last executing test programs: 1m53.899556317s ago: executing program 0 (id=1308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4044000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c0001800600060088"], 0x24}}, 0x0) 1m53.255955869s ago: executing program 3 (id=1319): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000100000000000003"], 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'hsr0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x9, 0x5e, "258b5cfc23b7434abab100e29839f1660bc693b5592b3089481e97a279266be122b1b5ce45f125d3f04ef1115c8d6530c197e03bcee34e6b929cd15d03bc38cc97622d4c26e58c718dd7432e9cc5dab2fe49e28e0aed02c3aacfbbc8b656"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) 1m52.933511907s ago: executing program 0 (id=1324): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012140100000000000000000008004f000000000008004b00130000f3080003000000000008001500040000000800010000000000080015"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a32fa000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r6) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffd, @empty, 0xfffffffd}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x51) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000340)={@private, @dev}, &(0x7f0000000380)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) 1m52.536588019s ago: executing program 2 (id=1328): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x3, 0x7, 0x6, 0x3]}}) (async) close(0x3) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={{r2}, 0x400, 0x6, 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0x8a6d}, 0xfffffffffffffffd}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m52.478412867s ago: executing program 4 (id=1329): r0 = socket(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xf, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb], 0x0, [0x4, 0xfffd, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc], [0x101, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1m52.354553387s ago: executing program 3 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002100010000000000000000000200000000000000000000000800180002000000080017004e204e24"], 0x34}}, 0x0) 1m52.22189359s ago: executing program 2 (id=1331): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="002b8008000110f4ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000806000000000000000000008500000073100000180100000000002020207b1a5635587d358071524f58d7f4f8ff00000000bfa100002007000007010000f8ffffffb702000008000000b70300000000000085000000a00010009500000000000000b553e1c1ab735616053af04678f1da2794a49b8f1b2a2c7e455b9f0000f100000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r4 = socket$inet(0x2, 0x6, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r8, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff010082850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r11}, 0x10) setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80000) sendmsg$rds(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)=""/100, 0x64}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/151, 0x97}], 0x7, 0x0, 0x0, 0x810}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r12 = socket(0x11, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r12, &(0x7f00000001c0)={0x11, 0x15, r14, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000680)={'team_slave_1\x00', @multicast}) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) 1m52.221265445s ago: executing program 4 (id=1332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a", 0x7}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}], 0x1, 0x4050) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x238, r3, 0x508, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xfffc}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0xe9}, {0x5}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0xc3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x51}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xfffff800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0xea08}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x80000001}}]}, 0x238}, 0x1, 0x0, 0x0, 0x10}, 0x1) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r4) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf25030000000900030073797a3100000000150d000073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) 1.137942742s ago: executing program 1 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1220, r4, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x5c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x33, 0x3, "6c33a811ce073e8ee3c65645259c968988306f3f46584df9af263a63e46681296b99aa4f50b2401a542fd3d82d013f"}]}, @NL80211_ATTR_IE={0x59, 0x2a, [@dsss={0x3, 0x1, 0x30}, @measure_req={0x26, 0x50, {0xa, 0x3, 0xa, "18dd672f5317838b957739d5cc23e416a7bb9df8d50fce431a20b88b075520a13627f743e5fa79f66d637d64fef35031c60e0915620f6e6af4bee576409e01b915720e75d9d3b75a1c934e9cc0"}}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@mic={0x8c, 0x18, {0x8c7, "be84039eb10b", @long="2fa1d8fe42f3d8d1215692399f4680a3"}}]}, @NL80211_ATTR_BEACON_TAIL={0x3d, 0xf, [@chsw_timing={0x68, 0x4, {0x9, 0x7ff}}, @dsss={0x3, 0x1, 0x34}, @ssid={0x0, 0x1e, @random="636155f27c8aa7217b6fcac4bedb4868e531fd93a5d42fc8c5227b3565c3"}, @ssid={0x0, 0x6, @default_ap_ssid}, @challenge={0x10, 0x1, 0x62}, @supported_rates={0x1, 0x3, [{0x18, 0x1}, {0x5, 0x1}, {0x3, 0x1}]}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13f, 0x7f, [@fast_bss_trans={0x37, 0x96, {0x91, 0x3, "e79072c0c9d3a406499d8e799abc9d22", "a5e73c0158c6814a21854b36aff3fcb046c3c56a0b44bb1fe92480f43dc93cb1", "5f5af6d42a655c3570fb2ed0c00d01439079e970775e0182911a5c220c336dc1", [{0x2, 0x6, "c13e74bc6e9e"}, {0x2, 0x1a, "ac81b62c35e6767d1edf7f1d7e561ab46941958fa68c5f5f6246"}, {0x2, 0x1e, "20ccc92982170d681cb8bf3914e0d0b7c6b54bfb8f250826913634a7c420"}]}}, @random_vendor={0xdd, 0x22, "3a79a89bbcb5b5e3fbf852e32bed17897101ae9b4fc6b02640d816dcfa7ef8779b1b"}, @prep={0x83, 0x1f, {{}, 0x7, 0x81, @device_b, 0xfffffff9, @void, 0x81, 0x10000, @device_b, 0x101}}, @rann={0x7e, 0x15, {{0x1}, 0x2, 0x3, @device_a, 0xa618, 0x7037, 0x40}}, @dsss={0x3, 0x1, 0xb}, @channel_switch={0x25, 0x3, {0x1, 0xb}}, @random_vendor={0xdd, 0x26, "dbf53bcf83609d9850d066ccd4f0836f522eaec2389f0fa6bbbe6237c6cd84a2445dc05ad29a"}, @rann={0x7e, 0x15, {{0x0, 0x1c}, 0x4, 0x1, @device_a, 0xc990, 0x8, 0x4}}]}, @NL80211_ATTR_BEACON_HEAD={0x269, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @random="c45d533b1aaf", {0xb, 0x10}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x9, @default, 0x7, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0x0, 0x1, 0x401, 0x8}}, @val={0x6, 0x2, 0x81}, @val={0x5, 0xe5, {0x2f, 0x1a, 0x4, "0140d9790581195762a5cfee6956c9bff07a5c37cf408844c9688a348f6ee214b143af22268b441fb6fd2278b1e18122605e174f0fcbfedbec75bfcdd4c4a6660296cf33050c340d7bc9b02a5ca0fe56e0a5c32add92f9ad10ea4c384ca83d2b8525d6781c7ddfcdd6faf1d7ecc6df8cf5b912188a661e38e42411ed70e7c2af3828ade6a8e5714e2fc53a168840de5066e5b6cd047722e3749bd47c39cb2a0ccfaadbf1211f079d6cdb5b8f47e84f9bdc6abc58d36ff7e7f1ebcf2ca3d1bd108c1615a0e39883cba9da41a2eddad573fc30768c1d9bec2c131cbf82bc26b513be8a"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x67}}, @val={0x76, 0x6, {0xff, 0x10, 0x30, 0x3}}, [{0xdd, 0x59, "e4967455b4b18d8ce68e0567d5d7c062a0b0358f6d6f11697e6e201e3e6092aebe0ed20a8d8d733f60938d933f2f1d8ce7bfc53e85dbe9a9974ca0eef6e5510eeda0f26d95d4e1671f8ece8da6b41b73ecc5d98a2e647d6909"}, {0xdd, 0x98, "ff2b06ea79c44ea294937805a486c89f33fd0b430650cd512c6a36c3bc8941587671147622bb8e8004e68f694a14a73c71bc4107cb2c2d7984d6964ead1bc74f932d9c0ac022dbaaacb597934ca6466b00afff4d69921a8b4b751df1ff8aeb065c4d41d84829eb7d66580668a4d5c4d4aa957d0cf180d712248e4615d8342dfc5d1ec8c529d9f79ac10e29686391d5974c51402495fd60d2"}, {0xdd, 0x2f, "fd81f4fbd3bec16287908a96d04112ae13f21eb526254b7660ddba49522bfc8c2b966111ef828b2156fef2b27569e6"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@supported_rates, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x24, 0x3}}]}, @NL80211_ATTR_PROBE_RESP={0x32d, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1f8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc5, 0x3, "9ec3c3202c4d073d8cf580c7ccf854fe932626c5882e522a5e18bab0db4a77cf87183e7d434494b12af407dfc50abbc79932f858ad4ec6d6739c38a4359403befa2b333598f2c0329bb59acb5d56ef4fb76be830da3b4eebf3cdc00a2730d33bd3ca4d89ee37db77abf2dc958308950412c5b25b7388944c04ff80d752e6557b99db18e0ccfe84da1b6cac3d45070823527f6ab2fc4c85750849d1cb399eb591a80eae1c58288f6b8b827af64e1579d65d86e37b3cd8b4ebea3a434bdb9ae81d3d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x87, 0x3, "03923d02cf2fbbdb4a9e0cc32f683f2cafb4fbcc4a56753fbdf9088da868195aba21ae279bf3268c374340efdfa7e8463e275c5ede004200161b42bdb935cc3112b10d1c728f905764b33a4170312d62fcf60770273487e7d9cf932c9a26a3244b20214dbb9d8cde7e28cc31a8f91e0a18e544a399d5f821bf5415e9369b5c06a1dc45"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5a, 0x3, "c58a2e7f6bac4951e529f3a2f8a9b2d42af4cfbc4c1e009a0848cd0ec8f0b4f6a5d1949e4ea43f1d6e8980a30c7e89984eb359198756d7f351d386bcad54c7dd4152a9053a489726041c8f97c945a265365ac9561fb3"}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "6a383c9e06ea462a1d9e53a8484f67f6a67b4536918785259e2d0fa21ea38ce629011127d8d2e443cfd9267b2b3ffeb2c7b48ef1e2381b6daf498dd0acf835a0669c64bd"}]}, @NL80211_ATTR_PROBE_RESP={0x82a, 0x91, "66be447ba3c759ce6183cc03a3e2811f73bdd0af481d41cca22fd82e22a4ec0ab1d085a1c27e49df2788204f1d9eb521628572804b145dab36cead5ee72a9142a9d74c2f2ec9528f7925bb30e58d116f8ca7dfadf92d34d358b52f92e0e669c68cfa32ef5ab11a88ab5acd72ead54765f1bf9a4ca846fa50b958eb9e495eb3c2f9a85840c03b0fe44ed7e2e3566911756945aec84523cb460c06674e2d4a8f8978bb51b112c208748742f7fa7b32dc9fe7ecedb89459d11f8ba4916e9f54b42a369f753e74106954733562f816fe9b24e5eaff3b7f57fb44e2f8ae327a13a29f7adecd7e7daa02f0b2b14253b441e8d77d44b9cfd7e0714ceb18ba35be95197ec36f3e1b2d0dcb860218a81421dc8530b0b4d3be51014d3d499e5b81ef8e1cc56b4e58b8cc85b1cd34e6575b32b5e2eed9e18c61ec618b0d0f8fc74cffd19a816cb8fab13d441ceb549ee8071809d8b8dd9cfdd9667209426e200e026e0cea6f4d8ceae0c4156ff28d8e8160a491f385391c8b89540eec5bf8dd882f6fe0ddb78d2547812578da27ebe0fc10e9697f007d963536bee908408d48f6edfc3baeb50f3e3dcf889938b47ca7636eef0a907ce811546407d84c37f4f3ee404c605ccf41e096a08dbf4ea1dcd7c29109a79c8138ff90293519e1fdf3c2d9a11584871cc7f26888d4ce0b555d6a4f8526cbe7285b2833945bbefdacf5edfad97ab95e776e46895c350e3a3aa20acb1b1c28c191c22ea77bba34f712b11fb7fbbd692bec27563019f5e288d363e8cb6a230d31a8ac944f69e0a557961003bf7ed65df5e1a1a1951b52ce99a67abed8541cabc9cf22d2555f6e1529dc6ad954380acfc33f772217a1a0c0416bc53b24b1e5f02c5e2d1e3c32fe05e1112165bda405919ca456bebd4e089ded13e3192ca5ce2402403cffa69296832311f6983fe33a7bac28d7c9c563ff117882664978dc7b0dab3a5deeec37fcbc6d916aac39435458d11c771a01af162160f792c266d81693c64d8edc2d3fe7870f07f9c8760cf0bc69952a903f516544fe30d5d5a52f0b27faf06275baaeaca015185cc5b87dd0b55560e4add94656643285efede8750b565946635cff1eb5062dc6df34786b6fd153f731386c1b8b24896b481318cef9598d11d72692b071f0266bcc111a457ec6acab877913cd14e3960a47535774bfbf3573255b706dfbc41a84bf35f496ea36298d3f61ee836c3a9c2cf513ed75148fff73f44be169a2eefd8a0920bc133f02b698ac85d708b7b0d215f879c1ef5ae8807685e220a9b093abfda2ab652c7669a66ff937b1e4d6b26e78b0de9f57ed13338ac5d4a22bd60954e7a2744be7e8667df8c647cfb04c6caffa20eb0dded548de0a3802a455bd037d59d51af1d5b9f44a5373d55e52b7c1affbe8f5d860756fbce62c5fc7fe3a6e848b78cbc3a26bbadc092f9f454247e55592bfbf34a88760323d723912e11ea39b2778de2e34d568259a26f9fd8cdd03a70a9ea2c681120c528bf6c162a1356d217d2e21b52e52817555033faf677f7c4684d51c97401166ee08d4bb0e6f8b12908bf7422cd12d1e36a4b9afb7a67b36febd8f8a5010bfabc7ecbbe6dca9b7644d4e4bad0eabde407c27ca2464d64c2bc26072d58be02070aa622dfcefb8ae0f46e319b8f7984d4fc922171bfd7377493a26bb7b0081d74039c8424e9620faff8fd9510417a926b052abaddc7643eb17751922c72631d815c4ab160279ceb62d7ed060dd90137072ec34c9f551acf3ab16617201c0c0f9bc3487531a67f4d6dbd2a59427d912db229893b0f2c3c60fb3f1ebd4f1a83eaf16f439f81bd642ffb576bf3ef9038801587da95873e828037e9b2ee9deb644c79bb5b4775338e414ed0ba0d214aeb63d7ba27d1c3613c8e5349ef652d351c1554d71d7cbbeed5b079494a34a8e9967f666c7d3b5ae0165d3be978079dfb7382787649901b9cd6daca9fcdef207f6bfe112a3f925270268cd41cf9561647b08046c52544e5dd5d5c773968f728d1a09a6cc1c32dc40c9049c44198e36702cb75782c3ee7d8788f93792cef95bb012ebb700ce782930d1035b962b84ec3f7a2c39262447f78e451832e9a27f3adeda66338ead7130ee0b317e8943764a22cdeafbf1e87216e99f01409ea8b90cd72d3729a02c2ebf04fe3da744538283337fc6260fac5d68531d99cf649a946020d990a42d0fbb81c8cc23aeaeb097ab4bd8d9d0df63b5acfcc9a62b80d87049dbb3703912ef298ad6a6efa5c3e9f396aa742426fa62cedce3344e376abf17c21676bd7b3256a077100135415c2654627e3621c828a3390cc7901f096fe50f5ea7138da04d218a92fe45ab7053b39a80b88908cc349e9abb87c838d6eebefdb71792ce897ac15693fdc454520df76cab09cd2b6f95d5f1edeaaf55162cd011d063425ad58d267d9e342d042f36505e84abc0d1967fed895f06d98967a8e57731faea596db64eee6c5b649144f44a1554c5befbd7def0da6e20a6b941c46c5c2e41bb1a3ac413ff8d145c174b7ac464340d59057762686e7c5624f93d361da4879adda67778ba5a3ade9709b1447ebd5b8652b2a668d826bdfa9682502c7f10753b5e494cbd132cabfda9bd5242e14a72099bad2d6e994243f1ca7cca78687d1b6fbd5046be8e13c0a0a94401285594096a5425d4706c4fbc4e5200ebb81b644e6607377945d2fbadf4f0939ea49ecfee15ecda29560199decbe259997cf486af2e6fc7846eb2bad0ce50ae6c75e511d109d9e71bfa528c148159cbe9e7b041fa4570c49136688a9fee508313adac49f0879c69e1392727366ca2daad2c1442667a6ba2e4397812b1626fa6cb363e47dcac02eec5bf0a9c4b41312b04db83bca26ecf65c7f310cd1a382542fe5b52a3cd5bf8139dfdb39087150e93a91a731f1446f8110645db929f4e597f8f69"}]}, 0x1220}, 0x1, 0x0, 0x0, 0x800}, 0x4044) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.13724513s ago: executing program 4 (id=1334): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x3, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x40010, r0, 0xb7ed2000) 1.136689869s ago: executing program 2 (id=1335): pipe(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7f, 0x7fffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) pipe(0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7f, 0x7fffffff}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) 1.135941098s ago: executing program 0 (id=1336): r0 = socket(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4d894) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000000040000401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c0400000000001c0012800900010069706970000000000c00028008000200ac1414bb08001f0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c001980"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 1.134907785s ago: executing program 1 (id=1337): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000000, 0x28011, r0, 0x513e9000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@dev}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0]}}]}, 0x158}}, 0x0) 1.134245446s ago: executing program 3 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x80}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x5, 0x1, {0x0, 0x4, 0x2, 0x0, 0x0, {}, {0x0, 0x1a05f45b5c3000a8, 0x0, 0x0, 0xfffc}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x80}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x5, 0x1, {0x0, 0x4, 0x2, 0x0, 0x0, {}, {0x0, 0x1a05f45b5c3000a8, 0x0, 0x0, 0xfffc}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) (async) 1.133367069s ago: executing program 2 (id=1339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000280)=0x14) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x56}, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008040) (async, rerun: 64) close(r4) (async, rerun: 64) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) (async, rerun: 64) r6 = socket$kcm(0x2, 0x1, 0x84) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async, rerun: 64) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) 1.132772848s ago: executing program 4 (id=1340): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000100000000000003"], 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'hsr0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x9, 0x5e, "258b5cfc23b7434abab100e29839f1660bc693b5592b3089481e97a279266be122b1b5ce45f125d3f04ef1115c8d6530c197e03bcee34e6b929cd15d03bc38cc97622d4c26e58c718dd7432e9cc5dab2fe49e28e0aed02c3aacfbbc8b656"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) 1.132079653s ago: executing program 0 (id=1341): socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008c00}, 0x24040044) 1.129028861s ago: executing program 0 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5429800088094000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6400098028000080060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000400001b1b463c61e4def5000200000008000200ac1e0001050003000300000014000200776730"], 0xec}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x28, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee01, r6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000109f00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010af00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000010b100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000010b300)={{0x0, 0x100000000, 0x5, 0x5, 0x3, 0x6, 0xe793, 0x60b, 0x7, 0x9, 0xde, 0x4, 0x9, 0x4, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000010c300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010c500)={{0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x27440000000, 0x4, 0x1, 0x9, 0x7, 0x401, 0x5, 0x4, 0x0, 0xfff, 0x101}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000010c580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000010c780)={{0x0, 0x0, 0x80000001, 0x5, 0xb4, 0x3, 0x603a, 0x7fff, 0x43, 0x1000, 0x10200, 0x9, 0x7, 0xfffffffffffffff7, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000010d780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000010d980)={{0x0, 0x1, 0x7, 0x5, 0x7, 0x7, 0x3, 0x4, 0x6, 0x9, 0x6, 0x8000000000000000, 0x2, 0x3, 0xe4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f000010e980)={0x0, 0x0, "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", "463c0d168c3bdc82af7b00e03e6c36c455970f29c25d21f5f19ec298faa760b4ad3fb7c54b6619068dc66c401332c121b4205cad2d2d31aea67a8e532509e27ef58de794cd0bd6f4c999df1a766370a12e129bc31abb54f18a12bc3e5aee841e8e44bb5f635b0c6ef8a5895c7622979a7c65512f1792a4cccab9272bf4729c07a6e615c3ffbb879f65b81f63c69846665b3b0796f9db3724b0693f5ddd619195f0cf11403112d403f0d01875ec48364dc0007734486783a4303f94ec60a6b577bb60e6ff98e2d38d69b1e1302b88904d3eae19c0cb7aa72798b54efe2edb1e8af80839597e9ba8e7c9a99f84f3b9313687b6d4c4beb3de112bdc2fafb92b13daf9ec6472a95196a2dde0142de8c30d4dd475f7f90a94fb69764f6ffc46f6a5baea3d0d82398a105a1b7e063c33df0165c801c52ccfa27cb04262143025ad90f37de3ecebac0aeb6d12ab623b7484dd605607c4f9cff5799fba7c82a4dde5af1e3e5e7c18ff9200b1c7498a36cd6113747ec1f8ea400f94bde05b97e879e4f001724fe8c63e0f650882271c7951334c8ad70e4f99d007b47fad7972caaa03ade349985c593c84069c6318c3694842c4791f603d6902549c84a0fa0f0d242c7ab7c9428288dffbd3f5935c8cdf8efaaed7055f3371e0089fa88fa737b22abcb799bd732b6b758781e5bfc8d3d2a26e08b698b4d809e03b6731b1c87c14368fd0bd43df94a27148e2a3f8b2ce1e3e1146850212fe674ec09e6f4383c75bd6bdeb08c0d35a5e9ea97c2cbc2c6531ba049bc33adde50dca165894a486c57a945b0d714a9e5c292dc0040259d36bae92fdd47ee8ef92eebfb70cbcf2357a8e6ce53f239c641d5034ac78291aba5dc11113aa05b54e873f752087f25089e284dd2d15c1b3358643505a1521834d9cab1b3a06a422cffc16f36fbe0b82117b428233b24117bfa21ca5a6fc7d198c94e82e1aa4dcf6e45b7615907591af1f561e58cd6152bedbc0a1c50fc2942a29568530bcc7f71d1a72991b83c79dafba8881522b0155bd1a22332c68a70460ae0afd4b702213d4c5092546acab324ffe25b1333303f985a9f40a1bb53e5702ca3e685d6ddc90bdba13dc0af5ed13e38d9f2ec5f48901e6e811964a224e082025b3f3e3670b29b7d99425d946d114e20a2b940dd98e94cb743764a873fd223d440bb934c59294281e631add0cd22fdf888325daa5d7ce6a4d623c3f555ae99d066262527a321399935d28e53016ef7989b6a4b8b6ce9542c3d1c0ca857ba27057c61564df93dec2796156e6cd0a5883977dc158ab2e84880ebaa920dfddd0b7e54cf0c660930848dbb872121e45b7fa9c3172cedd39e33a73fc5a0815423cdb3956247f6b41df14b7c501b059cda2f0c212d06a20bd394605e0b0a9818b4ac5cc33d9b49eb5d9640cb4f33be1e8557ed379b400f9546bab301e45a94d490e4a13686df3f7ad235ac313f75eb739df5111d76295d725a5d34043f3d7ddeb80706f6c2e2874cb8e611a59f29ee9caddaf58d8deaf9b00c89ce24409ac5b2c90ddb5ddcd03158f2748a47d179f10a5aeeab95841480482d574bcc1d463bfb0cbe2ada7c236202bd9e068b4b0fddec49d6d646239203e82f3e7f3f2fcd2615dd21cdebb71a8537a097228d09bd722191f2936d25a717151dd7d1ea28f17eacf642bee460fbf2c2a16731bfd79612c9ccf063173b8d50583306d662cec1f8b485f71575d438679e2ef32c2b2717b900893c6bdbe3452952df5149bfa165bc67a50ef8c6d2d0b70c4e008431bd41f688d0e5b400eb60d66dfcc9806295999385e01e213bca7cfa5d54b5007a733d61edff82ea131c03b544a6bff1a64d806214c6408a897071f5cce42bf45d95f769f7b9b3bf8f0bf592ac989a9834d865b46ed2b8bba56234fd1afd58ea6088bb5588d7b8f02671001070f15d03daf99ccdd67a7782822b5af259440908899cbca50d2935981dc6cb6c02211c2f2fffed24be7e5c3215746a02b683acd7b19cb43a4763fdd4773c84b37e8457daa8c790ed445576434ef061f040679fce0397f9be91aafedaf1421b596fa9463d5573ccebb1639d66894c63208191cc4ca8f111c357ac1e928fb15fa540e25b303837cf7f63278ea8dd32313e573ef6e76f1e1e3661efee86c4ec6d939f44defc3ed3cb4fc3844f3a730d517a16f28a850793b78dfef599d14858a84098910be4c62b049185bba3285c6b12b7c335e23c41b1532d4c33c271b780227dd961548a0f583e102e940676fd1a55d0e032d955e768968449c6cff056f561ca43d5b06adebb1d9fe67d88ef7705a08ae2a69d8e4340e5106bdb9b9508bb78dd4cb6780d47b71a8b6d14202c6b005e0824f832b1ce49ee79d29963d9b0006e2a1f4051d1284c5266f3453f5ba1576dedb5e30eafbc12b89b3833011bd76370ba2d97b36bdb49d3f4cb5fd5d95714a41e06fdbfd1786541b9359849d39a1b405b5fb0010b6c76273790897a0a49aa369745d814d849e5a9f10165cafbde7449564c3f10e110608ccb3cb4aed2f7b0df304506868ec3c4f6950cc3f76676006da9ad2dc8fd43c98c7c13f61b0fb570b0467f8bbd271bedd4051ab2278f0b91847587248f91dda77dbad24b3c994498472ecbd9f59637515eb6f1045817626df0c3ddb9b34beb710c2c7467e7fbbac3efcf2f08d62ade0c1d0b9f6967ac0b7abaf521a29843dbd3b2f9d6bc6625157ab135b168bad5a34f11023510c3af385092fa90bf80779a240e5d5c9b45193bf50d8917682ab259e3a1eb4eac4565cca177dedf02f6e9a948e09f15bfc593372255d9fe26a03cf887fed12df0e7f3901270a64f132cdfd1659a002781da5f57f42e06defc97c29820a06e9b8e5df136de6da51badb2bdafdac2fe5687a919ec406489cdebfd14891a2f2e762b9f9015031a4ee99b33ebf290b0a8089a3a70a2e930ef4b796a71fe658ce4282288aac11525f128dabbe56edb6d473ca96af4b14ccfeba48e0bfebffbddefaab0d20185b23bd673aad6246a0291224b404ecb14c3d817c6683ecadfa30efb120e393044631488502aedac45d2ada2c73281b4071e328e3b13deea053ef0ff3da92e1da537f88aa715e2ba2dd15f3fa64b97c0c99e21732d7a0567d020b848141c8bac0eadbf516ed7c2f97d77738868d79bbc6b6d3c5a757c913a2a8e595c6aa154ce5eb00fa2807633f7e403135bf54e2d42f3ee2a95ae71c4eb19bfef6c999b6b8a5fb61e3d4720ddb01efa8793b3dada0f4894bc13982a5d7ed058660b315793807d6cfa92217147c86e5d0eea7e4bf4e6b4c921114c996cbc414449f640427dc49bf33480af5c74d6e815ad2d6d923cd254f7bc6bd94db305cb18dc6ebcf79549690a931c1ac56f1c5f3cb71a944993d9c264e270dcfa2999e95097ade632a6b4db826d85359f5572846c2f12e13d0dfea104a984041d52099a29d7b864eec19d459b83c9a2baa5bc8172f9c34a6a4272a5ec66c4649cbc2a1b8c984043fe530a2eca620f2ce0b5f0e8ec4d2ca00c18366fee6cee5a44f2a1058a7302f1c073972726525e0d1db07d1ded883018c0c67a490ff5c10b3b4bd7370515586cc8fd659386d8cb552ee96f1f280d3bf7eea4977f6d4f35a571d32793b0d5d64ff93096a0b0639b168f03f6b7b0e77bbaf6facab2d336f8c8d1ae40505d3e2cdb663f9509357f602469694e11db4471882a91c5c8b9fa038d371f1cf7988448abbb8363a0b2acc8198bfb52d09e0722f666018189dd94510807d9f8368e6b3d3633e9a8ecdca3cc0c10e62c2aaa08903810b3499e0c71b90e900153e81140474579d7cf03c6f5d26ecff2c0d4f7711461dfe382da15773847bea965b86f6294842c6bc824e1c2ea6f3ab1163cbcaed38082c977ce06d228676bab85a3e7d76f2ae93c6c997466cd1947f14873b33d3a4573748aa569b48d61ebf7b5ac0eecc5d936de7ba2319a9cd6fdf579b88644cb940489c6f3c50a06355a96c98fc7602158738aa3453ebeae0d687b409f17393eaddba5ac03ed1ae907b7c93e85111d522d1fc5497ab275c76efcc9925373b9237af8a9337323db1de1f95482fe0147ee0ce3b4f18bd6f731345af73e077f2c381385badc085cc634f266facbbb46a9388a89e68eee747fb5d25fd038453568d9793b1a9e620dedf05578dd2760749058e2a5e54f3cd28d11058376f969853eade9724c3cc6b032df1011c5cdd9b1662e0c07195c8d7d3191fdb6db08927f7a06ee17f62e2d0752afd498c4aa76d45a9516373794fa3b9c17b7bcee3fe1c30ac8ac38d7ed6143087aea7b418b625b7ba2290710ca26392357481798893895d227201bb984681905ff298328110640d688b9e70eb89155c436f6eb5b7fa5dcf4102d60b9ea91b21d08e3000980db121a2b0f2162dcd2663b1806c824d72c1d512612f38a0e59607380f2bac3f0a768cc15ec785e4cba5bff203cdb5863ab0b3d4fccb18b245ecb1c9cb307728aeedd557c31541c6b8c6bf7ecb4066db28ca2c2643f75549962256d3887809030957362443fb8c013c3d17e1259beb6ef02b4e61873746bae0936d61a5824906e81fdcdea696ce5fcef73884c6b0b74a66be0d45c841d88933a11de3999d7af0186fdacb03ac7b0e30ad0d36eb0bab4ff448f7482b5c980d5916be49ab7c900c651321a40428407eba45715674add3c2682d36fdd721c99fadfad717b15f17d40f89b3a66539be3de663af36539daa954cda514670b835eccbf738e2b929270ff678d4c1f0969cd436f087f3640d4488d34185c6fae83bc183686f3ad040e8dd0d608d32a6cf17f3c4fe40d5a8ef8347c86ec24502a764f5201c462247ad394e83b1b2c95c35754c0630d7919f52e581192281bf347e7002048a7550f947d34e2d399f4ef73f4cedf4bd7ecdc255122e3a44ea6ed4ce8fc4347aeff500bae31b4f05aa2e30c2875e784f0680a654f5297edbe35e1702438ee49a5a88ab365d72fed05196ee66aac6717a9d7a0897a0ff436ffd725eb456622e0e8c128d78de22563e4e857389b18cda82e8cea1e2eb27a5b9fdff3c29eb0deabe736258910ab05d7e9017bd49b691768013f6f21e10a1fc06292187e59ca10e5c8dad7fe0e852029183a3aae431858f84b8b35e870d262c26255e857d1472e96678359a1826fbae8afba8576cf4dd25169ee3bc4ac97b676b83003461685d74545e326eda7094abd6d64ee47292ed0b7d5fb591fd6434ac52f2b5a067d41f67280066c2a0eaf3323bc532b24bac3e28683cf5bc7c95450f024c017e30e03184fcf68ef96f941ca5c606493559b25a69f36cf2c2b6411ecb02d9a7f94875cd4b2918d1b11e7ca4175332a67358c8fc54a41926c81112853c2af7958e43af40e9c74e25f3129a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010f980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010fb80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000010fd80)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f000010ff80)={0x0, 0x0, "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", "0784cb8a27b5c6eeafa1ce37a599c8d7bab15480b025e1d70e641f18188cff538986ec023b7fe70030d5318dd734d346dffd76ca093a2526d1a08000ba44c5e051180500af51b2a7662a7a7927f2cdbfcc48e4f16fa045edede38ea69952c98713eb302e944923ff3eaa735d59466c4ec49ae4d7cdb7713245b42cf524a378129d248396d991de83d9f860cba0760462dabe79f0ab40dd4a3c3dc57e2641af201e0065896e4835c81b4ef519ba6c8865b461ca728f35ad140004f0ee128ff6f921a6ccbb1d8b7a8944b64b902ddcd6eb008a406fa7cf700e00ce7bd960b87544c99982d0f054e196de8b13beed59fa77a6860bcd75eb78d883af1a3132b51e87207f476432f0c97f37d87e524559b9bf6ee424e92f3d28410fb266ae782b6e7f942feb4a024c593853301ad5dfdfa77e0f75d73db6015719b8b01ff7c27f20b2737aca5570960f015b321f3d13e1c6675c29d70f97562ef958bc0f0b1a2c6faa9e8add625da09221fef5845b627965e0f581bd29e9355563aef6340153b7460b837bd267670ce03c7e32889b6337240faffaddb9d0a1b175dbff77fed1762f0c011f0b3defc1863806ffd82951592ea5d12069374c6256be4da8a210815d0728dbab8323ff85882e3597ed484cc4b5ff72732009b688279c5f1e8b27f3fa97a53af47890d9f927b0e6918810932409dcef5ed40c7b2231ac1f274e6389febde4924d8b35daabb1663fc87fd43e08239181d26b558c749b0c696ee7d056f130000c7f556e8413ad1a01aca95436aa3c97123ab5e7d6131abbd93ad4dd60a04c0d48a6959805a4a364c3a706e775d53a049d15255758042743e354d9f4d40baaceeb28b3fec45d45dd9a26f4b4a4e204295cf20b8e873f78a1861d0e9ce761ccef67e283f8a9d1358638e0830b3627fe2508f945dca28d33b2ddfe3343e028187627b5fb8d0a834918a055799ef09f35fc55e5107bde35ae731b94a5727c1ae04290024ffd8070619468c106fc56edabcbc3c08251da71b7cde3618c12ebc5d65324f609f99a940b0094bfe92b9df75d7264b3e523d1b74464edac0fae52434528dd54e84355b1eb4cfa154008cf126371465cbf1a6a87bfb16b2fb79164350244374e8e88e006fde0c2b4fe14ac2cdc308b4deefd3ef522aee87d860a0dacee0530940aa63cb7aaf947edf8c2365a17f39454730a837e7d2714ded8389d935d5a83e479574722845f1c62a71e4e8dcb18b31011e33bed9f549001d56cdf12619859473d0edae178cbd1a0f3ed7c8fe0dc643f1f3afa00eaed3658d7468b56da72a0d24fb672b18f8ee4fc3c4624a790759fffc493e4397ca1d4b06093cb5f49d48633486e1c7156ac69a0f007ebe1fbd6c34e2b3933d6d3108b9dc25ab49df92f479628ea5ebbad36006bfdef4910d5864e02afda9b4c0ae6000bbebba1cd045f916ff1d4e457ef4a63c5d6610881e91749478c35a5ab6f38f59d26c265d73b3e1cca80bea0f3b6f548587704561a3574b85757441008a25dfe4edbf10e43d2172503ddc8f765a5093f708d192e1788dd6405a186c96d63ca20955082c0f43fa9401f894db534e4bcef94b21741c025df2dee3905cbe22fedcd0332fd107f8ed797087f96f7e907a00139560b171caa74d20f2f1421f59c5106a67d538dc89d2882f9d725df9d65ad953c404c1cc65b7787c62aa7ba99f572e3bdf01052ce757b9e53fd88f0291717c8c9640576d089a5c792c1cfad9412dcca773cd869b7d063b84746d40a685c0bf10fa9f881b2c302298d72ca78916d8a3533afde176286fc3b498fba5de464ab3c79aaae5ad7c95945a1ebcf0a93cb0bdf0937527be9c47a1998450da50740d8f9fb9a7db011a2feff9f1b5a2f57c19957d56a63ca2c6d5a6ac151f2d91c08371de87a79e96cb536ca0a26af7f3bc992b64f1fe05d743f66324d49f737b4ba5ee0609e209524658606ff3af4d575e64feca726164d43055d2dbc771a0cc9c2f1a1cc17de2aecaf19248605bd8c1997f01d874464b70622da08ddb56bcbcceee33eff68b4ada5bb327df5045ba35cc47a8c6e75dde07921de5c001e71ca3ef811d48adc3f9e1de6298cb0363976907ea7199d364418d868e2ed05a09bb12560e47dbd64b968499335a3d88241d5f5569363c855344f5c2464d47843e47c07205186717ad385a7d826fb00dc73f4da85395b9d0d760ea4ab508c8d0f0741613f34acd011233476bf88c845d278e47818cc75bb564e1ba941e99427897915dc8ec10555c4b4739fb3bb5c1a9bec3ee3020842dba31c46edcb46a6bbdf0b076f862d588cb02761468b89adbf83efa3a6ecaffc062204f7d063825086bddae78b6a2fa864ab7c3082b7bdb585018822af27c13f7dbe2621fd03d51c024efd233122d761aaa1737b40e387e0aa637ed92f960f798f8129a8ed4ffb510743b98f8819b40e3e86b69e06594ecd9606e954f92bc5150688ecbe2cf57e320b472d227d307fe16fa94d61c24c3af11c19c1914d77668afb11f2810572152f7afd61de3ba3ecd0a31572fbaad4ab2aff20fd7e7179030f7782cca1fb23767af989cd9d0bf14d02c0a38346974a72e24d5dbd9c533e0aabe9a87ada04da78d00e1adde0408309db1eb4d800deab6b7606f1020b8366c3f5b433dc16fa9cef04ecd5f9d1a28e3f82ed8afef3104710e8918be99ed27b653690df2c1126c0a522f2cc28f6e37ee6ab9784d2169ace62226ce1ec32a924c20412c775a99edc227f0677daa42be644aabaf6a793d733cee043b2ce38edc4d927808bfee7bba616d429a19a32938e766f18af164e0e7356fa8cfc182e76d8055b3555d4f9a363860b44b012b317ebcd912de5b3d96e461a0438c9d347ba6e4d0725d46153839d5518a688e48d8031b665f3afbf983d37ef0b33d6a1bea3b52f5a4581f6ec1c8930ab4870eb3c76834e8debb620ea8825b027b132ff5d1bb20aeb3805bb5bae79377782e90ee2fc38bbc710a210c36e3a7d505250f0d237d3e7d131530434254280e4baeb6e092bd5ed346f87b984ef2097efe160c9d356dbeadc8f6398a29e60d39ef899cc4ade07273647b313a3d0ae88ebf46ab0a00fb0f4a201e59f7c57836389ace6f7c9c06a2a17c8c63b145c59393d1bf3b6bda73429204ed63c955e1ed98ac04fb93dbe1a1c65d8a8ec44734454d6581844411f428a7d921ca7e7b291c3ddb867e4a499a5806a06b18656b161180c0cccd3c2dad92b4a4f5307b0dd44631c5335ec056a91cff8a8984fa2370a7eff7b256114248fab45e71d58ace83889f64eec6629d757c46ee1fc1ffc456b56c6b232c5e4683c995516d8754ddf0757bb6ede557d8d9b947a9585667ea7e96b5390447b5c5a62c2b6d9032416358469f84eb42e2b7523a38be7a34eaf08d06d7f04b769df822fe464b73c29b5a7669a9178aefdd4c5a4deaa7f12a930ec114321fbb5352089e8b311dfc28e187d487e9706d14bf124188b1356d9e67d28c3fa6a7baef27a30845fde4ba5dd35b04c5e251214c5584ce6b617aa4cc94cdc6f076b15aaed8cb92451ac4404b91205196646a3800f28c005ed2101653241b514b330bfa49a8dc95ba992317c5b2433d4e11f84e671fea91f83e540f7e6dee3ab24a7cf216ddac943b85083a77f0a494edfa7a01658f4a29bffc3f5fe6b671f3f3316f2671bdc02ddb2f9c3b5f6c360cc769b77c4e6ddcf36cec63ac9b1e393f90c8f8541260febdba2b94ef6d9e91cfc0112dc75d2fb8d10c8b665989c614e25909cceef72d1e1a57ee90cdd8f6b38397cb6f0eff4e063d0bdd01bd726b2da588d4bc3770c1987cf9016af3b6e58a92489c60b0998325844b0c4b3f085fd52fa99d1e7f6a382c50ceabc675b0d0cc0a8a7b455e9b71e4f1db8cf660529cd56483b3f85dbe81b3436c3467a43ef68adb00dff05e2f5cc93e05a995f58a78ac18d045ab154211ed8b4a7ef07a0e28ac5199e5f16b66d5bf7f37372596d91b87d6d11fc133aa41832d33fd2bb7d8c45fdbd35e5f6885f2bf4e6a991f96fecf34e9d2437c0e55877372c1892df9ce51df8e31deb7ed60bb5828247b9aa4a0ca82479d882684b87c1b6fa801e1a41798e28f6165fc4724690a1bbd34b529e9910f49afc7d373d89f78a3955afd3be44859ad81bdf8934194a29a5135fe52bdad4d68fff2ee8b6d45c1cfc26d3a8902505b93214fb2a19f599b51b4a259c15b916421478190b8665f3941bfa89c7d806bb81bcf2e785162219a66997d160b50a16dc2e28ab6cbfc93a4d3482700b90bad133f1dab4ee83b0adc012e042592473dc79f1d208b53b027eb446f2395bee7024d33f240b2cfc46463764c8fec8ee1e0a4dbf83190e08319ddf57d2be1836a24204dc922411d892f0fee9eaea1e85ca68b504294b8fe414184f4692ed95b282f10cb4e3c7b8cf0e197c254e1af712dd9b32ac13dc901863d4112b147935056e407c05995c69d94930e03ae0c11501205d3a4c9de581314c10d45a0b56f3d2a8e25ed4429d948f312b9289fc4bad3f2563c4cdef0e46a5111c28db9ed715dbee3ba14c2b77f3ce93a492ebc3609d5974b8fec6c1993c5128e07458d5991c75ffd6134426548fdd81f3035cd16021643955e01159c0d7f8e703bf2453a3afef21424f59e4189b609f2c0b0a049d4731439529c03d9d2bfa9c387d5129907dc77d1d0003b8dd124e6d5bc2640aa529e1ebc31e6c100c02d07f0b5221202f59d6fadfb2f474d903c52781bb982639c44103f98a3f1b1800faf4c726c12f652e0eed7819c3032e2d84b0a8f9aae0f2463d3d437e110f941cd9eee6ce241456bada9ca2b4d00c2a93fd735bc8849e6ee6c6beecad8e02ac960df27c04200c9b3ea2471d1a6f32946de05d41f67deb04c6dfc5f77f830b0282ec066958ab1bdce7925c1d46e1b96de5525a939e70954921218313b479cf93c27a8f499f1309dea216e89caf1425860b83e2c99b48a32738b586f4700fc15e9118d40c2c590ca51e66ead42efcf1e2f5f14311a9d28438cf89c4f7d24f87cdce70bdbc2931dead2e6d37fdc83dbb68b621945154c876c6a637ddbf32781cc36477410176bceed27e309d6d7f1153962225e92575eaf380e563edd70ddaa0e198ccff74b53d0832ca7e1237ea65f3099bb0a7b5da07048889a2ea6769ebcbb9692f0264eeebe33be0b6621083a31c3b916220254a9623dd44d9e4ea6237ea1a33c49b53b39a43b6a58908c2c840b2138529fdf166ee0b2b21090bfc2244bbc17882f8ad87896b80b749d0d1ac624bc3d29105838ea6c513eec42d8fca5abe498549266bbfb3eaca4f8f6200194dd6386d0cab70847fd41fdfc37322e94dfaa7b85793b623a79e96fae097e5c8b2ac56edc344679528a4b9e444c9aea21d0b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000110f80)={{0x0, 0x7ff, 0xae4a, 0x5, 0x1, 0x0, 0x2191, 0x80000000, 0x3, 0xb92, 0x0, 0x2, 0x2, 0x7f, 0x80}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000111040)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "9ccbf79067b8f2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000112040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000112240)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r8}, {0x0, r9}, {r10, r11}, {r12, r13}, {r14, r15}, {r16, r17}, {r18, r21}, {r22, r23}, {r24}, {r25, r26}], 0x4, "92dd23ccfadc39"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv6_newroute={0x1068, 0x18, 0x300, 0x70bd25, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x2, 0x0, 0x1, 0xff, 0x8, 0x1800}, [@RTA_UID={0x8, 0x19, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r27}, @RTA_PREF={0x5, 0x14, 0x8f}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x6, 0x2, '*\x00'}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_IIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1068}, 0x1, 0x0, 0x0, 0x810}, 0x4000801) 1.12851169s ago: executing program 1 (id=1343): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x50012, r4, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.127745321s ago: executing program 2 (id=1344): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.126857817s ago: executing program 3 (id=1345): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1.125911069s ago: executing program 4 (id=1346): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xf, 0x0, &(0x7f0000000840)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000300)='.\x00', 0x2) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0xc8, 0x3f, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1}, [@generic="8a9686101fa959ddd5fc9f8d12a1e8bdd4cbac57c41206dfade9f929878bf87cddd5ff38322671167d1b047ba22874988f7d8b448e84748ebef5a31f2828a0e9846a0c679d38905eeeed3e961260946b24f8b44bf78f654c67ae519c5e0b9188f6955222f6285c0b6c8690f5a8965a263d310762cd06b29d643fceecc63319718e6fc83ed70e926235709da37c5a73f016deac0f42c77e2998f207e29dab5ac0ec296b3c29c32a4b1d3406cf7bcf302325615b"]}, 0xc8}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r6, @ANYRES16=r9, @ANYBLOB="01002bbd7000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e330000000500200081", @ANYRES64=0x0, @ANYRESOCT=r5, @ANYRESDEC=r7], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 970.228915ms ago: executing program 3 (id=1347): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000e00b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x311, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 897.700365ms ago: executing program 0 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000100)=0x41) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c000180"], 0x20dc}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 894.752889ms ago: executing program 1 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2f, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x5}}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1], 0x528}}, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bind$llc(r3, &(0x7f0000000080)={0x1a, 0x322, 0x65, 0x7, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 857.933473ms ago: executing program 2 (id=1350): unshare(0x6a040000) r0 = epoll_create1(0x80000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x100010, r0, 0x87c0d000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x5, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @datasec={0xe81, 0x3, 0x0, 0xf, 0x1, [{0x4, 0x6, 0x9}, {0x3, 0x7, 0x80}, {0x1, 0x4}], "ed"}, @fwd={0x6}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @union={0x10, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x2, 0xe3}, {0xa, 0x3, 0x5}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4d, 0x7}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000800)=""/206, 0xb9, 0xce, 0x0, 0x10001, 0x10000, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000002c00010000000000000000000400008045001180"], 0x5c}], 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_mptcp(0x2, 0x1, 0x106) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x800, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 816.864814ms ago: executing program 4 (id=1351): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @initdev}, &(0x7f0000000400)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x259, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close(r3) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r10, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r5, 0x80a0}, {r2, 0x80}, {r7, 0x2180}, {r3, 0x2}, {r6, 0x2390}, {r5, 0x9008}, {r2, 0x2610}, {r2, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 761.814056ms ago: executing program 1 (id=1352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r1, 0x8) accept4$inet(r1, &(0x7f0000000100), 0x0, 0x80800) 565.236865ms ago: executing program 1 (id=1353): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000400000000000e1362037a4107998b4dfb0034a7a43d03ad72df7a93e3e14558b2a2c263dd92f3ebb4bece3ca2d027cbe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r5, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0xd568b000) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x154, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x140, 0x1, [@m_mirred={0x13c, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0xcd, 0xa, "7cc731406b7a322fc95a132bd1617fc66e1101371ad39ee2c00998aa8c2a5f7bd1f2be1b777a74af938da340ea59aa6e594330453d3fea4699f40acab29f0da72eff30ea08b34e0ba88cf870183b1f3f70f6030cd169f4d7e6c89bfa72ae137a523daf8e672260ed39f0f15a0e04081b104abc9ede81fc1a77d1a1c0f04907c2a6967082904026cfc37401c97b4b637b30eb24c1c61d86a852a621a1dfb78fbf60d01bf4b7b47b72af34c1aef7b55b1833b22de7769fc1ac4ebe3abac6145f9079d000186184506fa5"}, {0xc}, {0xc}}}]}]}, 0x154}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x46, 0x2, 0x9}]}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r10, 0x0) 0s ago: executing program 3 (id=1354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xf, 0x0, &(0x7f0000000840)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000300)='.\x00', 0x2) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0xc8, 0x3f, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1}, [@generic="8a9686101fa959ddd5fc9f8d12a1e8bdd4cbac57c41206dfade9f929878bf87cddd5ff38322671167d1b047ba22874988f7d8b448e84748ebef5a31f2828a0e9846a0c679d38905eeeed3e961260946b24f8b44bf78f654c67ae519c5e0b9188f6955222f6285c0b6c8690f5a8965a263d310762cd06b29d643fceecc63319718e6fc83ed70e926235709da37c5a73f016deac0f42c77e2998f207e29dab5ac0ec296b3c29c32a4b1d3406cf7bcf302325615b"]}, 0xc8}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r6, @ANYRES16=r9, @ANYBLOB="01002bbd7000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e330000000500200081", @ANYRES64=0x0, @ANYRESOCT=r5, @ANYRESDEC=r7], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) kernel console output (not intermixed with test programs): 3f) already exists on: batadv_slave_1 [ 74.019469][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.029507][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.040092][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.051202][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.061972][ T5848] veth1_macvtap: entered promiscuous mode [ 74.079059][ T5843] veth0_vlan: entered promiscuous mode [ 74.101750][ T1892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.109715][ T1892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.134066][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.143083][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.154123][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.163150][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.203503][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.214262][ T1892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.215582][ T5843] veth1_vlan: entered promiscuous mode [ 74.232651][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.234687][ T1892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.269329][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.285943][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.296149][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.311000][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.321365][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.332245][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.344642][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.357087][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.367662][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.377948][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.388566][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.399011][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.409554][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.421647][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.464888][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.473823][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.483034][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.492956][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.573120][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.574238][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.596840][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.648933][ T5843] veth0_macvtap: entered promiscuous mode [ 74.656993][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.683173][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.747800][ T5843] veth1_macvtap: entered promiscuous mode [ 74.812197][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.829024][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.892187][ T5844] Bluetooth: hci0: command tx timeout [ 74.897683][ T5844] Bluetooth: hci4: command tx timeout [ 74.906360][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.937041][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.948839][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.960915][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.971451][ T5856] Bluetooth: hci3: command tx timeout [ 74.976955][ T5844] Bluetooth: hci1: command tx timeout [ 74.982678][ T5856] Bluetooth: hci2: command tx timeout [ 74.989192][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.999841][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.009773][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.022367][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.035610][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.048617][ T5933] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.126091][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.144643][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.199343][ T5928] Zero length message leads to an empty skb [ 75.219291][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.253071][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.278094][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.308100][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.318176][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.329653][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.339598][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.350515][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.363800][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.407858][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.428699][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.464114][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.480844][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.529023][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.547501][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.637972][ T5940] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.711063][ T5940] netlink: 'syz.3.6': attribute type 21 has an invalid length. [ 75.750953][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.758831][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.814569][ T5940] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6'. [ 75.844691][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 75.967594][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.979676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.098581][ T5947] Cannot find map_set index 0 as target [ 76.218929][ T5947] xt_CT: No such helper "snmp" [ 76.263214][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.339075][ T5956] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 76.454395][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.553931][ T5958] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 76.581829][ T5958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.848074][ T5964] : entered promiscuous mode [ 76.940786][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.978319][ T5844] Bluetooth: hci4: command tx timeout [ 76.984012][ T5856] Bluetooth: hci0: command tx timeout [ 77.047734][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 77.051877][ T5844] Bluetooth: hci1: command tx timeout [ 77.062184][ T5844] Bluetooth: hci2: command tx timeout [ 77.068949][ T5844] Bluetooth: hci3: command tx timeout [ 77.191627][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 77.225971][ T5978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13'. [ 77.246892][ T5982] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 77.268912][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 77.283666][ T5926] syz.0.1 (5926) used greatest stack depth: 17840 bytes left [ 77.300342][ T5978] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 77.383195][ T5978] gretap1: entered promiscuous mode [ 77.418664][ T5967] IPVS: Error connecting to the multicast addr [ 77.442299][ T5978] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 77.670427][ T5984] bond0: (slave bond_slave_0): Releasing backup interface [ 77.768457][ T5978] macvlan0: entered allmulticast mode [ 77.806836][ T5978] veth1_vlan: entered allmulticast mode [ 77.892798][ T5978] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 78.264460][ T6003] netlink: 'syz.3.18': attribute type 21 has an invalid length. [ 78.369561][ T5996] syzkaller1: entered promiscuous mode [ 78.377859][ T5996] syzkaller1: entered allmulticast mode [ 78.782316][ T6014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.058948][ T6014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.277406][ T6014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.432005][ T6014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.732445][ T6014] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.793330][ T6014] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.843468][ T6014] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.926358][ T6033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.015890][ T6014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.363397][ T6052] __nla_validate_parse: 7 callbacks suppressed [ 80.363419][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 80.373442][ T6033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.457766][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 80.605910][ T6053] : entered promiscuous mode [ 80.664582][ T6049] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 80.684712][ T6033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.700917][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 80.724416][ T6039] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 80.753510][ T6053] IPVS: Error connecting to the multicast addr [ 80.878210][ T6033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.209787][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.424485][ T6072] netlink: 176 bytes leftover after parsing attributes in process `syz.3.31'. [ 81.711336][ T6076] Bluetooth: MGMT ver 1.23 [ 81.938099][ T6083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.37'. [ 82.072722][ T6087] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 82.155370][ T6089] syzkaller1: entered promiscuous mode [ 82.165027][ T6089] syzkaller1: entered allmulticast mode [ 82.214628][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.624861][ T6108] netlink: 37 bytes leftover after parsing attributes in process `syz.3.43'. [ 82.691923][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33'. [ 83.110301][ T6120] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 83.162191][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 83.295133][ T6129] netlink: 188 bytes leftover after parsing attributes in process `syz.4.49'. [ 83.310644][ T6129] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 83.311313][ T6131] Bluetooth: MGMT ver 1.23 [ 83.713588][ T6139] syzkaller1: entered promiscuous mode [ 83.752133][ T6139] syzkaller1: entered allmulticast mode [ 83.796770][ T6144] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 84.043425][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 84.768957][ T6173] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 84.821445][ T6173] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.830084][ T6173] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.067143][ T6033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.228961][ T6033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.289169][ T6033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.357720][ T6033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218119][ T6218] __nla_validate_parse: 3 callbacks suppressed [ 86.218142][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'. [ 86.295240][ T6218] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 86.333257][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.413334][ C0] Illegal XDP return value 16128 on prog (id 35) dev bond_slave_1, expect packet loss! [ 86.865610][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 86.994867][ T6250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.062469][ T1597] cfg80211: failed to load regulatory.db [ 87.261754][ T6250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.402216][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 87.564573][ T6250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.583577][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'. [ 87.646508][ T6250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.669915][ T6278] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 87.986917][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 88.168111][ T6250] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.258913][ T6250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.325377][ T6250] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.493073][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 88.522508][ T6250] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.562100][ T6313] netlink: 'syz.1.107': attribute type 10 has an invalid length. [ 88.575977][ T6313] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.789705][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.109'. [ 88.998974][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 89.016620][ T6340] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 89.077283][ T6337] bridge_slave_0: left allmulticast mode [ 89.083511][ T6337] bridge_slave_0: left promiscuous mode [ 89.090560][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.158314][ T6337] bridge_slave_1: left allmulticast mode [ 89.177917][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 89.181358][ T6337] bridge_slave_1: left promiscuous mode [ 89.198942][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.229887][ T6337] bond0: (slave bond_slave_0): Releasing backup interface [ 89.259395][ T6337] bond0: (slave bond_slave_1): Releasing backup interface [ 89.297632][ T6337] team0: Failed to send options change via netlink (err -105) [ 89.306312][ T6337] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 89.318916][ T6337] team0: Port device team_slave_0 removed [ 89.341424][ T6337] team0: Failed to send options change via netlink (err -105) [ 89.349222][ T6337] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 89.365001][ T6337] team0: Port device team_slave_1 removed [ 89.372373][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.379800][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.392193][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.399610][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.425684][ T6340] team0: Device dummy0 is up. Set it down before adding it as a team port [ 89.466115][ T6343] team0: Failed to send options change via netlink (err -105) [ 89.496177][ T6343] team0: Mode changed to "loadbalance" [ 89.727488][ T6367] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.858982][ T6371] netlink: 176 bytes leftover after parsing attributes in process `syz.0.124'. [ 89.877619][ T6373] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 89.918913][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.345361][ T6397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 90.953849][ T6431] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 90.997568][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.035722][ T6430] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.050355][ T6430] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 91.280061][ T6450] __nla_validate_parse: 6 callbacks suppressed [ 91.280082][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 91.287921][ T6452] FAULT_INJECTION: forcing a failure. [ 91.287921][ T6452] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.320737][ T6450] bridge_slave_1: left allmulticast mode [ 91.331025][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.150'. [ 91.336356][ T6450] bridge_slave_1: left promiscuous mode [ 91.353325][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.353875][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.0.149 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 91.353899][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.353909][ T6452] Call Trace: [ 91.353916][ T6452] [ 91.353923][ T6452] dump_stack_lvl+0x241/0x360 [ 91.353952][ T6452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.353970][ T6452] ? __pfx__printk+0x10/0x10 [ 91.353989][ T6452] ? __pfx_lock_release+0x10/0x10 [ 91.354020][ T6452] should_fail_ex+0x40a/0x550 [ 91.354048][ T6452] _copy_from_user+0x2d/0xb0 [ 91.354070][ T6452] copy_msghdr_from_user+0xae/0x680 [ 91.354099][ T6452] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.354117][ T6452] ? __fget_files+0x2a/0x410 [ 91.354143][ T6452] ? __fget_files+0x2a/0x410 [ 91.354172][ T6452] __sys_sendmsg+0x209/0x350 [ 91.354194][ T6452] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.354223][ T6452] ? do_sys_openat2+0x17a/0x1d0 [ 91.354269][ T6452] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.354293][ T6452] ? do_syscall_64+0x100/0x230 [ 91.354315][ T6452] ? do_syscall_64+0xb6/0x230 [ 91.354336][ T6452] do_syscall_64+0xf3/0x230 [ 91.354354][ T6452] ? clear_bhb_loop+0x35/0x90 [ 91.354379][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.354399][ T6452] RIP: 0033:0x7f9e0ab8d169 [ 91.354414][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.354427][ T6452] RSP: 002b:00007f9e0ba22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.354447][ T6452] RAX: ffffffffffffffda RBX: 00007f9e0ada5fa0 RCX: 00007f9e0ab8d169 [ 91.354459][ T6452] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000008 [ 91.354470][ T6452] RBP: 00007f9e0ba22090 R08: 0000000000000000 R09: 0000000000000000 [ 91.354480][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.354489][ T6452] R13: 0000000000000000 R14: 00007f9e0ada5fa0 R15: 00007ffed2a4e608 [ 91.354514][ T6452] [ 91.491344][ T6464] netlink: 176 bytes leftover after parsing attributes in process `syz.3.152'. [ 91.621510][ T6450] bridge_slave_0: left allmulticast mode [ 91.627227][ T6450] bridge_slave_0: left promiscuous mode [ 91.663276][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.761438][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 92.006646][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 92.032405][ T6479] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 92.076856][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.296036][ T6500] netlink: 176 bytes leftover after parsing attributes in process `syz.3.164'. [ 92.308136][ T6504] FAULT_INJECTION: forcing a failure. [ 92.308136][ T6504] name failslab, interval 1, probability 0, space 0, times 1 [ 92.338251][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: syz.0.165 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 92.338283][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.338293][ T6504] Call Trace: [ 92.338300][ T6504] [ 92.338308][ T6504] dump_stack_lvl+0x241/0x360 [ 92.338337][ T6504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.338356][ T6504] ? __pfx__printk+0x10/0x10 [ 92.338377][ T6504] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 92.338404][ T6504] ? __pfx___might_resched+0x10/0x10 [ 92.338431][ T6504] should_fail_ex+0x40a/0x550 [ 92.338461][ T6504] should_failslab+0xac/0x100 [ 92.338487][ T6504] kmem_cache_alloc_node_noprof+0x77/0x380 [ 92.338511][ T6504] ? __alloc_skb+0x1c3/0x440 [ 92.338531][ T6504] __alloc_skb+0x1c3/0x440 [ 92.338552][ T6504] ? __pfx___alloc_skb+0x10/0x10 [ 92.338570][ T6504] ? netlink_autobind+0xd6/0x2f0 [ 92.338593][ T6504] ? netlink_autobind+0x2b0/0x2f0 [ 92.338621][ T6504] netlink_sendmsg+0x634/0xcb0 [ 92.338656][ T6504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.338683][ T6504] ? aa_sock_msg_perm+0x91/0x160 [ 92.338714][ T6504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.338746][ T6504] __sock_sendmsg+0x221/0x270 [ 92.338781][ T6504] ____sys_sendmsg+0x53a/0x860 [ 92.338810][ T6504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.338827][ T6504] ? __fget_files+0x2a/0x410 [ 92.338855][ T6504] ? __fget_files+0x2a/0x410 [ 92.338889][ T6504] __sys_sendmsg+0x269/0x350 [ 92.338914][ T6504] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.338947][ T6504] ? do_sys_openat2+0x17a/0x1d0 [ 92.338998][ T6504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.339026][ T6504] ? do_syscall_64+0x100/0x230 [ 92.339050][ T6504] ? do_syscall_64+0xb6/0x230 [ 92.339073][ T6504] do_syscall_64+0xf3/0x230 [ 92.339092][ T6504] ? clear_bhb_loop+0x35/0x90 [ 92.339118][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.339140][ T6504] RIP: 0033:0x7f9e0ab8d169 [ 92.339156][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.339171][ T6504] RSP: 002b:00007f9e0ba22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.339190][ T6504] RAX: ffffffffffffffda RBX: 00007f9e0ada5fa0 RCX: 00007f9e0ab8d169 [ 92.339203][ T6504] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000008 [ 92.339214][ T6504] RBP: 00007f9e0ba22090 R08: 0000000000000000 R09: 0000000000000000 [ 92.339225][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.339235][ T6504] R13: 0000000000000000 R14: 00007f9e0ada5fa0 R15: 00007ffed2a4e608 [ 92.339262][ T6504] [ 92.879375][ T6523] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.914002][ T6533] netlink: 'syz.1.172': attribute type 12 has an invalid length. [ 92.960838][ T6523] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.980976][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 93.075731][ T6523] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.140396][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 93.217246][ T6523] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.295448][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 93.314064][ T6539] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 93.325064][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.418890][ T6523] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.455959][ T6523] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527203][ T6523] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.595420][ T6523] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.768160][ T6543] syzkaller1: entered promiscuous mode [ 93.825703][ T6543] syzkaller1: entered allmulticast mode [ 94.142138][ T6552] FAULT_INJECTION: forcing a failure. [ 94.142138][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.159758][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.1.180 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 94.159788][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.159799][ T6552] Call Trace: [ 94.159806][ T6552] [ 94.159815][ T6552] dump_stack_lvl+0x241/0x360 [ 94.159845][ T6552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.159866][ T6552] ? __pfx__printk+0x10/0x10 [ 94.159886][ T6552] ? __pfx_lock_release+0x10/0x10 [ 94.159923][ T6552] should_fail_ex+0x40a/0x550 [ 94.159954][ T6552] _copy_from_iter+0x1df/0x1c40 [ 94.159975][ T6552] ? __virt_addr_valid+0x183/0x530 [ 94.159995][ T6552] ? __pfx_lock_release+0x10/0x10 [ 94.160029][ T6552] ? __alloc_skb+0x28f/0x440 [ 94.160046][ T6552] ? __pfx__copy_from_iter+0x10/0x10 [ 94.160069][ T6552] ? __virt_addr_valid+0x183/0x530 [ 94.160086][ T6552] ? __virt_addr_valid+0x183/0x530 [ 94.160102][ T6552] ? __virt_addr_valid+0x45f/0x530 [ 94.160120][ T6552] ? __phys_addr_symbol+0x2f/0x70 [ 94.160137][ T6552] ? __check_object_size+0x47a/0x730 [ 94.160166][ T6552] pfkey_sendmsg+0x235/0x1070 [ 94.160193][ T6552] ? __pfx___might_resched+0x10/0x10 [ 94.160224][ T6552] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 94.160251][ T6552] ? aa_sk_perm+0x96d/0xab0 [ 94.160285][ T6552] ? __pfx_aa_sk_perm+0x10/0x10 [ 94.160310][ T6552] ? __import_iovec+0x582/0x830 [ 94.160334][ T6552] ? aa_sock_msg_perm+0x91/0x160 [ 94.160365][ T6552] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 94.160382][ T6552] __sock_sendmsg+0x221/0x270 [ 94.160410][ T6552] ____sys_sendmsg+0x53a/0x860 [ 94.160440][ T6552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.160457][ T6552] ? __fget_files+0x2a/0x410 [ 94.160486][ T6552] ? __fget_files+0x2a/0x410 [ 94.160521][ T6552] __sys_sendmsg+0x269/0x350 [ 94.160547][ T6552] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.160593][ T6552] ? do_sys_openat2+0x17a/0x1d0 [ 94.160644][ T6552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.160673][ T6552] ? do_syscall_64+0x100/0x230 [ 94.160698][ T6552] ? do_syscall_64+0xb6/0x230 [ 94.160723][ T6552] do_syscall_64+0xf3/0x230 [ 94.160743][ T6552] ? clear_bhb_loop+0x35/0x90 [ 94.160771][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.160794][ T6552] RIP: 0033:0x7f7ca9b8d169 [ 94.160812][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.160826][ T6552] RSP: 002b:00007f7caaaa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.160847][ T6552] RAX: ffffffffffffffda RBX: 00007f7ca9da5fa0 RCX: 00007f7ca9b8d169 [ 94.160860][ T6552] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 94.160871][ T6552] RBP: 00007f7caaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 94.160882][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.160892][ T6552] R13: 0000000000000000 R14: 00007f7ca9da5fa0 R15: 00007ffda109e6b8 [ 94.160920][ T6552] [ 94.700177][ T6566] netlink: 'syz.1.185': attribute type 10 has an invalid length. [ 94.714107][ T6566] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 94.812929][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 94.874898][ T6568] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 94.885570][ T6568] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.890038][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 94.921746][ T6575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.050904][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 95.103905][ T6576] syzkaller0: entered promiscuous mode [ 95.142513][ T6576] syzkaller0: entered allmulticast mode [ 95.284310][ T6590] netlink: 'syz.2.193': attribute type 39 has an invalid length. [ 97.226693][ T6598] FAULT_INJECTION: forcing a failure. [ 97.226693][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 97.247070][ T6598] CPU: 1 UID: 0 PID: 6598 Comm: syz.3.194 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 97.247101][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.247112][ T6598] Call Trace: [ 97.247119][ T6598] [ 97.247128][ T6598] dump_stack_lvl+0x241/0x360 [ 97.247157][ T6598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.247176][ T6598] ? __pfx__printk+0x10/0x10 [ 97.247197][ T6598] ? kmem_cache_alloc_noprof+0x48/0x380 [ 97.247220][ T6598] ? __pfx___might_resched+0x10/0x10 [ 97.247249][ T6598] should_fail_ex+0x40a/0x550 [ 97.247279][ T6598] should_failslab+0xac/0x100 [ 97.247303][ T6598] ? skb_clone+0x20c/0x390 [ 97.247321][ T6598] kmem_cache_alloc_noprof+0x70/0x380 [ 97.247343][ T6598] ? __virt_addr_valid+0x45f/0x530 [ 97.247364][ T6598] skb_clone+0x20c/0x390 [ 97.247388][ T6598] pfkey_sendmsg+0x454/0x1070 [ 97.247423][ T6598] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 97.247461][ T6598] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.247484][ T6598] ? __import_iovec+0x582/0x830 [ 97.247508][ T6598] ? aa_sock_msg_perm+0x91/0x160 [ 97.247538][ T6598] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 97.247554][ T6598] __sock_sendmsg+0x221/0x270 [ 97.247580][ T6598] ____sys_sendmsg+0x53a/0x860 [ 97.247608][ T6598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.247624][ T6598] ? __fget_files+0x2a/0x410 [ 97.247651][ T6598] ? __fget_files+0x2a/0x410 [ 97.247684][ T6598] __sys_sendmsg+0x269/0x350 [ 97.247708][ T6598] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.247740][ T6598] ? do_sys_openat2+0x17a/0x1d0 [ 97.247800][ T6598] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.247828][ T6598] ? do_syscall_64+0x100/0x230 [ 97.247852][ T6598] ? do_syscall_64+0xb6/0x230 [ 97.247876][ T6598] do_syscall_64+0xf3/0x230 [ 97.247896][ T6598] ? clear_bhb_loop+0x35/0x90 [ 97.247923][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.247945][ T6598] RIP: 0033:0x7f407738d169 [ 97.247962][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.247977][ T6598] RSP: 002b:00007f40781e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.247997][ T6598] RAX: ffffffffffffffda RBX: 00007f40775a5fa0 RCX: 00007f407738d169 [ 97.248010][ T6598] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 97.248021][ T6598] RBP: 00007f40781e9090 R08: 0000000000000000 R09: 0000000000000000 [ 97.248032][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.248043][ T6598] R13: 0000000000000000 R14: 00007f40775a5fa0 R15: 00007fff9c5c30d8 [ 97.248072][ T6598] [ 97.719036][ T6602] __nla_validate_parse: 1 callbacks suppressed [ 97.719053][ T6602] netlink: 176 bytes leftover after parsing attributes in process `syz.3.195'. [ 97.938413][ T6604] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 98.101411][ T6607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.106897][ T6608] x_tables: duplicate underflow at hook 3 [ 98.117524][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 98.188486][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 98.230079][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 98.374875][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.202'. [ 98.379847][ T6627] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 99.861266][ T6635] FAULT_INJECTION: forcing a failure. [ 99.861266][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 99.875256][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.3.205 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 99.875284][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.875295][ T6635] Call Trace: [ 99.875302][ T6635] [ 99.875310][ T6635] dump_stack_lvl+0x241/0x360 [ 99.875340][ T6635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.875361][ T6635] ? __pfx__printk+0x10/0x10 [ 99.875382][ T6635] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 99.875409][ T6635] ? __pfx___might_resched+0x10/0x10 [ 99.875438][ T6635] should_fail_ex+0x40a/0x550 [ 99.875471][ T6635] should_failslab+0xac/0x100 [ 99.875497][ T6635] kmem_cache_alloc_node_noprof+0x77/0x380 [ 99.875521][ T6635] ? __alloc_skb+0x1c3/0x440 [ 99.875556][ T6635] __alloc_skb+0x1c3/0x440 [ 99.875572][ T6635] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.875601][ T6635] ? __pfx___alloc_skb+0x10/0x10 [ 99.875619][ T6635] ? net_generic+0x1c0/0x240 [ 99.875654][ T6635] pfkey_sendmsg+0xcfb/0x1070 [ 99.875690][ T6635] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 99.875737][ T6635] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.875763][ T6635] ? __import_iovec+0x582/0x830 [ 99.875789][ T6635] ? aa_sock_msg_perm+0x91/0x160 [ 99.875821][ T6635] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 99.875838][ T6635] __sock_sendmsg+0x221/0x270 [ 99.875867][ T6635] ____sys_sendmsg+0x53a/0x860 [ 99.875897][ T6635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.875915][ T6635] ? __fget_files+0x2a/0x410 [ 99.875945][ T6635] ? __fget_files+0x2a/0x410 [ 99.875980][ T6635] __sys_sendmsg+0x269/0x350 [ 99.876006][ T6635] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.876040][ T6635] ? do_sys_openat2+0x17a/0x1d0 [ 99.876094][ T6635] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.876123][ T6635] ? do_syscall_64+0x100/0x230 [ 99.876149][ T6635] ? do_syscall_64+0xb6/0x230 [ 99.876174][ T6635] do_syscall_64+0xf3/0x230 [ 99.876195][ T6635] ? clear_bhb_loop+0x35/0x90 [ 99.876224][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.876254][ T6635] RIP: 0033:0x7f407738d169 [ 99.876271][ T6635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.876286][ T6635] RSP: 002b:00007f40781e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.876307][ T6635] RAX: ffffffffffffffda RBX: 00007f40775a5fa0 RCX: 00007f407738d169 [ 99.876320][ T6635] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 99.876332][ T6635] RBP: 00007f40781e9090 R08: 0000000000000000 R09: 0000000000000000 [ 99.876351][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.876361][ T6635] R13: 0000000000000000 R14: 00007f40775a5fa0 R15: 00007fff9c5c30d8 [ 99.876406][ T6635] [ 100.336695][ T6641] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 100.391532][ T6641] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.404093][ T6646] netlink: 176 bytes leftover after parsing attributes in process `syz.3.207'. [ 100.441150][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 100.473345][ T6644] bond0: (slave macvlan2): Opening slave failed [ 100.511346][ T6653] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 100.557133][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.588550][ T6653] bond0: (slave team0): Enslaving as an active interface with an up link [ 100.914225][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 100.943956][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 100.991592][ T6675] netlink: 'syz.3.215': attribute type 10 has an invalid length. [ 101.042984][ T6682] FAULT_INJECTION: forcing a failure. [ 101.042984][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 101.088967][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.1.217 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 101.088998][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.089009][ T6682] Call Trace: [ 101.089015][ T6682] [ 101.089023][ T6682] dump_stack_lvl+0x241/0x360 [ 101.089052][ T6682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.089071][ T6682] ? __pfx__printk+0x10/0x10 [ 101.089092][ T6682] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 101.089119][ T6682] ? __pfx___might_resched+0x10/0x10 [ 101.089147][ T6682] should_fail_ex+0x40a/0x550 [ 101.089178][ T6682] should_failslab+0xac/0x100 [ 101.089203][ T6682] kmem_cache_alloc_node_noprof+0x77/0x380 [ 101.089227][ T6682] ? __alloc_skb+0x1c3/0x440 [ 101.089248][ T6682] __alloc_skb+0x1c3/0x440 [ 101.089264][ T6682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.089290][ T6682] ? __pfx___alloc_skb+0x10/0x10 [ 101.089307][ T6682] ? net_generic+0x1c0/0x240 [ 101.089331][ T6682] pfkey_sendmsg+0xcfb/0x1070 [ 101.089364][ T6682] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 101.089400][ T6682] ? __pfx_aa_sk_perm+0x10/0x10 [ 101.089424][ T6682] ? __import_iovec+0x582/0x830 [ 101.089448][ T6682] ? aa_sock_msg_perm+0x91/0x160 [ 101.089479][ T6682] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 101.089496][ T6682] __sock_sendmsg+0x221/0x270 [ 101.089523][ T6682] ____sys_sendmsg+0x53a/0x860 [ 101.089550][ T6682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.089567][ T6682] ? __fget_files+0x2a/0x410 [ 101.089595][ T6682] ? __fget_files+0x2a/0x410 [ 101.089628][ T6682] __sys_sendmsg+0x269/0x350 [ 101.089660][ T6682] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.089691][ T6682] ? do_sys_openat2+0x17a/0x1d0 [ 101.089742][ T6682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.089771][ T6682] ? do_syscall_64+0x100/0x230 [ 101.089795][ T6682] ? do_syscall_64+0xb6/0x230 [ 101.089819][ T6682] do_syscall_64+0xf3/0x230 [ 101.089840][ T6682] ? clear_bhb_loop+0x35/0x90 [ 101.089867][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.089890][ T6682] RIP: 0033:0x7f7ca9b8d169 [ 101.089907][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.089921][ T6682] RSP: 002b:00007f7caaaa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.089942][ T6682] RAX: ffffffffffffffda RBX: 00007f7ca9da5fa0 RCX: 00007f7ca9b8d169 [ 101.089961][ T6682] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 101.089972][ T6682] RBP: 00007f7caaaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 101.089983][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.089993][ T6682] R13: 0000000000000000 R14: 00007f7ca9da5fa0 R15: 00007ffda109e6b8 [ 101.090020][ T6682] [ 101.594427][ T6692] macsec1: entered promiscuous mode [ 101.599745][ T6692] team0: entered promiscuous mode [ 101.604895][ T6692] team_slave_0: entered promiscuous mode [ 101.611143][ T6692] team_slave_1: entered promiscuous mode [ 101.617078][ T6692] macsec1: entered allmulticast mode [ 101.622485][ T6692] team0: entered allmulticast mode [ 101.627634][ T6692] team_slave_0: entered allmulticast mode [ 101.638522][ T6692] team_slave_1: entered allmulticast mode [ 101.648278][ T6692] team0: left allmulticast mode [ 101.660705][ T6692] team_slave_0: left allmulticast mode [ 101.666234][ T6692] team_slave_1: left allmulticast mode [ 101.673695][ T6697] netlink: 176 bytes leftover after parsing attributes in process `syz.3.222'. [ 101.675734][ T6692] team0: left promiscuous mode [ 101.688840][ T6692] team_slave_0: left promiscuous mode [ 101.697506][ T6692] team_slave_1: left promiscuous mode [ 101.835065][ T6706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.210383][ T6730] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 102.266746][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.574431][ T6788] __nla_validate_parse: 4 callbacks suppressed [ 103.574452][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 103.774321][ T6793] FAULT_INJECTION: forcing a failure. [ 103.774321][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.810747][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.3.246 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 103.810779][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.810790][ T6793] Call Trace: [ 103.810796][ T6793] [ 103.810805][ T6793] dump_stack_lvl+0x241/0x360 [ 103.810835][ T6793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.810856][ T6793] ? __pfx__printk+0x10/0x10 [ 103.810883][ T6793] ? snprintf+0xda/0x120 [ 103.810914][ T6793] should_fail_ex+0x40a/0x550 [ 103.810947][ T6793] _copy_to_user+0x31/0xb0 [ 103.810975][ T6793] simple_read_from_buffer+0xca/0x150 [ 103.811005][ T6793] proc_fail_nth_read+0x1e9/0x250 [ 103.811034][ T6793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.811064][ T6793] ? rw_verify_area+0x243/0x630 [ 103.811082][ T6793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.811107][ T6793] vfs_read+0x1f8/0xb40 [ 103.811127][ T6793] ? fdget_pos+0x254/0x320 [ 103.811153][ T6793] ? __pfx___mutex_lock+0x10/0x10 [ 103.811175][ T6793] ? __pfx_vfs_read+0x10/0x10 [ 103.811191][ T6793] ? do_sys_openat2+0x17a/0x1d0 [ 103.811218][ T6793] ? __fget_files+0x2a/0x410 [ 103.811245][ T6793] ? __fget_files+0x395/0x410 [ 103.811269][ T6793] ? __fget_files+0x2a/0x410 [ 103.811305][ T6793] ksys_read+0x18f/0x2b0 [ 103.811325][ T6793] ? __pfx_ksys_read+0x10/0x10 [ 103.811346][ T6793] ? do_syscall_64+0x100/0x230 [ 103.811378][ T6793] ? do_syscall_64+0xb6/0x230 [ 103.811403][ T6793] do_syscall_64+0xf3/0x230 [ 103.811424][ T6793] ? clear_bhb_loop+0x35/0x90 [ 103.811453][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.811477][ T6793] RIP: 0033:0x7f407738bb7c [ 103.811494][ T6793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.811509][ T6793] RSP: 002b:00007f40781e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.811531][ T6793] RAX: ffffffffffffffda RBX: 00007f40775a5fa0 RCX: 00007f407738bb7c [ 103.811544][ T6793] RDX: 000000000000000f RSI: 00007f40781e90a0 RDI: 0000000000000004 [ 103.811555][ T6793] RBP: 00007f40781e9090 R08: 0000000000000000 R09: 0000000000000000 [ 103.811566][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.811578][ T6793] R13: 0000000000000000 R14: 00007f40775a5fa0 R15: 00007fff9c5c30d8 [ 103.811610][ T6793] [ 104.273496][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 104.322019][ T6795] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 104.335071][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.375718][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 104.391837][ T6799] netlink: 9 bytes leftover after parsing attributes in process `syz.0.250'. [ 104.401157][ T6799] 0: renamed from hsr_slave_1 (while UP) [ 104.416177][ T6805] netlink: 'syz.2.248': attribute type 4 has an invalid length. [ 104.436423][ T6799] 0: entered allmulticast mode [ 104.458139][ T6799] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 104.502919][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.251'. [ 104.679421][ T6811] netlink: 96 bytes leftover after parsing attributes in process `syz.4.252'. [ 104.832445][ T6817] netlink: 460 bytes leftover after parsing attributes in process `syz.0.255'. [ 105.041366][ T6827] tipc: MTU too low for tipc bearer [ 105.361300][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 105.479905][ T6848] netlink: 'syz.4.262': attribute type 10 has an invalid length. [ 105.592038][ T6844] bond0: (slave team0): Releasing backup interface [ 105.628318][ T6844] bond0: (slave bond_slave_0): Releasing backup interface [ 105.655519][ T6844] bond0: (slave bond_slave_1): Releasing backup interface [ 105.707028][ T6844] team0: Port device team_slave_0 removed [ 105.721670][ T6844] team0: Port device team_slave_1 removed [ 105.728455][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.736371][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.757225][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.765046][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.787066][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.826736][ T6847] team0: Mode changed to "loadbalance" [ 106.499463][ T6877] netlink: 96 bytes leftover after parsing attributes in process `syz.2.274'. [ 106.814631][ T6890] dccp_invalid_packet: P.Data Offset(0) too small [ 106.921665][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 106.976269][ T6896] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 107.730123][ T6913] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 107.835993][ T6921] vlan2: entered allmulticast mode [ 107.862900][ T6915] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 108.604087][ T6936] __nla_validate_parse: 6 callbacks suppressed [ 108.604111][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 108.622855][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.289'. [ 108.636678][ T6935] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 108.651973][ T6935] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.003645][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 109.162751][ T6944] netlink: 34 bytes leftover after parsing attributes in process `syz.4.293'. [ 109.191716][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 109.251498][ T6948] IPv6: addrconf: prefix option has invalid lifetime [ 109.462623][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.653967][ T6963] netlink: 'syz.4.297': attribute type 4 has an invalid length. [ 109.691258][ T6963] netlink: 17 bytes leftover after parsing attributes in process `syz.4.297'. [ 109.949956][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 109.984320][ T6971] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 110.002841][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.105444][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.305'. [ 110.138836][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 110.150874][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 111.498157][ T7039] netlink: 'syz.4.315': attribute type 10 has an invalid length. [ 111.601207][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.610070][ T7039] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.712877][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.769760][ T7024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.781202][ T7045] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 111.839717][ T7046] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 111.902248][ T7045] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.988918][ T7055] tipc: Started in network mode [ 112.025996][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 112.073662][ T7055] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 112.122996][ T7055] tipc: Enabled bearer , priority 10 [ 112.149280][ T7060] gretap1: entered promiscuous mode [ 112.585036][ T7069] syzkaller1: entered promiscuous mode [ 112.608133][ T7069] syzkaller1: entered allmulticast mode [ 112.874591][ T7078] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 113.136958][ T7076] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.146625][ T5893] tipc: Node number set to 1 [ 113.153098][ T7076] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.161747][ T7076] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.170494][ T7076] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.920518][ T7092] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 114.009709][ T7092] bond1: entered promiscuous mode [ 114.032648][ T7092] bond1: entered allmulticast mode [ 114.040145][ T7101] __nla_validate_parse: 18 callbacks suppressed [ 114.040164][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 114.045144][ T7092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.068148][ T7102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.333'. [ 114.077652][ T7102] netlink: 7 bytes leftover after parsing attributes in process `syz.0.333'. [ 114.350478][ T7113] netlink: 104 bytes leftover after parsing attributes in process `syz.0.339'. [ 114.373774][ T7115] netlink: 'syz.2.338': attribute type 30 has an invalid length. [ 114.877259][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.2.347'. [ 114.965634][ T7145] vlan2: entered promiscuous mode [ 114.979462][ T7145] bond0: entered promiscuous mode [ 115.027335][ T7145] bond0: left promiscuous mode [ 115.214793][ T7151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.350'. [ 115.424572][ T7162] netlink: 52 bytes leftover after parsing attributes in process `syz.4.353'. [ 115.545149][ T7167] bond0: (slave team0): Releasing backup interface [ 115.555926][ T7167] bridge_slave_0: left allmulticast mode [ 115.563433][ T7167] bridge_slave_0: left promiscuous mode [ 115.577072][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.613943][ T7167] bridge_slave_1: left allmulticast mode [ 115.619651][ T7167] bridge_slave_1: left promiscuous mode [ 115.626802][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.646793][ T7167] bond0: (slave bond_slave_0): Releasing backup interface [ 115.664444][ T7167] bond0: (slave bond_slave_1): Releasing backup interface [ 115.708791][ T7167] team0: Port device team_slave_0 removed [ 115.721529][ T7167] team0: Port device team_slave_1 removed [ 115.728270][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.736511][ T7172] netlink: 56 bytes leftover after parsing attributes in process `syz.0.357'. [ 115.746788][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.756177][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.764398][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.051107][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 116.309948][ T7192] netlink: 'syz.3.365': attribute type 2 has an invalid length. [ 116.418217][ T7194] netlink: 124 bytes leftover after parsing attributes in process `syz.2.366'. [ 116.692131][ T7208] batman_adv: batadv0: Adding interface: dummy0 [ 116.700207][ T7208] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.726178][ T7208] batman_adv: batadv0: Interface activated: dummy0 [ 116.751156][ T7208] batadv0: mtu less than device minimum [ 116.759597][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.772800][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.785637][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.798620][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.811557][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.824424][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.837326][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.850029][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.862903][ T7208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.244874][ T7225] batadv1: entered promiscuous mode [ 117.260643][ T7225] batadv1: entered allmulticast mode [ 117.868505][ T7234] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 118.260301][ T7260] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 118.414432][ T7271] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 118.428371][ T7262] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 118.451042][ T7262] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 118.553675][ T7274] IPVS: set_ctl: invalid protocol: 43 172.20.20.58:20002 [ 118.828692][ T7288] Bluetooth: MGMT ver 1.23 [ 118.836173][ T7288] x_tables: duplicate underflow at hook 3 [ 119.202050][ T7286] IPVS: set_ctl: invalid protocol: 1 172.20.20.47:19997 [ 120.307581][ T7342] syzkaller1: entered promiscuous mode [ 120.325917][ T7342] syzkaller1: entered allmulticast mode [ 120.349070][ T7344] __nla_validate_parse: 7 callbacks suppressed [ 120.349093][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 120.384074][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 120.535839][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'. [ 120.606534][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'. [ 120.611898][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 120.725024][ T7369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 120.748415][ T7366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 120.802221][ T7371] IPVS: Error connecting to the multicast addr [ 120.901048][ T7373] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 120.971057][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 121.215865][ T7391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.423'. [ 121.233896][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 121.256556][ T7394] netlink: 176 bytes leftover after parsing attributes in process `syz.4.425'. [ 121.674836][ T7417] syzkaller1: entered promiscuous mode [ 121.681205][ T7417] syzkaller1: entered allmulticast mode [ 122.421895][ T7429] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 123.129734][ T7462] raw_sendmsg: syz.1.443 forgot to set AF_INET. Fix it! [ 123.624471][ T7474] syzkaller1: entered promiscuous mode [ 123.659191][ T7474] syzkaller1: entered allmulticast mode [ 123.700334][ T7479] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 123.706084][ T7484] x_tables: duplicate underflow at hook 2 [ 123.709876][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.777577][ T7484] sctp: [Deprecated]: syz.2.450 (pid 7484) Use of int in max_burst socket option deprecated. [ 123.777577][ T7484] Use struct sctp_assoc_value instead [ 123.858552][ T5856] Bluetooth: hci4: link tx timeout [ 123.864820][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.905221][ T7492] xt_hashlimit: max too large, truncated to 1048576 [ 123.920440][ T7490] unsupported nlmsg_type 40 [ 124.379235][ T7511] bond0: (slave team0): Releasing backup interface [ 124.393843][ T7511] batman_adv: batadv0: Interface deactivated: dummy0 [ 124.409583][ T7511] batman_adv: batadv0: Removing interface: dummy0 [ 124.437903][ T7511] bridge_slave_0: left allmulticast mode [ 124.451356][ T7511] bridge_slave_0: left promiscuous mode [ 124.457309][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.476951][ T7511] bridge_slave_1: left promiscuous mode [ 124.488498][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.502368][ T7511] bond0: (slave bond_slave_1): Releasing backup interface [ 124.536972][ T7511] team0: Port device team_slave_0 removed [ 124.546959][ T7511] team0: Port device team_slave_1 removed [ 124.553462][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.562577][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.573639][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.584895][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.637866][ T7530] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 124.666010][ T7511] bond0: (slave macvlan0): Releasing backup interface [ 124.674439][ T7511] veth1_vlan: left allmulticast mode [ 124.719787][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.015267][ T7536] xt_CT: No such helper "snmp" [ 125.083066][ T7539] syzkaller1: entered promiscuous mode [ 125.088804][ T7539] syzkaller1: entered allmulticast mode [ 125.373918][ T7559] IPVS: length: 78 != 33536160 [ 125.516688][ T7569] netlink: 'syz.0.477': attribute type 13 has an invalid length. [ 125.517516][ T7564] __nla_validate_parse: 15 callbacks suppressed [ 125.517532][ T7564] netlink: 368 bytes leftover after parsing attributes in process `syz.1.475'. [ 125.571008][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 125.721299][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'. [ 125.755226][ T7574] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 125.786179][ T7574] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.933834][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 126.017899][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 126.396264][ T7587] tipc: Started in network mode [ 126.408848][ T7587] tipc: Node identity , cluster identity 4711 [ 126.411184][ T7576] netlink: 376 bytes leftover after parsing attributes in process `syz.3.479'. [ 126.426612][ T7587] tipc: Failed to obtain node identity [ 126.437049][ T7587] tipc: Enabling of bearer rejected, failed to enable media [ 126.467335][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 126.491064][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 126.565514][ T7589] xt_CT: No such helper "pptp" [ 126.815406][ T7614] netlink: 3 bytes leftover after parsing attributes in process `syz.4.487'. [ 126.832973][ T7613] net_ratelimit: 45 callbacks suppressed [ 126.832995][ T7613] openvswitch: netlink: Missing valid actions attribute. [ 126.860818][ T7613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.073200][ T7605] syzkaller1: entered promiscuous mode [ 127.078934][ T7605] syzkaller1: entered allmulticast mode [ 127.096135][ T7614] batadv1: entered promiscuous mode [ 127.120727][ T7614] batadv1: entered allmulticast mode [ 127.283067][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.490'. [ 127.343443][ T7629] bond1: left promiscuous mode [ 127.348434][ T7629] bond1: left allmulticast mode [ 127.365666][ T7629] netlink: 104 bytes leftover after parsing attributes in process `syz.2.491'. [ 127.377871][ T7631] lo: entered allmulticast mode [ 127.399277][ T7631] lo: left allmulticast mode [ 127.420172][ T7632] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 127.455350][ T7637] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 127.503636][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.620201][ T7647] syz.2.495: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.670935][ T7647] CPU: 1 UID: 0 PID: 7647 Comm: syz.2.495 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 127.670965][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.670976][ T7647] Call Trace: [ 127.670983][ T7647] [ 127.670991][ T7647] dump_stack_lvl+0x241/0x360 [ 127.671022][ T7647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.671042][ T7647] ? __pfx__printk+0x10/0x10 [ 127.671067][ T7647] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 127.671091][ T7647] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 127.671118][ T7647] warn_alloc+0x278/0x410 [ 127.671140][ T7647] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 127.671160][ T7647] ? __pfx_warn_alloc+0x10/0x10 [ 127.671180][ T7647] ? kasan_save_track+0x3f/0x80 [ 127.671198][ T7647] ? __kasan_kmalloc+0x98/0xb0 [ 127.671220][ T7647] ? xsk_setsockopt+0x4aa/0x810 [ 127.671244][ T7647] ? do_sock_setsockopt+0x3af/0x720 [ 127.671261][ T7647] ? __x64_sys_setsockopt+0x1ee/0x280 [ 127.671278][ T7647] ? do_syscall_64+0xf3/0x230 [ 127.671308][ T7647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.671344][ T7647] __vmalloc_node_range_noprof+0x126/0x1380 [ 127.671396][ T7647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.671420][ T7647] ? __kasan_kmalloc+0x98/0xb0 [ 127.671452][ T7647] vmalloc_user_noprof+0x74/0x80 [ 127.671470][ T7647] ? xskq_create+0xb6/0x170 [ 127.671496][ T7647] xskq_create+0xb6/0x170 [ 127.671525][ T7647] xsk_init_queue+0xa1/0x100 [ 127.671554][ T7647] xsk_setsockopt+0x4aa/0x810 [ 127.671582][ T7647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.671608][ T7647] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.671638][ T7647] ? aa_sock_opt_perm+0x79/0x120 [ 127.671669][ T7647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.671694][ T7647] do_sock_setsockopt+0x3af/0x720 [ 127.671720][ T7647] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 127.671745][ T7647] ? __fget_files+0x395/0x410 [ 127.671768][ T7647] ? __fget_files+0x2a/0x410 [ 127.671803][ T7647] __x64_sys_setsockopt+0x1ee/0x280 [ 127.671830][ T7647] do_syscall_64+0xf3/0x230 [ 127.671852][ T7647] ? clear_bhb_loop+0x35/0x90 [ 127.671880][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.671903][ T7647] RIP: 0033:0x7f6e5398d169 [ 127.671926][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.671941][ T7647] RSP: 002b:00007f6e54726038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.671962][ T7647] RAX: ffffffffffffffda RBX: 00007f6e53ba6080 RCX: 00007f6e5398d169 [ 127.671975][ T7647] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 127.671986][ T7647] RBP: 00007f6e53a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 127.671997][ T7647] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.672008][ T7647] R13: 0000000000000000 R14: 00007f6e53ba6080 R15: 00007fffdbdeebc8 [ 127.672037][ T7647] [ 127.672879][ T7647] Mem-Info: [ 128.022527][ T7652] tipc: Enabling of bearer <|i:> rejected, media not registered [ 128.036755][ T7647] active_anon:7194 inactive_anon:0 isolated_anon:0 [ 128.036755][ T7647] active_file:1527 inactive_file:38319 isolated_file:0 [ 128.036755][ T7647] unevictable:768 dirty:232 writeback:0 [ 128.036755][ T7647] slab_reclaimable:10929 slab_unreclaimable:100357 [ 128.036755][ T7647] mapped:30597 shmem:1424 pagetables:755 [ 128.036755][ T7647] sec_pagetables:0 bounce:0 [ 128.036755][ T7647] kernel_misc_reclaimable:0 [ 128.036755][ T7647] free:1318380 free_pcp:481 free_cma:0 [ 128.090803][ T7647] Node 0 active_anon:28576kB inactive_anon:0kB active_file:6108kB inactive_file:153200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122388kB dirty:928kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:3020kB sec_pagetables:0kB all_unreclaimable? no [ 128.155915][ T7647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 128.195309][ T7647] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.242240][ T7647] lowmem_reserve[]: 0 2489 2490 0 0 [ 128.247697][ T7647] Node 0 DMA32 free:1339456kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28672kB inactive_anon:0kB active_file:6108kB inactive_file:152876kB unevictable:1536kB writepending:932kB present:3129332kB managed:2549736kB mlocked:0kB bounce:0kB free_pcp:5548kB local_pcp:1204kB free_cma:0kB [ 128.294796][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 128.299798][ T7647] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.327431][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 128.332781][ T7647] Node 1 Normal free:3906052kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 128.362098][ T7647] lowmem_reserve[]: 0 0 0 0 0 [ 128.366891][ T7647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 128.380021][ T7647] Node 0 DMA32: 3*4kB (ME) 1*8kB (M) 2*16kB (UE) 59*32kB (ME) 52*64kB (UME) 21*128kB (ME) 10*256kB (ME) 10*512kB (UM) 4*1024kB (ME) 4*2048kB (M) 320*4096kB (M) = 1338644kB [ 128.421712][ T7647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 128.442984][ T7659] netlink: 'syz.4.500': attribute type 2 has an invalid length. [ 128.479433][ T7647] Node 1 Normal: 165*4kB (UE) 64*8kB (UME) 55*16kB (UME) 218*32kB (UME) 103*64kB (UME) 32*128kB (UME) 13*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3906052kB [ 128.540806][ T7647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.580930][ T7647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.595459][ T7663] pimreg: entered allmulticast mode [ 128.615928][ T7663] pimreg: left allmulticast mode [ 128.625390][ T7647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.651146][ T7647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.660500][ T7647] 41270 total pagecache pages [ 128.700679][ T7647] 0 pages in swap cache [ 128.704954][ T7647] Free swap = 124996kB [ 128.709141][ T7647] Total swap = 124996kB [ 128.750641][ T7647] 2097051 pages RAM [ 128.754528][ T7647] 0 pages HighMem/MovableOnly [ 128.759232][ T7647] 427895 pages reserved [ 128.806014][ T7647] 0 pages cma reserved [ 129.132267][ T7683] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 129.144253][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.573888][ T7707] syzkaller1: entered promiscuous mode [ 129.588552][ T7707] syzkaller1: entered allmulticast mode [ 130.160436][ T7726] macvtap1: entered promiscuous mode [ 130.168687][ T7726] bond0: entered promiscuous mode [ 130.184406][ T7726] macvtap1: entered allmulticast mode [ 130.201898][ T7726] bond0: entered allmulticast mode [ 130.232149][ T7726] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.311189][ T7732] bond0: left allmulticast mode [ 130.324376][ T7732] bond0: left promiscuous mode [ 130.358394][ T7732] macvtap1: left promiscuous mode [ 130.371568][ T7732] macvtap1: left allmulticast mode [ 130.416008][ T7739] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 130.486708][ T7739] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.658200][ T7756] __nla_validate_parse: 6 callbacks suppressed [ 130.658221][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 130.780204][ T5893] IPVS: starting estimator thread 0... [ 130.891104][ T7762] IPVS: using max 21 ests per chain, 50400 per kthread [ 130.977511][ T7765] netlink: 176 bytes leftover after parsing attributes in process `syz.2.533'. [ 131.027840][ T7756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.246781][ T5893] hid-generic 0005:0B57:0009.0001: item fetching failed at offset 0/1 [ 131.259207][ T5893] hid-generic 0005:0B57:0009.0001: probe with driver hid-generic failed with error -22 [ 131.472318][ T7777] syz.3.534 (7777) used greatest stack depth: 16624 bytes left [ 131.474597][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 131.694485][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 131.733227][ T7798] dummy0: entered promiscuous mode [ 131.772582][ T7798] dummy0: left promiscuous mode [ 131.983377][ T7805] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 132.046383][ T7815] syz_tun: entered allmulticast mode [ 132.077377][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 132.115691][ T7817] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 132.125357][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.346370][ T7826] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 132.398744][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 132.707396][ T7814] syz_tun: left allmulticast mode [ 133.000463][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.002566][ T7842] netlink: 'syz.0.558': attribute type 10 has an invalid length. [ 133.043148][ T7842] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.048403][ T7848] netlink: 'syz.4.559': attribute type 10 has an invalid length. [ 133.058950][ T7842] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.086163][ T7841] vlan3: entered allmulticast mode [ 133.096104][ T7841] hsr0: entered allmulticast mode [ 133.117256][ T7841] hsr_slave_0: entered allmulticast mode [ 133.138347][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139857][ T7841] hsr_slave_1: entered allmulticast mode [ 133.145674][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.182358][ T7841] hsr0: left allmulticast mode [ 133.187590][ T7841] hsr_slave_0: left allmulticast mode [ 133.193708][ T7841] hsr_slave_1: left allmulticast mode [ 133.225689][ T7852] netlink: 'syz.2.557': attribute type 12 has an invalid length. [ 133.239148][ T7852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.340458][ T7841] netlink: 'syz.2.557': attribute type 12 has an invalid length. [ 133.369014][ T7841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.413568][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.561'. [ 133.434643][ T7859] netlink: 'syz.4.561': attribute type 10 has an invalid length. [ 133.444223][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.655049][ T7868] batadv0: entered promiscuous mode [ 134.571342][ T7888] syzkaller0: entered promiscuous mode [ 134.580862][ T7888] syzkaller0: entered allmulticast mode [ 134.638907][ T7893] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:19999 [ 135.166483][ T7910] netlink: 'syz.4.574': attribute type 10 has an invalid length. [ 137.551088][ T7910] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.807633][ T7934] bridge1: entered promiscuous mode [ 137.813858][ T7934] bridge1: entered allmulticast mode [ 137.842390][ T7934] team0: Port device bridge1 added [ 138.299207][ T7953] xt_limit: Overflow, try lower: 262144/524288 [ 138.315222][ T7954] xt_limit: Overflow, try lower: 262144/524288 [ 138.496317][ T7958] __nla_validate_parse: 3 callbacks suppressed [ 138.496340][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 138.509088][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.591'. [ 138.537490][ T1892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.549215][ T7958] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 138.552055][ T1892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.606622][ T7958] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.402616][ T5857] IPVS: starting estimator thread 0... [ 139.501236][ T8002] IPVS: using max 18 ests per chain, 43200 per kthread [ 139.685252][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 139.822525][ T8021] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 140.359255][ T7993] 0: left allmulticast mode [ 140.461458][ T7993] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.480853][ T7993] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.489774][ T7993] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.530875][ T7993] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.628015][ T7993] gretap1: left promiscuous mode [ 140.646935][ T7993] bridge1: left promiscuous mode [ 140.655103][ T7993] bridge1: left allmulticast mode [ 140.697499][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.977966][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 141.010882][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 141.025735][ T8040] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 141.044348][ T8036] tc_dump_action: action bad kind [ 141.062777][ T8037] C: renamed from team_slave_0 [ 141.078475][ T8037] netlink: 'syz.3.610': attribute type 3 has an invalid length. [ 141.088322][ T8037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.610'. [ 141.102353][ T8037] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 141.240856][ T8051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.614'. [ 141.262143][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.614'. [ 141.280062][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.614'. [ 141.296113][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.614'. [ 141.542774][ T8065] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 141.582066][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.786817][ T8081] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 141.822306][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.844877][ T8081] bond0: (slave team0): Enslaving as an active interface with an up link [ 141.940393][ T8088] syzkaller1: entered promiscuous mode [ 141.946775][ T8088] syzkaller1: entered allmulticast mode [ 142.261485][ T8104] SET target dimension over the limit! [ 142.270799][ T8101] syzkaller1: entered promiscuous mode [ 142.287329][ T8101] syzkaller1: entered allmulticast mode [ 142.592720][ T8122] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 142.974042][ T8137] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 142.992128][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.009385][ T8137] bond0: (slave team0): Enslaving as an active interface with an up link [ 143.130873][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 143.262646][ T8151] bridge0: port 1(syz_tun) entered blocking state [ 143.275279][ T8151] bridge0: port 1(syz_tun) entered disabled state [ 143.290483][ T8151] syz_tun: entered allmulticast mode [ 143.306277][ T8151] syz_tun: entered promiscuous mode [ 143.326290][ T8151] bridge0: port 1(syz_tun) entered blocking state [ 143.333316][ T8151] bridge0: port 1(syz_tun) entered forwarding state [ 143.524287][ T8160] team0: Unable to change to the same mode the team is in [ 143.607716][ T8162] __nla_validate_parse: 11 callbacks suppressed [ 143.607740][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 143.661333][ T8165] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 143.933608][ T8172] netlink: 'syz.0.649': attribute type 29 has an invalid length. [ 143.966295][ T8172] netlink: 'syz.0.649': attribute type 29 has an invalid length. [ 144.239342][ T8188] netlink: 'syz.1.654': attribute type 35 has an invalid length. [ 144.336366][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 144.367020][ T8176] bond0: (slave team0): Releasing backup interface [ 144.380206][ T8192] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 144.410712][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.665402][ T8201] netlink: 260 bytes leftover after parsing attributes in process `syz.4.658'. [ 144.678210][ T1597] IPVS: starting estimator thread 0... [ 144.684559][ T8198] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.716087][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 144.728493][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 144.769293][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 144.790794][ T8203] IPVS: using max 17 ests per chain, 40800 per kthread [ 144.809627][ T8205] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 144.819511][ T8205] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.911964][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 144.916108][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 145.343647][ T8231] bond2: entered promiscuous mode [ 145.357982][ T8231] bond2: entered allmulticast mode [ 145.394486][ T8240] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 145.407022][ T8237] batadv1: entered allmulticast mode [ 145.466127][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 145.477230][ T8237] bond2: (slave batadv1): making interface the new active one [ 145.485284][ T8237] batadv1: entered promiscuous mode [ 145.492564][ T8237] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 145.577619][ T8246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.593734][ T8246] team0: Port device bond2 added [ 145.602280][ T8247] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 145.608900][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.667'. [ 145.628515][ T8231] bond2: left promiscuous mode [ 145.633406][ T8231] batadv1: left promiscuous mode [ 145.638788][ T8231] bond2: left allmulticast mode [ 145.645447][ T8231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.718951][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 145.734245][ T8260] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.693867][ T8293] xt_limit: Overflow, try lower: 0/0 [ 146.873443][ T8293] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.115705][ T8306] validate_nla: 2 callbacks suppressed [ 147.115727][ T8306] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 147.141410][ T8306] netlink: 'syz.3.683': attribute type 2 has an invalid length. [ 147.183125][ T8313] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 147.192337][ T8311] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 147.200035][ T8311] netlink: 'syz.0.684': attribute type 2 has an invalid length. [ 147.208133][ T8311] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 147.327952][ T8314] vlan0: entered promiscuous mode [ 147.448381][ T8325] netlink: 'syz.4.688': attribute type 10 has an invalid length. [ 147.759261][ T8336] bond1: entered promiscuous mode [ 147.764583][ T8336] bond1: entered allmulticast mode [ 148.073797][ T8351] --map-set only usable from mangle table [ 148.725704][ T8365] xt_hashlimit: invalid rate [ 148.979273][ T8353] syz.0.700: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.000203][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.0.700 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 149.000233][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.000255][ T8353] Call Trace: [ 149.000271][ T8353] [ 149.000280][ T8353] dump_stack_lvl+0x241/0x360 [ 149.000307][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.000320][ T8353] ? __pfx__printk+0x10/0x10 [ 149.000334][ T8353] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 149.000349][ T8353] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 149.000364][ T8353] warn_alloc+0x278/0x410 [ 149.000379][ T8353] ? __pfx_warn_alloc+0x10/0x10 [ 149.000395][ T8353] ? veth_dev_init+0x35f/0x550 [ 149.000406][ T8353] ? __get_vm_area_node+0x1c8/0x2d0 [ 149.000421][ T8353] ? __get_vm_area_node+0x25c/0x2d0 [ 149.000441][ T8353] __vmalloc_node_range_noprof+0x62f/0x1380 [ 149.000452][ T8353] ? look_up_lock_class+0x77/0x170 [ 149.000487][ T8353] ? rcu_is_watching+0x15/0xb0 [ 149.000507][ T8353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.000527][ T8353] ? rcu_is_watching+0x15/0xb0 [ 149.000547][ T8353] ? trace_kmalloc+0x1f/0xd0 [ 149.000574][ T8353] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 149.000597][ T8353] ? __kvmalloc_node_noprof+0x72/0x190 [ 149.000626][ T8353] __kvmalloc_node_noprof+0x142/0x190 [ 149.000654][ T8353] ? veth_dev_init+0x35f/0x550 [ 149.000674][ T8353] veth_dev_init+0x35f/0x550 [ 149.000782][ T8353] register_netdevice+0x6d7/0x1b70 [ 149.000805][ T8353] ? _get_random_bytes+0x25d/0x2c0 [ 149.000834][ T8353] ? snprintf+0xda/0x120 [ 149.000863][ T8353] ? __pfx_register_netdevice+0x10/0x10 [ 149.000884][ T8353] ? __pfx_snprintf+0x10/0x10 [ 149.000907][ T8353] ? __asan_memset+0x23/0x50 [ 149.000932][ T8353] veth_newlink+0x66a/0xb70 [ 149.000963][ T8353] ? __pfx_veth_newlink+0x10/0x10 [ 149.001071][ T8353] ? alloc_netdev_mqs+0xe01/0x1210 [ 149.001103][ T8353] ? rtnl_create_link+0x95b/0xc90 [ 149.001128][ T8353] ? __pfx_veth_newlink+0x10/0x10 [ 149.001159][ T8353] rtnl_newlink_create+0x37b/0xbd0 [ 149.001195][ T8353] ? __mutex_lock+0x602/0x1010 [ 149.001224][ T8353] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 149.001259][ T8353] ? __pfx___mutex_lock+0x10/0x10 [ 149.001295][ T8353] ? ns_capable+0x8a/0xf0 [ 149.001321][ T8353] rtnl_newlink+0x167a/0x1d90 [ 149.001371][ T8353] ? __pfx_rtnl_newlink+0x10/0x10 [ 149.001399][ T8353] ? __pfx_validate_chain+0x10/0x10 [ 149.001525][ T8353] ? __pfx_lock_release+0x10/0x10 [ 149.001573][ T8353] ? __pfx_rtnl_newlink+0x10/0x10 [ 149.001602][ T8353] rtnetlink_rcv_msg+0x791/0xcf0 [ 149.001628][ T8353] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 149.001657][ T8353] ? __lock_acquire+0x1397/0x2100 [ 149.001695][ T8353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.001744][ T8353] netlink_rcv_skb+0x206/0x480 [ 149.001773][ T8353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.001803][ T8353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.001859][ T8353] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.001890][ T8353] netlink_unicast+0x7f6/0x990 [ 149.001921][ T8353] ? __pfx_netlink_unicast+0x10/0x10 [ 149.001939][ T8353] ? __virt_addr_valid+0x45f/0x530 [ 149.001958][ T8353] ? __phys_addr_symbol+0x2f/0x70 [ 149.001975][ T8353] ? __check_object_size+0x47a/0x730 [ 149.002005][ T8353] netlink_sendmsg+0x8de/0xcb0 [ 149.002048][ T8353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.002080][ T8353] ? aa_sock_msg_perm+0x91/0x160 [ 149.002115][ T8353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.002141][ T8353] __sock_sendmsg+0x221/0x270 [ 149.002172][ T8353] ____sys_sendmsg+0x53a/0x860 [ 149.002204][ T8353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.002223][ T8353] ? __fget_files+0x2a/0x410 [ 149.002255][ T8353] ? __fget_files+0x2a/0x410 [ 149.002294][ T8353] __sys_sendmsg+0x269/0x350 [ 149.002322][ T8353] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.002398][ T8353] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.002429][ T8353] ? do_syscall_64+0x100/0x230 [ 149.002458][ T8353] ? do_syscall_64+0xb6/0x230 [ 149.002485][ T8353] do_syscall_64+0xf3/0x230 [ 149.002508][ T8353] ? clear_bhb_loop+0x35/0x90 [ 149.002540][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.002565][ T8353] RIP: 0033:0x7f9e0ab8d169 [ 149.002583][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.002599][ T8353] RSP: 002b:00007f9e0ba22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.002623][ T8353] RAX: ffffffffffffffda RBX: 00007f9e0ada5fa0 RCX: 00007f9e0ab8d169 [ 149.002637][ T8353] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000004 [ 149.002649][ T8353] RBP: 00007f9e0ac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.002661][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.002673][ T8353] R13: 0000000000000000 R14: 00007f9e0ada5fa0 R15: 00007ffed2a4e608 [ 149.002716][ T8353] [ 149.476857][ T8353] Mem-Info: [ 149.480019][ T8353] active_anon:7222 inactive_anon:0 isolated_anon:0 [ 149.480019][ T8353] active_file:1591 inactive_file:38329 isolated_file:0 [ 149.480019][ T8353] unevictable:768 dirty:307 writeback:0 [ 149.480019][ T8353] slab_reclaimable:10853 slab_unreclaimable:105670 [ 149.480019][ T8353] mapped:28552 shmem:1424 pagetables:740 [ 149.480019][ T8353] sec_pagetables:0 bounce:0 [ 149.480019][ T8353] kernel_misc_reclaimable:0 [ 149.480019][ T8353] free:1317356 free_pcp:169 free_cma:0 [ 149.525235][ T8353] Node 0 active_anon:28888kB inactive_anon:0kB active_file:6364kB inactive_file:153240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114208kB dirty:1228kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11344kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 149.557838][ T8353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.589830][ T8353] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.617220][ T8353] lowmem_reserve[]: 0 2489 2490 0 0 [ 149.622639][ T8353] Node 0 DMA32 free:1347404kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28848kB inactive_anon:0kB active_file:6364kB inactive_file:152916kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2549736kB mlocked:0kB bounce:0kB free_pcp:836kB local_pcp:404kB free_cma:0kB [ 149.653265][ T8353] lowmem_reserve[]: 0 0 0 0 0 [ 149.658002][ T8353] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.685306][ T8353] lowmem_reserve[]: 0 0 0 0 0 [ 149.690052][ T8353] Node 1 Normal free:3906420kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 149.720192][ T8353] lowmem_reserve[]: 0 0 0 0 0 [ 149.728147][ T8353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.741788][ T8353] Node 0 DMA32: 101*4kB (UM) 523*8kB (UME) 240*16kB (UME) 195*32kB (UME) 226*64kB (UME) 65*128kB (UME) 19*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 5*2048kB (M) 314*4096kB (UM) = 1347404kB [ 149.760804][ T8353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 149.772821][ T8353] Node 1 Normal: 233*4kB (UE) 64*8kB (UME) 53*16kB (UME) 218*32kB (UME) 103*64kB (UME) 33*128kB (UME) 13*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3906420kB [ 149.791610][ T8353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.801231][ T8353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.810543][ T8353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.820193][ T8353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.829694][ T8353] 41344 total pagecache pages [ 149.834595][ T8353] 0 pages in swap cache [ 149.838795][ T8353] Free swap = 124996kB [ 149.843269][ T8353] Total swap = 124996kB [ 149.847593][ T8353] 2097051 pages RAM [ 149.851654][ T8353] 0 pages HighMem/MovableOnly [ 149.856561][ T8353] 427895 pages reserved [ 149.860864][ T8353] 0 pages cma reserved [ 150.787639][ T8374] __nla_validate_parse: 11 callbacks suppressed [ 150.787671][ T8374] netlink: 68 bytes leftover after parsing attributes in process `syz.1.707'. [ 150.871256][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 150.880917][ T8378] netlink: 'syz.4.708': attribute type 3 has an invalid length. [ 151.103120][ T8387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.711'. [ 151.511096][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 151.623419][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 151.696975][ T8416] netlink: 'syz.3.720': attribute type 29 has an invalid length. [ 151.829536][ T8423] netlink: 'syz.0.718': attribute type 16 has an invalid length. [ 151.861050][ T8423] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.718'. [ 152.270110][ T8434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.724'. [ 152.310380][ T8429] IPv6: sit1: Disabled Multicast RS [ 152.346503][ T8429] sit1: entered allmulticast mode [ 152.408117][ T8438] validate_nla: 1 callbacks suppressed [ 152.408138][ T8438] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 152.458029][ T8438] netlink: 224 bytes leftover after parsing attributes in process `syz.2.726'. [ 152.945714][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 153.279648][ T8511] gre1: entered promiscuous mode [ 153.291079][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 153.334284][ T8511] gre1: entered allmulticast mode [ 153.555392][ T8523] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.654831][ T8526] syzkaller1: entered promiscuous mode [ 153.675212][ T8526] syzkaller1: entered allmulticast mode [ 154.015468][ T8532] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.436553][ T8548] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.882952][ T8567] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 155.283314][ T8576] syzkaller1: entered promiscuous mode [ 155.289155][ T8576] syzkaller1: entered allmulticast mode [ 156.069264][ T8611] __nla_validate_parse: 8 callbacks suppressed [ 156.069286][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'. [ 156.196937][ T8611] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 156.295422][ T8621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.770'. [ 156.305894][ T8621] netlink: 5 bytes leftover after parsing attributes in process `syz.1.770'. [ 156.316481][ T8621] 0XD: renamed from gretap0 (while UP) [ 156.328474][ T8621] 0XD: entered allmulticast mode [ 156.487116][ T8632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.774'. [ 156.496443][ T8632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.774'. [ 156.516500][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 156.784741][ T8646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.879382][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.781'. [ 156.920887][ T8652] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 156.930705][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.137431][ T8658] xt_hashlimit: size too large, truncated to 1048576 [ 157.399753][ T8675] xt_hashlimit: size too large, truncated to 1048576 [ 157.532032][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 157.604671][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 157.640084][ T8681] netlink: 176 bytes leftover after parsing attributes in process `syz.2.788'. [ 158.317085][ T8700] x_tables: duplicate underflow at hook 2 [ 158.348238][ T8701] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 159.289541][ T8747] xt_l2tp: unknown flags: 10 [ 160.046952][ T8763] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 160.556498][ T8783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.743482][ T8794] SET target dimension over the limit! [ 160.798006][ T8797] netlink: 'syz.0.825': attribute type 10 has an invalid length. [ 161.143760][ T8815] __nla_validate_parse: 16 callbacks suppressed [ 161.143783][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 161.219121][ T8817] netlink: 'syz.0.830': attribute type 3 has an invalid length. [ 161.687499][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 162.277982][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 162.486974][ T8854] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 164.962659][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 164.989959][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 165.486996][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.848'. [ 165.875513][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.851'. [ 165.968979][ T8898] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 166.209944][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 166.524673][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 166.899608][ T8917] team0: No ports can be present during mode change [ 167.050317][ T8926] netlink: 176 bytes leftover after parsing attributes in process `syz.1.860'. [ 167.072370][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 167.332033][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 170.088892][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 170.112046][ T8969] netlink: 176 bytes leftover after parsing attributes in process `syz.4.873'. [ 170.245105][ T8974] ipt_REJECT: TCP_RESET invalid for non-tcp [ 170.277212][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 170.315593][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 170.468630][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 170.752555][ T9005] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 170.805338][ T8993] vlan2: entered promiscuous mode [ 170.847949][ T9005] bridge0: entered promiscuous mode [ 170.870373][ T9005] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.164542][ T9018] hsr0: entered promiscuous mode [ 171.222155][ T9018] __nla_validate_parse: 4 callbacks suppressed [ 171.222178][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 171.268522][ T9021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.277701][ T9018] hsr_slave_0: left promiscuous mode [ 171.289945][ T9018] 0: left promiscuous mode [ 171.342608][ T9018] hsr0 (unregistering): left promiscuous mode [ 171.366887][ T9025] bridge0: port 2(gretap0) entered blocking state [ 171.382877][ T9025] bridge0: port 2(gretap0) entered disabled state [ 171.390164][ T9025] gretap0: entered allmulticast mode [ 171.407130][ T9025] gretap0: entered promiscuous mode [ 171.416890][ T9025] bridge0: port 2(gretap0) entered blocking state [ 171.423571][ T9025] bridge0: port 2(gretap0) entered forwarding state [ 171.433751][ T9023] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 171.466841][ T9027] gretap0: left allmulticast mode [ 171.478932][ T9027] gretap0: left promiscuous mode [ 171.512131][ T9027] bridge0: port 2(gretap0) entered disabled state [ 171.540121][ T9030] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 171.676757][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.896'. [ 171.718355][ T9034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.247804][ T9056] netlink: 176 bytes leftover after parsing attributes in process `syz.0.902'. [ 172.319397][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 173.197510][ T9078] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 173.240226][ T9077] batman_adv: batadv0: Adding interface: ip6gretap1 [ 173.291325][ T9077] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.344313][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'. [ 173.390871][ T9077] batman_adv: batadv0: Interface activated: ip6gretap1 [ 173.437468][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.912'. [ 173.447913][ T9090] netlink: 256 bytes leftover after parsing attributes in process `syz.0.912'. [ 173.472215][ T9090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.912'. [ 173.489255][ T9087] xt_bpf: check failed: parse error [ 173.583715][ T9053] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 173.717064][ T9097] batman_adv: batadv0: Adding interface: dummy0 [ 173.727104][ T9097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.763326][ T9100] netlink: 'syz.2.914': attribute type 7 has an invalid length. [ 173.780856][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 173.791140][ T9097] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 174.000333][ T9102] netlink: 176 bytes leftover after parsing attributes in process `syz.3.915'. [ 174.022940][ T9107] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 174.659493][ T9136] lo speed is unknown, defaulting to 1000 [ 174.670414][ T9136] lo speed is unknown, defaulting to 1000 [ 174.694535][ T9136] lo speed is unknown, defaulting to 1000 [ 174.718424][ T9136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.729874][ T9137] netlink: 'syz.3.925': attribute type 10 has an invalid length. [ 174.781131][ T9136] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 174.804861][ T9137] team0: Port device wlan1 added [ 174.887780][ T9136] lo speed is unknown, defaulting to 1000 [ 174.902311][ T9136] lo speed is unknown, defaulting to 1000 [ 174.920693][ T9136] lo speed is unknown, defaulting to 1000 [ 174.928022][ T9136] lo speed is unknown, defaulting to 1000 [ 174.943786][ T9136] lo speed is unknown, defaulting to 1000 [ 175.718159][ T9163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.727861][ T9163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.736759][ T9163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.745926][ T9163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.769235][ T9163] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 175.896557][ T974] IPVS: starting estimator thread 0... [ 176.001198][ T9169] IPVS: using max 19 ests per chain, 45600 per kthread [ 176.208511][ T9183] xt_hashlimit: invalid rate [ 176.368988][ T9189] __nla_validate_parse: 11 callbacks suppressed [ 176.369011][ T9189] netlink: 176 bytes leftover after parsing attributes in process `syz.2.943'. [ 176.378858][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 176.465931][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 176.499822][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.945'. [ 176.540104][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 176.558130][ T9192] netlink: 'syz.1.945': attribute type 3 has an invalid length. [ 176.997821][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 177.019713][ T9216] tipc: Enabling of bearer rejected, media not registered [ 177.043670][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'. [ 177.156876][ T9225] netlink: 176 bytes leftover after parsing attributes in process `syz.1.956'. [ 177.218574][ T9226] netlink: 'syz.4.955': attribute type 21 has an invalid length. [ 177.231693][ T9226] netlink: 'syz.4.955': attribute type 20 has an invalid length. [ 177.414182][ T9234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.959'. [ 177.517418][ T9238] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 177.838002][ T9251] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 177.903533][ T9251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.913712][ T9249] lo speed is unknown, defaulting to 1000 [ 177.914334][ T9258] set match dimension is over the limit! [ 177.987822][ T9258] pim6reg: entered allmulticast mode [ 178.219969][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 178.621632][ T9282] : renamed from vlan1 [ 178.703547][ T9288] x_tables: duplicate underflow at hook 2 [ 179.046436][ T9298] lo speed is unknown, defaulting to 1000 [ 179.357611][ T9314] lo speed is unknown, defaulting to 1000 [ 179.432454][ T9316] netlink: 'syz.3.983': attribute type 5 has an invalid length. [ 179.580476][ T9317] lo speed is unknown, defaulting to 1000 [ 179.605453][ T9316] ip6erspan0: entered promiscuous mode [ 180.099883][ T9321] nbd: socks must be embedded in a SOCK_ITEM attr [ 180.352382][ T9319] lo speed is unknown, defaulting to 1000 [ 181.152361][ T9353] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 181.330508][ T9356] lo speed is unknown, defaulting to 1000 [ 181.420066][ T9358] lo speed is unknown, defaulting to 1000 [ 181.451649][ T9358] lo speed is unknown, defaulting to 1000 [ 181.458047][ T9358] lo speed is unknown, defaulting to 1000 [ 181.464170][ T9362] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 181.497248][ T9368] __nla_validate_parse: 14 callbacks suppressed [ 181.497270][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 181.525416][ T9362] veth0_macvtap: left promiscuous mode [ 181.546547][ T9358] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 181.749526][ T9358] lo speed is unknown, defaulting to 1000 [ 181.779388][ T9358] lo speed is unknown, defaulting to 1000 [ 181.792462][ T9358] lo speed is unknown, defaulting to 1000 [ 181.809745][ T9358] lo speed is unknown, defaulting to 1000 [ 181.832078][ T9358] lo speed is unknown, defaulting to 1000 [ 181.850171][ T9358] lo speed is unknown, defaulting to 1000 [ 182.021213][ T9358] lo speed is unknown, defaulting to 1000 [ 182.178291][ T9383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.503939][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 182.541338][ T9400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 182.570943][ T9399] @: renamed from veth0_vlan (while UP) [ 182.643318][ T9399] ip6tnl1: entered promiscuous mode [ 182.657314][ T9399] ip6tnl1: entered allmulticast mode [ 182.776954][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 182.948051][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 182.983179][ T9415] lo speed is unknown, defaulting to 1000 [ 182.991773][ T9415] lo speed is unknown, defaulting to 1000 [ 183.166194][ T9425] netlink: 'syz.3.1010': attribute type 2 has an invalid length. [ 183.662115][ T9439] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1015'. [ 184.182926][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1021'. [ 184.340136][ T9462] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1019'. [ 184.437831][ T9465] SET target dimension over the limit! [ 184.485446][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 184.877735][ T9489] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 185.163695][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1031'. [ 185.494877][ T9506] netlink: 'syz.4.1036': attribute type 11 has an invalid length. [ 185.745491][ T9513] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 186.057435][ T9529] SET target dimension over the limit! [ 186.077069][ T9532] SET target dimension over the limit! [ 186.097913][ T9530] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 186.111949][ T9537] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002 [ 186.530495][ T9559] lo speed is unknown, defaulting to 1000 [ 186.549662][ T9559] lo speed is unknown, defaulting to 1000 [ 186.652891][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 186.953984][ T9581] __nla_validate_parse: 4 callbacks suppressed [ 186.954008][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 187.182773][ T9598] syzkaller1: entered promiscuous mode [ 187.188386][ T9598] syzkaller1: entered allmulticast mode [ 187.432140][ T9609] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1066'. [ 187.805625][ T9619] netlink: 'syz.0.1070': attribute type 5 has an invalid length. [ 187.840197][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 188.053961][ T9633] netlink: 'syz.1.1072': attribute type 3 has an invalid length. [ 188.090019][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1073'. [ 188.664216][ T9651] netlink: 'syz.3.1080': attribute type 5 has an invalid length. [ 188.827734][ T9654] tipc: Enabling of bearer rejected, failed to enable media [ 189.517674][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'. [ 189.792119][ T9675] lo speed is unknown, defaulting to 1000 [ 189.842195][ T9675] lo speed is unknown, defaulting to 1000 [ 190.731004][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 190.771441][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 190.839307][ T9675] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 190.900753][ T9675] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1090'. [ 190.917440][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 191.084808][ T9699] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1094'. [ 191.530698][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 191.535589][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 191.537241][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 191.651265][ T9707] lo speed is unknown, defaulting to 1000 [ 191.666957][ T9707] lo speed is unknown, defaulting to 1000 [ 191.844322][ T9717] SET target dimension over the limit! [ 191.887688][ T9717] xt_CT: No such helper "snmp" [ 191.924793][ T9717] lo speed is unknown, defaulting to 1000 [ 191.933220][ T9717] lo speed is unknown, defaulting to 1000 [ 191.993156][ T9720] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 192.575006][ T9736] vti0: entered promiscuous mode [ 192.610094][ T9737] lo speed is unknown, defaulting to 1000 [ 192.741103][ T9737] lo speed is unknown, defaulting to 1000 [ 192.823921][ T9740] syzkaller1: entered promiscuous mode [ 192.873004][ T9740] syzkaller1: entered allmulticast mode [ 193.061582][ T9707] __nla_validate_parse: 3 callbacks suppressed [ 193.061607][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 193.236973][ T1597] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1 [ 193.251363][ T1597] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22 [ 193.445679][ T9750] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 193.745952][ T9754] veth1_macvtap: left promiscuous mode [ 193.760717][ T9754] macsec0: entered promiscuous mode [ 193.765980][ T9754] macsec0: entered allmulticast mode [ 193.796571][ T9754] veth1_macvtap: entered promiscuous mode [ 193.817762][ T9754] veth1_macvtap: entered allmulticast mode [ 193.830938][ T9754] macsec0: left promiscuous mode [ 193.836091][ T9754] macsec0: left allmulticast mode [ 193.890865][ T9754] veth1_macvtap: left allmulticast mode [ 194.132428][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 194.501668][ T9765] lo speed is unknown, defaulting to 1000 [ 194.508544][ T9765] lo speed is unknown, defaulting to 1000 [ 194.574810][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.791915][ T9775] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1115'. [ 195.005403][ T9782] tipc: Started in network mode [ 195.015354][ T9782] tipc: Node identity 364bd8a6243b, cluster identity 4711 [ 195.038700][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1118'. [ 195.061061][ T9782] tipc: Enabled bearer , priority 0 [ 195.088772][ T9786] netlink: 'syz.1.1119': attribute type 25 has an invalid length. [ 195.096935][ T9786] netlink: 'syz.1.1119': attribute type 7 has an invalid length. [ 195.112559][ T9777] netlink: 'syz.2.1116': attribute type 6 has an invalid length. [ 195.130809][ T9777] netlink: 'syz.2.1116': attribute type 7 has an invalid length. [ 195.155474][ T9777] netlink: 'syz.2.1116': attribute type 8 has an invalid length. [ 195.354809][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 195.812419][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1122'. [ 196.182594][ T974] tipc: Node number set to 309385382 [ 196.276442][ T9806] bond0: (slave bridge0): Releasing backup interface [ 196.297914][ T9806] bridge0: left promiscuous mode [ 196.419842][ T9806] team0: Port device wlan1 removed [ 196.439666][ T46] lo speed is unknown, defaulting to 1000 [ 196.494488][ T9802] team0: Mode changed to "loadbalance" [ 196.584893][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 196.643780][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1126'. [ 196.981913][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 197.010991][ T9829] veth1_vlan: entered allmulticast mode [ 197.016718][ T9829] macvlan0: left allmulticast mode [ 197.070929][ T9829] veth1_vlan: left allmulticast mode [ 197.461349][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1134'. [ 197.871563][ T9871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.051283][ T9879] lo speed is unknown, defaulting to 1000 [ 198.085798][ T9880] syzkaller1: entered promiscuous mode [ 198.091936][ T9880] syzkaller1: entered allmulticast mode [ 198.099589][ T9879] lo speed is unknown, defaulting to 1000 [ 198.109050][ T9882] __nla_validate_parse: 6 callbacks suppressed [ 198.109068][ T9882] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1145'. [ 198.250383][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'. [ 198.447434][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 198.874143][ T9921] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.1156'. [ 198.891575][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.072480][ T9931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1159'. [ 199.093246][ T9931] netem: unknown loss type 13 [ 199.098247][ T9931] netem: change failed [ 199.181361][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1162'. [ 199.181956][ T9938] syzkaller1: entered promiscuous mode [ 199.233368][ T9941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1160'. [ 199.242591][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 199.255073][ T9938] syzkaller1: entered allmulticast mode [ 199.267112][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 199.280742][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 199.317019][ T9941] netlink: 'syz.1.1160': attribute type 4 has an invalid length. [ 199.358132][ T9950] netlink: 'syz.0.1164': attribute type 27 has an invalid length. [ 200.471629][ T9999] sctp: [Deprecated]: syz.3.1180 (pid 9999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.471629][ T9999] Use struct sctp_sack_info instead [ 200.665174][T10008] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.707790][T10008] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.778349][T10008] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.858248][T10008] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.919258][T10015] netlink: 'syz.4.1184': attribute type 3 has an invalid length. [ 201.018778][T10008] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.034835][T10008] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.051460][T10008] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.082040][T10008] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.412605][T10025] @: renamed from veth0_vlan (while UP) [ 201.658870][T10039] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 201.721792][T10039] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 201.776256][T10050] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 201.787092][T10047] netlink: 'syz.4.1195': attribute type 10 has an invalid length. [ 201.795824][T10047] bridge0: port 1(syz_tun) entered disabled state [ 201.810218][T10047] bridge0: port 1(syz_tun) entered blocking state [ 201.817038][T10047] bridge0: port 1(syz_tun) entered forwarding state [ 201.829231][T10047] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 201.997422][T10039] lo speed is unknown, defaulting to 1000 [ 202.022468][T10058] netlink: 'syz.3.1197': attribute type 3 has an invalid length. [ 202.073696][T10039] lo speed is unknown, defaulting to 1000 [ 202.075883][T10060] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 202.110988][T10043] tap0: tun_chr_ioctl cmd 1074025677 [ 202.116516][T10043] tap0: linktype set to 804 [ 202.744079][T10092] IPVS: Error connecting to the multicast addr [ 202.924625][T10096] ipt_rpfilter: unknown options [ 202.931075][T10097] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 202.972274][T10102] syz.3.1210 uses old SIOCAX25GETINFO [ 203.073393][T10096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.245774][T10118] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 203.279750][T10096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.338354][T10122] __nla_validate_parse: 19 callbacks suppressed [ 203.338376][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 203.381712][T10096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.536547][T10096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.566332][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 203.568319][T10128] lo speed is unknown, defaulting to 1000 [ 203.584529][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 203.604353][T10128] lo speed is unknown, defaulting to 1000 [ 203.617354][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1219'. [ 203.777121][T10096] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.827586][T10096] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.864539][T10096] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.899059][T10096] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.492197][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1226'. [ 204.528512][T10128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1220'. [ 204.981600][T10169] lo speed is unknown, defaulting to 1000 [ 204.988477][T10169] lo speed is unknown, defaulting to 1000 [ 205.427430][T10177] lo speed is unknown, defaulting to 1000 [ 205.441463][T10177] lo speed is unknown, defaulting to 1000 [ 206.109056][T10220] SET target dimension over the limit! [ 206.172032][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 206.272874][T10212] tipc: Enabling of bearer rejected, failed to enable media [ 206.588271][T10236] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 206.621126][T10236] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 206.817945][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 206.879580][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 207.049525][T10252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 207.737018][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 207.775492][T10269] team0 (unregistering): Port device team_slave_0 removed [ 207.834140][T10269] team0 (unregistering): Port device team_slave_1 removed [ 208.610239][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 208.634977][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1267'. [ 208.775454][T10327] openvswitch: netlink: IP tunnel dst address not specified [ 208.906016][T10332] openvswitch: netlink: Message has 8 unknown bytes. [ 209.002928][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 209.170781][T10342] netlink: 'syz.4.1276': attribute type 2 has an invalid length. [ 209.203681][T10342] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1276'. [ 209.225106][T10342] openvswitch: netlink: Message has 44053 unknown bytes. [ 209.404069][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 209.480256][T10355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1282'. [ 209.580502][T10363] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1283'. [ 209.825235][T10375] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.1287'. [ 210.375325][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 210.496360][T10403] lo speed is unknown, defaulting to 1000 [ 210.522942][T10403] lo speed is unknown, defaulting to 1000 [ 210.753722][T10408] syzkaller1: entered promiscuous mode [ 210.782026][T10408] syzkaller1: entered allmulticast mode [ 210.866715][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 211.260417][T10441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.306019][T10480] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 212.405506][T10482] lo speed is unknown, defaulting to 1000 [ 212.412614][T10482] lo speed is unknown, defaulting to 1000 [ 213.685972][T10543] netlink: 'syz.4.1334': attribute type 12 has an invalid length. [ 213.786380][T10554] __nla_validate_parse: 15 callbacks suppressed [ 213.786403][T10554] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1338'. [ 213.986827][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 256.012705][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.455838][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.568137][T10577] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.576647][T10577] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.585098][T10577] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.593511][T10577] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.684048][T10575] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1346'. [ 324.850289][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 324.878086][T10588] lo speed is unknown, defaulting to 1000 [ 324.917129][T10588] lo speed is unknown, defaulting to 1000 [ 324.942115][T10594] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1351'. [ 325.070597][T10598] syzkaller1: entered promiscuous mode [ 325.076287][T10598] syzkaller1: entered allmulticast mode [ 325.216272][T10594] bridge0: port 1(syz_tun) entered disabled state [ 325.407232][T10594] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.419500][T10594] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.432834][T10594] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.448706][T10594] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.578737][T10604] bridge0: port 1(syz_tun) entered blocking state [ 325.585397][T10604] bridge0: port 1(syz_tun) entered forwarding state [ 325.607889][ T11] [ 325.610471][ T11] ============================= [ 325.615592][ T11] WARNING: suspicious RCU usage [ 325.620478][ T11] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 325.627761][ T11] ----------------------------- [ 325.633064][ T11] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! [ 325.642086][ T11] [ 325.642086][ T11] other info that might help us debug this: [ 325.642086][ T11] [ 325.652455][ T11] [ 325.652455][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 325.654201][T10604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.660756][ T11] 3 locks held by kworker/u8:0/11: [ 325.660796][ T11] #0: ffff888062ab3148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 325.660877][ T11] #1: ffffc90000107c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 325.660947][ T11] #2: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 325.706784][ T11] [ 325.706784][ T11] stack backtrace: [ 325.712940][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 325.712964][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.712976][ T11] Workqueue: bond0 bond_mii_monitor [ 325.713002][ T11] Call Trace: [ 325.713009][ T11] [ 325.713016][ T11] dump_stack_lvl+0x241/0x360 [ 325.713042][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.713062][ T11] ? __pfx__printk+0x10/0x10 [ 325.713093][ T11] lockdep_rcu_suspicious+0x226/0x340 [ 325.713119][ T11] dev_activate+0xf8/0x1240 [ 325.713147][ T11] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 325.713167][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 325.713191][ T11] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.713209][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.713226][ T11] ? __pfx_dev_activate+0x10/0x10 [ 325.713255][ T11] ? rfc2863_policy+0x10e/0x3f0 [ 325.713275][ T11] linkwatch_do_dev+0xfb/0x170 [ 325.713294][ T11] ethtool_op_get_link+0x15/0x60 [ 325.713317][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 325.713345][ T11] bond_check_dev_link+0x1eb/0x490 [ 325.713365][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 325.713399][ T11] bond_mii_monitor+0x49a/0x3170 [ 325.713425][ T11] ? __lock_acquire+0x1397/0x2100 [ 325.713448][ T11] ? bond_mii_monitor+0x174/0x3170 [ 325.713468][ T11] ? do_raw_spin_unlock+0x13c/0x8b0 [ 325.713495][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 325.713526][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 325.713550][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 325.713576][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.713612][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 325.713633][ T11] process_scheduled_works+0xabe/0x18e0 [ 325.713681][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.713712][ T11] ? assign_work+0x364/0x3d0 [ 325.713738][ T11] worker_thread+0x870/0xd30 [ 325.713773][ T11] ? __kthread_parkme+0x169/0x1d0 [ 325.713798][ T11] ? __pfx_worker_thread+0x10/0x10 [ 325.713819][ T11] kthread+0x7a9/0x920 [ 325.713833][ T11] ? __pfx_kthread+0x10/0x10 [ 325.713850][ T11] ? __pfx_worker_thread+0x10/0x10 [ 325.713872][ T11] ? __pfx_kthread+0x10/0x10 [ 325.713885][ T11] ? __pfx_kthread+0x10/0x10 [ 325.713904][ T11] ? __pfx_kthread+0x10/0x10 [ 325.713917][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.713933][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 325.713950][ T11] ? __pfx_kthread+0x10/0x10 [ 325.713967][ T11] ret_from_fork+0x4b/0x80 [ 325.713987][ T11] ? __pfx_kthread+0x10/0x10 [ 325.714002][ T11] ret_from_fork_asm+0x1a/0x30 [ 325.714037][ T11] [ 325.719716][ T11] [ 325.808728][ T11] ============================= [ 325.808742][ T11] WARNING: suspicious RCU usage [ 325.808754][ T11] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 325.808768][ T11] ----------------------------- [ 325.808778][ T11] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 325.924686][T10613] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1354'. [ 326.014011][ T11] [ 326.014011][ T11] other info that might help us debug this: [ 326.014011][ T11] [ 326.024349][ T11] [ 326.024349][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 326.032533][ T11] 3 locks held by kworker/u8:0/11: [ 326.037673][ T11] #0: ffff888062ab3148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 326.048735][ T11] #1: ffffc90000107c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 326.061785][ T11] #2: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 326.071566][ T11] [ 326.071566][ T11] stack backtrace: [ 326.077486][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 326.077510][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.077523][ T11] Workqueue: bond0 bond_mii_monitor [ 326.077547][ T11] Call Trace: [ 326.077555][ T11] [ 326.077564][ T11] dump_stack_lvl+0x241/0x360 [ 326.077591][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.077612][ T11] ? __pfx__printk+0x10/0x10 [ 326.077649][ T11] lockdep_rcu_suspicious+0x226/0x340 [ 326.077674][ T11] transition_one_qdisc+0x8e/0x1c0 [ 326.077705][ T11] dev_activate+0x838/0x1240 [ 326.077741][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.077763][ T11] ? __pfx_dev_activate+0x10/0x10 [ 326.077797][ T11] ? rfc2863_policy+0x10e/0x3f0 [ 326.077821][ T11] linkwatch_do_dev+0xfb/0x170 [ 326.077843][ T11] ethtool_op_get_link+0x15/0x60 [ 326.077870][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 326.077895][ T11] bond_check_dev_link+0x1eb/0x490 [ 326.077918][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 326.077958][ T11] bond_mii_monitor+0x49a/0x3170 [ 326.077988][ T11] ? __lock_acquire+0x1397/0x2100 [ 326.078016][ T11] ? bond_mii_monitor+0x174/0x3170 [ 326.078039][ T11] ? do_raw_spin_unlock+0x13c/0x8b0 [ 326.078070][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 326.078115][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 326.078143][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.078175][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.078217][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 326.078240][ T11] process_scheduled_works+0xabe/0x18e0 [ 326.078299][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.078334][ T11] ? assign_work+0x364/0x3d0 [ 326.078363][ T11] worker_thread+0x870/0xd30 [ 326.078406][ T11] ? __kthread_parkme+0x169/0x1d0 [ 326.078436][ T11] ? __pfx_worker_thread+0x10/0x10 [ 326.078462][ T11] kthread+0x7a9/0x920 [ 326.078477][ T11] ? __pfx_kthread+0x10/0x10 [ 326.078498][ T11] ? __pfx_worker_thread+0x10/0x10 [ 326.078524][ T11] ? __pfx_kthread+0x10/0x10 [ 326.078538][ T11] ? __pfx_kthread+0x10/0x10 [ 326.078559][ T11] ? __pfx_kthread+0x10/0x10 [ 326.078575][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.078592][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 326.078612][ T11] ? __pfx_kthread+0x10/0x10 [ 326.078632][ T11] ret_from_fork+0x4b/0x80 [ 326.078654][ T11] ? __pfx_kthread+0x10/0x10 [ 326.078672][ T11] ret_from_fork_asm+0x1a/0x30 [ 326.078710][ T11] [ 326.079033][ T11] [ 326.326639][ T11] ============================= [ 326.331605][ T11] WARNING: suspicious RCU usage [ 326.336468][ T11] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 326.343680][ T11] ----------------------------- [ 326.348541][ T11] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 326.357586][ T11] [ 326.357586][ T11] other info that might help us debug this: [ 326.357586][ T11] [ 326.367858][ T11] [ 326.367858][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 326.375951][ T11] 3 locks held by kworker/u8:0/11: [ 326.381163][ T11] #0: ffff888062ab3148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 326.392163][ T11] #1: ffffc90000107c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 326.405186][ T11] #2: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 326.415192][ T11] [ 326.415192][ T11] stack backtrace: [ 326.421189][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 326.421213][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.421225][ T11] Workqueue: bond0 bond_mii_monitor [ 326.421249][ T11] Call Trace: [ 326.421255][ T11] [ 326.421263][ T11] dump_stack_lvl+0x241/0x360 [ 326.421289][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.421308][ T11] ? __pfx__printk+0x10/0x10 [ 326.421338][ T11] lockdep_rcu_suspicious+0x226/0x340 [ 326.421361][ T11] dev_activate+0x925/0x1240 [ 326.421396][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.421419][ T11] ? __pfx_dev_activate+0x10/0x10 [ 326.421452][ T11] ? rfc2863_policy+0x10e/0x3f0 [ 326.421476][ T11] linkwatch_do_dev+0xfb/0x170 [ 326.421498][ T11] ethtool_op_get_link+0x15/0x60 [ 326.421525][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 326.421550][ T11] bond_check_dev_link+0x1eb/0x490 [ 326.421573][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 326.421613][ T11] bond_mii_monitor+0x49a/0x3170 [ 326.421643][ T11] ? __lock_acquire+0x1397/0x2100 [ 326.421670][ T11] ? bond_mii_monitor+0x174/0x3170 [ 326.421694][ T11] ? do_raw_spin_unlock+0x13c/0x8b0 [ 326.421725][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 326.421761][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 326.421789][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.421820][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.421863][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 326.421886][ T11] process_scheduled_works+0xabe/0x18e0 [ 326.421944][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.421977][ T11] ? assign_work+0x364/0x3d0 [ 326.422014][ T11] worker_thread+0x870/0xd30 [ 326.422056][ T11] ? __kthread_parkme+0x169/0x1d0 [ 326.422093][ T11] ? __pfx_worker_thread+0x10/0x10 [ 326.422119][ T11] kthread+0x7a9/0x920 [ 326.422133][ T11] ? __pfx_kthread+0x10/0x10 [ 326.422153][ T11] ? __pfx_worker_thread+0x10/0x10 [ 326.422179][ T11] ? __pfx_kthread+0x10/0x10 [ 326.422193][ T11] ? __pfx_kthread+0x10/0x10 [ 326.422215][ T11] ? __pfx_kthread+0x10/0x10 [ 326.422230][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.422247][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 326.422267][ T11] ? __pfx_kthread+0x10/0x10 [ 326.422286][ T11] ret_from_fork+0x4b/0x80 [ 326.422309][ T11] ? __pfx_kthread+0x10/0x10 [ 326.422326][ T11] ret_from_fork_asm+0x1a/0x30 [ 326.422366][ T11] [ 326.423205][ T11] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 326.672313][ T11] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11, name: kworker/u8:0 [ 326.681434][ T11] preempt_count: 0, expected: 0 [ 326.686315][ T11] RCU nest depth: 1, expected: 0 [ 326.691416][ T11] 3 locks held by kworker/u8:0/11: [ 326.696543][ T11] #0: ffff888062ab3148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 326.707566][ T11] #1: ffffc90000107c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 326.720701][ T11] #2: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 326.730428][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 326.730445][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.730453][ T11] Workqueue: bond0 bond_mii_monitor [ 326.730469][ T11] Call Trace: [ 326.730474][ T11] [ 326.730485][ T11] dump_stack_lvl+0x241/0x360 [ 326.730511][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.730531][ T11] ? __pfx__printk+0x10/0x10 [ 326.730561][ T11] __might_resched+0x5d4/0x780 [ 326.730579][ T11] ? preempt_schedule_notrace+0xf6/0x140 [ 326.730592][ T11] ? __pfx___might_resched+0x10/0x10 [ 326.730607][ T11] ? __pfx___schedule+0x10/0x10 [ 326.730621][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.730642][ T11] down_read+0x8e/0xa40 [ 326.730657][ T11] ? dump_stack_lvl+0x273/0x360 [ 326.730670][ T11] ? preempt_schedule_notrace+0x100/0x140 [ 326.730682][ T11] ? __pfx_down_read+0x10/0x10 [ 326.730697][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.730709][ T11] ? __pfx__printk+0x10/0x10 [ 326.730723][ T11] ? dev_get_flags+0x147/0x1d0 [ 326.730738][ T11] wext_netdev_notifier_call+0x1f/0x120 [ 326.730756][ T11] notifier_call_chain+0x1a5/0x3f0 [ 326.730776][ T11] netdev_state_change+0x11f/0x1a0 [ 326.730791][ T11] ? __pfx_netdev_state_change+0x10/0x10 [ 326.730812][ T11] ? rfc2863_policy+0x10e/0x3f0 [ 326.730826][ T11] linkwatch_do_dev+0x112/0x170 [ 326.730839][ T11] ethtool_op_get_link+0x15/0x60 [ 326.730855][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 326.730870][ T11] bond_check_dev_link+0x1eb/0x490 [ 326.730883][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 326.730904][ T11] bond_mii_monitor+0x49a/0x3170 [ 326.730921][ T11] ? __lock_acquire+0x1397/0x2100 [ 326.730937][ T11] ? bond_mii_monitor+0x174/0x3170 [ 326.730950][ T11] ? do_raw_spin_unlock+0x13c/0x8b0 [ 326.730968][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 326.730988][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 326.731005][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.731022][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.731046][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 326.731060][ T11] process_scheduled_works+0xabe/0x18e0 [ 326.731098][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.731119][ T11] ? assign_work+0x364/0x3d0 [ 326.731136][ T11] worker_thread+0x870/0xd30 [ 326.731159][ T11] ? __kthread_parkme+0x169/0x1d0 [ 326.731176][ T11] ? __pfx_worker_thread+0x10/0x10 [ 326.731191][ T11] kthread+0x7a9/0x920 [ 326.731200][ T11] ? __pfx_kthread+0x10/0x10 [ 326.731212][ T11] ? __pfx_worker_thread+0x10/0x10 [ 326.731226][ T11] ? __pfx_kthread+0x10/0x10 [ 326.731235][ T11] ? __pfx_kthread+0x10/0x10 [ 326.731247][ T11] ? __pfx_kthread+0x10/0x10 [ 326.731256][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.731266][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 326.731278][ T11] ? __pfx_kthread+0x10/0x10 [ 326.731289][ T11] ret_from_fork+0x4b/0x80 [ 326.731303][ T11] ? __pfx_kthread+0x10/0x10 [ 326.731313][ T11] ret_from_fork_asm+0x1a/0x30 [ 326.731338][ T11] [ 327.032403][ T11] [ 327.034787][ T11] ============================= [ 327.039643][ T11] [ BUG: Invalid wait context ] [ 327.044484][ T11] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Tainted: G W [ 327.053058][ T11] ----------------------------- [ 327.057906][ T11] kworker/u8:0/11 is trying to lock: [ 327.063186][ T11] ffffffff8fec9dd0 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 327.072705][ T11] other info that might help us debug this: [ 327.078588][ T11] context-{5:5} [ 327.082077][ T11] 3 locks held by kworker/u8:0/11: [ 327.087209][ T11] #0: ffff888062ab3148 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 327.098115][ T11] #1: ffffc90000107c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 327.110994][ T11] #2: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 327.120671][ T11] stack backtrace: [ 327.124384][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G W 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 327.124402][ T11] Tainted: [W]=WARN [ 327.124406][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.124415][ T11] Workqueue: bond0 bond_mii_monitor [ 327.124429][ T11] Call Trace: [ 327.124435][ T11] [ 327.124441][ T11] dump_stack_lvl+0x241/0x360 [ 327.124454][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.124466][ T11] ? __pfx__printk+0x10/0x10 [ 327.124479][ T11] __lock_acquire+0x15a8/0x2100 [ 327.124499][ T11] lock_acquire+0x1ed/0x550 [ 327.124515][ T11] ? wext_netdev_notifier_call+0x1f/0x120 [ 327.124532][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 327.124547][ T11] ? preempt_schedule_notrace+0xf6/0x140 [ 327.124560][ T11] ? __pfx___might_resched+0x10/0x10 [ 327.124573][ T11] ? __pfx___schedule+0x10/0x10 [ 327.124585][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.124602][ T11] down_read+0xb1/0xa40 [ 327.124615][ T11] ? wext_netdev_notifier_call+0x1f/0x120 [ 327.124630][ T11] ? dump_stack_lvl+0x273/0x360 [ 327.124641][ T11] ? preempt_schedule_notrace+0x100/0x140 [ 327.124652][ T11] ? __pfx_down_read+0x10/0x10 [ 327.124666][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.124677][ T11] ? __pfx__printk+0x10/0x10 [ 327.124687][ T11] ? dev_get_flags+0x147/0x1d0 [ 327.124700][ T11] wext_netdev_notifier_call+0x1f/0x120 [ 327.124715][ T11] notifier_call_chain+0x1a5/0x3f0 [ 327.124732][ T11] netdev_state_change+0x11f/0x1a0 [ 327.124747][ T11] ? __pfx_netdev_state_change+0x10/0x10 [ 327.124763][ T11] ? rfc2863_policy+0x10e/0x3f0 [ 327.124775][ T11] linkwatch_do_dev+0x112/0x170 [ 327.124787][ T11] ethtool_op_get_link+0x15/0x60 [ 327.124803][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 327.124818][ T11] bond_check_dev_link+0x1eb/0x490 [ 327.124829][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 327.124843][ T11] bond_mii_monitor+0x49a/0x3170 [ 327.124856][ T11] ? __lock_acquire+0x1397/0x2100 [ 327.124871][ T11] ? bond_mii_monitor+0x174/0x3170 [ 327.124883][ T11] ? do_raw_spin_unlock+0x13c/0x8b0 [ 327.124897][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 327.124910][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 327.124926][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.124942][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.124960][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 327.124973][ T11] process_scheduled_works+0xabe/0x18e0 [ 327.124993][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.125008][ T11] ? assign_work+0x364/0x3d0 [ 327.125022][ T11] worker_thread+0x870/0xd30 [ 327.125051][ T11] ? __kthread_parkme+0x169/0x1d0 [ 327.125066][ T11] ? __pfx_worker_thread+0x10/0x10 [ 327.125080][ T11] kthread+0x7a9/0x920 [ 327.125089][ T11] ? __pfx_kthread+0x10/0x10 [ 327.125099][ T11] ? __pfx_worker_thread+0x10/0x10 [ 327.125112][ T11] ? __pfx_kthread+0x10/0x10 [ 327.125121][ T11] ? __pfx_kthread+0x10/0x10 [ 327.125131][ T11] ? __pfx_kthread+0x10/0x10 [ 327.125139][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.125150][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 327.125166][ T11] ? __pfx_kthread+0x10/0x10 [ 327.125182][ T11] ret_from_fork+0x4b/0x80 [ 327.125204][ T11] ? __pfx_kthread+0x10/0x10 [ 327.125220][ T11] ret_from_fork_asm+0x1a/0x30 [ 327.125247][ T11] [ 327.452114][ T11] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 327.461444][ T11] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11, name: kworker/u8:0 [ 327.470457][ T11] preempt_count: 0, expected: 0 [ 327.475437][ T11] RCU nest depth: 1, expected: 0 [ 327.480446][ T11] INFO: lockdep is turned off. [ 327.485500][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G W 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 327.485519][ T11] Tainted: [W]=WARN [ 327.485523][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.485531][ T11] Workqueue: bond0 bond_mii_monitor [ 327.485550][ T11] Call Trace: [ 327.485555][ T11] [ 327.485561][ T11] dump_stack_lvl+0x241/0x360 [ 327.485576][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.485587][ T11] ? __pfx__printk+0x10/0x10 [ 327.485600][ T11] __might_resched+0x5d4/0x780 [ 327.485616][ T11] ? __pfx___might_resched+0x10/0x10 [ 327.485629][ T11] ? br_get_link_ksettings+0x36d/0x420 [ 327.485646][ T11] ? rcu_is_watching+0x15/0xb0 [ 327.485659][ T11] __mutex_lock+0x126/0x1010 [ 327.485672][ T11] ? lock_release+0xbf/0xa30 [ 327.485689][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 327.485703][ T11] ? rcu_is_watching+0x15/0xb0 [ 327.485715][ T11] ? tee_netdev_event+0x86/0x460 [ 327.485727][ T11] ? __pfx_lock_release+0x10/0x10 [ 327.485743][ T11] ? __pfx___mutex_lock+0x10/0x10 [ 327.485755][ T11] ? do_raw_spin_lock+0x14f/0x370 [ 327.485771][ T11] ? net_generic+0x1f/0x240 [ 327.485783][ T11] tee_netdev_event+0x86/0x460 [ 327.485795][ T11] ? nft_offload_netdev_event+0x27d/0x360 [ 327.485809][ T11] notifier_call_chain+0x1a5/0x3f0 [ 327.485825][ T11] netdev_state_change+0x11f/0x1a0 [ 327.485841][ T11] ? __pfx_netdev_state_change+0x10/0x10 [ 327.485857][ T11] ? rfc2863_policy+0x10e/0x3f0 [ 327.485868][ T11] linkwatch_do_dev+0x112/0x170 [ 327.485880][ T11] ethtool_op_get_link+0x15/0x60 [ 327.485896][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 327.485912][ T11] bond_check_dev_link+0x1eb/0x490 [ 327.485923][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 327.485937][ T11] bond_mii_monitor+0x49a/0x3170 [ 327.485950][ T11] ? __lock_acquire+0x1397/0x2100 [ 327.485965][ T11] ? bond_mii_monitor+0x174/0x3170 [ 327.485977][ T11] ? do_raw_spin_unlock+0x13c/0x8b0 [ 327.485991][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 327.486005][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 327.486020][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.486037][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.486057][ T11] ? process_scheduled_works+0x9c6/0x18e0 [ 327.486070][ T11] process_scheduled_works+0xabe/0x18e0 [ 327.486090][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.486105][ T11] ? assign_work+0x364/0x3d0 [ 327.486119][ T11] worker_thread+0x870/0xd30 [ 327.486136][ T11] ? __kthread_parkme+0x169/0x1d0 [ 327.486151][ T11] ? __pfx_worker_thread+0x10/0x10 [ 327.486165][ T11] kthread+0x7a9/0x920 [ 327.486174][ T11] ? __pfx_kthread+0x10/0x10 [ 327.486183][ T11] ? __pfx_worker_thread+0x10/0x10 [ 327.486197][ T11] ? __pfx_kthread+0x10/0x10 [ 327.486206][ T11] ? __pfx_kthread+0x10/0x10 [ 327.486215][ T11] ? __pfx_kthread+0x10/0x10 [ 327.486224][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.486234][ T11] ? lockdep_hardirqs_on+0x99/0x150 [ 327.486246][ T11] ? __pfx_kthread+0x10/0x10 [ 327.486256][ T11] ret_from_fork+0x4b/0x80 [ 327.486270][ T11] ? __pfx_kthread+0x10/0x10 [ 327.486279][ T11] ret_from_fork_asm+0x1a/0x30 [ 327.486302][ T11] [ 327.486838][T10604] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 327.818451][T10604] chnl_net:chnl_net_open(): state disconnected [ 327.824964][T10604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.