last executing test programs: 10.7414849s ago: executing program 3 (id=1217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000005c0)) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x2a21, 0x4) (rerun: 32) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c00)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x1, 0x4048800) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3, 0x10001}, &(0x7f0000000040)=0x10) (async) r2 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001180)={@empty, @dev={0xfe, 0x80, '\x00', 0x8}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0xc000, 0x4, 0x0, 0x7, 0x45330304}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r5, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x7, 0x24e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r6, 0x0, 0x49}, &(0x7f00000000c0)=0xc) 10.614792105s ago: executing program 3 (id=1222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x4686, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 10.513425578s ago: executing program 3 (id=1224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x2, 0x3, 0x6e, 0x65, 0x1, 0x4, 0x6, 0x7e6, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, {[@end]}}, "73b3f28d"}}}}}, 0x0) 10.391046662s ago: executing program 3 (id=1225): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/97, 0x61, 0x0, &(0x7f0000000140)=""/193, 0xc1}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e00000000e6000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c000180080001c008000000050014002010000005000500020000000500010006"], 0x68}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x18, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x0, 0x8, 0x2, 0x9, 0xfffffffffffffffc, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f0000000400)='GPL\x00', 0x1, 0x2d, &(0x7f0000000440)=""/45, 0x41100, 0x18, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xb, 0x8, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x69, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, r8, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 10.319232252s ago: executing program 3 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) 10.12267116s ago: executing program 3 (id=1232): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) recvfrom(r1, &(0x7f0000000080)=""/95, 0x5f, 0x121, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r4, 0x0, {0x2, 0xff, 0x4}, 0x1}, 0x18, &(0x7f0000000200)={&(0x7f00000001c0)="29ba7d66b7f4cc6b26b4d28a2a2b6c", 0xf}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000300)={0x3}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "50ae638c31c32a41", "c87e507fa32048b8dc45ab9e6df2af87", "d2c597b4", "14bce643ffd907a2"}, 0x28) r5 = socket(0x8, 0x80000, 0x5) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000380)=0x7, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x1}, &(0x7f0000000440)=0x28) getsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f0000000480)=""/125, &(0x7f0000000500)=0x7d) pipe(&(0x7f0000000540)={0xffffffffffffffff}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000580), 0x4) gettid() r7 = socket$netlink(0x10, 0x3, 0x5) sendmmsg$inet(r7, &(0x7f0000002740)=[{{&(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000600)="a52395e6800ac9aa71e2e860da8fcfac6c13db0fae8760fc560e77748cc8e7ba7fd29051324d89866866261212cb54a44af4169722693bb7c9086e15b25027ebf3310d4d46dbb8a35062df", 0x4b}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="e2e7e4465b24b1345276dce7e76ce2b8113eb737af75690dab2bc12a11f5540ad0a570bde5f1184609900e73299d03e6e0c4352b43a68d292a2260d0cdb9c2b4fa4b880717b2107a84ba643123301870fef5e2e41ad93dc3640d7d1e98d3a7b36b24d2755befdce4ea36fe7730d49a7527f3042037d023d73fef97e1b45829d6f73568438a1ed459f5023416b6e5fc01b8e1d328a081bb9edd8488ca43b8257ff3de6d35", 0xa4}], 0x3, &(0x7f0000000880)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x22, 0x1, 0x8, [{@empty, 0x9}, {@multicast1, 0x3}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0x18, 0x8d, 0x0, 0x8, [0x5, 0x0, 0x5d, 0x7, 0xd9]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x3f, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xed6}, {@remote, 0xa}, {@multicast2, 0x10001}, {@multicast1, 0x9}, {@multicast1, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6f}, {@private=0xa010100, 0x4}, {@broadcast, 0x5}]}, @lsrr={0x83, 0xb, 0x6f, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "d1fc"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x2b, 0x3, 0x5}, @timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x7}, {@remote, 0x7}, {@multicast2, 0x3}, {@local, 0x9}, {@broadcast, 0x7}, {@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}]}, @lsrr={0x83, 0x7, 0xca, [@broadcast]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x7, 0x6, "c62a082a"}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x19, 0x0, 0x9, [0x4, 0x81, 0x8fe, 0xb999]}, @cipso={0x86, 0xd, 0x3, [{0x7, 0x2}, {0x6, 0x5, '3$E'}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xf, 0x7a, [@multicast1, @loopback, @broadcast]}, @ssrr={0x89, 0xf, 0x34, [@private=0xa010102, @empty, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}], 0x218}}, {{&(0x7f0000000ac0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b00)="cc946c4f82acadc14e663894bdf1f5cf8ee7e9634c1a83b512f3c220524de19d1cc91553863865ba6ff1ffce87a01f5cfe455237b84e4417efb363f36bf94d04a81f09475335e9612359071cce7654dd6a7464214fe014e769b66a58ddee0307d1", 0x61}, {&(0x7f0000000b80)="85289702c861a98bb96b68978297c58035c77d34b0b8c6b0", 0x18}, {&(0x7f0000000bc0)="60335faec36e344e9c3b08868a34d9e6144613483646a45d0114177eb9d019e3798e2478e04b0efc281199125e09d91c1148ab4da64b8c74d6c936f49fde2f2c8e72d383aa1c996fef81ed14ee32032d3246583f4997b405d5ecbfaaa7ec01c69a91acfad03cab0cea4b3e854d7519774ab75ee8ef63b99f8d31a1d3fbc88d97648b29f81395271e050304c1b7e764ee10b0e1a5b9d09508bc0a068a7629ed4e936b67b758a6130c8fb47075243e54612ca841c523e52d2f2e2e00c579b00d8adbbc2b", 0xc3}, {&(0x7f0000000cc0)="a18ddf63b53b7c07eae2c697badd51e79865b7c511638dedcb8fe0d6f0dc956d067bd7d4", 0x24}, {&(0x7f0000000d00)="4677e9954d02b07d8da8b5d4a96d125275ae2524cae6f61fc217a07ab2a723071b0fe141e8bf150628478d64ea32570901a40da66e2768c17684582e1df2bc7119aa01c89a83b2023f77f344db16016fe08b51cb5ecd4b0edc0f3a212451768894fd821c01a87000ad364a361a8918d55ccecc7e08f7934dfafc8d5414639ac198826802f5c85282197c9c655dfe56b3", 0x90}, {&(0x7f0000000dc0)="b6fb44d676a9ba4652dbee24b4ac247600f72b135267635a434a257b7c042e87fcc67461c5b27e6a8edd4913b984638e6916f959ced179e871c452d0dd671f8ca0bb59f4eb5c9934f8c55b534eeedd1d7aafd06a6d91cbeffd9edf943395114cae5a040960fe9459b31dfda5217ee29a1dc7c05428b0f1bc8dca9610e5dd2814055e6255", 0x84}], 0x6}}, {{&(0x7f0000000f00)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002200)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="4eaab540b7aceee2299457bb7135f5a52021167b8c548fc5050098f94105024ff0f4c4ef651172b8afd8eea748bdbdbd6e68", 0x32}, {&(0x7f0000001f80)="dcbd78747e45ee290c776d3fc1d0688148beb572635c51d2cadb7766594e21c42e2946a55ea4e10a5da51e9378f00555890826d6f72857a217efc7ed207fa146597d9df3eacf1cdf33bd8b10d2fa3572b040f2b52df5c489102eade9b06d63a8f25e81a4501a332c", 0x68}, {&(0x7f0000002000)="7d1f6c54d062c10a336da8cfff4760c60b4722b163fd5d1f3d24e8481f55d64c31b40ed57f3dd21922a1beccb812e6ab430e44a1", 0x34}, {&(0x7f0000002040)="f94355bde5ad1b4423145a71cefe77c028ab6574534998d78eaedafe498d083792fd352659bc875c2a5bc098b297bc6d40764f958c14f21063814e1c5259c2295225966a795b6ad46db88ba566be415517f954c7aa4ca279feb999743674d723d179bdc99666aedcb9fe4147dd03c86cc49159fd7de17814e9b2df00fdba980dc688f0e2b6875de55f29843ee385cf1a35127a8973", 0x95}, {&(0x7f0000002100)="0da1e8cf3ec6ee35f2c99536fe746bd68d42b19ab91216f7ca3fc1d07898f1e87aa025f103f0168350902d552d11818302ebc17096a460d0e23d8728c085e04440fb1662fbe9c34bbf676fb6c2e7469548dd330113e3a429eb6c2e4fcd840a7321807aecc6241ecf00a00d551c3fe7f7deb06fc4d59c1a78211f2b717cf92ae24b8d49edd757694bf8ed3fb4ee275d31dd81f6cc19a8756e42a2d4e2603c4a77e8cc54bf3a9ddbf88fe077ab32745e62ebbb9b31ba040589509375e24a7dd7ac17356f92e2c49404ad127cd6fd62f5e9f5605e6a1060e7d096391b", 0xdb}], 0x6, &(0x7f0000002280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x3c, 0xd, 0x1, 0xe, [{@multicast2, 0x100}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0x7fffffff}, {@local, 0x7}, {@multicast2, 0x7cf}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@local, 0x228}]}, @end, @generic={0x94, 0x8, "ec7e27f7edf8"}, @lsrr={0x83, 0x7, 0x55, [@multicast2]}]}}}], 0x78}}, {{&(0x7f0000002300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000002340)="476d60411cd63b4a2f00429583f47ab05f766411852d95d1df2d6d94e18f1ed36dc7fb9b1d72395e9e4dd15e5f6af99dbd3a18737e65960fb43688233d25a4a82f160594ab668a1c01b61296a89ddb293e776ff41a309f4463445a0aa6f9003d371f9afecca6515a8f66c1fbc072a73d905985bcaf1387d01f96398497cf5ea7f7189779cecc5f757a113c54966affc34bd61f9cc86862eefdd3cd8e2cb0b0ba797ad3fba0cdc55908bebfeabc9125a6be0c8d2c8e75fe55c16df2bf4266769d4d0c720b21a2934ea32e98eb27863d47f0cb0294", 0xd4}, {&(0x7f0000002440)="02917399fa11073c6f480b597653e796a20685dc4c216e9a1c6803e003b9f1ca55286cf939a0c0882ae3a7bbe4b3b6ec8e3cc4b0644f340315e65d652a80dda6b3e321e9bc36", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002500)="a1b382c2e360b0707fa300b478ce98ddd8a49afae47e91125a76cdf5878086d7daed1c58f6fbcbd1007026b88bd43ff100dab657a10b2934162289a14e5d476f952885bb844a3c39ba16bed5d95197bc1df717ce54ba480c890a607f95f9a47daaefc875f87cc817068e9c78506d86da1ca2aebfb1c5882421ea29396026cfae7d401395635c35b949c8e26bbf7e03248f15af10d6e06ad7202b24086a53113b3f0a4bfbb7b656e720a1d086fd34dd09443c611e2d", 0xb5}, {&(0x7f00000025c0)="52383a57f94c1e1b6182af27bfbc1efb8e7927f319f18790d13393ea8d8489e2cd616e65547c98003a646594cee9f6c53b0699be7a1c4ea1af6cf36b4a6eedf55ab921", 0x43}, {&(0x7f0000002640)="ecd173058ea038f48010f8a73858c95141ef698d32aabad0589accb986347a45760e1eba0dcd17107c69cb4692857b7a6ba78e6bb57532cc084e395d456d25eb155bc73b24e558e3a1ac2891d3e917b36ecd9d2af964e8f1df1ec8d8e92c9dd4ecb52e5756b61b2518a77783a81dbaae6d22e340fe7dac80a0063caa36cc8e56013241a6bfaf75c35b31c1fc1468b1d01be9de1c8477d9bd67dcb24a05198a597dd0cae0703f7798dc2b4ac869b561f00fc04ec6db6b", 0xb6}], 0x3}}], 0x5, 0x24040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000028c0), r6) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000002980)={&(0x7f0000002880), 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) r10 = openat$cgroup_ro(r0, &(0x7f00000029c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@bloom_filter={0x1e, 0x8, 0x0, 0x3, 0x1008, r2, 0x9, '\x00', r4, r11, 0x4, 0x0, 0x1, 0xb, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000002b40)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002b80)={'wlan0\x00'}) r12 = openat$cgroup_int(r10, &(0x7f0000002bc0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000004c00)={0x0, 0x0, "bef01c56af5331370ac84fdd7186b2ad141932611b323de3fbfe3537b541c0356fba55e666b4037aed07fcf8cfb68ea21ef9a8558f038a6586e553ca90d91dae93664e9a5ad09e7eeca0118635238c432b8bf3e2dcc82421c10ab10d411d0c974a9a9e544bc371ada85cd7db7dcac62bdac414b04f48ff6d85fa517ad270a7fd9f54bb08df37da09390e2312e66302df2d69e6636b6feaa3c1eb0785de357d519edad33877f8ab33f42c598b17d3621d8517f7fca7b581b64066dbb71f41de3cd4c43e227ed1d820cd48f8a3a3be3237d7f42ca88ba82794bce963b5993dc3a3274f9675edc72ad0ea55e084989891ea3d9f9b150c0dcb3a8fa94af891d98dfd", "97619e817be744a03faa6fc5d2814846622184ffb74518661f790b19bed22712e36853ab42608d05cd93da85c5ac444d248d0cca9994d8a81e7fd1719bf3bb4941c144f1cb280334c64cf18844adbb492971efef5ab83fe141c5d7bc54aebe1e0875f2a6887517fa14bd765e5bbd668597b08c99b1061b50f5405d1965f5b5218d774a50dc979e3425b412c97acdc77238b7eec80f5c304e523e28789ba3d2721c984ced112d1d8f3e382872e6ed609f154b3b6381509872d6fb0962a307d05748b42218d978addb0c6695ea97eafeebc615c61a2b6cf39b52cf0f64f95a1dcc83aa462c82d10948235989df2bde77c56767036b56ab843d1ba9fde5fb1012ece86fa94d60f8f8add26e111211015426e139958b92da0158863b12569549bc65ed023d77f6b642cb453bd22b9c0e558557782cfbe2f5cbee888713b04672696160c337088d58eeb79644c6ba2e27f8edfcdccecf26accfa1234e472b4635ca12f87ca226f923071c53c77884d06ee1203a3bb3d6a187aa4eaf557dacce15134deb4cb40686b902141faccfff375e9d0ab19002afd7c1ea69c5fed2c15de11b62cd09566cb5b06db78376ca6ba42696b44ee4bc6eae1cde2bd05c44bfbd818cb5ebd9bde80cde2774efa0c1353c671c80a790b4909dd3ca27ad7c0e938aeba506cafef0d0533a8f0681b5d1ee9163418138f395e9ed6dd88e2759d7da7d06b1af3d5f12365f82051055ee0b1a6a12070e939ef0608dc7d4b0cd134d4ee7d54076a5b312b658dad2a4fb446d492e8a7564f09629d133df19f76583fe7653eba5cb721fa2fde537d64f862019fdede60e7f6d6e8f729836a2e7486fd1c438665e904e9a5e4ab66b4c0f4c931419ac8e7b2d337d7c596c128927965ee03656f780c4888ee6f6372f8d78e189db4358126237daf8164d9b5f612094f11d6bf2f3a7dfcbf582ced8daf6b1b6b787176e192b45d3bdf8b125f592ae7d5a321e1a62459f29408b45e3c516f2e847ba9f7d2406236577726fef282e1db54cba262af189a9f7f1e190273c08f0dcc0468960525eddbeb9c7ff2c8489e244a92e6d9163d55d1984e0a7170afd17c74fccbdc8dea6c7fb78c39387f8f4db0b5e50ae223a6a50c3b6b6c9d93ba2e01763fee438e5c1078c6bcd3d224c7525740aa866a44b56f80e37c2aca23d283d51ee622a54cab10d32758bf8a86a75f1f88306140effd2f7ee17bcef6b91e475555a82e3c68d8c40c9e425f125b8c4d34a5ee9aa6368f4692f71f47210aedece63698a7c45ac7cd83cb589c9eb021d1500f53a22b6c274c3fb1101a3a68a16f8655aab4c93ebe1a4bc9ac5a97ba87c1900fde2cd4c382b24c275e4f2d42d11e676f5df038cfb827fdadc172dcd8d13c64866f388b59171f26f1a7ef928f13c4ec9854cf185c7fb3b3afaa1b85212a5cdeeaf81a46b7cb42ce614267db09a3c0d590e15d39328172342d6f28ec3f535cd730b0f893e559392a0b861cf72ae6de47ccd948d163fba11e17747549da463505d26f689d0deec8c057c3c2178b252f6db45f93ac9e5cd8feca321b01a7bcc509628c9df31067aee6d44aceb7bad7acae0049e7027160e6695df784ab63f42b289a2a969b9060331f3db9a7ecbf85dc017b7a81834d8cde500594228522aa6435261e0dd68ea77eef7dfb26f01c252a33619f32708c442e2328a8499da49715e68361fe3b2f17b303e1ae47b14c8b7c8ad14178f5cc8665fa13fcf50045d54a844562c36fa0dbf0b0dc1d24e5c5b06f55024a94c9b17c94beb86671a588a12d03fe7f03ee52ca7c630bcc97a9348c45c8475c6efbd96c287e9dfc54b724249b9678c2d2f35d9c74164cd1cd654dae81e152dab8dad4578f909132850f8a1cc233136f4be7ea0e9b203c2076f90a5943f10a3af57dc2fbbaa45cc7c68a6019596a009b38b9e9f43e613cc4a38ba1792939f62e591bed8cd766730d833e37089862931b2c1ab9166d11d4ca95286592059158887e24e7a0d909dc118bcca411dd1cabf1e4d648bd1db1dc305e5667b67f731b48c34a819f7a96483d75bda76b44b263c2d0127dbbc30f9ef7aef2bbfbfc7b9ea19e5713f314414640b0a34d89b022796bf7af8513195d096b1dfffe32cb812cfd371e277e5fbc1978abe51797006ea8a46600e10dbc45ded2a0ea46e82772bea338329c6d16361f56644220f62c45967431328e8ba85fdcdd199788428bfaf478fba2bb858a11e7bfaea6367a1308508b6601e1e37e813880c504234ef95a87d2879867adb23ada57a5a81367282ef91471ad4905ba2be6b492c03e20eeea5b6dc46b3b6c285bc065b0e2ef0e5059fafec24e6516a6e2fc9004ae251550553bdbec80166a3474964a146f6e9a97d7f0c1158c03a06130ddae3916f1d38f817c4fae733311abd7f3e731f6133cbfe20fa94bd3b230864ee106e53095441954fc5ad5517354252107239312e6d71486a6253d3ec7571251faee2d7029198b2b9d0aff353c53632ef12bf040aa5267f19f2ad3b5b5a65ddda73068b81a31ca61fddb24f2450f20d4fe187045815cdeaae4acee675a4f60f7d46717a0cd9d80fd971f79fdb8e475bc4cd1ed6f7cd2c6d16db7d89c7eac46662f1ca5645695df1542f555278e76a236e7ba264da54052f7c99bc0da62d410be0761f0da24592f7f8b58105b09618458183b7bb6f4c9c767ad2e5121f7bf72753d9dcafe9160ffa334a3c99695f4b7381571af8ecae74863b487b3c68ea18a60a51d331ec8a29b9212f63ee887ce44bdf8943899304b4d902ca50988676172e89c9772e37f3c66b61058b529509997095c64352c492da6ac6018758e67e07609eb9c4bf8a4ec787d0f144a24dfa050fe6386bad191f626372d81d137e24a154f5f4f8257f719d5733a62755555204ca60b2cfe10135ee43e34cdfd92be181ecfdc9d1b2c417dd87d4c8303f26a6e80a748950a553a8dcffa698eceff00d2418f176ad1db924853f3ce94c6000ade685fdecb01bcfb570487b9b8f636254acc810988946d35ccc3019b01ce5d37790a20146bb421d040aec5e3cc9aaed6b1c1612521d2f3f980c4bbe098c10cb781c16a34dc340178a479403eaab5bb8a0475efb8ea75d2ddb431d0463c102b7440dc64c84ab55685e0d184b6949377ee31ea3b728b6466ca1f2598fdf11044e49fcd434e5d8a51e1cf9661a4d2972a4ff77c83a961125a319972e2884ca88be8ac650c43f00bba934cb4693e24a04dc540d12e9cac9dbcb511879286cc0504498e12092681459594b70bd51c86363795eb7f2dace06d83543ca3e0990a2f70f6d33925e36faff1f365f47e9289b1cb497cb08b957615236ec5a96cf558b3fb5273f132ab07ab7c3dfa39f31ea25a7ba668ac1f9047831beec5c8f262eeab4b45462fbaa979de15ca1477a7be897928ac9870ee872c0c81cf514e35e55dba43935c7e0e3302915fd6c0522263b9354fb8fde7f076da408aa747b9bc3583c234223c3b6da9df282b1320ac0b6c071672ff84fed3d6c924d9bfb5606cecd6eface97289f276ee4259308186d2c74f2317f45714fae1194c1bb2e172db056e792d1f073f91f548efed418a0d376a4c13372d731d0a19871ec45d2eeed75f7d0d280c1a0ed9c2c535ddf7f2a1b43790447c75cc66bea09964b4d1fb6d1c3dd1bf96c12cf4cb91e20ca6a10ae914090e8887517cdd14c23f6854ee6bd30392dcae917baa7b24024047a729850cd6eed680a63567b340822d6fa296137d64559407bfabe30eb74c8e57a67ad2f3fdc0508159536415fc57b4962f939281c42ac28bd3972d3fb9738181470f8f5bb7c4a45ccb25d4db956904ee33983ab420c739c9301e215dc6cb88974be1abdf73753bc9f77eeecd44f64e4c6df7e632471d3a544dfbf9a5133f8aeaf52a6e8b54297785c65eaad3bf2459e24bd9f53d676b985bda99c5c159d7152ab4b02c31a175bb1a033194f6f87c7b1bcd91835a43737a67877809d7d554deeda4b53ea3956bf2e4fb69e6457165273c0fed2d9b9fa547d5290c431fb50c2aeb5684686d11fec4fbff9e4da09e2cb44c4e4023ed6150b19a7123b6792114cdf9fb91a2d51138332a73d25cd907c0affd0cc8a1278392e3eada245770e9d1d7c2f46991e899fa9bcb9d9b2b10bba7ba11bbd32ec38cf7efc1783c8c8a095c07b699858811144ddc9dd55057b8d52f98a4e00cb8ec5100889faf4f171786ad14812c2dd23dd2d311b56fa8ca40fe1e4ea48601baae325220771f4d9ea966bed46406826f9df0c08652f0d66cd83c3f4c1caa56789460a1e3cb1912cca916c1b5a9c90c3c17a12090d814d881b6482417afc20c79e8673547ff4c4f7cf290d7a4963eee4d8ec64a89fd571c76ddbe9e79a8ad6a159b807c4b9fde7df3e8cc6fa7706c8173f052eed86fd980214df0ce58369e47f743628077f21b06dddfa5e71c918dc84d6b47bd73e8b7e430c092b83392472a707a348e456b368dd1269bdd067df4ff6a656f23e75050969b161173468c94ffc6be166baa328cba9fe6b29db450c2b6bc32cc9b807722f509a14c48c45c94f5689ba3f0ec7e097fcb7bbb25773fce75198fcb27912ed517026799b40cc7173f9b469376dac16152a7818d8c75e51f68f5a86e92d389da73538af12b54f3f7a90423b8b35c69ea2e16165bbdb0831c29a22069150ebee0fdfe52122bafe93203c06ceedae9d0f646365881c0cb53817ddbed5da30f3f6e3b0cb1e8df14128e252094ac00aec7e950b18a1d49897ed30be569c507f201ee7951a30d1651e35a51ceeb6beb4ab2f99f517b1505f91cf6ca79a8b92daa7b23affdd65c1102da33012280dec2150b60b1cc16156195d84785ce15d6277330c52cd3528bb309066b128b0a1ab6f9106c93a640223c6ead00fd5ce8aceb67a9d0da6b2e1376d9f290f6a42d937e2601aae97e3ac61a32cffe37da79c3e71b50405648d34c6b2273f87facad22af027b533c97ec3961770120b91835313f32686c8c735329379e21c84e2c82a04e645bb6570d5ce6f8d1ee897fba2861954121ca41d6eb45e462a09fd515f330e1b4bdfdf80584ff36accc170431933ff0905979c0872476c06541653c1c1e4f7e2a2e7d0ce47370cd332a94edb311553253afae5628fdc9695633c55b90561ba8c31b24bb226864c2b01aff9679600c0cc36f9b8b5599af3cb5bb1960a2e0edf11ce6caa0a28eadf0a741c8709ff8db68cf7c17d79f8ab49f1a33426d115e9211b741beb905afc233236597ef12edf8e316c2908de1a71e7a730ce50840cf6924ed82a0beaa0105200867caee51fbdb0766ede5dbaa00e2f9ac89ea7eb20f08094251ee217cd4b042e9177362d50bc10a0f6311ee42a96f8ffe0c00f7673e90db71cf12fc6325e"}) 3.198322315s ago: executing program 4 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, 0x1}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x0, 0x2e0, 0x1c0, 0x0, 0x1c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'netdevsim0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'vlan0\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@multicast2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) sendmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r6, &(0x7f0000000f00)={&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000380)=[{&(0x7f0000000e00)=""/246, 0xf6}, {&(0x7f00000001c0)=""/59, 0x3b}], 0x2, &(0x7f00000003c0)=""/44, 0x2c}, 0x18000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0xfffffffc, 0x4) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000f40), 0x80800) connect$inet6(r8, &(0x7f0000000f80)={0xa, 0x4e22, 0x1b3, @loopback, 0x8}, 0x1c) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x0, r7}, {0xfffffffffffffffe, 0x9, 0x9, 0x200, 0xbb, 0x8, 0x80, 0x9}, {0x3ea, 0x8001, 0x3, 0x2}, 0x6, 0x6e6bbb, 0x0, 0x0, 0x0, 0x2}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 0x3, 0x5, 0x401, 0x81, 0x381}}, 0xe8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="a0030000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fddbdf254400000008000300362e8760f5baef6783d65436752ed3523bb9e5d4f0be2eb1149af5f3ea5f47a4f0c8ba7c82c5666e270badd3fcc62f09315815c9bbeb81c42f", @ANYRES32=r10, @ANYBLOB="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"], 0x3a0}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000) 3.142573995s ago: executing program 4 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x206, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x32, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x86, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43"}, @calipso={0x7, 0x30, {0x3, 0xa, 0xe, 0x9, [0xf, 0x7, 0x4a, 0x9, 0x1b76]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0]}}]}]}}}}}}}, 0x0) (async) socket(0x2c, 0x4, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) 3.050862446s ago: executing program 2 (id=1287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="adc8308d58e374cca75074badc2c8c0000000102030000000000000000000a004a7917ffea80140001800800010000000000080002000a0101"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) (async) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="adc8308d58e374cca75074badc2c8c0000000102030000000000000000000a004a7917ffea80140001800800010000000000080002000a0101"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000050000000800000009"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000050000000800000009"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0x20000000}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r7 = socket$isdn(0x22, 0x2, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd700000000000030000001400018008000300ac14148a08000300accee6a0e345de6cb01fcd35"], 0x28}}, 0x0) close(r7) (async) close(r7) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r10 = socket$kcm(0x23, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffea7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5fe1aab8, @void, @value}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffea7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5fe1aab8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r11}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, &(0x7f0000000000)={r10}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.019049666s ago: executing program 4 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0xf6c, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x600) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 2.729504304s ago: executing program 2 (id=1291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x20000400) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x350, 0xd0, 0x0, 0x350, 0x1b0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xffffffff], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @inet=@DSCP={0x28}}, {{@ipv6={@private0, @private1, [0xffffffff, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], 'vlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x21, 0x80, 0x1, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0xffffffff, 0x0, 0xffffffff], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYRESOCT=r4], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x15, 0x5, 0x0) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x83, &(0x7f0000000340)=""/131, 0x41000, 0x78, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xa, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x3, 0x4, 0x5, 0x3}, {0x2, 0x2, 0xa, 0x4}, {0x0, 0x5, 0x7, 0xb}], 0x10, 0x8, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000500)=r11) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x3, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) r12 = socket$packet(0x11, 0x2, 0x300) r13 = epoll_create(0x374) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000140)={0xe}) ioctl$int_in(r12, 0x5452, &(0x7f0000000180)=0x5) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 2.227295035s ago: executing program 2 (id=1293): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x3, 0x8, 0x3]}, 0xa) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.15149213s ago: executing program 2 (id=1295): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000062000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.03267105s ago: executing program 0 (id=1296): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000b40)) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x4c8d0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 1.911419808s ago: executing program 2 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000010005000400000000000900020073797a320020000014000780050014000000000008000840000000200500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 1.909928766s ago: executing program 0 (id=1298): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000280)=0x2, 0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008, 0x12, r1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x812}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffff9}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', r2, 0x0, 0x40, 0x1000, 0x3, {{0x1b, 0x4, 0x3, 0x31, 0x6c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010101, {[@noop, @lsrr={0x83, 0x17, 0xae, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x35}, @local]}, @timestamp={0x44, 0x8, 0x5b, 0x0, 0x4, [0x5]}, @timestamp_prespec={0x44, 0x2c, 0x2a, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0xffffbdd3}, {@empty, 0x8}]}, @noop, @timestamp={0x44, 0x8, 0xf8, 0x0, 0x1, [0x2]}]}}}}}) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x8, r4, 0x27, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000890f0000020000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010000000000000000003fb6be2056f100"/26, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0100000004000000010000000800"/28], 0x50) 1.8035222s ago: executing program 2 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYRES64=r2, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="c91cf2a6d7087d5e5c8956b36cb0abf504aefd094526f7bd4fca3185651217395f12e148ec9eb7dab1d3ba35898b0e163e5056ab741b57d20fe3ed9ecf02af940d8f07db7c75990fb49b2d4edb28a629d2b8bf356bb5b7277963fb532407485954466ccf0f4a181203a0ff93ccfdccc1a9cba9e1c626c74a65b6a3fdb276dfdd6341a5252751d9e67becd5ab823cd8e8ce2786efd79e8deea8c0371fa2e7f4825cc2bd9cded20c6ff339e69ebad2a96f29f21d431796f4b2a701826696f585aee80496f75d9531344a", @ANYBLOB="4c4f8a0132c11f2049eaf5701dcdc7e57759f1760b55de595ab53c82d2345d354ae9d3f26110a75552b0e90d1b07712c5219e46462cf94e254b0c0b9b8a95603b36af36975e0abb441bf156848a14d53e0b3527eabe3d231f7638a7f909a06c3fce95875d4a4a17b3c26f11c9c49146d095412039d30881ad44a570c5e9c1978cfda0a7b53018d75edf367b51baa86178694d5"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6b1ceb66, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES8=r6], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x8a, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100"/12], 0x14}}, 0x4004800) socket$inet_udp(0x2, 0x2, 0x0) 1.72614141s ago: executing program 0 (id=1300): r0 = socket(0x10, 0x3, 0x9) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000380)=""/58, 0x3a}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x4001c00) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x3, 0x204, 0x1, 0x8bc, 0x4, 0x3, 0x168f}, &(0x7f0000000040)=0x20) 1.452401026s ago: executing program 0 (id=1302): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_skbedit={0x44, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd}}]}, {0x8, 0x6, "3564489b"}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x4010, r3, 0xd9b63000) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a98", 0xf}], 0x2}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) socket$inet6(0xa, 0x3, 0x4) socket$kcm(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r6], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.412581508s ago: executing program 4 (id=1303): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e24, @private=0xa010101}}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x600, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.187024603s ago: executing program 1 (id=1304): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xfffa, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x0, 0x80000001, 0x1c0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x30, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) socket(0x10, 0x803, 0x2) (async) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYRES64=r6], 0x3c}}, 0x24004040) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x3, {0x0, 0x0, 0x0, r7, {0xe}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xffffffffffffffa6, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0xfffffffb}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x1, 0xe4, 0x1, 0xfa, 0x2, 0x8, 0x1}}, {0x0, 0x2, [0x7, 0x8, 0x2, 0xff22, 0x401]}}]}, @TCA_INGRESS_BLOCK, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x10004}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6c6c}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6c6c}, 0x1c) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 1.186170439s ago: executing program 0 (id=1305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) (async) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000900000001010000000000000000050000000900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008007a40000000031400048008000240000000120800014000000001140000000a00"/144], 0x90}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000840)=ANY=[@ANYRES32=r3], 0x408) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) (async) listen(r3, 0x0) (async) splice(r3, 0x0, r1, 0x0, 0x406f413, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000000)=0x401, 0x4) 1.022287596s ago: executing program 1 (id=1306): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000340)=0x10) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc0000000001010400000000000000000a0000004c0001802c000180140003"], 0xbc}}, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)=@null) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) sendto$packet(r2, &(0x7f0000000180)="ef2406c2b90003687a85b0c21db7d40b202cb4bd3ccb24a387a42e03d56761e235fd803c9ff1c2d2e5656254056c41e2afd90a4453dff7b9941fe0189e961eb31acb02c8f11dd9ab60ed40c5d746a6f890a1b2a528859150574a4a1153", 0x5d, 0x0, &(0x7f0000000300)={0x11, 0x4, r3, 0x1, 0xfb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) 996.024992ms ago: executing program 0 (id=1307): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4]) mmap(&(0x7f0000210000/0x1000)=nil, 0x1000, 0x8, 0x10, r3, 0x7867) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000b00), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x20000007) 766.96914ms ago: executing program 1 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x11000, 0x0, 0xfffffffc, 0x6, 0x80000000}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006a0001032bbd7000fbdbdf25020000400000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x8000070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20008081}, 0x24044884) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1600000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffa}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0x7, r5}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r5}, 0x4) 632.707954ms ago: executing program 1 (id=1309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000010005000400000000000900020073797a320000200014000780050014000000000008000840000000200500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 508.264541ms ago: executing program 1 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r2, r3, 0x2f, 0x2028, 0x4, @void, @void, @value=0xffffffffffffffff}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'geneve1\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) 182.226114ms ago: executing program 1 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvfrom(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 63.106276ms ago: executing program 4 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x74, 0x2e, 0x4, 0x0, 0x25dfdbfc, "", [@typed={0x63, 0x73, 0x0, 0x0, @str='s\xba\x87C\x06AO\fDqY\x83M9\xe6!Z\xc8\x00\xb6\x80\x03C*~A\x9e\x86\xa9\xb50Hh6\xaa\"\x16z\xaa\xc0\xe8\x91\x1c\x1e\xdb@\r\xd2i.=\x16\xbb\x15y\xa2|\xbe5f\xc8\x8ax\x97\x01t\'{\x81mpN\xf3\x94\x8d\xd8\x1bI\xf1\x9a7\n\xdfY\xa9\x17\x9b\x8aW\xc9\x84\xeaq\x89\"'}]}, 0x74}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x4d) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000004c0)={0x3, 0x8, "5cffd3", 0x8, 0x9}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'bond_slave_0\x00'}, 0x7ff}) kernel console output (not intermixed with test programs): idge0: port 1(bridge_slave_0) entered disabled state [ 71.611204][ T5831] bridge_slave_0: entered allmulticast mode [ 71.619065][ T5831] bridge_slave_0: entered promiscuous mode [ 71.659977][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.667531][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.675091][ T5831] bridge_slave_1: entered allmulticast mode [ 71.682009][ T5831] bridge_slave_1: entered promiscuous mode [ 71.716500][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.723640][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.730741][ T5837] bridge_slave_0: entered allmulticast mode [ 71.738330][ T5837] bridge_slave_0: entered promiscuous mode [ 71.783507][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.790717][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.797897][ T5837] bridge_slave_1: entered allmulticast mode [ 71.805600][ T5837] bridge_slave_1: entered promiscuous mode [ 71.840714][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.850177][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.857355][ T5845] bridge_slave_0: entered allmulticast mode [ 71.864963][ T5845] bridge_slave_0: entered promiscuous mode [ 71.901775][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.911403][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.918683][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.926446][ T5845] bridge_slave_1: entered allmulticast mode [ 71.933698][ T5845] bridge_slave_1: entered promiscuous mode [ 71.940543][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.949891][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.957355][ T5827] bridge_slave_0: entered allmulticast mode [ 71.965027][ T5827] bridge_slave_0: entered promiscuous mode [ 71.974294][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.986613][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.008978][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.040934][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.048257][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.055810][ T5827] bridge_slave_1: entered allmulticast mode [ 72.063239][ T5827] bridge_slave_1: entered promiscuous mode [ 72.093232][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.100381][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.107586][ T5828] bridge_slave_0: entered allmulticast mode [ 72.114980][ T5828] bridge_slave_0: entered promiscuous mode [ 72.169938][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.177726][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.185315][ T5828] bridge_slave_1: entered allmulticast mode [ 72.192266][ T5828] bridge_slave_1: entered promiscuous mode [ 72.201847][ T5831] team0: Port device team_slave_0 added [ 72.211564][ T5831] team0: Port device team_slave_1 added [ 72.220182][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.243637][ T5837] team0: Port device team_slave_0 added [ 72.284626][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.307852][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.318762][ T5837] team0: Port device team_slave_1 added [ 72.348823][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.356060][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.382686][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.395903][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.403509][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.431998][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.456057][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.487692][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.494895][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.521284][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.535787][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.548191][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.577911][ T5845] team0: Port device team_slave_0 added [ 72.586677][ T5845] team0: Port device team_slave_1 added [ 72.606134][ T5827] team0: Port device team_slave_0 added [ 72.612768][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.619727][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.646336][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.666785][ T5141] Bluetooth: hci3: command tx timeout [ 72.666793][ T55] Bluetooth: hci4: command tx timeout [ 72.703162][ T5827] team0: Port device team_slave_1 added [ 72.733191][ T5831] hsr_slave_0: entered promiscuous mode [ 72.739698][ T5831] hsr_slave_1: entered promiscuous mode [ 72.743323][ T5141] Bluetooth: hci2: command tx timeout [ 72.745553][ T55] Bluetooth: hci1: command tx timeout [ 72.750681][ T5833] Bluetooth: hci0: command tx timeout [ 72.798033][ T5828] team0: Port device team_slave_0 added [ 72.806754][ T5828] team0: Port device team_slave_1 added [ 72.825730][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.833103][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.859362][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.871369][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.878438][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.904665][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.916305][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.924064][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.950354][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.962330][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.969615][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.995636][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.076282][ T5837] hsr_slave_0: entered promiscuous mode [ 73.082550][ T5837] hsr_slave_1: entered promiscuous mode [ 73.089280][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.097927][ T5837] Cannot create hsr debugfs directory [ 73.117803][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.125002][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.151320][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.168947][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.175998][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.201907][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.300723][ T5827] hsr_slave_0: entered promiscuous mode [ 73.307856][ T5827] hsr_slave_1: entered promiscuous mode [ 73.314231][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.321790][ T5827] Cannot create hsr debugfs directory [ 73.357111][ T5845] hsr_slave_0: entered promiscuous mode [ 73.363431][ T5845] hsr_slave_1: entered promiscuous mode [ 73.369697][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.377308][ T5845] Cannot create hsr debugfs directory [ 73.516432][ T5828] hsr_slave_0: entered promiscuous mode [ 73.523440][ T5828] hsr_slave_1: entered promiscuous mode [ 73.529582][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.537282][ T5828] Cannot create hsr debugfs directory [ 73.821932][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.834774][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.866454][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.895878][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.970637][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.980897][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.995093][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.007195][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.082054][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.106543][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.132252][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.143757][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.207461][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.231849][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.244273][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.254188][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.283132][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.342177][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.377078][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.388500][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.395722][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.406263][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.413420][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.440562][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.450601][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.461974][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.486621][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.527088][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.557034][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.564223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.599801][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.606914][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.687964][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.742938][ T5833] Bluetooth: hci3: command tx timeout [ 74.748358][ T5141] Bluetooth: hci4: command tx timeout [ 74.771860][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.784263][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.801401][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.808520][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.822838][ T5833] Bluetooth: hci2: command tx timeout [ 74.822884][ T55] Bluetooth: hci1: command tx timeout [ 74.828290][ T5141] Bluetooth: hci0: command tx timeout [ 74.841723][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.848970][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.937865][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.977305][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.021008][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.028178][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.059750][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.066956][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.094475][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.126039][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.199369][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.206561][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.254607][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.261735][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.300668][ T5831] veth0_vlan: entered promiscuous mode [ 75.357642][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.435542][ T5831] veth1_vlan: entered promiscuous mode [ 75.465643][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.527686][ T5831] veth0_macvtap: entered promiscuous mode [ 75.556095][ T5827] veth0_vlan: entered promiscuous mode [ 75.568580][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.578627][ T5831] veth1_macvtap: entered promiscuous mode [ 75.622462][ T5827] veth1_vlan: entered promiscuous mode [ 75.676842][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.721688][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.738630][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.747867][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.759050][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.767902][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.789025][ T5837] veth0_vlan: entered promiscuous mode [ 75.818919][ T5837] veth1_vlan: entered promiscuous mode [ 75.901856][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.925059][ T5827] veth0_macvtap: entered promiscuous mode [ 75.956231][ T5827] veth1_macvtap: entered promiscuous mode [ 75.985354][ T5837] veth0_macvtap: entered promiscuous mode [ 76.026914][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.037450][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.058388][ T5837] veth1_macvtap: entered promiscuous mode [ 76.092471][ T5845] veth0_vlan: entered promiscuous mode [ 76.106345][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.117731][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.129069][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.142175][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.150338][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.174809][ T5845] veth1_vlan: entered promiscuous mode [ 76.185467][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.196718][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.207809][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.221231][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.235922][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.245929][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.256399][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.268499][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.296207][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.303648][ T5828] veth0_vlan: entered promiscuous mode [ 76.327735][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.337414][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.349414][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.360343][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.388773][ T5828] veth1_vlan: entered promiscuous mode [ 76.419299][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.444028][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.457307][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.467927][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.486295][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.531316][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.544284][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.553915][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.562874][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.651460][ T5845] veth0_macvtap: entered promiscuous mode [ 76.687937][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 76.722006][ T5828] veth0_macvtap: entered promiscuous mode [ 76.736196][ T5845] veth1_macvtap: entered promiscuous mode [ 76.758221][ T5828] veth1_macvtap: entered promiscuous mode [ 76.799401][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.811602][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.823006][ T5141] Bluetooth: hci4: command tx timeout [ 76.824635][ T55] Bluetooth: hci3: command tx timeout [ 76.837857][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.849016][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.859127][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.869736][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.881525][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.894046][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.903161][ T55] Bluetooth: hci0: command tx timeout [ 76.908571][ T55] Bluetooth: hci2: command tx timeout [ 76.914878][ T5141] Bluetooth: hci1: command tx timeout [ 76.927265][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.931671][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.935342][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.945902][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.945915][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.945928][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.945954][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.945967][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.947260][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.989850][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.026677][ T5922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6'. [ 77.043602][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.062007][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.077648][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.088302][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.100168][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.110785][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.120891][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.131344][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.142357][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.153486][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162192][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.171741][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.180805][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.209545][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.222501][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.234129][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.244586][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.254451][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.265009][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.274877][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.285308][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.296808][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.332298][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.341119][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.351254][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.360097][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.374006][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.375972][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.391888][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.392605][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.641454][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.671923][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.693676][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.728828][ T5936] netlink: 'syz.0.1': attribute type 16 has an invalid length. [ 77.736651][ T5936] netlink: 'syz.0.1': attribute type 17 has an invalid length. [ 77.755376][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.777533][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.850987][ T5942] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 77.865523][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.890877][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.899024][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.069460][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.088710][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.188706][ T5936] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.197693][ T5936] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.208614][ T5936] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.219564][ T5936] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.265186][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.273770][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.306990][ T5942] macvlan2: entered promiscuous mode [ 78.312378][ T5942] hsr0: entered promiscuous mode [ 78.318300][ T5942] macvlan2: entered allmulticast mode [ 78.325828][ T5942] hsr0: entered allmulticast mode [ 78.330999][ T5942] hsr_slave_0: entered allmulticast mode [ 78.336940][ T5942] hsr_slave_1: entered allmulticast mode [ 78.344485][ T5939] lo: entered promiscuous mode [ 78.352313][ T5939] tunl0: entered promiscuous mode [ 78.361466][ T5939] gre0: entered promiscuous mode [ 78.371294][ T5939] gretap0: entered promiscuous mode [ 78.379437][ T5939] erspan0: entered promiscuous mode [ 78.388753][ T5939] ip_vti0: entered promiscuous mode [ 78.396094][ T5939] ip6_vti0: entered promiscuous mode [ 78.405799][ T5939] sit0: entered promiscuous mode [ 78.414280][ T5939] ip6tnl0: entered promiscuous mode [ 78.422432][ T5939] ip6gre0: entered promiscuous mode [ 78.438114][ T5939] syz_tun: entered promiscuous mode [ 78.447370][ T5939] ip6gretap0: entered promiscuous mode [ 78.458259][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.466134][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.474415][ T5939] bridge0: entered promiscuous mode [ 78.476781][ T5936] syz.0.1 (5936) used greatest stack depth: 19848 bytes left [ 78.483723][ T5939] vcan0: entered promiscuous mode [ 78.494511][ T5939] bond0: entered promiscuous mode [ 78.499569][ T5939] bond_slave_0: entered promiscuous mode [ 78.506742][ T5939] bond_slave_1: entered promiscuous mode [ 78.518968][ T5939] team0: entered promiscuous mode [ 78.525588][ T5939] team_slave_0: entered promiscuous mode [ 78.531449][ T5939] team_slave_1: entered promiscuous mode [ 78.544195][ T5939] dummy0: entered promiscuous mode [ 78.552106][ T5939] nlmon0: entered promiscuous mode [ 78.559647][ T5939] caif0: entered promiscuous mode [ 78.565500][ T5939] batadv0: entered promiscuous mode [ 78.574084][ T5939] vxcan0: entered promiscuous mode [ 78.580186][ T5939] vxcan1: entered promiscuous mode [ 78.586962][ T5939] veth0: entered promiscuous mode [ 78.595303][ T5939] veth1: entered promiscuous mode [ 78.603730][ T5939] wg0: entered promiscuous mode [ 78.610573][ T5939] wg1: entered promiscuous mode [ 78.617625][ T5939] wg2: entered promiscuous mode [ 78.624885][ T5939] veth0_to_bridge: entered promiscuous mode [ 78.638771][ T5939] veth1_to_bridge: entered promiscuous mode [ 78.650463][ T5939] veth0_to_bond: entered promiscuous mode [ 78.661338][ T5939] veth1_to_bond: entered promiscuous mode [ 78.671286][ T5939] veth0_to_team: entered promiscuous mode [ 78.686309][ T5939] veth1_to_team: entered promiscuous mode [ 78.698135][ T5939] veth0_to_batadv: entered promiscuous mode [ 78.705826][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.715351][ T5939] batadv_slave_0: entered promiscuous mode [ 78.723705][ T5939] veth1_to_batadv: entered promiscuous mode [ 78.731995][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.740725][ T5939] batadv_slave_1: entered promiscuous mode [ 78.749209][ T5939] xfrm0: entered promiscuous mode [ 78.761339][ T5939] veth0_to_hsr: entered promiscuous mode [ 78.771209][ T5939] veth1_to_hsr: entered promiscuous mode [ 78.783994][ T5939] hsr0: entered promiscuous mode [ 78.791003][ T5939] veth1_virt_wifi: entered promiscuous mode [ 78.799309][ T5939] veth0_virt_wifi: entered promiscuous mode [ 78.807759][ T5939] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 78.824334][ T5939] vlan0: entered promiscuous mode [ 78.829672][ T5939] vlan1: entered promiscuous mode [ 78.837260][ T5939] macvlan0: entered promiscuous mode [ 78.845874][ T5939] macvlan1: entered promiscuous mode [ 78.854519][ T5939] ipvlan0: entered promiscuous mode [ 78.859870][ T5939] ipvlan1: entered promiscuous mode [ 78.869926][ T5939] macvtap0: entered promiscuous mode [ 78.878448][ T5939] macsec0: entered promiscuous mode [ 78.886719][ T5939] geneve0: entered promiscuous mode [ 78.894072][ T5939] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.903805][ T55] Bluetooth: hci4: command tx timeout [ 78.903848][ T5141] Bluetooth: hci3: command tx timeout [ 78.909268][ T5939] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.923669][ T5939] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.933168][ T5939] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.943740][ T5939] geneve1: entered promiscuous mode [ 78.951013][ T5939] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 78.961645][ T5939] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 78.971852][ T5939] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 78.983086][ T5141] Bluetooth: hci2: command tx timeout [ 78.983609][ T55] Bluetooth: hci1: command tx timeout [ 78.988482][ T5141] Bluetooth: hci0: command tx timeout [ 78.993972][ T5939] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 79.013912][ T5939] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 79.027067][ T5939] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 79.129995][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.168749][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.308603][ T5957] nbd: socks must be embedded in a SOCK_ITEM attr [ 79.549624][ T5966] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.638964][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.648453][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.689812][ T5968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.982548][ T5964] infiniband syz0: set active [ 79.987530][ T5964] infiniband syz0: added bond_slave_1 [ 80.098370][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 80.170796][ T5988] Zero length message leads to an empty skb [ 80.204232][ T5964] RDS/IB: syz0: added [ 80.223933][ T5964] smc: adding ib device syz0 with port count 1 [ 80.235684][ T5964] smc: ib device syz0 port 1 has pnetid [ 80.337333][ T5983] tipc: Started in network mode [ 80.342419][ T5983] tipc: Node identity ac14140f, cluster identity 4711 [ 80.354367][ T5983] tipc: New replicast peer: 255.0.0.255 [ 80.360520][ T5983] tipc: Enabled bearer , priority 10 [ 80.527304][ T5996] ipvlan0: entered allmulticast mode [ 80.546829][ T5996] veth0_vlan: entered allmulticast mode [ 80.583905][ T5998] netlink: 176 bytes leftover after parsing attributes in process `syz.3.20'. [ 80.716172][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 80.851290][ T6003] x_tables: ip_tables: osf match: only valid for protocol 6 [ 80.881755][ T6003] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 81.310690][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.367505][ T6021] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 81.483950][ T5882] tipc: Node number set to 2886997007 [ 81.763029][ T6033] netlink: 'syz.3.32': attribute type 5 has an invalid length. [ 81.770654][ T6033] __nla_validate_parse: 3 callbacks suppressed [ 81.770665][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 81.868629][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 81.972229][ T6039] tipc: Started in network mode [ 82.003740][ T6039] tipc: Node identity ac14142f, cluster identity 4711 [ 82.011654][ T6039] tipc: New replicast peer: 0.0.0.0 [ 82.065014][ T6039] tipc: Enabled bearer , priority 10 [ 82.071909][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.34'. [ 82.100889][ T6045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.35'. [ 82.155850][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 82.284037][ T6050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.37'. [ 82.340515][ T6054] netlink: 48 bytes leftover after parsing attributes in process `syz.4.39'. [ 83.104716][ T6070] sctp: [Deprecated]: syz.4.44 (pid 6070) Use of int in max_burst socket option. [ 83.104716][ T6070] Use struct sctp_assoc_value instead [ 83.175363][ T5882] tipc: Node number set to 2886997039 [ 83.363427][ T6076] sctp: [Deprecated]: syz.4.46 (pid 6076) Use of int in max_burst socket option. [ 83.363427][ T6076] Use struct sctp_assoc_value instead [ 83.404945][ T6079] ieee802154 phy0 wpan0: encryption failed: -90 [ 83.841973][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.869081][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.892707][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.905128][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.935945][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.970147][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.982584][ T6089] batadv_slave_0: entered promiscuous mode [ 84.015132][ T6089] batadv_slave_0: left promiscuous mode [ 84.139337][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 84.168427][ T6093] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.52'. [ 84.203816][ T6093] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET) [ 84.285826][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 84.451670][ T6107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.453904][ T6104] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 85.368751][ T6128] syzkaller0: entered promiscuous mode [ 85.374480][ T6128] syzkaller0: entered allmulticast mode [ 86.472452][ T6138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.524202][ T24] cfg80211: failed to load regulatory.db [ 86.547340][ T6140] ipvlan2: entered promiscuous mode [ 86.742555][ T6145] nftables ruleset with unbound chain [ 86.805090][ T6147] syz_tun: entered allmulticast mode [ 86.936492][ T6147] lo: entered allmulticast mode [ 86.959905][ T6146] syz_tun: left allmulticast mode [ 87.177076][ T6157] SET target dimension over the limit! [ 87.368948][ T6167] __nla_validate_parse: 5 callbacks suppressed [ 87.368967][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 88.278997][ T6187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.707125][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'. [ 89.140004][ T6203] FAULT_INJECTION: forcing a failure. [ 89.140004][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.185600][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.4.86 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 89.185623][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 89.185636][ T6203] Call Trace: [ 89.185647][ T6203] [ 89.185654][ T6203] dump_stack_lvl+0x189/0x250 [ 89.185687][ T6203] ? __lock_acquire+0xaac/0xd20 [ 89.185714][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.185738][ T6203] ? __pfx__printk+0x10/0x10 [ 89.185754][ T6203] ? __might_fault+0xb0/0x130 [ 89.185786][ T6203] should_fail_ex+0x414/0x560 [ 89.185817][ T6203] _copy_from_user+0x2d/0xb0 [ 89.185841][ T6203] ___sys_sendmsg+0x158/0x2a0 [ 89.185865][ T6203] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.185919][ T6203] ? __fget_files+0x2a/0x420 [ 89.185940][ T6203] ? __fget_files+0x3a0/0x420 [ 89.185971][ T6203] __x64_sys_sendmsg+0x19b/0x260 [ 89.185995][ T6203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.186032][ T6203] ? do_syscall_64+0xba/0x210 [ 89.186050][ T6203] do_syscall_64+0xf6/0x210 [ 89.186066][ T6203] ? clear_bhb_loop+0x45/0xa0 [ 89.186086][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.186101][ T6203] RIP: 0033:0x7fcf1418e969 [ 89.186121][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.186134][ T6203] RSP: 002b:00007fcf1509b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.186158][ T6203] RAX: ffffffffffffffda RBX: 00007fcf143b5fa0 RCX: 00007fcf1418e969 [ 89.186170][ T6203] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 89.186180][ T6203] RBP: 00007fcf1509b090 R08: 0000000000000000 R09: 0000000000000000 [ 89.186189][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.186198][ T6203] R13: 0000000000000000 R14: 00007fcf143b5fa0 R15: 00007fffd91ee298 [ 89.186223][ T6203] [ 89.683793][ C1] Illegal XDP return value 16128 on prog (id 25) dev veth0, expect packet loss! [ 89.707356][ T6205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.926509][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'. [ 89.936245][ T6228] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.987084][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.006040][ T6230] batadv_slave_1: entered promiscuous mode [ 90.129291][ T6235] GUP no longer grows the stack in syz.4.96 (6235): 200000006000-20000000a000 (200000005000) [ 90.156184][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.4.96 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 90.156209][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 90.156220][ T6235] Call Trace: [ 90.156227][ T6235] [ 90.156234][ T6235] dump_stack_lvl+0x189/0x250 [ 90.156267][ T6235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.156292][ T6235] ? __pfx__printk+0x10/0x10 [ 90.156308][ T6235] ? find_vma+0xe7/0x160 [ 90.156342][ T6235] __get_user_pages+0x24e4/0x2a40 [ 90.156393][ T6235] ? __pfx___get_user_pages+0x10/0x10 [ 90.156413][ T6235] ? __gup_longterm_locked+0xbf7/0x15b0 [ 90.156433][ T6235] ? down_read_killable+0x1d1/0x350 [ 90.156457][ T6235] ? try_get_folio+0x633/0x660 [ 90.156482][ T6235] __gup_longterm_locked+0xd66/0x15b0 [ 90.156509][ T6235] ? try_grab_folio_fast+0x19a/0x4d0 [ 90.156541][ T6235] ? gup_fast_fallback+0x1672/0x1d60 [ 90.156566][ T6235] gup_fast_fallback+0x1843/0x1d60 [ 90.156619][ T6235] ? __pfx_gup_fast_fallback+0x10/0x10 [ 90.156638][ T6235] ? __mutex_lock+0x330/0xe80 [ 90.156668][ T6235] ? is_valid_gup_args+0x11f/0x200 [ 90.156691][ T6235] ? get_user_pages_fast+0x4d/0xb0 [ 90.156714][ T6235] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 90.156745][ T6235] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 90.156768][ T6235] ? wait_for_space+0x24d/0x2d0 [ 90.156791][ T6235] iov_iter_get_pages2+0x5e/0xa0 [ 90.156818][ T6235] __se_sys_vmsplice+0x548/0x10e0 [ 90.156857][ T6235] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 90.156882][ T6235] ? __pfx_futex_wake+0x10/0x10 [ 90.156911][ T6235] ? __lock_acquire+0xaac/0xd20 [ 90.156971][ T6235] ? rcu_is_watching+0x15/0xb0 [ 90.157005][ T6235] ? do_syscall_64+0xba/0x210 [ 90.157025][ T6235] do_syscall_64+0xf6/0x210 [ 90.157041][ T6235] ? clear_bhb_loop+0x45/0xa0 [ 90.157063][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.157080][ T6235] RIP: 0033:0x7fcf1418e969 [ 90.157096][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.157110][ T6235] RSP: 002b:00007fcf1509b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 90.157128][ T6235] RAX: ffffffffffffffda RBX: 00007fcf143b5fa0 RCX: 00007fcf1418e969 [ 90.157141][ T6235] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.157151][ T6235] RBP: 00007fcf14210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 90.157161][ T6235] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.157171][ T6235] R13: 0000000000000000 R14: 00007fcf143b5fa0 R15: 00007fffd91ee298 [ 90.157199][ T6235] [ 90.517705][ T6246] FAULT_INJECTION: forcing a failure. [ 90.517705][ T6246] name failslab, interval 1, probability 0, space 0, times 1 [ 90.597102][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.0.99 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 90.597127][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 90.597138][ T6246] Call Trace: [ 90.597146][ T6246] [ 90.597153][ T6246] dump_stack_lvl+0x189/0x250 [ 90.597185][ T6246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.597209][ T6246] ? __pfx__printk+0x10/0x10 [ 90.597236][ T6246] ? __pfx___might_resched+0x10/0x10 [ 90.597256][ T6246] should_fail_ex+0x414/0x560 [ 90.597295][ T6246] should_failslab+0xa8/0x100 [ 90.597320][ T6246] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 90.597342][ T6246] ? __alloc_skb+0x112/0x2d0 [ 90.597365][ T6246] __alloc_skb+0x112/0x2d0 [ 90.597388][ T6246] netlink_sendmsg+0x5c6/0xb30 [ 90.597417][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.597440][ T6246] ? aa_sock_msg_perm+0x94/0x160 [ 90.597459][ T6246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.597477][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.597497][ T6246] __sock_sendmsg+0x219/0x270 [ 90.597516][ T6246] ____sys_sendmsg+0x505/0x830 [ 90.597543][ T6246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.597574][ T6246] ? import_iovec+0x74/0xa0 [ 90.597599][ T6246] ___sys_sendmsg+0x21f/0x2a0 [ 90.597624][ T6246] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.597679][ T6246] ? __fget_files+0x2a/0x420 [ 90.597699][ T6246] ? __fget_files+0x3a0/0x420 [ 90.597730][ T6246] __x64_sys_sendmsg+0x19b/0x260 [ 90.597755][ T6246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.597792][ T6246] ? do_syscall_64+0xba/0x210 [ 90.597811][ T6246] do_syscall_64+0xf6/0x210 [ 90.597827][ T6246] ? clear_bhb_loop+0x45/0xa0 [ 90.597847][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.597863][ T6246] RIP: 0033:0x7f3568b8e969 [ 90.597877][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.597891][ T6246] RSP: 002b:00007f35699e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.597909][ T6246] RAX: ffffffffffffffda RBX: 00007f3568db5fa0 RCX: 00007f3568b8e969 [ 90.597921][ T6246] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 90.597931][ T6246] RBP: 00007f35699e3090 R08: 0000000000000000 R09: 0000000000000000 [ 90.597941][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.597950][ T6246] R13: 0000000000000000 R14: 00007f3568db5fa0 R15: 00007fff58699408 [ 90.597976][ T6246] [ 90.844527][ T30] audit: type=1804 audit(1746639475.786:2): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.100" name="/newroot/7/cgroup.controllers" dev="tmpfs" ino=54 res=1 errno=0 [ 90.867146][ T30] audit: type=1800 audit(1746639475.786:3): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="cgroup.controllers" dev="tmpfs" ino=54 res=0 errno=0 [ 91.126535][ T6255] can: request_module (can-proto-0) failed. [ 91.394351][ T6290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.752173][ T6303] trusted_key: syz.1.108 sent an empty control message without MSG_MORE. [ 92.364653][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.116'. [ 92.747912][ T6340] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 92.785690][ T6340] netlink: 208 bytes leftover after parsing attributes in process `syz.2.119'. [ 93.447439][ T6367] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 93.705571][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 94.210567][ T6386] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.537228][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 94.968852][ T6402] ip_vti0: left promiscuous mode [ 94.989587][ T6402] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 97.000001][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'. [ 97.137143][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 97.289704][ T6467] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 97.300017][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 97.428742][ T977] IPVS: starting estimator thread 0... [ 97.437301][ T6478] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 97.521452][ T6478] netlink: 476 bytes leftover after parsing attributes in process `syz.2.159'. [ 97.552764][ T6482] IPVS: using max 29 ests per chain, 69600 per kthread [ 97.600511][ T6478] bond_slave_0: entered promiscuous mode [ 97.623582][ T6478] netlink: 64 bytes leftover after parsing attributes in process `syz.2.159'. [ 97.655688][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 97.689291][ T6478] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 98.179273][ T6508] netlink: 56 bytes leftover after parsing attributes in process `syz.0.166'. [ 98.234207][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.596441][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.625736][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.789457][ T6543] netlink: 'syz.1.180': attribute type 3 has an invalid length. [ 98.800311][ T6543] netlink: 'syz.1.180': attribute type 5 has an invalid length. [ 98.948366][ T6549] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20003 [ 99.049116][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 99.075347][ T6557] lo speed is unknown, defaulting to 1000 [ 99.081493][ T6557] lo speed is unknown, defaulting to 1000 [ 99.098314][ T6557] lo speed is unknown, defaulting to 1000 [ 99.124091][ T6557] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.179242][ T6557] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.206761][ T975] lo speed is unknown, defaulting to 1000 [ 99.267895][ T6557] lo speed is unknown, defaulting to 1000 [ 99.271381][ T6565] FAULT_INJECTION: forcing a failure. [ 99.271381][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 99.278062][ T6557] lo speed is unknown, defaulting to 1000 [ 99.295610][ T6557] lo speed is unknown, defaulting to 1000 [ 99.304584][ T6557] lo speed is unknown, defaulting to 1000 [ 99.313627][ T6557] lo speed is unknown, defaulting to 1000 [ 99.313793][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.4.186 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 99.313816][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 99.313827][ T6565] Call Trace: [ 99.313835][ T6565] [ 99.313842][ T6565] dump_stack_lvl+0x189/0x250 [ 99.313877][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.313903][ T6565] ? __pfx__printk+0x10/0x10 [ 99.313927][ T6565] ? __pfx___might_resched+0x10/0x10 [ 99.313943][ T6565] ? fs_reclaim_acquire+0x7d/0x100 [ 99.313974][ T6565] should_fail_ex+0x414/0x560 [ 99.314008][ T6565] should_failslab+0xa8/0x100 [ 99.314032][ T6565] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 99.314056][ T6565] ? __alloc_skb+0x112/0x2d0 [ 99.314080][ T6565] __alloc_skb+0x112/0x2d0 [ 99.314105][ T6565] netlink_ack+0x146/0xa50 [ 99.314141][ T6565] netlink_rcv_skb+0x2a0/0x490 [ 99.314162][ T6565] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.314191][ T6565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.314207][ T6565] ? kasan_quarantine_put+0xdd/0x220 [ 99.314239][ T6565] ? apparmor_capable+0x137/0x1b0 [ 99.314266][ T6565] ? bpf_lsm_capable+0x9/0x20 [ 99.314289][ T6565] ? security_capable+0x7e/0x2e0 [ 99.314315][ T6565] nfnetlink_rcv+0x273/0x2530 [ 99.314344][ T6565] ? __dev_queue_xmit+0x27e/0x3a70 [ 99.314368][ T6565] ? __dev_queue_xmit+0x27e/0x3a70 [ 99.314391][ T6565] ? __dev_queue_xmit+0x27e/0x3a70 [ 99.314417][ T6565] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 99.314451][ T6565] ? __dev_queue_xmit+0x27e/0x3a70 [ 99.314475][ T6565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.314497][ T6565] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 99.314528][ T6565] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.314567][ T6565] ? ref_tracker_free+0x63a/0x7d0 [ 99.314583][ T6565] ? __copy_skb_header+0xa7/0x550 [ 99.314615][ T6565] ? __pfx_ref_tracker_free+0x10/0x10 [ 99.314633][ T6565] ? __skb_clone+0x63/0x7a0 [ 99.314661][ T6565] ? __skb_clone+0x483/0x7a0 [ 99.314691][ T6565] ? skb_clone+0x246/0x3a0 [ 99.314718][ T6565] ? __netlink_deliver_tap+0x807/0x850 [ 99.314738][ T6565] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.314764][ T6565] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.314783][ T6565] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.314807][ T6565] netlink_unicast+0x758/0x8d0 [ 99.314835][ T6565] netlink_sendmsg+0x805/0xb30 [ 99.314865][ T6565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.314888][ T6565] ? aa_sock_msg_perm+0x94/0x160 [ 99.314908][ T6565] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.314928][ T6565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.314949][ T6565] __sock_sendmsg+0x219/0x270 [ 99.314969][ T6565] ____sys_sendmsg+0x505/0x830 [ 99.314998][ T6565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.315030][ T6565] ? import_iovec+0x74/0xa0 [ 99.315058][ T6565] ___sys_sendmsg+0x21f/0x2a0 [ 99.315083][ T6565] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.315144][ T6565] ? __fget_files+0x2a/0x420 [ 99.315166][ T6565] ? __fget_files+0x3a0/0x420 [ 99.315199][ T6565] __x64_sys_sendmsg+0x19b/0x260 [ 99.315225][ T6565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.315265][ T6565] ? do_syscall_64+0xba/0x210 [ 99.315285][ T6565] do_syscall_64+0xf6/0x210 [ 99.315302][ T6565] ? clear_bhb_loop+0x45/0xa0 [ 99.315323][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.315340][ T6565] RIP: 0033:0x7fcf1418e969 [ 99.315354][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.315370][ T6565] RSP: 002b:00007fcf1509b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.315387][ T6565] RAX: ffffffffffffffda RBX: 00007fcf143b5fa0 RCX: 00007fcf1418e969 [ 99.315400][ T6565] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 99.315411][ T6565] RBP: 00007fcf1509b090 R08: 0000000000000000 R09: 0000000000000000 [ 99.315421][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.315432][ T6565] R13: 0000000000000000 R14: 00007fcf143b5fa0 R15: 00007fffd91ee298 [ 99.315459][ T6565] [ 99.377165][ T6568] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 99.731090][ T6568] netlink: 184 bytes leftover after parsing attributes in process `syz.0.187'. [ 99.740483][ T6568] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 99.772099][ T6575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 99.856475][ T6586] xt_hashlimit: size too large, truncated to 1048576 [ 100.114344][ T6594] block nbd0: server does not support multiple connections per device. [ 100.131691][ T6594] block nbd0: shutting down sockets [ 100.378296][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 100.464850][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 100.552016][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 100.605863][ T6616] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 100.618397][ T6618] FAULT_INJECTION: forcing a failure. [ 100.618397][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.666785][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.1.198 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 100.666808][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 100.666819][ T6618] Call Trace: [ 100.666825][ T6618] [ 100.666833][ T6618] dump_stack_lvl+0x189/0x250 [ 100.666864][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.666889][ T6618] ? __pfx__printk+0x10/0x10 [ 100.666917][ T6618] should_fail_ex+0x414/0x560 [ 100.666947][ T6618] _copy_to_user+0x31/0xb0 [ 100.666972][ T6618] simple_read_from_buffer+0xe1/0x170 [ 100.666998][ T6618] proc_fail_nth_read+0x1df/0x250 [ 100.667025][ T6618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.667051][ T6618] ? rw_verify_area+0x258/0x650 [ 100.667068][ T6618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.667093][ T6618] vfs_read+0x1fd/0x980 [ 100.667117][ T6618] ? __pfx___mutex_lock+0x10/0x10 [ 100.667143][ T6618] ? __pfx_vfs_read+0x10/0x10 [ 100.667163][ T6618] ? __fget_files+0x2a/0x420 [ 100.667188][ T6618] ? __fget_files+0x3a0/0x420 [ 100.667206][ T6618] ? __fget_files+0x2a/0x420 [ 100.667241][ T6618] ksys_read+0x145/0x250 [ 100.667259][ T6618] ? __pfx_ksys_read+0x10/0x10 [ 100.667278][ T6618] ? do_syscall_64+0xba/0x210 [ 100.667297][ T6618] do_syscall_64+0xf6/0x210 [ 100.667313][ T6618] ? clear_bhb_loop+0x45/0xa0 [ 100.667334][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.667349][ T6618] RIP: 0033:0x7f1c63f8d37c [ 100.667364][ T6618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.667378][ T6618] RSP: 002b:00007f1c64d17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.667395][ T6618] RAX: ffffffffffffffda RBX: 00007f1c641b5fa0 RCX: 00007f1c63f8d37c [ 100.667407][ T6618] RDX: 000000000000000f RSI: 00007f1c64d170a0 RDI: 0000000000000004 [ 100.667417][ T6618] RBP: 00007f1c64d17090 R08: 0000000000000000 R09: 0000000000000000 [ 100.667427][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.667436][ T6618] R13: 0000000000000000 R14: 00007f1c641b5fa0 R15: 00007ffdaafd0438 [ 100.667463][ T6618] [ 100.890617][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 101.075341][ T6621] bond1 (unregistering): Released all slaves [ 101.117539][ T6623] veth1_macvtap: left promiscuous mode [ 101.301280][ T6639] netlink: 2 bytes leftover after parsing attributes in process `syz.3.202'. [ 101.341557][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.571340][ T6653] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 101.687411][ T6661] : renamed from bond_slave_0 (while UP) [ 101.976337][ T6676] nbd: must specify at least one socket [ 102.831017][ T6722] team0: Device gtp0 is of different type [ 103.313689][ T6752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.342596][ T6752] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 103.679366][ T6774] __nla_validate_parse: 4 callbacks suppressed [ 103.679384][ T6774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.233'. [ 103.733274][ T6768] netlink: 68 bytes leftover after parsing attributes in process `syz.3.233'. [ 103.836687][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 104.033130][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 104.101355][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 104.160392][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 104.294880][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 104.341290][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 104.397676][ T6828] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 104.494206][ T6828] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 104.691877][ T6847] netlink: 'syz.1.251': attribute type 8 has an invalid length. [ 104.862583][ T6856] vlan2: entered allmulticast mode [ 105.050389][ T6861] syzkaller1: entered promiscuous mode [ 105.064891][ T6861] syzkaller1: entered allmulticast mode [ 105.107479][ T6872] netlink: 'syz.1.259': attribute type 2 has an invalid length. [ 105.128633][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 105.241257][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'. [ 105.245663][ T6872] : entered promiscuous mode [ 106.028753][ T6936] sctp: [Deprecated]: syz.1.273 (pid 6936) Use of int in max_burst socket option. [ 106.028753][ T6936] Use struct sctp_assoc_value instead [ 106.079008][ T6931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 106.156287][ T6940] syz.2.274 uses old SIOCAX25GETINFO [ 106.271269][ T6935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.468602][ T6935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.519157][ T6887] lo speed is unknown, defaulting to 1000 [ 106.554547][ T6953] delete_channel: no stack [ 106.655182][ T6935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.681463][ T6957] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.755754][ T6935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.773661][ T6957] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 106.798047][ T6957] netlink: 'syz.4.281': attribute type 4 has an invalid length. [ 106.833529][ T6957] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 106.972290][ T6935] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.018008][ T6935] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.053901][ T6935] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.076281][ T6935] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.234395][ T6949] lo speed is unknown, defaulting to 1000 [ 107.577351][ T6989] syz_tun: entered allmulticast mode [ 107.597354][ T6992] syz_tun: entered allmulticast mode [ 107.611624][ T6989] dvmrp1: entered allmulticast mode [ 107.644483][ T6988] syz_tun: left allmulticast mode [ 107.681443][ T6992] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 107.713442][ T6991] syz_tun: left allmulticast mode [ 108.558323][ T7023] openvswitch: netlink: Message has -1 unknown bytes. [ 108.731551][ T7027] __nla_validate_parse: 12 callbacks suppressed [ 108.732000][ T7027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.303'. [ 108.779443][ T7031] erspan1: entered allmulticast mode [ 108.809856][ T7034] netlink: 7 bytes leftover after parsing attributes in process `syz.1.303'. [ 109.311318][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 109.334257][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 109.394627][ T7020] lo speed is unknown, defaulting to 1000 [ 109.489187][ T7060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.312'. [ 109.501517][ T7059] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 109.533496][ T7060] netlink: 128 bytes leftover after parsing attributes in process `syz.1.312'. [ 109.570295][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 109.596701][ T7059] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 109.643649][ T7052] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 109.668014][ T7052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'. [ 109.756387][ T7052] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.777682][ T7052] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.798960][ T7052] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.834479][ T7052] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.904249][ T7052] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 109.935775][ T7052] team0: Failed to send options change via netlink (err -105) [ 109.964929][ T7052] team0: Port device geneve0 added [ 109.996273][ T7036] lo speed is unknown, defaulting to 1000 [ 110.651466][ T7094] netlink: 'syz.0.320': attribute type 11 has an invalid length. [ 110.672926][ T7094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.320'. [ 110.862412][ T7069] lo speed is unknown, defaulting to 1000 [ 111.087843][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.474119][ T7118] xt_NFQUEUE: number of total queues is 0 [ 111.544592][ T7121] syz.0.324 (7121) used obsolete PPPIOCDETACH ioctl [ 111.595581][ T7121] Bluetooth: MGMT ver 1.23 [ 111.970759][ T7133] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 112.343895][ T7140] block nbd0: shutting down sockets [ 113.426118][ T7187] netlink: 'syz.4.336': attribute type 10 has an invalid length. [ 113.464958][ T7187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.719898][ T7198] netlink: 'syz.4.338': attribute type 10 has an invalid length. [ 113.759130][ T7198] __nla_validate_parse: 3 callbacks suppressed [ 113.759146][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.338'. [ 113.870702][ T7198] team0: Port device geneve0 added [ 114.076835][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 114.230482][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.416993][ T7167] lo speed is unknown, defaulting to 1000 [ 114.417008][ T7222] netlink: 96 bytes leftover after parsing attributes in process `syz.4.344'. [ 114.565001][ T7236] tipc: Started in network mode [ 114.592870][ T7236] tipc: Node identity ac14140f, cluster identity 4711 [ 114.634509][ T7236] tipc: New replicast peer: 255.255.255.255 [ 114.651265][ T7236] tipc: Enabled bearer , priority 10 [ 114.834295][ T7251] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 114.842157][ T7251] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 114.855140][ T7251] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.348'. [ 114.953864][ T7247] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.316208][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.323948][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.564701][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.626095][ T7257] batadv_slave_1: left promiscuous mode [ 115.756946][ T7257] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.772784][ T7257] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.782428][ T7266] tipc: Node number set to 2886997007 [ 115.788462][ T7257] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.797567][ T7257] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.826705][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.353'. [ 116.341267][ T7309] netlink: 'syz.3.359': attribute type 11 has an invalid length. [ 116.381215][ T7309] netlink: 224 bytes leftover after parsing attributes in process `syz.3.359'. [ 117.220570][ T7329] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 118.218629][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.369'. [ 118.342490][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 118.442101][ T7316] lo speed is unknown, defaulting to 1000 [ 118.577988][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.374'. [ 118.587266][ T5141] Bluetooth: hci3: command 0x0401 tx timeout [ 118.887031][ T7401] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 118.954613][ T7401] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 119.028938][ T7405] netlink: 'syz.2.377': attribute type 2 has an invalid length. [ 119.090560][ T7405] : entered promiscuous mode [ 119.417464][ T7423] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 119.447378][ T7423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'. [ 119.497580][ T7423] bridge0: port 3(dummy0) entered blocking state [ 119.534048][ T7423] bridge0: port 3(dummy0) entered disabled state [ 119.560301][ T7423] dummy0: entered allmulticast mode [ 119.758312][ T7393] lo speed is unknown, defaulting to 1000 [ 119.767119][ T7444] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 119.808701][ T7444] netlink: 596 bytes leftover after parsing attributes in process `syz.2.383'. [ 120.013624][ T7452] netlink: 'syz.1.384': attribute type 30 has an invalid length. [ 120.077191][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 120.089755][ T7447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.104760][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 120.126560][ T7452] bridge0: port 4(erspan0) entered blocking state [ 120.133981][ T7452] bridge0: port 4(erspan0) entered disabled state [ 120.140704][ T7452] erspan0: entered allmulticast mode [ 120.148836][ T7457] erspan0: left allmulticast mode [ 120.154495][ T7457] bridge0: port 4(erspan0) entered disabled state [ 120.256962][ T7459] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.747179][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 120.795808][ T7481] netlink: 92 bytes leftover after parsing attributes in process `syz.0.388'. [ 121.131459][ T7504] netlink: 256 bytes leftover after parsing attributes in process `syz.2.391'. [ 121.162814][ T7504] netlink: 80 bytes leftover after parsing attributes in process `syz.2.391'. [ 121.211051][ T7504] netlink: 'syz.2.391': attribute type 21 has an invalid length. [ 121.226007][ T7504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.391'. [ 121.235199][ T7504] netlink: 3 bytes leftover after parsing attributes in process `syz.2.391'. [ 122.045520][ T7545] netlink: 'syz.1.400': attribute type 32 has an invalid length. [ 122.773141][ T7514] lo speed is unknown, defaulting to 1000 [ 123.132265][ T7575] IPv6: sit2: Disabled Multicast RS [ 123.171640][ T7575] sctp: [Deprecated]: syz.4.407 (pid 7575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.171640][ T7575] Use struct sctp_sack_info instead [ 123.188470][ T7580] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 123.196728][ T7584] !: renamed from veth1_to_batadv [ 124.306763][ T7621] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 124.845589][ T7656] block nbd1: shutting down sockets [ 125.026487][ T7593] lo speed is unknown, defaulting to 1000 [ 125.445346][ T7678] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 125.639275][ T7639] lo speed is unknown, defaulting to 1000 [ 125.649463][ T7680] bpq0: entered promiscuous mode [ 125.673986][ T7680] bpq0: entered allmulticast mode [ 125.708965][ T7675] syzkaller1: entered promiscuous mode [ 125.716229][ T7675] syzkaller1: entered allmulticast mode [ 125.968337][ T7694] __nla_validate_parse: 9 callbacks suppressed [ 125.968355][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 126.008580][ T7696] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 126.092164][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 126.699907][ T7722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'. [ 126.892188][ T7735] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.917694][ T7735] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.934301][ T7735] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.969322][ T7735] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.987954][ T7735] hsr0: left allmulticast mode [ 126.995854][ T7735] hsr_slave_0: left allmulticast mode [ 127.001424][ T7735] hsr_slave_1: left allmulticast mode [ 127.009424][ T7735] hsr0: left promiscuous mode [ 127.021999][ T7738] sctp: [Deprecated]: syz.4.446 (pid 7738) Use of int in max_burst socket option. [ 127.021999][ T7738] Use struct sctp_assoc_value instead [ 127.137843][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.157548][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.176983][ T7736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.206769][ T7726] lo speed is unknown, defaulting to 1000 [ 127.484870][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 128.050969][ T7757] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.284486][ T7758] syzkaller1: entered promiscuous mode [ 128.302688][ T7758] syzkaller1: entered allmulticast mode [ 128.590965][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 128.617960][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.640369][ T7791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.098042][ T7816] ÿÿÿÿÿÿ: renamed from vlan1 [ 129.114032][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.466'. [ 129.173062][ T7818] netlink: 168 bytes leftover after parsing attributes in process `syz.2.467'. [ 129.251318][ T7826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.469'. [ 129.258338][ T7822] netlink: 168 bytes leftover after parsing attributes in process `syz.2.467'. [ 129.290074][ T7826] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 129.329003][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.365698][ T7826] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.564223][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 129.845452][ T7860] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 129.996515][ T7860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.095278][ T7871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.123107][ T7871] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 130.159730][ T7871] bond2: (slave vcan1): Error -95 calling set_mac_address [ 130.210212][ T7859] lo speed is unknown, defaulting to 1000 [ 130.218607][ T7885] netlink: 'syz.1.481': attribute type 39 has an invalid length. [ 130.572665][ T7899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 130.772189][ T7902] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.966732][ T7865] lo speed is unknown, defaulting to 1000 [ 130.972520][ T5833] Bluetooth: hci4: link tx timeout [ 130.977976][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.998573][ T5141] Bluetooth: hci4: link tx timeout [ 131.004073][ T5141] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.012798][ T5141] Bluetooth: hci4: link tx timeout [ 131.018315][ T5141] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.207718][ T7929] tipc: Started in network mode [ 131.216585][ T7929] tipc: Node identity 260c877442d, cluster identity 4711 [ 131.226440][ T7929] tipc: Enabled bearer , priority 0 [ 131.377023][ T7929] tipc: Disabling bearer [ 131.493419][ T7896] lo speed is unknown, defaulting to 1000 [ 132.174671][ T7964] __nla_validate_parse: 1 callbacks suppressed [ 132.174689][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 132.380829][ T7978] macsec1: entered promiscuous mode [ 132.387588][ T7978] macsec1: entered allmulticast mode [ 132.394925][ T7978] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 132.588413][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.064957][ T5141] Bluetooth: hci4: command 0x0406 tx timeout [ 133.217720][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.248503][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.258500][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.295543][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.326436][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.361298][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.398435][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.421494][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.432448][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.442333][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.451976][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.515607][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.516446][ T8029] netlink: 596 bytes leftover after parsing attributes in process `syz.1.529'. [ 133.533124][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.542571][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.560118][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.569079][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.581144][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.590729][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.619094][ T8035] Bluetooth: MGMT ver 1.23 [ 133.815789][ T8051] syz.0.537: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.836395][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.0.537 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 133.836419][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 133.836430][ T8051] Call Trace: [ 133.836436][ T8051] [ 133.836444][ T8051] dump_stack_lvl+0x189/0x250 [ 133.836476][ T8051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.836501][ T8051] ? __pfx__printk+0x10/0x10 [ 133.836518][ T8051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.836546][ T8051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.836577][ T8051] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 133.836607][ T8051] warn_alloc+0x214/0x310 [ 133.836638][ T8051] ? __pfx_warn_alloc+0x10/0x10 [ 133.836662][ T8051] ? kasan_save_track+0x4f/0x80 [ 133.836681][ T8051] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 133.836702][ T8051] ? xskq_create+0x56/0x170 [ 133.836727][ T8051] ? __x64_sys_setsockopt+0x18b/0x220 [ 133.836747][ T8051] ? do_syscall_64+0xf6/0x210 [ 133.836760][ T8051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.836788][ T8051] __vmalloc_node_range_noprof+0x125/0x12c0 [ 133.836840][ T8051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.836867][ T8051] ? __kasan_kmalloc+0x93/0xb0 [ 133.836899][ T8051] vmalloc_user_noprof+0x74/0x80 [ 133.836924][ T8051] ? xskq_create+0xbf/0x170 [ 133.836946][ T8051] xskq_create+0xbf/0x170 [ 133.836973][ T8051] xsk_init_queue+0xb0/0x110 [ 133.836999][ T8051] xsk_setsockopt+0x43f/0x710 [ 133.837024][ T8051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.837057][ T8051] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 133.837076][ T8051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.837098][ T8051] do_sock_setsockopt+0x257/0x3e0 [ 133.837121][ T8051] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 133.837138][ T8051] ? __fget_files+0x2a/0x420 [ 133.837165][ T8051] ? __fget_files+0x3a0/0x420 [ 133.837185][ T8051] ? __fget_files+0x2a/0x420 [ 133.837214][ T8051] __x64_sys_setsockopt+0x18b/0x220 [ 133.837240][ T8051] do_syscall_64+0xf6/0x210 [ 133.837256][ T8051] ? clear_bhb_loop+0x45/0xa0 [ 133.837278][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.837295][ T8051] RIP: 0033:0x7f3568b8e969 [ 133.837311][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.837326][ T8051] RSP: 002b:00007f35699e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.837344][ T8051] RAX: ffffffffffffffda RBX: 00007f3568db5fa0 RCX: 00007f3568b8e969 [ 133.837358][ T8051] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 133.837369][ T8051] RBP: 00007f3568c10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 133.837381][ T8051] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.837393][ T8051] R13: 0000000000000000 R14: 00007f3568db5fa0 R15: 00007fff58699408 [ 133.837421][ T8051] [ 133.837435][ T8051] Mem-Info: [ 134.128534][ T8051] active_anon:3996 inactive_anon:0 isolated_anon:0 [ 134.128534][ T8051] active_file:1365 inactive_file:38328 isolated_file:0 [ 134.128534][ T8051] unevictable:768 dirty:79 writeback:0 [ 134.128534][ T8051] slab_reclaimable:10520 slab_unreclaimable:102327 [ 134.128534][ T8051] mapped:28344 shmem:1402 pagetables:756 [ 134.128534][ T8051] sec_pagetables:0 bounce:0 [ 134.128534][ T8051] kernel_misc_reclaimable:0 [ 134.128534][ T8051] free:1341806 free_pcp:407 free_cma:0 [ 134.173927][ T8051] Node 0 active_anon:15984kB inactive_anon:0kB active_file:5460kB inactive_file:153236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113376kB dirty:316kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11648kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.207503][ T8051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.239923][ T8051] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.267893][ T8051] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 134.273913][ T8051] Node 0 DMA32 free:1440112kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:15976kB inactive_anon:0kB active_file:5460kB inactive_file:153136kB unevictable:1536kB writepending:316kB present:3129332kB managed:2564072kB mlocked:0kB bounce:0kB free_pcp:1692kB local_pcp:1132kB free_cma:0kB [ 134.305044][ T8051] lowmem_reserve[]: 0 0 0 0 0 [ 134.309963][ T8051] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.337724][ T8051] lowmem_reserve[]: 0 0 0 0 0 [ 134.342503][ T8051] Node 1 Normal free:3911272kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.371737][ T8051] lowmem_reserve[]: 0 0 0 0 0 [ 134.376530][ T8051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.435909][ T8051] Node 0 DMA32: 590*4kB (UM) 354*8kB (UME) 363*16kB (UM) 810*32kB (UME) 342*64kB (UME) 339*128kB (UME) 225*256kB (UME) 93*512kB (UM) 42*1024kB (UME) 3*2048kB (UM) 289*4096kB (UM) = 1440312kB [ 134.472773][ T8051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.487080][ T8051] Node 1 Normal: 232*4kB (UE) 65*8kB (UME) 48*16kB (UME) 218*32kB (UME) 104*64kB (UME) 35*128kB (UME) 17*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3911272kB [ 134.509356][ T8051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.532686][ T8051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.561771][ T8051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.571887][ T8051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.581498][ T8051] 41095 total pagecache pages [ 134.586751][ T8051] 0 pages in swap cache [ 134.590940][ T8051] Free swap = 124996kB [ 134.597485][ T8051] Total swap = 124996kB [ 134.636051][ T8051] 2097051 pages RAM [ 134.640385][ T8051] 0 pages HighMem/MovableOnly [ 134.646775][ T8067] netlink: 'syz.4.541': attribute type 2 has an invalid length. [ 134.661976][ T8051] 424375 pages reserved [ 134.668756][ T8067] : entered promiscuous mode [ 134.678062][ T8051] 0 pages cma reserved [ 135.131490][ T8104] xt_TCPMSS: Only works on TCP SYN packets [ 135.252252][ T8111] xt_bpf: check failed: parse error [ 135.836342][ T8135] xt_CT: No such helper "pptp" [ 135.998736][ T8138] lo speed is unknown, defaulting to 1000 [ 136.049892][ T13] tipc: Subscription rejected, illegal request [ 136.082417][ T8151] bridge_slave_0: left promiscuous mode [ 136.088338][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.108208][ T8151] bridge_slave_1: left allmulticast mode [ 136.132155][ T8151] bridge_slave_1: left promiscuous mode [ 136.143530][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.157423][ T8151] bond0: (slave bond_slave_0): Releasing backup interface [ 136.160928][ T8159] netlink: 'syz.4.569': attribute type 11 has an invalid length. [ 136.177157][ T8151] bond0: (slave bond_slave_1): Releasing backup interface [ 136.202551][ T8151] team0: Port device team_slave_0 removed [ 136.220019][ T8151] team0: Port device team_slave_1 removed [ 136.234772][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.261524][ T8151] team0: Port device geneve0 removed [ 136.772229][ T8178] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 136.782547][ T8180] netlink: 'syz.2.573': attribute type 3 has an invalid length. [ 137.238417][ T8224] IPv6: sit1: Disabled Multicast RS [ 137.247322][ T8224] sit1: entered allmulticast mode [ 137.410944][ T8237] xfrm1: entered promiscuous mode [ 137.426069][ T8237] xfrm1: entered allmulticast mode [ 137.540329][ T8245] syzkaller0: entered promiscuous mode [ 137.550001][ T8245] syzkaller0: entered allmulticast mode [ 137.605455][ T8256] netlink: 'syz.1.593': attribute type 9 has an invalid length. [ 137.614678][ T8256] netlink: 'syz.1.593': attribute type 6 has an invalid length. [ 137.641929][ T8259] __nla_validate_parse: 38 callbacks suppressed [ 137.641944][ T8259] netlink: 240 bytes leftover after parsing attributes in process `syz.0.591'. [ 137.719955][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.594'. [ 137.814357][ T8266] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.228850][ T8274] lo speed is unknown, defaulting to 1000 [ 194.037603][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.108077][ T5843] Bluetooth: hci3: command 0x0401 tx timeout [ 196.108313][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 196.114381][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 196.120163][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 255.475675][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.564433][ T8292] bridge0: port 3(gretap0) entered blocking state [ 260.576494][ T8292] bridge0: port 3(gretap0) entered disabled state [ 260.584902][ T8292] gretap0: entered allmulticast mode [ 260.593211][ T8292] gretap0: entered promiscuous mode [ 260.618693][ T8290] bridge_slave_0: left allmulticast mode [ 260.624859][ T8290] bridge_slave_0: left promiscuous mode [ 260.630692][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.648935][ T8290] bridge_slave_1: left allmulticast mode [ 260.655077][ T8290] bridge_slave_1: left promiscuous mode [ 260.661130][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.678754][ T8290] bond0: (slave bond_slave_0): Releasing backup interface [ 260.688103][ T8296] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 260.706707][ T8290] bond0: (slave bond_slave_1): Releasing backup interface [ 260.737640][ T8290] team0: Port device team_slave_0 removed [ 260.754933][ T8290] team0: Port device team_slave_1 removed [ 260.763834][ T8290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.771761][ T8290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.785452][ T8290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.793974][ T8290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.811368][ T8290] bond0: (slave netdevsim0): Releasing backup interface [ 260.876821][ T9] syz0: Port: 1 Link DOWN [ 261.411825][ T8303] lo speed is unknown, defaulting to 1000 [ 261.761950][ T8314] atomic_op ffff88805ca0c198 conn xmit_atomic 0000000000000000 [ 261.898498][ T8327] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 261.947635][ T8327] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 262.072784][ T8297] lo speed is unknown, defaulting to 1000 [ 262.128662][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 262.653391][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 262.663328][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 262.991188][ T8312] lo speed is unknown, defaulting to 1000 [ 263.005969][ T8316] lo speed is unknown, defaulting to 1000 [ 263.037419][ T8318] lo speed is unknown, defaulting to 1000 [ 263.078523][ T8338] siw: device registration error -23 [ 263.378701][ T8345] netlink: 68 bytes leftover after parsing attributes in process `syz.3.615'. [ 265.052815][ T8369] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 265.075689][ T8369] lo: left promiscuous mode [ 265.081934][ T8369] tunl0: left promiscuous mode [ 265.099156][ T8369] gre0: left promiscuous mode [ 265.107602][ T8369] gretap0: left promiscuous mode [ 265.115517][ T8369] erspan0: left promiscuous mode [ 265.122451][ T8369] ip6_vti0: left promiscuous mode [ 265.129936][ T8369] sit0: left promiscuous mode [ 265.137786][ T8369] ip6tnl0: left promiscuous mode [ 265.150457][ T8369] ip6gre0: left promiscuous mode [ 265.156484][ T8369] ip6gretap0: left promiscuous mode [ 265.163439][ T8369] bridge0: left promiscuous mode [ 265.169637][ T8369] vcan0: left promiscuous mode [ 265.175682][ T8369] bond0: left promiscuous mode [ 265.182761][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.196463][ T8369] team0: left promiscuous mode [ 265.213779][ T8369] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.230007][ T8369] nlmon0: left promiscuous mode [ 265.242634][ T8369] caif0: left promiscuous mode [ 265.247506][ T8369] net_ratelimit: 28 callbacks suppressed [ 265.247518][ T8369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.444085][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 266.620696][ T8392] wg1: entered allmulticast mode [ 266.643802][ T8362] syzkaller0 (unregistered): delete flow: hash 415934338 index 0 [ 266.993306][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 267.063536][ T8440] hsr_slave_1 (unregistering): left promiscuous mode [ 267.168606][ T8449] openvswitch: netlink: nsh attribute has 3 unknown bytes. [ 267.197728][ T8449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.509783][ T8445] lo speed is unknown, defaulting to 1000 [ 267.887236][ T8482] bond0: option ad_select: unable to set because the bond device is up [ 268.017665][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.653'. [ 268.471650][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.661'. [ 268.588421][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 268.816397][ T8528] team_slave_0: entered promiscuous mode [ 268.822794][ T8528] team_slave_1: entered promiscuous mode [ 268.828520][ T8528] geneve0: entered promiscuous mode [ 268.845599][ T8528] macsec0: entered promiscuous mode [ 268.850822][ T8528] team0: entered promiscuous mode [ 268.872465][ T8530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.896641][ T8528] team0: left promiscuous mode [ 268.904677][ T8528] team_slave_0: left promiscuous mode [ 268.910144][ T8528] team_slave_1: left promiscuous mode [ 268.915700][ T8528] geneve0: left promiscuous mode [ 269.199601][ T8539] netlink: 9 bytes leftover after parsing attributes in process `syz.1.669'. [ 269.235950][ T8539] gretap0: entered promiscuous mode [ 269.294640][ T8517] lo speed is unknown, defaulting to 1000 [ 269.542421][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 269.626721][ T8552] bridge_slave_1: left allmulticast mode [ 269.632404][ T8552] bridge_slave_1: left promiscuous mode [ 269.697186][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.710054][ T8552] bridge_slave_0: left allmulticast mode [ 269.718286][ T8552] bridge_slave_0: left promiscuous mode [ 269.732977][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.831415][ T8516] lo speed is unknown, defaulting to 1000 [ 269.988593][ T8565] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 270.020187][ T8566] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.029009][ T8568] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 270.036821][ T8565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.677'. [ 270.101043][ T8565] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 270.147334][ T8568] bond3: entered promiscuous mode [ 270.163813][ T8568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.251392][ T8570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.271855][ T8570] bond3: (slave bond4): making interface the new active one [ 270.282083][ T8570] bond4: entered promiscuous mode [ 270.288244][ T8570] bond3: (slave bond4): Enslaving as an active interface with an up link [ 270.324013][ T8565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.681676][ T8603] raw_sendmsg: syz.2.684 forgot to set AF_INET. Fix it! [ 271.150040][ T8636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.182316][ T8638] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 271.201399][ T8638] bridge0: port 3(dummy0) entered disabled state [ 271.217782][ T8638] dummy0: left allmulticast mode [ 271.223158][ T8638] bridge0: port 3(dummy0) entered disabled state [ 271.241132][ T8638] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 271.258454][ T8634] openvswitch: netlink: Key type 30 is not supported [ 271.525599][ T8660] syzkaller0: entered allmulticast mode [ 271.596876][ T8659] syzkaller0: left allmulticast mode [ 271.614075][ T8668] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 271.621744][ T8668] netlink: 224 bytes leftover after parsing attributes in process `syz.4.702'. [ 271.997394][ T8692] syzkaller0: entered promiscuous mode [ 272.003768][ T8692] syzkaller0: entered allmulticast mode [ 272.184137][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.717'. [ 273.186957][ T8709] team0: Mode changed to "activebackup" [ 273.194883][ T8719] syzkaller0: entered promiscuous mode [ 273.215091][ T8719] syzkaller0: entered allmulticast mode [ 273.250085][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 273.350282][ T8727] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 273.401336][ T8727] netlink: 'syz.0.722': attribute type 19 has an invalid length. [ 273.487006][ T8736] team0: Device gtp0 is of different type [ 273.878658][ T8767] netlink: 248 bytes leftover after parsing attributes in process `syz.1.731'. [ 274.014316][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.737'. [ 274.037048][ T8779] netlink: 'syz.1.738': attribute type 9 has an invalid length. [ 274.429842][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.743'. [ 274.521282][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 274.590731][ T8814] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 274.602248][ T8814] netlink: 'syz.0.748': attribute type 2 has an invalid length. [ 274.610865][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 274.760191][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 275.029366][ T8830] team0: Mode changed to "loadbalance" [ 275.040525][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 275.103243][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 275.311657][ T8839] Bluetooth: MGMT ver 1.23 [ 275.392993][ T8839] netlink: 17 bytes leftover after parsing attributes in process `syz.0.754'. [ 275.401926][ T8839] netlink: zone id is out of range [ 275.407507][ T8839] netlink: zone id is out of range [ 275.412707][ T8839] netlink: zone id is out of range [ 275.417831][ T8839] netlink: zone id is out of range [ 275.423370][ T8839] netlink: zone id is out of range [ 275.428499][ T8839] netlink: zone id is out of range [ 275.433661][ T8839] netlink: zone id is out of range [ 275.438988][ T8839] netlink: zone id is out of range [ 276.248892][ T8844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.358039][ T8852] sch_tbf: burst 3374 is lower than device lo mtu (65550) ! [ 276.495946][ T8861] xt_hashlimit: size too large, truncated to 1048576 [ 276.523290][ T8838] lo speed is unknown, defaulting to 1000 [ 276.603226][ T8862] xt_hashlimit: size too large, truncated to 1048576 [ 276.674886][ T8865] netlink: 'syz.1.761': attribute type 12 has an invalid length. [ 276.811692][ T8867] net_ratelimit: 78 callbacks suppressed [ 276.811710][ T8867] openvswitch: netlink: Key type 140 is out of range max 32 [ 276.914315][ T8851] lo speed is unknown, defaulting to 1000 [ 277.086685][ T8875] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 277.647385][ T8900] batman_adv: batadv0: Adding interface: dummy0 [ 277.672086][ T8900] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.719504][ T8900] batman_adv: batadv0: Interface activated: dummy0 [ 277.865620][ T8915] bridge0: entered promiscuous mode [ 277.874738][ T8915] bridge0: port 3(macvlan2) entered blocking state [ 277.882256][ T8915] bridge0: port 3(macvlan2) entered disabled state [ 277.889214][ T8915] macvlan2: entered allmulticast mode [ 277.894740][ T8915] bridge0: entered allmulticast mode [ 277.909920][ T8915] macvlan2: left allmulticast mode [ 277.916265][ T8915] bridge0: left allmulticast mode [ 277.953202][ T8915] bridge0: left promiscuous mode [ 278.011840][ T8928] pim6reg: entered allmulticast mode [ 278.020070][ T8928] pim6reg: left allmulticast mode [ 278.394187][ T8949] __nla_validate_parse: 4 callbacks suppressed [ 278.394201][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.791'. [ 278.456627][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 278.460964][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 278.486954][ T8949] batman_adv: batadv0: Adding interface: ip6gretap1 [ 278.500698][ T8949] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.528857][ T8949] batman_adv: batadv0: Interface activated: ip6gretap1 [ 278.661908][ T8962] netlink: zone id is out of range [ 278.673029][ T8962] netlink: zone id is out of range [ 278.691675][ T8962] netlink: zone id is out of range [ 278.725605][ T8962] netlink: zone id is out of range [ 278.733485][ T8962] netlink: zone id is out of range [ 278.738776][ T8962] netlink: zone id is out of range [ 278.747049][ T8962] netlink: zone id is out of range [ 278.752293][ T8962] netlink: zone id is out of range [ 278.757785][ T8962] netlink: zone id is out of range [ 279.090037][ T8977] team0: Device gtp0 is of different type [ 279.656324][ T8995] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003 [ 279.877795][ T9008] xt_addrtype: ipv6 does not support BROADCAST matching [ 279.973963][ T9018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 280.010316][ T9] IPVS: starting estimator thread 0... [ 280.026730][ T9024] netlink: 'syz.2.814': attribute type 39 has an invalid length. [ 280.116162][ T9023] IPVS: using max 32 ests per chain, 76800 per kthread [ 280.146585][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 280.171265][ T9017] syzkaller0: entered promiscuous mode [ 280.177235][ T9017] syzkaller0: entered allmulticast mode [ 280.184698][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 280.405686][ T9049] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 280.415498][ T9049] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 280.566816][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.822'. [ 280.938848][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 280.990094][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 281.594563][ T9072] netlink: 'syz.4.828': attribute type 2 has an invalid length. [ 281.620835][ T9072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.828'. [ 281.941939][ T9054] lo speed is unknown, defaulting to 1000 [ 283.371572][ T9104] lo speed is unknown, defaulting to 1000 [ 284.047829][ T9140] __nla_validate_parse: 3 callbacks suppressed [ 284.047846][ T9140] netlink: 412 bytes leftover after parsing attributes in process `syz.1.846'. [ 284.273023][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 284.701002][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 284.747160][ T9114] lo speed is unknown, defaulting to 1000 [ 284.972326][ T9180] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 285.081737][ T9180] bond4: entered promiscuous mode [ 285.099922][ T9180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.201952][ T9187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.209269][ T9187] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 285.220455][ T9187] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 285.238064][ T9187] bond4: (slave ip6gre1): making interface the new active one [ 285.249984][ T9187] ip6gre1: entered promiscuous mode [ 285.256038][ T9197] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 285.259509][ T9187] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 285.317911][ T9198] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 285.329953][ T9198] net_ratelimit: 4 callbacks suppressed [ 285.329968][ T9198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.345314][ T9153] lo speed is unknown, defaulting to 1000 [ 285.749115][ T9214] netlink: 248 bytes leftover after parsing attributes in process `syz.1.869'. [ 285.821828][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'. [ 285.839585][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 286.133543][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.875'. [ 286.166518][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 286.191207][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 286.208492][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 286.469044][ T9250] tipc: Enabling of bearer rejected, failed to enable media [ 286.574085][ T9228] lo speed is unknown, defaulting to 1000 [ 286.635993][ T9257] netlink: 'syz.3.884': attribute type 3 has an invalid length. [ 286.995129][ T9246] lo speed is unknown, defaulting to 1000 [ 287.111255][ T9266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.120148][ T9266] batadv_slave_0: entered promiscuous mode [ 287.698549][ T9302] netlink: 'syz.3.899': attribute type 2 has an invalid length. [ 287.993554][ T9315] vlan0: entered promiscuous mode [ 288.007321][ T9315] vlan0: entered allmulticast mode [ 288.014089][ T9315] hsr_slave_1: entered allmulticast mode [ 288.037596][ T9311] netlink: 'syz.1.901': attribute type 11 has an invalid length. [ 288.161802][ T9329] bridge_slave_1: left allmulticast mode [ 288.171133][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.207916][ T9329] bridge_slave_0: left allmulticast mode [ 288.214101][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.314092][ T9384] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 289.355197][ T9384] __nla_validate_parse: 16 callbacks suppressed [ 289.355213][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 289.504487][ T9394] bond0: entered promiscuous mode [ 289.510723][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 289.517315][ T9394] : entered promiscuous mode [ 289.534055][ T9394] bond_slave_1: entered promiscuous mode [ 289.561368][ T9393] macvlan3: entered promiscuous mode [ 289.570474][ T9393] bond0: entered promiscuous mode [ 289.575883][ T9393] bond_slave_0: entered promiscuous mode [ 289.581695][ T9393] bond_slave_1: entered promiscuous mode [ 289.590443][ T9393] batadv0: entered promiscuous mode [ 289.597880][ T9393] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 289.611907][ T9398] netlink: 160 bytes leftover after parsing attributes in process `syz.3.926'. [ 289.664634][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 289.783896][ T9406] netlink: 'syz.4.931': attribute type 6 has an invalid length. [ 289.802803][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 289.850601][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 290.199334][ T9432] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.938'. [ 290.212411][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.938'. [ 290.352352][ T9440] macsec0: entered allmulticast mode [ 290.535342][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 290.941422][ T9466] batman_adv: batadv0: Interface deactivated: dummy0 [ 290.995105][ T9471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.949'. [ 291.097737][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.153800][ T9466] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.164000][ T9466] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.176796][ T9466] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.185778][ T9466] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.295177][ T9468] veth5: entered allmulticast mode [ 291.414691][ T9469] bond0: left promiscuous mode [ 291.419875][ T9469] : left promiscuous mode [ 291.425232][ T9469] bond_slave_1: left promiscuous mode [ 291.435524][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.444476][ T9469] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.454630][ T9469] batman_adv: batadv0: Interface activated: dummy0 [ 291.466051][ T9469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.592908][ T9481] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 291.856875][ T9465] lo speed is unknown, defaulting to 1000 [ 292.195601][ T9504] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 292.245031][ T9504] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 292.488799][ T9520] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 292.642953][ T9527] gretap0: left allmulticast mode [ 292.648160][ T9527] gretap0: left promiscuous mode [ 292.653585][ T9527] bridge0: port 3(gretap0) entered disabled state [ 292.666561][ T9527] bond0: (slave batadv0): Releasing backup interface [ 292.675347][ T9527] batadv0: left promiscuous mode [ 292.689769][ T9527] bridge_slave_0: left allmulticast mode [ 292.699851][ T9527] bridge_slave_0: left promiscuous mode [ 292.714021][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.731572][ T9527] bridge_slave_1: left allmulticast mode [ 292.737802][ T9527] bridge_slave_1: left promiscuous mode [ 292.751130][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.763674][ T9527] bond0: (slave bond_slave_0): Releasing backup interface [ 292.771512][ T9527] bond_slave_0: left promiscuous mode [ 292.780023][ T9527] bond0: (slave bond_slave_1): Releasing backup interface [ 292.792766][ T9527] bond_slave_1: left promiscuous mode [ 292.802028][ T9527] team0: Port device team_slave_0 removed [ 292.813962][ T9527] team0: Port device team_slave_1 removed [ 292.820205][ T9527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.831525][ T9527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.840161][ T9527] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 292.849770][ T9527] batman_adv: batadv0: Removing interface: ip6gretap1 [ 292.858733][ T9527] bond4: (slave ip6gre1): Releasing backup interface [ 292.866027][ T9527] ip6gre1: left promiscuous mode [ 292.887670][ T9535] wg1: entered promiscuous mode [ 292.914752][ T9523] lo speed is unknown, defaulting to 1000 [ 293.195962][ T9551] netlink: 'syz.4.975': attribute type 2 has an invalid length. [ 293.420656][ T9563] netlink: 'syz.0.980': attribute type 32 has an invalid length. [ 294.045191][ T9598] netlink: 'syz.4.989': attribute type 4 has an invalid length. [ 294.933541][ T9640] __nla_validate_parse: 9 callbacks suppressed [ 294.933558][ T9640] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1004'. [ 294.969629][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'. [ 295.502747][ T9672] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1015'. [ 295.655286][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1018'. [ 296.182783][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 296.217394][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 296.231292][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1025'. [ 296.523756][ T9716] team0: Mode changed to "loadbalance" [ 296.554011][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 296.706349][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 297.140194][ T9769] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1046'. [ 297.202960][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 297.347044][ T9773] delete_channel: no stack [ 297.854676][ T9827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.272861][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 298.386435][ T9863] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 298.561171][ T9871] IPv6: addrconf: prefix option has invalid lifetime [ 298.613223][ T9879] sctp: [Deprecated]: syz.2.1083 (pid 9879) Use of int in max_burst socket option. [ 298.613223][ T9879] Use struct sctp_assoc_value instead [ 298.890761][ T9896] SET target dimension over the limit! [ 299.652349][ T9935] siw: device registration error -23 [ 299.881837][ T9936] veth0: entered promiscuous mode [ 300.061161][ T9955] __nla_validate_parse: 14 callbacks suppressed [ 300.061179][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 300.089258][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 300.098500][ T9955] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1104'. [ 300.221150][ T9964] ip6gre1: entered promiscuous mode [ 300.388414][ T9976] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1112'. [ 300.401163][ T9976] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 300.561057][ T30] audit: type=1800 audit(1746639685.756:4): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1117" name="xffffffffffffffff00000000000000000000003" dev="tmpfs" ino=1062 res=0 errno=0 [ 300.614444][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1120'. [ 300.625678][ T9993] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 300.678346][ T9993] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 300.697147][T10002] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1118'. [ 300.730793][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1120'. [ 301.019241][T10024] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1127'. [ 301.037109][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 301.196454][T10031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.397305][T10048] 8021q: VLANs not supported on ip_vti0 [ 301.591294][T10050] netlink: 396 bytes leftover after parsing attributes in process `syz.2.1135'. [ 301.626138][T10004] lo speed is unknown, defaulting to 1000 [ 302.670521][T10107] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 302.752512][T10082] lo speed is unknown, defaulting to 1000 [ 302.915091][T10085] siw: device registration error -23 [ 303.641447][T10166] netlink: 'syz.2.1169': attribute type 14 has an invalid length. [ 303.676777][T10168] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 303.690954][T10168] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 303.880882][T10185] syzkaller1: entered promiscuous mode [ 303.886781][T10185] syzkaller1: entered allmulticast mode [ 304.377214][T10218] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 304.435491][T10220] openvswitch: netlink: Key type 2064 is out of range max 32 [ 304.610099][T10229] veth0_to_batadv: entered promiscuous mode [ 304.632908][T10229] veth0_to_batadv: entered allmulticast mode [ 304.667912][T10233] openvswitch: netlink: Flow actions attr not present in new flow. [ 305.140280][ T30] audit: type=1800 audit(1746639690.336:5): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1198" name="memory.events" dev="tmpfs" ino=1165 res=0 errno=0 [ 305.213695][ T30] audit: type=1804 audit(1746639690.386:6): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1198" name="memory.events" dev="tmpfs" ino=1165 res=1 errno=0 [ 305.247301][T10265] __nla_validate_parse: 17 callbacks suppressed [ 305.247317][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 305.262642][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 305.405862][T10274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.455945][T10274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1202'. [ 305.604976][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 305.845447][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 305.930798][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 306.060538][T10315] syzkaller1: entered promiscuous mode [ 306.073210][T10315] syzkaller1: entered allmulticast mode [ 306.327967][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 306.358914][T10341] vlan1: entered promiscuous mode [ 306.371473][T10341] team0: entered promiscuous mode [ 306.380570][T10341] team_slave_0: entered promiscuous mode [ 306.386740][T10341] team_slave_1: entered promiscuous mode [ 306.392952][T10341] geneve0: entered promiscuous mode [ 306.616767][T10362] netlink: 'syz.0.1227': attribute type 21 has an invalid length. [ 306.670151][T10362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1227'. [ 307.506081][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.519034][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.530021][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.538606][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.547071][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.584696][ T82] dvmrp1 (unregistering): left allmulticast mode [ 307.871517][ T82] bond0 (unregistering): left promiscuous mode [ 307.890626][ T82] bond0 (unregistering): Released all slaves [ 307.906564][ T82] bond1 (unregistering): Released all slaves [ 307.922647][ T82] bond2 (unregistering): Released all slaves [ 307.950053][ T82] bond3 (unregistering): Released all slaves [ 308.034274][ T82] bond4 (unregistering): Released all slaves [ 308.052022][T10391] bond0: (slave dummy0): Releasing backup interface [ 308.077231][T10391] bond0: (slave bond_slave_0): Releasing backup interface [ 308.087324][T10391] bond0: (slave bond_slave_1): Releasing backup interface [ 308.113803][T10391] team0: Port device team_slave_0 removed [ 308.140652][T10391] team0: Port device team_slave_1 removed [ 308.150410][T10363] lo speed is unknown, defaulting to 1000 [ 308.166819][ T82] tipc: Disabling bearer [ 308.181018][ T82] tipc: Left network mode [ 308.202019][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1239'. [ 308.306579][ T9] IPVS: starting estimator thread 0... [ 308.412614][T10418] IPVS: using max 30 ests per chain, 72000 per kthread [ 308.490872][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 309.489135][T10397] lo speed is unknown, defaulting to 1000 [ 309.636151][ T5833] Bluetooth: hci2: command tx timeout [ 310.081895][ T82] hsr_slave_0: left promiscuous mode [ 310.106030][T10453] netlink: 'syz.1.1249': attribute type 4 has an invalid length. [ 310.125615][ T82] hsr_slave_1: left promiscuous mode [ 310.164213][T10454] netlink: 'syz.1.1249': attribute type 4 has an invalid length. [ 310.195309][T10457] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 310.806259][T10457] netlink: 'syz.0.1251': attribute type 6 has an invalid length. [ 310.814825][T10457] __nla_validate_parse: 2 callbacks suppressed [ 310.814838][T10457] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1251'. [ 310.835607][T10458] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 311.095485][T10397] chnl_net:caif_netlink_parms(): no params data found [ 311.180962][T10489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1257'. [ 311.193385][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 311.215896][T10490] netlink: 'syz.1.1258': attribute type 12 has an invalid length. [ 311.260813][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 311.274768][T10489] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1257'. [ 311.435638][T10505] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1260'. [ 311.506786][T10503] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1261'. [ 311.520349][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.532167][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.543710][T10397] bridge_slave_0: entered allmulticast mode [ 311.551735][T10397] bridge_slave_0: entered promiscuous mode [ 311.647090][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.655018][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.662295][T10397] bridge_slave_1: entered allmulticast mode [ 311.673833][T10397] bridge_slave_1: entered promiscuous mode [ 311.715023][ T5833] Bluetooth: hci2: command tx timeout [ 311.784559][T10520] xt_nfacct: accounting object `syz1' does not exists [ 311.909931][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 311.927077][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.965895][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.116291][T10397] team0: Port device team_slave_0 added [ 312.158664][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 312.180437][T10397] team0: Port device team_slave_1 added [ 312.292982][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.300689][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.363589][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.432028][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.454351][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.537802][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.574133][T10521] lo speed is unknown, defaulting to 1000 [ 312.694938][T10397] hsr_slave_0: entered promiscuous mode [ 312.711299][T10397] hsr_slave_1: entered promiscuous mode [ 312.713493][T10552] netlink: 'syz.1.1273': attribute type 23 has an invalid length. [ 312.781987][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 313.782630][ T5833] Bluetooth: hci2: command tx timeout [ 313.877494][T10598] xt_hashlimit: size too large, truncated to 1048576 [ 313.893929][T10599] xt_hashlimit: size too large, truncated to 1048576 [ 313.946046][T10600] delete_channel: no stack [ 314.018985][T10397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.034601][T10604] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 314.050610][T10397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.093853][T10397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.125758][T10397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.306952][T10397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.321653][T10612] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 314.390591][T10397] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.428535][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.436095][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.470699][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.477891][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.824697][T10621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 314.840972][T10605] lo speed is unknown, defaulting to 1000 [ 315.097592][T10647] Bluetooth: MGMT ver 1.23 [ 315.150342][T10647] bond0: option min_links: invalid value (18446744073709551609) [ 315.160354][T10647] bond0: option min_links: allowed values 0 - 2147483647 [ 315.232316][T10397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.521934][T10397] veth0_vlan: entered promiscuous mode [ 315.550253][T10397] veth1_vlan: entered promiscuous mode [ 315.609676][ T30] audit: type=1800 audit(1746639700.806:7): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1302" name=3564489B0C dev="tmpfs" ino=1409 res=0 errno=0 [ 315.688649][T10397] veth0_macvtap: entered promiscuous mode [ 315.772826][T10397] veth1_macvtap: entered promiscuous mode [ 315.817405][T10677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.851669][T10397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.870645][ T5833] Bluetooth: hci2: command tx timeout [ 315.880385][T10397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.962309][T10682] __nla_validate_parse: 8 callbacks suppressed [ 315.962325][T10682] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1306'. [ 315.992248][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'. [ 316.004141][T10650] lo speed is unknown, defaulting to 1000 [ 316.005643][T10397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.032877][T10682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1306'. [ 316.035561][T10397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.062200][T10397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.086311][T10397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.636996][T10693] geneve1: left promiscuous mode [ 316.642006][T10693] geneve1: entered allmulticast mode [ 316.690921][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.713908][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.789388][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.809057][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.906931][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.985715][T10685] ================================================================== [ 316.993817][T10685] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 317.001971][T10685] Read of size 8 at addr ffff88807ffd4c50 by task syz.0.1307/10685 [ 317.009856][T10685] [ 317.012188][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.0.1307 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 317.012208][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 317.012220][T10685] Call Trace: [ 317.012229][T10685] [ 317.012236][T10685] dump_stack_lvl+0x189/0x250 [ 317.012258][T10685] ? __virt_addr_valid+0x18c/0x540 [ 317.012277][T10685] ? rcu_is_watching+0x15/0xb0 [ 317.012297][T10685] ? __kasan_check_byte+0x12/0x40 [ 317.012316][T10685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.012336][T10685] ? rcu_is_watching+0x15/0xb0 [ 317.012356][T10685] ? lock_release+0x4b/0x3e0 [ 317.012377][T10685] ? __virt_addr_valid+0x18c/0x540 [ 317.012394][T10685] ? __virt_addr_valid+0x469/0x540 [ 317.012412][T10685] print_report+0xb4/0x290 [ 317.012429][T10685] ? cfusbl_device_notify+0x150/0x6a0 [ 317.012444][T10685] kasan_report+0x118/0x150 [ 317.012462][T10685] ? cfusbl_device_notify+0x150/0x6a0 [ 317.012480][T10685] cfusbl_device_notify+0x150/0x6a0 [ 317.012494][T10685] ? net_generic+0x1e/0x240 [ 317.012508][T10685] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 317.012527][T10685] ? caif_device_notify+0x250/0xfc0 [ 317.012546][T10685] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 317.012566][T10685] notifier_call_chain+0x1b3/0x3e0 [ 317.012582][T10685] register_netdevice+0x121c/0x1ae0 [ 317.012602][T10685] ? __mutex_lock+0x51b/0xe80 [ 317.012629][T10685] ? __pfx_register_netdevice+0x10/0x10 [ 317.012651][T10685] ? __asan_memset+0x22/0x50 [ 317.012665][T10685] ? dev_addr_mod+0x2ce/0x3d0 [ 317.012683][T10685] register_netdev+0x40/0x60 [ 317.012701][T10685] bnep_add_connection+0x6bf/0xbf0 [ 317.012723][T10685] ? __pfx_bnep_add_connection+0x10/0x10 [ 317.012741][T10685] ? __fget_files+0x3a0/0x420 [ 317.012763][T10685] do_bnep_sock_ioctl+0x40e/0x640 [ 317.012782][T10685] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 317.012804][T10685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 317.012826][T10685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 317.012847][T10685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 317.012874][T10685] sock_do_ioctl+0xd9/0x300 [ 317.012895][T10685] ? __pfx_sock_do_ioctl+0x10/0x10 [ 317.012916][T10685] ? __lock_acquire+0xaac/0xd20 [ 317.012939][T10685] sock_ioctl+0x576/0x790 [ 317.012959][T10685] ? __pfx_sock_ioctl+0x10/0x10 [ 317.012980][T10685] ? __fget_files+0x3a0/0x420 [ 317.012996][T10685] ? __fget_files+0x2a/0x420 [ 317.013014][T10685] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.013031][T10685] ? __pfx_sock_ioctl+0x10/0x10 [ 317.013050][T10685] __se_sys_ioctl+0xf9/0x170 [ 317.013064][T10685] do_syscall_64+0xf6/0x210 [ 317.013079][T10685] ? clear_bhb_loop+0x45/0xa0 [ 317.013097][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.013119][T10685] RIP: 0033:0x7f3568b8e969 [ 317.013134][T10685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.013149][T10685] RSP: 002b:00007f35699c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.013168][T10685] RAX: ffffffffffffffda RBX: 00007f3568db6080 RCX: 00007f3568b8e969 [ 317.013181][T10685] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 000000000000000a [ 317.013193][T10685] RBP: 00007f3568c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 317.013204][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.013214][T10685] R13: 0000000000000000 R14: 00007f3568db6080 R15: 00007fff58699408 [ 317.013234][T10685] [ 317.013240][T10685] [ 317.347536][T10685] Allocated by task 5141: [ 317.351862][T10685] kasan_save_track+0x3e/0x80 [ 317.356536][T10685] __kasan_kmalloc+0x93/0xb0 [ 317.361117][T10685] __kmalloc_cache_noprof+0x230/0x3d0 [ 317.366484][T10685] __hci_conn_add+0x1ed/0x1aa0 [ 317.371237][T10685] hci_conn_request_evt+0x528/0xb50 [ 317.376433][T10685] hci_event_packet+0x7fb/0x1270 [ 317.381366][T10685] hci_rx_work+0x46a/0xe80 [ 317.385781][T10685] process_scheduled_works+0xadb/0x17a0 [ 317.391327][T10685] worker_thread+0x8a0/0xda0 [ 317.395915][T10685] kthread+0x70e/0x8a0 [ 317.399982][T10685] ret_from_fork+0x4b/0x80 [ 317.404393][T10685] ret_from_fork_asm+0x1a/0x30 [ 317.409147][T10685] [ 317.411467][T10685] Freed by task 10397: [ 317.415518][T10685] kasan_save_track+0x3e/0x80 [ 317.420185][T10685] kasan_save_free_info+0x46/0x50 [ 317.425207][T10685] __kasan_slab_free+0x62/0x70 [ 317.429966][T10685] kfree+0x193/0x440 [ 317.433860][T10685] device_release+0x99/0x1c0 [ 317.438447][T10685] kobject_put+0x228/0x480 [ 317.442852][T10685] hci_conn_del+0x8f5/0xca0 [ 317.447349][T10685] hci_conn_hash_flush+0x191/0x230 [ 317.452454][T10685] hci_dev_close_sync+0xaef/0x1330 [ 317.457554][T10685] hci_unregister_dev+0x206/0x500 [ 317.462569][T10685] vhci_release+0x80/0xd0 [ 317.466890][T10685] __fput+0x449/0xa70 [ 317.470868][T10685] task_work_run+0x1d1/0x260 [ 317.475451][T10685] do_exit+0x8d6/0x2550 [ 317.479605][T10685] do_group_exit+0x21c/0x2d0 [ 317.484197][T10685] __x64_sys_exit_group+0x3f/0x40 [ 317.489216][T10685] x64_sys_call+0x21ba/0x21c0 [ 317.493888][T10685] do_syscall_64+0xf6/0x210 [ 317.498380][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.504262][T10685] [ 317.506593][T10685] Last potentially related work creation: [ 317.512300][T10685] kasan_save_stack+0x3e/0x60 [ 317.516976][T10685] kasan_record_aux_stack+0xbc/0xd0 [ 317.522177][T10685] insert_work+0x3d/0x330 [ 317.526507][T10685] __queue_work+0xcfc/0xfe0 [ 317.531006][T10685] queue_delayed_work_on+0x18b/0x280 [ 317.536291][T10685] l2cap_chan_del+0x285/0x5e0 [ 317.540968][T10685] l2cap_conn_del+0x388/0x680 [ 317.545645][T10685] hci_conn_hash_flush+0x10a/0x230 [ 317.550801][T10685] hci_dev_close_sync+0xaef/0x1330 [ 317.555914][T10685] hci_unregister_dev+0x206/0x500 [ 317.560929][T10685] vhci_release+0x80/0xd0 [ 317.565254][T10685] __fput+0x449/0xa70 [ 317.569236][T10685] task_work_run+0x1d1/0x260 [ 317.573827][T10685] do_exit+0x8d6/0x2550 [ 317.577980][T10685] do_group_exit+0x21c/0x2d0 [ 317.582572][T10685] __x64_sys_exit_group+0x3f/0x40 [ 317.587595][T10685] x64_sys_call+0x21ba/0x21c0 [ 317.592263][T10685] do_syscall_64+0xf6/0x210 [ 317.596761][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.602659][T10685] [ 317.604983][T10685] The buggy address belongs to the object at ffff88807ffd4000 [ 317.604983][T10685] which belongs to the cache kmalloc-8k of size 8192 [ 317.619040][T10685] The buggy address is located 3152 bytes inside of [ 317.619040][T10685] freed 8192-byte region [ffff88807ffd4000, ffff88807ffd6000) [ 317.633019][T10685] [ 317.635350][T10685] The buggy address belongs to the physical page: [ 317.641774][T10685] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ffd0 [ 317.650530][T10685] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.659026][T10685] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 317.666570][T10685] page_type: f5(slab) [ 317.670547][T10685] raw: 00fff00000000040 ffff88801a042280 ffffea0000901e00 dead000000000002 [ 317.679126][T10685] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 317.687705][T10685] head: 00fff00000000040 ffff88801a042280 ffffea0000901e00 dead000000000002 [ 317.696366][T10685] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 317.705028][T10685] head: 00fff00000000003 ffffea0001fff401 00000000ffffffff 00000000ffffffff [ 317.713692][T10685] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 317.722350][T10685] page dumped because: kasan: bad access detected [ 317.728759][T10685] page_owner tracks the page as allocated [ 317.734467][T10685] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7986, tgid 7985 (syz.1.513), ts 132659358438, free_ts 132659221567 [ 317.755733][T10685] post_alloc_hook+0x1d8/0x230 [ 317.760505][T10685] get_page_from_freelist+0x21e0/0x22c0 [ 317.766050][T10685] __alloc_frozen_pages_noprof+0x181/0x370 [ 317.771853][T10685] alloc_pages_mpol+0x232/0x4a0 [ 317.776698][T10685] allocate_slab+0x8a/0x3b0 [ 317.781188][T10685] ___slab_alloc+0xbfc/0x1480 [ 317.785862][T10685] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 317.792289][T10685] krealloc_noprof+0x122/0x330 [ 317.797062][T10685] copy_array+0x63/0xf0 [ 317.801218][T10685] copy_verifier_state+0x848/0xed0 [ 317.806331][T10685] do_check+0x4d4e/0xd630 [ 317.810658][T10685] do_check_common+0x168d/0x20b0 [ 317.815603][T10685] bpf_check+0x13679/0x19a70 [ 317.820209][T10685] bpf_prog_load+0x1318/0x1930 [ 317.824969][T10685] __sys_bpf+0x5f1/0x860 [ 317.829214][T10685] __x64_sys_bpf+0x7c/0x90 [ 317.833641][T10685] page last free pid 7986 tgid 7985 stack trace: [ 317.839957][T10685] __free_frozen_pages+0xb14/0xce0 [ 317.845078][T10685] __put_partials+0x161/0x1c0 [ 317.849759][T10685] put_cpu_partial+0x17c/0x250 [ 317.854534][T10685] __slab_free+0x2f7/0x400 [ 317.858940][T10685] qlist_free_all+0x9a/0x140 [ 317.863544][T10685] kasan_quarantine_reduce+0x148/0x160 [ 317.869014][T10685] __kasan_krealloc+0x1f/0x140 [ 317.873780][T10685] krealloc_noprof+0x1b6/0x330 [ 317.878539][T10685] copy_array+0x63/0xf0 [ 317.882693][T10685] copy_verifier_state+0x848/0xed0 [ 317.887805][T10685] pop_stack+0x8f/0x470 [ 317.891954][T10685] do_check+0x70a2/0xd630 [ 317.896280][T10685] do_check_common+0x168d/0x20b0 [ 317.901211][T10685] bpf_check+0x13679/0x19a70 [ 317.905793][T10685] bpf_prog_load+0x1318/0x1930 [ 317.910549][T10685] __sys_bpf+0x5f1/0x860 [ 317.914804][T10685] [ 317.917121][T10685] Memory state around the buggy address: [ 317.922745][T10685] ffff88807ffd4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.930814][T10685] ffff88807ffd4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.938874][T10685] >ffff88807ffd4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.946934][T10685] ^ [ 317.953610][T10685] ffff88807ffd4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.961667][T10685] ffff88807ffd4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.969752][T10685] ================================================================== [ 318.002681][T10685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.009919][T10685] CPU: 1 UID: 0 PID: 10685 Comm: syz.0.1307 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 318.021987][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 318.032033][T10685] Call Trace: [ 318.035307][T10685] [ 318.038237][T10685] dump_stack_lvl+0x99/0x250 [ 318.042853][T10685] ? __asan_memcpy+0x40/0x70 [ 318.047454][T10685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.052662][T10685] ? __pfx__printk+0x10/0x10 [ 318.057253][T10685] panic+0x2db/0x790 [ 318.061147][T10685] ? __pfx_panic+0x10/0x10 [ 318.065564][T10685] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 318.071456][T10685] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.077781][T10685] ? print_memory_metadata+0x314/0x400 [ 318.083249][T10685] ? cfusbl_device_notify+0x150/0x6a0 [ 318.088619][T10685] check_panic_on_warn+0x89/0xb0 [ 318.093551][T10685] ? cfusbl_device_notify+0x150/0x6a0 [ 318.098933][T10685] end_report+0x78/0x160 [ 318.103202][T10685] kasan_report+0x129/0x150 [ 318.107700][T10685] ? cfusbl_device_notify+0x150/0x6a0 [ 318.113162][T10685] cfusbl_device_notify+0x150/0x6a0 [ 318.118363][T10685] ? net_generic+0x1e/0x240 [ 318.122860][T10685] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 318.128573][T10685] ? caif_device_notify+0x250/0xfc0 [ 318.133763][T10685] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 318.139221][T10685] notifier_call_chain+0x1b3/0x3e0 [ 318.144338][T10685] register_netdevice+0x121c/0x1ae0 [ 318.149541][T10685] ? __mutex_lock+0x51b/0xe80 [ 318.154233][T10685] ? __pfx_register_netdevice+0x10/0x10 [ 318.159785][T10685] ? __asan_memset+0x22/0x50 [ 318.164374][T10685] ? dev_addr_mod+0x2ce/0x3d0 [ 318.169056][T10685] register_netdev+0x40/0x60 [ 318.173650][T10685] bnep_add_connection+0x6bf/0xbf0 [ 318.178771][T10685] ? __pfx_bnep_add_connection+0x10/0x10 [ 318.184407][T10685] ? __fget_files+0x3a0/0x420 [ 318.189093][T10685] do_bnep_sock_ioctl+0x40e/0x640 [ 318.194136][T10685] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 318.199690][T10685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 318.205334][T10685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 318.210976][T10685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 318.216622][T10685] sock_do_ioctl+0xd9/0x300 [ 318.221129][T10685] ? __pfx_sock_do_ioctl+0x10/0x10 [ 318.226243][T10685] ? __lock_acquire+0xaac/0xd20 [ 318.231113][T10685] sock_ioctl+0x576/0x790 [ 318.235445][T10685] ? __pfx_sock_ioctl+0x10/0x10 [ 318.240295][T10685] ? __fget_files+0x3a0/0x420 [ 318.244974][T10685] ? __fget_files+0x2a/0x420 [ 318.249572][T10685] ? bpf_lsm_file_ioctl+0x9/0x20 [ 318.254513][T10685] ? __pfx_sock_ioctl+0x10/0x10 [ 318.259368][T10685] __se_sys_ioctl+0xf9/0x170 [ 318.263975][T10685] do_syscall_64+0xf6/0x210 [ 318.268470][T10685] ? clear_bhb_loop+0x45/0xa0 [ 318.273150][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.279038][T10685] RIP: 0033:0x7f3568b8e969 [ 318.283453][T10685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.303054][T10685] RSP: 002b:00007f35699c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.311461][T10685] RAX: ffffffffffffffda RBX: 00007f3568db6080 RCX: 00007f3568b8e969 [ 318.319432][T10685] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 000000000000000a [ 318.327402][T10685] RBP: 00007f3568c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 318.335362][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.343321][T10685] R13: 0000000000000000 R14: 00007f3568db6080 R15: 00007fff58699408 [ 318.351295][T10685] [ 318.354632][T10685] Kernel Offset: disabled [ 318.358991][T10685] Rebooting in 86400 seconds..