last executing test programs: 4.315911922s ago: executing program 4 (id=1927): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x3, 0x2}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7d}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x7}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 4.132920963s ago: executing program 4 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000380)=0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_tcp_buf(r9, 0x6, 0x12, 0x0, &(0x7f00000000c0)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB], 0x70}}, 0x0) 3.47312126s ago: executing program 2 (id=1939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rxrpc_rx_ack\x00', r0, 0x0, 0x80}, 0x18) unshare(0x40600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) 3.381667911s ago: executing program 2 (id=1942): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x54}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.252510703s ago: executing program 4 (id=1944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000200)="5323188a0b3e56242dd757e568fd557b70959c946eceb4f4228a8d4ec3a1eba965ab969e8059d66249e42e6084c0263e5a8e499b324c72600b9a7428b35fa99680ffa03b67dc3eefb81ce8e2ba3112ea524645b1d77a82887ca23ef19488ea5ec3cbbc0232e29f670506c194bd9a13ccb3c9ee8d7cab4e6e0da2173d524fc6040dcd5e2083af4d16547ac2db8bb5d66458c31b68510ffb92674cf26b89c4898460fd0513ed076f34477a4e72fdfbe7c6792fb94cf723ac1a666114ff7aac4bcf602e4722083ed444812c0464ab35409413f1facb224389544034c8210c4b87", 0xdf, 0x20000001, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffb, @mcast1, 0x1}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0x4}, 0xb1daae89922439f3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd22, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) 2.703889182s ago: executing program 3 (id=1951): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d8, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001080), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000010c0), 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r5}, 0x38) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000800)=0x1, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @private2, 0xb}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0x22, 0x200, 0x66, 0x8, r10}, 0x10) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r11], 0x8c}, 0x1, 0xba01}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r5}, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) 2.609016498s ago: executing program 4 (id=1952): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50800}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r6, 0x6484f000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='mmc_request_start\x00', r11}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (async) setsockopt$inet6_buf(r10, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002500000", 0xfe60) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r14 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r14, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r14, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) (async) bind$tipc(r14, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r13, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r15}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) 2.42903666s ago: executing program 1 (id=1954): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.402415936s ago: executing program 4 (id=1955): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d5310000000400"], 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\x008z`', @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r5, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf259250e2c408000300", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)={[{0x2b, 'net'}, {0x2d, 'net_prio'}, {0x2d, 'net_cls'}]}, 0x18) 2.240639393s ago: executing program 1 (id=1956): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0xe, 0x523b, 0xda, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x8001}}}, &(0x7f0000000140)=0x84) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r3 = socket$unix(0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001440)=0x0) sendmsg$unix(r3, &(0x7f0000001500)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x7fff}, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000002c0)="5fc8d08ddf3adc31940e3abe1433300ddcc6158fd874da4f4815ba735feb18be6f639fad185d8f22d7d2aeb3444bd35c0176530d03891085ffec60e61568be3e78d18e54eac0587c56d267dbbb478f7e06c3aded057d14ad76d4cac071e6ed8a874a2b1492f2ddcab701c49f7d000167ada492d65d7271c2e1d8b95c770cb637edd3d1b041c3489e97550ca1b5377e67e31a80ce349d56ed3f3ed109ab131f5908fa65a9f62fd4be7c4c2d17f635ddc147389d00f4ce5dc70a599277923a722d50a528ece3fa9138508d9b9e158dbb91f6d74b1db5f96bbccc018f2bce9cacb284e71e57922391803fcdac694921d9a4c129de860b287c5cd78b59985c6dbb625b43c923f03662c52b5871eb83d3ea6e684b5c97ab4a2e18c8980375cc3585c764d45aaf97943e19cc8f1f7e5fbc428aeb0923387e09b246a8fa873790a5fdd034b7111fb03fc7e1d36b8c010e2adcf23fbc9027e50bf05289ad4ac0c7e739ce120742d2ecf9c9d82979af65b6d6b4da205482b81995df3facf5135e7776a5b047c8248ef00c0cdf93ac3a881a73a92adc32633a36b2229ca368970a58913ee3410307160cb1aa2f5de32ed5558113a9e581e4775416143a6fed0845e36f50fd09daf9d1701e05f139090153d76417b49faeda01667c5ba5e4d8293a8eb87e0ee31065b5f75e9fc50e1e7d040d17adcd52bdcb809b49b43c0f8044cdbda5d625d51ad482002967100ed693b1b812c32d4f44d60718870d215b426e31000eef4562bdba1fdbc9ec8d0237585578177fe60d05cb2a8d5f894db8f6b4ed6c47381ee95f7835faa8249e0a3c8775aadca0ddbb6b8fe567ea544ed0646f5436519d3bbb0f4a7062c13d8560c36c5ff3f8f5169527971b47c74912eee4ed0f51cf94233ec0019b16a8b8b6125ba958aa4ad3a6269ad6281800920bcbf3934ff1d8b221fb6a864efb8f2f786e0a445351e81044a7eff00c94215e210427a39fbb430c9af41196776931e1cc3b338c8646e5d7fea29cb15644e1e1e7caf36678608d9c0487715f1bc5ae1bf3faf179de710c1f622864de9a534e4cdf03e02829172d70b5c8b866c2b06f0731893d983a029b671e5e731bc9505ef0726aa14d26ec2b4013d27831b901a9bf5eaff7e184bebca0e51daddb70194786b98f926327f125ca03ce2b5d5e4e1ee0c81a655ffe0f46ebf948c7e6845d7605fb2963d5e4e2663ffc21848e801bc9af80a64150f32720bf068718a6f6ba90da051d6439389579bf59eaf0d72fb085e115a20d624dcc9459802d61f880a4c9ef61b0999339fda81a085e38ba8667e0e1657758f4a17acdcbf1de8c926c5aece1b826b9cb0c3a8bb6224ceac1dd055efa889ab38d59756f1e2def76c9af0d48718ec14e9204fdeb961ec6c62ba16351c17493047b80ec09b77837ebab96cde74bbe5b92fbd170b0f061652f7beb4bfd7da9c231b57dab2ad65637ac2fbad8c5aa771e91837caa539871f857458be7564f2a7b6cf4248a03dfdfc2ac7a97365d4ea436d8316f3c3dca83f68263d2cfb90c95d80c96703f9ef31cc099acf9a7025bef495f331da4e56bc1141c4ae7adc58713d1bd158df6a6948f40f78ba60728ea0bc215735102166622c4423882c0a71edc3d76b9b24f145fcd5fb61a648f39d3990b56fbce9404b242e0a696f229c868f99d370e3d169e86d673ed1d2171bc2eb2c9e7ac2af31808870128fcf52e9771427b9219bf052fa24b4ae40608a44f70e86c87c3de290a935cedf112e057c5fe84e96aa63d4ed092bdb99def43a2f55d8d6727536c599f2bb3e3be39a625fc5fb9c9a0e54db980f49850553c0f0caa1e81d066d171c0b7c5ca67cd2399ecb991e5abab17c96281523a0daaae8a6dc83d1a1de2e555b22708675022c73f4651504996afb7a27c5ca0f3e7d51db7201b9910750035ae9daf54bbd5275b5d68af33e42de29936b80b03ca3430e69a459e37f2b41fe301b837ba660872b08d50c7879902a499320da2fc83d09fb251c94660ad6fa19dabd719182df9bd1468836f02edfe6b540a1480fefa0ac62af4692fc4915d731bf1a4559aa75a026e38ea203cd5f319dad34bb21e8f9fa81eb786089d8fa6b5caae38c5898d3b2113b68e856412f6cfd48f72828ac0bde571b6a94626ae1d7ca4a3e569d9f0f573235624845ad5e55cc8ce3a2490093f752a949307b5867395ac20d970a241821233426d0732b9355dc046e1dee4b441307c31e25e4853333daf14b5f89f1801384c11db2f3dd11e9962d25f699f3f52fcb995269110acdb928127526dbe052362c068b49ec45b422b7de0d873058b6704e2342212265276b05e438a507cfc217abccdf195c8b35fa9446e0498167c138209e7ea9e6cbd723314d66fd825f3063371810bd6db38b90611dc4aca36d9c7a5b6bc6ade5f4b4d3188f8f08042131754add8b9f142964f7200129738e5db9ee6a87561d52cffea676adceab2d4e2d1d72ade5ea4e5db0660671ac39892e9435585a2f0611f7069f29d699425c56a6653d89b7f1140c4e62cbaba426b404cde12949413523624bd9287bbe642ab92323c6b582c044931188c55b1507cbcec25891bd791deef9f40f83ce950743bd1a55311d4f6e0e231beda7bfee548b559b6f07cee0639bca5f87205bb718a1c83fd8ca3df92864bda4cc0e03ba847050e5b5f72cd12d31f95c1139c3e989d3d6d598b9ecfeeb4f8d1fd8d7ac0c4dc8b89a6cf0429962eafe59544fff6950cff679fdac14f383be8026d2ad691320fcb0dc823ea929ca4e65138efb4af8c9e850b0023021f6c9ec38c2de6674104f44a7643fdeff276f1e3f7b63373b949519fed4d4f74f93de86f2fa38499787ee736a4818429f425bf51557ca30b3e34dcc68ba758bd0911f24f1edcbefdb2e9931fd031914741ca44a39d37021d5f10dc139a4f4c4b7fb54f272a3e9766d26e04d24b3a51f4f161c994efe6e33b8e77d909f70e393faa5df6f1e66e1587af6cdb35f8b71709ba1b1d8f00ae627e6068be39aaccd947a072610ea101c1403fe002945cf9282036e6470cbe6ff9e0baab4a8988218ea1dfd4458c55f381597d1d7c527f9ed6bc802d36072c0fada230b864f48cc2f2e0df59d400cd7ef7165e60354c51645970e8e148e7c395ee5129fef015ee6f898c9f316100287cb6cf8d23922aed10e358253293f1393d8c2af19180f06cf000cbe0883ea442a1faa2785160ceb27056365f98a9a6e163b85a0850a4da3cd8f30534ca00f70a5b8e8055096bb58d315d1528e8713e9c4f65b7ed332ba63724de6901330ddaf3103815b598f5b7b181f7c2ac54e24e1291a974508543e7a422652f539546a49a4f4efdfe2609c34c4d94db2f0b7c665ad80c7e1cd431459c4c90b389cc5be2762d691cc0cca80b17bc616e5af3a986cb33887d26828c94c69964804c3b2f79254bc4ab30366737ae113c6632bec4e5cd4d2f6baaf2584ef7d2afabb3611068c6068aac88786dbeab7d3ee1e7181579f93f84b387e87cb94ade0738026f2c2234847529fa7103ff714ee1579f7251f7c23b18f4672b61ff8478aeb246d92a64eec7b84cefce1d0a973bf52a620f37243987a0f1378551c86e8d31a66e9a80ac130c39498d181cb1a260c386a2d8b15230fa103e0df48e76b6b1347d81c7abfe6b83b7a6bbe27da2ea3414d1dff21705912684f15e0737e30500f5f1ff95c411f2962a21f338bbe868284b595412e69c213e5b8d32daed956aa50b9ded215b9a4319d5bf68aff401762d94d27dcd70f919784bc92c9ddf435a6408e024aa1bd3c4639a5bec2b55d7cf178d55e116cf1f5f088652220a3f5f45e851e7c328afab53e2d5dfd7862850060fdc6ac6d0f111172885eb1446b2188a84c4df544927b67abb80c4948a7dd9b272ff3e1f4a7ceb922d6430d544fa8c20fff0c12ce4ffa6ea43959612e47de09d5a352fe07de156749c69e80554c2aacc8a1cd483361004a2319dfe516dd2a32cc7fd1a87b7824341015e63477d2d0b212cec62b704d8dacee6c99d61a01f7c8799095aaf14b8e43bf8ada9383cd2e993eafff4591e965aa68bc8fd43bfd6ea535b365489a83ba574abf133729812f8c05c2d8024550af1f7afbfb1969d907bc7c8bb34865e60f8eaa8d0c3f294562b26559795058ba8630a528d0062225491c45227b43506f92e656dd8ebe02f12f9fa3447e0ea28bb696fad0684792ccd8cadd9c380f3408f0a835f61f1b308ccc49d96c2653622b2673e814545b8bd52cad5ecf31fd3fdcff3ea0338a647211e447216f24b794fc3a13657d995663d7ca99e5d662380f1c9ccf31aaf40886a3375b24d05e890f0e5a75dff48f16173126e270b6b04ed98af094427e525e7ce261c813400ff8ab4dab6c7b72b58d54b7d9e5903838bd508fb9b15e6db31c8c39fa3f4364c5033da79a7abf3459c7755466a25881461049142d0e1477d0082958844778502a5ef09544eb1aef47e4b8e49b55883e3d059d6a73aeb08edcca52514472cfc453cfb315ccc7ba24f8ca5703741603b2777871c9039898e44ec0899055a91ba43264af918ecc48f8fcc239c177b21468e9cf3d1c4dca8ca3b395f66c13832b877b1a24edbd323591ec9a1a80a42f231683f32a71bcce0894a72e39800ad2eddcd17c9eed09456845e24d19cf9ee5bff6bd462496f23aabca9fba0a69dc191ef44294c2f9c1dafc8f986c6b0bb39848fb7ccb88102fdd0e2ea5d38138b9df2ebebbf4d154e2ac4c4eb7ab065a7d88e8072204a06a06ce42ce7019ccfd89e9e49c4af70d4afe5dfab7ded1646a33dfd2a652ccd1531ee4315dc4af03aff13f4425d97981496e5027f46ce6d5438b50c74a08a5c714c965010123cfc79996ae244e69bd432b07620b5a54f6cc5a19be13656f551b31698c4294c88c87859ca2b5f2f81951e7637c4528c88acde8459b5c80fcccf859f8d97b6c301643694d8d84fc6b3f2fdc3bc8c677cd1d6f0e18900edecfd100347c67cf31d115df7d4319889c66dcada0a261e6e8aac943729c5ff5592031ec21c36022f6f3f54e495f322a3e056fd1db2ded1b14123276e334a9b5570376adb39207d10baad8f927558cf46f4eeee6be8407e1528a31a8bdd6189e60abfbc1d08392dfd6b339bcfa91aef81ccec700da8d6c3bdc24e3f187976fc046c44a03aa0a2ff8eec065849bb568a0312f51cb3bc8eed8c073dbe03a8271f60464b30471dda0ce8a52e9d9471b9e90d742a3f3628144d7c68e7877918f36d65d0bba3d0cdc65dfce76e120c6896d12d878acfca5ac28c09c6c4dd0fe27f5340c13312d8ef577e42520f1d3423fbdeb86dffd623d3513c8c340e90adebec5bbb201f899a37afc4793422f7ea370e85462ae82f6ccfc368cb7fc3819439346cbf014e895b1394b5635b92469a91bb80437cdcfd36aee1c691fb93dc6b5fb739b13fd327c2f95ba90ceaa18ae9a665031306138645ae5c7a9bd95c5699d56789378627950a37c9cac9880b3c1b380c3e57fdd4ae8db15fbe8c223dcf94bd05195a552e35df3053936db962f5dcda0b65402eb8743c57506bf914b3b714823fe541cfcb771fb18d71d8e93f5049a09b130b2094607e71e29ff8625593446dff3a5c2ebe30dfa30c41357e05b76018b73d3215408f53b5ac71dae9feb4b64a65c03759549f00b99dd76854b7ffdd22d7c2b0d85948a8bdf2d7c510c06355e930707e43c97022b924614ec831882a18cd314156f551391058646ac9a1e798861845dc3b7b9b450593ecb553473bdb5f6493", 0x1000}, {&(0x7f00000012c0)="6d0092d8e641eb0771caf347838f104b619cc4469789935fc970443706006431d0eb7e85c225ddc1916c72a752f0101616cd0b2a5097ac37542acb6ef150a551029f30563754751d4365e03861d15a1c97cac3b38e2ecc76216588dfa8f9b1534ce8bd0104d491e0d028277660d5789894ae5dd46026a6a3452c6c5286da2fbe3660602fa39a7b04ca2dab29811dcaddb168b89fdf0a", 0x96}, {&(0x7f0000001380)="3d5e5c8007499eccd9b567ca0383bd1e30d614bca977b57a30f5b53a5de042476f0cd569", 0x24}], 0x3, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [r4, r2, r0, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}], 0x48, 0x20000000}, 0x40000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001540)={r1, @in6={{0xa, 0x4e24, 0x5, @private2, 0x9}}, 0x200, 0xd, 0x7fffffff, 0x7fff, 0x28, 0xf5, 0x7}, &(0x7f0000001600)=0x9c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000017c0)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x11, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa9a, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x1, 0xb, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='syzkaller\x00', 0x717, 0x80, &(0x7f0000001740)=""/128, 0x40f00, 0x10, '\x00', r8, 0x0, r4, 0x8, &(0x7f0000001800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x0, 0x8000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001880)=[{0x2, 0x2, 0xf, 0xa}, {0x0, 0x3, 0x10, 0x8}, {0x5, 0x4, 0x1, 0xb}, {0x4, 0x5, 0xd}, {0x5, 0x5, 0xf, 0x6}], 0x10, 0x3, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000019c0)=@assoc_id=r1, &(0x7f0000001a00)=0x4) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001d00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x1fc, r10, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc876}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000884}, 0x43) gettid() setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001d40)={r9, 0x100}, 0x8) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000001d80)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000001e00)) openat$cgroup_ro(r4, &(0x7f0000001e40)='pids.events\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000001e80)) r11 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r11, &(0x7f0000001ec0)={0x10, 0x0, 0x25dfdbfe}, 0xc) socketpair(0x1d, 0x3, 0x10000, &(0x7f0000001f00)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000001f40)={r7, 0x9, 0x6}, 0x8) sendmsg$OSF_MSG_ADD(r11, &(0x7f0000003080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003040)={&(0x7f0000001fc0)={0x1060, 0x0, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x8001}, 0x64, 0x1, 0x5, 0x8, 0x1e, 'syz0\x00', "0f98df721413d181c58724c5c275ffcac8c6eec37d7f93d20a66783110c887c3", "facfc8e5995a684c39378977a8dd531e242a380f7d90c2af927bd122b316590a", [{0x10, 0x0, {0x0, 0x80000000}}, {0x3, 0x7f, {0x0, 0x3}}, {0x9, 0x3800, {0x2, 0x100}}, {0x4, 0x0, {0x3, 0x6}}, {0x8, 0x0, {0x1, 0x1}}, {0x1, 0xfff7, {0x3, 0x7}}, {0x2, 0x200, {0x3, 0x2}}, {0x0, 0x7f22, {0x1, 0x1}}, {0x401, 0x5, {0x0, 0x767}}, {0x5, 0x5, {0x0, 0x6}}, {0x7ff, 0x1, {0x0, 0x5c90}}, {0x4, 0x81, {0x3, 0x6}}, {0x9, 0x1, {0x2, 0x39b9}}, {0xf, 0xc, {0x2, 0x80000001}}, {0x4, 0x0, {0x0, 0x4}}, {0x3ff, 0x0, {0x3, 0x6f2e}}, {0x6, 0x1000, {0x3, 0x3}}, {0x0, 0x2, {0x3, 0x40}}, {0x6, 0x4, {0x1, 0x7}}, {0x2eb9, 0x3, {0x2, 0x7}}, {0x8c2a, 0x9, {0x1, 0x8}}, {0x4, 0x8, {0x2}}, {0x1, 0x5, {0x3, 0x9}}, {0x6, 0xc, {0x0, 0xffffffff}}, {0xffff, 0x0, {0x1, 0x8}}, {0x8000, 0xbb5, {0x1, 0x3}}, {0x400, 0x4, {0x1, 0x303}}, {0x8, 0x3ff, {0x3, 0x4}}, {0x7d6, 0x7, {0x3, 0x10}}, {0x1, 0x1, {0x0, 0x6c}}, {0x5, 0x8, {0x3}}, {0x9, 0x9, {0x0, 0x950}}, {0xe7b6, 0x1, {0x1}}, {0x9, 0xf, {0x1, 0x1}}, {0x8, 0x0, {0x0, 0x6da}}, {0x74f3, 0x6, {0x2, 0x6}}, {0x100, 0xac, {0x2, 0x5}}, {0x8e24, 0x6, {0x3, 0x40}}, {0x665, 0x3, {0x3}}, {0x32ef, 0x0, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x1ff}, 0x3, 0x2, 0x0, 0x1, 0x1b, 'syz0\x00', "85f63026cd9a89118be7ffd4f0455338f4d79cf65c28323c98fb119cd2e45c77", "b39289092bda6358712efe45bba7ee33bdd8ba4244b50bd7986805bf4454fdd8", [{0x9d5, 0xe6, {0x3, 0x7ff}}, {0x7, 0xa, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0xc}}, {0x0, 0x0, {0x3, 0x86a}}, {0x8, 0x1, {0x2, 0x1fe}}, {0x4, 0x3, {0x0, 0x1}}, {0xfffe, 0x1, {0x3, 0x3}}, {0x3, 0x9, {0x1, 0x4}}, {0x7, 0x401, {0x0, 0x2}}, {0x8, 0x40, {0x1, 0x40}}, {0x0, 0x7, {0x2, 0x59c}}, {0x2, 0x828, {0x2, 0xffff}}, {0x5, 0x7, {0x1, 0xb}}, {0x9, 0x4, {0x2, 0x2}}, {0x7615, 0x2}, {0x101, 0xfff9, {0x3, 0x9}}, {0x1ae9, 0x0, {0x1, 0x1}}, {0x4, 0xca1a, {0x2, 0x2}}, {0x8, 0x8, {0x3, 0xffff0001}}, {0x4, 0x1, {0x3, 0x4}}, {0x7, 0x8, {0x2, 0x1}}, {0x2, 0x4, {0x2, 0xa}}, {0x1, 0xfffa, {0x1, 0xf}}, {0x800, 0xb3a, {0x3, 0x1b43f2e2}}, {0xef, 0x3ff, {0x0, 0x6}}, {0x4342, 0x2, {0x2, 0x80000000}}, {0x1000, 0x5, {0x2, 0xfffffffc}}, {0x3, 0x2, {0x3, 0xffffffff}}, {0xfced, 0x7, {0x0, 0x800}}, {0x200, 0x3, {0x0, 0x4}}, {0x7}, {0xb, 0x8000, {0x2, 0x6}}, {0x6, 0x8001, {0x3, 0x8b0}}, {0xa, 0x200, {0x0, 0x81}}, {0x401, 0x8, {0x1}}, {0xd6, 0xfff0, {0x2, 0x7ff}}, {0x1, 0x6, {0x0, 0x2}}, {0x4, 0x5, {0x2, 0x5}}, {0x2, 0x100, {0x2, 0x3e}}, {0xf, 0x6679, {0x0, 0xffff}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x9, 0x2, 0x5, 0x7, 0xb, 'syz1\x00', "94aed165c71a11024efc773e2a7a090691e0144e69645b0358c9bd9303bacd92", "0411307c1c28b4d786769a90746dc75c3524fe1dff04dafe3f4264f533d1ff24", [{0x358e, 0x0, {0x0, 0x5271}}, {0x7fff, 0x235, {0x0, 0x4}}, {0xc4, 0x6, {0x1}}, {0x41, 0xae8, {0x1, 0x6430acce}}, {0x9, 0x0, {0x2, 0x20}}, {0x3f, 0x6, {0x3, 0x80000000}}, {0x2, 0xa6fe, {0x3, 0x3}}, {0x5f9, 0x5, {0x3, 0x4}}, {0x7, 0x1, {0x1, 0x10000}}, {0x7, 0x2, {0x3}}, {0x0, 0x4, {0x1, 0x5}}, {0x1ff, 0x3, {0x3, 0x1000}}, {0xfffa, 0x9, {0x2, 0xffff7381}}, {0x9, 0xd2b, {0x0, 0x7}}, {0x1ff, 0x7, {0x3, 0x5}}, {0x1, 0x69f, {0x0, 0x9b36}}, {0x9, 0x5, {0x1, 0x2}}, {0x7, 0x9f88, {0x2, 0xf16}}, {0x4, 0xc3, {0x2, 0xc}}, {0x0, 0x0, {0x3, 0x4}}, {0x7, 0x101, {0x1, 0xa1}}, {0x1, 0x2, {0x0, 0x8}}, {0x4, 0xb, {0x3, 0xb49}}, {0x7, 0x2, {0x0, 0x5}}, {0xd, 0x7, {0x3, 0x1}}, {0xe, 0x1, {0x3, 0x4}}, {0x10, 0xd67, {0x2, 0xffffffff}}, {0x8, 0x0, {0x0, 0x1}}, {0x7, 0xe, {0x3, 0x40}}, {0x4, 0x80, {0x1, 0x3}}, {0x2, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x3, 0x6}}, {0x6, 0x7, {0x2, 0x3}}, {0x7, 0x7, {0x1, 0x7}}, {0x0, 0xd703, {0x3}}, {0x3, 0x0, {0x3, 0x1000}}, {0x5ed9, 0x1, {0x1, 0x4}}, {0xa75, 0xe035, {0x1, 0x80000001}}, {0xd, 0x3, {0x1, 0x1}}, {0x5, 0xff80, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0xa85}, 0x9, 0x3, 0x98d, 0x9, 0xf, 'syz1\x00', "44c706fd66ca6f77278023c6b3558958764347fdb9512e30d0e9b25da2cb1b7c", "c7bb977bc7153059a1da7427bb548a1cf708070baa99b1c17938075ae255b51e", [{0x2, 0xffff, {0x2, 0x8}}, {0x0, 0x10, {0x0, 0x2}}, {0x8, 0x3, {0x2, 0x7ff}}, {0x11, 0x8, {0x3, 0x6}}, {0x2, 0x2, {0x3}}, {0x2, 0x6, {0x3, 0xfffffff7}}, {0x1, 0xfff7, {0x2, 0x7fffffff}}, {0x1, 0x2, {0x2, 0xc}}, {0x81, 0x401, {0x1, 0x4}}, {0x5, 0x0, {0x2, 0x7}}, {0xff, 0x81, {0x3, 0x9}}, {0x8, 0x888, {0x3, 0x5}}, {0x99, 0x2, {0x3, 0x2}}, {0x3, 0x9, {0x2, 0x10000}}, {0x5, 0x3, {0x0, 0x8}}, {0x291, 0x4, {0x0, 0x1a0a}}, {0x4, 0x200, {0x1}}, {0x2, 0x6, {0x0, 0x200000}}, {0x6, 0x1, {0x1, 0x4}}, {0xfff, 0xf5cd, {0x3, 0x5}}, {0x0, 0x4, {0x1, 0x1}}, {0x8, 0xa, {0x1, 0x401}}, {0xd, 0x39f, {0x3, 0x3}}, {0xb06, 0x4, {0x1, 0x6}}, {0x26, 0x200, {0x3, 0x7}}, {0x7, 0x8001, {0x3, 0x5}}, {0x0, 0x8, {0x3, 0x7}}, {0x1, 0x8, {0x3, 0x2e7}}, {0x1000, 0x7, {0x2, 0x95}}, {0x4, 0x3ff, {0x2, 0x9}}, {0x83, 0x2, {0x0, 0x1}}, {0x9, 0x0, {0x0, 0xdb}}, {0x9, 0x303, {0x3, 0x8}}, {0x0, 0x9, {0x3, 0x7}}, {0xa5b, 0x9529, {0x3, 0x40}}, {0x1000, 0x2, {0x0, 0x7}}, {0xff, 0x1, {0x2, 0xc2}}, {0x44f, 0xb1, {0x0, 0xfd8d}}, {0x0, 0x6, {0x2, 0x7}}, {0x3, 0x0, {0x3}}]}}}, {{0x254, 0x1, {{0x3, 0xa}, 0x0, 0x5, 0x9, 0x8001, 0x6, 'syz0\x00', "b3493190abd75566d07934c82d35c362e171bd18a51feb8455087cc83425e14d", "c95610f576012dfa49e88056a1eb8e08ffc9acb7a4ddc3a5df4c40a4088c46e7", [{0x4, 0x401, {0x0, 0x80000}}, {0x4, 0x2, {0x2, 0xd55}}, {0x46, 0x26d, {0x2, 0xd48}}, {0xc, 0x1, {0x2, 0x404}}, {0x7, 0xb03, {0x3, 0xffffffff}}, {0x7, 0x8, {0x3, 0x1}}, {0x5, 0x3f, {0x3, 0xfffffffb}}, {0x7, 0x4cea, {0x0, 0x4}}, {0x4b, 0x1ff, {0x0, 0x80000000}}, {0x8, 0x80, {0x0, 0x10001}}, {0x3, 0x9, {0x1, 0x6}}, {0x8, 0x1f, {0x1, 0xd7}}, {0x2, 0x4, {0x3, 0x2}}, {0xb, 0x3, {0x2, 0x10000}}, {0xe89, 0x101}, {0x3, 0x10, {0x2, 0x5}}, {0x1ff, 0x7, {0x3, 0x7}}, {0xceb, 0xb, {0x2, 0x2}}, {0x400, 0x7f, {0x3, 0x7}}, {0xa, 0x5, {0x2, 0xb8}}, {0x0, 0x8, {0x1, 0x5}}, {0x3, 0x6, {0x1, 0x2}}, {0x9e, 0x5, {0x2, 0x10000}}, {0x6, 0x0, {0x1, 0x8}}, {0x8001, 0x40, {0x0, 0x5}}, {0x2, 0x3, {0x1, 0x4}}, {0x3b, 0x2, {0x0, 0x6}}, {0x1000, 0x0, {0x1, 0x6ff397c9}}, {0x2, 0x1000, {0x3, 0x5}}, {0x4, 0x4, {0x3, 0x4eb}}, {0x5, 0xc, {0x3, 0x8}}, {0x9, 0x7f, {0x0, 0x5}}, {0xa12, 0x8, {0x0, 0xcba}}, {0xb, 0x2, {0x1, 0xf}}, {0x1, 0x3, {0x0, 0x4}}, {0xfff8, 0x8, {0x0, 0x80000000}}, {0x9, 0x3, {0x1, 0x7}}, {0x6, 0x2b6, {0x1, 0x7}}, {0xe, 0x7f, {0x2, 0x7f}}, {0x0, 0x463, {0x1, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0xe}, 0x8, 0xa1, 0x3, 0xff, 0x1f, 'syz0\x00', "fd4ae39d431b2151fbe045b48740000e800894e3fd8367dbd0520460a7be6452", "0cdddcb748948c1582e5f61043ccfcda18465b4849f4735c5aff38741ff90510", [{0x401, 0x9, {0x3, 0xe0000000}}, {0x0, 0xfffd, {0x0, 0x4}}, {0x0, 0x4, {0x0, 0x8}}, {0x9, 0x7ff, {0x0, 0x3}}, {0x4, 0x498, {0x2, 0x9}}, {0x4, 0x1, {0x0, 0x3}}, {0x5, 0x80, {0x0, 0xb11}}, {0x8, 0xcb49, {0x1, 0x90}}, {0x2, 0x2, {0x3}}, {0x8, 0xf, {0x1, 0x10000}}, {0xfffc, 0x400, {0x2, 0x2}}, {0x401, 0x80, {0x3, 0x3ff}}, {0xb6, 0x8000, {0x2, 0x3}}, {0x9, 0x1, {0x0, 0xf}}, {0x0, 0x9, {0x1, 0x5}}, {0x4, 0x8, {0x1, 0x5}}, {0xfffd, 0x80, {0x0, 0x7820}}, {0x4164, 0x8, {0x2, 0x3}}, {0x5, 0x6e, {0x1, 0xc5}}, {0x9, 0x2, {0x1, 0xc}}, {0x1, 0x9, {0x2, 0xb7bb}}, {0x7, 0x6, {0x3, 0x5}}, {0xeaa, 0x1, {0x1, 0x10000}}, {0x9, 0x2, {0x1, 0x3}}, {0x7, 0x8000, {0x3, 0x2}}, {0x6, 0x1, {0x1, 0xfff}}, {0x0, 0x7, {0x1, 0xaf34}}, {0x0, 0x2, {0x3, 0x5}}, {0xa3e5, 0x1, {0x2, 0xf}}, {0x0, 0x8, {0x1, 0xfffffffd}}, {0x0, 0x6, {0x2, 0xce}}, {0x0, 0x4000, {0x1, 0x7}}, {0x8, 0xc, {0x1, 0x990}}, {0x5, 0x7, {0x3, 0x2}}, {0x5, 0x12c8, {0x0, 0x7}}, {0x0, 0x0, {0x0, 0x8}}, {0x7, 0x6a, {0x0, 0xc9}}, {0xe, 0x56, {0x3, 0xffffffff}}, {0x7b, 0xc2, {0x3, 0x7f}}, {0xa54, 0x7fff, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0xc, 0x9, 0x6, 0x4, 0x23, 'syz1\x00', "f720573b2987214becc8d947aa2469a7d67bd166b6367313a0a7aace0c38fe12", "b5acfbed913aba7339734019aaa47b1b24306a2b77d31e5af29e969831af1cb4", [{0x0, 0x401, {0x1, 0x40}}, {0x9, 0x7, {0x2, 0x9}}, {0xffe5, 0x4, {0x2, 0x7}}, {0xff, 0xc378, {0x0, 0x6}}, {0xa7, 0x1, {0x3, 0x2}}, {0x7, 0x0, {0x3, 0xf}}, {0x1, 0xb, {0x3, 0x3ff}}, {0x6, 0xaa, {0x2, 0xf614}}, {0x4, 0x0, {0x0, 0x8}}, {0x8001, 0xd295, {0x2, 0x7f}}, {0x6, 0x9a2, {0x3, 0x3}}, {0x7fff, 0xfff, {0x3, 0x8}}, {0x9, 0x2, {0x1, 0xfffffff7}}, {0x7ff, 0xa56f, {0x2, 0xb}}, {0x5, 0x3, {0x0, 0x5}}, {0xb0c, 0xe1c2, {0x1, 0x6}}, {0x9, 0x8, {0xe2f683100134c641, 0x2}}, {0x4, 0x0, {0x0, 0xfffff479}}, {0x4, 0x1, {0x1, 0x1}}, {0x9, 0x7, {0x2, 0xf}}, {0x400, 0x8, {0x1, 0x6e}}, {0x7fff, 0x4, {0x1, 0xfffffff5}}, {0xe, 0x2, {0x1, 0x7}}, {0x6, 0x6, {0x2, 0x7}}, {0x100, 0xe58a, {0x2, 0x5}}, {0x4fb, 0x379, {0x0, 0x1}}, {0xe8, 0xfffa, {0x0, 0xae6}}, {0x0, 0x7, {0x3, 0x2}}, {0x9, 0x397, {0x3, 0x6}}, {0xfff8, 0x9, {0x2, 0x3}}, {0x0, 0x8, {0x3, 0x7fffffff}}, {0x1, 0x1000, {0x0, 0x4}}, {0x9, 0x31bc, {0x3, 0x8}}, {0x400, 0x5, {0x3, 0x8}}, {0x2, 0xffff, {0x1, 0x821}}, {0x400, 0xc251, {0x1, 0x6}}, {0x744, 0x3, {0x0, 0x8}}, {0x6, 0x965, {0x2, 0x4}}, {0x6, 0x6, {0x3, 0xd}}, {0x4, 0x7f, {0x0, 0x400}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x90}, 0x4044000) socket$caif_stream(0x25, 0x1, 0x4) 2.188999245s ago: executing program 0 (id=1957): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8404) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x352f9000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x3a, 0x6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x4, 0xb, 0x9}, &(0x7f0000000180)=0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0x8, 0x200, 0x7, 0x3f8, 0x5, 0x0, [{0x7fffffffffffffff, 0x9e6a, 0x5, '\x00', 0x110f}, {0x3, 0x5, 0x8, '\x00', 0x70d}, {0x8000, 0x100000000, 0x40}, {0x4, 0x5, 0x100, '\x00', 0x680}, {0x4, 0x7, 0x7, '\x00', 0x84}]}) socket$vsock_stream(0x28, 0x1, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10250100000023272ea3849b11ed9a3fb4abdac9fa7ed4b1d4974bd14f0014edb90cc1db95b66395361741186cada577a60ec9cf546418"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c844) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000740)=0xdfa, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 2.00744498s ago: executing program 1 (id=1958): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfdef) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfdef) (async) 2.000990113s ago: executing program 4 (id=1959): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000001f711211000000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0x140, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xe79}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x100}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x1000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x98}, {0x5, 0x12, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x44}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x40, 0x10, 0x4, 0x6, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @empty, {[@generic={0x94, 0xf, "8b5cb2b905f063f862c673ffe5"}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000a4b42a2c8017de65d1c573d3dc0048755d25eb76fe6b4457e7f836f7681fe433", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x3d, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000001f711211000000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0x140, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xe79}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x100}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x1000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x98}, {0x5, 0x12, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x44}, 0x800) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x40, 0x10, 0x4, 0x6, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x65, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @empty, {[@generic={0x94, 0xf, "8b5cb2b905f063f862c673ffe5"}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000a4b42a2c8017de65d1c573d3dc0048755d25eb76fe6b4457e7f836f7681fe433", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x3d, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) (async) 1.914438787s ago: executing program 0 (id=1960): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x1000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}}, 0x44) 1.684282828s ago: executing program 2 (id=1961): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000480000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004000000000000000000000000000000000000004ed37961c0739f413babcfb66ec257c99f033261b3a21aa7936b471467fbccabd534484642fa02a0874ba47ef9a1d0ffb42007db1b9574acb696305b1d31d852dd67f6a262ac1bd67cc36744f1f55737b2a9abc390b44be5a13510dadad0ee245204e5cf42d9885f6bc302feea0594f29fc6fd9f11b058d4be0c7e2d0d58175322e6e6b7c632c35e2a818b8a5c640851c13ce06a7dccd5d3cd9ca714cdb1f401225388187910c45bb9"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090000000000fedbdf25070000001c00018008000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x30}, 0x1, 0x0, 0x0, 0x45040}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51", 0x3f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000001c0)={@local, @multicast2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x618e, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r8, 0x3, 0xece0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) 1.683492873s ago: executing program 0 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xc10, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'wg0\x00', {'pim6reg1\x00'}, 0x7}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140)={0x4, 0xc, 0x29, 0x0, 0x6, 0x4, 0x1, 0x5, 0x5, 0x5, 0xe, 0x3, 0x81, 0x2}, 0xe) sendto$inet6(r2, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r4, 0x1ff, 0x1a68, 0x3, 0x100, 0x34}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000340)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff}, {0xf, 0xfffb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}]}, 0x38}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000002c0)) 1.620934784s ago: executing program 3 (id=1963): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r1, r0, 0x29}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ff7f0000000000000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000023605007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1ff}}}, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x26}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r12, 0xe985e4df3848afb5, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}}, 0x0) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r13, 0x103, 0x2, &(0x7f00000004c0)=0x120, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.233248216s ago: executing program 1 (id=1964): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x100, 0x74bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x57, 0x9, 0xf9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x6}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0xc4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}]}]}, 0x38}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000008c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x25, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xd52}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000000000002400000000000000290000003200000000000000000000000000ffffe00000", @ANYRES16], 0x40}}], 0x1, 0x8000) 969.176508ms ago: executing program 1 (id=1965): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x10, 0x8000, 0x0, 0x9, {{0x10, 0x4, 0x2, 0x0, 0x40, 0x67, 0x0, 0x25, 0x29, 0x0, @multicast2, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x18, [@dev={0xac, 0x14, 0x14, 0x37}]}, @noop, @cipso={0x86, 0x24, 0x3, [{0x6, 0x7, "ff2eb37ec0"}, {0x5, 0x9, "2446bda174f673"}, {0x0, 0xe, "116a070117dbfa7dce3b40c1"}]}]}}}}}) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="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", 0xfe}, {&(0x7f0000000180)="775038a2bf05a736f1982c5382c10dc45ca684a2f59dacf212a278c38a9bf918a2d52173125da6822f2d79", 0x2b}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="ffb4f0841a83799e77ac6bf10df6ce5838f9d9e08068fd3a37e4db2d9476e246376e8c0123587c5be8f81ee519a63fe3eb997d6f1a26a48e4c4ab7a7245e681554f6736c38a3ba359035229a17274c3473e4c9e30b993d48224e4fc60034290402e7b07de6e9dcf3f14f7f12861029da81aa57e02ab1c84bed2421b9231fc2e49673bf8e232afa0103b6d7127e6d09e7d27be112a4c841ce70aed2fc4bea7ca5bd0c6d65e7721f1f017c47ae1b6f9659dc4de5c0ceb72e57", 0xb8}, {&(0x7f00000002c0)="cca322062be63a010beb4e1f2283057604bbdd4bffc517fcdb617221116511525787bee1d9f9d57db284f94ba8aed9d55b629d551b7ced64497d7196a8ebdb4412351f3588d5988017ab3955dbf4d24269ed9510fb6f2919776cafac00108fa497ae3ff56aefecc2e28f6108d55981dc142c23d1497ef2659693bd691c63e75a1dd0f0c6a4a76476ca9bbd07a699a88cb24a4e734b3d2e633da7aac0b6d5fa852e7864687b1c924231f902e047a0e3d5911ed1a38bf0cc17e7451873423ef4088da518867e407caef0066aaab42ed949f4fd9669acf2a8a120e1d8318df86c1251", 0xe1}], 0x5, &(0x7f0000000500)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2f, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x2f, 0x7, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0xc, 0x4, [0x1, 0x1, 0x3, 0x9]}}, @ra={0x5, 0x2, 0xfff7}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x108}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8) 968.369075ms ago: executing program 0 (id=1966): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x10, 0x18, 0x5, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000002c0)="23000000010006", 0x7) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000019c0)={@val={0x2000, 0x6000}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x5fd, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb"}}}}}}}, 0x52) 851.866138ms ago: executing program 1 (id=1967): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e39a1117", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000680)={'vxcan1\x00', {0x2, 0x0, @local}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) socket(0x22, 0x2, 0x24) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff86, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff86, 0x44, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 847.803754ms ago: executing program 3 (id=1968): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@xdp={0x2c, 0x4, 0x0, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="f4c4b83ca2f3417cf3788d87a55bf16d7c6d1f0e81594a821d97978eee298f4a538e881dd1fa014775c79fa42ace1f21db1aa4d8b37734083fd526e8894b86a3295d07bff01faee1a112c35e7707ff724f8945c5ef593e7c4f9fd16d3a6a931aed956590e3783b435b7c", 0x6a}, {&(0x7f0000000140)="a5cf533cc07f9132e96deda191ff84204d9821be83e9f896c1597387d240f7ccfca3571c19b5e67e192866f35b91bdf1e3637acf60f27512aa3f00807773f2569fee49cde8192fb53ba8f40701ade14c37350701a176a8e60722854984c9c50b860358a3d609e3e2cf699a361e7fc590b5702e305be04e515cce8de84219837607c6b4d98e875089d9e084332c34f57b8ff186d6a91e711dc7251ef17743d6", 0x9f}], 0x2, &(0x7f0000000240)=[{0x18, 0x103, 0x2f49378a, "c91a"}, {0x80, 0x107, 0xfffffff8, "de3f955e2c79a9a39945d3ab00d6b287be0b985b320af4fb84ff45fc04a6218ce99b62991090dc3b0be7bc664713d9a32602d53ffa3c07fbec734c5b91787238bb38baca5211bdd1de2d93527b144af32086928455820ad310746c4c98c958c33d306ae749cee43194220e3141e8fb"}, {0x20, 0xff, 0xda9, "6cbe19a6a808416115306b5c57"}], 0xb8}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xffffffffffffffff) 679.310884ms ago: executing program 2 (id=1969): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x3b, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0x4, 0x5, [0x400, 0x47, 0xfffffffffffff9e5]}}, @hao={0xc9, 0x10, @mcast1}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}]}, 0x68) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x3b, 0xb, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xc, 0xd4, [0x8, 0x33cb, 0x6, 0x30000000000000, 0x10001, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x9}, @ra, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x5}]}, 0x68) r1 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r1, &(0x7f0000003000)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000680)=""/185, 0xb9}], 0x9, &(0x7f0000000800)=""/53, 0x35}, 0x1}, {{&(0x7f0000000840)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/239, 0xef}, {&(0x7f00000009c0)=""/217, 0xd9}], 0x2, &(0x7f0000000b00)=""/124, 0x7c}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b80)=""/82, 0x52}, {&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/134, 0x86}], 0x4, &(0x7f0000001dc0)=""/121, 0x79}, 0xb2d}, {{&(0x7f0000001e40)=@llc, 0x80, &(0x7f0000002340)=[{&(0x7f0000001ec0)=""/190, 0xbe}, {&(0x7f0000001f80)=""/211, 0xd3}, {&(0x7f0000002080)=""/15, 0xf}, {&(0x7f00000020c0)=""/136, 0x88}, {&(0x7f0000002180)=""/142, 0x8e}, {&(0x7f0000002240)=""/216, 0xd8}], 0x6}, 0x3}, {{&(0x7f00000023c0)=@generic, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/193, 0xc1}, {&(0x7f0000002540)=""/78, 0x4e}, {&(0x7f00000025c0)=""/89, 0x59}], 0x3, &(0x7f0000002680)=""/7, 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000026c0)=""/186, 0xba}, {&(0x7f0000002780)=""/63, 0x3f}, {&(0x7f00000027c0)=""/25, 0x19}, {&(0x7f0000002800)=""/221, 0xdd}, {&(0x7f0000002900)=""/85, 0x55}, {&(0x7f0000002980)=""/216, 0xd8}, {&(0x7f0000002a80)=""/53, 0x35}, {&(0x7f0000002ac0)=""/242, 0xf2}, {&(0x7f0000002bc0)=""/249, 0xf9}], 0x9, &(0x7f0000002d80)=""/138, 0x8a}, 0xe1a}, {{&(0x7f0000002e40)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/141, 0x8d}], 0x2}, 0x5}], 0x7, 0x2040, &(0x7f00000031c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000003200), &(0x7f0000003240)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x5) bind$inet6(r3, &(0x7f0000003280)={0xa, 0x4e22, 0x6, @private2, 0x5d3}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000032c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000037c0)={r3, 0xe0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000003500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000003580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000003600), &(0x7f0000003640), 0x8, 0x66, 0x8, 0x8, &(0x7f0000003680)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000038c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000003840), &(0x7f0000003880)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003940)={0x15, 0x12, &(0x7f0000003340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe68}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xe4}, @ldst={0x0, 0x0, 0x1, 0x4, 0xc, 0x20, 0x8}]}, &(0x7f0000003400)='syzkaller\x00', 0x14000, 0x0, 0x0, 0x41100, 0x4, '\x00', r2, @sk_reuseport=0x28, r5, 0x8, &(0x7f0000003480)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, &(0x7f0000003900)=[r8, r9], 0x0, 0x10, 0xfffffe01, @void, @value}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a40), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000003b40)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x4c, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000003b80)={r0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000003bc0)="d31e5db75f76887b69ef228837174f5d", 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000003c00)={'netpci0\x00'}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000003c40)={0xffffffffffffffff, 0x1, 0xd, r2, 0x8}, 0xc) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003cc0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x1c, r12, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003e00)={'pimreg0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003e40)=0x0) sendmsg$nl_xfrm(r11, &(0x7f0000004180)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004140)={&(0x7f0000003e80)=@report={0x2b8, 0x20, 0x300, 0x70bd2c, 0x25dfdbfc, {0x6c, {@in=@multicast1, @in=@multicast2, 0x4e23, 0x3, 0x4e21, 0x7, 0xa, 0x80, 0x80, 0x3a, r6, 0xee00}}, [@algo_crypt={0xfb, 0x2, {{'xchacha20-generic\x00'}, 0x598, "4bdc512824e0b8983a513bb4e66598e12409a8d7bddf2cc0c359a12b5015421dadabc997e16640205dba6b6fe84eb5a2a3043fca0b9c750e77aa26d16673c2560c3e566ac6af7b32af93a79a989d0c50450e40d9a77485fc43806074d6ee75b1d2a1fae3c291f4bb39988b81ad941478418a2af886db32fe78ecad8f899fed324a0679bfbc15d3e735f8c6e57fc17de79c13022ea2d1a7a3f2ffe47f4465701e94dbf95c473997a5741367c8834297386397d9"}}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x8, 0xfc}}, @etimer_thresh={0x8, 0xc, 0xb3}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 0x4e24, 0x0, 0x2, 0xe0, 0xa0, 0x5e, r13, r14}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x2, 0xfffffffffffffc01, 0xc, 0xfffffffffffffffb, 0x124, 0xfff, 0x4, 0x400}, {0xffffffffffffff8c, 0xc, 0x6, 0x2}, {0x5, 0x384000, 0x6}, 0x70bd28, 0x3500, 0xa, 0x4, 0x2, 0x6c}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd29, 0x70bd28, 0x70bd26, 0x70bd26, 0xe, [0x2, 0x7, 0x0, 0x2587]}}, @proto={0x5, 0x19, 0x2b}, @address_filter={0x28, 0x1a, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xa, 0x5}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4004090}, 0x40) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004200), r11) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000004300)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x28, r15, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 613.062274ms ago: executing program 3 (id=1970): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8404) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x352f9000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x3a, 0x6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x4, 0xb, 0x9}, &(0x7f0000000180)=0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0x8, 0x200, 0x7, 0x3f8, 0x5, 0x0, [{0x7fffffffffffffff, 0x9e6a, 0x5, '\x00', 0x110f}, {0x3, 0x5, 0x8, '\x00', 0x70d}, {0x8000, 0x100000000, 0x40}, {0x4, 0x5, 0x100, '\x00', 0x680}, {0x4, 0x7, 0x7, '\x00', 0x84}]}) socket$vsock_stream(0x28, 0x1, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10250100000023272ea3849b11ed9a3fb4abdac9fa7ed4b1d4974bd14f0014edb90cc1db95b66395361741186cada577a60ec9cf546418"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c844) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000740)=0xdfa, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 405.496215ms ago: executing program 0 (id=1971): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000b00)={'nat\x00', 0x0, 0x3, 0x0, [0x9, 0x0, 0x7fffffffffffffff, 0x4991, 0x9, 0xf43], 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x900, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000b00)={'nat\x00', 0x0, 0x3, 0x0, [0x9, 0x0, 0x7fffffffffffffff, 0x4991, 0x9, 0xf43], 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x78) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x900, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (async) 404.345896ms ago: executing program 3 (id=1972): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES64=r2], 0xdd12}, {&(0x7f0000000cc0)=ANY=[@ANYBLOB="240400002b00000429bd7000fddbdf254c36b688e52cc6bd2810275db99f14c3df9f7c2c690c6c67e95ba43cd298812b5ac48b89badb9f002c7f250ec41e0e531b7305f118c426f82912bf3fe88a2cfb5de1d036e284cd901400a400fe8000000000000000000000000000bb4e01b480f6fa1e2e168ecbf0ab0f6f387de96b611aad46906f9cfa8c7924bddea0071a384fd06d50a47c5e279e22b50a2213f8f501b5909e69519155a3d7ef97c745d8f7587d6307cafa52c19607049eca13899eac64e15fd98b89dc7f5b8384ae5caa83d01aeed13b6d60525a21864f308f0b0ff8bd1ab0bb701b7b9ddc16de7c30213eca219a6aff2e20a4640e6c216092f83fa22bb551b8262b83cb78ecbd2c592a763bb367a0d232b7b6796281a6cfa1fa7fa691c9cf726b16af55246fe8b6e3fb4735098383a9c719da137a53205fe7b2f1ff9816e6ce313cacf3d7ed459b38a817870a9e7007a421a8096e8a8fcbc0de714cff99cec205e98d7764792111adfc02100e243cf4262816cb2dfc3a2f7b66719f0360d791aa1a271d6fe36d1dc2c5bebb2f6322591dafc7da0164c3b41ee568eab645fbc284b928acd09b405d28147e534308000a000000000000000700cf00407b00005501a980f373d7813c819aed9f0d93c637ea51be5fa31fcf000a71b33971fe3be0c6480eae0df5a186cec8b20ea13b6e55813b2bf9b05775906e41ea464f9e2d805e47ea8bc42a189059c9a78673b55fa5147f6dfc3175abecf71a6ea9c58eeff39f7246765f45370b8386305f666724e3dd3939909d89b5c745831cb1d3326a4c8898f09a4e3463ee3776ce408330660536a26642c857da71cdda4cba2ba752bf9dd873f5598e331c31370757b9c2c594020f36c8f655afb2b13d83f2eb7ba82cd7aea64061f63085719a7d02ba7142c12ac3f0b992120c9a96c9eeb634b0a567c2e66dfd1c4c8f97ade76edf9a80cb2166dc471f8bf4b1f6e2d7cca2eb63ab79c4b72599c16c5fa9364e5570e5074e961f394282d983a9b7885f68805fc7896e4b6f69c2659525b6eb2b87e9b8067320c7e957dd82de5796daecc6742df4f7fbbc78f8a4ac47f727c63da8bb01899f8709b70c8500000004000280100003800400cb8008000700", @ANYRES32=r0, @ANYBLOB="1400890000000000000000000b0000dfcabc240000000000dd005b800d2613a8e40662bc1bcfc537730c1be3a2c2093f3d94255441dfa566777caf990927cd87cb8bf433d62c723178aac19dc658279b110d243dd2b9f4610310a07e0b952c7d40261a4447662f107947b02765ffebd428a2c1bf195a9a4d0824982289bc22cf68350d1569b85c237f35fe80fe9a21a49cbb055d4d118e875e659856b6aed9bc7bf9d012d1a40e69c121784315ebdd6cf20af34d2e1b2773efdc4fe0e9d6771efbc4d2efaa08391246e792811dfb31a7078e4faf746021c48b51fa244046b9128904001f80", @ANYRES32=r4, @ANYBLOB="05003c0000000000000000"], 0x424}], 0x2}, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES64=r2], 0xdd12}, {&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1400890000000000000000000b0000dfcabc240000000000dd005b800d2613a8e40662bc1bcfc537730c1be3a2c2093f3d94255441dfa566777caf990927cd87cb8bf433d62c723178aac19dc658279b110d243dd2b9f4610310a07e0b952c7d40261a4447662f107947b02765ffebd428a2c1bf195a9a4d0824982289bc22cf68350d1569b85c237f35fe80fe9a21a49cbb055d4d118e875e659856b6aed9bc7bf9d012d1a40e69c121784315ebdd6cf20af34d2e1b2773efdc4fe0e9d6771efbc4d2efaa08391246e792811dfb31a7078e4faf746021c48b51fa244046b9128904001f80", @ANYRES32=r4, @ANYBLOB="05003c0000000000000000"], 0x424}], 0x2}, 0x10) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000"], 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000"], 0x8) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="ffc0c99c", 0x4, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)="ffc0c99c", 0x4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r6, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x1000) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 296.814017ms ago: executing program 2 (id=1973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x29, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1fbf3dcf, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7ff0, 0x1000, &(0x7f00000006c0)=""/4096, 0x41100, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000080)={0x1, 0x0, 0xb, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x3, 0x3, 0xe, 0xa}, {0x5, 0x3, 0xb, 0xb}, {0x3, 0x4, 0x1, 0x9}, {0x1, 0x4, 0xd}, {0x2, 0x4, 0x6, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) (async) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) (async, rerun: 32) recvmmsg(r1, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) (rerun: 32) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 125.010221ms ago: executing program 2 (id=1974): socketpair(0x2b, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) ppoll(&(0x7f0000000280)=[{r2, 0xc004}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0) socketpair(0x2b, 0x5, 0x1, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) accept$alg(r1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) (async) ppoll(&(0x7f0000000280)=[{r2, 0xc004}], 0x1, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) (async) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0) (async) 68.516866ms ago: executing program 0 (id=1975): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) getsockopt(r4, 0x4000006, 0xf53d, 0x0, &(0x7f00000001c0)) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000200)={r2}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000100)) 0s ago: executing program 3 (id=1976): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000820404201c0012800b00010062726964676500000c00028008000300843d4633e90ba4e6b2bbe2ac1d000000a0d33c007387026fd39cb110cfc1a2b7ad14aa70a63aa8a7ce0ebbcc1f20f2199a8d36e83383f90220cc4337bea8e23b99860a0a38f7dda0cc4d6654c7547bb2990393fa5a216cabda62aa1df612304411fb75e095ad220bb3ddc414dc383b0d6040f1835307fa5b2aecd6649fbc901e45ecef4a137af299c6ec0e0b2d548e304b9040dcb0af6fcaeec168f2ce8640e41a8d75e817f4ddf010bad3255dd00bbcc86950ad00701197cd9768f1b3a3b016e276d03bb448a55ba5b6acc3a053c46680e8613326f7627e53b82f3725e4bc9b7b4ebac0fe3931d101928e4e0352794097289fdad946409dbe4d963d67e25761b948abeb8da3"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x40010, r0, 0x32db1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008844) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850100000300000095000000000000006b1260108f84c440851846b6235d0eb660f8ef5159bd4634068db2a04dc7e0622b9ce903061dfc803f32cc2e2fbbb9f3d66a023b1b1dcb1a706ee69085cbe8a19785fe812cbd0cc29eb596124511b66e909abb5bd744b749c1237e18e93abf0832ccee40515e599f8a5aa141952e8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x81, 0x0, r1, 0x7, '\x00', r2, r3, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)=""/51, &(0x7f00000001c0)=0x33) write(r4, &(0x7f0000000000)="2e009700010001", 0x7) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet6(r0, &(0x7f0000000480)="28755d7b3c1d37295e77c83e194b60663be35589189261233db61e81f7dc6f02a54e1a17be2241beebf6f6a584581ecaefd87aba738c036b31337d6469c6be30d571116480559902afa918196c9f207c55a88b014be394330987bab336c3dcc3133f27995c25fccdc04b3f103f1fc618026e6126cbaa15b2b88a0221ac8020a299da908c44fbc80957576eca16a37ac0a9ba4625061ae117dccca0b5f9e494f92d60627dc407f12823fa0926fc3bc9ff8d7d7e75c7b932a1a7b14d5343f0573268de9958defdb86e0f1b1338a08aed95e693048b47d34b49", 0xd8, 0x4000010, &(0x7f0000000240)={0xa, 0x4e24, 0x8, @local, 0x7}, 0x1c) kernel console output (not intermixed with test programs): one [ 140.642161][ T7353] bridge3: entered promiscuous mode [ 140.647611][ T7353] bridge3: entered allmulticast mode [ 140.656976][ T7353] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 140.699663][ T7357] IPVS: using max 33 ests per chain, 79200 per kthread [ 140.717246][ T7355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.807711][ T7365] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 140.853153][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.882995][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.890894][ T7209] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.188942][ T7209] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.199989][ T7209] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.747485][ T7401] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 141.788087][ T7401] bond4: entered promiscuous mode [ 141.793621][ T7401] bond4: entered allmulticast mode [ 141.802290][ T7401] netlink: 'syz.0.379': attribute type 26 has an invalid length. [ 142.370618][ T7427] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 142.452290][ T7430] lo speed is unknown, defaulting to 1000 [ 142.582426][ T7436] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 142.583048][ T7434] tipc: Can't bind to reserved service type 0 [ 142.616305][ T7434] __nla_validate_parse: 10 callbacks suppressed [ 142.616320][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 142.652565][ T7436] bond3: entered promiscuous mode [ 142.666809][ T7438] netlink: 120 bytes leftover after parsing attributes in process `syz.3.389'. [ 142.681626][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.389'. [ 142.694946][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 142.709041][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 142.718428][ T7436] bond3: entered allmulticast mode [ 142.842512][ T7439] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 142.856511][ T7439] bond3: (slave bridge2): making interface the new active one [ 142.864196][ T7439] bridge2: entered promiscuous mode [ 142.872534][ T7439] bridge2: entered allmulticast mode [ 142.882175][ T7439] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 142.973510][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 143.098373][ T7455] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 143.552760][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 143.584252][ T7469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.403'. [ 143.657402][ T7469] gretap1: entered promiscuous mode [ 143.781259][ T7474] netlink: 'syz.4.405': attribute type 1 has an invalid length. [ 143.852994][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 143.882804][ T7478] netlink: 'syz.4.405': attribute type 26 has an invalid length. [ 143.888120][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 144.043582][ T7474] bond5: entered promiscuous mode [ 144.049045][ T7474] bond5: entered allmulticast mode [ 144.062855][ T7478] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 144.075677][ T7478] bond5: (slave bridge4): making interface the new active one [ 144.083875][ T7478] bridge4: entered promiscuous mode [ 144.089621][ T7478] bridge4: entered allmulticast mode [ 144.096002][ T7478] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 144.192401][ T7479] bond4: entered promiscuous mode [ 144.197996][ T7479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.431557][ T7479] bond4 (unregistering): Released all slaves [ 144.498218][ T7504] netlink: 'syz.4.413': attribute type 4 has an invalid length. [ 144.606855][ T7504] syzkaller1: entered promiscuous mode [ 144.612466][ T7504] syzkaller1: entered allmulticast mode [ 144.747128][ T7514] netlink: 'syz.3.416': attribute type 15 has an invalid length. [ 144.987707][ T7522] tun0: tun_chr_ioctl cmd 1074812118 [ 145.013109][ T7522] tun0: tun_chr_ioctl cmd 1074025673 [ 145.016228][ T7526] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 145.034349][ T7527] tun0: tun_chr_ioctl cmd 1074812118 [ 145.085817][ T7526] bond3: entered promiscuous mode [ 145.094014][ T7526] bond3: entered allmulticast mode [ 145.178982][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 145.185266][ T7533] bond3: (slave bridge2): making interface the new active one [ 145.207132][ T7533] bridge2: entered promiscuous mode [ 145.213060][ T7533] bridge2: entered allmulticast mode [ 145.221388][ T7533] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 145.328993][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.698152][ T7559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.839147][ T7548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.873229][ T7548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.922342][ T7548] bond0 (unregistering): (slave team0): Releasing backup interface [ 145.938295][ T7548] bond0 (unregistering): Released all slaves [ 145.967119][ T7566] team_slave_1: entered promiscuous mode [ 146.061332][ T7558] lo speed is unknown, defaulting to 1000 [ 146.509567][ T7579] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 146.645189][ T7579] bond6: entered promiscuous mode [ 146.669414][ T7579] bond6: entered allmulticast mode [ 146.700097][ T7583] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 146.713171][ T7583] bond6: (slave bridge5): making interface the new active one [ 146.721364][ T7583] bridge5: entered promiscuous mode [ 146.726806][ T7583] bridge5: entered allmulticast mode [ 146.734117][ T7583] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 146.938438][ T7597] netlink: 'syz.3.440': attribute type 7 has an invalid length. [ 146.968684][ T7597] netlink: 'syz.3.440': attribute type 3 has an invalid length. [ 147.539357][ T7622] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 147.567974][ T7622] macsec1: entered allmulticast mode [ 147.573913][ T7622] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 147.680929][ T7628] __nla_validate_parse: 17 callbacks suppressed [ 147.680949][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.453'. [ 147.699443][ T7626] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 147.771965][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 147.819408][ T7626] bond0: entered promiscuous mode [ 147.824541][ T7626] bond0: entered allmulticast mode [ 147.838973][ T7631] netlink: 'syz.1.454': attribute type 3 has an invalid length. [ 147.860766][ T7632] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 147.870466][ T7631] netlink: 84 bytes leftover after parsing attributes in process `syz.1.454'. [ 147.883531][ T7632] bond0: (slave bridge2): making interface the new active one [ 147.896898][ T7632] bridge2: entered promiscuous mode [ 147.903220][ T7632] bridge2: entered allmulticast mode [ 147.916573][ T7632] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 147.926932][ T7634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.037203][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 149.263344][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 149.763146][ T7678] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 150.143807][ T7697] netlink: 'syz.4.471': attribute type 10 has an invalid length. [ 150.213467][ T7697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.471'. [ 150.231039][ T7697] bridge0: port 3(dummy0) entered blocking state [ 150.258036][ T7697] bridge0: port 3(dummy0) entered disabled state [ 150.291817][ T7697] dummy0: entered allmulticast mode [ 150.332955][ T7697] dummy0: entered promiscuous mode [ 150.368987][ T7697] bridge0: port 3(dummy0) entered blocking state [ 150.375602][ T7697] bridge0: port 3(dummy0) entered forwarding state [ 150.496451][ T7700] lo speed is unknown, defaulting to 1000 [ 150.753895][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 151.348916][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'. [ 151.622723][ T888] IPVS: starting estimator thread 0... [ 151.719478][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 151.738675][ T7729] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.075980][ T7742] netlink: del zone limit has 4 unknown bytes [ 152.225022][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 152.347144][ T7758] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 152.521589][ T7763] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 152.581871][ T7763] team0: Port device geneve0 added [ 152.992339][ T7774] __nla_validate_parse: 4 callbacks suppressed [ 152.992358][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 153.146983][ T7778] netlink: 'syz.3.494': attribute type 21 has an invalid length. [ 153.163540][ T7778] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 153.172019][ T7778] netlink: 144 bytes leftover after parsing attributes in process `syz.3.494'. [ 153.340828][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.498'. [ 153.635270][ T7805] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 154.187994][ T7803] bond4 (unregistering): Released all slaves [ 154.555558][ T7814] ip6tnl1: entered promiscuous mode [ 154.602488][ T7814] ip6tnl1: entered allmulticast mode [ 154.640535][ T7816] lo speed is unknown, defaulting to 1000 [ 154.693170][ T7821] syzkaller1: entered allmulticast mode [ 154.768829][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.927985][ T7829] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 154.991578][ T7829] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 155.036071][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 155.045519][ T7829] netlink: 7 bytes leftover after parsing attributes in process `syz.1.508'. [ 155.083262][ T7829] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.508'. [ 155.198679][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.332996][ T7843] xt_bpf: check failed: parse error [ 155.714491][ T7853] sctp: [Deprecated]: syz.1.515 (pid 7853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.714491][ T7853] Use struct sctp_sack_info instead [ 155.844677][ T7862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.517'. [ 156.434511][ T7891] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 156.788933][ T7899] lo speed is unknown, defaulting to 1000 [ 156.868961][ T7880] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 157.095188][ T7908] netlink: 52 bytes leftover after parsing attributes in process `syz.1.531'. [ 157.236935][ T7911] wireguard1: entered promiscuous mode [ 157.248872][ T7911] wireguard1: entered allmulticast mode [ 157.427926][ T7915] vlan2: entered allmulticast mode [ 157.725677][ T7921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.533'. [ 157.750399][ T7921] netlink: 72 bytes leftover after parsing attributes in process `syz.2.533'. [ 158.485115][ T7940] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 158.517562][ T7938] vlan3: entered promiscuous mode [ 158.529000][ T7938] bridge0: entered promiscuous mode [ 159.383345][ T7965] lo speed is unknown, defaulting to 1000 [ 159.733002][ T7972] __nla_validate_parse: 1 callbacks suppressed [ 159.733020][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 159.816734][ T7976] netlink: 'syz.2.546': attribute type 7 has an invalid length. [ 159.845065][ T7976] netlink: 'syz.2.546': attribute type 3 has an invalid length. [ 159.866845][ T7976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.546'. [ 159.921347][ T7971] siw: device registration error -23 [ 160.131124][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 160.148636][ T7982] xt_connbytes: Forcing CT accounting to be enabled [ 160.163226][ T7982] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.215622][ T7982] xt_bpf: check failed: parse error [ 160.426268][ T7992] xt_TCPMSS: Only works on TCP SYN packets [ 160.439013][ T7993] xt_TCPMSS: Only works on TCP SYN packets [ 160.572421][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 161.102102][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 161.170162][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 161.180686][ T8010] openvswitch: netlink: Flow key attr not present in new flow. [ 161.436146][ T8016] syzkaller0: entered allmulticast mode [ 161.473414][ T8016] syzkaller0 (unregistering): left allmulticast mode [ 162.069656][ T8051] IPv6: Can't replace route, no match found [ 162.414247][ T8060] lo speed is unknown, defaulting to 1000 [ 162.669910][ T7864] Set syz1 is full, maxelem 65536 reached [ 162.963304][ T8078] netlink: 'syz.4.576': attribute type 7 has an invalid length. [ 162.983904][ T8078] netlink: 'syz.4.576': attribute type 3 has an invalid length. [ 163.008575][ T8078] netlink: 224 bytes leftover after parsing attributes in process `syz.4.576'. [ 163.185292][ T8091] netlink: 'syz.1.578': attribute type 31 has an invalid length. [ 163.292257][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.579'. [ 163.422261][ T8094] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 163.460721][ T8094] netlink: 236 bytes leftover after parsing attributes in process `syz.4.579'. [ 163.477570][ T8102] rdma_rxe: rxe_newlink: failed to add team0 [ 163.610906][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.619420][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.703339][ T8108] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 163.789216][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 163.858169][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.883779][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.167235][ T8097] bond1: left promiscuous mode [ 164.189590][ T8097] bridge1: left promiscuous mode [ 164.194817][ T8097] bond1: left allmulticast mode [ 164.217067][ T8097] bridge1: left allmulticast mode [ 164.228329][ T8097] bond2: left promiscuous mode [ 164.233356][ T8097] bridge2: left promiscuous mode [ 164.243072][ T8097] bond2: left allmulticast mode [ 164.248084][ T8097] bridge2: left allmulticast mode [ 164.257538][ T8097] bond3: left promiscuous mode [ 164.262891][ T8097] bridge3: left promiscuous mode [ 164.268175][ T8097] bond3: left allmulticast mode [ 164.273217][ T8097] bridge3: left allmulticast mode [ 164.281811][ T8097] bond4: left promiscuous mode [ 164.286726][ T8097] bond4: left allmulticast mode [ 164.451255][ T8108] bond7: entered promiscuous mode [ 164.457202][ T8108] bond7: entered allmulticast mode [ 164.487398][ T8117] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 164.521758][ T8109] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 164.541449][ T8109] bond7: (slave bridge6): making interface the new active one [ 164.552190][ T8109] bridge6: entered promiscuous mode [ 164.558763][ T8109] bridge6: entered allmulticast mode [ 164.565489][ T8109] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 164.581718][ T3431] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.644814][ T8117] bond4: entered promiscuous mode [ 164.656050][ T8117] bond4: entered allmulticast mode [ 164.707508][ T8120] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 164.740996][ T8120] bond4: (slave bridge4): making interface the new active one [ 164.753912][ T8120] bridge4: entered promiscuous mode [ 164.764846][ T8120] bridge4: entered allmulticast mode [ 164.779435][ T8120] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 164.789214][ T3431] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.829042][ T3431] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.850734][ T3431] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.995630][ T8130] __nla_validate_parse: 3 callbacks suppressed [ 164.995651][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 165.023316][ T8130] netlink: 'syz.1.587': attribute type 83 has an invalid length. [ 165.049321][ T8132] TCP: TCP_TX_DELAY enabled [ 165.233491][ T8139] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 165.354402][ T8142] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 165.430924][ T8146] netlink: 76 bytes leftover after parsing attributes in process `syz.4.591'. [ 165.473381][ T8142] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.486094][ T8151] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 165.501648][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 165.545928][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 165.591359][ T8151] bond4: entered promiscuous mode [ 165.607269][ T8151] bond4: entered allmulticast mode [ 165.629588][ T8153] bond8: (slave veth0_to_bond): making interface the new active one [ 165.650708][ T8153] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 165.687191][ T8142] vlan3: entered allmulticast mode [ 165.694880][ T8142] veth1: entered allmulticast mode [ 165.705425][ T8142] veth1: entered promiscuous mode [ 165.712563][ T8142] veth1: left promiscuous mode [ 165.726270][ T8142] bond8: (slave vlan3): Enslaving as an active interface with an up link [ 165.752798][ T8155] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 165.800451][ T8155] bond4: (slave bridge4): making interface the new active one [ 165.836869][ T8155] bridge4: entered promiscuous mode [ 165.842889][ T8155] bridge4: entered allmulticast mode [ 165.859509][ T8155] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 166.014486][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 166.034288][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 166.148131][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 166.209683][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.597'. [ 166.422557][ T8171] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 166.473688][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 166.498958][ T8172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.598'. [ 166.763617][ T8178] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 166.777046][ T8178] netlink: 'syz.0.601': attribute type 11 has an invalid length. [ 167.863210][ T8171] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 167.872787][ T8172] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 168.258713][ T8197] nbd0: detected capacity change from 0 to 63 [ 168.288195][ T8204] block nbd0: NBD_DISCONNECT [ 168.304602][ T8204] block nbd0: Disconnected due to user request. [ 168.364762][ T8204] block nbd0: shutting down sockets [ 168.449016][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.458376][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.466293][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.475388][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 168.483237][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.492334][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 168.500191][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.509286][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 168.520402][ T5897] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.539148][ T5897] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.569098][ T5897] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.578375][ T5897] Buffer I/O error on dev nbd0, logical block 1, async page read [ 168.589488][ T5897] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.612847][ T5897] Buffer I/O error on dev nbd0, logical block 2, async page read [ 168.907024][ T5897] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.916390][ T5897] Buffer I/O error on dev nbd0, logical block 3, async page read [ 168.924719][ T5897] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.936900][ T5897] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.998881][ T5897] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.009829][ T5897] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.034780][ T5897] ldm_validate_partition_table(): Disk read failed. [ 169.076499][ T5897] Dev nbd0: unable to read RDB block 0 [ 169.098015][ T5897] nbd0: unable to read partition table [ 169.142794][ T5897] ldm_validate_partition_table(): Disk read failed. [ 169.174169][ T5897] Dev nbd0: unable to read RDB block 0 [ 169.191826][ T8211] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 169.211863][ T5897] nbd0: unable to read partition table [ 169.266233][ T8211] team0: Port device dummy0 added [ 169.350819][ T8203] syz.1.607 (8203) used greatest stack depth: 19288 bytes left [ 169.518792][ T8221] syz0: rxe_newlink: already configured on team0 [ 170.041680][ T8243] rdma_rxe: rxe_newlink: failed to add team0 [ 170.055258][ T8244] team0: No ports can be present during mode change [ 170.070069][ T8238] __nla_validate_parse: 133 callbacks suppressed [ 170.070086][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 170.772750][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 171.147408][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 171.566114][ T8266] syz.0.624 (8266) used greatest stack depth: 17992 bytes left [ 171.690138][ T8285] netlink: 'syz.2.631': attribute type 7 has an invalid length. [ 171.737187][ T8285] netlink: 'syz.2.631': attribute type 3 has an invalid length. [ 171.757676][ T8285] netlink: 224 bytes leftover after parsing attributes in process `syz.2.631'. [ 171.790480][ T8288] netlink: 'syz.1.629': attribute type 13 has an invalid length. [ 171.799045][ T8288] netlink: 'syz.1.629': attribute type 17 has an invalid length. [ 172.039346][ T8288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.100254][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.241401][ T8288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.297736][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 172.327515][ T8304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.636'. [ 172.349586][ T8301] lo speed is unknown, defaulting to 1000 [ 172.360567][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 172.464122][ T8286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.515265][ T8312] syzkaller1: entered promiscuous mode [ 172.527729][ T8312] syzkaller1: entered allmulticast mode [ 172.689162][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.691405][ T8319] syz0: rxe_newlink: already configured on team0 [ 173.055136][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.639'. [ 173.544536][ T8336] lo speed is unknown, defaulting to 1000 [ 174.218188][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 174.610422][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 175.447389][ T8373] netlink: 116 bytes leftover after parsing attributes in process `syz.2.651'. [ 175.595452][ T8374] lo speed is unknown, defaulting to 1000 [ 175.906160][ T8388] netlink: 'syz.0.656': attribute type 2 has an invalid length. [ 175.934784][ T8388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.656'. [ 176.166995][ T8393] macvtap1: entered promiscuous mode [ 176.177407][ T8393] hsr0: entered promiscuous mode [ 176.209241][ T8393] macvtap1: entered allmulticast mode [ 176.239064][ T8393] hsr0: entered allmulticast mode [ 176.258597][ T8393] hsr_slave_0: entered allmulticast mode [ 176.282828][ T8393] hsr0: left allmulticast mode [ 176.287665][ T8393] hsr_slave_0: left allmulticast mode [ 176.308623][ T8393] hsr0: left promiscuous mode [ 176.450874][ T8390] lo speed is unknown, defaulting to 1000 [ 176.482609][ T8402] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 176.537201][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.560479][ T8402] team0: Port device bond0 added [ 176.957249][ T8413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'. [ 176.996043][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 177.786809][ T8432] netlink: 'syz.4.668': attribute type 5 has an invalid length. [ 178.007795][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 178.045667][ T8439] vlan0: entered promiscuous mode [ 178.093000][ T8443] syz0: rxe_newlink: already configured on team0 [ 178.103807][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 178.317543][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 178.326773][ T8451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.675'. [ 178.338869][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 178.353491][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.675'. [ 178.389735][ T8456] netlink: 'syz.1.674': attribute type 10 has an invalid length. [ 178.874822][ T8468] lo speed is unknown, defaulting to 1000 [ 179.108382][ T8472] lo speed is unknown, defaulting to 1000 [ 179.667350][ T8481] lo speed is unknown, defaulting to 1000 [ 179.708651][ T8486] tipc: Enabling of bearer rejected, failed to enable media [ 180.706319][ T8501] netlink: 'syz.1.692': attribute type 7 has an invalid length. [ 180.717623][ T8501] netlink: 'syz.1.692': attribute type 3 has an invalid length. [ 180.726521][ T8501] __nla_validate_parse: 1 callbacks suppressed [ 180.726537][ T8501] netlink: 224 bytes leftover after parsing attributes in process `syz.1.692'. [ 181.574258][ T8484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.686'. [ 181.988407][ T8517] netlink: 180 bytes leftover after parsing attributes in process `syz.4.697'. [ 182.063910][ T8473] siw: device registration error -23 [ 182.995758][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 184.007297][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 184.062507][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 184.229571][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 185.759133][ T8575] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 185.787796][ T8594] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 186.851147][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 186.934950][ T8627] netlink: 'syz.0.731': attribute type 39 has an invalid length. [ 186.954322][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.962128][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.013094][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 187.020997][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 187.586593][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.630506][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.705994][ T8615] vlan0: left promiscuous mode [ 187.994780][ T8615] wireguard0: left promiscuous mode [ 188.008517][ T8615] wireguard0: left allmulticast mode [ 188.019691][ T8615] bond1: left promiscuous mode [ 188.024528][ T8615] bond1: left allmulticast mode [ 188.041191][ T8615] bond2: left promiscuous mode [ 188.046006][ T8615] bridge1: left promiscuous mode [ 188.068919][ T8615] bond2: left allmulticast mode [ 188.073827][ T8615] bridge1: left allmulticast mode [ 188.091363][ T8615] bond3: left promiscuous mode [ 188.096187][ T8615] bridge2: left promiscuous mode [ 188.109105][ T8615] bond3: left allmulticast mode [ 188.114476][ T8615] bridge2: left allmulticast mode [ 188.138349][ T8615] bond4: left promiscuous mode [ 188.147552][ T8615] bridge4: left promiscuous mode [ 188.154038][ T8615] bond4: left allmulticast mode [ 188.162918][ T8615] bridge4: left allmulticast mode [ 188.537630][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 188.584927][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.595402][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.617345][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.649806][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.886627][ T8660] pimreg: entered allmulticast mode [ 188.964176][ T8668] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20000 [ 189.283228][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 189.287435][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 189.345421][ T8679] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.744'. [ 189.348619][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 189.354842][ T8679] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 189.376399][ T8679] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 190.172780][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 190.230408][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 190.287942][ T8711] vlan2: entered promiscuous mode [ 190.293709][ T8711] bridge0: entered promiscuous mode [ 190.299591][ T8711] vlan2: entered allmulticast mode [ 190.367455][ T8711] bridge0: entered allmulticast mode [ 190.402049][ T8715] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.753'. [ 190.785315][ T8726] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 190.968860][ T8726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.012156][ T8736] openvswitch: netlink: Message has 5 unknown bytes. [ 191.044164][ T8734] bond5: (slave gretap1): making interface the new active one [ 191.054835][ T8734] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 191.653322][ T8755] IPVS: Error connecting to the multicast addr [ 191.768117][ T8758] rdma_rxe: rxe_newlink: failed to add team0 [ 191.887379][ T8771] netlink: 'syz.1.770': attribute type 2 has an invalid length. [ 191.896770][ T8771] __nla_validate_parse: 3 callbacks suppressed [ 191.896788][ T8771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.770'. [ 191.982600][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 192.089715][ T8775] netlink: 56 bytes leftover after parsing attributes in process `syz.4.772'. [ 192.100869][ T8775] netlink: 56 bytes leftover after parsing attributes in process `syz.4.772'. [ 192.627884][ T8802] veth5: entered promiscuous mode [ 192.649274][ T8804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.782'. [ 192.739329][ T8809] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.782'. [ 192.807120][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.785'. [ 193.689503][ T8859] netlink: 'syz.1.797': attribute type 7 has an invalid length. [ 193.697528][ T8859] netlink: 'syz.1.797': attribute type 3 has an invalid length. [ 193.705755][ T8859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.797'. [ 193.931802][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 193.977873][ T8869] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 194.068243][ T8869] netlink: 208 bytes leftover after parsing attributes in process `syz.4.801'. [ 194.127595][ T8869] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 194.186259][ T8869] netlink: 'syz.4.801': attribute type 2 has an invalid length. [ 194.457354][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473016][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.415035][ T8907] hsr0: entered promiscuous mode [ 195.493699][ T8907] hsr0: left promiscuous mode [ 196.072421][ T8927] xt_nfacct: accounting object `syz1' does not exists [ 196.223645][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.304160][ T8935] delete_channel: no stack [ 196.331372][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.073922][ T8970] __nla_validate_parse: 2 callbacks suppressed [ 197.073939][ T8970] netlink: 244 bytes leftover after parsing attributes in process `syz.0.822'. [ 197.108727][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.822'. [ 197.335604][ T7189] IPVS: starting estimator thread 0... [ 197.344073][ T8981] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.361270][ T8982] netlink: 120 bytes leftover after parsing attributes in process `syz.3.825'. [ 197.438712][ T8985] IPVS: using max 26 ests per chain, 62400 per kthread [ 197.523674][ T8989] netlink: 165 bytes leftover after parsing attributes in process `syz.1.827'. [ 197.678052][ T8995] !: renamed from dummy0 (while UP) [ 198.127940][ T9005] tun0: tun_chr_ioctl cmd 1074025677 [ 198.135495][ T9005] tun0: linktype set to 773 [ 199.330441][ T9040] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 199.345658][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 199.422092][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 199.432733][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 199.444716][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 199.456339][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 199.466808][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 199.893189][ T9067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.040376][ T9061] bond0: (slave team0): Releasing backup interface [ 200.080462][ T9061] team0 (unregistering): Port device team_slave_0 removed [ 200.100747][ T9061] team0 (unregistering): Port device team_slave_1 removed [ 200.313042][ T9080] macsec1: entered allmulticast mode [ 200.318419][ T9080] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 200.332838][ T9083] rdma_rxe: rxe_newlink: failed to add team0 [ 200.350110][ T9080] batman_adv: batadv0: Adding interface: macsec1 [ 200.356512][ T9080] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.455713][ T9080] batman_adv: batadv0: Interface activated: macsec1 [ 200.623702][ T9100] IPVS: length: 209 != 353013922104 [ 200.884169][ T9109] netlink: 'syz.1.865': attribute type 13 has an invalid length. [ 200.895075][ T9109] netlink: 'syz.1.865': attribute type 17 has an invalid length. [ 201.045891][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.074419][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.101769][ T9109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.980855][ T9168] netlink: 'syz.2.879': attribute type 15 has an invalid length. [ 202.000313][ T9169] tipc: Started in network mode [ 202.007835][ T9169] tipc: Node identity , cluster identity 4711 [ 202.021223][ T9168] netlink: 'syz.2.879': attribute type 3 has an invalid length. [ 202.030583][ T9150] "syz.1.875" (9150) uses obsolete ecb(arc4) skcipher [ 202.552582][ T9178] rdma_rxe: rxe_newlink: failed to add team0 [ 203.584350][ T9211] __nla_validate_parse: 36 callbacks suppressed [ 203.584367][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 203.670926][ T9215] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 203.762504][ T9220] IPv4: Oversized IP packet from 127.202.26.0 [ 204.085087][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 204.110848][ T9231] pim6reg1: entered promiscuous mode [ 204.128721][ T9231] pim6reg1: entered allmulticast mode [ 204.429658][ T9238] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 204.535851][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.898'. [ 204.724689][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 204.743439][ T9245] vlan4: entered allmulticast mode [ 205.033044][ T9257] netlink: 252 bytes leftover after parsing attributes in process `syz.3.904'. [ 205.140451][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 205.157902][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.201755][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.423416][ T9267] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 205.556937][ T9267] 8021q: adding VLAN 0 to HW filter on device bond9 [ 205.648338][ T9273] netlink: 'syz.1.910': attribute type 30 has an invalid length. [ 205.737943][ T9275] veth5: entered promiscuous mode [ 205.759841][ T9267] erspan0: entered allmulticast mode [ 206.107158][ T9299] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.337162][ T9304] erspan0: entered promiscuous mode [ 206.384277][ T9304] batman_adv: batadv0: Adding interface: macvlan2 [ 206.409291][ T9304] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.469852][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 206.495528][ T9304] batman_adv: batadv0: Interface activated: macvlan2 [ 206.643772][ T9313] netlink: 128 bytes leftover after parsing attributes in process `syz.2.921'. [ 206.678138][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 207.413359][ T9332] netlink: 192 bytes leftover after parsing attributes in process `syz.3.926'. [ 207.527062][ T9342] netlink: 'syz.2.930': attribute type 4 has an invalid length. [ 207.700790][ T9350] bridge_slave_1: left allmulticast mode [ 207.706607][ T9350] bridge_slave_1: left promiscuous mode [ 207.742943][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.833739][ T9350] bridge_slave_0: left allmulticast mode [ 207.841075][ T9350] bridge_slave_0: left promiscuous mode [ 207.847363][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.888713][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.255487][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.326185][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.387691][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.432269][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.461913][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.481807][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.518965][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.547794][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.597121][ T9384] __nla_validate_parse: 13 callbacks suppressed [ 208.597138][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.660284][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.681155][ T9388] team0 (unregistering): Port device team_slave_0 removed [ 208.712146][ T9388] team0 (unregistering): Port device team_slave_1 removed [ 208.723838][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.733763][ T9384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 208.744350][ T9388] team0 (unregistering): Port device geneve0 removed [ 208.757059][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.783609][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.801695][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.815249][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.825520][ T9388] team0 (unregistering): Port device bond0 removed [ 208.833387][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.854252][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.873443][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 208.900869][ T9384] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.943'. [ 211.890922][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.897010][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.903471][ T5845] Bluetooth: hci1: command 0x0401 tx timeout [ 212.562121][ T9482] netlink: 'syz.2.969': attribute type 25 has an invalid length. [ 213.557386][ T9507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.608228][ T9515] ip6tnl2: entered promiscuous mode [ 213.617265][ T9515] ip6tnl2: entered allmulticast mode [ 213.645518][ T9515] team0: Device ip6tnl2 is of different type [ 213.709098][ T9509] syzkaller1: entered promiscuous mode [ 213.715182][ T9509] syzkaller1: entered allmulticast mode [ 213.918297][ T9526] __nla_validate_parse: 49 callbacks suppressed [ 213.918315][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 214.148893][ T9538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.159175][ T9540] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.984'. [ 214.177682][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 214.366629][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 214.394103][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 214.413073][ T30] audit: type=1800 audit(1750636010.474:2): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.982" name="cgroup.controllers" dev="tmpfs" ino=1067 res=0 errno=0 [ 214.436275][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 214.484593][ T9552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.568844][ T9560] sctp: [Deprecated]: syz.3.989 (pid 9560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.568844][ T9560] Use struct sctp_sack_info instead [ 214.745370][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 214.784125][ T9565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'. [ 214.822193][ T9565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.829538][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'. [ 214.853687][ T9565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.871306][ T9565] batman_adv: batadv0: Interface deactivated: macsec1 [ 214.876208][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.992'. [ 214.908773][ T9565] batman_adv: batadv0: Removing interface: macsec1 [ 214.974081][ T9565] bond0: (slave batadv0): Releasing backup interface [ 217.597280][ T9610] netlink: 'syz.0.1005': attribute type 2 has an invalid length. [ 217.980531][ T9633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.063202][ T9677] __nla_validate_parse: 4 callbacks suppressed [ 219.063229][ T9677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1022'. [ 219.285249][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 219.297988][ T9683] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 219.315878][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.535393][ T9694] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 219.856715][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 219.902764][ T9702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.034943][ T9708] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 220.088838][ T9708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.129736][ T9715] bond6: (slave veth7): Enslaving as an active interface with a down link [ 220.144959][ T9708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'. [ 220.376764][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 221.080259][ T9735] FAULT_INJECTION: forcing a failure. [ 221.080259][ T9735] name failslab, interval 1, probability 0, space 0, times 0 [ 221.099262][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.1.1039 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 221.099288][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.099299][ T9735] Call Trace: [ 221.099307][ T9735] [ 221.099315][ T9735] dump_stack_lvl+0x189/0x250 [ 221.099360][ T9735] ? __pfx____ratelimit+0x10/0x10 [ 221.099381][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.099409][ T9735] ? __pfx__printk+0x10/0x10 [ 221.099435][ T9735] ? __pfx___might_resched+0x10/0x10 [ 221.099463][ T9735] ? fs_reclaim_acquire+0x7d/0x100 [ 221.099490][ T9735] should_fail_ex+0x414/0x560 [ 221.099518][ T9735] should_failslab+0xa8/0x100 [ 221.099540][ T9735] __kmalloc_noprof+0xcb/0x4f0 [ 221.099556][ T9735] ? kfree+0x4d/0x440 [ 221.099591][ T9735] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.099646][ T9735] tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.099675][ T9735] ? tomoyo_domain+0xd9/0x130 [ 221.099707][ T9735] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 221.099729][ T9735] tomoyo_path_number_perm+0x1e8/0x5a0 [ 221.099754][ T9735] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.099794][ T9735] ? __lock_acquire+0xab9/0xd20 [ 221.099887][ T9735] ? __fget_files+0x2a/0x420 [ 221.099910][ T9735] ? __fget_files+0x2a/0x420 [ 221.099929][ T9735] ? __fget_files+0x3a0/0x420 [ 221.099953][ T9735] ? __fget_files+0x2a/0x420 [ 221.099978][ T9735] security_file_ioctl+0xcb/0x2d0 [ 221.100001][ T9735] __se_sys_ioctl+0x47/0x170 [ 221.100030][ T9735] do_syscall_64+0xfa/0x3b0 [ 221.100048][ T9735] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.100066][ T9735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.100085][ T9735] ? clear_bhb_loop+0x60/0xb0 [ 221.100108][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.100125][ T9735] RIP: 0033:0x7f326a78e929 [ 221.100145][ T9735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.100162][ T9735] RSP: 002b:00007f326b5d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.100186][ T9735] RAX: ffffffffffffffda RBX: 00007f326a9b5fa0 RCX: 00007f326a78e929 [ 221.100199][ T9735] RDX: 0000200000000000 RSI: 0000000040107447 RDI: 0000000000000008 [ 221.100211][ T9735] RBP: 00007f326b5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 221.100223][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.100234][ T9735] R13: 0000000000000000 R14: 00007f326a9b5fa0 R15: 00007fff9f921aa8 [ 221.100268][ T9735] [ 221.355711][ T9735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.629178][ T9743] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 221.661633][ T9743] syzkaller1: linktype set to 6 [ 221.874465][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 222.501084][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1050'. [ 223.003077][ T9761] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1046'. [ 223.033621][ T9790] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 223.043030][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1054'. [ 223.096133][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 223.702276][ T9815] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 224.105748][ T9840] delete_channel: no stack [ 224.121405][ T9836] FAULT_INJECTION: forcing a failure. [ 224.121405][ T9836] name failslab, interval 1, probability 0, space 0, times 0 [ 224.153384][ T9836] CPU: 0 UID: 0 PID: 9836 Comm: syz.0.1067 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 224.153412][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.153423][ T9836] Call Trace: [ 224.153431][ T9836] [ 224.153438][ T9836] dump_stack_lvl+0x189/0x250 [ 224.153474][ T9836] ? __pfx____ratelimit+0x10/0x10 [ 224.153495][ T9836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.153523][ T9836] ? __pfx__printk+0x10/0x10 [ 224.153547][ T9836] ? __pfx___might_resched+0x10/0x10 [ 224.153575][ T9836] ? fs_reclaim_acquire+0x7d/0x100 [ 224.153603][ T9836] should_fail_ex+0x414/0x560 [ 224.153632][ T9836] should_failslab+0xa8/0x100 [ 224.153654][ T9836] __kmalloc_noprof+0xcb/0x4f0 [ 224.153672][ T9836] ? tomoyo_encode+0x28b/0x550 [ 224.153703][ T9836] tomoyo_encode+0x28b/0x550 [ 224.153744][ T9836] tomoyo_realpath_from_path+0x58d/0x5d0 [ 224.153782][ T9836] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 224.153804][ T9836] tomoyo_path_number_perm+0x1e8/0x5a0 [ 224.153829][ T9836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.153869][ T9836] ? __lock_acquire+0xab9/0xd20 [ 224.153917][ T9836] ? __fget_files+0x2a/0x420 [ 224.153941][ T9836] ? __fget_files+0x2a/0x420 [ 224.153960][ T9836] ? __fget_files+0x3a0/0x420 [ 224.153980][ T9836] ? __fget_files+0x2a/0x420 [ 224.154007][ T9836] security_file_ioctl+0xcb/0x2d0 [ 224.154031][ T9836] __se_sys_ioctl+0x47/0x170 [ 224.154062][ T9836] do_syscall_64+0xfa/0x3b0 [ 224.154080][ T9836] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.154098][ T9836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.154117][ T9836] ? clear_bhb_loop+0x60/0xb0 [ 224.154140][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.154158][ T9836] RIP: 0033:0x7fd41c38e929 [ 224.154175][ T9836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.154191][ T9836] RSP: 002b:00007fd41d1c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.154211][ T9836] RAX: ffffffffffffffda RBX: 00007fd41c5b5fa0 RCX: 00007fd41c38e929 [ 224.154225][ T9836] RDX: 0000200000000000 RSI: 0000000040107447 RDI: 0000000000000008 [ 224.154238][ T9836] RBP: 00007fd41d1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 224.154249][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.154259][ T9836] R13: 0000000000000000 R14: 00007fd41c5b5fa0 R15: 00007fffa208ac08 [ 224.154289][ T9836] [ 224.168886][ T9836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.580371][ T9854] __nla_validate_parse: 3 callbacks suppressed [ 224.580389][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 224.632118][ T9854] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 224.646545][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 224.719539][ T9830] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1065'. [ 224.734676][ T9830] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 225.098211][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'. [ 225.196258][ T9884] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.323758][ T9890] tipc: Started in network mode [ 225.342100][ T9890] tipc: Node identity ac14140f, cluster identity 4711 [ 225.364741][ T9890] tipc: New replicast peer: 255.255.255.255 [ 225.385130][ T9890] tipc: Enabled bearer , priority 10 [ 225.395743][ T9890] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1083'. [ 225.579188][ T9901] openvswitch: netlink: IP tunnel dst address not specified [ 225.625378][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 225.921982][ T9912] tipc: Started in network mode [ 225.926937][ T9912] tipc: Node identity , cluster identity 4711 [ 225.931777][ T9915] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1089'. [ 225.988676][ T9912] tipc: Failed to obtain node identity [ 226.016057][ T9912] tipc: Enabling of bearer rejected, failed to enable media [ 226.092307][ T9912] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1090'. [ 226.510085][ T7194] tipc: Node number set to 2886997007 [ 226.538378][ T9925] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 226.559729][ T9925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1094'. [ 226.588793][ T9925] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 226.783923][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 227.250743][ T9959] netlink: 'syz.4.1102': attribute type 13 has an invalid length. [ 227.273213][ T9959] netlink: 'syz.4.1102': attribute type 17 has an invalid length. [ 227.307729][ T9959] gretap0: left promiscuous mode [ 227.342954][ T9959] erspan0: left allmulticast mode [ 227.457951][ T9959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.638836][ T9959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.787894][ T9973] macvtap1: entered promiscuous mode [ 227.809012][ T9973] bond0: entered promiscuous mode [ 227.822524][ T9973] bond_slave_0: entered promiscuous mode [ 227.844361][ T9973] bond_slave_1: entered promiscuous mode [ 227.865294][ T9973] team0: entered promiscuous mode [ 227.895862][ T9973] team_slave_0: entered promiscuous mode [ 227.925883][ T9973] macvtap1: entered allmulticast mode [ 227.944398][ T9973] bond0: entered allmulticast mode [ 227.955651][ T9973] bond_slave_0: entered allmulticast mode [ 227.972104][ T9973] bond_slave_1: entered allmulticast mode [ 227.986517][ T9973] team0: entered allmulticast mode [ 227.997347][ T9973] team_slave_0: entered allmulticast mode [ 228.007675][ T9973] team_slave_1: entered allmulticast mode [ 228.017165][ T9973] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 228.048310][ T9975] vlan0: entered promiscuous mode [ 228.072683][ T9975] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 228.080721][ T9975] vlan0: entered allmulticast mode [ 228.091929][ T9975] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 228.120764][ T9981] bond0: left allmulticast mode [ 228.125761][ T9981] bond_slave_0: left allmulticast mode [ 228.132114][ T9981] bond_slave_1: left allmulticast mode [ 228.137672][ T9981] team0: left allmulticast mode [ 228.142768][ T9981] team_slave_0: left allmulticast mode [ 228.148809][ T9981] team_slave_1: left allmulticast mode [ 228.154439][ T9981] bond0: left promiscuous mode [ 228.159342][ T9981] bond_slave_0: left promiscuous mode [ 228.165178][ T9981] bond_slave_1: left promiscuous mode [ 228.171010][ T9981] team0: left promiscuous mode [ 228.175908][ T9981] team_slave_0: left promiscuous mode [ 228.203437][ T9983] macsec1: entered promiscuous mode [ 228.208954][ T9983] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 228.216256][ T9983] macsec1: entered allmulticast mode [ 228.221796][ T9983] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 228.239253][ T9984] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 228.458045][ T51] Bluetooth: hci4: link tx timeout [ 228.464584][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.716063][T10010] netlink: 'syz.3.1118': attribute type 2 has an invalid length. [ 229.089652][T10032] FAULT_INJECTION: forcing a failure. [ 229.089652][T10032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.129005][T10032] CPU: 1 UID: 0 PID: 10032 Comm: syz.3.1123 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 229.129036][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.129048][T10032] Call Trace: [ 229.129056][T10032] [ 229.129064][T10032] dump_stack_lvl+0x189/0x250 [ 229.129101][T10032] ? __pfx____ratelimit+0x10/0x10 [ 229.129129][T10032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.129268][T10032] ? __pfx__printk+0x10/0x10 [ 229.129294][T10032] ? __might_fault+0xb0/0x130 [ 229.129327][T10032] should_fail_ex+0x414/0x560 [ 229.129359][T10032] _copy_from_user+0x2d/0xb0 [ 229.129381][T10032] __x64_sys_epoll_ctl+0x126/0x1a0 [ 229.129405][T10032] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 229.129423][T10032] ? rcu_is_watching+0x15/0xb0 [ 229.129460][T10032] ? do_syscall_64+0xbe/0x3b0 [ 229.129486][T10032] do_syscall_64+0xfa/0x3b0 [ 229.129506][T10032] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.129525][T10032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.129546][T10032] ? clear_bhb_loop+0x60/0xb0 [ 229.129571][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.129590][T10032] RIP: 0033:0x7f27cc78e929 [ 229.129609][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.129626][T10032] RSP: 002b:00007f27ca5d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 229.129648][T10032] RAX: ffffffffffffffda RBX: 00007f27cc9b6080 RCX: 00007f27cc78e929 [ 229.129662][T10032] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 229.129674][T10032] RBP: 00007f27ca5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 229.129686][T10032] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 229.129699][T10032] R13: 0000000000000000 R14: 00007f27cc9b6080 R15: 00007ffc51cc7218 [ 229.129730][T10032] [ 229.711788][T10050] Bluetooth: MGMT ver 1.23 [ 230.003062][T10064] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 230.068333][T10067] __nla_validate_parse: 9 callbacks suppressed [ 230.068352][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 230.096908][T10064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.134459][T10069] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 230.275161][T10064] bond5: (slave gretap1): making interface the new active one [ 230.300205][T10064] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 230.528741][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 230.549182][T10086] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1132'. [ 230.642749][T10086] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 230.933392][T10100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.676716][T10123] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1144'. [ 231.909252][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 231.918175][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 232.497464][T10121] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453) [ 232.515761][T10121] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 233.333174][T10159] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 233.348233][T10163] vlan2: entered promiscuous mode [ 233.354893][T10159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 233.364355][T10163] syz_tun: entered promiscuous mode [ 234.118068][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1161'. [ 234.344278][T10182] lo: entered promiscuous mode [ 234.353863][T10182] tunl0: entered promiscuous mode [ 234.363082][T10182] gre0: entered promiscuous mode [ 234.399761][T10182] gretap0: entered promiscuous mode [ 234.410411][T10182] ip_vti0: entered promiscuous mode [ 234.446756][T10182] ip6_vti0: entered promiscuous mode [ 234.510354][T10182] sit0: entered promiscuous mode [ 234.545418][T10182] ip6tnl0: entered promiscuous mode [ 234.564862][T10182] ip6gre0: entered promiscuous mode [ 234.588124][T10182] ip6gretap0: entered promiscuous mode [ 234.616177][T10182] bridge0: entered promiscuous mode [ 234.636892][T10182] bond0: entered promiscuous mode [ 234.661312][T10182] bond_slave_0: entered promiscuous mode [ 234.681691][T10182] bond_slave_1: entered promiscuous mode [ 234.715975][T10182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.755420][T10182] dummy0: entered promiscuous mode [ 234.780840][T10182] nlmon0: entered promiscuous mode [ 234.798184][T10182] caif0: entered promiscuous mode [ 234.824045][T10182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.059686][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1163'. [ 235.320063][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 235.542273][T10211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 235.583774][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'. [ 236.660140][T10246] syz0: rxe_newlink: already configured on team0 [ 237.054666][T10253] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 237.055603][T10252] IPVS: stopping master sync thread 10253 ... [ 237.321408][T10262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.432038][T10262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.571549][T10262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.683226][T10262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.885058][ T1035] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.947876][ T1035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.990469][ T1035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.049164][ T1035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.378874][T10298] Â: renamed from pim6reg1 [ 239.065149][ T30] audit: type=1800 audit(1750636035.114:3): pid=10323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1200" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1242 res=0 errno=0 [ 239.105454][ T30] audit: type=1800 audit(1750636035.124:4): pid=10323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1200" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1242 res=0 errno=0 [ 239.145673][T10325] netlink: 'syz.1.1201': attribute type 7 has an invalid length. [ 239.154215][T10325] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1201'. [ 239.784282][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 239.955769][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'. [ 240.247153][T10373] netlink: 'syz.4.1215': attribute type 21 has an invalid length. [ 240.257641][T10373] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1215'. [ 240.283370][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 240.301886][T10373] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 240.310969][T10373] netlink: 'syz.4.1215': attribute type 2 has an invalid length. [ 240.570987][T10384] C: renamed from team_slave_0 [ 240.613821][T10384] netlink: 'syz.4.1218': attribute type 8 has an invalid length. [ 240.680184][T10384] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 240.897696][T10399] xt_limit: Overflow, try lower: 262144/524288 [ 241.184671][T10408] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 241.462612][ T30] audit: type=1107 audit(1750636037.524:5): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 241.796204][T10440] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 241.804414][T10440] netlink: 'syz.3.1232': attribute type 4 has an invalid length. [ 241.812911][T10440] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1232'. [ 241.982687][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.019787][T10442] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.1233'. [ 242.562800][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1237'. [ 242.650217][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1237'. [ 243.192112][T10490] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1243'. [ 243.706446][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 244.052811][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 244.467535][T10527] macsec0: entered promiscuous mode [ 244.496768][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 244.566769][T10527] macsec0 (unregistering): left promiscuous mode [ 244.773010][T10536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1254'. [ 244.792470][T10536] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1254'. [ 245.076899][T10548] netlink: 'syz.2.1256': attribute type 16 has an invalid length. [ 245.085036][T10548] netlink: 'syz.2.1256': attribute type 17 has an invalid length. [ 245.147861][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.157457][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.256377][T10548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.455404][T10550] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 245.489723][ T7193] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.993231][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.010968][T10565] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 246.115777][T10570] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.423057][T10580] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 246.458639][T10580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.488394][T10580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.499008][T10580] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 246.514556][T10580] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 246.540796][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.605958][T10591] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 246.633474][T10589] veth3: entered promiscuous mode [ 246.642633][T10589] bond4: (slave veth3): Enslaving as an active interface with a down link [ 246.677292][T10591] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 246.698986][T10580] erspan0: entered allmulticast mode [ 246.715514][T10580] bond4: (slave erspan0): making interface the new active one [ 246.726691][T10580] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 246.744158][T10589] netlink: 'syz.3.1266': attribute type 3 has an invalid length. [ 246.803366][T10589] netlink: 'syz.3.1266': attribute type 3 has an invalid length. [ 246.849058][T10602] __nla_validate_parse: 9 callbacks suppressed [ 246.849077][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 246.893739][ T1035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.913806][ T1035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.932356][ T1035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.943283][ T1035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.009533][T10605] bond4: (slave erspan0): Releasing active interface [ 247.195879][T10605] team0: Port device team_slave_0 removed [ 247.264853][T10605] team0: Port device team_slave_1 removed [ 247.300867][T10605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.311454][T10605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.373315][T10605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.393989][T10605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.437921][T10605] bond3: (slave bridge1): Releasing active interface [ 247.443085][T10625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 247.448120][T10605] bridge1: left promiscuous mode [ 247.461858][T10605] bridge1: left allmulticast mode [ 247.479128][T10605] bond0: (slave bridge2): Releasing active interface [ 247.485855][T10605] bridge2: left promiscuous mode [ 247.491635][T10605] bridge2: left allmulticast mode [ 247.509898][T10605] bond4: (slave veth3): Releasing active interface [ 247.526115][ T8962] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.538861][ T8962] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.553299][T10612] team0: Mode changed to "broadcast" [ 247.562451][T10618] vlan0: left allmulticast mode [ 247.572655][T10618] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 247.587216][T10618] team0: Port device vlan0 added [ 247.690751][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.986632][T10646] netlink: 'syz.0.1282': attribute type 7 has an invalid length. [ 247.995872][T10646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1282'. [ 248.401304][T10650] team0: Port device 0! removed [ 248.441216][T10650] bridge_slave_0: left allmulticast mode [ 248.464896][T10650] bridge_slave_0: left promiscuous mode [ 248.493433][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.526749][T10650] bridge_slave_1: left allmulticast mode [ 248.541429][T10650] bridge_slave_1: left promiscuous mode [ 248.578099][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.661822][T10650] bond0: (slave bond_slave_0): Releasing backup interface [ 248.704457][T10650] bond0: (slave bond_slave_1): Releasing backup interface [ 248.765774][T10650] team0: Port device team_slave_0 removed [ 248.779117][T10650] team0: Port device team_slave_1 removed [ 248.796337][T10650] bond1: (slave bridge1): Releasing active interface [ 248.816991][T10650] bond2: (slave bridge2): Releasing active interface [ 248.837957][T10650] bond3: (slave bridge3): Releasing active interface [ 248.852064][T10650] bond5: (slave gretap1): Releasing active interface [ 249.148744][T10694] netlink: 'syz.4.1293': attribute type 7 has an invalid length. [ 249.157672][T10697] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 249.190126][T10694] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1293'. [ 249.379570][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 249.659359][T10721] openvswitch: netlink: IPv4 tun info is not correct [ 249.699619][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 249.812524][T10721] vlan2: entered allmulticast mode [ 249.985566][T10728] ip6t_srh: unknown srh match flags 4000 [ 250.287763][T10738] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 250.308177][T10738] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 250.349958][T10742] dummy0: entered allmulticast mode [ 250.357212][T10741] netlink: 'syz.2.1305': attribute type 1 has an invalid length. [ 250.509506][T10741] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.542811][T10742] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1304'. [ 250.612124][T10738] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1304'. [ 250.711669][T10750] bond7: (slave gretap1): making interface the new active one [ 250.723713][T10750] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 250.784392][T10752] 8021q: VLANs not supported on caif0 [ 250.944285][T10759] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1311'. [ 250.964826][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 250.990398][T10759] tipc: Started in network mode [ 250.995321][T10759] tipc: Node identity 02b4e907cc11, cluster identity 4711 [ 251.035063][T10759] tipc: Enabled bearer , priority 0 [ 251.053660][T10759] syzkaller0: entered promiscuous mode [ 251.090204][T10759] syzkaller0: entered allmulticast mode [ 251.105464][T10759] tipc: Resetting bearer [ 251.119126][T10758] tipc: Resetting bearer [ 251.148642][T10775] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 251.168397][T10758] tipc: Disabling bearer [ 251.393351][T10784] netlink: 'syz.1.1318': attribute type 2 has an invalid length. [ 251.431583][T10784] netlink: 'syz.1.1318': attribute type 2 has an invalid length. [ 251.446235][T10784] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 251.531914][T10789] netlink: 'syz.4.1320': attribute type 10 has an invalid length. [ 251.582708][T10789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.597417][T10789] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 251.968936][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.589236][T10829] vlan0: entered promiscuous mode [ 252.634249][T10834] netlink: 'syz.1.1333': attribute type 4 has an invalid length. [ 252.652880][T10829] __nla_validate_parse: 1 callbacks suppressed [ 252.652897][T10829] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1332'. [ 252.811278][T10846] syzkaller0: entered promiscuous mode [ 252.817246][T10846] syzkaller0: entered allmulticast mode [ 253.058958][T10847] team0: Port device vlan0 removed [ 253.164771][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 253.175720][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 253.430423][T10873] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 253.458679][T10873] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 253.467026][T10868] netlink: 'syz.1.1338': attribute type 9 has an invalid length. [ 253.603237][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1343'. [ 253.810224][T10892] ipt_ECN: cannot use operation on non-tcp rule [ 254.100479][T10911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1349'. [ 254.214346][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 254.449633][T10928] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 254.702226][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 254.727262][T10942] bond5: entered promiscuous mode [ 254.732748][T10942] bond5: entered allmulticast mode [ 254.751037][T10946] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 254.764526][T10946] bond5: (slave bridge4): making interface the new active one [ 254.773026][T10946] bridge4: entered promiscuous mode [ 254.778662][T10946] bridge4: entered allmulticast mode [ 254.785291][T10946] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 254.875228][T10952] Bluetooth: MGMT ver 1.23 [ 255.034921][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 255.072569][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'. [ 255.878156][T10988] macvtap0: entered promiscuous mode [ 255.894229][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.901036][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.904313][T10988] macvtap0: entered allmulticast mode [ 255.915795][T10988] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 256.066695][T10998] validate_nla: 1 callbacks suppressed [ 256.066714][T10998] netlink: 'syz.1.1370': attribute type 16 has an invalid length. [ 256.352227][T11003] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1375'. [ 256.509714][T11015] openvswitch: netlink: Message has 4 unknown bytes. [ 257.589904][T11063] veth1_virt_wifi: entered allmulticast mode [ 257.754634][T11070] Bluetooth: MGMT ver 1.23 [ 258.180683][T11089] __nla_validate_parse: 5 callbacks suppressed [ 258.180702][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 258.253331][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 258.274611][T11091] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 258.511017][T11100] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 258.725571][T11107] 8021q: VLANs not supported on gre0 [ 259.633722][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 259.651919][T11154] nbd: must specify a size in bytes for the device [ 260.051176][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 260.078694][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'. [ 260.141390][T11175] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1429'. [ 260.200503][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1429'. [ 260.591320][T11187] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 260.671766][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 260.761299][T11187] bond8: entered promiscuous mode [ 260.767738][T11187] bond8: entered allmulticast mode [ 260.834052][T11192] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 260.863640][T11192] bond8: (slave bridge5): making interface the new active one [ 260.871367][T11192] bridge5: entered promiscuous mode [ 260.886044][T11192] bridge5: entered allmulticast mode [ 260.913098][T11192] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 260.917544][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 260.934240][T11199] SET target dimension over the limit! [ 260.937232][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 260.994304][T11198] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 261.011489][T11198] bridge0: port 1(team0) entered blocking state [ 261.036018][T11201] netlink: 'syz.4.1438': attribute type 15 has an invalid length. [ 261.058392][T11198] bridge0: port 1(team0) entered disabled state [ 261.065407][T11198] team0: entered allmulticast mode [ 261.106186][T11198] team0: entered promiscuous mode [ 261.648706][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 261.750843][T11233] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 261.928052][T11233] bond6: entered promiscuous mode [ 261.970421][T11233] bond6: entered allmulticast mode [ 262.083857][T11239] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 262.135401][T11239] bond6: (slave bridge5): making interface the new active one [ 262.158121][T11239] bridge5: entered promiscuous mode [ 262.175092][T11239] bridge5: entered allmulticast mode [ 262.192321][T11239] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 262.457521][T11249] netlink: 'syz.2.1450': attribute type 12 has an invalid length. [ 262.500754][T11251] wg2: entered promiscuous mode [ 262.506319][T11251] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 262.691754][ T30] audit: type=1800 audit(1750636058.734:6): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1449" name="cgroup.controllers" dev="tmpfs" ino=1556 res=0 errno=0 [ 263.155020][T11259] macvlan0: entered allmulticast mode [ 263.168833][T11264] tipc: Enabling not permitted [ 263.192894][T11264] tipc: Enabling of bearer rejected, failed to enable media [ 263.454879][T11275] __nla_validate_parse: 6 callbacks suppressed [ 263.454899][T11275] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1455'. [ 263.517640][T11275] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1455'. [ 264.508241][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 264.838387][T11332] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 265.046455][T11332] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.104964][T11337] gretap2: entered promiscuous mode [ 265.149818][T11337] bond7: (slave gretap2): making interface the new active one [ 265.200834][T11337] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 265.246942][T11342] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 265.840471][T11373] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1476'. [ 266.141001][T11384] sctp: [Deprecated]: syz.4.1479 (pid 11384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.141001][T11384] Use struct sctp_sack_info instead [ 266.293128][T11386] sctp: [Deprecated]: syz.1.1480 (pid 11386) Use of int in max_burst socket option. [ 266.293128][T11386] Use struct sctp_assoc_value instead [ 267.426772][T11410] syzkaller1: entered promiscuous mode [ 267.437658][T11410] syzkaller1: entered allmulticast mode [ 267.497726][T11399] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.968834][T11417] tipc: MTU too low for tipc bearer [ 268.726691][T11451] dvmrp0: entered allmulticast mode [ 268.738853][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 269.275390][T11453] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.671390][T11471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1498'. [ 269.787296][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 269.834262][T11474] syz_tun: entered promiscuous mode [ 269.845161][T11474] batadv_slave_0: entered promiscuous mode [ 269.873369][T11474] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 269.904064][T11474] Cannot create hsr debugfs directory [ 269.951752][T11471] block nbd0: server does not support multiple connections per device. [ 269.975765][T11471] block nbd0: shutting down sockets [ 270.055492][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.068714][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.100880][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.134457][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.184927][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.238941][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.247269][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.266429][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.326045][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.339027][T11482] netlink: 'syz.0.1501': attribute type 11 has an invalid length. [ 270.350203][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 270.525938][T11505] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1507'. [ 270.793046][T11524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1512'. [ 271.044905][T11528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1513'. [ 271.667414][T11547] syz.3.1518: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.731084][T11547] CPU: 1 UID: 0 PID: 11547 Comm: syz.3.1518 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 271.731115][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.731143][T11547] Call Trace: [ 271.731156][T11547] [ 271.731165][T11547] dump_stack_lvl+0x189/0x250 [ 271.731209][T11547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.731242][T11547] ? __pfx__printk+0x10/0x10 [ 271.731266][T11547] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 271.731289][T11547] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 271.731315][T11547] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 271.731341][T11547] warn_alloc+0x214/0x310 [ 271.731366][T11547] ? stack_depot_save_flags+0x40/0x900 [ 271.731398][T11547] ? __pfx_warn_alloc+0x10/0x10 [ 271.731424][T11547] ? kasan_save_track+0x4f/0x80 [ 271.731456][T11547] ? xskq_create+0x56/0x170 [ 271.731474][T11547] ? xsk_init_queue+0xb0/0x110 [ 271.731502][T11547] ? xsk_setsockopt+0x43f/0x710 [ 271.731530][T11547] ? do_sock_setsockopt+0x257/0x3e0 [ 271.731578][T11547] ? __x64_sys_setsockopt+0x18b/0x220 [ 271.731605][T11547] ? do_syscall_64+0xfa/0x3b0 [ 271.731625][T11547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.731656][T11547] __vmalloc_node_range_noprof+0x125/0x12f0 [ 271.731714][T11547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.731746][T11547] ? __kasan_kmalloc+0x93/0xb0 [ 271.731769][T11547] vmalloc_user_noprof+0xad/0xf0 [ 271.731793][T11547] ? xskq_create+0xbf/0x170 [ 271.731819][T11547] xskq_create+0xbf/0x170 [ 271.731844][T11547] xsk_init_queue+0xb0/0x110 [ 271.731881][T11547] xsk_setsockopt+0x43f/0x710 [ 271.731924][T11547] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.731954][T11547] ? __lock_acquire+0xab9/0xd20 [ 271.731997][T11547] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 271.732023][T11547] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.732056][T11547] do_sock_setsockopt+0x257/0x3e0 [ 271.732091][T11547] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 271.732127][T11547] ? __fget_files+0x2a/0x420 [ 271.732161][T11547] __x64_sys_setsockopt+0x18b/0x220 [ 271.732199][T11547] do_syscall_64+0xfa/0x3b0 [ 271.732220][T11547] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.732239][T11547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.732259][T11547] ? clear_bhb_loop+0x60/0xb0 [ 271.732285][T11547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.732305][T11547] RIP: 0033:0x7f27cc78e929 [ 271.732323][T11547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.732342][T11547] RSP: 002b:00007f27ca5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.732366][T11547] RAX: ffffffffffffffda RBX: 00007f27cc9b5fa0 RCX: 00007f27cc78e929 [ 271.732381][T11547] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 271.732394][T11547] RBP: 00007f27cc810b39 R08: 0000000000000004 R09: 0000000000000000 [ 271.732408][T11547] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.732421][T11547] R13: 0000000000000000 R14: 00007f27cc9b5fa0 R15: 00007ffc51cc7218 [ 271.732455][T11547] [ 271.732748][T11547] Mem-Info: [ 272.058258][T11547] active_anon:9651 inactive_anon:0 isolated_anon:0 [ 272.058258][T11547] active_file:2035 inactive_file:39926 isolated_file:0 [ 272.058258][T11547] unevictable:768 dirty:160 writeback:0 [ 272.058258][T11547] slab_reclaimable:12128 slab_unreclaimable:128849 [ 272.058258][T11547] mapped:37965 shmem:6292 pagetables:1093 [ 272.058258][T11547] sec_pagetables:0 bounce:0 [ 272.058258][T11547] kernel_misc_reclaimable:0 [ 272.058258][T11547] free:1279474 free_pcp:20850 free_cma:0 [ 272.135224][T11547] Node 0 active_anon:39192kB inactive_anon:0kB active_file:8140kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152560kB dirty:644kB writeback:0kB shmem:24324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13936kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.269472][T11547] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.354107][T11547] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.403465][T11557] veth1_virt_wifi: left allmulticast mode [ 272.421519][T11557] macsec1: left allmulticast mode [ 272.533655][T11547] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 272.540279][T11547] Node 0 DMA32 free:1194424kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41744kB inactive_anon:0kB active_file:8140kB inactive_file:157684kB unevictable:1536kB writepending:644kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:73320kB local_pcp:32716kB free_cma:0kB [ 272.587999][T11547] lowmem_reserve[]: 0 0 1 1 1 [ 272.614977][T11547] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 272.647122][T11547] lowmem_reserve[]: 0 0 0 0 0 [ 272.680865][T11547] Node 1 Normal free:3910584kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13280kB local_pcp:8800kB free_cma:0kB [ 272.720181][T11547] lowmem_reserve[]: 0 0 0 0 0 [ 272.725271][T11547] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.741687][T11547] Node 0 DMA32: 122*4kB (UME) 277*8kB (UM) 47*16kB (U) 1313*32kB (UE) 962*64kB (UE) 178*128kB (UME) 60*256kB (UM) 26*512kB (UME) 19*1024kB (UME) 10*2048kB (UME) 245*4096kB (UM) = 1201952kB [ 272.762022][T11547] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 272.776534][T11547] Node 1 Normal: 156*4kB (UME) 43*8kB (UME) 47*16kB (UME) 136*32kB (UME) 44*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 950*4096kB (M) = 3910584kB [ 272.797494][T11547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.817997][T11547] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.839878][T11547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.853349][T11547] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.863246][T11547] 46673 total pagecache pages [ 272.868392][T11547] 0 pages in swap cache [ 272.877829][T11547] Free swap = 124996kB [ 272.882324][T11547] Total swap = 124996kB [ 272.886511][T11547] 2097051 pages RAM [ 272.894623][T11547] 0 pages HighMem/MovableOnly [ 272.901264][T11547] 424693 pages reserved [ 272.905592][T11547] 0 pages cma reserved [ 273.117118][T11572] xt_TCPMSS: Only works on TCP SYN packets [ 273.376076][T11581] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 273.400268][T11581] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1528'. [ 273.690379][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 273.703973][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 273.763660][T11605] rdma_rxe: rxe_newlink: failed to add team0 [ 274.553110][T11650] syz_tun: entered allmulticast mode [ 274.604777][T11650] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1547'. [ 274.696307][T11650] syz_tun (unregistering): left allmulticast mode [ 274.723267][T11650] syz_tun (unregistering): left promiscuous mode [ 274.876399][T11656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.912571][ T7194] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 274.945565][ T7194] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 274.968184][T11664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.968338][ T3431] wlan1: authenticated [ 274.999312][T11666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1553'. [ 275.039351][ T3431] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 275.079421][ T3431] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 275.086349][ T3431] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 275.094689][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'. [ 275.129488][ T3431] wlan1: association with 08:02:11:00:00:00 timed out [ 275.140975][T11656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.957584][T11670] netlink: 'syz.3.1554': attribute type 7 has an invalid length. [ 275.972509][T11670] netlink: 'syz.3.1554': attribute type 3 has an invalid length. [ 275.989367][T11670] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1554'. [ 276.129437][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 276.368747][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.513123][T11689] tipc: Enabled bearer , priority 10 [ 276.616099][T11689] tipc: Resetting bearer [ 276.735117][T11687] tipc: Resetting bearer [ 276.937349][T11701] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1564'. [ 278.181504][T11687] tipc: Disabling bearer [ 278.302240][T11712] netlink: 'syz.1.1566': attribute type 7 has an invalid length. [ 278.319345][T11712] netlink: 'syz.1.1566': attribute type 3 has an invalid length. [ 278.338523][T11712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1566'. [ 278.473433][T11723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1568'. [ 278.492999][T11725] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 278.520591][T11725] netlink: 'syz.0.1570': attribute type 2 has an invalid length. [ 278.523864][T11716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1568'. [ 278.535767][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 278.713756][T11735] netlink: 'syz.0.1576': attribute type 1 has an invalid length. [ 278.725006][T11733] IPv6: NLM_F_REPLACE set, but no existing node found! [ 278.762536][T11735] bond6: entered promiscuous mode [ 278.767763][T11735] bond6: entered allmulticast mode [ 278.785177][T11735] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 278.810725][T11735] bond6: (slave bridge8): making interface the new active one [ 278.822492][T11735] bridge8: entered promiscuous mode [ 278.828134][T11735] bridge8: entered allmulticast mode [ 278.835564][T11735] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 279.093430][T11754] netlink: 'syz.3.1581': attribute type 7 has an invalid length. [ 279.111924][T11754] netlink: 'syz.3.1581': attribute type 3 has an invalid length. [ 279.266215][ T8958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.290706][ T8958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.312932][T11765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.645645][T11783] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 279.688909][T11783] bond11: entered promiscuous mode [ 279.694184][T11783] bond11: entered allmulticast mode [ 279.708965][T11785] __nla_validate_parse: 5 callbacks suppressed [ 279.708977][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 279.816913][T11785] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 279.850693][T11785] bond11: (slave bridge7): making interface the new active one [ 279.877168][T11785] bridge7: entered promiscuous mode [ 279.900257][T11785] bridge7: entered allmulticast mode [ 279.907232][T11785] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 279.939237][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 279.964253][T11790] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 279.978783][T11790] netlink: 'syz.0.1591': attribute type 2 has an invalid length. [ 280.169377][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1593'. [ 280.221185][T11798] netlink: 'syz.3.1594': attribute type 7 has an invalid length. [ 280.244767][T11798] netlink: 'syz.3.1594': attribute type 3 has an invalid length. [ 280.271196][T11798] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1594'. [ 280.497079][T11820] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1600'. [ 280.597225][T11825] bridge_slave_1: left allmulticast mode [ 280.618119][T11825] bridge_slave_1: left promiscuous mode [ 280.632932][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.644293][T11827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1601'. [ 280.656733][T11825] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 280.753171][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 280.754802][T11830] bond9: entered promiscuous mode [ 280.767495][T11830] bond9: entered allmulticast mode [ 280.856114][T11838] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1606'. [ 280.874458][T11834] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 280.888071][T11834] bond9: (slave bridge7): making interface the new active one [ 280.895904][T11834] bridge7: entered promiscuous mode [ 280.901534][T11834] bridge7: entered allmulticast mode [ 280.909884][T11834] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 280.923403][T11840] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 280.965771][T11838] vlan3: entered allmulticast mode [ 280.988557][T11838] veth1: entered allmulticast mode [ 281.082536][T11848] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1609'. [ 281.306866][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 282.188327][T11911] dummy0: left promiscuous mode [ 282.204342][T11911] bridge0: port 3(dummy0) entered disabled state [ 282.255863][T11911] bond0: (slave batadv0): Releasing backup interface [ 282.293547][T11911] bridge_slave_0: left promiscuous mode [ 282.301043][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.322869][T11911] bridge_slave_1: left allmulticast mode [ 282.328819][T11911] bridge_slave_1: left promiscuous mode [ 282.334764][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.348162][T11911] bond8: (slave veth0_to_bond): Releasing active interface [ 282.356230][T11911] bond8: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 282.375883][T11911] bond8: (slave vlan3): making interface the new active one [ 282.383766][T11911] veth1: entered promiscuous mode [ 282.392732][T11911] bond0: (slave bond_slave_0): Releasing backup interface [ 282.423191][T11911] bond0: (slave bond_slave_1): Releasing backup interface [ 282.454961][T11926] Cannot find add_set index 0 as target [ 282.458384][T11911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.467480][T11926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.472881][T11911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.493873][T11911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.513262][T11911] bond2: (slave bridge1): Releasing active interface [ 282.520870][T11911] bridge1: left promiscuous mode [ 282.526120][T11911] bridge1: left allmulticast mode [ 282.543079][T11911] bond3: (slave bridge2): Releasing active interface [ 282.550393][T11911] bridge2: left promiscuous mode [ 282.555645][T11911] bridge2: left allmulticast mode [ 282.564742][T11911] bond4: (slave bridge3): Releasing active interface [ 282.572095][T11911] bridge3: left promiscuous mode [ 282.577166][T11911] bridge3: left allmulticast mode [ 282.586250][T11911] bond5: (slave bridge4): Releasing active interface [ 282.593743][T11911] bridge4: left promiscuous mode [ 282.599501][T11911] bridge4: left allmulticast mode [ 282.608035][T11911] bond6: (slave bridge5): Releasing active interface [ 282.615618][T11911] bridge5: left promiscuous mode [ 282.621183][T11911] bridge5: left allmulticast mode [ 282.632318][T11911] bond7: (slave bridge6): Releasing active interface [ 282.639828][T11911] bridge6: left promiscuous mode [ 282.644952][T11911] bridge6: left allmulticast mode [ 282.655052][T11911] bond8: (slave vlan3): Releasing active interface [ 282.664656][T11911] veth1: left promiscuous mode [ 282.673852][T11911] bond11: (slave bridge7): Releasing active interface [ 282.681433][T11911] bridge7: left promiscuous mode [ 282.686509][T11911] bridge7: left allmulticast mode [ 282.749470][T11926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.268216][T11952] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.359119][T11956] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.366314][T11956] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 283.379329][T11956] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 283.432490][T11952] gretap2: entered promiscuous mode [ 283.449261][T11952] bond10: (slave gretap2): making interface the new active one [ 283.458193][T11952] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 283.514819][T11961] bond10: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 283.925467][T11987] validate_nla: 8 callbacks suppressed [ 283.925486][T11987] netlink: 'syz.2.1650': attribute type 7 has an invalid length. [ 283.943249][T11987] netlink: 'syz.2.1650': attribute type 3 has an invalid length. [ 284.054859][T11991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.118897][T11991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.209851][T11991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.340976][T11991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.407431][T12005] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 284.413681][T11997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.429343][T11998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.545817][T12005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.572365][T12011] vlan2: entered promiscuous mode [ 284.577629][T12011] bond8: entered promiscuous mode [ 284.588039][T12011] vlan2: entered allmulticast mode [ 284.602915][T12011] bond8: entered allmulticast mode [ 284.646889][T12012] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 284.708313][ T8958] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 284.806307][ T8958] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 284.844450][ T8958] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 284.997328][ T3472] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.036341][T12025] syz0: rxe_newlink: already configured on team0 [ 285.172458][T12028] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 285.266248][T12037] netlink: 'syz.0.1663': attribute type 7 has an invalid length. [ 285.274469][T12037] netlink: 'syz.0.1663': attribute type 3 has an invalid length. [ 285.282701][T12037] __nla_validate_parse: 14 callbacks suppressed [ 285.282720][T12037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1663'. [ 286.226686][T12079] netlink: 'syz.1.1673': attribute type 13 has an invalid length. [ 286.235018][T12079] netlink: 'syz.1.1673': attribute type 17 has an invalid length. [ 286.267291][T12082] bond6: left promiscuous mode [ 286.272320][T12082] bridge8: left promiscuous mode [ 286.280046][T12082] bond6: left allmulticast mode [ 286.284938][T12082] bridge8: left allmulticast mode [ 286.295334][T12084] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.342153][T12082] vlan2: left promiscuous mode [ 286.357225][T12082] bond8: left promiscuous mode [ 286.376838][T12082] vlan2: left allmulticast mode [ 286.391915][T12082] bond8: left allmulticast mode [ 286.410874][T12079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.575534][T12079] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 286.798175][T12096] ªªªªª@: renamed from bridge_slave_0 (while UP) [ 287.354434][T12074] rdma_rxe: rxe_newlink: failed to add team0 [ 287.738664][T12108] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1678'. [ 287.752832][T12115] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1678'. [ 287.875862][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 287.898051][T12118] veth0_to_bond: entered allmulticast mode [ 287.926265][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 287.966137][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 287.999841][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 288.029973][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 288.062523][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 288.087400][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 289.621953][T12163] netlink: 'syz.2.1692': attribute type 30 has an invalid length. [ 289.653568][T12168] netlink: 'syz.1.1693': attribute type 1 has an invalid length. [ 290.031687][T12168] bond8: entered promiscuous mode [ 290.036784][T12168] bond8: entered allmulticast mode [ 290.059837][T12169] bridge36: the hash_elasticity option has been deprecated and is always 16 [ 290.076451][T12169] bond8: (slave bridge36): making interface the new active one [ 290.084380][T12169] bridge36: entered promiscuous mode [ 290.090814][T12169] bridge36: entered allmulticast mode [ 290.097014][T12169] bond8: (slave bridge36): Enslaving as an active interface with an up link [ 290.397550][T12175] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 290.883634][T12193] Cannot find del_set index 286 as target [ 290.974178][T12204] __nla_validate_parse: 61 callbacks suppressed [ 290.974199][T12204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1702'. [ 291.181440][T12222] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 291.195806][T12222] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 291.207537][T12219] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 291.232004][T12219] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.279631][T12225] team0: No ports can be present during mode change [ 291.287528][T12226] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 291.571236][T12236] rdma_rxe: rxe_newlink: failed to add team0 [ 291.581320][T12238] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 291.590682][T12238] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1711'. [ 291.940348][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1716'. [ 292.237608][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 292.237863][T12269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.248190][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 292.280704][T12273] wireguard0: entered promiscuous mode [ 292.299550][T12273] wireguard0: entered allmulticast mode [ 292.349835][T12280] netlink: 'syz.1.1722': attribute type 10 has an invalid length. [ 292.382868][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 292.431575][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 292.463053][T12284] bridge_slave_0: left promiscuous mode [ 292.480158][T12284] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.784337][T12289] macvlan0: entered promiscuous mode [ 292.793337][T12289] macvlan0: entered allmulticast mode [ 292.849966][T12289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1726'. [ 293.062389][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1731'. [ 293.082476][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 293.516841][T12336] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 293.547590][T12336] bond9: entered promiscuous mode [ 293.553454][T12336] bond9: entered allmulticast mode [ 293.570376][T12336] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 293.583343][T12336] bond9: (slave bridge0): making interface the new active one [ 293.591253][T12336] bridge0: entered promiscuous mode [ 293.596618][T12336] bridge0: entered allmulticast mode [ 293.604188][T12336] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 293.665300][T12345] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 293.729702][T12347] netlink: 'syz.1.1743': attribute type 7 has an invalid length. [ 293.737716][T12347] netlink: 'syz.1.1743': attribute type 3 has an invalid length. [ 293.847321][T12354] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 294.129217][T12365] vcan1: entered allmulticast mode [ 294.757377][T12383] 8021q: adding VLAN 0 to HW filter on device bond9 [ 294.879796][T12398] vlan5: entered promiscuous mode [ 294.885301][T12398] bond9: entered promiscuous mode [ 294.895106][T12398] vlan5: entered allmulticast mode [ 294.915570][T12398] bond9: entered allmulticast mode [ 295.030128][T12412] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 295.277629][T12425] syzkaller1: entered promiscuous mode [ 295.285714][T12425] syzkaller1: entered allmulticast mode [ 295.387908][T12427] validate_nla: 4 callbacks suppressed [ 295.387930][T12427] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 295.573310][T12431] bond12: (slave gretap1): making interface the new active one [ 295.582894][T12431] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 295.821791][T12437] netlink: 'syz.4.1766': attribute type 7 has an invalid length. [ 295.831934][T12437] netlink: 'syz.4.1766': attribute type 3 has an invalid length. [ 296.347684][T12462] __nla_validate_parse: 19 callbacks suppressed [ 296.347706][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1773'. [ 296.814503][T12476] netlink: 'syz.1.1778': attribute type 7 has an invalid length. [ 296.823813][T12476] netlink: 'syz.1.1778': attribute type 3 has an invalid length. [ 296.849482][T12476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1778'. [ 296.881402][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 296.911969][T12478] sch_tbf: burst 5 is lower than device bridge10 mtu (1514) ! [ 297.097490][T12483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1780'. [ 297.278863][T12489] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 297.359234][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 297.445340][T12489] bond11: entered promiscuous mode [ 297.503720][T12489] bond11: entered allmulticast mode [ 297.527590][T12496] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 297.554073][T12504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'. [ 297.572815][T12496] bond11: (slave bridge11): making interface the new active one [ 297.604088][T12496] bridge11: entered promiscuous mode [ 297.629268][T12496] bridge11: entered allmulticast mode [ 297.640193][T12496] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 297.804292][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 297.844555][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 297.859648][T12514] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1788'. [ 297.868185][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 297.955818][T12520] netlink: 'syz.2.1791': attribute type 7 has an invalid length. [ 297.979333][T12520] netlink: 'syz.2.1791': attribute type 3 has an invalid length. [ 298.032100][T12526] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 298.048711][T12526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.069482][T12526] ip6tnl4: entered promiscuous mode [ 298.074747][T12526] ip6tnl4: entered allmulticast mode [ 298.084154][T12526] team0: Refused to change device type [ 298.464804][T12552] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 298.576561][T12552] bond12: entered promiscuous mode [ 298.594365][T12552] bond12: entered allmulticast mode [ 298.676631][T12557] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 298.719645][T12557] bond12: (slave bridge12): making interface the new active one [ 298.741411][T12557] bridge12: entered promiscuous mode [ 298.747038][T12557] bridge12: entered allmulticast mode [ 298.759664][T12557] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 298.907422][T12571] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 298.913812][T12569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.052108][T12578] netlink: 'syz.4.1806': attribute type 7 has an invalid length. [ 299.191996][T12588] x_tables: duplicate underflow at hook 1 [ 299.356592][T12601] pim6reg1: entered promiscuous mode [ 299.362634][T12601] pim6reg1: entered allmulticast mode [ 299.813610][T12620] delete_channel: no stack [ 300.365926][T12633] ip6gretap0: entered promiscuous mode [ 300.657746][T12633] ip6gretap0: left promiscuous mode [ 300.875012][ T7194] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 300.890385][ T7194] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 300.956461][ T7194] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 301.127006][T12680] xt_ecn: cannot match TCP bits for non-tcp packets [ 301.173140][T12674] fido_id[12674]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 301.533622][T12699] validate_nla: 2 callbacks suppressed [ 301.533641][T12699] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 301.557323][T12699] __nla_validate_parse: 13 callbacks suppressed [ 301.557342][T12699] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1843'. [ 302.104835][T12714] syz0: rxe_newlink: already configured on team0 [ 302.148553][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1849'. [ 302.359647][T12723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1852'. [ 302.384130][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1852'. [ 302.422468][T12723] sch_tbf: burst 5 is lower than device bridge13 mtu (1514) ! [ 302.992146][T12755] smc: removing ib device syz0 [ 302.999517][T12756] netlink: 'syz.1.1861': attribute type 12 has an invalid length. [ 303.007780][T12756] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1861'. [ 303.016772][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1863'. [ 303.057001][T12759] siw: device registration error -23 [ 303.280818][T12752] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 303.490295][T12775] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 304.042678][T12788] netlink: 'syz.1.1873': attribute type 7 has an invalid length. [ 304.055493][T12788] netlink: 'syz.1.1873': attribute type 3 has an invalid length. [ 304.066877][T12788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1873'. [ 304.195836][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1876'. [ 304.402553][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 304.504211][T12803] xt_cgroup: invalid path, errno=-2 [ 304.562368][T12805] netlink: 'syz.4.1878': attribute type 5 has an invalid length. [ 304.617502][T12809] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1878'. [ 304.639653][T12809] unsupported nla_type 65024 [ 304.664878][T12800] geneve2: entered promiscuous mode [ 304.670769][T12800] geneve2: entered allmulticast mode [ 306.908641][T12934] __nla_validate_parse: 10 callbacks suppressed [ 306.908670][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 307.216513][T12940] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1915'. [ 307.253775][T12940] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1915'. [ 307.298948][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.327706][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.360796][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.384732][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.435532][T12953] netlink: 'syz.2.1918': attribute type 23 has an invalid length. [ 307.467517][T12953] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1918'. [ 307.831108][T12959] nla_validate_range_unsigned: 11 callbacks suppressed [ 307.831123][T12959] netlink: 'syz.4.1914': attribute type 11 has an invalid length. [ 307.861234][T12959] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1914'. [ 307.882346][T12959] netlink: 'syz.4.1914': attribute type 16 has an invalid length. [ 307.883535][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 307.904891][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 307.942795][T12959] netlink: 'syz.4.1914': attribute type 17 has an invalid length. [ 307.997299][T12959] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 308.656992][T13005] netlink: 376 bytes leftover after parsing attributes in process `syz.2.1930'. [ 308.678323][T13005] netlink: 'syz.2.1930': attribute type 2 has an invalid length. [ 308.806156][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1931'. [ 308.819595][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 308.966281][T13014] netlink: 'syz.2.1933': attribute type 2 has an invalid length. [ 308.976702][T13014] netlink: 'syz.2.1933': attribute type 8 has an invalid length. [ 309.018009][T13014] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.055736][T13014] netlink: 'syz.2.1933': attribute type 13 has an invalid length. [ 309.855355][T13055] delete_channel: no stack [ 310.497588][T13076] 8021q: VLANs not supported on caif0 [ 310.602924][T13080] pim6reg1: entered promiscuous mode [ 310.627362][T13080] pim6reg1: entered allmulticast mode [ 310.686748][T13089] netlink: 'syz.0.1957': attribute type 7 has an invalid length. [ 310.760001][T13089] netlink: 'syz.0.1957': attribute type 3 has an invalid length. [ 311.113332][T13062] mpoa:mpoad_close: () going down [ 311.186925][T13097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.204622][T13097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.542583][T13097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.558521][T13097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.604459][T13122] veth6: entered allmulticast mode [ 311.716839][T13097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.730611][T13097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.912469][T13097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.959782][T13097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.164659][T13140] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 312.252276][T13148] netlink: 'syz.3.1970': attribute type 7 has an invalid length. [ 312.261579][T13148] __nla_validate_parse: 16 callbacks suppressed [ 312.261599][T13148] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1970'. [ 312.340051][ T64] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.348317][ T64] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.410579][ T3472] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.438142][ T3472] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.483970][ T1035] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.511300][ T1035] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.526948][T13156] batadv0: entered promiscuous mode [ 312.533214][T13156] macsec2: entered promiscuous mode [ 312.542918][T13156] batadv0: left promiscuous mode [ 312.697492][ T1035] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.706917][ T1035] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.724913][T13103] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.735576][T13103] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.764139][ T1035] ================================================================== [ 312.772276][ T1035] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 312.779774][ T1035] Read of size 8 at addr ffff888032c026b0 by task kworker/u8:5/1035 [ 312.787948][ T1035] [ 312.790297][ T1035] CPU: 1 UID: 0 PID: 1035 Comm: kworker/u8:5 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 312.790324][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.790338][ T1035] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 312.790371][ T1035] Call Trace: [ 312.790379][ T1035] [ 312.790387][ T1035] dump_stack_lvl+0x189/0x250 [ 312.790418][ T1035] ? __virt_addr_valid+0x1c8/0x5c0 [ 312.790438][ T1035] ? rcu_is_watching+0x15/0xb0 [ 312.790467][ T1035] ? __kasan_check_byte+0x12/0x40 [ 312.790487][ T1035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.790515][ T1035] ? rcu_is_watching+0x15/0xb0 [ 312.790544][ T1035] ? lock_release+0x4b/0x3e0 [ 312.790572][ T1035] ? __virt_addr_valid+0x1c8/0x5c0 [ 312.790591][ T1035] ? __virt_addr_valid+0x4a5/0x5c0 [ 312.790611][ T1035] print_report+0xd2/0x2b0 [ 312.790637][ T1035] ? __mutex_lock+0x144/0xe80 [ 312.790656][ T1035] kasan_report+0x118/0x150 [ 312.790674][ T1035] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 312.790704][ T1035] ? __mutex_lock+0x144/0xe80 [ 312.790727][ T1035] __mutex_lock+0x144/0xe80 [ 312.790746][ T1035] ? __lock_acquire+0xab9/0xd20 [ 312.790771][ T1035] ? __mutex_lock+0x51b/0xe80 [ 312.790793][ T1035] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 312.790818][ T1035] ? __pfx___mutex_lock+0x10/0x10 [ 312.790842][ T1035] ? __lock_acquire+0xab9/0xd20 [ 312.790873][ T1035] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 312.790902][ T1035] ? process_scheduled_works+0x9ef/0x17b0 [ 312.790931][ T1035] ? process_scheduled_works+0x9ef/0x17b0 [ 312.790959][ T1035] process_scheduled_works+0xae1/0x17b0 [ 312.791002][ T1035] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.791041][ T1035] worker_thread+0x8a0/0xda0 [ 312.791059][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.791102][ T1035] ? __kthread_parkme+0x7b/0x200 [ 312.791126][ T1035] kthread+0x70e/0x8a0 [ 312.791148][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 312.791177][ T1035] ? __pfx_kthread+0x10/0x10 [ 312.791199][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.791227][ T1035] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.791245][ T1035] ? __pfx_kthread+0x10/0x10 [ 312.791266][ T1035] ret_from_fork+0x3f9/0x770 [ 312.791294][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 312.791325][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 312.791323][ T1035] ? __switch_to_asm+0x39/0x70 [ 312.791342][ T1035] ? __switch_to_asm+0x33/0x70 [ 312.791361][ T1035] ? __pfx_kthread+0x10/0x10 [ 312.791380][ T1035] ret_from_fork_asm+0x1a/0x30 [ 312.791412][ T1035] [ 312.791419][ T1035] [ 313.041361][ T1035] Allocated by task 13097: [ 313.045791][ T1035] kasan_save_track+0x3e/0x80 [ 313.050492][ T1035] __kasan_kmalloc+0x93/0xb0 [ 313.055085][ T1035] __kmalloc_noprof+0x27a/0x4f0 [ 313.059925][ T1035] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 313.066117][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.071229][ T1035] register_netdevice+0x1608/0x1ae0 [ 313.076426][ T1035] nsim_create+0xabc/0xee0 [ 313.080843][ T1035] __nsim_dev_port_add+0x70a/0xb20 [ 313.085957][ T1035] nsim_dev_port_add_all+0x35/0xe0 [ 313.091065][ T1035] nsim_dev_reload_up+0x451/0x780 [ 313.096093][ T1035] devlink_reload+0x4ec/0x8d0 [ 313.100767][ T1035] devlink_nl_reload_doit+0xb35/0xd50 [ 313.106180][ T1035] genl_family_rcv_msg_doit+0x212/0x300 [ 313.111725][ T1035] genl_rcv_msg+0x60e/0x790 [ 313.116222][ T1035] netlink_rcv_skb+0x205/0x470 [ 313.120985][ T1035] genl_rcv+0x28/0x40 [ 313.124978][ T1035] netlink_unicast+0x758/0x8d0 [ 313.129733][ T1035] netlink_sendmsg+0x805/0xb30 [ 313.134525][ T1035] __sock_sendmsg+0x21c/0x270 [ 313.139195][ T1035] ____sys_sendmsg+0x505/0x830 [ 313.143993][ T1035] ___sys_sendmsg+0x21f/0x2a0 [ 313.148698][ T1035] __x64_sys_sendmsg+0x19b/0x260 [ 313.153636][ T1035] do_syscall_64+0xfa/0x3b0 [ 313.158132][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.164020][ T1035] [ 313.166342][ T1035] Freed by task 13103: [ 313.170406][ T1035] kasan_save_track+0x3e/0x80 [ 313.175085][ T1035] kasan_save_free_info+0x46/0x50 [ 313.180109][ T1035] __kasan_slab_free+0x62/0x70 [ 313.184870][ T1035] kfree+0x18e/0x440 [ 313.188767][ T1035] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 313.195008][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.200126][ T1035] unregister_netdevice_many_notify+0x15d8/0x2320 [ 313.206533][ T1035] unregister_netdevice_queue+0x33c/0x380 [ 313.212246][ T1035] nsim_destroy+0x217/0x6a0 [ 313.216742][ T1035] __nsim_dev_port_del+0x14d/0x1b0 [ 313.221851][ T1035] nsim_dev_reload_destroy+0x288/0x490 [ 313.227315][ T1035] nsim_dev_reload_down+0x8a/0xc0 [ 313.232337][ T1035] devlink_reload+0x1b6/0x8d0 [ 313.237011][ T1035] devlink_nl_reload_doit+0xb35/0xd50 [ 313.242390][ T1035] genl_family_rcv_msg_doit+0x212/0x300 [ 313.247942][ T1035] genl_rcv_msg+0x60e/0x790 [ 313.252446][ T1035] netlink_rcv_skb+0x205/0x470 [ 313.257221][ T1035] genl_rcv+0x28/0x40 [ 313.261230][ T1035] netlink_unicast+0x758/0x8d0 [ 313.266010][ T1035] netlink_sendmsg+0x805/0xb30 [ 313.270785][ T1035] __sock_sendmsg+0x21c/0x270 [ 313.275464][ T1035] ____sys_sendmsg+0x505/0x830 [ 313.280410][ T1035] ___sys_sendmsg+0x21f/0x2a0 [ 313.285093][ T1035] __x64_sys_sendmsg+0x19b/0x260 [ 313.290076][ T1035] do_syscall_64+0xfa/0x3b0 [ 313.294581][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.300490][ T1035] [ 313.302883][ T1035] Last potentially related work creation: [ 313.308594][ T1035] kasan_save_stack+0x3e/0x60 [ 313.313288][ T1035] kasan_record_aux_stack+0xbd/0xd0 [ 313.318492][ T1035] insert_work+0x3d/0x330 [ 313.322834][ T1035] __queue_work+0xbd9/0xfe0 [ 313.327336][ T1035] queue_work_on+0x181/0x270 [ 313.331943][ T1035] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 313.337590][ T1035] udp_tunnel_push_rx_port+0x180/0x200 [ 313.343053][ T1035] geneve_offload_rx_ports+0xd7/0x160 [ 313.348438][ T1035] geneve_netdevice_event+0x6a/0x80 [ 313.353650][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.358771][ T1035] call_netdevice_notifiers+0x88/0xc0 [ 313.364141][ T1035] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 313.370387][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.375525][ T1035] register_netdevice+0x1608/0x1ae0 [ 313.380760][ T1035] nsim_create+0xabc/0xee0 [ 313.385178][ T1035] __nsim_dev_port_add+0x70a/0xb20 [ 313.390284][ T1035] nsim_dev_port_add_all+0x35/0xe0 [ 313.395394][ T1035] nsim_dev_reload_up+0x451/0x780 [ 313.400423][ T1035] devlink_reload+0x4ec/0x8d0 [ 313.405095][ T1035] devlink_nl_reload_doit+0xb35/0xd50 [ 313.410484][ T1035] genl_family_rcv_msg_doit+0x212/0x300 [ 313.416463][ T1035] genl_rcv_msg+0x60e/0x790 [ 313.420962][ T1035] netlink_rcv_skb+0x205/0x470 [ 313.425738][ T1035] genl_rcv+0x28/0x40 [ 313.429746][ T1035] netlink_unicast+0x758/0x8d0 [ 313.434507][ T1035] netlink_sendmsg+0x805/0xb30 [ 313.439270][ T1035] __sock_sendmsg+0x21c/0x270 [ 313.443944][ T1035] ____sys_sendmsg+0x505/0x830 [ 313.448720][ T1035] ___sys_sendmsg+0x21f/0x2a0 [ 313.453415][ T1035] __x64_sys_sendmsg+0x19b/0x260 [ 313.458353][ T1035] do_syscall_64+0xfa/0x3b0 [ 313.462859][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.468751][ T1035] [ 313.471077][ T1035] Second to last potentially related work creation: [ 313.477649][ T1035] kasan_save_stack+0x3e/0x60 [ 313.482335][ T1035] kasan_record_aux_stack+0xbd/0xd0 [ 313.487534][ T1035] insert_work+0x3d/0x330 [ 313.491868][ T1035] __queue_work+0xcfc/0xfe0 [ 313.496389][ T1035] queue_work_on+0x181/0x270 [ 313.500977][ T1035] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 313.506637][ T1035] udp_tunnel_push_rx_port+0x180/0x200 [ 313.512097][ T1035] vxlan_offload_rx_ports+0x139/0x200 [ 313.517475][ T1035] vxlan_netdevice_event+0x111/0x470 [ 313.522781][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.527896][ T1035] call_netdevice_notifiers+0x88/0xc0 [ 313.533276][ T1035] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 313.539516][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.544659][ T1035] register_netdevice+0x1608/0x1ae0 [ 313.549854][ T1035] nsim_create+0xabc/0xee0 [ 313.554268][ T1035] __nsim_dev_port_add+0x70a/0xb20 [ 313.559379][ T1035] nsim_dev_port_add_all+0x35/0xe0 [ 313.564486][ T1035] nsim_dev_reload_up+0x451/0x780 [ 313.569509][ T1035] devlink_reload+0x4ec/0x8d0 [ 313.574183][ T1035] devlink_nl_reload_doit+0xb35/0xd50 [ 313.579548][ T1035] genl_family_rcv_msg_doit+0x212/0x300 [ 313.585089][ T1035] genl_rcv_msg+0x60e/0x790 [ 313.589583][ T1035] netlink_rcv_skb+0x205/0x470 [ 313.594340][ T1035] genl_rcv+0x28/0x40 [ 313.598326][ T1035] netlink_unicast+0x758/0x8d0 [ 313.603085][ T1035] netlink_sendmsg+0x805/0xb30 [ 313.607846][ T1035] __sock_sendmsg+0x21c/0x270 [ 313.612518][ T1035] ____sys_sendmsg+0x505/0x830 [ 313.617292][ T1035] ___sys_sendmsg+0x21f/0x2a0 [ 313.621975][ T1035] __x64_sys_sendmsg+0x19b/0x260 [ 313.626938][ T1035] do_syscall_64+0xfa/0x3b0 [ 313.631438][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.637331][ T1035] [ 313.639657][ T1035] The buggy address belongs to the object at ffff888032c02600 [ 313.639657][ T1035] which belongs to the cache kmalloc-256 of size 256 [ 313.653718][ T1035] The buggy address is located 176 bytes inside of [ 313.653718][ T1035] freed 256-byte region [ffff888032c02600, ffff888032c02700) [ 313.667514][ T1035] [ 313.669853][ T1035] The buggy address belongs to the physical page: [ 313.676294][ T1035] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32c02 [ 313.685075][ T1035] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 313.693579][ T1035] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 313.701121][ T1035] page_type: f5(slab) [ 313.705104][ T1035] raw: 00fff00000000040 ffff88801a441b40 ffffea0000a5f400 dead000000000002 [ 313.713679][ T1035] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 313.722263][ T1035] head: 00fff00000000040 ffff88801a441b40 ffffea0000a5f400 dead000000000002 [ 313.730933][ T1035] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 313.739617][ T1035] head: 00fff00000000001 ffffea0000cb0081 00000000ffffffff 00000000ffffffff [ 313.748289][ T1035] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 313.756948][ T1035] page dumped because: kasan: bad access detected [ 313.763364][ T1035] page_owner tracks the page as allocated [ 313.769064][ T1035] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 92395479174, free_ts 92392309090 [ 313.790418][ T1035] post_alloc_hook+0x240/0x2a0 [ 313.795199][ T1035] get_page_from_freelist+0x21e4/0x22c0 [ 313.800783][ T1035] __alloc_frozen_pages_noprof+0x181/0x370 [ 313.806591][ T1035] alloc_pages_mpol+0x232/0x4a0 [ 313.811439][ T1035] allocate_slab+0x8a/0x3b0 [ 313.815957][ T1035] ___slab_alloc+0xbfc/0x1480 [ 313.820673][ T1035] __kmalloc_cache_noprof+0x296/0x3d0 [ 313.826060][ T1035] ____ip_mc_inc_group+0x528/0xde0 [ 313.831166][ T1035] ip_mc_up+0x125/0x300 [ 313.835316][ T1035] inetdev_event+0xfb3/0x15b0 [ 313.839986][ T1035] notifier_call_chain+0x1b3/0x3e0 [ 313.845098][ T1035] __dev_notify_flags+0x18d/0x2e0 [ 313.850207][ T1035] netif_change_flags+0xe8/0x1a0 [ 313.855152][ T1035] do_setlink+0xc55/0x41c0 [ 313.859569][ T1035] rtnl_newlink+0x160b/0x1c70 [ 313.864245][ T1035] rtnetlink_rcv_msg+0x7cf/0xb70 [ 313.869179][ T1035] page last free pid 5834 tgid 5834 stack trace: [ 313.875507][ T1035] __free_frozen_pages+0xc71/0xe70 [ 313.880614][ T1035] __slab_free+0x326/0x400 [ 313.885028][ T1035] qlist_free_all+0x97/0x140 [ 313.889618][ T1035] kasan_quarantine_reduce+0x148/0x160 [ 313.895119][ T1035] __kasan_slab_alloc+0x22/0x80 [ 313.899990][ T1035] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 313.905871][ T1035] __alloc_skb+0x112/0x2d0 [ 313.910285][ T1035] rtmsg_ifa+0xf8/0x1f0 [ 313.914450][ T1035] __inet_insert_ifa+0x9ff/0xbf0 [ 313.919374][ T1035] inet_rtm_newaddr+0xf3a/0x18b0 [ 313.924304][ T1035] rtnetlink_rcv_msg+0x7cf/0xb70 [ 313.929232][ T1035] netlink_rcv_skb+0x205/0x470 [ 313.933995][ T1035] netlink_unicast+0x758/0x8d0 [ 313.938765][ T1035] netlink_sendmsg+0x805/0xb30 [ 313.943533][ T1035] __sock_sendmsg+0x21c/0x270 [ 313.948199][ T1035] __sys_sendto+0x3bd/0x520 [ 313.952723][ T1035] [ 313.955044][ T1035] Memory state around the buggy address: [ 313.960661][ T1035] ffff888032c02580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.968727][ T1035] ffff888032c02600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.976792][ T1035] >ffff888032c02680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.984842][ T1035] ^ [ 313.990488][ T1035] ffff888032c02700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.998557][ T1035] ffff888032c02780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.006609][ T1035] ================================================================== [ 314.025162][ T1035] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.032418][ T1035] CPU: 1 UID: 0 PID: 1035 Comm: kworker/u8:5 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 314.044597][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.054682][ T1035] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 314.062009][ T1035] Call Trace: [ 314.065306][ T1035] [ 314.068271][ T1035] dump_stack_lvl+0x99/0x250 [ 314.072894][ T1035] ? __asan_memcpy+0x40/0x70 [ 314.077494][ T1035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.082799][ T1035] ? __pfx__printk+0x10/0x10 [ 314.087419][ T1035] panic+0x2db/0x790 [ 314.091341][ T1035] ? __pfx_panic+0x10/0x10 [ 314.095783][ T1035] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 314.101701][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.108050][ T1035] ? print_memory_metadata+0x314/0x400 [ 314.113554][ T1035] ? __mutex_lock+0x144/0xe80 [ 314.118247][ T1035] check_panic_on_warn+0x89/0xb0 [ 314.123191][ T1035] ? __mutex_lock+0x144/0xe80 [ 314.127879][ T1035] end_report+0x78/0x160 [ 314.132143][ T1035] kasan_report+0x129/0x150 [ 314.136662][ T1035] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 314.142575][ T1035] ? __mutex_lock+0x144/0xe80 [ 314.147267][ T1035] __mutex_lock+0x144/0xe80 [ 314.151782][ T1035] ? __lock_acquire+0xab9/0xd20 [ 314.156648][ T1035] ? __mutex_lock+0x51b/0xe80 [ 314.161336][ T1035] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 314.167586][ T1035] ? __pfx___mutex_lock+0x10/0x10 [ 314.172622][ T1035] ? __lock_acquire+0xab9/0xd20 [ 314.177498][ T1035] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 314.183576][ T1035] ? process_scheduled_works+0x9ef/0x17b0 [ 314.189305][ T1035] ? process_scheduled_works+0x9ef/0x17b0 [ 314.195034][ T1035] process_scheduled_works+0xae1/0x17b0 [ 314.200606][ T1035] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.206600][ T1035] worker_thread+0x8a0/0xda0 [ 314.211188][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.217527][ T1035] ? __kthread_parkme+0x7b/0x200 [ 314.222472][ T1035] kthread+0x70e/0x8a0 [ 314.226551][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 314.231670][ T1035] ? __pfx_kthread+0x10/0x10 [ 314.236270][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.241471][ T1035] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.246672][ T1035] ? __pfx_kthread+0x10/0x10 [ 314.251268][ T1035] ret_from_fork+0x3f9/0x770 [ 314.255865][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 314.261000][ T1035] ? __switch_to_asm+0x39/0x70 [ 314.265780][ T1035] ? __switch_to_asm+0x33/0x70 [ 314.270543][ T1035] ? __pfx_kthread+0x10/0x10 [ 314.275134][ T1035] ret_from_fork_asm+0x1a/0x30 [ 314.279913][ T1035] [ 314.283303][ T1035] Kernel Offset: disabled [ 314.287631][ T1035] Rebooting in 86400 seconds..