[]: 0 0 0 0 0 [ 205.956062][ T9904] netlink: 'syz.4.1047': attribute type 64 has an invalid length. [ 205.971215][ T9882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.977266][ T9905] x_tables: duplicate underflow at hook 2 [ 206.034822][ T9882] Node 0 DMA32: 740*4kB (UME) 72*8kB (UME) 59*16kB (UME) 310*32kB (UME) 410*64kB (UME) 161*128kB (UME) 90*256kB (UME) 57*512kB (UME) 29*1024kB (UME) 4*2048kB (UME) 280*4096kB (M) = 1298240kB [ 206.041678][ T9910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1045'. [ 206.083837][ T9882] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 206.085412][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 206.101998][ T9882] Node 1 Normal: 190*4kB (UM) 59*8kB (UME) 45*16kB (UME) 139*32kB (UME) 35*64kB (UM) 5*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899712kB [ 206.142902][ T9882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.153005][ T9882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.163113][ T9882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.173451][ T9882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.183284][ T9882] 42713 total pagecache pages [ 206.218268][ T9882] 0 pages in swap cache [ 206.222777][ T9882] Free swap = 124996kB [ 206.285567][ T9882] Total swap = 124996kB [ 206.301875][ T9882] 2097051 pages RAM [ 206.327570][ T9882] 0 pages HighMem/MovableOnly [ 206.332337][ T9882] 424675 pages reserved [ 206.368325][ T9882] 0 pages cma reserved [ 206.697996][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.698034][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 206.704066][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.801697][ T13] smc: removing ib device syz1 [ 206.808041][ T9926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1050'. [ 207.292359][ T9942] lo speed is unknown, defaulting to 1000 [ 208.242778][ T9963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 208.278284][ T30] audit: type=1800 audit(1749382934.139:11): pid=9965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1060" name="memory.events" dev="tmpfs" ino=1070 res=0 errno=0 [ 208.425857][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 208.441188][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 208.473477][ T9956] lo speed is unknown, defaulting to 1000 [ 208.482130][ T9965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.515639][ T9965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.641138][ T9965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.679732][ T9965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.867252][ T9965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.894785][ T9965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 208.934284][ T9972] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 209.185065][ T9965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.201372][ T9965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.330594][ T9965] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.344754][ T9965] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.406699][ T9965] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.424359][ T9965] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.461764][ T9986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1065'. [ 209.507133][ T9965] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.525487][ T9965] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.565447][ T9965] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.575004][ T9965] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.635379][ T9986] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 209.733833][ T9999] lo speed is unknown, defaulting to 1000 [ 210.143467][T10022] netlink: 'syz.1.1072': attribute type 33 has an invalid length. [ 210.151349][T10002] lo speed is unknown, defaulting to 1000 [ 210.192863][T10014] lo speed is unknown, defaulting to 1000 [ 210.401456][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 211.220590][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 211.339536][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 211.682984][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 211.880048][T10068] netlink: 'syz.3.1087': attribute type 5 has an invalid length. [ 212.265080][T10086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1091'. [ 212.435673][T10084] lo speed is unknown, defaulting to 1000 [ 212.783204][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 212.876764][T10118] openvswitch: netlink: EtherType 0 is less than min 600 [ 213.317532][T10131] netlink: 'syz.3.1102': attribute type 5 has an invalid length. [ 213.471536][T10142] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1106'. [ 213.607129][T10079] lo speed is unknown, defaulting to 1000 [ 213.657949][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 213.767288][T10151] lo speed is unknown, defaulting to 1000 [ 213.820008][T10158] x_tables: duplicate underflow at hook 3 [ 214.115153][T10157] ip6tnl1: entered promiscuous mode [ 214.127156][T10157] ip6tnl1: entered allmulticast mode [ 214.277541][T10167] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 214.329560][T10164] tun0: tun_chr_ioctl cmd 1074025681 [ 214.343116][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 214.407574][T10167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.681580][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 214.900505][T10196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1118'. [ 215.193185][T10203] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 215.212667][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1122'. [ 215.334068][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 215.352940][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 215.393947][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 215.478130][T10213] lo speed is unknown, defaulting to 1000 [ 215.784159][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.792863][T10226] netlink: 'syz.4.1128': attribute type 1 has an invalid length. [ 215.824468][T10226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1128'. [ 215.833850][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 215.886252][T10229] [ 215.888652][T10229] ====================================================== [ 215.895968][T10229] WARNING: possible circular locking dependency detected [ 215.903041][T10229] 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 Not tainted [ 215.909825][T10229] ------------------------------------------------------ [ 215.916874][T10229] syz.2.1129/10229 is trying to acquire lock: [ 215.922966][T10229] ffffffff8f668018 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 215.932256][T10229] [ 215.932256][T10229] but task is already holding lock: [ 215.939753][T10229] ffff888073164a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 215.949051][T10229] [ 215.949051][T10229] which lock already depends on the new lock. [ 215.949051][T10229] [ 215.959660][T10229] [ 215.959660][T10229] the existing dependency chain (in reverse order) is: [ 215.968715][T10229] [ 215.968715][T10229] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 215.976844][T10229] lock_acquire+0x120/0x360 [ 215.981909][T10229] _raw_spin_lock_bh+0x36/0x50 [ 215.987240][T10229] nr_rt_device_down+0x12a/0x720 [ 215.992749][T10229] nr_device_event+0x137/0x150 [ 215.998076][T10229] notifier_call_chain+0x1b3/0x3e0 [ 216.003743][T10229] dev_close_many+0x29c/0x410 [ 216.008990][T10229] netif_close+0x158/0x210 [ 216.013972][T10229] dev_close+0x10a/0x220 [ 216.018785][T10229] bpq_device_event+0x2f4/0x600 [ 216.024355][T10229] notifier_call_chain+0x1b3/0x3e0 [ 216.030194][T10229] __dev_notify_flags+0x18d/0x2e0 [ 216.035785][T10229] netif_change_flags+0xe8/0x1a0 [ 216.041288][T10229] dev_change_flags+0x130/0x260 [ 216.046795][T10229] dev_ioctl+0x7b4/0x1150 [ 216.051791][T10229] sock_do_ioctl+0x22c/0x300 [ 216.056945][T10229] sock_ioctl+0x576/0x790 [ 216.061832][T10229] __se_sys_ioctl+0xfc/0x170 [ 216.066988][T10229] do_syscall_64+0xfa/0x3b0 [ 216.072054][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.078603][T10229] [ 216.078603][T10229] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 216.086480][T10229] lock_acquire+0x120/0x360 [ 216.091567][T10229] _raw_spin_lock_bh+0x36/0x50 [ 216.096972][T10229] nr_rt_device_down+0xa9/0x720 [ 216.102394][T10229] nr_device_event+0x137/0x150 [ 216.107721][T10229] notifier_call_chain+0x1b3/0x3e0 [ 216.113388][T10229] dev_close_many+0x29c/0x410 [ 216.118630][T10229] netif_close+0x158/0x210 [ 216.123884][T10229] dev_close+0x10a/0x220 [ 216.128767][T10229] bpq_device_event+0x2f4/0x600 [ 216.134283][T10229] notifier_call_chain+0x1b3/0x3e0 [ 216.140095][T10229] __dev_notify_flags+0x18d/0x2e0 [ 216.145699][T10229] netif_change_flags+0xe8/0x1a0 [ 216.151200][T10229] dev_change_flags+0x130/0x260 [ 216.156609][T10229] dev_ioctl+0x7b4/0x1150 [ 216.161499][T10229] sock_do_ioctl+0x22c/0x300 [ 216.166915][T10229] sock_ioctl+0x576/0x790 [ 216.171818][T10229] __se_sys_ioctl+0xfc/0x170 [ 216.177089][T10229] do_syscall_64+0xfa/0x3b0 [ 216.182239][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.188718][T10229] [ 216.188718][T10229] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 216.196855][T10229] validate_chain+0xb9b/0x2140 [ 216.202193][T10229] __lock_acquire+0xab9/0xd20 [ 216.207448][T10229] lock_acquire+0x120/0x360 [ 216.212608][T10229] _raw_spin_lock_bh+0x36/0x50 [ 216.218015][T10229] nr_rt_ioctl+0x390/0xd50 [ 216.222995][T10229] sock_do_ioctl+0xd9/0x300 [ 216.228062][T10229] sock_ioctl+0x576/0x790 [ 216.232948][T10229] __se_sys_ioctl+0xfc/0x170 [ 216.238106][T10229] do_syscall_64+0xfa/0x3b0 [ 216.243201][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.249750][T10229] [ 216.249750][T10229] other info that might help us debug this: [ 216.249750][T10229] [ 216.260013][T10229] Chain exists of: [ 216.260013][T10229] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 216.260013][T10229] [ 216.273987][T10229] Possible unsafe locking scenario: [ 216.273987][T10229] [ 216.281471][T10229] CPU0 CPU1 [ 216.286868][T10229] ---- ---- [ 216.292276][T10229] lock(&nr_node->node_lock); [ 216.297178][T10229] lock(nr_node_list_lock); [ 216.304500][T10229] lock(&nr_node->node_lock); [ 216.311916][T10229] lock(nr_neigh_list_lock); [ 216.316642][T10229] [ 216.316642][T10229] *** DEADLOCK *** [ 216.316642][T10229] [ 216.325087][T10229] 2 locks held by syz.2.1129/10229: [ 216.330413][T10229] #0: ffffffff8f668078 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 216.340055][T10229] #1: ffff888073164a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 216.350046][T10229] [ 216.350046][T10229] stack backtrace: [ 216.356084][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.2.1129 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 216.356112][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.356124][T10229] Call Trace: [ 216.356132][T10229] [ 216.356139][T10229] dump_stack_lvl+0x189/0x250 [ 216.356174][T10229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.356204][T10229] ? __pfx__printk+0x10/0x10 [ 216.356222][T10229] ? stack_trace_save+0x9c/0xe0 [ 216.356255][T10229] print_circular_bug+0x2ee/0x310 [ 216.356286][T10229] check_noncircular+0x134/0x160 [ 216.356309][T10229] validate_chain+0xb9b/0x2140 [ 216.356339][T10229] __lock_acquire+0xab9/0xd20 [ 216.356368][T10229] ? nr_rt_ioctl+0x390/0xd50 [ 216.356393][T10229] lock_acquire+0x120/0x360 [ 216.356416][T10229] ? nr_rt_ioctl+0x390/0xd50 [ 216.356441][T10229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 216.356465][T10229] ? nr_rt_ioctl+0x390/0xd50 [ 216.356489][T10229] _raw_spin_lock_bh+0x36/0x50 [ 216.356511][T10229] ? nr_rt_ioctl+0x390/0xd50 [ 216.356535][T10229] nr_rt_ioctl+0x390/0xd50 [ 216.356560][T10229] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 216.356593][T10229] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 216.356624][T10229] ? apparmor_capable+0x137/0x1b0 [ 216.356647][T10229] ? capable+0x89/0xe0 [ 216.356675][T10229] ? nr_ioctl+0x1b1/0x3b0 [ 216.356698][T10229] sock_do_ioctl+0xd9/0x300 [ 216.356725][T10229] ? __pfx_sock_do_ioctl+0x10/0x10 [ 216.356747][T10229] ? __lock_acquire+0xab9/0xd20 [ 216.356779][T10229] sock_ioctl+0x576/0x790 [ 216.356804][T10229] ? __pfx_sock_ioctl+0x10/0x10 [ 216.356827][T10229] ? __fget_files+0x2a/0x420 [ 216.356847][T10229] ? __fget_files+0x3a0/0x420 [ 216.356867][T10229] ? __fget_files+0x2a/0x420 [ 216.356890][T10229] ? bpf_lsm_file_ioctl+0x9/0x20 [ 216.356919][T10229] ? __pfx_sock_ioctl+0x10/0x10 [ 216.356942][T10229] __se_sys_ioctl+0xfc/0x170 [ 216.356971][T10229] do_syscall_64+0xfa/0x3b0 [ 216.356997][T10229] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.357019][T10229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.357038][T10229] ? clear_bhb_loop+0x60/0xb0 [ 216.357058][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.357076][T10229] RIP: 0033:0x7f03aed8e929 [ 216.357093][T10229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.357110][T10229] RSP: 002b:00007f03afb23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.357131][T10229] RAX: ffffffffffffffda RBX: 00007f03aefb5fa0 RCX: 00007f03aed8e929 [ 216.357145][T10229] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 216.357157][T10229] RBP: 00007f03aee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 216.357168][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.357179][T10229] R13: 0000000000000000 R14: 00007f03aefb5fa0 R15: 00007ffc9019e678 [ 216.357201][T10229] [ 219.976175][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!