last executing test programs: 2.913777384s ago: executing program 3 (id=1551): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x500000000000008) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mr_alloc\x00'}, 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "9e1050ecb1edca6a70e745f26c9e33a58584842d15e6db3d077146605345ac5f04837fcc6bbd44274bba9a5ed38d5d3a58fbb5680f38c0a19ec746ed1a1dcc6d"}, 0x48}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0x7, 0x4, 0x37, 0x0, r3, 0x0, '\x00', r6}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006e80)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="0800010001000000080001000100000008000100800000000800010000000000080001000000000008000100000000007ebd69562f4b63920800010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0xa8, 0x0, 0x58, @remote, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1, 0x20, 0x14, 0x17}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000100000000000000df9877aa974aea61321e017b1213c3c1d36a7a3e1f0edefa6ea28d9f20d6b07b4ae70278400982073d25bb88e65846511676297736d9ad4fcf0a38dae09c251248b4b4bcfd9db61832"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', r6, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x13}, 0x90) r7 = socket$inet6(0xa, 0x3, 0x1) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x0, r9}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r10, @ANYBLOB="0100fdffffff00000000050000000c00018008000100", @ANYRES32=r12, @ANYBLOB="7c00018008000300010000001400020069703665727370616e300000000000001400020076657468305f766972745f776966690008000100", @ANYRES32=r12, @ANYBLOB="0a0003e40000020008000100", @ANYRES32=0x0, @ANYBLOB="1400020062617461647630000000000000000000140002006c6f00000000000000000000000000000800030001000000"], 0x9c}}, 0x0) r13 = socket$kcm(0x2b, 0x1, 0x0) close(r13) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) 2.630615733s ago: executing program 0 (id=1556): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="e0", 0x1}], 0x1) sendto$inet6(r0, &(0x7f0000000c80)="7cffa93e1b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0x0, 0x0, 0x0) 2.389607958s ago: executing program 2 (id=1560): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2}}, 0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000200)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000d0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000008500000010000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x4000000805, 0x0) listen(r9, 0x7) sendmmsg(r9, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0) 2.216830988s ago: executing program 2 (id=1561): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000000004100000086dd6002000b004e2f00fe880000000000000000000000000001fe8000000000000000000000000000aa24206558000a000097de0000d85aa20000fd00000800040000"], 0x0) 2.076499615s ago: executing program 4 (id=1563): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @multicast2}}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000017001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) socket(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x31}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8=r7], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10656f375cceb034690100000a000000"], 0x10}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80004200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e000064657673696d300000000000000802483957e9bef58860f282b434683e0bc4c1b0647a865b3384c261a028cc3049ff6a5b27bf9e112b34044dd24158020e24f5256ac264b68e2465bb86cacf1143d71379bdb503f1637fe9c96f581ea06ba6237fccd409ed7e63195a1b7ef2c0c146b3b784c6a90ab4b8ee240ab59e328de3989f609774e1e417d7784fb78e"], 0x34}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, r11, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x40}}, 0x0) 1.795982543s ago: executing program 2 (id=1564): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0xe0}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8953, &(0x7f0000003240)={'batadv_slave_1\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x128, 0x12, 0x308, 0x0, 0x202, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x7, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'pim6reg\x00', 'caif0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'geneve0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000240)=0x5, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x8100000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000480)={0x100206, 0x0, 0x5}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c001880080001400000000008000240e8ffffff070003"], 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) socketpair(0x8, 0x428c6c294be9e3e3, 0xfffffffd, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x94, 0x1, [@m_ctinfo={0x90, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1000000}]}, {0x5c, 0x6, "0ea51009ae36bee7d75fafe24b9a71fbeaf5cbb9efee613063411ce6e9b185f4bdc196073fd6e87042430e0cde3f3534d6ffa49cb62386ae0833a9673e428fbcf6717e5bcce889ead5c1187db7c56be9d8d957c67241a503"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0xd558b9f3e65c4921}}}}]}]}, 0xa8}}, 0x0) 1.682218155s ago: executing program 3 (id=1566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x1300, '\x00', r3, 0xffffffffffffffff, 0x0, 0x800}, 0x48) 1.635376441s ago: executing program 0 (id=1567): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000006c0)) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x52}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c56090", 0x3b, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000540)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) r7 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x80) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r11, 0x10, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x400c000) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto, @struct, @int]}}, 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12, 0x0, 0x1}, 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000380)={@empty, @remote, @remote, 0x6ba5, 0x1000, 0x9, 0x400, 0x8, 0x100, r10}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r14, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x58, r9, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c804}, 0x20000004) 1.54473492s ago: executing program 4 (id=1568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "025c2e"}, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000000c0)="a18e1c85a61d8945a1e979595cd60415e0efaf80740588dda446c740b394ea79fc7c11b2fde37cc62406a52fea9c330080f23bb3d3f1ff6a949c3c980c3c432e320841a6014a749d8034820412ab0110d269c73740e161ccb103190d1e1422d43b4976ef7b77bc50322836999bf2e54a0b0ee0bd853439fcdcaaf875e6c5741e0f6f23bfeb1e7b9648b56337b0775a694175ba6c6ffb811d07070cebd02a1a0dcbff48d1e0f6", 0xa6, 0x0, 0x0, 0x0) 1.491762723s ago: executing program 3 (id=1570): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {}, {}, {}, {0x8, 0x22eb, 0x41}}}}}}}, 0x0) 1.372782672s ago: executing program 0 (id=1571): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000e50000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xb8}}, 0x20) 1.372531167s ago: executing program 4 (id=1572): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, &(0x7f0000000680)=""/3, 0x3}}], 0x1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000000)='s', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffffe, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x29, 0x0, 0x1000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="000026bd7000fbdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000a0000004d00000038007a800c000300b326827970c18a1614000200a229505704986335cb2db8930cee50c91400010006a24a382cf5dd0625a7a4a680273d0154007a801400020029f29e8c0a76260b16723cd01302a78e140001004c0d1dc36af607a9a56f0a7d79894b2c14000100e416f047ebbbb1ce870b73768c82b4fc14000200c5e8d5f6d08d25b2b84781cdf379522b44007a8014000200860869b9518bfce10ef35347927dcb6b080004000010000008000400522100001c0002002603136ceb5a685917431e2a5d7739902296a4469eba13a30c007a800800040000100000"], 0x104}}, 0x4000084) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0x4, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffff81}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_BROADCAST={0xa}]}, 0xfffffffffffffdb0}}, 0x0) 1.33524652s ago: executing program 3 (id=1573): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002100000100000000feffffff0a000000000008002200f8050000"], 0x24}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18ff00000d0e9a74ff6afed7f7910000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000380)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082bbdf000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b008c000000060016007f00000005001200100000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100100008000b00c6ad000006001600d10000000500120001000000"], 0x94}, 0x1, 0x0, 0x0, 0x24004804}, 0x20800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='fsi_master_gpio_crc_cmd_error\x00', r3}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x908, 0x4) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)=""/34, 0x22}, {0x0}, {0x0}], 0x4}, 0x101) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r7 = socket(0x2, 0x5, 0x0) bind$rds(r7, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff0200"/51, @ANYRES32], 0x0) 1.311077343s ago: executing program 2 (id=1574): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}], [@TCA_POLICE_PEAKRATE={0x450, 0x3, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) 1.245192042s ago: executing program 0 (id=1576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x500000000000008) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mr_alloc\x00'}, 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "9e1050ecb1edca6a70e745f26c9e33a58584842d15e6db3d077146605345ac5f04837fcc6bbd44274bba9a5ed38d5d3a58fbb5680f38c0a19ec746ed1a1dcc6d"}, 0x48}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0x7, 0x4, 0x37, 0x0, r3, 0x0, '\x00', r6}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006e80)={&(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="0800010001000000080001000100000008000100800000000800010000000000080001000000000008000100000000007ebd69562f4b63920800010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0xa8, 0x0, 0x58, @remote, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1, 0x20, 0x14, 0x17}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000100000000000000df9877aa974aea61321e017b1213c3c1d36a7a3e1f0edefa6ea28d9f20d6b07b4ae70278400982073d25bb88e65846511676297736d9ad4fcf0a38dae09c251248b4b4bcfd9db61832"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', r6, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x13}, 0x90) r7 = socket$inet6(0xa, 0x3, 0x1) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x0, r9}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r10, @ANYBLOB="0100fdffffff00000000050000000c00018008000100", @ANYRES32=r12, @ANYBLOB="7c00018008000300010000001400020069703665727370616e300000000000001400020076657468305f766972745f776966690008000100", @ANYRES32=r12, @ANYBLOB="0a0003e40000020008000100", @ANYRES32=0x0, @ANYBLOB="1400020062617461647630000000000000000000140002006c6f00000000000000000000000000000800030001000000"], 0x9c}}, 0x0) r13 = socket$kcm(0x2b, 0x1, 0x0) close(r13) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) 1.100558999s ago: executing program 2 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0315c4abbf71ef288563"], 0xffdd) r6 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x8c, "82248ebdee5ee51ac303530cf154a5bf01ae8215afc8b4d7201134b837792d3030d02d9eeda390b0d88d4ac92c43c3a825744ba92c3570352c161ed5fbee2720df43390365173c65d78eff6d74f8e119d5c99b8cc2198f4d4cc3b27274b6639a9792499b16a2e828601f52c3636f8ad668e87f3b8790e210610cf63356ae43cc4405fc43a67124cf45457bd8"}], 0xd0}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xe1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r8, 0x29, 0xcf, 0x0, &(0x7f0000000080)=0xfffffffffffffc26) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0x36}, {&(0x7f0000000100)="3a10003a400c7026336b", 0xa}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000380), 0x4) recvmmsg(r9, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)=""/28, 0x1c}], 0x1, &(0x7f0000000a80)=""/204, 0xa7}, 0x5}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/62, 0x3e}, {&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000b80)=""/198, 0xc6}, {&(0x7f0000000c80)=""/99, 0x63}], 0x4, &(0x7f0000000d40)=""/212, 0xd4}, 0xfff}], 0x3, 0x0, 0x0) 1.028695996s ago: executing program 1 (id=1578): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0xff1}, {&(0x7f00000013c0)="784d022ca346d9d19088d3fd03fd2617849d77c45689135e3a1b16d7b5064fce", 0x20}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2}, 0x40000000}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x0) 825.421891ms ago: executing program 1 (id=1579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)="966d2fdca38a0c0639295b555a9cfebd288d8c5762705aa969d56087ee5cbd9987768f8d630da1b429b42d46a98fd9ba0c9916a99d3ab41842fd90ec28d9ea904ed6540a0be23280308d57ac13f27ab11388101362c71a99a19ceb33ec4790bb8dad822998784508ecc5", 0x6a}], 0x1}}], 0x1, 0xa801) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) 583.983106ms ago: executing program 1 (id=1580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78010000160a03020000000000000000020000030900020073797a300000000008000740000000011400038008000240000000000800014000000000200103805400038014000100677265300000000000000000000000001400010067656e65766531000000000000000000140001006970766c616e30000000000000000000140001007465616d3000000000000000000000009000038014000100697036746e6c3000000000000000000014000100626f6e643000000000000000000000001400010070696d72656730000000000000000000140001006970365f76746930000000000000000014000100736974300000000000000000000000001400010076657468305f766972745f77696669001400010064766d72703000000000000000000000080001400000000008000140000000000800014000000000180003801400010070696d7265670000000000000000000008000240000000011c000380080002400000236308000240000000030800024000000f081400000011000000000000000000000a000000001cb96feb848b68f055196bc440dd907cdb46e1d3cc9c8a3f62ce7a20f92b00148fa171001c0ff11dcc70"], 0x1a0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x10, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000001800110100000000000000000a00000000000000000000005c0008800400f9"], 0x78}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000001800110100000000000000000a00000000000000000000005c0008800400f9"], 0x78}}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r5], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c0003"], 0x80}}, 0x0) 404.775911ms ago: executing program 4 (id=1581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 404.298052ms ago: executing program 2 (id=1582): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000000207010100000000000000040900010077797a310000000000000000"], 0x20}}, 0x0) 360.338846ms ago: executing program 3 (id=1583): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000006caaae4d6d311888a17456000000711035000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="48000000100039040000000000000000000003e4", @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2], 0x48}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000b00)={0x0, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r5, 0x2, 0x3, 0xe5fa}, &(0x7f0000000240)=0x10) 327.972818ms ago: executing program 1 (id=1584): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="c0010000", @ANYRES16=0x0, @ANYBLOB="210300000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="189100000000000000100000000000009500000020000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)="482eadffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00001210000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) 260.886727ms ago: executing program 4 (id=1585): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x110}], 0x10}, 0x1800) 231.914744ms ago: executing program 0 (id=1586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8809}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) listen(r0, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0xfffffff3, 0x4, 0x2, 0x0, 0x101, 0x4511cd8c, {r5, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0xe, 0x101, 0x0, 0x0, 0x40}}, &(0x7f0000000300)=0xb0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x63, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r0}, 0x90) 204.17703ms ago: executing program 3 (id=1587): socket$kcm(0x10, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000004700)=[{&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)=']', 0x1}], 0x1, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0x0, 0x0, 0x0, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38}], 0x1, 0x0) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000340)={0x2}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x7c, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xda4b}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x7c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="4900030007"], 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x28, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x408, 0x1d0, 0x470, 0x470, 0x290, 0x290, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@dev, @rand_addr, 0x0, 0x0, 'nr0\x00', 'bond_slave_0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@dev, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'wg0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 144.662474ms ago: executing program 1 (id=1588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbd}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 144.38412ms ago: executing program 4 (id=1589): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x0, 0x100, 0x70bd2a, 0xfffffffa, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x823}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x8014) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)={'c', ' *:* ', 'r\x00'}, 0x8) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x4, 0x0, 0x20001f00) 25.392328ms ago: executing program 0 (id=1590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)="966d2fdca38a0c0639295b555a9cfebd288d8c5762705aa969d56087ee5cbd9987768f8d630da1b429b42d46a98fd9ba0c9916a99d3ab41842fd90ec28d9ea904ed6540a0be23280308d57ac13f27ab11388101362c71a99a19ceb33ec4790bb8dad822998784508ecc5", 0x6a}], 0x1}}], 0x1, 0xa801) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) 0s ago: executing program 1 (id=1591): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0xbc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x84, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xbc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) unshare(0x20000400) clock_gettime(0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) bind$alg(r4, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) ppoll(&(0x7f0000000180)=[{r1, 0x57e0}, {r0}], 0x2, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)="2a6964b6e862bbb7ace52f4024afa4a037aa7a2c42a917c9800a8355448b1022eb5829e387283555dbf20602b0", 0x2d}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 70.072136][ T5085] cgroup: Unknown subsys name 'net' [ 70.242041][ T5085] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.816507][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.823330][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.973940][ T5085] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.370607][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.379187][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.402874][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.411862][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.414244][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.419765][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.436836][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.439946][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.443954][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.445675][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.452758][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.459213][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.465320][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.474176][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.482578][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.502681][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.511266][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.514863][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.532204][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.540408][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.548298][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.555716][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.574673][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.582719][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.590167][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.592292][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.604624][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.606326][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.620163][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.648613][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.062525][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 75.244507][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.252229][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.259730][ T5094] bridge_slave_0: entered allmulticast mode [ 75.268553][ T5094] bridge_slave_0: entered promiscuous mode [ 75.319476][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.328050][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.335909][ T5094] bridge_slave_1: entered allmulticast mode [ 75.344237][ T5094] bridge_slave_1: entered promiscuous mode [ 75.361651][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 75.459972][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.473854][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.491769][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 75.593873][ T5094] team0: Port device team_slave_0 added [ 75.635315][ T5094] team0: Port device team_slave_1 added [ 75.677869][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 75.706480][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.714268][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.740883][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.776817][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 75.797644][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.804710][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.831960][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.850186][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.858043][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.865630][ T5097] bridge_slave_0: entered allmulticast mode [ 75.873326][ T5097] bridge_slave_0: entered promiscuous mode [ 75.949133][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.956784][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.965235][ T5097] bridge_slave_1: entered allmulticast mode [ 75.975830][ T5097] bridge_slave_1: entered promiscuous mode [ 75.994806][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.002084][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.009289][ T5104] bridge_slave_0: entered allmulticast mode [ 76.017126][ T5104] bridge_slave_0: entered promiscuous mode [ 76.076984][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.084319][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.091860][ T5104] bridge_slave_1: entered allmulticast mode [ 76.098992][ T5104] bridge_slave_1: entered promiscuous mode [ 76.144323][ T5094] hsr_slave_0: entered promiscuous mode [ 76.151645][ T5094] hsr_slave_1: entered promiscuous mode [ 76.173630][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.186317][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.238090][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.245992][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.253818][ T5096] bridge_slave_0: entered allmulticast mode [ 76.260927][ T5096] bridge_slave_0: entered promiscuous mode [ 76.312090][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.335106][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.342982][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.350406][ T5096] bridge_slave_1: entered allmulticast mode [ 76.357998][ T5096] bridge_slave_1: entered promiscuous mode [ 76.365490][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.373443][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.380754][ T5106] bridge_slave_0: entered allmulticast mode [ 76.388391][ T5106] bridge_slave_0: entered promiscuous mode [ 76.399385][ T5097] team0: Port device team_slave_0 added [ 76.409452][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.449520][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.457359][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.464898][ T5106] bridge_slave_1: entered allmulticast mode [ 76.472670][ T5106] bridge_slave_1: entered promiscuous mode [ 76.481984][ T5097] team0: Port device team_slave_1 added [ 76.532354][ T5111] Bluetooth: hci0: command tx timeout [ 76.559257][ T5104] team0: Port device team_slave_0 added [ 76.582179][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.595042][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.629798][ T5104] team0: Port device team_slave_1 added [ 76.686192][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.695478][ T5102] Bluetooth: hci1: command tx timeout [ 76.695828][ T5111] Bluetooth: hci4: command tx timeout [ 76.701264][ T5111] Bluetooth: hci2: command tx timeout [ 76.705241][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.707014][ T5111] Bluetooth: hci3: command tx timeout [ 76.718971][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.734936][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.762108][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.775465][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.782586][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.809732][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.844123][ T5096] team0: Port device team_slave_0 added [ 76.883108][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.890217][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.917262][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.938863][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.946113][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.972376][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.986175][ T5096] team0: Port device team_slave_1 added [ 77.008983][ T5106] team0: Port device team_slave_0 added [ 77.018818][ T5106] team0: Port device team_slave_1 added [ 77.098242][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.105724][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.132789][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.155896][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.163246][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.190020][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.233937][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.245484][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.272359][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.310848][ T5097] hsr_slave_0: entered promiscuous mode [ 77.317748][ T5097] hsr_slave_1: entered promiscuous mode [ 77.324824][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.332910][ T5097] Cannot create hsr debugfs directory [ 77.339218][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.346755][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.373802][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.417384][ T5104] hsr_slave_0: entered promiscuous mode [ 77.424677][ T5104] hsr_slave_1: entered promiscuous mode [ 77.431707][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.439868][ T5104] Cannot create hsr debugfs directory [ 77.554850][ T5106] hsr_slave_0: entered promiscuous mode [ 77.562588][ T5106] hsr_slave_1: entered promiscuous mode [ 77.568956][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.576703][ T5106] Cannot create hsr debugfs directory [ 77.645905][ T5096] hsr_slave_0: entered promiscuous mode [ 77.653570][ T5096] hsr_slave_1: entered promiscuous mode [ 77.659951][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.668571][ T5096] Cannot create hsr debugfs directory [ 77.809577][ T5094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.845037][ T5094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.894054][ T5094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.907465][ T5094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.153365][ T5097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.166503][ T5097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.187492][ T5097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.226099][ T5097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.279570][ T5106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.298495][ T5106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.345090][ T5106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.355872][ T5106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.425500][ T5096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.436932][ T5096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.474503][ T5096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.487340][ T5096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.514592][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.599021][ T5104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.611701][ T5111] Bluetooth: hci0: command tx timeout [ 78.628478][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.636432][ T5104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.652115][ T5104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.669404][ T5104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.740323][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.748319][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.771481][ T5111] Bluetooth: hci3: command tx timeout [ 78.774725][ T5102] Bluetooth: hci4: command tx timeout [ 78.776937][ T5105] Bluetooth: hci1: command tx timeout [ 78.783674][ T5102] Bluetooth: hci2: command tx timeout [ 78.802904][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.810163][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.948165][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.022702][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.059499][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.079724][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.138671][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.146040][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.169166][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.205713][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.226344][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.233583][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.245715][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.253039][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.303093][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.310292][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.365864][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.373234][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.384957][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.392231][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.486079][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.530060][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.635631][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.676735][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.684067][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.730382][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.737677][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.108151][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.296787][ T5094] veth0_vlan: entered promiscuous mode [ 80.355231][ T5096] veth0_vlan: entered promiscuous mode [ 80.370771][ T5094] veth1_vlan: entered promiscuous mode [ 80.409238][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.437557][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.473587][ T5096] veth1_vlan: entered promiscuous mode [ 80.500175][ T5094] veth0_macvtap: entered promiscuous mode [ 80.525512][ T5094] veth1_macvtap: entered promiscuous mode [ 80.540814][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.627939][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.651694][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.691495][ T5102] Bluetooth: hci0: command tx timeout [ 80.697295][ T5106] veth0_vlan: entered promiscuous mode [ 80.713157][ T5096] veth0_macvtap: entered promiscuous mode [ 80.729523][ T5094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.740081][ T5094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749990][ T5094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.759109][ T5094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.782472][ T5097] veth0_vlan: entered promiscuous mode [ 80.794357][ T5106] veth1_vlan: entered promiscuous mode [ 80.815809][ T5096] veth1_macvtap: entered promiscuous mode [ 80.830749][ T5097] veth1_vlan: entered promiscuous mode [ 80.851596][ T5113] Bluetooth: hci1: command tx timeout [ 80.857511][ T5113] Bluetooth: hci3: command tx timeout [ 80.858277][ T5105] Bluetooth: hci4: command tx timeout [ 80.863003][ T5102] Bluetooth: hci2: command tx timeout [ 80.900488][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.912064][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.925349][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.954598][ T5104] veth0_vlan: entered promiscuous mode [ 80.966900][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.984528][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.997426][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.014337][ T5096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.023476][ T5096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.033963][ T5096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.043433][ T5096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.103190][ T5104] veth1_vlan: entered promiscuous mode [ 81.144247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.153821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.186041][ T5106] veth0_macvtap: entered promiscuous mode [ 81.246982][ T5106] veth1_macvtap: entered promiscuous mode [ 81.268482][ T5097] veth0_macvtap: entered promiscuous mode [ 81.279010][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.280666][ T5097] veth1_macvtap: entered promiscuous mode [ 81.295599][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.323833][ T5104] veth0_macvtap: entered promiscuous mode [ 81.373841][ T5104] veth1_macvtap: entered promiscuous mode [ 81.398891][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.410902][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.425386][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.437372][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.453327][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.511833][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.523984][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.535517][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.555207][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.575263][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.596699][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.609055][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.620263][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.637089][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.656335][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.668515][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.684162][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.698164][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.710866][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.729445][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.767266][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.796478][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.809357][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.822121][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.833752][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.847175][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.860047][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.873896][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.896782][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.908274][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.920246][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.937428][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.950292][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.991917][ T5097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013491][ T5097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.023559][ T5097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.033304][ T5097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.050262][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.062200][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.074269][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.086073][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.096196][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.107539][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.124871][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.143854][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.159033][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.180102][ T5106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.192104][ T5106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210494][ T5106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.239401][ T5106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270945][ T5104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.287325][ T5104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.297617][ T5104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.312383][ T5104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.398899][ T2803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.407026][ T2803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.745191][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.762412][ T5195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 82.775086][ T5105] Bluetooth: hci0: command tx timeout [ 82.786442][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.791462][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 82.931717][ T5105] Bluetooth: hci4: command tx timeout [ 82.937167][ T5105] Bluetooth: hci3: command tx timeout [ 82.941701][ T5113] Bluetooth: hci1: command tx timeout [ 82.943356][ T5105] Bluetooth: hci2: command tx timeout [ 82.989511][ T2803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.012930][ T2803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.053363][ T5198] xt_policy: neither incoming nor outgoing policy selected [ 83.072860][ T2838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.080736][ T2838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.186890][ T5200] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13'. [ 83.231649][ T5200] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 83.284383][ T5200] 0ªX¹¦Dö»: entered allmulticast mode [ 83.339031][ T2838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.366380][ T2838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.491615][ T2838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499586][ T2838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.625952][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.655532][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.869481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.902511][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.332432][ T5226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18'. [ 84.421608][ T5228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.715353][ T5236] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.923229][ T5236] team_slave_0: entered promiscuous mode [ 84.929234][ T5236] team_slave_1: entered promiscuous mode [ 84.975446][ T5236] vlan2: entered promiscuous mode [ 84.994203][ T5236] team0: entered promiscuous mode [ 85.015270][ T5236] vlan2: entered allmulticast mode [ 85.029002][ T5236] team0: entered allmulticast mode [ 85.036998][ T5236] team_slave_0: entered allmulticast mode [ 85.045850][ T5236] team_slave_1: entered allmulticast mode [ 85.060822][ T5236] team0: left allmulticast mode [ 85.073218][ T5254] sctp: [Deprecated]: syz.1.27 (pid 5254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.073218][ T5254] Use struct sctp_sack_info instead [ 85.074417][ T5236] team_slave_0: left allmulticast mode [ 85.107913][ T5236] team_slave_1: left allmulticast mode [ 85.118466][ T5236] team0: left promiscuous mode [ 85.129386][ T5236] team_slave_0: left promiscuous mode [ 85.135152][ T5236] team_slave_1: left promiscuous mode [ 85.243059][ T5247] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24'. [ 85.258717][ T5247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.306699][ T5251] vlan2: entered promiscuous mode [ 85.321974][ T5251] bridge0: entered promiscuous mode [ 85.373259][ T5251] team0: Port device vlan2 added [ 85.735056][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 86.008814][ T5281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.068093][ T5288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 86.180872][ T5294] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 86.216428][ T5294] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.37'. [ 86.249299][ T5294] netlink: 9 bytes leftover after parsing attributes in process `syz.2.37'. [ 86.324330][ T5298] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 86.474767][ T5302] netlink: zone id is out of range [ 86.506084][ T5302] netlink: zone id is out of range [ 86.579664][ T5302] netlink: set zone limit has 4 unknown bytes [ 86.597866][ T12] tipc: Subscription rejected, illegal request [ 86.845273][ T5317] netlink: set zone limit has 4 unknown bytes [ 87.026851][ T5320] sctp: [Deprecated]: syz.1.45 (pid 5320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.026851][ T5320] Use struct sctp_sack_info instead [ 87.777000][ T5348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.018857][ T5366] sctp: [Deprecated]: syz.3.62 (pid 5366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.018857][ T5366] Use struct sctp_sack_info instead [ 88.055864][ T5370] Zero length message leads to an empty skb [ 88.475220][ T5378] __nla_validate_parse: 5 callbacks suppressed [ 88.475243][ T5378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.66'. [ 88.581410][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 88.766866][ T5385] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 88.800790][ T5385] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.67'. [ 89.047459][ T5394] sctp: [Deprecated]: syz.4.68 (pid 5394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.047459][ T5394] Use struct sctp_sack_info instead [ 89.184209][ T5392] sctp: failed to load transform for md5: -4 [ 89.440872][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 89.487897][ T5413] x_tables: duplicate underflow at hook 3 [ 90.263943][ T5450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.86'. [ 90.308772][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 90.421063][ T5450] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 90.447032][ T5450] macsec1: entered promiscuous mode [ 90.487929][ T5453] netlink: 1356 bytes leftover after parsing attributes in process `syz.0.87'. [ 90.537764][ T5461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.543962][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 90.570846][ T5453] netlink: 3948 bytes leftover after parsing attributes in process `syz.0.87'. [ 90.601838][ T5442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.780457][ T5469] sctp: [Deprecated]: syz.2.92 (pid 5469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.780457][ T5469] Use struct sctp_sack_info instead [ 91.412127][ T5488] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.831324][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 92.298097][ T8] cfg80211: failed to load regulatory.db [ 92.634333][ T5526] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 93.277076][ T5556] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 93.655085][ T5571] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 93.955794][ T5579] __nla_validate_parse: 5 callbacks suppressed [ 93.955816][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 94.085275][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 94.258665][ T5590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.135'. [ 94.289186][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 94.360887][ T5592] vlan2: entered promiscuous mode [ 94.414128][ T5592] xfrm0: entered promiscuous mode [ 94.460680][ T5592] team0: Port device vlan2 added [ 94.549349][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 95.027287][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 95.234332][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 95.608203][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 95.781563][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 96.200806][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 97.112336][ T5685] netlink: set zone limit has 4 unknown bytes [ 97.826876][ T5716] bridge0: entered promiscuous mode [ 97.850126][ T5716] bridge0: left promiscuous mode [ 97.921558][ T5722] Bluetooth: MGMT ver 1.22 [ 98.104447][ T5727] veth0: entered promiscuous mode [ 98.144626][ T5727] veth0: left promiscuous mode [ 98.652545][ T5754] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.815722][ T5762] syzkaller1: entered promiscuous mode [ 98.839491][ T5762] syzkaller1: entered allmulticast mode [ 99.046312][ T5766] __nla_validate_parse: 10 callbacks suppressed [ 99.046338][ T5766] netlink: 104 bytes leftover after parsing attributes in process `syz.3.194'. [ 99.108406][ T5770] netlink: 'syz.1.195': attribute type 63 has an invalid length. [ 99.206750][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 99.234135][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 99.282193][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 99.399000][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 99.508205][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 99.684312][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 99.709789][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 99.795945][ T5794] netlink: 'syz.1.205': attribute type 11 has an invalid length. [ 99.888678][ T5811] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.893386][ T5803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.208'. [ 99.909053][ T5811] xt_SECMARK: invalid mode: 0 [ 100.018545][ T5808] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 100.087677][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.098911][ T5803] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 100.220280][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 100.352284][ T5829] netlink: 'syz.1.214': attribute type 10 has an invalid length. [ 100.430386][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.493198][ T5829] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.522982][ T5834] netem: change failed [ 100.785287][ T5847] Illegal XDP return value 4294967282 on prog (id 83) dev N/A, expect packet loss! [ 101.053918][ T5868] veth0_macvtap: left promiscuous mode [ 101.494334][ T5891] netlink: 'syz.1.234': attribute type 2 has an invalid length. [ 101.713506][ T5896] team0: Port device team_slave_0 removed [ 101.720140][ T5896] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 101.794683][ T5901] warning: `syz.3.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.310368][ T5930] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 102.871428][ T5950] netlink: zone id is out of range [ 103.487392][ T5975] pim6reg: entered allmulticast mode [ 103.539241][ T5975] netlink: 'syz.3.261': attribute type 5 has an invalid length. [ 103.612478][ T5989] Bluetooth: MGMT ver 1.22 [ 104.253990][ T6013] __nla_validate_parse: 19 callbacks suppressed [ 104.254011][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 104.417247][ T6026] vlan2: entered promiscuous mode [ 104.471339][ T6026] bridge0: entered promiscuous mode [ 104.497064][ T6026] team0: Port device vlan2 added [ 104.558922][ T6033] ipvlan2: entered promiscuous mode [ 104.565073][ T6033] ipvlan2: entered allmulticast mode [ 104.586149][ T6033] batadv0: entered allmulticast mode [ 104.618078][ T6033] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.751801][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 104.786996][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 104.852297][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 105.146513][ T6055] sctp: [Deprecated]: syz.1.291 (pid 6055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.146513][ T6055] Use struct sctp_sack_info instead [ 105.247738][ T6055] xt_ecn: cannot match TCP bits for non-tcp packets [ 105.562604][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 105.717989][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 105.803224][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 105.855279][ T6091] netlink: 276 bytes leftover after parsing attributes in process `syz.4.302'. [ 105.950994][ T6095] netlink: 'syz.3.303': attribute type 3 has an invalid length. [ 105.968003][ T6095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.303'. [ 105.975620][ T6096] netlink: 'syz.0.304': attribute type 49 has an invalid length. [ 106.018086][ T6096] netlink: 'syz.0.304': attribute type 49 has an invalid length. [ 106.087814][ T6099] netlink: 56 bytes leftover after parsing attributes in process `syz.4.306'. [ 106.121312][ T6099] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 106.313286][ T6107] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 106.813474][ T6131] Cannot find set identified by id 0 to match [ 107.471462][ T6166] netlink: 'syz.2.331': attribute type 2 has an invalid length. [ 108.472958][ T6209] netlink: 'syz.4.350': attribute type 7 has an invalid length. [ 109.659467][ T6252] __nla_validate_parse: 14 callbacks suppressed [ 109.659490][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 110.121621][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 110.202818][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 110.449177][ T6305] netlink: 'syz.3.378': attribute type 4 has an invalid length. [ 110.514036][ T6307] netlink: 'syz.3.378': attribute type 4 has an invalid length. [ 110.553974][ T6310] FAULT_INJECTION: forcing a failure. [ 110.553974][ T6310] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.583489][ T6310] CPU: 0 PID: 6310 Comm: syz.0.381 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 110.593568][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 110.602455][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 110.603645][ T6310] Call Trace: [ 110.616078][ T6310] [ 110.619048][ T6310] dump_stack_lvl+0x241/0x360 [ 110.623798][ T6310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.629050][ T6310] ? __pfx__printk+0x10/0x10 [ 110.633683][ T6310] ? __pfx_lock_release+0x10/0x10 [ 110.638846][ T6310] should_fail_ex+0x3b0/0x4e0 [ 110.640774][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 110.643561][ T6310] _copy_from_iter+0x1f6/0x1960 [ 110.643597][ T6310] ? __virt_addr_valid+0x183/0x520 [ 110.643628][ T6310] ? skb_set_owner_w+0x238/0x3e0 [ 110.643668][ T6310] ? __pfx__copy_from_iter+0x10/0x10 [ 110.643691][ T6310] ? __pfx__copy_from_iter+0x10/0x10 [ 110.643722][ T6310] ? page_copy_sane+0x154/0x260 [ 110.643748][ T6310] copy_page_from_iter+0x7a/0x100 [ 110.643776][ T6310] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 110.643826][ T6310] packet_sendmsg+0x4231/0x6710 [ 110.643888][ T6310] ? __pfx___might_resched+0x10/0x10 [ 110.643935][ T6310] ? aa_sk_perm+0x967/0xab0 [ 110.643973][ T6310] ? __pfx_packet_sendmsg+0x10/0x10 [ 110.644011][ T6310] ? __fget_files+0x29/0x470 [ 110.644042][ T6310] ? aa_sock_msg_perm+0x91/0x160 [ 110.644079][ T6310] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.644101][ T6310] ? security_socket_sendmsg+0x87/0xb0 [ 110.644130][ T6310] ? __pfx_packet_sendmsg+0x10/0x10 [ 110.644159][ T6310] __sock_sendmsg+0x221/0x270 [ 110.644190][ T6310] __sys_sendto+0x3a4/0x4f0 [ 110.644226][ T6310] ? __pfx___sys_sendto+0x10/0x10 [ 110.644298][ T6310] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.644327][ T6310] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.644359][ T6310] __x64_sys_sendto+0xde/0x100 [ 110.644395][ T6310] do_syscall_64+0xf3/0x230 [ 110.644420][ T6310] ? clear_bhb_loop+0x35/0x90 [ 110.644451][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.644488][ T6310] RIP: 0033:0x7f62b0775bd9 [ 110.644516][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.644535][ T6310] RSP: 002b:00007f62b1561048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 110.644561][ T6310] RAX: ffffffffffffffda RBX: 00007f62b0903f60 RCX: 00007f62b0775bd9 [ 110.644578][ T6310] RDX: 000000000001fffc RSI: 0000000020000180 RDI: 0000000000000004 [ 110.644593][ T6310] RBP: 00007f62b15610a0 R08: 0000000020000140 R09: 0000000000000014 [ 110.644608][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.644622][ T6310] R13: 000000000000000b R14: 00007f62b0903f60 R15: 00007ffdc3851378 [ 110.860453][ T6310] [ 111.113311][ T6324] lo: entered promiscuous mode [ 111.180018][ T6323] lo: left promiscuous mode [ 111.283308][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 111.462756][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 111.480522][ T6341] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.511560][ T6341] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.621899][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 112.118235][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 112.482599][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 113.322391][ T6416] FAULT_INJECTION: forcing a failure. [ 113.322391][ T6416] name failslab, interval 1, probability 0, space 0, times 0 [ 113.335436][ T6416] CPU: 1 PID: 6416 Comm: syz.2.422 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 113.346330][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 113.356438][ T6416] Call Trace: [ 113.359768][ T6416] [ 113.362751][ T6416] dump_stack_lvl+0x241/0x360 [ 113.367789][ T6416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.373053][ T6416] ? __pfx__printk+0x10/0x10 [ 113.377988][ T6416] should_fail_ex+0x3b0/0x4e0 [ 113.382894][ T6416] ? skb_clone+0x20c/0x390 [ 113.387556][ T6416] should_failslab+0x9/0x20 [ 113.392299][ T6416] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 113.397939][ T6416] skb_clone+0x20c/0x390 [ 113.402254][ T6416] ? dev_queue_xmit_nit+0x220/0xc10 [ 113.407714][ T6416] dev_queue_xmit_nit+0x419/0xc10 [ 113.412904][ T6416] ? dev_queue_xmit_nit+0x2b/0xc10 [ 113.418074][ T6416] ? validate_xmit_skb+0x9f9/0x1120 [ 113.423523][ T6416] dev_hard_start_xmit+0x15f/0x7e0 [ 113.428839][ T6416] ? __pfx_validate_xmit_skb+0x10/0x10 [ 113.434410][ T6416] __dev_queue_xmit+0x1b63/0x3e90 [ 113.440018][ T6416] ? kasan_save_track+0x51/0x80 [ 113.444931][ T6416] ? do_syscall_64+0xf3/0x230 [ 113.449670][ T6416] ? __dev_queue_xmit+0x2da/0x3e90 [ 113.454849][ T6416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 113.460396][ T6416] ? __copy_skb_header+0x437/0x5b0 [ 113.465609][ T6416] ? __asan_memcpy+0x40/0x70 [ 113.470872][ T6416] ? __copy_skb_header+0x437/0x5b0 [ 113.476319][ T6416] ? __skb_clone+0x454/0x6c0 [ 113.481915][ T6416] ? skb_clone+0x240/0x390 [ 113.486403][ T6416] __netlink_deliver_tap+0x54d/0x7c0 [ 113.491936][ T6416] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.497286][ T6416] netlink_deliver_tap+0x19d/0x1b0 [ 113.502463][ T6416] netlink_unicast+0x7be/0x990 [ 113.507272][ T6416] ? __pfx_netlink_unicast+0x10/0x10 [ 113.512874][ T6416] ? __virt_addr_valid+0x183/0x520 [ 113.518429][ T6416] ? __check_object_size+0x49c/0x900 [ 113.523973][ T6416] ? bpf_lsm_netlink_send+0x9/0x10 [ 113.529193][ T6416] netlink_sendmsg+0x8e4/0xcb0 [ 113.534198][ T6416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.539643][ T6416] ? __import_iovec+0x536/0x820 [ 113.544635][ T6416] ? aa_sock_msg_perm+0x91/0x160 [ 113.550085][ T6416] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.556119][ T6416] ? security_socket_sendmsg+0x87/0xb0 [ 113.561627][ T6416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.566977][ T6416] __sock_sendmsg+0x221/0x270 [ 113.571814][ T6416] ____sys_sendmsg+0x525/0x7d0 [ 113.576879][ T6416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.583103][ T6416] __sys_sendmsg+0x2b0/0x3a0 [ 113.587734][ T6416] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.593024][ T6416] ? vfs_write+0x7c4/0xc90 [ 113.597570][ T6416] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.604050][ T6416] ? do_syscall_64+0x100/0x230 [ 113.609007][ T6416] ? do_syscall_64+0xb6/0x230 [ 113.613913][ T6416] do_syscall_64+0xf3/0x230 [ 113.618553][ T6416] ? clear_bhb_loop+0x35/0x90 [ 113.623253][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.629459][ T6416] RIP: 0033:0x7f99c7775bd9 [ 113.634005][ T6416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.655223][ T6416] RSP: 002b:00007f99c8570048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.664151][ T6416] RAX: ffffffffffffffda RBX: 00007f99c7903f60 RCX: 00007f99c7775bd9 [ 113.672684][ T6416] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 113.681749][ T6416] RBP: 00007f99c85700a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.690628][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.698868][ T6416] R13: 000000000000000b R14: 00007f99c7903f60 R15: 00007ffcafffc048 [ 113.709106][ T6416] [ 113.760512][ T6414] team_slave_1: entered promiscuous mode [ 113.767981][ T6414] macvtap1: entered promiscuous mode [ 113.798463][ T6414] team0: entered promiscuous mode [ 113.806072][ T6414] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 113.860017][ T6416] vlan3: entered promiscuous mode [ 114.403163][ T6445] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3956. macoff=92 [ 114.683347][ T6457] __nla_validate_parse: 7 callbacks suppressed [ 114.683370][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 114.955517][ T6472] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.439'. [ 114.987004][ T6472] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 115.137792][ T6482] netlink: 104 bytes leftover after parsing attributes in process `syz.4.440'. [ 115.152219][ T6483] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 115.215849][ T6489] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 115.342964][ T6488] netlink: 'syz.1.443': attribute type 4 has an invalid length. [ 115.891503][ T6513] FAULT_INJECTION: forcing a failure. [ 115.891503][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 115.915316][ T6509] sch_fq: defrate 0 ignored. [ 115.943441][ T6513] CPU: 1 PID: 6513 Comm: syz.0.452 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 115.953497][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.963594][ T6513] Call Trace: [ 115.966938][ T6513] [ 115.969942][ T6513] dump_stack_lvl+0x241/0x360 [ 115.974685][ T6513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.979943][ T6513] ? __pfx__printk+0x10/0x10 [ 115.984588][ T6513] ? netlink_insert+0x10b7/0x14b0 [ 115.989707][ T6513] should_fail_ex+0x3b0/0x4e0 [ 115.994435][ T6513] ? __alloc_skb+0x1c3/0x440 [ 115.999147][ T6513] should_failslab+0x9/0x20 [ 116.004027][ T6513] kmem_cache_alloc_node_noprof+0x71/0x320 [ 116.010039][ T6513] __alloc_skb+0x1c3/0x440 [ 116.014566][ T6513] ? __pfx___alloc_skb+0x10/0x10 [ 116.019654][ T6513] ? netlink_autobind+0xd6/0x2f0 [ 116.025004][ T6513] ? netlink_autobind+0x2b0/0x2f0 [ 116.030133][ T6513] netlink_sendmsg+0x638/0xcb0 [ 116.035045][ T6513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.040465][ T6513] ? aa_sock_msg_perm+0x91/0x160 [ 116.045556][ T6513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 116.050863][ T6513] ? security_socket_sendmsg+0x87/0xb0 [ 116.056433][ T6513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.061836][ T6513] __sock_sendmsg+0x221/0x270 [ 116.066702][ T6513] sock_write_iter+0x2dd/0x400 [ 116.071493][ T6513] ? __pfx_sock_write_iter+0x10/0x10 [ 116.076970][ T6513] ? bpf_lsm_file_permission+0x9/0x10 [ 116.082534][ T6513] ? security_file_permission+0x7f/0xa0 [ 116.088100][ T6513] vfs_write+0xa72/0xc90 [ 116.092534][ T6513] ? __pfx_sock_write_iter+0x10/0x10 [ 116.097931][ T6513] ? __pfx_vfs_write+0x10/0x10 [ 116.102745][ T6513] ksys_write+0x1a0/0x2c0 [ 116.107211][ T6513] ? __pfx_ksys_write+0x10/0x10 [ 116.112356][ T6513] ? do_syscall_64+0x100/0x230 [ 116.117222][ T6513] ? do_syscall_64+0xb6/0x230 [ 116.122790][ T6513] do_syscall_64+0xf3/0x230 [ 116.130689][ T6513] ? clear_bhb_loop+0x35/0x90 [ 116.135384][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.141289][ T6513] RIP: 0033:0x7f62b0775bd9 [ 116.145711][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.165610][ T6513] RSP: 002b:00007f62b1561048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.174236][ T6513] RAX: ffffffffffffffda RBX: 00007f62b0903f60 RCX: 00007f62b0775bd9 [ 116.182540][ T6513] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 116.190631][ T6513] RBP: 00007f62b15610a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.198617][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.206603][ T6513] R13: 000000000000000b R14: 00007f62b0903f60 R15: 00007ffdc3851378 [ 116.214870][ T6513] [ 116.242438][ T6519] netlink: 'syz.1.454': attribute type 30 has an invalid length. [ 116.426640][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 116.555574][ T6533] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 116.578266][ T6533] pim6reg0: linktype set to 823 [ 116.697569][ T6546] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.462'. [ 116.717348][ T6546] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 116.998718][ T6559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.468'. [ 117.156702][ T6564] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 117.554016][ T6577] netlink: 'syz.1.476': attribute type 2 has an invalid length. [ 117.694059][ T6580] Â: renamed from pim6reg1 [ 117.914533][ T6594] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 117.952982][ T6594] syz_tun: entered promiscuous mode [ 118.015561][ T6594] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 118.190881][ T6611] trusted_key: syz.2.486 sent an empty control message without MSG_MORE. [ 118.369293][ T6622] IPv6: addrconf: prefix option has invalid lifetime [ 118.466899][ T6628] netlink: 276 bytes leftover after parsing attributes in process `syz.1.493'. [ 118.539234][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 118.899024][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.016685][ T6660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.123069][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.060336][ T6683] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.518'. [ 120.086764][ T6683] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 120.140563][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 120.162777][ T6688] xt_bpf: check failed: parse error [ 120.281376][ T6689] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 120.338931][ T5102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.349072][ T5102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.358616][ T5102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.368695][ T5102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.377942][ T5102] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.391232][ T5102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.650331][ T6699] netlink: 5 bytes leftover after parsing attributes in process `syz.0.523'. [ 120.660971][ T6699] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 120.694124][ T6699] 0ªX¹¦Dö»: entered allmulticast mode [ 121.136972][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 121.197892][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 121.355626][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 121.475739][ T6731] pim6reg: left allmulticast mode [ 121.599423][ T6751] netlink: 'syz.1.539': attribute type 5 has an invalid length. [ 121.622015][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 121.716550][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 121.793160][ T6762] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 121.858092][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.875936][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.886150][ T6693] bridge_slave_0: entered allmulticast mode [ 121.899570][ T6693] bridge_slave_0: entered promiscuous mode [ 121.911325][ T6773] netlink: 'syz.3.543': attribute type 4 has an invalid length. [ 121.939885][ T6774] netlink: 'syz.3.543': attribute type 4 has an invalid length. [ 121.955801][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.964497][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.979422][ T6693] bridge_slave_1: entered allmulticast mode [ 121.987700][ T6693] bridge_slave_1: entered promiscuous mode [ 122.177088][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.235358][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.281541][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 122.452734][ T5105] Bluetooth: hci5: command tx timeout [ 122.476355][ T6693] team0: Port device team_slave_0 added [ 122.611524][ T6693] team0: Port device team_slave_1 added [ 122.746285][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.761925][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.787567][ T6810] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.557'. [ 122.823022][ T6810] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 122.838893][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.859371][ T6810] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.557'. [ 122.916404][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.926609][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.935479][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.954581][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.967503][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.975457][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.987677][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.014250][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.056680][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.217205][ T6693] hsr_slave_0: entered promiscuous mode [ 123.252631][ T6693] hsr_slave_1: entered promiscuous mode [ 123.275225][ T6693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.291208][ T6693] Cannot create hsr debugfs directory [ 123.853399][ T6693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.946229][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 124.017663][ T6693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.167901][ T6693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.282920][ T6693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.489405][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.507186][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.515909][ T6812] bridge_slave_0: entered allmulticast mode [ 124.524722][ T6812] bridge_slave_0: entered promiscuous mode [ 124.533434][ T5105] Bluetooth: hci5: command tx timeout [ 124.543907][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.553220][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.560523][ T6812] bridge_slave_1: entered allmulticast mode [ 124.569493][ T6812] bridge_slave_1: entered promiscuous mode [ 124.590582][ T6887] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 124.676147][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.697471][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.798013][ T6812] team0: Port device team_slave_0 added [ 124.817665][ T6812] team0: Port device team_slave_1 added [ 124.908602][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.919830][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.952404][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.977567][ T6898] IPVS: Error joining to the multicast group [ 124.992460][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.007334][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.057372][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.091751][ T5105] Bluetooth: hci0: command tx timeout [ 125.144622][ T6693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.156349][ T6693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.240458][ T6812] hsr_slave_0: entered promiscuous mode [ 125.250606][ T6812] hsr_slave_1: entered promiscuous mode [ 125.290151][ T6812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.302456][ T6905] __nla_validate_parse: 6 callbacks suppressed [ 125.302479][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 125.321729][ T6812] Cannot create hsr debugfs directory [ 125.343532][ T6693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.398559][ T6693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.483148][ T6915] sctp: [Deprecated]: syz.0.590 (pid 6915) Use of int in max_burst socket option deprecated. [ 125.483148][ T6915] Use struct sctp_assoc_value instead [ 125.787585][ T6924] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 125.814189][ T6924] team0: Device ipvlan2 is already an upper device of the team interface [ 126.015772][ T6812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.088625][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.156929][ T6812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.228531][ T6693] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.339703][ T6812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.400716][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.408061][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.412318][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 126.518198][ T6812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.568222][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.575885][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.611647][ T5105] Bluetooth: hci5: command tx timeout [ 126.753995][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 127.171698][ T5105] Bluetooth: hci0: command tx timeout [ 127.238804][ T6812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.315652][ T6812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.364514][ T6812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.405824][ T6812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.499141][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.035727][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 128.119236][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.242273][ T7004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.617'. [ 128.292845][ T7006] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 128.307587][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.318678][ T7004] IPVS: stopping backup sync thread 7006 ... [ 128.355679][ T7009] raw_sendmsg: syz.0.619 forgot to set AF_INET. Fix it! [ 128.359016][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 128.406226][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 128.507690][ T7013] delete_channel: no stack [ 128.585527][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.592862][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.648551][ T7021] pim6reg: entered allmulticast mode [ 128.691238][ T5105] Bluetooth: hci5: command tx timeout [ 128.701901][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.709254][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.720452][ T7023] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 128.729335][ T7023] netlink: 152 bytes leftover after parsing attributes in process `syz.0.622'. [ 128.741522][ T7023] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.765258][ T6693] veth0_vlan: entered promiscuous mode [ 128.825977][ T6693] veth1_vlan: entered promiscuous mode [ 128.850627][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.622'. [ 128.867481][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.622'. [ 128.988375][ T6693] veth0_macvtap: entered promiscuous mode [ 129.029837][ T6693] veth1_macvtap: entered promiscuous mode [ 129.107018][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.141367][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.154885][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.166273][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.192842][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.210223][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.221377][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.234831][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.245389][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.251951][ T5105] Bluetooth: hci0: command tx timeout [ 129.260330][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.316621][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.366781][ T7034] tipc: Started in network mode [ 129.379564][ T7034] tipc: Node identity 1, cluster identity 4711 [ 129.389824][ T7034] tipc: Node number set to 1 [ 129.422971][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.462946][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.483061][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.513328][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.534276][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.553098][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.564597][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.580543][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.593486][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.605544][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.619238][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.656480][ T6693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.668114][ T6693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.680274][ T6693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.692503][ T6693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.795421][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.989575][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.001664][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.150674][ T6812] veth0_vlan: entered promiscuous mode [ 130.185271][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.200697][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.236791][ T6812] veth1_vlan: entered promiscuous mode [ 130.398854][ T6812] veth0_macvtap: entered promiscuous mode [ 130.430129][ T6812] veth1_macvtap: entered promiscuous mode [ 130.485626][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.507596][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.520750][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.532950][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.533430][ T7084] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 130.544343][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.544371][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.544385][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.544402][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.544415][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.544430][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.544460][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.628462][ T7084] __nla_validate_parse: 3 callbacks suppressed [ 130.628484][ T7084] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.637'. [ 130.651435][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.665497][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.705848][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.754922][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.783177][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.821662][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.837363][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.863715][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.875298][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.887059][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.899134][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.909918][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.922730][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.940600][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.958837][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.999151][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 131.233553][ T6812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.250166][ T6812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.274104][ T6812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.295209][ T6812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.332732][ T5105] Bluetooth: hci0: command tx timeout [ 131.630705][ T7125] netlink: 'syz.2.651': attribute type 4 has an invalid length. [ 131.671612][ T7129] delete_channel: no stack [ 131.723268][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.748413][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.764449][ T7134] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 131.840259][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.872419][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.194498][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 132.205995][ T7151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.659'. [ 132.234103][ T7151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.659'. [ 132.260236][ T7151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.659'. [ 132.769045][ T7169] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 133.184654][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 133.261646][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.268165][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.374975][ T7190] ɶƣ0GC¦: entered promiscuous mode [ 133.950323][ T7208] @ÿ: renamed from veth0_vlan (while UP) [ 134.125371][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 134.384163][ T7226] batadv0: entered promiscuous mode [ 134.390404][ T7226] macsec1: entered promiscuous mode [ 134.405213][ T7226] macsec1: entered allmulticast mode [ 134.410548][ T7226] batadv0: entered allmulticast mode [ 134.463129][ T7234] vlan0: entered promiscuous mode [ 134.507258][ T7234] team0: Port device vlan0 added [ 134.812378][ T7250] netlink: 'syz.1.702': attribute type 11 has an invalid length. [ 134.813875][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 135.062935][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.073133][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.095639][ T7258] syzkaller1: entered promiscuous mode [ 135.112629][ T7258] syzkaller1: entered allmulticast mode [ 135.121989][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'. [ 135.141722][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.150288][ T7265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.158789][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.166079][ T7265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.214007][ T7265] bridge0: entered promiscuous mode [ 135.227361][ T7265] bridge0: entered allmulticast mode [ 135.633836][ T7291] __nla_validate_parse: 1 callbacks suppressed [ 135.633859][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 135.719816][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 136.389178][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 136.454110][ T7337] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 136.477697][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 136.678265][ T7350] netlink: 'syz.2.742': attribute type 4 has an invalid length. [ 137.005885][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 137.017205][ T7368] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 137.051561][ T7369] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 137.111343][ T7372] bond_slave_0: entered promiscuous mode [ 137.117539][ T7372] bond_slave_1: entered promiscuous mode [ 137.134705][ T7377] netlink: zone id is out of range [ 137.136598][ T7372] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.174373][ T7379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.753'. [ 137.191851][ T7372] bond_slave_0: left promiscuous mode [ 137.197476][ T7372] bond_slave_1: left promiscuous mode [ 137.388508][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 137.520010][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'. [ 137.652695][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.763'. [ 138.726121][ T7456] vlan2: entered promiscuous mode [ 138.767055][ T7456] team0: Port device vlan2 added [ 138.970493][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 139.095780][ T7485] bridge_slave_1: left allmulticast mode [ 139.122551][ T7485] bridge_slave_1: left promiscuous mode [ 139.147876][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.160188][ T7492] netlink: 'syz.2.786': attribute type 3 has an invalid length. [ 139.181817][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.232487][ T7485] bridge1: port 1(bridge_slave_1) entered blocking state [ 139.239933][ T7485] bridge1: port 1(bridge_slave_1) entered disabled state [ 139.259732][ T7485] bridge_slave_1: entered allmulticast mode [ 139.268600][ T7485] bridge_slave_1: entered promiscuous mode [ 139.495589][ T7504] netlink: 'syz.0.788': attribute type 2 has an invalid length. [ 139.657829][ T7508] tipc: Enabled bearer , priority 0 [ 139.683980][ T7508] tipc: Enabled bearer , priority 0 [ 139.991152][ T7530] openvswitch: netlink: Message has 4 unknown bytes. [ 139.991366][ T7526] tipc: Can't bind to reserved service type 0 [ 140.949145][ T7575] __nla_validate_parse: 15 callbacks suppressed [ 140.949170][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 141.027246][ T7580] debugfs: Directory 'netdev:nicvf0' with parent 'phy18' already present! [ 141.115643][ T7589] sctp: [Deprecated]: syz.3.814 (pid 7589) Use of int in max_burst socket option deprecated. [ 141.115643][ T7589] Use struct sctp_assoc_value instead [ 141.143916][ T7592] TCP: request_sock_TCP: Possible SYN flooding on port 172.20.20.170:20002. Sending cookies. [ 141.359278][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 141.535748][ T7613] ip6gretap0: entered promiscuous mode [ 141.643201][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 141.898887][ T7635] x_tables: duplicate underflow at hook 1 [ 142.275994][ T7657] netlink: 188 bytes leftover after parsing attributes in process `syz.0.838'. [ 142.514266][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 142.910830][ T7670] bond0: (slave bond_slave_1): Releasing backup interface [ 143.381688][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 143.429942][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 143.465938][ T7693] netlink: 120 bytes leftover after parsing attributes in process `syz.4.851'. [ 143.551424][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 143.765004][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 143.788895][ T7718] sctp: [Deprecated]: syz.2.858 (pid 7718) Use of int in maxseg socket option. [ 143.788895][ T7718] Use struct sctp_assoc_value instead [ 143.924631][ T7718] xt_cgroup: invalid path, errno=-2 [ 146.428027][ T7841] IPVS: Error connecting to the multicast addr [ 146.529611][ T7847] __nla_validate_parse: 6 callbacks suppressed [ 146.529633][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 146.590026][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 147.162234][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 147.212122][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 147.475514][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 147.482219][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 147.654449][ T7907] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 147.873322][ T7920] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.922'. [ 147.878613][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 147.992553][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 148.524321][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 148.693753][ T7947] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 148.710552][ T7949] FAULT_INJECTION: forcing a failure. [ 148.710552][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 148.726501][ T7947] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 148.793556][ T7949] CPU: 0 PID: 7949 Comm: syz.0.933 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 148.803703][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.814076][ T7949] Call Trace: [ 148.817400][ T7949] [ 148.820374][ T7949] dump_stack_lvl+0x241/0x360 [ 148.825635][ T7949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.830914][ T7949] ? __pfx__printk+0x10/0x10 [ 148.835640][ T7949] ? netlink_insert+0x10b7/0x14b0 [ 148.840775][ T7949] should_fail_ex+0x3b0/0x4e0 [ 148.845765][ T7949] ? __alloc_skb+0x1c3/0x440 [ 148.850385][ T7949] should_failslab+0x9/0x20 [ 148.855019][ T7949] kmem_cache_alloc_node_noprof+0x71/0x320 [ 148.860857][ T7949] __alloc_skb+0x1c3/0x440 [ 148.865294][ T7949] ? __pfx___alloc_skb+0x10/0x10 [ 148.870352][ T7949] ? netlink_autobind+0xd6/0x2f0 [ 148.875511][ T7949] ? netlink_autobind+0x2b0/0x2f0 [ 148.880640][ T7949] netlink_sendmsg+0x638/0xcb0 [ 148.885453][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.890929][ T7949] ? __import_iovec+0x536/0x820 [ 148.895890][ T7949] ? aa_sock_msg_perm+0x91/0x160 [ 148.900952][ T7949] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 148.906285][ T7949] ? security_socket_sendmsg+0x87/0xb0 [ 148.912049][ T7949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.917384][ T7949] __sock_sendmsg+0x221/0x270 [ 148.922527][ T7949] ____sys_sendmsg+0x525/0x7d0 [ 148.927321][ T7949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.932935][ T7949] __sys_sendmsg+0x2b0/0x3a0 [ 148.937572][ T7949] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.942747][ T7949] ? vfs_write+0x7c4/0xc90 [ 148.947233][ T7949] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.953588][ T7949] ? do_syscall_64+0x100/0x230 [ 148.958377][ T7949] ? do_syscall_64+0xb6/0x230 [ 148.963093][ T7949] do_syscall_64+0xf3/0x230 [ 148.968052][ T7949] ? clear_bhb_loop+0x35/0x90 [ 148.972855][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.978863][ T7949] RIP: 0033:0x7f62b0775bd9 [ 148.983383][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.004228][ T7949] RSP: 002b:00007f62b1561048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.013050][ T7949] RAX: ffffffffffffffda RBX: 00007f62b0903f60 RCX: 00007f62b0775bd9 [ 149.021304][ T7949] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 149.029320][ T7949] RBP: 00007f62b15610a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.037422][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.045776][ T7949] R13: 000000000000000b R14: 00007f62b0903f60 R15: 00007ffdc3851378 [ 149.053906][ T7949] [ 149.261256][ T7964] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 149.285908][ T7967] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 149.344994][ T7968] netlink: 'syz.2.937': attribute type 2 has an invalid length. [ 150.239848][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.598401][ T8039] netlink: 'syz.2.966': attribute type 11 has an invalid length. [ 150.708077][ T8045] tipc: Started in network mode [ 150.721230][ T8045] tipc: Node identity 1, cluster identity 4711 [ 150.746435][ T8045] tipc: Node number set to 1 [ 151.493076][ T8092] syz.4.984[8092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.493258][ T8092] syz.4.984[8092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.757418][ T8108] __nla_validate_parse: 9 callbacks suppressed [ 151.757445][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.992'. [ 151.872317][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 151.975854][ T8119] FAULT_INJECTION: forcing a failure. [ 151.975854][ T8119] name failslab, interval 1, probability 0, space 0, times 0 [ 152.003382][ T8119] CPU: 1 PID: 8119 Comm: syz.0.997 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 152.013519][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.023711][ T8119] Call Trace: [ 152.027208][ T8119] [ 152.030190][ T8119] dump_stack_lvl+0x241/0x360 [ 152.035023][ T8119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.040511][ T8119] ? __pfx__printk+0x10/0x10 [ 152.045154][ T8119] ? __pfx___might_resched+0x10/0x10 [ 152.050934][ T8119] should_fail_ex+0x3b0/0x4e0 [ 152.055679][ T8119] ? apparmor_sk_alloc_security+0x77/0x100 [ 152.061565][ T8119] should_failslab+0x9/0x20 [ 152.066222][ T8119] kmalloc_trace_noprof+0x6c/0x2c0 [ 152.071408][ T8119] apparmor_sk_alloc_security+0x77/0x100 [ 152.077072][ T8119] security_sk_alloc+0x75/0xb0 [ 152.081858][ T8119] sk_prot_alloc+0xfa/0x210 [ 152.086389][ T8119] ? sk_alloc+0x26/0x370 [ 152.090645][ T8119] sk_alloc+0x38/0x370 [ 152.094736][ T8119] ? bpf_test_init+0x15a/0x180 [ 152.099524][ T8119] ? bpf_ctx_init+0x162/0x1b0 [ 152.104214][ T8119] bpf_prog_test_run_skb+0x38f/0x13b0 [ 152.109716][ T8119] ? __pfx_lock_release+0x10/0x10 [ 152.114882][ T8119] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 152.120982][ T8119] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 152.126820][ T8119] bpf_prog_test_run+0x33a/0x3b0 [ 152.131786][ T8119] __sys_bpf+0x48d/0x810 [ 152.136061][ T8119] ? __pfx___sys_bpf+0x10/0x10 [ 152.140852][ T8119] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.146852][ T8119] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.153471][ T8119] ? do_syscall_64+0x100/0x230 [ 152.158447][ T8119] __x64_sys_bpf+0x7c/0x90 [ 152.162978][ T8119] do_syscall_64+0xf3/0x230 [ 152.167583][ T8119] ? clear_bhb_loop+0x35/0x90 [ 152.172372][ T8119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.178469][ T8119] RIP: 0033:0x7f62b0775bd9 [ 152.182984][ T8119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.202617][ T8119] RSP: 002b:00007f62b1561048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.211160][ T8119] RAX: ffffffffffffffda RBX: 00007f62b0903f60 RCX: 00007f62b0775bd9 [ 152.219630][ T8119] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 152.227631][ T8119] RBP: 00007f62b15610a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.235621][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.243610][ T8119] R13: 000000000000000b R14: 00007f62b0903f60 R15: 00007ffdc3851378 [ 152.251634][ T8119] [ 152.278520][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.999'. [ 152.385482][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 152.405040][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 152.424781][ T8130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1002'. [ 152.758431][ T8149] nbd: must specify at least one socket [ 152.865167][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 152.924931][ T8158] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.1013'. [ 152.986838][ T8159] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.994892][ T8159] macvtap1: entered allmulticast mode [ 153.000471][ T8159] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 153.011205][ T8158] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 153.021134][ T8158] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1013'. [ 153.040365][ T8165] Bluetooth: MGMT ver 1.22 [ 153.045663][ T8159] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 153.055740][ T8159] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 153.074532][ T8169] Cannot find add_set index 0 as target [ 153.351271][ T8179] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1021'. [ 153.407371][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.423519][ T8188] (unnamed net_device) (uninitialized): option lacp_active: invalid value (252) [ 153.625829][ T8201] netlink: 'syz.1.1029': attribute type 14 has an invalid length. [ 153.672357][ T8201] nbd: must specify at least one socket [ 154.774295][ T8248] netlink: 'syz.1.1047': attribute type 7 has an invalid length. [ 154.930014][ T8258] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 155.286360][ T8285] netlink: 'syz.0.1065': attribute type 7 has an invalid length. [ 155.458856][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.506347][ T8300] bridge0: left promiscuous mode [ 155.512376][ T8294] openvswitch: netlink: Key type 8208 is out of range max 32 [ 155.714007][ T8312] netlink: 'syz.4.1073': attribute type 11 has an invalid length. [ 156.625976][ T8364] delete_channel: no stack [ 156.820283][ T8373] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 156.935873][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.006397][ T8380] netlink: 'syz.0.1100': attribute type 11 has an invalid length. [ 157.018487][ T8373] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.047126][ T8376] __nla_validate_parse: 12 callbacks suppressed [ 157.047151][ T8376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1097'. [ 157.074532][ T8385] netlink: 'syz.4.1099': attribute type 4 has an invalid length. [ 157.095595][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 157.241396][ T8391] netlink: set zone limit has 4 unknown bytes [ 157.249721][ T8389] netlink: 'syz.0.1103': attribute type 3 has an invalid length. [ 157.799269][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1115'. [ 158.357231][ T8450] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 158.394224][ T8450] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1125'. [ 158.684963][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'. [ 158.792748][ T8470] netlink: 'syz.3.1131': attribute type 2 has an invalid length. [ 158.823605][ T8470] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1131'. [ 158.887897][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1132'. [ 159.567208][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 159.778819][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1145'. [ 159.953591][ T8519] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 159.964561][ T8520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1148'. [ 160.557331][ T8555] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 160.864619][ T8572] openvswitch: netlink: Message has 4 unknown bytes. [ 161.153169][ T8582] netlink: 'syz.1.1168': attribute type 4 has an invalid length. [ 162.067501][ T8640] batadv0: entered promiscuous mode [ 162.081446][ T8640] macsec1: entered promiscuous mode [ 162.090647][ T8640] macsec1: entered allmulticast mode [ 162.126280][ T8645] __nla_validate_parse: 12 callbacks suppressed [ 162.126304][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 162.630856][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 162.815159][ T8676] netlink: 'syz.3.1204': attribute type 4 has an invalid length. [ 162.836689][ T8678] syzkaller1: entered promiscuous mode [ 162.852629][ T8678] syzkaller1: entered allmulticast mode [ 162.942531][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1205'. [ 162.953434][ T8685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1205'. [ 162.964704][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 162.975408][ T8685] vlan0: entered allmulticast mode [ 162.980835][ T8685] veth0_vlan: entered allmulticast mode [ 163.026969][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 163.302560][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1215'. [ 163.374676][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 163.589655][ T8708] team0: Port device macvlan1 added [ 163.631792][ T8714] team_slave_0: entered promiscuous mode [ 163.637899][ T8714] team_slave_1: entered promiscuous mode [ 163.658545][ T8714] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 163.920880][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 163.988424][ T8730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1225'. [ 164.007233][ T8730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 164.397337][ T8747] ɶƣ0GC¦: entered promiscuous mode [ 166.092587][ T8846] geneve2: entered promiscuous mode [ 166.133051][ T8846] geneve2: entered allmulticast mode [ 166.368006][ T8857] vlan4: entered promiscuous mode [ 166.373946][ T8857] bridge2: entered promiscuous mode [ 166.598374][ T8866] bridge_slave_1: left allmulticast mode [ 166.618360][ T8866] bridge_slave_1: left promiscuous mode [ 166.628737][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.655591][ T8866] bridge2: port 1(bridge_slave_1) entered blocking state [ 166.680487][ T8866] bridge2: port 1(bridge_slave_1) entered disabled state [ 166.691423][ T8866] bridge_slave_1: entered allmulticast mode [ 166.701716][ T8866] bridge_slave_1: entered promiscuous mode [ 166.709038][ T8866] bridge2: port 1(bridge_slave_1) entered blocking state [ 166.716371][ T8866] bridge2: port 1(bridge_slave_1) entered forwarding state [ 166.782436][ T8873] bridge2: port 2(veth1_to_bond) entered blocking state [ 166.812484][ T8873] bridge2: port 2(veth1_to_bond) entered disabled state [ 166.837764][ T8873] veth1_to_bond: entered allmulticast mode [ 166.874328][ T8873] veth1_to_bond: entered promiscuous mode [ 166.912054][ T8873] bridge2: port 2(veth1_to_bond) entered blocking state [ 166.919340][ T8873] bridge2: port 2(veth1_to_bond) entered forwarding state [ 166.934498][ T8892] netlink: 'syz.3.1285': attribute type 4 has an invalid length. [ 167.160637][ T8901] __nla_validate_parse: 14 callbacks suppressed [ 167.160662][ T8901] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1290'. [ 167.171473][ T8902] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1289'. [ 167.196949][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 167.220910][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 167.260092][ T8901] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1290'. [ 167.296688][ T8901] netlink: 'syz.1.1290': attribute type 2 has an invalid length. [ 167.309654][ T8908] netlink: 'syz.3.1286': attribute type 1 has an invalid length. [ 167.327365][ T8901] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1290'. [ 167.359498][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 167.410391][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 167.445662][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 167.483456][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 168.446755][ T8964] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 168.705342][ T8966] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 169.168997][ T9001] FAULT_INJECTION: forcing a failure. [ 169.168997][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 169.209182][ T9001] CPU: 0 PID: 9001 Comm: syz.3.1323 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 169.219334][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.229527][ T9001] Call Trace: [ 169.232933][ T9001] [ 169.235901][ T9001] dump_stack_lvl+0x241/0x360 [ 169.240628][ T9001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.245870][ T9001] ? __pfx__printk+0x10/0x10 [ 169.250535][ T9001] ? __pfx___might_resched+0x10/0x10 [ 169.255879][ T9001] ? __kasan_kmalloc+0x98/0xb0 [ 169.260789][ T9001] ? __genradix_ptr_alloc+0x196/0x460 [ 169.266222][ T9001] should_fail_ex+0x3b0/0x4e0 [ 169.270979][ T9001] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 169.277048][ T9001] should_failslab+0x9/0x20 [ 169.281614][ T9001] kmalloc_trace_noprof+0x6c/0x2c0 [ 169.286773][ T9001] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 169.292737][ T9001] sctp_association_new+0x15aa/0x23f0 [ 169.298189][ T9001] sctp_connect_new_asoc+0x2d8/0x6c0 [ 169.303622][ T9001] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 169.309823][ T9001] ? sctp_sendmsg+0xbb9/0x3520 [ 169.314757][ T9001] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 169.320520][ T9001] ? security_sctp_bind_connect+0x90/0xb0 [ 169.326267][ T9001] sctp_sendmsg+0x219a/0x3520 [ 169.331076][ T9001] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.336120][ T9001] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.341048][ T9001] ? inet_sendmsg+0x330/0x390 [ 169.345755][ T9001] __sock_sendmsg+0x1a6/0x270 [ 169.350555][ T9001] __sys_sendto+0x3a4/0x4f0 [ 169.355180][ T9001] ? __pfx___sys_sendto+0x10/0x10 [ 169.360276][ T9001] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.366381][ T9001] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.372738][ T9001] __x64_sys_sendto+0xde/0x100 [ 169.377535][ T9001] do_syscall_64+0xf3/0x230 [ 169.382278][ T9001] ? clear_bhb_loop+0x35/0x90 [ 169.386969][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.392976][ T9001] RIP: 0033:0x7fc838975bd9 [ 169.397404][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.417040][ T9001] RSP: 002b:00007fc8397ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 169.425472][ T9001] RAX: ffffffffffffffda RBX: 00007fc838b03f60 RCX: 00007fc838975bd9 [ 169.433466][ T9001] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000003 [ 169.441441][ T9001] RBP: 00007fc8397ef0a0 R08: 000000002005ffe4 R09: 000000000000001c [ 169.449432][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.457440][ T9001] R13: 000000000000000b R14: 00007fc838b03f60 R15: 00007ffd08b11758 [ 169.465455][ T9001] [ 169.523914][ T9010] netlink: 'syz.0.1326': attribute type 1 has an invalid length. [ 169.628479][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.965952][ T9032] netlink: 'syz.3.1330': attribute type 1 has an invalid length. [ 170.003111][ T9034] ip6gretap0: entered promiscuous mode [ 170.060665][ T9034] bridge0: entered promiscuous mode [ 170.082460][ T9034] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 170.100534][ T9034] Cannot create hsr debugfs directory [ 170.114621][ T9034] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 170.825403][ T9072] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 171.024477][ T9078] netlink: 'syz.0.1350': attribute type 4 has an invalid length. [ 171.738952][ T9123] FAULT_INJECTION: forcing a failure. [ 171.738952][ T9123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.766550][ T9123] CPU: 0 PID: 9123 Comm: syz.0.1367 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 171.776735][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.786838][ T9123] Call Trace: [ 171.790157][ T9123] [ 171.793120][ T9123] dump_stack_lvl+0x241/0x360 [ 171.797856][ T9123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.803186][ T9123] ? __pfx__printk+0x10/0x10 [ 171.807930][ T9123] ? __pfx_lock_release+0x10/0x10 [ 171.813100][ T9123] should_fail_ex+0x3b0/0x4e0 [ 171.817927][ T9123] _copy_from_iter+0x1f6/0x1960 [ 171.823447][ T9123] ? __virt_addr_valid+0x183/0x520 [ 171.828607][ T9123] ? skb_set_owner_w+0x238/0x3e0 [ 171.833694][ T9123] ? __pfx__copy_from_iter+0x10/0x10 [ 171.839116][ T9123] ? __pfx__copy_from_iter+0x10/0x10 [ 171.844459][ T9123] ? page_copy_sane+0x154/0x260 [ 171.849362][ T9123] copy_page_from_iter+0x7a/0x100 [ 171.854435][ T9123] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 171.860409][ T9123] packet_sendmsg+0x4231/0x6710 [ 171.865356][ T9123] ? __pfx___might_resched+0x10/0x10 [ 171.870895][ T9123] ? aa_sk_perm+0x967/0xab0 [ 171.875458][ T9123] ? __pfx_packet_sendmsg+0x10/0x10 [ 171.880754][ T9123] ? __fget_files+0x29/0x470 [ 171.885398][ T9123] ? aa_sock_msg_perm+0x91/0x160 [ 171.890476][ T9123] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 171.895804][ T9123] ? security_socket_sendmsg+0x87/0xb0 [ 171.901401][ T9123] ? __pfx_packet_sendmsg+0x10/0x10 [ 171.906647][ T9123] __sock_sendmsg+0x221/0x270 [ 171.911384][ T9123] __sys_sendto+0x3a4/0x4f0 [ 171.915945][ T9123] ? __pfx___sys_sendto+0x10/0x10 [ 171.921039][ T9123] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.927152][ T9123] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.933531][ T9123] __x64_sys_sendto+0xde/0x100 [ 171.938355][ T9123] do_syscall_64+0xf3/0x230 [ 171.942905][ T9123] ? clear_bhb_loop+0x35/0x90 [ 171.947807][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.953924][ T9123] RIP: 0033:0x7f62b0775bd9 [ 171.958377][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.974417][ T9120] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 171.978013][ T9123] RSP: 002b:00007f62b1561048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.978047][ T9123] RAX: ffffffffffffffda RBX: 00007f62b0903f60 RCX: 00007f62b0775bd9 [ 171.978065][ T9123] RDX: 000000000001fffc RSI: 0000000020000180 RDI: 0000000000000004 [ 171.978080][ T9123] RBP: 00007f62b15610a0 R08: 0000000020000140 R09: 0000000000000014 [ 172.019116][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.027431][ T9123] R13: 000000000000000b R14: 00007f62b0903f60 R15: 00007ffdc3851378 [ 172.035766][ T9123] [ 172.333981][ T9144] netlink: 'syz.0.1372': attribute type 21 has an invalid length. [ 172.343902][ T9144] __nla_validate_parse: 28 callbacks suppressed [ 172.343922][ T9144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1372'. [ 172.402030][ T9148] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 172.498179][ T9148] team0: Port device netdevsim0 added [ 172.746283][ T9160] tipc: Started in network mode [ 172.757236][ T9160] tipc: Node identity 1, cluster identity 4711 [ 172.771278][ T9160] tipc: Node number set to 1 [ 172.784834][ T9160] tipc: Cannot configure node identity twice [ 172.804361][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 173.728587][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 173.762904][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'. [ 173.790107][ T9198] vlan3: entered promiscuous mode [ 173.846594][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 174.087369][ T9215] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 174.137388][ T9218] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.154364][ T9218] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.468717][ T9233] netlink: 'syz.1.1405': attribute type 11 has an invalid length. [ 174.598810][ T9236] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1407'. [ 174.762014][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 175.770096][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 175.879392][ T9283] netlink: 'syz.4.1422': attribute type 16 has an invalid length. [ 175.901408][ T9283] netlink: 'syz.4.1422': attribute type 17 has an invalid length. [ 176.097385][ T9294] netlink: 'syz.0.1425': attribute type 1 has an invalid length. [ 176.137709][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 176.177341][ T9298] vlan2: entered promiscuous mode [ 176.199821][ T9300] IPVS: Error connecting to the multicast addr [ 176.292384][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'. [ 176.617355][ T9308] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 176.984567][ T9327] bond0: entered promiscuous mode [ 177.010385][ T9327] bond_slave_0: entered promiscuous mode [ 177.041416][ T9327] bond_slave_1: entered promiscuous mode [ 177.054004][ T9327] vlan3: entered promiscuous mode [ 177.059163][ T9327] team0: entered promiscuous mode [ 177.082703][ T9327] macvlan1: entered promiscuous mode [ 177.100702][ T9327] bond0: left promiscuous mode [ 177.107644][ T9327] bond_slave_0: left promiscuous mode [ 177.113682][ T9327] bond_slave_1: left promiscuous mode [ 177.119908][ T9327] vlan3: left promiscuous mode [ 177.126070][ T9327] team0: left promiscuous mode [ 177.149835][ T9339] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.158609][ T9327] macvlan1: left promiscuous mode [ 177.719847][ T9360] __nla_validate_parse: 1 callbacks suppressed [ 177.719869][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 177.741677][ T9367] can: request_module (can-proto-0) failed. [ 177.936992][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 178.462944][ T9407] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 178.474185][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 178.493446][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 178.507862][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 178.527878][ T9413] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1468'. [ 178.548608][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 178.552542][ T9413] nbd: couldn't find device at index 29 [ 179.061212][ T9439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1479'. [ 179.133791][ T785] IPVS: starting estimator thread 0... [ 179.241464][ T9449] IPVS: using max 17 ests per chain, 40800 per kthread [ 179.417206][ T9461] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 179.451606][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 179.486955][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 179.813536][ T9483] veth0_macvtap: left promiscuous mode [ 180.095714][ T9504] IPv6: addrconf: prefix option has invalid lifetime [ 180.402352][ T9518] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 180.744661][ T9539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.827032][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.849686][ T9546] syz.0.1515[9546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.849977][ T9546] syz.0.1515[9546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.302227][ T9573] netlink: 'syz.1.1526': attribute type 4 has an invalid length. [ 181.620389][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.628529][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.648192][ T9585] bridge0: entered allmulticast mode [ 181.733560][ T9603] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 182.279666][ T9632] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.823797][ T9660] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 182.833499][ T9660] __nla_validate_parse: 15 callbacks suppressed [ 182.833519][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1560'. [ 183.036505][ T9665] FAULT_INJECTION: forcing a failure. [ 183.036505][ T9665] name failslab, interval 1, probability 0, space 0, times 0 [ 183.055089][ T9665] CPU: 1 PID: 9665 Comm: syz.1.1562 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 183.065498][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 183.076114][ T9665] Call Trace: [ 183.080064][ T9665] [ 183.083305][ T9665] dump_stack_lvl+0x241/0x360 [ 183.088226][ T9665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.093653][ T9665] ? __pfx__printk+0x10/0x10 [ 183.098445][ T9665] ? __asan_memset+0x23/0x50 [ 183.103766][ T9665] ? lockdep_init_map_type+0xa1/0x910 [ 183.109190][ T9665] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 183.115219][ T9665] should_fail_ex+0x3b0/0x4e0 [ 183.119941][ T9665] ? slab_build_skb+0x52/0x450 [ 183.124735][ T9665] should_failslab+0x9/0x20 [ 183.129536][ T9665] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 183.135362][ T9665] slab_build_skb+0x52/0x450 [ 183.142099][ T9665] ? sock_init_data_uid+0x5cd/0x830 [ 183.147325][ T9665] bpf_prog_test_run_skb+0x3b6/0x13b0 [ 183.152716][ T9665] ? __pfx_lock_release+0x10/0x10 [ 183.157944][ T9665] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 183.163982][ T9665] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 183.170994][ T9665] bpf_prog_test_run+0x33a/0x3b0 [ 183.176169][ T9665] __sys_bpf+0x48d/0x810 [ 183.180886][ T9665] ? __pfx___sys_bpf+0x10/0x10 [ 183.185885][ T9665] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.192177][ T9665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.199469][ T9665] ? do_syscall_64+0x100/0x230 [ 183.204821][ T9665] __x64_sys_bpf+0x7c/0x90 [ 183.210168][ T9665] do_syscall_64+0xf3/0x230 [ 183.215154][ T9665] ? clear_bhb_loop+0x35/0x90 [ 183.220043][ T9665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.226240][ T9665] RIP: 0033:0x7f3ac0575bd9 [ 183.230778][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.251401][ T9665] RSP: 002b:00007f3ac13b0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.260490][ T9665] RAX: ffffffffffffffda RBX: 00007f3ac0703f60 RCX: 00007f3ac0575bd9 [ 183.268655][ T9665] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 183.276651][ T9665] RBP: 00007f3ac13b00a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.286681][ T9665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.295292][ T9665] R13: 000000000000004d R14: 00007f3ac0703f60 R15: 00007ffe668f9818 [ 183.303761][ T9665] [ 183.394555][ T9668] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.404857][ T9668] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.414814][ T9668] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.424835][ T9668] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.464862][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 183.698284][ T9674] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 183.888675][ T9698] netlink: 1088 bytes leftover after parsing attributes in process `syz.2.1574'. [ 183.935714][ T9696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1572'. [ 183.969886][ T9696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1572'. [ 184.053378][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 184.735237][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1580'. [ 184.909565][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'. [ 185.100860][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 185.101894][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 185.201153][ T51] ================================================================== [ 185.209277][ T51] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x88/0x140 [ 185.218429][ T51] Read of size 8 at addr ffff8880794538b8 by task kworker/u8:3/51 [ 185.226618][ T51] [ 185.229184][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 185.239376][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 185.249552][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 185.255777][ T51] Call Trace: [ 185.259088][ T51] [ 185.262058][ T51] dump_stack_lvl+0x241/0x360 [ 185.266794][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.272033][ T51] ? __pfx__printk+0x10/0x10 [ 185.276660][ T51] ? _printk+0xd5/0x120 [ 185.280934][ T51] ? __virt_addr_valid+0x183/0x520 [ 185.286265][ T51] ? __virt_addr_valid+0x183/0x520 [ 185.291757][ T51] print_report+0x169/0x550 [ 185.296453][ T51] ? __virt_addr_valid+0x183/0x520 [ 185.301582][ T51] ? __virt_addr_valid+0x183/0x520 [ 185.306986][ T51] ? __virt_addr_valid+0x44e/0x520 [ 185.312108][ T51] ? __phys_addr+0xba/0x170 [ 185.316627][ T51] ? __list_del_entry_valid_or_report+0x88/0x140 [ 185.323064][ T51] kasan_report+0x143/0x180 [ 185.327704][ T51] ? __list_del_entry_valid_or_report+0x88/0x140 [ 185.334239][ T51] __list_del_entry_valid_or_report+0x88/0x140 [ 185.340538][ T51] l2tp_tunnel_del_work+0xf0/0x330 [ 185.345895][ T51] ? process_scheduled_works+0x945/0x1830 [ 185.351885][ T51] process_scheduled_works+0xa2c/0x1830 [ 185.358007][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 185.364014][ T51] ? assign_work+0x364/0x3d0 [ 185.368993][ T51] worker_thread+0x86d/0xd50 [ 185.374100][ T51] ? __kthread_parkme+0x169/0x1d0 [ 185.379406][ T51] ? __pfx_worker_thread+0x10/0x10 [ 185.384539][ T51] kthread+0x2f0/0x390 [ 185.388812][ T51] ? __pfx_worker_thread+0x10/0x10 [ 185.393939][ T51] ? __pfx_kthread+0x10/0x10 [ 185.398750][ T51] ret_from_fork+0x4b/0x80 [ 185.403300][ T51] ? __pfx_kthread+0x10/0x10 [ 185.407919][ T51] ret_from_fork_asm+0x1a/0x30 [ 185.413461][ T51] [ 185.416745][ T51] [ 185.419168][ T51] Allocated by task 9747: [ 185.423761][ T51] kasan_save_track+0x3f/0x80 [ 185.428811][ T51] __kasan_kmalloc+0x98/0xb0 [ 185.433586][ T51] __kmalloc_noprof+0x1f9/0x400 [ 185.438448][ T51] l2tp_session_create+0x3b/0xc20 [ 185.443487][ T51] pppol2tp_connect+0xca3/0x17a0 [ 185.448514][ T51] __sys_connect+0x2df/0x310 [ 185.453119][ T51] __x64_sys_connect+0x7a/0x90 [ 185.457889][ T51] do_syscall_64+0xf3/0x230 [ 185.462400][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.468299][ T51] [ 185.470627][ T51] Freed by task 6812: [ 185.474691][ T51] kasan_save_track+0x3f/0x80 [ 185.479372][ T51] kasan_save_free_info+0x40/0x50 [ 185.484564][ T51] poison_slab_object+0xe0/0x150 [ 185.489941][ T51] __kasan_slab_free+0x37/0x60 [ 185.495114][ T51] kfree+0x149/0x360 [ 185.499019][ T51] __sk_destruct+0x58/0x5f0 [ 185.503710][ T51] rcu_core+0xafd/0x1830 [ 185.507962][ T51] handle_softirqs+0x2c4/0x970 [ 185.512817][ T51] __irq_exit_rcu+0xf4/0x1c0 [ 185.517759][ T51] irq_exit_rcu+0x9/0x30 [ 185.522013][ T51] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 185.527661][ T51] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.533681][ T51] [ 185.536028][ T51] Last potentially related work creation: [ 185.541828][ T51] kasan_save_stack+0x3f/0x60 [ 185.546694][ T51] __kasan_record_aux_stack+0xac/0xc0 [ 185.552080][ T51] call_rcu+0x167/0xa70 [ 185.556242][ T51] pppol2tp_release+0x24b/0x350 [ 185.561184][ T51] sock_close+0xbc/0x240 [ 185.565429][ T51] __fput+0x406/0x8b0 [ 185.569409][ T51] task_work_run+0x24f/0x310 [ 185.574009][ T51] syscall_exit_to_user_mode+0x168/0x370 [ 185.579648][ T51] do_syscall_64+0x100/0x230 [ 185.584805][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.590707][ T51] [ 185.593038][ T51] The buggy address belongs to the object at ffff888079453800 [ 185.593038][ T51] which belongs to the cache kmalloc-1k of size 1024 [ 185.607617][ T51] The buggy address is located 184 bytes inside of [ 185.607617][ T51] freed 1024-byte region [ffff888079453800, ffff888079453c00) [ 185.621767][ T51] [ 185.624145][ T51] The buggy address belongs to the physical page: [ 185.630947][ T51] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079450800 pfn:0x79450 [ 185.641577][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.650170][ T51] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 185.658824][ T51] page_type: 0xffffefff(slab) [ 185.663626][ T51] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 185.672346][ T51] raw: ffff888079450800 000000000010000e 00000001ffffefff 0000000000000000 [ 185.680951][ T51] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 185.690237][ T51] head: ffff888079450800 000000000010000e 00000001ffffefff 0000000000000000 [ 185.699175][ T51] head: 00fff00000000003 ffffea0001e51401 ffffffffffffffff 0000000000000000 [ 185.708111][ T51] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 185.716888][ T51] page dumped because: kasan: bad access detected [ 185.723579][ T51] page_owner tracks the page as allocated [ 185.729641][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2886, tgid 2886 (kworker/u8:11), ts 124497600212, free_ts 124478142307 [ 185.750690][ T51] post_alloc_hook+0x1f3/0x230 [ 185.755597][ T51] get_page_from_freelist+0x2e4c/0x2f10 [ 185.761160][ T51] __alloc_pages_noprof+0x256/0x6c0 [ 185.766894][ T51] alloc_slab_page+0x5f/0x120 [ 185.771905][ T51] allocate_slab+0x5a/0x2f0 [ 185.776516][ T51] ___slab_alloc+0xcd1/0x14b0 [ 185.781647][ T51] __slab_alloc+0x58/0xa0 [ 185.786706][ T51] __kmalloc_noprof+0x257/0x400 [ 185.791839][ T51] ieee802_11_parse_elems_full+0xdb/0x2880 [ 185.797673][ T51] ieee80211_inform_bss+0x15f/0x1080 [ 185.803238][ T51] cfg80211_inform_single_bss_data+0xe93/0x2030 [ 185.809533][ T51] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 185.815787][ T51] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 185.821966][ T51] ieee80211_bss_info_update+0x8a7/0xbc0 [ 185.827819][ T51] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 185.834108][ T51] ieee80211_iface_work+0x8a5/0xf20 [ 185.840031][ T51] page last free pid 6881 tgid 6881 stack trace: [ 185.847855][ T51] free_unref_page+0xd22/0xea0 [ 185.852677][ T51] __put_partials+0xeb/0x130 [ 185.857640][ T51] put_cpu_partial+0x17c/0x250 [ 185.862823][ T51] __slab_free+0x2ea/0x3d0 [ 185.867755][ T51] qlist_free_all+0x9e/0x140 [ 185.872899][ T51] kasan_quarantine_reduce+0x14f/0x170 [ 185.878471][ T51] __kasan_slab_alloc+0x23/0x80 [ 185.883544][ T51] kmem_cache_alloc_noprof+0x135/0x2a0 [ 185.889017][ T51] __pmd_alloc+0x110/0x630 [ 185.893626][ T51] handle_mm_fault+0xf4c/0x1ba0 [ 185.898601][ T51] exc_page_fault+0x459/0x8c0 [ 185.903302][ T51] asm_exc_page_fault+0x26/0x30 [ 185.908253][ T51] [ 185.910590][ T51] Memory state around the buggy address: [ 185.916331][ T51] ffff888079453780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.924676][ T51] ffff888079453800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.932759][ T51] >ffff888079453880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.941012][ T51] ^ [ 185.947021][ T51] ffff888079453900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.955092][ T51] ffff888079453980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.963155][ T51] ================================================================== [ 185.971273][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.978584][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 185.989049][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.000194][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 186.005802][ T51] Call Trace: [ 186.009110][ T51] [ 186.012054][ T51] dump_stack_lvl+0x241/0x360 [ 186.016949][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.022596][ T51] ? __pfx__printk+0x10/0x10 [ 186.027283][ T51] ? vscnprintf+0x5d/0x90 [ 186.031623][ T51] panic+0x349/0x860 [ 186.035523][ T51] ? check_panic_on_warn+0x21/0xb0 [ 186.041009][ T51] ? __pfx_panic+0x10/0x10 [ 186.045607][ T51] ? mark_lock+0x9a/0x350 [ 186.050248][ T51] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 186.056170][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 186.062268][ T51] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.068903][ T51] ? print_report+0x502/0x550 [ 186.073624][ T51] check_panic_on_warn+0x86/0xb0 [ 186.078667][ T51] ? __list_del_entry_valid_or_report+0x88/0x140 [ 186.085030][ T51] end_report+0x77/0x160 [ 186.089289][ T51] kasan_report+0x154/0x180 [ 186.093805][ T51] ? __list_del_entry_valid_or_report+0x88/0x140 [ 186.100161][ T51] __list_del_entry_valid_or_report+0x88/0x140 [ 186.106796][ T51] l2tp_tunnel_del_work+0xf0/0x330 [ 186.111937][ T51] ? process_scheduled_works+0x945/0x1830 [ 186.117693][ T51] process_scheduled_works+0xa2c/0x1830 [ 186.123611][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.129881][ T51] ? assign_work+0x364/0x3d0 [ 186.134760][ T51] worker_thread+0x86d/0xd50 [ 186.139378][ T51] ? __kthread_parkme+0x169/0x1d0 [ 186.145244][ T51] ? __pfx_worker_thread+0x10/0x10 [ 186.150471][ T51] kthread+0x2f0/0x390 [ 186.154745][ T51] ? __pfx_worker_thread+0x10/0x10 [ 186.159975][ T51] ? __pfx_kthread+0x10/0x10 [ 186.164688][ T51] ret_from_fork+0x4b/0x80 [ 186.169116][ T51] ? __pfx_kthread+0x10/0x10 [ 186.173727][ T51] ret_from_fork_asm+0x1a/0x30 [ 186.178826][ T51] [ 186.182148][ T51] Kernel Offset: disabled [ 186.186502][ T51] Rebooting in 86400 seconds..