last executing test programs: 1m7.235726424s ago: executing program 2 (id=818): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "16eb1b", 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', {[@routing={0x6, 0x0, 0x0, 0x29, 0x0, [@empty]}, @hopopts={0x29, 0x0, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {0x4e20, 0x4e22}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) r1 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r1, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xffffff8e}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r1, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) getsockopt$inet6_buf(r0, 0x29, 0x4d, &(0x7f0000000040)=""/51, &(0x7f0000000080)=0x33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82480207, r4}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f00)='n7', 0x2}, {&(0x7f0000000340)='_', 0x1}, {&(0x7f0000000940)="11", 0x1}], 0x3}, 0x0) 1m6.482070805s ago: executing program 2 (id=823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x5, 0xfffffffd}]}) unshare(0x22020600) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fd2dbd7000fcdbdf251800000008000300", @ANYRES32=r4, @ANYRESHEX=r3], 0x3c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='mm_page_free_batched\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private2}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x24000850) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r10, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 52.283250906s ago: executing program 2 (id=823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x5, 0xfffffffd}]}) unshare(0x22020600) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fd2dbd7000fcdbdf251800000008000300", @ANYRES32=r4, @ANYRESHEX=r3], 0x3c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='mm_page_free_batched\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private2}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x24000850) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r10, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 39.37112067s ago: executing program 2 (id=823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x5, 0xfffffffd}]}) unshare(0x22020600) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fd2dbd7000fcdbdf251800000008000300", @ANYRES32=r4, @ANYRESHEX=r3], 0x3c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='mm_page_free_batched\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private2}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x24000850) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r10, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 27.329932784s ago: executing program 2 (id=823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x5, 0xfffffffd}]}) unshare(0x22020600) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fd2dbd7000fcdbdf251800000008000300", @ANYRES32=r4, @ANYRESHEX=r3], 0x3c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='mm_page_free_batched\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private2}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x24000850) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r10, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 14.377006986s ago: executing program 2 (id=823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x5, 0xfffffffd}]}) unshare(0x22020600) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01fd2dbd7000fcdbdf251800000008000300", @ANYRES32=r4, @ANYRESHEX=r3], 0x3c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='mm_page_free_batched\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private2}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x24000850) r10 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r10, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 8.659739253s ago: executing program 0 (id=1142): r0 = socket$inet(0x2, 0x4, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @private}, &(0x7f00000000c0)=0xc) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r2, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x7ff}, &(0x7f0000000340)=0x90) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={r2, 0xbb, "ba2a7964f7d40ad4de6b601ebacdf2c8216079c6a1967e97b618e0aae78347149c2483e8aeb4a9b4158f8427c31ddadd6f124357ea2b771ab2f69d5883c539693b51fee3d6ffb5142b4000de73604af6b0af8c78530fb80995d7fe2f6a81d93c8f27cd14734a93630905e0628f8296004b17bf467c8e078b031b27b0ac0e625c9bce059354a1121bae42dc3de244a62ba589e7633176a3fe6e369ebe4413d271f2c9a358129d67446ec177b28c856987793391452f9d318a0a4eaf"}, &(0x7f0000000480)=0xc3) (async, rerun: 64) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x61}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000500)={r5, 0x1, 0x7f, 0x7}) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000540)={r3, 0x7fff, 0xc23, 0xf4}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000005c0)={0xfff, 0x74, 0x8206, 0x401, 0x0, 0x0, 0x6, 0x3, r8}, &(0x7f0000000600)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000640)={r9, 0x24, "76116e40f6401aefdcdd90bead214cac7dca81d8a93d480681fafba76dd9d31b2c337695"}, &(0x7f0000000680)=0x2c) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0)={0xffffffffffffffff, r7}, 0xc) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000700)={0x0, 'pimreg\x00', 0x1}, 0x18) (rerun: 32) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000740)={0x4e, 0x8, 0x4, 0xc, 0x9, 0x81}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x44890) (async, rerun: 64) r13 = socket$inet6(0xa, 0x800, 0x7ff) (rerun: 64) unshare(0x2000000) (async, rerun: 32) write$tun(r7, &(0x7f0000000940)={@val={0x0, 0x6002}, @void, @ipv6=@icmpv6={0x8, 0x6, "66ffc7", 0x139, 0x3a, 0x1, @mcast2, @local, {[@routing={0x62, 0x6, 0x2, 0x3, 0x0, [@remote, @mcast1, @mcast1]}, @srh={0x3b, 0x4, 0x4, 0x2, 0x0, 0x18, 0x9, [@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x32, 0x2, 0x2, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x87, 0x5, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @empty}]}], @ni={0x8b, 0x0, 0x0, 0x7, 0x40, 0x6, "2bda7c91bb06cd768ad7351d6141e61580d776e721dbe9d01fc0f9da9f4f245c3b0d09b3a8333d69ab018fa55df5ca3ac22515fd4a2df29a7624f3fb8e2b6502717a1c9371c4230da49d1b40d74f7ceb4c33a000bf3d861f0ea63ad0e3c0084623aba0b5f3edf6660844fb98f4d3a52c018694784540202966424c410c68b5df0a"}}}}, 0x165) (async, rerun: 32) r14 = accept4$inet6(r13, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000b00)=0x1c, 0x80800) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x9, '\x00', r1, r7, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) ppoll(&(0x7f0000000bc0)=[{r4, 0x4028}, {r4, 0x8060}, {r4, 0x4f15}, {r5, 0xc}, {r14, 0x4025}, {r7, 0x2}, {r15, 0x2000}], 0x7, &(0x7f0000000c40)={r16, r17+60000000}, &(0x7f0000000c80)={[0x80000000000]}, 0x8) (async, rerun: 32) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x2810) (rerun: 32) 8.40442754s ago: executing program 0 (id=1145): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r2, 0x1) unshare(0x62040200) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x4c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x9, 0x0, 0x0, @str='rcu_utilization\x00'}]}, 0x4c}}, 0x40) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x7}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000300000000000000000004000f60030002000000850000008900000018010003696c6c2500000000002020207b1af8ff00000000bfa10000c720030000000007010000f8ffffffb702000008000000b7030000090000008500000006000000183500000400000000000000000000009500000000"], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x2, 0x1d1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.075911314s ago: executing program 1 (id=1150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet6(0xa, 0x5, 0x0) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 6.06463164s ago: executing program 1 (id=1157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000001680)={0x0, r4}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0], 0x0, 0x2f, &(0x7f00000018c0)=[{}], 0x8, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x4, 0x17, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x0, 0x2, 0x4, 0xa, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4090, 0xf67}, {&(0x7f00000004c0)=""/77, 0x5e}, {&(0x7f00000001c0)=""/36, 0x24}], 0x3}, 0xacd2}], 0x1, 0x10000, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r9, &(0x7f0000003e40), 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000001580)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @private=0xa010102}, 0x80, 0x0, 0x0, 0x0, 0x8df, &(0x7f0000001540)='macvlan1\x00', 0x3, 0x8, 0x8}) setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proH\xc7ne&\xf4\xfb,\xc1t\xcf\xf3\f\x8cB\xab\x99\xc3\xe5\x00d4/c+-G\xf9'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x5d74, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.54044345s ago: executing program 0 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32=r3], 0x60}}, 0x0) 5.167498952s ago: executing program 1 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xf0}}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x3}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800, 0x0, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$ax25(r8, 0x0, &(0x7f0000000140), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.937304742s ago: executing program 3 (id=1161): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000060"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288ca6d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.841481763s ago: executing program 0 (id=1162): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x1f5, 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="0259473bb7c011", 0x7) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000380)={@private0, 0x0}, &(0x7f00000003c0)=0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x4, 0xb, 0x2, 0x20, 0x8}, @alu={0x4, 0x1, 0x9, 0x1, 0x7, 0xc, 0x10}], &(0x7f0000000340)='GPL\x00', 0xdf52, 0x0, 0x0, 0x40f00, 0x2, '\x00', r7, @fallback=0x10, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x2, 0x0, 0x101}, 0x10, r9, 0xffffffffffffffff, 0x6, &(0x7f0000000800)=[r10], &(0x7f0000000840)=[{0x4, 0x5, 0x6, 0xc}, {0x4, 0x5, 0x1, 0x7}, {0x4, 0x4, 0x7, 0x9}, {0x1, 0x5, 0xc, 0xc}, {0x4, 0x2, 0xe, 0x3}, {0x1, 0x5, 0x2, 0x4}], 0x10, 0xd5, @void, @value}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r1, 0x1) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 4.391145012s ago: executing program 3 (id=1164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "000000009b993e68", "75df9881592b9fd38bcad042e286f2cd", ')\x00\x000', "578619a280c847dd"}, 0x28) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc004001000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) 4.300113539s ago: executing program 0 (id=1166): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x1}}, 0x18) 4.130390023s ago: executing program 3 (id=1167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x40, 0xb5, &(0x7f0000000200)="4e9b6413d6e21a1ace6c59a39566d2a20a700bf4924ac3e9a722b98dc5500e73d65af37734dd9b29e4cc8a4a5fd63d17e30b59ef9a65f6a851a3e62ccd205e96", &(0x7f0000000440)=""/181, 0x80, 0x0, 0x52, 0x1000, &(0x7f0000000380)="b8a8f4d9369fd2cd2be73e845575b7bb298875f9bf4b611567c1b4ea272ab4bd74343de22b0288b9de3461c609940b5170bf26fc4e6a57bd2a428a40b8e119402bf271fbf40e2449f6b5d4feacc383520240", &(0x7f0000000e40)="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", 0x1, 0x0, 0x8}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r7, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) sendfile(r8, r1, 0x0, 0x10000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r11, &(0x7f0000000e00), 0x12) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000004050111010000d3bded00fcdbdf25000000007d0000b74f75e008d5012759e6d3c923dc547500"], 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 3.938833889s ago: executing program 4 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bind$can_j1939(r4, &(0x7f0000001340)={0x1d, r7, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18) listen(r3, 0x0) r8 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001380)={0x5, 0x2, 0x1000, 0xd}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000001300)=0xe) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10051, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000003000134"], 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000440)={&(0x7f00000014c0)={0x30, r13, 0x1, 0x0, 0x0, {{}, {}, {0xffffffffffffff13, 0x19, {0x2, 0x1, 0x82a}}}}, 0x30}}, 0x20000800) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r13, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xd, 0x5b8ef0f1, @l2={'ib', 0x3a, 'xfrm0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44085}, 0x4091) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.238982232s ago: executing program 0 (id=1169): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) unshare(0x6a040000) socket$kcm(0x10, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007600050804400000ffdbdf250300000000010000"], 0x18}}, 0x40080c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0x6a, 0xfe, &(0x7f0000000080)="b9e203076008008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {}, {0xa, 0xd}}}, 0x24}}, 0x404c080) 3.234199897s ago: executing program 4 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xea, 0x1000, &(0x7f0000000280)="78435d999dad65a3e2e309b6797d968182846e85c4afa447125816e77f25e33159b1222d931f846108166d668707a873e8370c3a260653dee1b276a61a6235cc589ffee4630503ec265e285c2be441ebeac20e2bfefb7762fbecaa8408c3d17f42a17f38df1dc0606e4fce2cd7f16c3f8e456d9a50092b4dbec1b9bcf897a0ea1d2e1d8d8956cff5bd1dffa4facbd1343ac270450b846357ca3bdaf7d49410c3714ecea1df1d4a70b43b4d1ca6b71dd0f73a67d2ca41d693d529fc68e65736f94cc78a1401ff6ff89b43a682d581aad30ac8f264a5a4927a1dab2a4a481833809160cbc1145da8fc6edd", &(0x7f0000000780)=""/4096, 0x3, 0x0, 0x2c, 0x5c, &(0x7f0000000040)="351498f8b0da4d2cf60834fba9aabf3b554c6450245281b56e32217591ec3ddabae41a6951d462259069c9b1", &(0x7f00000001c0)="67bfc85e60150e0113d742a4060a86459c84366c61ecb771bc5fcb3341fb4b52a912f77f4cbab4ee9e39e2eb72c3a2a1d6bd6b1a8c380fed02518aba707b01232ffc8c31e6d4e77bb3aed167fa42e2b93f69f8ec52d4148e935ffbff", 0x8, 0x0, 0x3a56}, 0x50) 3.043539557s ago: executing program 3 (id=1171): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r5, @ANYBLOB="1000"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) 3.042607916s ago: executing program 4 (id=1172): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x8000000000000000, 0x1, 0x4}) openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0xa0, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.56768318s ago: executing program 4 (id=1173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) (rerun: 32) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) (async) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 2.23897372s ago: executing program 4 (id=1174): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000003000000000000000000000000000079124000000000009500000040000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000080900010073797a30000000000900020073797a30000000001400038008000140000000000800024000e5ff0050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018210380140001007465616d3000000000000000000000000800074000000001"], 0xd8}}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00e2080000000000ffffffe30000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000d50b00850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x4, 0x2, 0x4c, @rand_addr=' \x01\x00', @local, 0x10, 0x8, 0xce9a, 0x1000}}) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='vm_unmapped_area\x00', r3, 0x0, 0x4000000000000000}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x50, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/92, 0x5c, 0x10100, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040) close(r7) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419891400"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x34f7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa60}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfb5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdf96}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc1}, 0x800) 2.058156391s ago: executing program 1 (id=1175): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/231, 0xe7, 0x0, &(0x7f0000000180)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1a, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x297}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x0, 0x6, 0x6, 0x6, 0x0, 0xffffffffffffffff}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.619400843s ago: executing program 3 (id=1176): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000070000006111750000000000850000001d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @mcast1, 0x6, 0x3, 0xafa8, 0x500, 0x3, 0x400000}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r0, 0x0, r0}, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, &(0x7f00000001c0)=""/30, 0x1e}, 0x40002142) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000070000006111750000000000850000001d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @mcast1, 0x6, 0x3, 0xafa8, 0x500, 0x3, 0x400000}) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r0, 0x0, r0}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (async) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2, &(0x7f00000001c0)=""/30, 0x1e}, 0x40002142) (async) 1.493147118s ago: executing program 1 (id=1177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf250700000014000300ff0200000000000000000000000000e1130002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/69, 0x45}], 0x1) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f00000000c0)=0xfffffff1, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'lc\x00', 0x30, 0x7f, 0x26}, 0x2c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x64b99}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x400, 0x1, 0x7, 0x4, r8}, &(0x7f0000000080)=0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005880)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1, &(0x7f0000000100)=""/234, 0xea}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000053c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/178, 0xb2}], 0x3, &(0x7f0000000480)=""/193, 0xc1}, 0x10001}, {{&(0x7f0000000580)=@pppol2tpin6, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000005480)=""/130, 0x82}], 0x4}, 0x2}, {{&(0x7f00000007c0)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/174, 0xae}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/193, 0xc1}], 0x4, &(0x7f0000003180)=""/81, 0x51}, 0x2c}, {{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000002d00)=""/83, 0x53}], 0x1, &(0x7f0000002d80)=""/73, 0x49}, 0x4}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000b40)=""/63, 0x3f}], 0x1}, 0x6}, {{&(0x7f0000002ec0)=@sco, 0x80, &(0x7f0000004200)=[{&(0x7f0000002f40)=""/110, 0x6e}, {&(0x7f0000002fc0)=""/229, 0xe5}, {&(0x7f00000030c0)=""/164, 0xa4}, {&(0x7f0000005300)=""/133, 0x85}, {0xfffffffffffffffc}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x6, &(0x7f0000004280)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000005280)=@in, 0x80, &(0x7f0000005540)}, 0x4}, {{&(0x7f0000005580)=@nfc_llcp, 0x80, &(0x7f0000005800), 0x0, &(0x7f0000005840)=""/51, 0x33}, 0x2}], 0x9, 0x0, 0x0) 67.035517ms ago: executing program 3 (id=1178): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140800000103010100"/20], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000000c0600090000000000000000050000080500010007000000050001000700000009000200737cc036aa23f4ef8e00020073797a32000000000900020073797a32000000000900020073797a30000000000900020073797a3100000000050000e2070000000500010007000000050001000700000061e5e67b30ce478e6987fbca8e0326ef4bb13e34dfed4992064a9e4992c261ddb59a112b6cf69affb881ab266a525b10774e40e1e2f8cb48d3d6ecfb759aa4f21180ffda83fded13389b47832b17e3a614a85cab27"], 0x78}, 0x1, 0x0, 0x0, 0x20000051}, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r6, @ANYBLOB="14001d80101200000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000700090000007ca888881a5d118200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)="3beb7686510c2d1c10db33b143bd79a4d324faebb21403c55fd6d70000af12b90e4e7869d75993fa7284e17967528b45dce818bfe932541b8c8f6b7eda6af69bfe1e6f5057c062457880b05bce456b22e1846ef5abb3b16ddcd38d72780ecf046e11399b840a36c5a3bd5b2a4978c57bf5e069dde3e8633681e68b8ed8dccc53be51e43a87bbf9ed28713447c74b613b106cb7c397fb078c1f9c922ef8d3e58b4b61b99d3299f8d70a397af40e8bcc1d8b774efbb342ea8cbd4f2510855866b933c5f4fb93912ac3e2566efc441c0188900ed86984c7", &(0x7f00000004c0)="42897bc67ddc444e03ad7541b9e10d8c7d84b68afb34213f50bec18ba68bd92335d8d9ca55e88a922bc655df0fc4320553f6e4e5151a4d64dff4c62e64db9473e5cc6f9f5e9140adf8509643e8", 0xb, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r7, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6fe, @void, @value}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r8, 0x8b1a, &(0x7f0000000040)) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r9, 0x0, 0x0) 63.290043ms ago: executing program 4 (id=1179): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000300)="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", 0x263}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 0s ago: executing program 1 (id=1180): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000100)=""/197, &(0x7f0000000000)=0xc5) socket$rxrpc(0x21, 0x2, 0xa) kernel console output (not intermixed with test programs): : 00000246 ORIG_RAX: 000000000000002e [ 146.125215][ T7376] RAX: ffffffffffffffda RBX: 00007f6e201b5fa0 RCX: 00007f6e1ff8e929 [ 146.125229][ T7376] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000005 [ 146.125241][ T7376] RBP: 00007f6e20dae090 R08: 0000000000000000 R09: 0000000000000000 [ 146.125253][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.125264][ T7376] R13: 0000000000000000 R14: 00007f6e201b5fa0 R15: 00007ffe6df345b8 [ 146.125298][ T7376] [ 146.601028][ T7378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.621522][ T7386] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.752065][ T7378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.856931][ T7385] gtp0: entered promiscuous mode [ 146.866047][ T7385] gtp0: entered allmulticast mode [ 146.945656][ T7378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.098534][ T7378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.132391][ T7401] netlink: 'syz.0.385': attribute type 11 has an invalid length. [ 147.182423][ T7401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.385'. [ 147.220576][ T7404] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 147.304883][ T7403] netlink: 'syz.2.386': attribute type 39 has an invalid length. [ 147.339012][ T7412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.387'. [ 147.349713][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 147.369598][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 147.419660][ T78] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.495255][ T6826] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.550434][ T6826] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.590983][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'. [ 147.603762][ T78] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.632999][ T7416] FAULT_INJECTION: forcing a failure. [ 147.632999][ T7416] name failslab, interval 1, probability 0, space 0, times 0 [ 147.676718][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: syz.0.390 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 147.676748][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.676760][ T7416] Call Trace: [ 147.676768][ T7416] [ 147.676777][ T7416] dump_stack_lvl+0x189/0x250 [ 147.676813][ T7416] ? __pfx____ratelimit+0x10/0x10 [ 147.676833][ T7416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.676861][ T7416] ? __pfx__printk+0x10/0x10 [ 147.676890][ T7416] ? __pfx___might_resched+0x10/0x10 [ 147.676917][ T7416] ? fs_reclaim_acquire+0x7d/0x100 [ 147.676945][ T7416] should_fail_ex+0x414/0x560 [ 147.676975][ T7416] should_failslab+0xa8/0x100 [ 147.676999][ T7416] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.677018][ T7416] ? hsr_create_self_node+0x5a/0x350 [ 147.677047][ T7416] hsr_create_self_node+0x5a/0x350 [ 147.677077][ T7416] hsr_dev_finalize+0x276/0xaa0 [ 147.677117][ T7416] hsr_newlink+0x7d7/0x940 [ 147.677142][ T7416] ? validate_linkmsg+0x765/0x950 [ 147.677166][ T7416] ? __pfx_hsr_newlink+0x10/0x10 [ 147.677200][ T7416] ? __pfx_hsr_newlink+0x10/0x10 [ 147.677231][ T7416] rtnl_newlink_create+0x310/0xb00 [ 147.677267][ T7416] ? __pfx_aa_get_newest_label+0x10/0x10 [ 147.677297][ T7416] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 147.677320][ T7416] ? rtnl_newlink+0x8db/0x1c70 [ 147.677346][ T7416] ? __pfx___mutex_lock+0x10/0x10 [ 147.677380][ T7416] ? ns_capable+0x8a/0xf0 [ 147.677431][ T7416] rtnl_newlink+0x16d6/0x1c70 [ 147.677457][ T7416] ? netlink_sendmsg+0x805/0xb30 [ 147.677497][ T7416] ? __pfx_rtnl_newlink+0x10/0x10 [ 147.677549][ T7416] ? kasan_quarantine_put+0xdd/0x220 [ 147.677577][ T7416] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.677613][ T7416] ? nlmon_xmit+0xb0/0x100 [ 147.677629][ T7416] ? kmem_cache_free+0x18f/0x400 [ 147.677658][ T7416] ? __local_bh_enable_ip+0x12d/0x1c0 [ 147.677687][ T7416] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.677712][ T7416] ? __local_bh_enable_ip+0x12d/0x1c0 [ 147.677738][ T7416] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 147.677770][ T7416] ? __dev_queue_xmit+0x27e/0x3a70 [ 147.677803][ T7416] ? __lock_acquire+0xab9/0xd20 [ 147.677860][ T7416] ? __pfx_rtnl_newlink+0x10/0x10 [ 147.677882][ T7416] rtnetlink_rcv_msg+0x7cf/0xb70 [ 147.677909][ T7416] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 147.677932][ T7416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.677953][ T7416] ? ref_tracker_free+0x63a/0x7d0 [ 147.677976][ T7416] ? __copy_skb_header+0xa7/0x550 [ 147.678007][ T7416] ? __pfx_ref_tracker_free+0x10/0x10 [ 147.678031][ T7416] ? __skb_clone+0x63/0x7a0 [ 147.678068][ T7416] netlink_rcv_skb+0x205/0x470 [ 147.678093][ T7416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.678119][ T7416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.678161][ T7416] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.678183][ T7416] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.678214][ T7416] netlink_unicast+0x758/0x8d0 [ 147.678251][ T7416] netlink_sendmsg+0x805/0xb30 [ 147.678287][ T7416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.678316][ T7416] ? aa_sock_msg_perm+0x94/0x160 [ 147.678342][ T7416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.678365][ T7416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.678391][ T7416] __sock_sendmsg+0x21c/0x270 [ 147.678416][ T7416] ____sys_sendmsg+0x505/0x830 [ 147.678448][ T7416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.678484][ T7416] ? import_iovec+0x74/0xa0 [ 147.678509][ T7416] ___sys_sendmsg+0x21f/0x2a0 [ 147.678540][ T7416] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.678617][ T7416] ? __fget_files+0x2a/0x420 [ 147.678636][ T7416] ? __fget_files+0x3a0/0x420 [ 147.678667][ T7416] __x64_sys_sendmsg+0x19b/0x260 [ 147.678697][ T7416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.678733][ T7416] ? __pfx_ksys_write+0x10/0x10 [ 147.678747][ T7416] ? rcu_is_watching+0x15/0xb0 [ 147.678778][ T7416] ? do_syscall_64+0xbe/0x3b0 [ 147.678800][ T7416] do_syscall_64+0xfa/0x3b0 [ 147.678815][ T7416] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.678831][ T7416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.678849][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 147.678869][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.678887][ T7416] RIP: 0033:0x7fb73458e929 [ 147.678904][ T7416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.678920][ T7416] RSP: 002b:00007fb735408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.678942][ T7416] RAX: ffffffffffffffda RBX: 00007fb7347b5fa0 RCX: 00007fb73458e929 [ 147.678954][ T7416] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 147.678966][ T7416] RBP: 00007fb735408090 R08: 0000000000000000 R09: 0000000000000000 [ 147.678976][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.678987][ T7416] R13: 0000000000000000 R14: 00007fb7347b5fa0 R15: 00007ffdeea262d8 [ 147.679021][ T7416] [ 147.685825][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 148.180565][ T7418] FAULT_INJECTION: forcing a failure. [ 148.180565][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 148.198266][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.1.391 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 148.198295][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.198305][ T7418] Call Trace: [ 148.198313][ T7418] [ 148.198321][ T7418] dump_stack_lvl+0x189/0x250 [ 148.198355][ T7418] ? __pfx____ratelimit+0x10/0x10 [ 148.198377][ T7418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.198406][ T7418] ? __pfx__printk+0x10/0x10 [ 148.198434][ T7418] ? __pfx___might_resched+0x10/0x10 [ 148.198461][ T7418] ? fs_reclaim_acquire+0x7d/0x100 [ 148.198490][ T7418] should_fail_ex+0x414/0x560 [ 148.198521][ T7418] should_failslab+0xa8/0x100 [ 148.198543][ T7418] __kmalloc_noprof+0xcb/0x4f0 [ 148.198560][ T7418] ? team_options_register+0x56/0xb80 [ 148.198600][ T7418] team_options_register+0x56/0xb80 [ 148.198638][ T7418] ? timer_init_key+0x171/0x2d0 [ 148.198665][ T7418] lb_init+0x2e4/0x380 [ 148.198698][ T7418] __team_change_mode+0x329/0x590 [ 148.198728][ T7418] team_mode_option_set+0x32f/0x3a0 [ 148.198755][ T7418] team_nl_options_set_doit+0x95f/0xdf0 [ 148.198775][ T7418] ? __pfx___nla_validate_parse+0x10/0x10 [ 148.198832][ T7418] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 148.198865][ T7418] ? __nla_parse+0x40/0x60 [ 148.198897][ T7418] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 148.198927][ T7418] genl_family_rcv_msg_doit+0x212/0x300 [ 148.198955][ T7418] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.198992][ T7418] ? bpf_lsm_capable+0x9/0x20 [ 148.199010][ T7418] ? security_capable+0x7e/0x2e0 [ 148.199041][ T7418] genl_rcv_msg+0x60e/0x790 [ 148.199066][ T7418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.199082][ T7418] ? ref_tracker_free+0x63a/0x7d0 [ 148.199104][ T7418] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 148.199122][ T7418] ? __pfx_ref_tracker_free+0x10/0x10 [ 148.199160][ T7418] netlink_rcv_skb+0x205/0x470 [ 148.199186][ T7418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.199207][ T7418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.199253][ T7418] ? down_read+0x1ad/0x2e0 [ 148.199280][ T7418] genl_rcv+0x28/0x40 [ 148.199306][ T7418] netlink_unicast+0x758/0x8d0 [ 148.199342][ T7418] netlink_sendmsg+0x805/0xb30 [ 148.199379][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.199407][ T7418] ? aa_sock_msg_perm+0x94/0x160 [ 148.199435][ T7418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.199458][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.199484][ T7418] __sock_sendmsg+0x21c/0x270 [ 148.199511][ T7418] ____sys_sendmsg+0x505/0x830 [ 148.199546][ T7418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.199584][ T7418] ? import_iovec+0x74/0xa0 [ 148.199608][ T7418] ___sys_sendmsg+0x21f/0x2a0 [ 148.199639][ T7418] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.199714][ T7418] ? __fget_files+0x2a/0x420 [ 148.199734][ T7418] ? __fget_files+0x3a0/0x420 [ 148.199768][ T7418] __x64_sys_sendmsg+0x19b/0x260 [ 148.199800][ T7418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.199848][ T7418] ? __pfx_ksys_write+0x10/0x10 [ 148.199864][ T7418] ? rcu_is_watching+0x15/0xb0 [ 148.199898][ T7418] ? do_syscall_64+0xbe/0x3b0 [ 148.199924][ T7418] do_syscall_64+0xfa/0x3b0 [ 148.199942][ T7418] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.199962][ T7418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.199981][ T7418] ? clear_bhb_loop+0x60/0xb0 [ 148.200005][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.200023][ T7418] RIP: 0033:0x7f8eddb8e929 [ 148.200042][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.200058][ T7418] RSP: 002b:00007f8ede9a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.200080][ T7418] RAX: ffffffffffffffda RBX: 00007f8edddb5fa0 RCX: 00007f8eddb8e929 [ 148.200094][ T7418] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000005 [ 148.200107][ T7418] RBP: 00007f8ede9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 148.200119][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.200130][ T7418] R13: 0000000000000000 R14: 00007f8edddb5fa0 R15: 00007ffe398bc1c8 [ 148.200166][ T7418] [ 148.200345][ T7418] team0: Failed to change to mode "loadbalance" [ 148.824876][ T7443] x_tables: duplicate underflow at hook 1 [ 148.853484][ T6814] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 148.882523][ T7444] netlink: 'syz.3.400': attribute type 11 has an invalid length. [ 148.938292][ T7445] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 149.006174][ T7445] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 149.757619][ T7475] Bluetooth: MGMT ver 1.23 [ 149.910111][ T78] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 149.985984][ T7482] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 150.017359][ T7486] nbd: couldn't find a device at index 65546 [ 150.271121][ T7497] netlink: 'syz.0.418': attribute type 11 has an invalid length. [ 150.324569][ T7500] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 150.510378][ T7507] FAULT_INJECTION: forcing a failure. [ 150.510378][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 150.596019][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: syz.4.421 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 150.596048][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.596060][ T7507] Call Trace: [ 150.596068][ T7507] [ 150.596077][ T7507] dump_stack_lvl+0x189/0x250 [ 150.596111][ T7507] ? __pfx____ratelimit+0x10/0x10 [ 150.596131][ T7507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.596159][ T7507] ? __pfx__printk+0x10/0x10 [ 150.596186][ T7507] ? __pfx___might_resched+0x10/0x10 [ 150.596212][ T7507] ? fs_reclaim_acquire+0x7d/0x100 [ 150.596240][ T7507] should_fail_ex+0x414/0x560 [ 150.596271][ T7507] should_failslab+0xa8/0x100 [ 150.596295][ T7507] __kmalloc_cache_noprof+0x70/0x3d0 [ 150.596313][ T7507] ? hsr_add_port+0x179/0x890 [ 150.596348][ T7507] hsr_add_port+0x179/0x890 [ 150.596385][ T7507] hsr_dev_finalize+0x43a/0xaa0 [ 150.596424][ T7507] hsr_newlink+0x7d7/0x940 [ 150.596449][ T7507] ? validate_linkmsg+0x765/0x950 [ 150.596472][ T7507] ? __pfx_hsr_newlink+0x10/0x10 [ 150.596507][ T7507] ? __pfx_hsr_newlink+0x10/0x10 [ 150.596536][ T7507] rtnl_newlink_create+0x310/0xb00 [ 150.596571][ T7507] ? __pfx_aa_get_newest_label+0x10/0x10 [ 150.596609][ T7507] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 150.596633][ T7507] ? rtnl_newlink+0x8db/0x1c70 [ 150.596659][ T7507] ? __pfx___mutex_lock+0x10/0x10 [ 150.596692][ T7507] ? ns_capable+0x8a/0xf0 [ 150.596725][ T7507] rtnl_newlink+0x16d6/0x1c70 [ 150.596751][ T7507] ? netlink_sendmsg+0x805/0xb30 [ 150.596792][ T7507] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.596844][ T7507] ? kasan_quarantine_put+0xdd/0x220 [ 150.596871][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.596898][ T7507] ? nlmon_xmit+0xb0/0x100 [ 150.596915][ T7507] ? kmem_cache_free+0x18f/0x400 [ 150.596943][ T7507] ? __local_bh_enable_ip+0x12d/0x1c0 [ 150.596970][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.596992][ T7507] ? __local_bh_enable_ip+0x12d/0x1c0 [ 150.597019][ T7507] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.597055][ T7507] ? __dev_queue_xmit+0x27e/0x3a70 [ 150.597088][ T7507] ? __lock_acquire+0xab9/0xd20 [ 150.597145][ T7507] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.597169][ T7507] rtnetlink_rcv_msg+0x7cf/0xb70 [ 150.597199][ T7507] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 150.597221][ T7507] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.597242][ T7507] ? ref_tracker_free+0x63a/0x7d0 [ 150.597265][ T7507] ? __copy_skb_header+0xa7/0x550 [ 150.597295][ T7507] ? __pfx_ref_tracker_free+0x10/0x10 [ 150.597320][ T7507] ? __skb_clone+0x63/0x7a0 [ 150.597357][ T7507] netlink_rcv_skb+0x205/0x470 [ 150.597402][ T7507] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.597428][ T7507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.597469][ T7507] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.597492][ T7507] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.597524][ T7507] netlink_unicast+0x758/0x8d0 [ 150.597559][ T7507] netlink_sendmsg+0x805/0xb30 [ 150.597605][ T7507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.597634][ T7507] ? aa_sock_msg_perm+0x94/0x160 [ 150.597660][ T7507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.597684][ T7507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.597710][ T7507] __sock_sendmsg+0x21c/0x270 [ 150.597736][ T7507] ____sys_sendmsg+0x505/0x830 [ 150.597772][ T7507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.597811][ T7507] ? import_iovec+0x74/0xa0 [ 150.597836][ T7507] ___sys_sendmsg+0x21f/0x2a0 [ 150.597866][ T7507] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.597940][ T7507] ? __fget_files+0x2a/0x420 [ 150.597960][ T7507] ? __fget_files+0x3a0/0x420 [ 150.597995][ T7507] __x64_sys_sendmsg+0x19b/0x260 [ 150.598027][ T7507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.598066][ T7507] ? __pfx_ksys_write+0x10/0x10 [ 150.598082][ T7507] ? rcu_is_watching+0x15/0xb0 [ 150.598117][ T7507] ? do_syscall_64+0xbe/0x3b0 [ 150.598142][ T7507] do_syscall_64+0xfa/0x3b0 [ 150.598160][ T7507] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.598178][ T7507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.598197][ T7507] ? clear_bhb_loop+0x60/0xb0 [ 150.598221][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.598240][ T7507] RIP: 0033:0x7f739f18e929 [ 150.598259][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.598275][ T7507] RSP: 002b:00007f73a0084038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.598297][ T7507] RAX: ffffffffffffffda RBX: 00007f739f3b5fa0 RCX: 00007f739f18e929 [ 150.598312][ T7507] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 150.598324][ T7507] RBP: 00007f73a0084090 R08: 0000000000000000 R09: 0000000000000000 [ 150.598336][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.598348][ T7507] R13: 0000000000000000 R14: 00007f739f3b5fa0 R15: 00007fff69666168 [ 150.598382][ T7507] [ 151.170533][ T7511] __nla_validate_parse: 16 callbacks suppressed [ 151.170555][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 151.257118][ T7511] team0: Unable to change to the same mode the team is in [ 151.301508][ T7518] syz_tun: entered promiscuous mode [ 151.309692][ T7518] batadv_slave_0: entered promiscuous mode [ 151.321359][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 151.775254][ T7540] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.786300][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 151.792432][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 151.807087][ T7544] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.894956][ T7540] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.054966][ T7549] netlink: 'syz.2.434': attribute type 11 has an invalid length. [ 152.068304][ T7549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.434'. [ 152.084571][ T7540] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.120446][ T7555] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 152.235780][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 152.313756][ T7540] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.345370][ T7559] FAULT_INJECTION: forcing a failure. [ 152.345370][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 152.360187][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz.0.437 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 152.360216][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.360228][ T7559] Call Trace: [ 152.360236][ T7559] [ 152.360244][ T7559] dump_stack_lvl+0x189/0x250 [ 152.360279][ T7559] ? __pfx____ratelimit+0x10/0x10 [ 152.360300][ T7559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.360328][ T7559] ? __pfx__printk+0x10/0x10 [ 152.360358][ T7559] ? __pfx___might_resched+0x10/0x10 [ 152.360384][ T7559] ? fs_reclaim_acquire+0x7d/0x100 [ 152.360412][ T7559] should_fail_ex+0x414/0x560 [ 152.360440][ T7559] should_failslab+0xa8/0x100 [ 152.360462][ T7559] __kmalloc_noprof+0xcb/0x4f0 [ 152.360478][ T7559] ? ethnl_default_notify+0x184/0x990 [ 152.360506][ T7559] ethnl_default_notify+0x184/0x990 [ 152.360529][ T7559] ? hsr_dev_finalize+0x43a/0xaa0 [ 152.360552][ T7559] ? hsr_newlink+0x7d7/0x940 [ 152.360574][ T7559] ? rtnl_newlink_create+0x310/0xb00 [ 152.360599][ T7559] ? netlink_rcv_skb+0x205/0x470 [ 152.360617][ T7559] ? netlink_unicast+0x758/0x8d0 [ 152.360634][ T7559] ? netlink_sendmsg+0x805/0xb30 [ 152.360657][ T7559] ? __pfx_ethnl_default_notify+0x10/0x10 [ 152.360679][ T7559] ? __x64_sys_sendmsg+0x19b/0x260 [ 152.360728][ T7559] ? mutex_is_locked+0x17/0x50 [ 152.360754][ T7559] ? rtnl_is_locked+0x15/0x20 [ 152.360784][ T7559] ethnl_netdev_event+0xe2/0x160 [ 152.360810][ T7559] notifier_call_chain+0x1b3/0x3e0 [ 152.360849][ T7559] netdev_update_features+0xa3/0xe0 [ 152.360874][ T7559] ? __pfx_netdev_update_features+0x10/0x10 [ 152.360899][ T7559] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 152.360920][ T7559] ? hsr_port_get_hsr+0x8a/0xa0 [ 152.360946][ T7559] hsr_add_port+0x485/0x890 [ 152.360982][ T7559] hsr_dev_finalize+0x43a/0xaa0 [ 152.361022][ T7559] hsr_newlink+0x7d7/0x940 [ 152.361047][ T7559] ? validate_linkmsg+0x765/0x950 [ 152.361069][ T7559] ? __pfx_hsr_newlink+0x10/0x10 [ 152.361103][ T7559] ? __pfx_hsr_newlink+0x10/0x10 [ 152.361132][ T7559] rtnl_newlink_create+0x310/0xb00 [ 152.361163][ T7559] ? __mutex_lock+0x51b/0xe80 [ 152.361189][ T7559] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 152.361217][ T7559] ? rtnl_newlink+0x8db/0x1c70 [ 152.361242][ T7559] ? __pfx___mutex_lock+0x10/0x10 [ 152.361273][ T7559] ? ns_capable+0x8a/0xf0 [ 152.361302][ T7559] rtnl_newlink+0x16d6/0x1c70 [ 152.361326][ T7559] ? netlink_sendmsg+0x805/0xb30 [ 152.361363][ T7559] ? __pfx_rtnl_newlink+0x10/0x10 [ 152.361417][ T7559] ? kasan_quarantine_put+0xdd/0x220 [ 152.361443][ T7559] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.361468][ T7559] ? nlmon_xmit+0xb0/0x100 [ 152.361484][ T7559] ? kmem_cache_free+0x18f/0x400 [ 152.361511][ T7559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 152.361537][ T7559] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.361558][ T7559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 152.361585][ T7559] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 152.361618][ T7559] ? __dev_queue_xmit+0x27e/0x3a70 [ 152.361653][ T7559] ? __lock_acquire+0xab9/0xd20 [ 152.361710][ T7559] ? __pfx_rtnl_newlink+0x10/0x10 [ 152.361733][ T7559] rtnetlink_rcv_msg+0x7cf/0xb70 [ 152.361770][ T7559] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 152.361791][ T7559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.361811][ T7559] ? ref_tracker_free+0x63a/0x7d0 [ 152.361832][ T7559] ? __copy_skb_header+0xa7/0x550 [ 152.361861][ T7559] ? __pfx_ref_tracker_free+0x10/0x10 [ 152.361883][ T7559] ? __skb_clone+0x63/0x7a0 [ 152.361918][ T7559] netlink_rcv_skb+0x205/0x470 [ 152.361943][ T7559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.361967][ T7559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.362005][ T7559] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.362027][ T7559] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.362054][ T7559] netlink_unicast+0x758/0x8d0 [ 152.362088][ T7559] netlink_sendmsg+0x805/0xb30 [ 152.362121][ T7559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.362150][ T7559] ? aa_sock_msg_perm+0x94/0x160 [ 152.362177][ T7559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.362199][ T7559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.362225][ T7559] __sock_sendmsg+0x21c/0x270 [ 152.362250][ T7559] ____sys_sendmsg+0x505/0x830 [ 152.362285][ T7559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.362324][ T7559] ? import_iovec+0x74/0xa0 [ 152.362348][ T7559] ___sys_sendmsg+0x21f/0x2a0 [ 152.362374][ T7559] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.362437][ T7559] ? __fget_files+0x2a/0x420 [ 152.362455][ T7559] ? __fget_files+0x3a0/0x420 [ 152.362483][ T7559] __x64_sys_sendmsg+0x19b/0x260 [ 152.362509][ T7559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.362540][ T7559] ? __pfx_ksys_write+0x10/0x10 [ 152.362552][ T7559] ? rcu_is_watching+0x15/0xb0 [ 152.362583][ T7559] ? do_syscall_64+0xbe/0x3b0 [ 152.362603][ T7559] do_syscall_64+0xfa/0x3b0 [ 152.362617][ T7559] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.362631][ T7559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.362645][ T7559] ? clear_bhb_loop+0x60/0xb0 [ 152.362663][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.362677][ T7559] RIP: 0033:0x7fb73458e929 [ 152.362692][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.362704][ T7559] RSP: 002b:00007fb735408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.362722][ T7559] RAX: ffffffffffffffda RBX: 00007fb7347b5fa0 RCX: 00007fb73458e929 [ 152.362733][ T7559] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 152.362751][ T7559] RBP: 00007fb735408090 R08: 0000000000000000 R09: 0000000000000000 [ 152.362760][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.362769][ T7559] R13: 0000000000000000 R14: 00007fb7347b5fa0 R15: 00007ffdeea262d8 [ 152.362795][ T7559] [ 153.145859][ T1159] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.180916][ T1159] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.259620][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 153.301780][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.442'. [ 153.339390][ T1159] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.352896][ T1159] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.409375][ T7576] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 153.419427][ T7576] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 153.520182][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.443'. [ 153.594918][ T7586] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 153.763629][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 153.787376][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 154.005769][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.450'. [ 154.030611][ T7598] FAULT_INJECTION: forcing a failure. [ 154.030611][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 154.094744][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.2.450 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 154.094775][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.094795][ T7598] Call Trace: [ 154.094802][ T7598] [ 154.094810][ T7598] dump_stack_lvl+0x189/0x250 [ 154.094845][ T7598] ? __pfx____ratelimit+0x10/0x10 [ 154.094867][ T7598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.094895][ T7598] ? __pfx__printk+0x10/0x10 [ 154.094923][ T7598] ? __pfx___might_resched+0x10/0x10 [ 154.094951][ T7598] ? fs_reclaim_acquire+0x7d/0x100 [ 154.094980][ T7598] should_fail_ex+0x414/0x560 [ 154.095011][ T7598] should_failslab+0xa8/0x100 [ 154.095033][ T7598] __kmalloc_noprof+0xcb/0x4f0 [ 154.095052][ T7598] ? ethnl_default_notify+0x1cd/0x990 [ 154.095084][ T7598] ethnl_default_notify+0x1cd/0x990 [ 154.095107][ T7598] ? hsr_dev_finalize+0x43a/0xaa0 [ 154.095130][ T7598] ? hsr_newlink+0x7d7/0x940 [ 154.095157][ T7598] ? netlink_rcv_skb+0x205/0x470 [ 154.095180][ T7598] ? __pfx_ethnl_default_notify+0x10/0x10 [ 154.095204][ T7598] ? __x64_sys_sendmsg+0x19b/0x260 [ 154.095251][ T7598] ? mutex_is_locked+0x17/0x50 [ 154.095267][ T7598] ? rtnl_is_locked+0x15/0x20 [ 154.095299][ T7598] ethnl_netdev_event+0xe2/0x160 [ 154.095327][ T7598] notifier_call_chain+0x1b3/0x3e0 [ 154.095366][ T7598] netdev_update_features+0xa3/0xe0 [ 154.095390][ T7598] ? __pfx_netdev_update_features+0x10/0x10 [ 154.095416][ T7598] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 154.095436][ T7598] ? hsr_port_get_hsr+0x8a/0xa0 [ 154.095461][ T7598] hsr_add_port+0x485/0x890 [ 154.095495][ T7598] hsr_dev_finalize+0x43a/0xaa0 [ 154.095534][ T7598] hsr_newlink+0x7d7/0x940 [ 154.095557][ T7598] ? validate_linkmsg+0x765/0x950 [ 154.095579][ T7598] ? __pfx_hsr_newlink+0x10/0x10 [ 154.095611][ T7598] ? __pfx_hsr_newlink+0x10/0x10 [ 154.095638][ T7598] rtnl_newlink_create+0x310/0xb00 [ 154.095671][ T7598] ? __pfx_aa_get_newest_label+0x10/0x10 [ 154.095699][ T7598] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 154.095721][ T7598] ? rtnl_newlink+0x8db/0x1c70 [ 154.095748][ T7598] ? __pfx___mutex_lock+0x10/0x10 [ 154.095795][ T7598] ? ns_capable+0x8a/0xf0 [ 154.095828][ T7598] rtnl_newlink+0x16d6/0x1c70 [ 154.095852][ T7598] ? netlink_sendmsg+0x805/0xb30 [ 154.095888][ T7598] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.095939][ T7598] ? kasan_quarantine_put+0xdd/0x220 [ 154.095967][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.095998][ T7598] ? nlmon_xmit+0xb0/0x100 [ 154.096015][ T7598] ? kmem_cache_free+0x18f/0x400 [ 154.096043][ T7598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 154.096070][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.096091][ T7598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 154.096117][ T7598] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 154.096149][ T7598] ? __dev_queue_xmit+0x27e/0x3a70 [ 154.096183][ T7598] ? __lock_acquire+0xab9/0xd20 [ 154.096238][ T7598] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.096261][ T7598] rtnetlink_rcv_msg+0x7cf/0xb70 [ 154.096290][ T7598] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 154.096311][ T7598] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.096331][ T7598] ? ref_tracker_free+0x63a/0x7d0 [ 154.096354][ T7598] ? __copy_skb_header+0xa7/0x550 [ 154.096385][ T7598] ? __pfx_ref_tracker_free+0x10/0x10 [ 154.096410][ T7598] ? __skb_clone+0x63/0x7a0 [ 154.096447][ T7598] netlink_rcv_skb+0x205/0x470 [ 154.096471][ T7598] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.096497][ T7598] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.096536][ T7598] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.096558][ T7598] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.096588][ T7598] netlink_unicast+0x758/0x8d0 [ 154.096625][ T7598] netlink_sendmsg+0x805/0xb30 [ 154.096661][ T7598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.096691][ T7598] ? aa_sock_msg_perm+0x94/0x160 [ 154.096717][ T7598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.096741][ T7598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.096765][ T7598] __sock_sendmsg+0x21c/0x270 [ 154.096799][ T7598] ____sys_sendmsg+0x505/0x830 [ 154.096836][ T7598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.096876][ T7598] ? import_iovec+0x74/0xa0 [ 154.096901][ T7598] ___sys_sendmsg+0x21f/0x2a0 [ 154.096931][ T7598] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.097005][ T7598] ? __fget_files+0x2a/0x420 [ 154.097025][ T7598] ? __fget_files+0x3a0/0x420 [ 154.097060][ T7598] __x64_sys_sendmsg+0x19b/0x260 [ 154.097090][ T7598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.097129][ T7598] ? __pfx_ksys_write+0x10/0x10 [ 154.097146][ T7598] ? rcu_is_watching+0x15/0xb0 [ 154.097182][ T7598] ? do_syscall_64+0xbe/0x3b0 [ 154.097207][ T7598] do_syscall_64+0xfa/0x3b0 [ 154.097226][ T7598] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.097245][ T7598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.097265][ T7598] ? clear_bhb_loop+0x60/0xb0 [ 154.097288][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.097307][ T7598] RIP: 0033:0x7fdf91b8e929 [ 154.097345][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.097361][ T7598] RSP: 002b:00007fdf92918038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.097382][ T7598] RAX: ffffffffffffffda RBX: 00007fdf91db5fa0 RCX: 00007fdf91b8e929 [ 154.097396][ T7598] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 154.097408][ T7598] RBP: 00007fdf92918090 R08: 0000000000000000 R09: 0000000000000000 [ 154.097421][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.097432][ T7598] R13: 0000000000000000 R14: 00007fdf91db5fa0 R15: 00007ffff5820508 [ 154.097465][ T7598] [ 154.745109][ T7605] xt_CT: No such helper "pptp" [ 154.801347][ T7609] team0: Mode changed to "loadbalance" [ 155.043250][ T7614] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.127918][ T7614] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.280581][ T7614] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.388620][ T7614] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.625015][ T7633] netlink: 'syz.4.462': attribute type 15 has an invalid length. [ 155.923525][ T7648] FAULT_INJECTION: forcing a failure. [ 155.923525][ T7648] name failslab, interval 1, probability 0, space 0, times 0 [ 155.957519][ T7648] CPU: 1 UID: 0 PID: 7648 Comm: syz.3.466 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 155.957549][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.957561][ T7648] Call Trace: [ 155.957568][ T7648] [ 155.957577][ T7648] dump_stack_lvl+0x189/0x250 [ 155.957626][ T7648] ? __pfx____ratelimit+0x10/0x10 [ 155.957647][ T7648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.957674][ T7648] ? __pfx__printk+0x10/0x10 [ 155.957701][ T7648] ? __pfx___might_resched+0x10/0x10 [ 155.957778][ T7648] should_fail_ex+0x414/0x560 [ 155.957821][ T7648] should_failslab+0xa8/0x100 [ 155.957843][ T7648] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 155.957861][ T7648] ? ethnl_bitset32_size+0x3a/0x280 [ 155.957886][ T7648] ? __alloc_skb+0x112/0x2d0 [ 155.957916][ T7648] __alloc_skb+0x112/0x2d0 [ 155.957945][ T7648] ethnl_default_notify+0x4a4/0x990 [ 155.957969][ T7648] ? hsr_dev_finalize+0x43a/0xaa0 [ 155.958001][ T7648] ? __pfx_ethnl_default_notify+0x10/0x10 [ 155.958024][ T7648] ? __x64_sys_sendmsg+0x19b/0x260 [ 155.958077][ T7648] ? mutex_is_locked+0x17/0x50 [ 155.958092][ T7648] ? rtnl_is_locked+0x15/0x20 [ 155.958123][ T7648] ethnl_netdev_event+0xe2/0x160 [ 155.958151][ T7648] notifier_call_chain+0x1b3/0x3e0 [ 155.958189][ T7648] netdev_update_features+0xa3/0xe0 [ 155.958212][ T7648] ? __pfx_netdev_update_features+0x10/0x10 [ 155.958237][ T7648] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 155.958257][ T7648] ? hsr_port_get_hsr+0x8a/0xa0 [ 155.958282][ T7648] hsr_add_port+0x485/0x890 [ 155.958317][ T7648] hsr_dev_finalize+0x43a/0xaa0 [ 155.958356][ T7648] hsr_newlink+0x7d7/0x940 [ 155.958379][ T7648] ? validate_linkmsg+0x765/0x950 [ 155.958400][ T7648] ? __pfx_hsr_newlink+0x10/0x10 [ 155.958433][ T7648] ? __pfx_hsr_newlink+0x10/0x10 [ 155.958470][ T7648] rtnl_newlink_create+0x310/0xb00 [ 155.958500][ T7648] ? __mutex_lock+0x51b/0xe80 [ 155.958522][ T7648] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 155.958551][ T7648] ? rtnl_newlink+0x8db/0x1c70 [ 155.958576][ T7648] ? __pfx___mutex_lock+0x10/0x10 [ 155.958607][ T7648] ? ns_capable+0x8a/0xf0 [ 155.958638][ T7648] rtnl_newlink+0x16d6/0x1c70 [ 155.958662][ T7648] ? netlink_sendmsg+0x805/0xb30 [ 155.958700][ T7648] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.958757][ T7648] ? kasan_quarantine_put+0xdd/0x220 [ 155.958784][ T7648] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.958809][ T7648] ? nlmon_xmit+0xb0/0x100 [ 155.958825][ T7648] ? kmem_cache_free+0x18f/0x400 [ 155.958851][ T7648] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.958878][ T7648] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.958897][ T7648] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.958923][ T7648] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.958954][ T7648] ? __dev_queue_xmit+0x27e/0x3a70 [ 155.958987][ T7648] ? __lock_acquire+0xab9/0xd20 [ 155.959042][ T7648] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.959064][ T7648] rtnetlink_rcv_msg+0x7cf/0xb70 [ 155.959091][ T7648] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.959113][ T7648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.959133][ T7648] ? ref_tracker_free+0x63a/0x7d0 [ 155.959155][ T7648] ? __copy_skb_header+0xa7/0x550 [ 155.959184][ T7648] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.959205][ T7648] ? __skb_clone+0x63/0x7a0 [ 155.959241][ T7648] netlink_rcv_skb+0x205/0x470 [ 155.959266][ T7648] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.959290][ T7648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.959328][ T7648] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.959350][ T7648] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.959380][ T7648] netlink_unicast+0x758/0x8d0 [ 155.959413][ T7648] netlink_sendmsg+0x805/0xb30 [ 155.959447][ T7648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.959474][ T7648] ? aa_sock_msg_perm+0x94/0x160 [ 155.959500][ T7648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.959524][ T7648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.959549][ T7648] __sock_sendmsg+0x21c/0x270 [ 155.959573][ T7648] ____sys_sendmsg+0x505/0x830 [ 155.959606][ T7648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.959645][ T7648] ? import_iovec+0x74/0xa0 [ 155.959668][ T7648] ___sys_sendmsg+0x21f/0x2a0 [ 155.959698][ T7648] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.959777][ T7648] ? __fget_files+0x2a/0x420 [ 155.959796][ T7648] ? __fget_files+0x3a0/0x420 [ 155.959829][ T7648] __x64_sys_sendmsg+0x19b/0x260 [ 155.959860][ T7648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.959897][ T7648] ? __pfx_ksys_write+0x10/0x10 [ 155.959912][ T7648] ? rcu_is_watching+0x15/0xb0 [ 155.959946][ T7648] ? do_syscall_64+0xbe/0x3b0 [ 155.959973][ T7648] do_syscall_64+0xfa/0x3b0 [ 155.959991][ T7648] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.960010][ T7648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.960029][ T7648] ? clear_bhb_loop+0x60/0xb0 [ 155.960054][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.960073][ T7648] RIP: 0033:0x7f6e1ff8e929 [ 155.960092][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.960108][ T7648] RSP: 002b:00007f6e20dae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.960131][ T7648] RAX: ffffffffffffffda RBX: 00007f6e201b5fa0 RCX: 00007f6e1ff8e929 [ 155.960144][ T7648] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 155.960157][ T7648] RBP: 00007f6e20dae090 R08: 0000000000000000 R09: 0000000000000000 [ 155.960168][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.960180][ T7648] R13: 0000000000000000 R14: 00007f6e201b5fa0 R15: 00007ffe6df345b8 [ 155.960214][ T7648] [ 156.823601][ T7661] x_tables: duplicate underflow at hook 1 [ 156.868155][ T7661] __nla_validate_parse: 5 callbacks suppressed [ 156.868176][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 156.907426][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 157.114324][ T7674] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 157.173308][ T7666] team0 (unregistering): left promiscuous mode [ 157.183536][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 157.192923][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.468'. [ 157.291947][ T7669] ·kÿ: renamed from bridge_slave_0 (while UP) [ 157.352211][ T7674] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.809535][ T6814] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.890291][ T78] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.898934][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 157.925401][ T7700] FAULT_INJECTION: forcing a failure. [ 157.925401][ T7700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.933034][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.964117][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.0.479 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 157.964147][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.964159][ T7700] Call Trace: [ 157.964167][ T7700] [ 157.964176][ T7700] dump_stack_lvl+0x189/0x250 [ 157.964212][ T7700] ? __pfx____ratelimit+0x10/0x10 [ 157.964232][ T7700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.964261][ T7700] ? __pfx__printk+0x10/0x10 [ 157.964283][ T7700] ? __might_fault+0xb0/0x130 [ 157.964317][ T7700] should_fail_ex+0x414/0x560 [ 157.964348][ T7700] _copy_from_user+0x2d/0xb0 [ 157.964369][ T7700] kstrtouint_from_user+0xc4/0x170 [ 157.964399][ T7700] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 157.964446][ T7700] proc_fail_nth_write+0x88/0x240 [ 157.964479][ T7700] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.964508][ T7700] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.964533][ T7700] vfs_write+0x27b/0xa90 [ 157.964571][ T7700] ? __pfx_vfs_write+0x10/0x10 [ 157.964603][ T7700] ? __fget_files+0x2a/0x420 [ 157.964630][ T7700] ? __fget_files+0x3a0/0x420 [ 157.964649][ T7700] ? __fget_files+0x2a/0x420 [ 157.964681][ T7700] ksys_write+0x145/0x250 [ 157.964704][ T7700] ? __pfx_ksys_write+0x10/0x10 [ 157.964718][ T7700] ? rcu_is_watching+0x15/0xb0 [ 157.964753][ T7700] ? do_syscall_64+0xbe/0x3b0 [ 157.964780][ T7700] do_syscall_64+0xfa/0x3b0 [ 157.964799][ T7700] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.964817][ T7700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.964836][ T7700] ? clear_bhb_loop+0x60/0xb0 [ 157.964860][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.964878][ T7700] RIP: 0033:0x7fb73458d3df [ 157.964897][ T7700] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 157.964914][ T7700] RSP: 002b:00007fb7353e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 157.964935][ T7700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb73458d3df [ 157.964949][ T7700] RDX: 0000000000000001 RSI: 00007fb7353e70a0 RDI: 0000000000000005 [ 157.964961][ T7700] RBP: 00007fb7353e7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.964973][ T7700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 157.964984][ T7700] R13: 0000000000000001 R14: 00007fb7347b6080 R15: 00007ffdeea262d8 [ 157.965019][ T7700] [ 157.977954][ T78] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.333143][ T7699] netlink: 'syz.3.480': attribute type 4 has an invalid length. [ 158.455557][ T7712] netlink: 52 bytes leftover after parsing attributes in process `syz.0.484'. [ 158.678241][ T7715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.485'. [ 158.701545][ T7717] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 158.753893][ T7717] veth1_macvtap: left promiscuous mode [ 158.864150][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 158.999759][ T7724] ip6gretap1: entered promiscuous mode [ 159.331016][ T7738] netlink: 68 bytes leftover after parsing attributes in process `syz.2.492'. [ 159.467389][ T7740] netlink: 'syz.2.493': attribute type 21 has an invalid length. [ 159.479361][ T7714] delete_channel: no stack [ 159.489132][ T7740] netlink: 128 bytes leftover after parsing attributes in process `syz.2.493'. [ 159.931979][ T7745] syz.4.494 (7745) used greatest stack depth: 16256 bytes left [ 160.261978][ T7769] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 161.053286][ T7786] tap0: tun_chr_ioctl cmd 1074025676 [ 161.075996][ T7786] tap0: owner set to 0 [ 161.506636][ T7798] team0: Unable to change to the same mode the team is in [ 161.519136][ T7796] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 163.290167][ T7840] __nla_validate_parse: 4 callbacks suppressed [ 163.290189][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.521'. [ 163.352902][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.523'. [ 163.798823][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 164.067171][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 164.802208][ T6826] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.847836][ T6826] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.889415][ T6826] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.921313][ T6826] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.066836][ T7883] IPVS: length: 78 != 8 [ 165.183830][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 165.237854][ T7886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.536'. [ 165.279115][ T7889] netlink: 'syz.0.538': attribute type 11 has an invalid length. [ 165.296836][ T7889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.538'. [ 165.337288][ T7891] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 165.728565][ T7905] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 165.739515][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 166.174724][ T6835] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.275291][ T7924] Cannot find add_set index 0 as target [ 166.325716][ T7922] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 166.333261][ T10] IPVS: starting estimator thread 0... [ 166.341833][ T6835] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.367435][ T6835] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.399459][ T7928] Bluetooth: MGMT ver 1.23 [ 166.426310][ T7922] netlink: 64 bytes leftover after parsing attributes in process `syz.1.548'. [ 166.435508][ T6835] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.446347][ T7927] IPVS: using max 25 ests per chain, 60000 per kthread [ 166.460021][ T7922] netlink: 300 bytes leftover after parsing attributes in process `syz.1.548'. [ 166.519226][ T7922] vlan3: entered promiscuous mode [ 166.524409][ T7922] bridge0: entered promiscuous mode [ 166.535066][ T7922] vlan3: entered allmulticast mode [ 166.542389][ T7922] bridge0: entered allmulticast mode [ 166.568571][ T7922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.652954][ T7939] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.670607][ T7940] netlink: 'syz.4.553': attribute type 13 has an invalid length. [ 166.835083][ T7946] bond0: (slave netdevsim0): Releasing backup interface [ 167.132578][ T7961] netlink: 'syz.3.561': attribute type 10 has an invalid length. [ 167.141935][ T7961] bridge0: port 1(team0) entered blocking state [ 167.152980][ T7961] bridge0: port 1(team0) entered disabled state [ 167.160224][ T7961] team0: entered allmulticast mode [ 167.168745][ T7961] team0: left allmulticast mode [ 167.312599][ T7971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.320205][ T7971] IPv6: NLM_F_CREATE should be set when creating new route [ 167.327627][ T7971] IPv6: NLM_F_CREATE should be set when creating new route [ 167.368509][ T7974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.618537][ T7986] xt_bpf: check failed: parse error [ 167.636771][ T7987] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 167.890769][ T7996] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 168.464670][ T8030] __nla_validate_parse: 15 callbacks suppressed [ 168.464721][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 168.493008][ T8030] team0: Unable to change to the same mode the team is in [ 169.419360][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 170.108399][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 170.292067][ T8081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'. [ 170.324967][ T8081] unsupported nlmsg_type 40 [ 170.694225][ T8097] netem: incorrect gi model size [ 170.709145][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 170.719028][ T8097] IPv6: Can't replace route, no match found [ 170.732014][ T8097] tc_dump_action: action bad kind [ 170.807659][ T8102] netlink: 'syz.0.601': attribute type 11 has an invalid length. [ 170.815504][ T8102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.601'. [ 170.861703][ T8105] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 171.099028][ T8115] netlink: 788 bytes leftover after parsing attributes in process `syz.2.604'. [ 171.322129][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 171.381646][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.608'. [ 171.410250][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 172.039408][ T8147] pimreg2: entered allmulticast mode [ 172.175344][ T8144] pimreg2: left allmulticast mode [ 172.208613][ T30] audit: type=1800 audit(1750632881.819:2): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="memory.events" dev="tmpfs" ino=650 res=0 errno=0 [ 172.262382][ T30] audit: type=1800 audit(1750632881.829:3): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="memory.events" dev="tmpfs" ino=650 res=0 errno=0 [ 172.293252][ T30] audit: type=1804 audit(1750632881.839:4): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.617" name="/newroot/124/memory.events" dev="tmpfs" ino=650 res=1 errno=0 [ 172.684663][ T8177] openvswitch: netlink: Message has 20 unknown bytes. [ 172.700141][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.250850][ T8195] netlink: 'syz.3.626': attribute type 9 has an invalid length. [ 173.682929][ T8214] __nla_validate_parse: 6 callbacks suppressed [ 173.682949][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 173.753624][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 173.783856][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 173.993551][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.637'. [ 174.282401][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 174.504318][ T8249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.036165][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.690254][ T8273] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 175.737241][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 175.787391][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 176.704988][ T8331] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 177.562799][ T6826] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.592546][ T6826] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.619217][ T6826] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.649144][ T6826] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.756348][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 177.778445][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'. [ 178.099369][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 178.534939][ T8399] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 178.546281][ T8399] NCSI netlink: No device for ifindex 813332851 [ 178.697832][ T8408] lo speed is unknown, defaulting to 1000 [ 178.709900][ T8408] lo speed is unknown, defaulting to 1000 [ 178.717835][ T8408] lo speed is unknown, defaulting to 1000 [ 178.728375][ T8408] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.760438][ T8408] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.855851][ T8408] lo speed is unknown, defaulting to 1000 [ 178.864802][ T8408] lo speed is unknown, defaulting to 1000 [ 178.901715][ T8408] lo speed is unknown, defaulting to 1000 [ 178.916064][ T8408] lo speed is unknown, defaulting to 1000 [ 178.924369][ T8408] lo speed is unknown, defaulting to 1000 [ 178.933179][ T8413] __nla_validate_parse: 2 callbacks suppressed [ 178.933197][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.697'. [ 179.051126][ T8418] netlink: 'syz.1.699': attribute type 9 has an invalid length. [ 179.343596][ T8433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.703'. [ 179.371513][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 179.392726][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.703'. [ 179.775096][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 179.833023][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.711'. [ 180.246725][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 180.276049][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 180.296452][ T8466] netlink: 'syz.1.715': attribute type 4 has an invalid length. [ 180.327022][ T8466] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 180.333039][ T8466] syzkaller0: linktype set to 774 [ 180.714712][ T8454] lo speed is unknown, defaulting to 1000 [ 180.937017][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.722'. [ 181.074410][ T8491] netlink: 'syz.1.723': attribute type 11 has an invalid length. [ 181.083975][ T8491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.723'. [ 181.137316][ T8493] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 181.635377][ T8504] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.290411][ T8504] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 182.553473][ T8532] netlink: 'syz.4.737': attribute type 3 has an invalid length. [ 182.681626][ T8544] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 182.818520][ T8553] netlink: 'syz.1.735': attribute type 10 has an invalid length. [ 183.139061][ T8528] syzkaller0: entered promiscuous mode [ 183.158419][ T8528] syzkaller0: entered allmulticast mode [ 183.223171][ T8553] batman_adv: batadv0: Adding interface: virt_wifi0 [ 183.241043][ T8553] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 183.300215][ T8553] batman_adv: batadv0: Interface activated: virt_wifi0 [ 183.313022][ T8566] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 183.394025][ T6826] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.432147][ T6826] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.504642][ T8564] Â: renamed from pim6reg1 [ 183.550077][ T8566] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 183.627104][ T6826] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.635664][ T6826] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.696160][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 183.941573][ T8579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.022456][ T8581] __nla_validate_parse: 12 callbacks suppressed [ 184.022477][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 184.032873][ T8538] lo speed is unknown, defaulting to 1000 [ 184.041465][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 184.209508][ T8587] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 184.496116][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 184.548165][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.752'. [ 184.772328][ T8602] pim6reg1: entered promiscuous mode [ 184.794058][ T8602] pim6reg1: entered allmulticast mode [ 184.870309][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 185.028760][ T8615] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 185.106344][ T8615] netlink: 232 bytes leftover after parsing attributes in process `syz.3.758'. [ 185.145237][ T8616] xt_cgroup: invalid path, errno=-2 [ 185.151560][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 185.250052][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 185.295111][ T8618] geneve2: entered promiscuous mode [ 185.330946][ T8618] geneve2: entered allmulticast mode [ 185.334670][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 185.364447][ T8622] netlink: 'syz.3.761': attribute type 11 has an invalid length. [ 185.375101][ T8622] netlink: 224 bytes leftover after parsing attributes in process `syz.3.761'. [ 185.420846][ T8628] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 185.454644][ T24] IPVS: starting estimator thread 0... [ 185.462950][ T8628] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 185.494702][ T8630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.566075][ T8631] IPVS: using max 24 ests per chain, 57600 per kthread [ 186.529998][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.774'. [ 187.678006][ T8687] lo speed is unknown, defaulting to 1000 [ 188.105313][ T8732] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 188.170346][ T8736] tipc: Started in network mode [ 188.175435][ T8736] tipc: Node identity -, cluster identity 4711 [ 188.183899][ T8736] tipc: Enabling of bearer rejected, failed to enable media [ 188.494391][ T8745] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 189.053468][ T8760] __nla_validate_parse: 3 callbacks suppressed [ 189.053491][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 189.208277][ T8763] netlink: 'syz.1.800': attribute type 11 has an invalid length. [ 189.233883][ T8763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.800'. [ 189.269221][ T8770] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 189.276608][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'. [ 189.808838][ T8793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 190.047489][ T6812] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.070018][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 190.087790][ T6812] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.102084][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 190.111996][ T6812] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.126232][ T8807] 8021q: VLANs not supported on caif0 [ 190.132402][ T6812] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.606489][ T8830] netlink: 'syz.3.814': attribute type 11 has an invalid length. [ 190.809042][ T8835] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 190.825977][ T8830] netlink: 224 bytes leftover after parsing attributes in process `syz.3.814'. [ 190.826094][ T8835] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 191.323485][ T8798] lo speed is unknown, defaulting to 1000 [ 191.827448][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 192.032654][ T5935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.066425][ T5935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.267171][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.824'. [ 192.280816][ T5935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.295145][ T5935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.404753][ T5935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.427147][ T5935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.436024][ T8862] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 192.446733][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 192.460072][ T8859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.471003][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 192.492724][ T8863] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.496319][ T8859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.520790][ T8863] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.612554][ T5935] bond0: (slave netdevsim0): Releasing backup interface [ 192.641046][ T5935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.666101][ T5935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.703639][ T8863] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.741946][ T8863] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.838443][ T8863] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.880409][ T8863] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.989044][ T8863] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.037129][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.045384][ T8863] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.060251][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.074070][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.089012][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.101494][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.137210][ T8877] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 193.912815][ T5935] bond0 (unregistering): Released all slaves [ 193.926813][ T5935] bond1 (unregistering): Released all slaves [ 193.942252][ T5935] bond2 (unregistering): Released all slaves [ 193.964308][ T6822] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.974922][ T6822] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.994537][ T8880] lo speed is unknown, defaulting to 1000 [ 194.209810][ T8891] team0 (unregistering): left promiscuous mode [ 194.274760][ T6822] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.298898][ T6822] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.342767][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.480429][ T6835] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.489707][ T6835] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.975274][ T6835] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.033686][ T6835] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.086816][ T8923] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 195.141016][ T5840] Bluetooth: hci4: command tx timeout [ 195.244503][ T8936] __nla_validate_parse: 3 callbacks suppressed [ 195.244523][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 195.880304][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.848'. [ 195.890394][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 196.015509][ T8880] chnl_net:caif_netlink_parms(): no params data found [ 196.249034][ T8961] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 196.267196][ T8961] batman_adv: batadv0: Removing interface: virt_wifi0 [ 196.358632][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.366067][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.373332][ T8880] bridge_slave_0: entered allmulticast mode [ 196.398819][ T8880] bridge_slave_0: entered promiscuous mode [ 196.479141][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.486867][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.526983][ T8880] bridge_slave_1: entered allmulticast mode [ 196.535626][ T8880] bridge_slave_1: entered promiscuous mode [ 196.623534][ T1159] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.663411][ T1159] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.691522][ T1159] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.773020][ T8921] lo speed is unknown, defaulting to 1000 [ 197.017459][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'. [ 197.028979][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.038329][ T8924] lo speed is unknown, defaulting to 1000 [ 197.083587][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.172541][ T5935] team0: left promiscuous mode [ 197.180733][ T5935] batadv_slave_1: left promiscuous mode [ 197.202236][ T5935] hsr_slave_0: left promiscuous mode [ 197.212820][ T5935] hsr_slave_1: left promiscuous mode [ 197.221766][ T5840] Bluetooth: hci4: command tx timeout [ 197.270714][ T5935] veth1_macvtap: left promiscuous mode [ 197.277480][ T5935] veth0_macvtap: left promiscuous mode [ 197.283157][ T5935] veth1_vlan: left allmulticast mode [ 197.288782][ T5935] veth1_vlan: left promiscuous mode [ 197.294208][ T5935] veth0_vlan: left promiscuous mode [ 198.219845][ T8880] team0: Port device team_slave_0 added [ 198.260436][ T8880] team0: Port device team_slave_1 added [ 198.402980][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 198.537499][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 198.584771][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.605111][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.670730][ T8880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.840702][ T8969] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.014448][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.033905][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.106339][ T8880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.223435][ T8969] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.296174][ T5840] Bluetooth: hci4: command tx timeout [ 199.395143][ T8969] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.431068][ T5935] IPVS: stop unused estimator thread 0... [ 199.501901][ T8880] hsr_slave_0: entered promiscuous mode [ 199.523561][ T8880] hsr_slave_1: entered promiscuous mode [ 199.541957][ T8880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.550186][ T8880] Cannot create hsr debugfs directory [ 199.638695][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 199.743151][ T5935] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.830656][ T6812] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.182118][ T6812] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.197680][ T6812] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.240995][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.870'. [ 200.343139][ T9039] netlink: 'syz.4.871': attribute type 3 has an invalid length. [ 200.351014][ T9039] netlink: 'syz.4.871': attribute type 3 has an invalid length. [ 200.426883][ T9043] veth5: entered promiscuous mode [ 200.441036][ T9043] team0: Port device veth5 added [ 200.559521][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 200.917928][ T5935] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.931501][ T5935] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.952692][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'. [ 201.003344][ T5935] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.019997][ T5935] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.163649][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 201.172808][ T9064] syzkaller0: entered promiscuous mode [ 201.172834][ T9064] syzkaller0: entered allmulticast mode [ 201.175971][ T9037] lo speed is unknown, defaulting to 1000 [ 201.212523][ T9067] tipc: Started in network mode [ 201.223697][ T9067] tipc: Node identity aa9fe2d3c6c5, cluster identity 4711 [ 201.237128][ T9067] tipc: Enabled bearer , priority 0 [ 201.284946][ T9067] syzkaller0: entered promiscuous mode [ 201.290691][ T9067] syzkaller0: entered allmulticast mode [ 201.320542][ T9067] tipc: Resetting bearer [ 201.338303][ T9067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.378681][ T5840] Bluetooth: hci4: command tx timeout [ 202.307672][ T3081] tipc: Node number set to 1817895635 [ 202.868386][ T9066] tipc: Resetting bearer [ 202.883730][ T9066] tipc: Disabling bearer [ 202.921404][ T9069] lo speed is unknown, defaulting to 1000 [ 203.023337][ T8880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.107393][ T8880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.130992][ T8880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.204926][ T9078] netlink: 'syz.4.883': attribute type 39 has an invalid length. [ 203.279357][ T8880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.582288][ T8880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.648498][ T8880] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.671106][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.678359][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.713434][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.720620][ T6812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.815758][ T8880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.853504][ T8880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.082767][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.887'. [ 204.262519][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 204.392809][ T9114] tipc: Failed to remove unknown binding: 66,3,3/0:328011043/328011044 [ 204.413320][ T9114] openvswitch: netlink: IP tunnel dst address not specified [ 204.438017][ T30] audit: type=1800 audit(1750632914.079:5): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.889" name="cgroup.controllers" dev="tmpfs" ino=930 res=0 errno=0 [ 204.462703][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.599821][ T8880] veth0_vlan: entered promiscuous mode [ 204.633204][ T8880] veth1_vlan: entered promiscuous mode [ 204.802546][ T8880] veth0_macvtap: entered promiscuous mode [ 204.825176][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 204.848722][ T8880] veth1_macvtap: entered promiscuous mode [ 204.935044][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.986650][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.058580][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.076538][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.108368][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.118054][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.192481][ T9140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.899'. [ 205.222938][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 205.242913][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 205.265557][ T6835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.279540][ T6835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.377026][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.385030][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.670908][ T9142] lo speed is unknown, defaulting to 1000 [ 206.097177][ T6835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.531660][ T6835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.199498][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.207927][ T6835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.208407][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.228751][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.238173][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.246193][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.336049][ T9176] lo speed is unknown, defaulting to 1000 [ 207.464473][ T6835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.588752][ T9192] vlan0: entered promiscuous mode [ 207.913982][ T6835] bridge_slave_1: left allmulticast mode [ 207.922477][ T6835] bridge_slave_1: left promiscuous mode [ 207.940766][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.974873][ T6835] bridge_slave_0: left allmulticast mode [ 207.999109][ T6835] bridge_slave_0: left promiscuous mode [ 208.008505][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.091371][ T9205] xt_hashlimit: size too large, truncated to 1048576 [ 208.119947][ T9205] xt_hashlimit: max too large, truncated to 1048576 [ 208.572045][ T6835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.584196][ T6835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.594724][ T6835] bond0 (unregistering): Released all slaves [ 208.616947][ T9180] lo speed is unknown, defaulting to 1000 [ 208.729667][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 208.736163][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 209.296573][ T5843] Bluetooth: hci4: command tx timeout [ 209.493448][ T6835] hsr_slave_0: left promiscuous mode [ 209.499868][ T6835] hsr_slave_1: left promiscuous mode [ 209.506483][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.514073][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.522914][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.531408][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.561932][ T6835] veth1_macvtap: left promiscuous mode [ 209.567695][ T6835] veth0_macvtap: left promiscuous mode [ 209.573790][ T6835] veth1_vlan: left promiscuous mode [ 209.579619][ T6835] veth0_vlan: left promiscuous mode [ 210.277430][ T6835] team0 (unregistering): Port device team_slave_1 removed [ 210.319527][ T6835] team0 (unregistering): Port device team_slave_0 removed [ 210.713032][ T9228] gtp0: entered promiscuous mode [ 210.740060][ T9219] lo speed is unknown, defaulting to 1000 [ 210.860586][ T9180] chnl_net:caif_netlink_parms(): no params data found [ 211.022825][ T9238] veth5: entered promiscuous mode [ 211.043721][ T9238] team0: Port device veth5 added [ 211.079338][ T9240] tipc: Started in network mode [ 211.089645][ T9240] tipc: Node identity -:, cluster identity 4711 [ 211.105057][ T9240] tipc: Enabling of bearer rejected, failed to enable media [ 211.376437][ T5848] Bluetooth: hci4: command tx timeout [ 211.518961][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.526578][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.533916][ T9180] bridge_slave_0: entered allmulticast mode [ 211.542736][ T9180] bridge_slave_0: entered promiscuous mode [ 211.563168][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.575732][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.583920][ T9180] bridge_slave_1: entered allmulticast mode [ 211.592689][ T9180] bridge_slave_1: entered promiscuous mode [ 211.776287][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 211.783237][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 211.794185][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.893974][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.923964][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.057431][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 212.218489][ T9180] team0: Port device team_slave_0 added [ 212.328601][ T9180] team0: Port device team_slave_1 added [ 212.518651][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 212.532918][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 212.544234][ T9269] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 212.561608][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'. [ 212.586508][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.593506][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.623522][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.668055][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 212.668389][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.689134][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.720779][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.742051][ T9280] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 212.787686][ T9273] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 212.914612][ T9283] veth5: left promiscuous mode [ 212.948160][ T9283] team0: Port device veth5 removed [ 213.054926][ T9180] hsr_slave_0: entered promiscuous mode [ 213.062883][ T9180] hsr_slave_1: entered promiscuous mode [ 213.069834][ T9180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.078957][ T9180] Cannot create hsr debugfs directory [ 213.444536][ T9308] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 213.458812][ T5840] Bluetooth: hci4: command tx timeout [ 213.718107][ T9318] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.740994][ T9318] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.022333][ T9318] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.037035][ T9318] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.141037][ T9297] delete_channel: no stack [ 214.260515][ T9318] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.303234][ T9318] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.382708][ T9327] @ÿ: renamed from veth0_vlan (while UP) [ 214.421360][ T9312] lo speed is unknown, defaulting to 1000 [ 214.624692][ T9336] bond0: (slave wlan1): Releasing backup interface [ 214.681137][ T43] lo speed is unknown, defaulting to 1000 [ 214.718499][ T9318] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.756062][ T9318] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.200301][ T9180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.316536][ T6812] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.337749][ T6812] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.355704][ T9180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.436010][ T9180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.475272][ T6812] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.484100][ T6812] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.500388][ T6812] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.509466][ T6812] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.522859][ T9180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.536210][ T5840] Bluetooth: hci4: command tx timeout [ 215.554140][ T5935] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.565509][ T5935] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.771217][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.839479][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.878051][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.885262][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.932694][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.939963][ T6812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.318435][ T9383] openvswitch: netlink: Message has 20 unknown bytes. [ 216.325512][ T9383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.354268][ T9382] netlink: 108 bytes leftover after parsing attributes in process `syz.0.961'. [ 216.422708][ T9372] netlink: 56 bytes leftover after parsing attributes in process `syz.0.961'. [ 216.662668][ T9390] veth5: left promiscuous mode [ 216.684013][ T9390] team0: Port device veth5 removed [ 216.703281][ T9387] team0: Mode changed to "activebackup" [ 216.782956][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.843828][ T9387] vlan0: entered promiscuous mode [ 216.874699][ T9387] team0: Port device vlan0 added [ 216.978025][ T9387] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.021960][ T9387] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.114875][ T9387] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.127848][ T9387] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.145553][ T9377] lo speed is unknown, defaulting to 1000 [ 217.240556][ T9387] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.252170][ T9387] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.293678][ T9180] veth0_vlan: entered promiscuous mode [ 217.391644][ T9387] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.402049][ T9387] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.443190][ T9180] veth1_vlan: entered promiscuous mode [ 217.550885][ T9180] veth0_macvtap: entered promiscuous mode [ 217.636322][ T6812] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.658925][ T6812] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.679913][ T9180] veth1_macvtap: entered promiscuous mode [ 217.707019][ T1159] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.717305][ T1159] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.759144][ T5935] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.779894][ T5935] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.835938][ T5935] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.860874][ T5935] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.960386][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.982777][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.019304][ T6835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.054843][ T6835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.070226][ T6835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.100256][ T6835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.291877][ T6826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.328646][ T6826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.377644][ T9425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.975'. [ 218.420537][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 218.444061][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.486045][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.565381][ T9435] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 219.120796][ T9437] lo speed is unknown, defaulting to 1000 [ 219.241475][ T5935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.429952][ T5935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.772844][ T5935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.051920][ T5935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.114109][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.120601][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.989'. [ 220.131443][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.142338][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.158237][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.170298][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.217144][ T9476] openvswitch: netlink: Flow key attribute not present in set flow. [ 220.684906][ T5935] bridge_slave_1: left allmulticast mode [ 220.706113][ T5935] bridge_slave_1: left promiscuous mode [ 220.711990][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.752502][ T5935] bridge_slave_0: left allmulticast mode [ 220.766046][ T5935] bridge_slave_0: left promiscuous mode [ 220.782091][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.802883][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.993'. [ 221.283688][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.294723][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.305822][ T5935] bond0 (unregistering): Released all slaves [ 221.404932][ T9473] lo speed is unknown, defaulting to 1000 [ 221.534159][ T9509] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 221.561337][ T9509] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 221.585239][ T9509] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 221.596297][ T9509] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 221.620083][ T9509] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 221.632307][ T9509] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 221.643186][ T9509] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 221.663379][ T9509] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 221.668396][ T9510] ipvlan3: entered promiscuous mode [ 221.679674][ T9510] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 221.716408][ T9509] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 221.724108][ T9509] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 221.827606][ T9517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 222.038253][ T9519] team0: Port device vlan0 removed [ 222.155587][ T9477] lo speed is unknown, defaulting to 1000 [ 222.258971][ T5835] Bluetooth: hci4: command tx timeout [ 222.263924][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1006'. [ 222.396591][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'. [ 222.583794][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1007'. [ 222.593240][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 222.609665][ T5935] hsr_slave_0: left promiscuous mode [ 222.616146][ T5935] hsr_slave_1: left promiscuous mode [ 222.628695][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.632837][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'. [ 222.645607][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.664210][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.679372][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.714734][ T5935] veth1_macvtap: left promiscuous mode [ 222.720642][ T5935] veth0_macvtap: left promiscuous mode [ 222.726749][ T5935] veth1_vlan: left promiscuous mode [ 222.733501][ T5935] veth0_vlan: left promiscuous mode [ 223.581532][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 223.625544][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 224.070232][ T9557] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 224.202181][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 224.336116][ T5835] Bluetooth: hci4: command tx timeout [ 224.437226][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 224.613826][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.621276][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.628870][ T9473] bridge_slave_0: entered allmulticast mode [ 224.637299][ T9473] bridge_slave_0: entered promiscuous mode [ 224.651927][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.659443][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.666855][ T9473] bridge_slave_1: entered allmulticast mode [ 224.675109][ T9473] bridge_slave_1: entered promiscuous mode [ 224.771329][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.805655][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.905313][ T9473] team0: Port device team_slave_0 added [ 224.920088][ T9473] team0: Port device team_slave_1 added [ 225.043182][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.069825][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.099561][ T30] audit: type=1800 audit(1750632934.739:6): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1019" name="memory.events" dev="tmpfs" ino=1099 res=0 errno=0 [ 225.106941][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.144598][ T30] audit: type=1804 audit(1750632934.779:7): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1019" name="memory.events" dev="tmpfs" ino=1099 res=1 errno=0 [ 225.314870][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.328436][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.374612][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.696445][ T9473] hsr_slave_0: entered promiscuous mode [ 225.712622][ T9473] hsr_slave_1: entered promiscuous mode [ 225.733630][ T9473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.751828][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1023'. [ 225.766043][ T9473] Cannot create hsr debugfs directory [ 225.976231][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 226.358601][ T9617] veth7: entered promiscuous mode [ 226.367531][ T9617] team0: Port device veth7 added [ 226.417469][ T5840] Bluetooth: hci4: command tx timeout [ 226.636144][ T9626] validate_nla: 121 callbacks suppressed [ 226.636166][ T9626] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 226.676697][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 227.094082][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 227.140142][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 227.331320][ T9609] lo speed is unknown, defaulting to 1000 [ 227.534088][ T9473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.561920][ T9473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.576877][ T9473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.591635][ T9473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.713546][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.743939][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.765885][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.773154][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.791282][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.798481][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.005442][ T9618] lo speed is unknown, defaulting to 1000 [ 228.061407][ T9625] lo speed is unknown, defaulting to 1000 [ 228.385283][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.463736][ T9473] veth0_vlan: entered promiscuous mode [ 228.500084][ T5840] Bluetooth: hci4: command 0x0419 tx timeout [ 228.515131][ T9473] veth1_vlan: entered promiscuous mode [ 228.558893][ T9473] veth0_macvtap: entered promiscuous mode [ 228.571660][ T9473] veth1_macvtap: entered promiscuous mode [ 228.619994][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.667491][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.698920][ T6812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.723234][ T6812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.777878][ T6812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.822387][ T6812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.096562][ T6822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.130734][ T6822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.209431][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.228296][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.280300][ T9657] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 229.310789][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 229.783849][ T30] audit: type=1804 audit(1750632939.419:8): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1037" name="/newroot/205/cgroup.controllers" dev="tmpfs" ino=1054 res=1 errno=0 [ 229.836592][ T30] audit: type=1800 audit(1750632939.449:9): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1037" name="cgroup.controllers" dev="tmpfs" ino=1054 res=0 errno=0 [ 230.064856][ T9655] lo speed is unknown, defaulting to 1000 [ 230.582054][ T9678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 231.074819][ T6826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.167517][ T9667] lo speed is unknown, defaulting to 1000 [ 231.226599][ T9675] lo speed is unknown, defaulting to 1000 [ 231.681142][ T6826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.010469][ T6826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.114896][ T9698] syz.3.1045: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 232.161689][ T9698] CPU: 1 UID: 0 PID: 9698 Comm: syz.3.1045 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 232.161716][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.161726][ T9698] Call Trace: [ 232.161734][ T9698] [ 232.161742][ T9698] dump_stack_lvl+0x189/0x250 [ 232.161781][ T9698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.161810][ T9698] ? __pfx__printk+0x10/0x10 [ 232.161831][ T9698] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 232.161853][ T9698] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 232.161876][ T9698] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 232.161900][ T9698] warn_alloc+0x214/0x310 [ 232.161931][ T9698] ? __pfx_warn_alloc+0x10/0x10 [ 232.161973][ T9698] ? __get_vm_area_node+0x28f/0x300 [ 232.161994][ T9698] ? xskq_create+0xbf/0x170 [ 232.162019][ T9698] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 232.162076][ T9698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.162099][ T9698] ? xskq_create+0x56/0x170 [ 232.162119][ T9698] ? __kasan_kmalloc+0x93/0xb0 [ 232.162142][ T9698] vmalloc_user_noprof+0xad/0xf0 [ 232.162163][ T9698] ? xskq_create+0xbf/0x170 [ 232.162182][ T9698] xskq_create+0xbf/0x170 [ 232.162204][ T9698] xsk_init_queue+0xb0/0x110 [ 232.162235][ T9698] xsk_setsockopt+0x4de/0x710 [ 232.162267][ T9698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 232.162302][ T9698] ? aa_sock_opt_perm+0x74/0x110 [ 232.162330][ T9698] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 232.162353][ T9698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 232.162383][ T9698] do_sock_setsockopt+0x257/0x3e0 [ 232.162415][ T9698] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 232.162448][ T9698] ? __fget_files+0x2a/0x420 [ 232.162479][ T9698] __x64_sys_setsockopt+0x18b/0x220 [ 232.162514][ T9698] do_syscall_64+0xfa/0x3b0 [ 232.162532][ T9698] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.162550][ T9698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.162569][ T9698] ? clear_bhb_loop+0x60/0xb0 [ 232.162593][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.162611][ T9698] RIP: 0033:0x7f6e1ff8e929 [ 232.162629][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.162645][ T9698] RSP: 002b:00007f6e20d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.162666][ T9698] RAX: ffffffffffffffda RBX: 00007f6e201b6080 RCX: 00007f6e1ff8e929 [ 232.162680][ T9698] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 232.162692][ T9698] RBP: 00007f6e20010b39 R08: 0000000000000004 R09: 0000000000000000 [ 232.162704][ T9698] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 232.162715][ T9698] R13: 0000000000000000 R14: 00007f6e201b6080 R15: 00007ffe6df345b8 [ 232.162748][ T9698] [ 232.162756][ T9698] Mem-Info: [ 232.232074][ T9698] active_anon:8120 inactive_anon:0 isolated_anon:0 [ 232.232074][ T9698] active_file:1556 inactive_file:39895 isolated_file:0 [ 232.232074][ T9698] unevictable:768 dirty:258 writeback:0 [ 232.232074][ T9698] slab_reclaimable:12511 slab_unreclaimable:104060 [ 232.232074][ T9698] mapped:27413 shmem:4256 pagetables:1025 [ 232.232074][ T9698] sec_pagetables:0 bounce:0 [ 232.232074][ T9698] kernel_misc_reclaimable:0 [ 232.232074][ T9698] free:1325204 free_pcp:15262 free_cma:0 [ 232.399786][ T6826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.404843][ T9698] Node 0 active_anon:32480kB inactive_anon:0kB active_file:6224kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109652kB dirty:1032kB writeback:0kB shmem:15488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11896kB pagetables:3980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.534105][ T9698] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.544632][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.568686][ T9698] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.583332][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.613341][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.622158][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.630741][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.650154][ T9698] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 232.659594][ T9698] Node 0 DMA32 free:1360064kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32432kB inactive_anon:0kB active_file:6224kB inactive_file:157548kB unevictable:1536kB writepending:1028kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:45152kB local_pcp:18956kB free_cma:0kB [ 232.696544][ T9698] lowmem_reserve[]: 0 0 1 1 1 [ 232.726745][ T9698] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 232.758319][ T9698] lowmem_reserve[]: 0 0 0 0 0 [ 232.763089][ T9698] Node 1 Normal free:3901976kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18592kB local_pcp:10656kB free_cma:0kB [ 232.836479][ T9698] lowmem_reserve[]: 0 0 0 0 0 [ 232.851175][ T9698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.905981][ T9698] Node 0 DMA32: 262*4kB (UME) 24*8kB (ME) 18*16kB (M) 24*32kB (UME) 66*64kB (M) 43*128kB (ME) 32*256kB (UME) 34*512kB (UM) 19*1024kB (UME) 8*2048kB (UM) 314*4096kB (UM) = 1359608kB [ 232.958345][ T9698] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 233.003127][ T9698] Node 1 Normal: 194*4kB (UE) 56*8kB (UME) 57*16kB (UME) 132*32kB (UME) 37*64kB (UME) 10*128kB (UME) 3*256kB (ME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3901976kB [ 233.024264][ T9711] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 233.042401][ T9698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.052218][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 233.076805][ T9698] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.087018][ T9698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.151653][ T9698] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.197663][ T6826] bridge_slave_1: left allmulticast mode [ 233.204713][ T9698] 43146 total pagecache pages [ 233.212117][ T6826] bridge_slave_1: left promiscuous mode [ 233.226208][ T9698] 0 pages in swap cache [ 233.230398][ T9698] Free swap = 124996kB [ 233.234572][ T9698] Total swap = 124996kB [ 233.246773][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.277138][ T9698] 2097051 pages RAM [ 233.286451][ T9698] 0 pages HighMem/MovableOnly [ 233.295040][ T9698] 424693 pages reserved [ 233.305241][ T6826] bridge_slave_0: left allmulticast mode [ 233.311397][ T6826] bridge_slave_0: left promiscuous mode [ 233.317926][ T9698] 0 pages cma reserved [ 233.330893][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.570962][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 234.060659][ T6826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.074362][ T6826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.086507][ T6826] bond0 (unregistering): Released all slaves [ 234.112080][ T9704] lo speed is unknown, defaulting to 1000 [ 234.734131][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 234.746338][ T5835] Bluetooth: hci4: command tx timeout [ 234.782565][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 234.809851][ T9752] xfrm1: entered promiscuous mode [ 234.835325][ T9752] xfrm1: entered allmulticast mode [ 234.874818][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 235.005489][ T9755] veth7: left promiscuous mode [ 235.040563][ T9762] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 235.064564][ T9755] team0: Port device veth7 removed [ 235.073852][ T9764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1062'. [ 235.095777][ T9765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1061'. [ 235.122894][ T9734] lo speed is unknown, defaulting to 1000 [ 235.157211][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.245050][ T9762] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 235.594734][ T6826] hsr_slave_0: left promiscuous mode [ 235.626461][ T6826] hsr_slave_1: left promiscuous mode [ 235.642629][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.663092][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.680415][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.693569][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.743662][ T6826] veth1_macvtap: left promiscuous mode [ 235.756241][ T6826] veth0_macvtap: left promiscuous mode [ 235.766470][ T6826] veth1_vlan: left promiscuous mode [ 235.771856][ T6826] veth0_vlan: left promiscuous mode [ 236.435220][ T6826] team0 (unregistering): Port device team_slave_1 removed [ 236.480585][ T6826] team0 (unregistering): Port device team_slave_0 removed [ 236.818701][ T5835] Bluetooth: hci4: command tx timeout [ 237.031544][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.041148][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.049283][ T9704] bridge_slave_0: entered allmulticast mode [ 237.080520][ T9704] bridge_slave_0: entered promiscuous mode [ 237.099397][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.107079][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.115155][ T9704] bridge_slave_1: entered allmulticast mode [ 237.138186][ T9704] bridge_slave_1: entered promiscuous mode [ 237.305023][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.342301][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.530084][ T9704] team0: Port device team_slave_0 added [ 237.571867][ T9774] lo speed is unknown, defaulting to 1000 [ 237.591415][ T9704] team0: Port device team_slave_1 added [ 237.714456][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.721640][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.781508][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.841707][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.861373][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.900545][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.121336][ T9803] lo speed is unknown, defaulting to 1000 [ 238.138383][ T9704] hsr_slave_0: entered promiscuous mode [ 238.147112][ T9704] hsr_slave_1: entered promiscuous mode [ 238.153896][ T9704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.161755][ T9704] Cannot create hsr debugfs directory [ 238.901039][ T5835] Bluetooth: hci4: command tx timeout [ 239.477950][ T9704] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.504342][ T9704] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.526382][ T9704] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.565175][ T9704] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.687079][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'. [ 239.739395][ T9832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 239.779019][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'. [ 239.823408][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1081'. [ 239.859114][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.902454][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.932707][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.939965][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.983804][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.991111][ T6812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.136820][ T9853] 8021q: VLANs not supported on lo [ 240.340733][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 240.634549][ T9827] lo speed is unknown, defaulting to 1000 [ 240.653036][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.840691][ T9704] veth0_vlan: entered promiscuous mode [ 240.899102][ T9704] veth1_vlan: entered promiscuous mode [ 240.979351][ T5835] Bluetooth: hci4: command tx timeout [ 241.022917][ T9704] veth0_macvtap: entered promiscuous mode [ 241.051075][ T9704] veth1_macvtap: entered promiscuous mode [ 241.112725][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.153529][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.193986][ T6822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.222263][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.272878][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.349412][ T9894] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 241.358279][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 241.398288][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.588590][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 241.654295][ T9903] block nbd0: not configured, cannot reconfigure [ 241.867559][ T6812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.925790][ T6812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.080709][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.111616][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.518228][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 242.836917][ T9928] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 242.858508][ T9928] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 243.182900][ T9893] lo speed is unknown, defaulting to 1000 [ 243.216049][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 243.381591][ T9943] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.565322][ T9945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.041886][ T5935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.252897][ T5935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.350776][ T5935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.452539][ T5935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.626518][ T5935] bridge_slave_1: left allmulticast mode [ 244.646081][ T5935] bridge_slave_1: left promiscuous mode [ 244.655070][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.681773][ T5935] bridge_slave_0: left allmulticast mode [ 244.687598][ T5935] bridge_slave_0: left promiscuous mode [ 244.693436][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.044681][ T5924] IPVS: starting estimator thread 0... [ 245.166179][ T9975] IPVS: using max 29 ests per chain, 69600 per kthread [ 245.366782][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.388089][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.398350][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.423803][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.439771][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.549606][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.562386][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.573891][ T5935] bond0 (unregistering): Released all slaves [ 245.761556][ T9978] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 246.074898][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.084013][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.094731][ T9991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.102914][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.579160][ T9968] lo speed is unknown, defaulting to 1000 [ 246.652942][ T9981] lo speed is unknown, defaulting to 1000 [ 246.849543][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 247.076221][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 247.544892][ T5835] Bluetooth: hci4: command tx timeout [ 247.630927][ T5935] hsr_slave_0: left promiscuous mode [ 247.637541][ T5935] hsr_slave_1: left promiscuous mode [ 247.643494][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.657549][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.668062][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.675510][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.725417][ T5935] veth1_macvtap: left promiscuous mode [ 247.731675][ T5935] veth0_macvtap: left promiscuous mode [ 247.738767][ T5935] veth1_vlan: left promiscuous mode [ 247.744142][ T5935] veth0_vlan: left promiscuous mode [ 247.795585][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 248.348507][ T5935] team0 (unregistering): Port device team_slave_1 removed [ 248.392406][ T5935] team0 (unregistering): Port device team_slave_0 removed [ 248.743938][T10029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1133'. [ 248.762888][T10029] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1133'. [ 248.819881][T10030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1133'. [ 249.208183][ T9981] chnl_net:caif_netlink_parms(): no params data found [ 249.261472][T10039] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 249.269438][T10039] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 249.621789][ T5840] Bluetooth: hci4: command tx timeout [ 249.750305][ T9981] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.770655][ T9981] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.789972][ T9981] bridge_slave_0: entered allmulticast mode [ 249.801524][ T9981] bridge_slave_0: entered promiscuous mode [ 249.812989][ T9981] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.852826][ T9981] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.878684][ T9981] bridge_slave_1: entered allmulticast mode [ 249.892646][ T9981] bridge_slave_1: entered promiscuous mode [ 250.052008][ T9981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.064628][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.095401][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.110383][ T9981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.187853][T10079] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 250.202540][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 250.236968][ T9981] team0: Port device team_slave_0 added [ 250.273505][ T9981] team0: Port device team_slave_1 added [ 250.441207][T10087] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1147'. [ 250.453728][ T9981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.470717][ T9981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.510095][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 250.530760][ T9981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.589903][ T9981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.622308][ T9981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.680425][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1147'. [ 250.713589][ T9981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.869403][T10092] syz_tun (unregistering): left promiscuous mode [ 250.892758][T10050] lo speed is unknown, defaulting to 1000 [ 251.054067][ T9981] hsr_slave_0: entered promiscuous mode [ 251.077511][ T9981] hsr_slave_1: entered promiscuous mode [ 251.084016][ T9981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.112532][ T9981] Cannot create hsr debugfs directory [ 251.475079][T10101] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 251.553892][T10078] lo speed is unknown, defaulting to 1000 [ 251.696908][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 252.135160][T10116] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1154'. [ 252.187925][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 252.247608][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 252.529796][ T9981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.598862][ T9981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.624390][ T9981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.682890][ T9981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.955712][T10126] lo speed is unknown, defaulting to 1000 [ 253.134616][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1159'. [ 253.293426][ T9981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.761307][ T9981] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.777308][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 253.887041][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.894234][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.949040][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.956289][ T6814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.063038][T10158] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1165'. [ 254.098046][T10158] 0·: renamed from hsr0 (while UP) [ 254.163155][T10158] 0·: entered allmulticast mode [ 254.172095][T10158] hsr_slave_0: entered allmulticast mode [ 254.191517][T10158] hsr_slave_1: entered allmulticast mode [ 254.208580][T10158] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 254.479247][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 254.590516][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880223eac00: rx timeout, send abort [ 254.627026][T10172] batman_adv: batadv0: Adding interface: ip6gretap1 [ 254.644028][T10172] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.679889][T10172] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 254.732398][T10175] batman_adv: batadv0: Removing interface: ip6gretap1 [ 254.905723][ T9981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.060405][ T9981] veth0_vlan: entered promiscuous mode [ 255.099978][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880223eac00: abort rx timeout. Force session deactivation [ 255.105601][ T9981] veth1_vlan: entered promiscuous mode [ 255.321398][T10181] syzkaller0: entered promiscuous mode [ 255.331466][T10187] netlink: 'syz.4.1172': attribute type 11 has an invalid length. [ 255.346287][T10187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1172'. [ 255.367226][T10181] syzkaller0: entered allmulticast mode [ 255.433892][T10189] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1171'. [ 255.453608][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 255.534508][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 255.567544][ T9981] veth0_macvtap: entered promiscuous mode [ 255.607487][ T9981] veth1_macvtap: entered promiscuous mode [ 255.663647][ T9981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.700896][ T9981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.723291][ T6814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.750985][ T6822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.782972][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812173][ T6822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.857804][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 255.900178][ T6822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.972526][T10178] lo speed is unknown, defaulting to 1000 [ 256.145710][ T6814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.165442][ T6814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.442336][T10199] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 256.486193][T10199] netlink: 'syz.4.1174': attribute type 2 has an invalid length. [ 256.597790][ T6835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.616073][ T6835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.950897][ T5840] Bluetooth: hci4: command 0x040f tx timeout [ 258.356742][T10229] [ 258.359123][T10229] ====================================================== [ 258.366159][T10229] WARNING: possible circular locking dependency detected [ 258.373195][T10229] 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 Not tainted [ 258.380319][T10229] ------------------------------------------------------ [ 258.387360][T10229] syz.4.1179/10229 is trying to acquire lock: [ 258.393441][T10229] ffffffff8f66a218 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 258.402810][T10229] [ 258.402810][T10229] but task is already holding lock: [ 258.410192][T10229] ffff8880536ea770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 258.419547][T10229] [ 258.419547][T10229] which lock already depends on the new lock. [ 258.419547][T10229] [ 258.429971][T10229] [ 258.429971][T10229] the existing dependency chain (in reverse order) is: [ 258.439181][T10229] [ 258.439181][T10229] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 258.447218][T10229] lock_acquire+0x120/0x360 [ 258.452285][T10229] _raw_spin_lock_bh+0x36/0x50 [ 258.457606][T10229] nr_rt_device_down+0x12a/0x720 [ 258.463103][T10229] nr_device_event+0x137/0x150 [ 258.468420][T10229] notifier_call_chain+0x1b3/0x3e0 [ 258.474098][T10229] dev_close_many+0x29c/0x410 [ 258.479327][T10229] netif_close+0x158/0x210 [ 258.484287][T10229] dev_close+0x10a/0x220 [ 258.489080][T10229] bpq_device_event+0x2f4/0x600 [ 258.494483][T10229] notifier_call_chain+0x1b3/0x3e0 [ 258.500137][T10229] __dev_notify_flags+0x18d/0x2e0 [ 258.505689][T10229] netif_change_flags+0xe8/0x1a0 [ 258.511168][T10229] dev_change_flags+0x130/0x260 [ 258.516542][T10229] dev_ioctl+0x7b4/0x1150 [ 258.521484][T10229] sock_do_ioctl+0x22c/0x300 [ 258.526716][T10229] sock_ioctl+0x576/0x790 [ 258.531577][T10229] __se_sys_ioctl+0xfc/0x170 [ 258.536695][T10229] do_syscall_64+0xfa/0x3b0 [ 258.541730][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.548148][T10229] [ 258.548148][T10229] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 258.555985][T10229] lock_acquire+0x120/0x360 [ 258.561025][T10229] _raw_spin_lock_bh+0x36/0x50 [ 258.566323][T10229] nr_rt_device_down+0xa9/0x720 [ 258.571806][T10229] nr_device_event+0x137/0x150 [ 258.577098][T10229] notifier_call_chain+0x1b3/0x3e0 [ 258.582762][T10229] dev_close_many+0x29c/0x410 [ 258.587979][T10229] netif_close+0x158/0x210 [ 258.592910][T10229] dev_close+0x10a/0x220 [ 258.597750][T10229] bpq_device_event+0x2f4/0x600 [ 258.603201][T10229] notifier_call_chain+0x1b3/0x3e0 [ 258.608826][T10229] __dev_notify_flags+0x18d/0x2e0 [ 258.614462][T10229] netif_change_flags+0xe8/0x1a0 [ 258.619937][T10229] dev_change_flags+0x130/0x260 [ 258.625325][T10229] dev_ioctl+0x7b4/0x1150 [ 258.630179][T10229] sock_do_ioctl+0x22c/0x300 [ 258.635280][T10229] sock_ioctl+0x576/0x790 [ 258.640116][T10229] __se_sys_ioctl+0xfc/0x170 [ 258.645215][T10229] do_syscall_64+0xfa/0x3b0 [ 258.650224][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.656712][T10229] [ 258.656712][T10229] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 258.664620][T10229] validate_chain+0xb9b/0x2140 [ 258.669889][T10229] __lock_acquire+0xab9/0xd20 [ 258.675072][T10229] lock_acquire+0x120/0x360 [ 258.680086][T10229] _raw_spin_lock_bh+0x36/0x50 [ 258.685360][T10229] nr_remove_neigh+0x25/0xe0 [ 258.690461][T10229] nr_add_node+0x1d9f/0x2570 [ 258.695557][T10229] nr_rt_ioctl+0xc12/0xd50 [ 258.700477][T10229] sock_do_ioctl+0xdc/0x300 [ 258.705484][T10229] sock_ioctl+0x576/0x790 [ 258.710321][T10229] __se_sys_ioctl+0xfc/0x170 [ 258.715434][T10229] do_syscall_64+0xfa/0x3b0 [ 258.720509][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.726940][T10229] [ 258.726940][T10229] other info that might help us debug this: [ 258.726940][T10229] [ 258.737189][T10229] Chain exists of: [ 258.737189][T10229] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 258.737189][T10229] [ 258.751021][T10229] Possible unsafe locking scenario: [ 258.751021][T10229] [ 258.758461][T10229] CPU0 CPU1 [ 258.763813][T10229] ---- ---- [ 258.769164][T10229] lock(&nr_node->node_lock); [ 258.773925][T10229] lock(nr_node_list_lock); [ 258.781043][T10229] lock(&nr_node->node_lock); [ 258.788333][T10229] lock(nr_neigh_list_lock); [ 258.793011][T10229] [ 258.793011][T10229] *** DEADLOCK *** [ 258.793011][T10229] [ 258.801156][T10229] 1 lock held by syz.4.1179/10229: [ 258.806260][T10229] #0: ffff8880536ea770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 258.816044][T10229] [ 258.816044][T10229] stack backtrace: [ 258.821961][T10229] CPU: 1 UID: 0 PID: 10229 Comm: syz.4.1179 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 258.821980][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.821988][T10229] Call Trace: [ 258.821995][T10229] [ 258.822002][T10229] dump_stack_lvl+0x189/0x250 [ 258.822026][T10229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.822042][T10229] ? __pfx__printk+0x10/0x10 [ 258.822053][T10229] ? stack_trace_save+0x9c/0xe0 [ 258.822068][T10229] print_circular_bug+0x2ee/0x310 [ 258.822081][T10229] check_noncircular+0x134/0x160 [ 258.822094][T10229] validate_chain+0xb9b/0x2140 [ 258.822111][T10229] __lock_acquire+0xab9/0xd20 [ 258.822127][T10229] ? nr_remove_neigh+0x25/0xe0 [ 258.822141][T10229] lock_acquire+0x120/0x360 [ 258.822155][T10229] ? nr_remove_neigh+0x25/0xe0 [ 258.822169][T10229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.822182][T10229] ? nr_remove_neigh+0x25/0xe0 [ 258.822194][T10229] _raw_spin_lock_bh+0x36/0x50 [ 258.822210][T10229] ? nr_remove_neigh+0x25/0xe0 [ 258.822222][T10229] nr_remove_neigh+0x25/0xe0 [ 258.822235][T10229] nr_add_node+0x1d9f/0x2570 [ 258.822248][T10229] ? __asan_memcpy+0x40/0x70 [ 258.822264][T10229] ? nr_call_to_digi+0x126/0x1b0 [ 258.822276][T10229] nr_rt_ioctl+0xc12/0xd50 [ 258.822289][T10229] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 258.822306][T10229] ? kasan_quarantine_put+0xdd/0x220 [ 258.822321][T10229] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 258.822336][T10229] ? apparmor_capable+0x137/0x1b0 [ 258.822371][T10229] ? capable+0x89/0xe0 [ 258.822386][T10229] ? nr_ioctl+0x1b1/0x3b0 [ 258.822402][T10229] sock_do_ioctl+0xdc/0x300 [ 258.822415][T10229] ? __pfx_sock_do_ioctl+0x10/0x10 [ 258.822426][T10229] ? __lock_acquire+0xab9/0xd20 [ 258.822444][T10229] sock_ioctl+0x576/0x790 [ 258.822456][T10229] ? __pfx_sock_ioctl+0x10/0x10 [ 258.822467][T10229] ? __fget_files+0x2a/0x420 [ 258.822478][T10229] ? __fget_files+0x3a0/0x420 [ 258.822489][T10229] ? __fget_files+0x2a/0x420 [ 258.822501][T10229] ? bpf_lsm_file_ioctl+0x9/0x20 [ 258.822516][T10229] ? __pfx_sock_ioctl+0x10/0x10 [ 258.822526][T10229] __se_sys_ioctl+0xfc/0x170 [ 258.822541][T10229] do_syscall_64+0xfa/0x3b0 [ 258.822553][T10229] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.822563][T10229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.822574][T10229] ? clear_bhb_loop+0x60/0xb0 [ 258.822586][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.822597][T10229] RIP: 0033:0x7f739f18e929 [ 258.822610][T10229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.822620][T10229] RSP: 002b:00007f73a0063038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.822634][T10229] RAX: ffffffffffffffda RBX: 00007f739f3b6080 RCX: 00007f739f18e929 [ 258.822642][T10229] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000006 [ 258.822650][T10229] RBP: 00007f739f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.822657][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.822663][T10229] R13: 0000000000000000 R14: 00007f739f3b6080 R15: 00007fff69666168 [ 258.822676][T10229] [ 259.729288][ T6814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.784202][ T6814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.841462][ T6814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.901733][ T6814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.008252][ T6814] bridge_slave_1: left allmulticast mode [ 260.014415][ T6814] bridge_slave_1: left promiscuous mode [ 260.023730][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.032542][ T6814] bridge_slave_0: left allmulticast mode [ 260.039248][ T6814] bridge_slave_0: left promiscuous mode [ 260.044930][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.151087][ T6814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.162456][ T6814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.172394][ T6814] bond0 (unregistering): Released all slaves [ 260.524817][ T6814] hsr_slave_0: left promiscuous mode [ 260.530940][ T6814] hsr_slave_1: left promiscuous mode [ 260.541650][ T6814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.556285][ T6814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.564091][ T6814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.572313][ T6814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.585671][ T6814] veth1_macvtap: left promiscuous mode [ 260.592020][ T6814] veth0_macvtap: left promiscuous mode [ 260.602978][ T6814] veth1_vlan: left promiscuous mode [ 260.609056][ T6814] veth0_vlan: left promiscuous mode [ 260.783409][ T6814] team0 (unregistering): Port device team_slave_1 removed [ 260.810555][ T6814] team0 (unregistering): Port device team_slave_0 removed