last executing test programs: 1m41.331686721s ago: executing program 0 (id=556): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2}, 0x59) 1m41.055866906s ago: executing program 0 (id=558): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) 1m40.819909171s ago: executing program 0 (id=561): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000380)=0x3, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m40.176330109s ago: executing program 0 (id=564): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x2, 0x1c10a1, 0x4, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1ffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m39.911617833s ago: executing program 0 (id=566): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r6, r6}, 0xfffffffffffffd00) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r6, r6}, 0xfffffffffffffd00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b50200000000000085000000830000004ce300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1m39.663736953s ago: executing program 0 (id=569): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x33, @empty, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x9, 0x26}, {@multicast2, 0x4e21, 0x1, 0x800, 0x7, 0x1}}, 0x44) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000003000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1m24.594419567s ago: executing program 32 (id=569): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x33, @empty, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x9, 0x26}, {@multicast2, 0x4e21, 0x1, 0x800, 0x7, 0x1}}, 0x44) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000003000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 3.246831985s ago: executing program 3 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xa}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x24008104) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d80)={0x264, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x132}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8000, @private0, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc3, @ipv4={'\x00', '\xff\xff', @empty}, 0x1512}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x352e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x636000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7627}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x834}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x9f, 0x58d9, @remote, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @local, 0xa}}}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8041}, 0x4000040) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$NL80211_CMD_SET_KEY(r5, 0x0, 0x4004) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000900425bd0000000000000000", @ANYRES32=r6, @ANYBLOB="00050000000000000a000100aaaaaaaaaaaa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448dd, &(0x7f0000000400)) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x4000400) getpeername(r9, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.164475535s ago: executing program 1 (id=1493): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x5, 0x4) ppoll(&(0x7f0000000040)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000400), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x6c, r2, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x400005}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 2.887941626s ago: executing program 3 (id=1496): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x0, 0x3, 0x71, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x7, 0x9, 0xbf67}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@deltclass={0x30, 0x29, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {0xa, 0xe}, {0x2}}, [@tclass_kind_options=@c_cake={0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x400c0) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000a00)) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.887120083s ago: executing program 1 (id=1497): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRESDEC], 0xd8}}, 0x8090) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x18, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100)={0x4, 0xff}, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @private=0xa010100}}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4c20, @private=0xa010102}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000d154010000006fa200000c407d20cbaaf96ccfa1b32c51f40598f0816a827a75c36497321c09d5c358494294aa2cb4fa1739738e04611ab12c4c639e47e3541aa2b62ed916976e8961767ad5"], 0x28}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e8851e37bd0d23102002002cc2af37998e6b7900005ecb52d62561430a666907839e85febc64ac6249f7c8f9089cad656597e062a6051684019d88b7120d747bdfddcb902c9a4143caaba0a71896f1442ba2a69735bba93f17c070e4608e8fa946db4903df087126fe2ef2eec584263e72d5397a4768327730a8c7a149ffb2f890a2464644815e07f365f804c206b6868388da9b737545c16081cc02e24c9e5b112b96d513d9a5901ff96d72ef077792ad"], 0x10}, 0x40) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000140)={'vlan0\x00', 0x5}) 2.884150567s ago: executing program 5 (id=1499): r0 = socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg(r2, &(0x7f00000004c0)={&(0x7f00000000c0)=@l2={0x1f, 0x0, @any, 0x1, 0x2}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000180)="71068d19ccb066c40eaaa3596c3137ddbd341063fb4a32ccb27325f55ee2fe70e5c7cefbb1e9b8a407adae4d1fe60913f60d8fff5181ac2d", 0x38}, {&(0x7f00000001c0)="7ac0098f3ada538ed5782edb", 0xc}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000280)="96357257ace2aad67035f41c631b3b4f9e4aa956737baee2d0b1591cab246c457799169cf8d11757f77dc3edfb7f11e0780f24a5e320fb5c9f409130a3dde6b1b018dc7b53734994b5c9deee154a0fb1a890029a307164bb72f04d8f5d869c9ec8ce12f845a5057a6d035c8438e448c1c452fa2a72c94c6b5d022ab3d73858d2f83bb0fda6befc915162cadef7b5082f8c06357d80e4e9579bf2b93b4b154fa013153355a43055781b2ec8edff1b", 0xae}, {&(0x7f00000003c0)="0fd5fe10c0627b38276afba31ceac8d51537c805bae5a649f21302bc53f91c0a49b3a0716434a99f8bc4a09b17847720c60b6f66b4aca009dd446e711d8bf06ea1ebcef379dc74db712d18a671fe267fbad5092a5740890311824e0953fec122f1ba25a7c9105e3d7e7990767d4343db58fc9eac1672319e416de16a11a7c83ceb11b98de15247919aa4cecac8f11985432f015615462fb70d2a3c1179299434bb4e30dbd98560e12003f3ea3dd449570f96b16895a3b85a624f34301153886f365180e29dce74140fac081394acc74d33c14aeb6388ebbb0d7fd6133f78ecfce36927f4c9d52d227227cde42c8b3185b3e98762bf836f20c368940baba8", 0xfe}], 0x5, &(0x7f00000015c0)=[{0xe8, 0x101, 0x6, "a4295aa18208f659687a658b2affa9504d25707033785d500c9d9b71c204d68d6b217b101dc2e62f9f949df59e89aad936e3f61e72ed839b450b063acdc99471b0bc79dc97c09cbadc603f15440ad794c181f00a972f75f3c0f151184d8cd076be1b57e5634e5ce47330581539e8c0bc947f313bba84318bec571d51dd5623f3ad5279254b48b802d1784a5e4538479e6d6750d51b446ac4c2f41e345fe6e2441b1a27bfc9a613fb1385b0f695d53d660e258d73930166092c1777736ab37efb599d56cb2185d34a51f9f4c6f2d7fca7872475"}, {0x50, 0x0, 0x10001, "23b3faf02904d95ebd9b3d5d8af601613c17f4dd34c2884d1af9c67bf6606d53c61ba84a712d9e4e12fac5f2d8e7900439b8edeb1ff37c326822b4e5c3"}, {0xf8, 0x110, 0x4, "75030e082eecd38de2ce42745007165340671388eb39e857c5f5ef86840933a54327cb9b84216996b7948c74ed77eb6dbfad7a3edc773caf067bb1ab49c620cef87aada6989b0b608e8dc9b837612e16efcd48a7d9f7a1fe895bd419f65101c6f4983f99f8262e22c495103942e7c63716ac7baded25d07350ee0f6b8ecf90f14d951c027d2246e135ec9819db4ab184ccbbc423e3ed740e65b3e4526868cc8fa012209f4916b4d795e90d006693b7323f602ba440866197a5c770793efb6706732fbab017783556894f9cdd8e25e553093997219d3fabfaf44b7aec3d3444583ab6af9c"}, {0xd0, 0xff, 0x4, "a77f1e30b0c93a06e7939817cd64b43952b4c71eccaba0a1d10e2ac6bf0192f54c150b69cde436505ffa5ac7facea5d6ba00dba22797f80cfc51ebd1a197e50f5f00f9039f367eb8a1696a5cbee7157080e2c62727e0c90777e5ff53a1211c7d3e7d1f041848175a9fe1edfaae44c9552415458e62e69d77814cd7c03fca37683e84613aa445d4c5f0c39474528915daa863f1f30dbac23130a807116f007625ff05e40e866d1acaae1657f407efff3e980d6840eb1c391dd634"}, {0x80, 0x10f, 0x7f, "d8ca433b8626b1db703511d8750385bfa835132fc04f5a3fd2ca3523d9e5765e179ba469c49d58ccf84f1cbe47173314e8610370075fd136aa6266cd270fe988d8abfb212e3951407ac9702aa58f2cdee43a203c42888bab2b5831068cd3ccee0f31dec0b02b96ceabd2a7a7"}], 0x380}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c004dab5545fe43cbef31010000003904faffff", @ANYRES32=r3, @ANYBLOB="00000000000000001c001280080001006772650010000280050013000000000004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 2.704118144s ago: executing program 5 (id=1500): socket$netlink(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000028000000283f4ced9d7ea560b0f26e9e2ff3c36300000004000000020000000000001103000000ffffffff0000000800000002000000000200000000000008020000000b000000"], 0x0, 0x44}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='6\f\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.644139794s ago: executing program 3 (id=1501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000b200000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.541482636s ago: executing program 1 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x65aced7b8d7ee9a7, 0x84) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000940)={0x0, 0x1000, "d15c9fae69ab659aee5f733287575ed5a4f5c8dccc86b4ad6b391cd7cebdbcacd83d3d3bcaa143231018190c723906c402bd5d44f8b4a425022bd7a68b1390264be0b60b6b715c209cb819379cb30f104b522bacac76880b4e4abdaa4ad5e1799dec344bc8d2f2932fbb38a4b00aa8d8bb5e99d35e86359a5a10159a5b3b813bc646a2f04ff2176a8629f075050860b80ed4c99494ff3b9229db4bb685ae81ea162992174464e9d434486fb2f56ee83f54aa35717ea1bb55d1db1d20127dc5ba14136c623df0000931cf289e216cf73b0d1b00dd9263d13a1f4cc5abaf28237414678d41e3b77fcb3b637c3faa97530488fbe085006515299697d97cb226430556434cf143e0d7126652aa6189d709dee05ddbaae19c0171f38a5209e3e68a9633a87a8bed8099e382c4cb66da8ff25f56d8f188ce1e944c988e638b1219561c5480174ef45908972b51e09148b8c918c8d34dde7ed2b6c9eb79eb3709534cc3030e5fc6672cef06197e51cff0c69dc6add595e8d2e4a419460f8feee63921de185ead7e7ac16f30cbdebd50f72460d09c64fadb6b5b789dff79b3e68c9312d372a84b8cc37c9b558e3e37f423b05952e328883bfc38ebb89cf7eb1ff1d5b7f70c6e5a114cfd5a00dd2679ec6c8572ab3496df86759f866ca9412ec96a5b2c61a091b287f0b86d04c157ca2f500542ec771f47e23450eee1b78cf26ecd014f39292b9008f87138d8aba3a92b42eb5b1c3e3af950671a5d6823450ade9e1e1b9745d761952e010cd9f9316ae3e304da120b4a66033bc82974ad18d6837ee927245d52d5bce2c7a505d1cd8904c6a831f74a0aebcbc970e8ffdbfefdb56307f89a756882b789e36da5295eac728f6728f1b8ccea2b4d1cda5a3f35561f8cad737504eb1160891508b532601b0228ecfe249c75a3a6321fe6725ca2854964884babb15270664dc87b145618b1509a9ca45d259e55f7024b88eaa04ce882ca042af73e1874510eeecc1b73d49c9b2a9aad7356a542b9988298b510f3c1d428eec038f2d7862f788c090c969ab634d2ca143a36692646872c4a96e00c0d50ddd1ef58160a378c471d25232a263fe7ddb540a4e35f9d0eaab3c70ab4c9c3bba808a5702fab9c364068238f374ce42b4a955a29b245b4f4f8003c2b26bfdd1a0b0678ee7a988c4abbba9464d82958801bd2eeb01f3dd7d622f7f03b9cab493c2b09ad883b97fb2faca1824f51865f868c6ce5d9f8511263538b55602f7c678f5819fd5c993358d8ace6ff5d1f0b9b30ae7f0dca4df674df7f1e62a04395eb2d1c7e0853a5b3c397003bb612c43c34cd012da1147ffe31ee390492668d4150baa4e65fa76c8465bd24f252a168f11bd94967cbd8ccd4004636b308122a03c383d54c79c6d20424bc7a07b26393ce44b9f989bf5d9dedb3f28bf1290986498043c7e49e87e281f6e9c32281d9d4180130003723d2809f4633c532d5c11b154630bc95ad4d123e71ea0c04b3a5312db52f401bb4da070f3211d5c6d5cdd066154e8776f6fabb64cda5ac6505fd83f0ee2d1f4ef3f00ec17bc09aa99c4bf0ca9725816a0c18dbb045cf485bcf9cde45d68c278725ecc334e763490a09a6955b64fda5a8032ab059e6416460654e919a5f4b93332c09a7003793a0d55bad75f58f1a1ad6a46a1c23b256a62423336ecc99b2d54d76535d907f8d07e83a9210c1f197d5fac8167c01b6bbd2a6a9bcc53ab4df22cdd8187457b0b2d9fe4c92d7be11a886bddcd0c3dd358a5c3e683a734506ec70d370153b75aa57db607a0e051917a841443570af0e5400ba07057f21379a1be06b42c3253778f8354b0c2225bd9bcb352b2e61ebf5f05522914e4996b7b170cb6a0803f354f7096ca4b9c499f302de1e0154a7b28e3faa9edfd36b67879ae8199bb12c64e1ab54d1f6fce50a9040ccfe0ea60afb454ec2debfcdc67230b275dbc20ef07878bfef830f668465a2017f94cdf855975f6b27cb6c9941f27987af92ffd2b570654ddf41a08c8c0d6fb46b520c22a6a1334af24e343a33d6ce76aaed0986c3a8f3f9d54e9760c0deb708c5bb83d5b2eb59bf2c2e8a378c196f487e03bad3c0688f640a472707d9382dc90cf91f2a714ccc2f5c99d95c6c9d73efc02894872ac638bdb4a8bfdeacd05e73226b792615c8fe0daa9292723e4a3ae718d5e258b46ee1fc8d044c6e93c172f23e024013af488af49dea87ed75144196e4330004fb36ec3c26082aa4784d5a3b86bc4430db07171171111e084d92ddacfc67dd5ef1946580ca9bc8e959b5e8cb62ccb72293ae5aca6e7753d0d1fd0bc1410321e127a9417913f5b481e8dbb8616f0a880f212ee962cbf437b597b11bd1429a49a8ff65c97141eea1396aa708c80e2689f98e1a3e0bfa45469e0f7cfb9cd3b945fd30681cf3e49cea802bfe6df3f815fa216174edc342311e333f05b543304ce16f98e6d2bc09373730cce77d6ded2607e5841a4ed0c96aad75997498785d3f2628d1728460d032f486d2612c8d0a96ccfea34d788e63d9ccf24c786a104970e2cc84a6488b1593cd2582ff3cd1bd139df9d5b5259ccf34ae0933cd7552140bda598806f93dce9b3719c43425e91da10fd1c8d96b769865716517be5346ab5a2d596c50b26eedd28b2c0e67a985ed419c4d0effe9653bd2a1470b914f03abce0f7b47cb265300b98475f58e98d7f76d3283cc1c9a969ca444fd18a08c292cda138c027626f3cf6faefb4e8bb4f9f043eff05a8da5741021c10ca1f242f0e1aad7b65e6fc593ddf1412ca8a0bdc79ae25f4ff876b6dfd1a46ab0f25bb1e3ceba24ea99da33dd465197a298e10635d8fd443706f852fa8876d07823466f2d00ecf9bd56ea682e1269f73983082803ca6a62cdca05bc76ae056d285ca0d7d77b131c90a697464edcfa398cd104812fcccc4694b7dd6574b99fcb5a3ff247bad577e75e61651930e3f63b88416197824c34354ba5553555d6a7f8a3b73724e612b1293a9700961f1f58431d35763276b2248142226a5d5c018045ca77484fc25bd09950bceffc766a884035097d838d05ece1bec4d2c0c33e87a6f98936247d0af8712db9b958c19fc649bc4b72db13e5700bee941a889804ed78fb8d2b37b061cda2e085bf0e6f10d80a1ac289bda5bd99cc6b64b83a330a30c1122ab462ffcbbbc487f93af0c9d58626528caabc20ed57ca4519833dfed27e072f54b3b349d022a5439ccf6a94e82aaf3b202b0e7d5389e687d794f56273590806b67ea4fcbd10689235e7f9a11399859827ca93d0ec75357e04945b887ffa2d79928748b17bae3bdf7b8a9a6eacf1cf9842bd5f35e1dc5d6b79b035e29a906cd5fcd9daf5c2725d07bd29b50688cb2dca05e4c52e7cdeafcc87108ef9f8ec4b9096a0877be694f005e86af673f0cfa6c8c9b31a0cd5f8c96f06e28ccbab189174027ecf9798df456ac4bd0f8e5f75a16b2daf20411f1ac93906242ff126102c607b9eb9866d13ca773f4689756a901a866337b025f1fd1bb1e06f254941b12015ac118c6973cd1514368b0b3aed8ea6b6a1c38b596cfd3f90a393d18c6e19833ef318d3e9fa01e4cdbb3f760c6e807955ba08ada48dbf13ffd141447ab6aa37512d631cf0272a3f44f79d27d353b585b0a674463edf1d606009ecc7cb457d4977f4d8ad628b105fcf583772a2da179dc65b99bc21afbfe541d7cd8523e47d69f2deb1ea5f21da9ab355e1de484c92caefdd24dda45f2440270c7aa0630bf6f38a6addbb4042996e5664ce5e6bf432791c9517cf54472c28a8e34edfb012bb29e5bb116eef84bc572bd420126fc2e7a1d2d59a011bcbce2bebbffa13e535571958a2519532f2485460399c434f496a2d61d6ad156baaee56ede29da38bf6b05a91ceb2f90bf58b4ed8a1dde68fd282e729932f9f9155548bd9e7f74e49c2948730edc5409551dd2af84afc547053b7d6cfb1ce2cb95a06ef79e744d77bfae67b0781f1b80e722fa099bfe0b15453c1c5f9daeb08da8af495a3fd31d0310414c7af64087312faa3a4599bf9b59c516cd0d622b0f89bba5556785296364420e246f1790fe28d435403821142626e4d94b88a1eed2f3de9086171474b4352a15498806e81219ab5c8b7750f061bb4fc918e1b54feada7b6781773ebc057de6621ac0ba4ddc84b02820ba3337dbd8ba1e2546ca21b464fcce128d0db0a03ad002fbc9dabaf8fc38e28d5e91574009bb163211f3d68801111a215db70c7953c3c94fac3025d29fbff9bf43e57d910945a9c792445e8becf04bffb54ba2da991a863f6e9a862c638719bbe5096f685aebf63ffb5df0d0760af1a17311c7aed7a817f17516e6a5599cc247d2ec071b9420b146cdf3f3217aa0c8de18108e52af30673d7710b66557ba79f09cc2e086cbec0aacb6972ef62e00f393448ec6d8624b5d5aac3eff699f39d9e2311b8c9a2a5c59a3800f926b36f4c5754d5c456bd181884e6e6ed3bdd5767294c580f6e1f970726053ff5b5c000b81529c061d6d16131460982f3026038b8164770ab5e6232f503e807a461ff780ae8c4e371b8a1a2080bd5331d8c7b682966947eb1ba524f3fcb1e99c28954efe7ce50e263b6d80c92a5ed8cfcf8a8c3ab80f97aa9ce338a6eb5b190dbd1b170282844d78d3789225084823435b3d8438c5cebcf75cc9d6c784936cb84a97d92069d867d4aa9dcbb06d9bca1077440faa8037b50cd60c936e4afe1eeff83d6008822115fcb63fcaff365a63b91393e0d355a65825eee74fc76ed9c6aa0aaf8abd03379f0c37d522f5248dab82fb385b3be3a317e4440ded9db8ca45b921baff3f98c170a5690449c8b41a2b9f2b235259fecf014b576aa10d9dd7ec0d2f515684bfdcc498ae0a023accfd6694868c7bba35c6ec4ba177223cd021d2c33ec9e1a8e0e8f9a06e2a382143bf5621787ee43cc0d6ad626d326ef37c195f3204cc964708bd8dccaf50cf3a4d74c8d1be3230ab79e435fe87f6ad59e20c0428aaaa05f3bc2f3e53a00ac99ac1bc0566da41cb4f333cb77554ac32b05a4f0244f7c03a424b52cc6da78799e9b35e7e27b136c0cbbdc869cf24b458d1f27f8fa0a8786519dbedeeb18639c05cbdf72e34c287ed69b7c616938dbf8574c6c89ec24500843cc31af20b008801d606cd744cc67e36a468e830fe7492c129352fdbac6361334ced56b4ef831ba5f59f3de12c6e8b47c1877bbd77c0fd24fb1f820e1eb0a5c41b3816df9f9df6ab083b04e89272770bd0755c9fb52f79e60cd77384959aa48d7f5d7a55b31403b28f877c50c22cde03bb8b1204763a987681d4c3cee89caf73b9a21e22f2ce3eb3f731da8832efea3318dbde3e74ae98d141aa9174143dce3dc1fe05fa535bae09c1ca7a3b345eae2597583339f439c32a29d942365b76d1c279cb8173c2ff6edcc36dad70eb1cbe52c0ab933de812cc8b869b9cfa96bd00353da0cbeea52cb58d7320db4f5f3b24b31d1963888ba4ced0bbb7d6f4db5fe99a6fedf53efa1c2fe48dbcea0bfa0fc93959fb70025ec4d74f86797385bed4afaea07cd0cceb9c30432eb50f4042f0631bc37492538aec1689f0e3ae2dd959ce83c9f2ad7873b78bfc5b55734b11a2917929c1903cce76edce09d1f1aef3420d340f080468d79a527f1a8a83067fdde5e06112755e99b101917b49dd35827d2c1dac8d0bc76d7a84613a9bf062fa1bef096288b3598a5d6f4c41cf2dd7a784466ef2e5a076ec7eb0c39e3f1135fa90a9887398ea519bca8ddae9e39d3d79fe3057167041e3a81"}, &(0x7f0000000000)=0x1008) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xdc}}, 0x0) 2.513214975s ago: executing program 2 (id=1504): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000ffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f0000001880)=[{&(0x7f00000004c0)="e71c1d992f42f53e25b472db609ab64a55ef7e304507485e21dd8223002a65a72a54b2179b36a168ef4429e487426d5c72abe42401b4f30cc493a7c2669d9eff281ec920e8527a12c036a1262ddd759fabfdbbdc379820722950c28b5c12352a5b752231ca4071a22dc757967ebdbfc8b57209d21ad14e221df891b4bffe3378da9d4c606761e6a883b8d84e534a61bb84d78909c3e79a1a4f4cf32f0701907d55a2ab2a49330e375fc8be97", 0xac}, {&(0x7f00000005c0)="74b7c006beb00e67897679b3efa2c3bc22b724a2ad81d7f6e98a9965906314e671dddc765073aca7e16c4f7744b0990ff830472047a36cd3262e95fb339c270a284aaf5eb50f905b604af97788fbe1d9db4f39621906ae9f1685708259a1775612ac44cc1b247e304d93fb3c4ef5a1edcc6b1acd574095e32a9d1bd9d90de317cf0fbb579d771cfaf7fc82", 0x8b}, {&(0x7f0000000340)="e49e8c896e4a776600bdcbf83c6c72d1a928fc527a2889cf6198bd63697491881a070f10a50c7b9962117a6916e96eb4bd81f50bb426455c46a76d7ab9e393570f6b2e0cb93d23f23b2e06be7a18505714a6d38518b9c3afe8003d051f77f2d4d6d106a6f19bf9a7a672c90f7d3cf3398587", 0x72}, {&(0x7f0000000680)="9fb8657a6e79d72b9424195329ee53742182705822779a4e48e1331844ec0e6e527d834629e5f7f7a729a6a26cf9558caf1500ffe8935a9c1670726cb65f9bfae5497a993c439c374248bd18393db028481497fbb7b9903ce77c1bc7c882364a5b19c22f9f8910eb13d8da9e1ec268fd75f0a1ebe42c0d7a76445f0421d056d5f15139b3f3100efea0281b984b7264ce76e0b759f8255c9ac1e438128dc4dbb9750b60b3289368bcd9ead95d551019701458cbc59f", 0xb5}, {&(0x7f0000000740)="44d52c3e645dff8fd65182e2c13257ec3ae9981964ac49bdccc27bfdaf96b1a39e6bd5c46bdedaf1de3fd8e647f39a663c7eeef514cff24f38a1152afac174a645a4d04a767d0461cdd291c7199c1ad20898056eafe3316ae669f9d71d9c412fc213e2d91bde605c463b54bf7b3f6f2c0207df66901f8a5bcfbadf6aefad9dd045fb73075df1d1df9672fd9b1a37df4ecc1d7202ea0c0147252f7c88d09b0c5bceba5c488df1feb6e7f923ff842e32442c893fd8ea80a6d8f7ddf1b8182922767b76edc00ffc9ede4ee99c49cc507c85bf27de6ffc52", 0xd6}, {&(0x7f0000001900)="94bd0cd921a509313c5026c19621c384857113b9431ed322bdc611ed", 0x1c}, {&(0x7f0000000880)="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", 0x1000}], 0x7) accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, {0xcb29, 0x6, 0x20053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x1502, 0x4, 0x2, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="ebffffff01000000e27f0000ffff7fff12000000a5623102fe103379eddb367ba360b930dfd7d55d2fa1ff1fe4e376c5a6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f80)=ANY=[@ANYBLOB="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"], 0x1498}], 0x1}, 0x300) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6", 0x38, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"/364], 0x16c}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970007b83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 2.458856763s ago: executing program 3 (id=1505): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 2.404003845s ago: executing program 1 (id=1506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x2c, 0x2, 0x0, 0x1, [@nested={0x28, 0x14, 0x0, 0x1, [@nested={0x24, 0x5, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @ipv4=@loopback}, @nested={0x15, 0xdb, 0x0, 0x1, [@generic="ea", @nested={0x10, 0x130, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x4d}]}]}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.284032542s ago: executing program 1 (id=1507): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x81f}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) 2.258239292s ago: executing program 4 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="ad4308a803a93ae832cfe6d5ef23337e0f698efa258fa9d3bc1c9df29b8749c5ffd0074397d4b10c19ca158b9169fc747e0ce81800f6ab54701b60db0d358f0341b17544b7edabe88d90fc5a63b52a5eee75baf1278b9c106f3c728d86482d41a1b38f52ef3ad9e716e77953d785625a2279cf4fd6266ccaba213de2e35c65a01968cf04d00a1ca520baf750b816fafde164d33bfafb0fee4aae07b55527d4d61deda8a79a1be0238b8309d25f34019a61f0363bd8bdf6bae02edd9d34b01b8157e510898a6e7d7217224d331981b5c2bb14d88bdc317c7a88eb04c5ef7be4021f8dbbf25c65b82d0f787de0c0b87c2d51c21e948c9c8f8077e0341b04c4ff0c0f3e7a48fae5ca15222bc350f59307d42d0670f91610d4dec94cfbbbe3b383decd29515965a3059d4b2cbed6a77948d374d320ef04b9fd74c87eef26125b3e3418aca9bd8e98db179d57611d0f85528116cae7b18393dd78c7528c45e7a8d64db9adb31bb95564d75ff0dc06fb71fc52ee5c02779cb166d93180cbd74ab3fb7e19b3509381c4e2b6e9cb7953347d0993c3d7445d201aa1e11c8eace70bc364fb0572af4c00f9c53d1a8fa4702a792ff9a83eef082e90a18dadd9dcbbc808b8887be9f1b74d8bd5de8adfbcd46b7ab3df6ea858bff5a1b4b5d5f85a6df2e90f370f67e9b7b9e9e02f7b5cb615a86297b112bd735d61d66e25624c465d5a87bfc7f7ec3daac70d4abc99c7a12cc79a14e9a7618a86a295c0fd5cbd9f716ad49a35b152828c3a16bdd4b649d0bf6a1c80a500cdde4627b13751d91cb67fd9003ba3a91891f240be702f978e4e55354de192406defe3d84917f02e27855d6611d8ffc41f73ea5abd7b0f48ad277b691a27e5b747a7d8aa632920f3fce2788d4437fc23f59f9a4b4dbe7fa3460c5c4047277a8b02cb508a2c1853d14aa78689c4814b44391bfc4acc022e7119e9109d35225271c063d6d89d09347a8c1d2ab958bad1ac3890de420877b875272db3402a63da014a38c8ddb9568f00c7c29f31d11bcd473dac29c91247d570cc491384ece7f19ce3a3e4b2c8d72bde83120c3c7d38b49fbb640d7842f9f9a86b1ea6915b2121b72e281667bec82aeb7665d5dde31c6bceb7eb14f41f08d71faaf1b8f31f96564a8add5fbdb69045bfba0fbf3a4e1ea032bbbf3babe0de46ca56fd7738562e8c65c7ad1e8ecf3fe810cca9521a345af1d1bab6eac8a35e391bf1787bf16ee6050635188afa2f9b455c44690b2fecf9f40f08a10c7caf00744db2d389f2d618abcf44e5a45348c186fe926d1eb87f7b402735c05ae96544b5ab3367b60bdb4598152cea9f8f2844ca81fd5fd0b87383db0024db1d2b3c7469245793199cb5aba92dafaf2c90a9e1a93841ff78663ca97d8d51deba8cc06f3f5b7a1af71d3b65dfa48c9acd436bf364641db455d6e8e8ed644b30a4dd7806f1ba82f33c856c76e1f28ec3939e1ad0a7d38426e7af4ae49c0aa9e575a13d9d520aa84bd15090c28a142777e0b6a9d5ddd07918e3a20257a6be334196489ee60ba275d0b821d1ff315da51921111905409311b457fef71d2679a271752cd98cd9b0b1f871ec2e1e02525b41587f88a0bbf7bb63e34f8ca3975789c252a0b803518f2c03d327af92f9c2ed4ec9beb301da910331ad8a2d79c2c461362662c47859154ce8a26c9a12bcae161899a4005572dd3191cec8e4db0ab78816455c0a388c78a979c8ebe0593b23a7fd8681555d686507cf215dd4b1ce9ecd49fb7a4e2884f0449e40bf8eb6347f59a268e7a51441890200a4bb9e86aa18c088e5994699657d4d2d518bf83b59adc8220841e7ad807ed7adad95403d2319836d069b15d245ce013867121224e5e74371c32ff8cd9d19cc477ca36b5e0ac7c15041f2fe7f46a91a8c9cd089f4f38a6118f45f1fc9c48eb4820d355a869fecc2b391630b13aeacb2b745b22018d554a2b8d833f404784f1687d554089aedba3d7036788860bf66e8735603e6e2ed2235e8800931fdc30c9eec3d224650c5b58229faaa9cfacc31", 0x5a9}], 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xfffffffffffffe3f}}}]}, 0x3c}}, 0x4000010) r7 = accept$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) (async) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r7, 0x8, 0x300000000000, 0x5}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xbc, r11, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt(r9, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000540), 0x4) (async) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000500)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 2.043644326s ago: executing program 3 (id=1509): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000000b0a010300000000000000000a0000020900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) 2.016618453s ago: executing program 4 (id=1510): socket$rxrpc(0x21, 0x2, 0xa) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000001c0)=""/199, 0xc7, 0x0, &(0x7f00000002c0)=""/226, 0xe2}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x287fb348}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x8, 0xfd, &(0x7f0000000700)=""/253, 0x41100, 0x7e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x9, 0x9, 0xea1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r1], 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x61, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x61, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macvlan1\x00'}) bind$isdn_base(r7, &(0x7f0000000980)={0x22, 0x5, 0x27, 0x2, 0x4}, 0x6) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.694093111s ago: executing program 5 (id=1511): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0xa, @rand_addr=' \x01\x00', 0xfffffffe}}, 0x1000, 0x58f, 0xf6, 0x7, 0xb2, 0x6dd4, 0x3}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={r0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0xb, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x81, 0x3, 0xc, 0x4b, 0x1000009}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x7, 0x4}, 0x20) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000006c0)) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000340)={0x0, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @remote}}}, 0x108) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.495844824s ago: executing program 5 (id=1512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) r1 = socket(0x400000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf584}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x21002}, 0xc, &(0x7f0000000600)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0xc091}, 0x20004000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) r9 = gettid() (async) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r4, 0x25, 0xc, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=[0x3, 0xff, 0x2, 0x1, 0x6, 0x80, 0x7], &(0x7f0000000340)=[0x2, 0x2, 0x2, 0x5], 0x1, 0x7, 0x1, r9}}, 0x40) (async) write(r1, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 1.34838459s ago: executing program 2 (id=1513): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', r1, 0x700, 0x10, 0x7, 0xfffffff8, {{0x10, 0x4, 0x1, 0x3c, 0x40, 0x64, 0x0, 0x7d, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0x7, 0x39, [@private=0xa010102]}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @rand_addr=0x64010101, @multicast1, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40480, 0x0) r3 = accept4$netrom(r0, 0x0, &(0x7f00000001c0), 0x800) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000200)=0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x60, 0x28, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x6}, {0xffff, 0xe}, {0xfff1, 0xfff2}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x101, 0x5, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff8001, 0x6, 0x9}}]}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000780)={0x0, 0xed, "4c46878cee9488d8a608108d85c987b4e9cb0cc516e78d5bdc97069bbaecde9cc2e2124fae1eb439f7e59dc64dcac4184b0b97a611c79756aec6ced04eb8dde98e5e73bf8761cab1dc194d2d2e81c30d27024119bfd3b36bb473d00dacfa42cd2f527513ff7e7a7b69ba9e892394bd351a0a5ad96b9af2a835accee4395643d4b4d55f8616b9a01ef1284a8e7ac86b1d990d9a9157f69ca68a5a5286900588296576e51039c4ec2459e2ca88b9f91f359b7dd5ec2ff26d524cb34249de28b1b3f381ddfdc9cce3d349d5e0bedb2fe4031fc6d8f0a31eb1bbe1ebf3bab0ee12a75297dd989550535f207e7ef550"}, &(0x7f0000000880)=0xf5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x2c, &(0x7f0000000e80)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb8b}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002280)={0x0, 0x70, "247399b56f586fd21cbf2bb5821b9d7fed8f2ae4a5ea3b8b5dc53d8ade3a03d9ae8b20428326cb1b2ffa7eb9b581ff1ddde797e3c377188d1fa3b2de9ad56a641a99831ecf1a5f545651b22c8100900d6a008af89c73370eaae3ed2fcd91db5a914953e8d6fc956b44dceffed274c610"}, &(0x7f0000002300)=0x78) sendmmsg$inet_sctp(r0, &(0x7f0000002440)=[{&(0x7f0000000380)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f00000003c0)="8551d8cdbd6a1accce9f75c9a444b70260a3c3fd1e247f2e624c80bf8bd1fee1b35a79a2babf2b554ae939a072ad18c164a25afafa83b6dc955ddad6dafff55d582b8016017212d9e3c0e4dab4147e7082b97bc69daa20028eeee663de2e591dbc4659f95b5c78a84bccc33e48298ffeb4e876f3bfde8956b4bacf185dfc705e8321e3e725f8c315333b7eb18198469e01e47906e5ea5780b638762a5706aeb7f69805af47f1a7d21ef2b0d17286cd7fcf536dfa9919151b08876fa7c588a3577346720f5eec8566fe1b9392a5f9bc5528f6c29e680bdd5af925a7b1b277df611145340d2c325fc758824ee102b8213c19d72ec0", 0xf4}, {&(0x7f00000004c0)="cb13a812d878d7394d6a9879256bddaee850e80423f719b22207a086c7f35e57c979b48374ff3eacbb7df5bb19e56caa1d96d8ad8bc9143bcc9ccf34b7936e380d7b7a0dc54474d7efe42d9095da38c69d14f762584c63603e19de012f44", 0x5e}, {&(0x7f0000000540)}, {&(0x7f0000000580)="a89a1a3af818b91cbbbd8d4c96faff8958ab688daa93b6fb62a8f9c4c3fb3a4e16752f5afc01981f015f51bc1ef58e75944d66c69c1c88cdca6b28", 0x3b}, {&(0x7f00000005c0)="6f34d04f4fb4cde82d90eb35f62d39af036095932d255394b00aff42db6f36d61518cbe60fec1a8d6d2ce6df781458af62eb6227ddbdb8758af0357538c8055ba84f5505a886a7748da2ed4e875a550e9f2fad3b13152c1137456a35c5e7a90a1a6b15f56243fc41241b20e1ca943edd23ff90a7b3245f9eb7396a295fd0b5bb2538f0d1094ac8c5c262a6ffbe540787d0109648a030d38bc5863955ac788b5d194015", 0xa3}, {&(0x7f0000000680)="3bd0bd630d0bef8ae110bb455de0bdef40f27586ca86c37dfb35334cba02b357e58ff1acbf995fd0daf6536cdfec511c9b9bdcb73adf3dbbaee27abe142aa94941050c59b621d44e0eac34dac0c48df0bf9e5c931a85162e527bcf65", 0x5c}], 0x6, &(0x7f00000008c0)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x2, 0x8002, 0x1, 0x3ff, 0xb9c7, 0xb, 0x9, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x7, 0x95}}], 0x50, 0x4044800}, {&(0x7f0000000940)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000980)="9500b2b0f2a2d504812196463ccf1eb3217720a4bd867035d3006275b0520b3227ec5cdcbdd7235413795e2a0978535d7deb79c2f0a5102b939a2e1f604510a898c288b33c715979a91112d5c45178", 0x4f}, {&(0x7f0000000a00)="1c2a284d1e7d9a21e8bcb85e72f8b01a9e10100c4e6d986018904b481e15b86bc7a5139d85a146a37447cfdbaf3bf285ce16dadd25dc6f4a73f97931d048e87596982a640ad911cfa9896642a423cc342abb1b3620bb62b4a7defdee7690ce6d79c518bcf0939deaf14b7128ae2f2bb3d0117556810e116ccc3d8ad66bd40194bcd7a70b7444fcf66977615b3f81ba77b55f8e77e0d9a292a84b702077c1074e7b2cdf4affbbd74e673672e5ec86140870147b48fd29e072e0685a65fc1562147afb0e8ade17deda93ab74751d1af4fad1f2920accf7c1c195ea4d565a1cc0acb6e490a7a22f192a60ec85e51059f838d7585eb2", 0xf4}, {&(0x7f0000000b00)="42b9e358582aad6fe58c4dcc877df120bad8a92b721747bcb6acf913b6ab913c2282b36e9578bf26de9c621e370e90865834cbfcffbcee2264650a7243effbb44522efc239964dc416198b4cf4e87fb5dae566a2aedd9f2c22ccda6ddf3a6960288849a8576beeb146fc96d9b543bb4db9ab43848748c8175e7301", 0x7b}, {&(0x7f0000000b80)="d6a4d6aede70cb0a78b7e5adf04611d356fb405f3a90d68aae1edfbc6d8a9b8d5241c6c34d4baa301f4096a79963ae3db8ca", 0x32}, {&(0x7f0000000bc0)="06520b6b7cb73d8ed332e1dc536d9eba9693636b7b65b939a5caba0d620477a0a5dbebc16ceb2843aa34be37e186fe70e9da8e0e856aa47a123425fbacde9b5f6853361230aec713986ae403ece9418a5451f87e76abbea946", 0x59}, {&(0x7f0000000c40)="a2f7d8b610a6a8bfad21957eefa28bfe12b60115784a2639bfdc5a6a8083ec7e929e97320579c8a0ac83bb5939418c2209e5823d44505c3ad99c2755b0836e8395e3648234d2e22e0f4dca55fda56e9191c7afa9b81a9a4593484cf4278b5cd58b48e441a81a501b0950560ca32723db1b654af68ca29d0133de04879e74207979191d7eba1f06fdfe86fc88cd6cee43a06f3ad86b611e7224b478e7d295749f21eb4f298fefcdfc536b51c3cf836aa06d7124ae487ce2dad9f67d554ac4c57ec745b910e345c28f1e4c762f8f26d8cc7a2e42027711b0ed5528c3cf4f1f78ba2d4bfe5fcb285c49863bc932f1f30ec88d55290c7fe015", 0xf7}, {&(0x7f0000000d40)="dba75d9726bb51531fb46f41d70d87e6c03af2430f716a835f321c0dbc0bd4281ca408ceb96ad8a562768a96641b3390cfec754c7bae402888e5896095884c62674c00dc70a54d69d1082354aa5572b0f4850838a6eac64ec6bddb5e8051149c9a96dd7a968e4c6a71db1bd06256fb404260aad21d98f70dfb53d721da76faa5b27444b1b7a9344f3147f64991c06599e876ca8e6fd4be9b08e0b7506dca131812487cb5eba31d86d5dd8749", 0xac}], 0x7, &(0x7f0000000f40)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0xc, 0x3, 0xaa98, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x1, 0xb}}], 0x58, 0x20000000}, {&(0x7f0000000fc0)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001000)="00b6e5df5c8e8ef426591cd22001315a3b6c982f48e19e05d663831e2d72a91b8a386979a9454e7fea264209213356aac2e49751b0378e4001cc9fc186fab5feebb5d0d4c18eb68d759753836b5c8def98f9391205b7231e3cb29a7f7d17dd6e0fedea477c6bcd2f8ef7218f9493e1e4b67122e18a", 0x75}, {&(0x7f0000001080)="dd12d117e6cf995ca4529bef5a1ca40f424bd39279d83dd596e0f4f6148373f4de49e1eabb00705409292fa61d4347b1d434f874e48245f968e3df7c92a5d01a2838d7f89c0731f0a4b04bcf1a4a32ecf7ad4066258871f48573a0bd3cc0e100f1fb0a62cb9fe970af8bdd78caa1b7e49b17bef62451b9ccbce6518133e6ee36e174ac612b254e0afcd52f62d67db6e708d14dfcd47312bcd298dda031afae42636731295906c16b4c7e7c099acc41d122e41f8ff3568f4e2459f1d3524fa8c409808a5d3db102431f0f5f4591d9bf73c96162280de86101ffc82675212a60bfb0c941a8f61c5112f7d1a0", 0xeb}, {&(0x7f0000001180)="7de0fa9b32eb931ab2744b8a847993e6dca94b5e5a778ad4d6418f888fbbd89819ffc2feec48128c810ea056094523a94eeb068bdd93f812c0b49f2550c8b4b08c53ac2fb6acfed412b8d1bf14d2c4a31924391e", 0x54}, {&(0x7f0000001200)="d4112bc074e3b4443c", 0x9}, {&(0x7f0000001240)="2415553bec085c69b8ef02283300db2388f23aa0737fddc8020e0a12b2e40bdcdeb884d697dca6b11208b185a40a8abd9cd78cc337e8073699570b01247f3840ddbd484158fa7beb2b810771152ce746941ddff173aec296110d57c922bd648a3713849c9a252670f9cfee7e7cef47df2ab24885efc25627eb5f8cc42965f414212575e214bce464ba5888d26d61b0ac88d4295f225e61b8e4a882", 0x9b}], 0x5, 0x0, 0x0, 0xcd4c0f1f3ca798bd}, {&(0x7f0000001380)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001640)=[{&(0x7f00000013c0)="b4042dbfe265c7cf8d687babe07f992527da40f267d81acc62bf7343c88a6dc3702acad3da37c382590e49f0850159aed9385680d7cfc90646ae34c3dc4222a6bb06913e91d3a71c5aadcad7ebb9c79de3566ed2f127b8da6d3bfc25d448adae05a7491fcd434227f61a6c12dd4816bdbdf8238e86a6c354bdc9748547ece6cfe0b926f5cd56dfbeb611bb0f093150eb1616eab1d13ea87017d65a5072499f2b36fa9b52a301239486fa4368", 0xac}, {&(0x7f0000001480)="3536ce4917aa23af5f9499df24850bd5b24d729a8f36618b5e9d21d79a3fbc7e3d786c9373b2604768c083509b311fb8b9931d", 0x33}, {&(0x7f00000014c0)="556982fa84a99d72df30fa9685d932b1f383ed4af6f5676b93c30bfb999bb547497c38640dadb6ed8b59969e88567c67a66f475aeaa52dad239ea9856c6b19b2daa27c2f8bcd5ba4ca8a36e9e64cf53399e78cc40205654298f92a4efc11aafeb7c9643932414e76508dad2a359a781b3a1e0677d2389eae2c49502c9f2f07ebf0eab7c6b64d88a7e3", 0x89}, {&(0x7f0000001580)="4acbf36db849ce048a127ed392e83b0e86acd31ada53f20b69c84897ffbda5e4b37dca0ef28ffdf4f91a902035f1c5cfca5b268b99dacc866d124659cfb2571a3823cf527f25ab86c19ab6e84030354441e1fbfcb6ff8e17187077002cbce8bbfef73e99c01f27352ae40e8247f31894846db7f2eaa0252609c4a995ad0ae33b9b8e4431709bfda0da761c4b34754107ed4efcf0157dba01cf92908d9203bddaea1817a58e28a7ebad939d7944b244f52a4c7fe25bba916d", 0xb8}], 0x4, &(0x7f0000001680), 0x0, 0x4000400}, {&(0x7f00000016c0)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001700)="15bab3b42825ac2cdccf17892b3802890453fc471f9a907e84b3fc42b158f47cdee20aab6ef37d191e4752712a6c9196e006bd4d7739f9151314a65a2e831ea52a303ba2dd4d7b98802c40c174640684a2e3e199a03f2da48abaa679ac75f20f9db60eeaabbed0054ae8d2d51c3d9d4c4e447448088292e78f067db7ff6458f01295a61cc6f2d378fffefeed2d67cf68a2bf0abd588c9db863e7fb9da1e2f3c595797fd538f139ee40d333092e7f353ff69a5bb7fb805937f335d841ddd7ee3246550522f8e442d9847e6aac105005f91f9f751254e0f3189b6244502f757a4e7930ecc6c8c247d359f8812bb1889efee029c47b14be6bfed8a14c1c76", 0xfd}, {&(0x7f0000001800)="2de4e581affaf65dcfea0019f3b89e9cf098a7fdab1e8d17c0a0da1322c6ed49d2818b6054cc517e0add499aca07d45b224d2a649613202b3dbdf0d8dd958644718283ecd845959edf9d4a90407b79513f12bdffa5e2b3bd307a578fbe850e053c6c481acce18ea3f41867d0ae46ee0d4abcbd86bce35c7e329438ff744b44883d39fb3afe560b39ca790a3602ca57c5a95b64aba7d971a60be73a0c74da3be942f5b1152620d535b8208de0501fac02b7247673ce53815a23319902d489a5c1d9d167e1240dc7b206", 0xc9}], 0x2, &(0x7f0000001940)=[@prinfo={0x18, 0x84, 0x5, {0x60, 0x7f}}], 0x18, 0x4844}, {&(0x7f0000001980)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001b40)=[{&(0x7f00000019c0)="ea84d96801ace38587b80574453ac9e2865b26164191452b080641b48eb26d52a9cd3dae1ba9c35db5fe3ade92d7fb29770de869cac2bd223ec51687b6b6ddde973463cd0abec516f2e61d6e01a7", 0x4e}, {&(0x7f0000001a40)="45c3354fa5620c29fd2a788e0cf2c7e625510f8f8c480382c7c00f135838b367b55d601256f15b1829a3c3ccf054672b793afc7ac68405626c06e1258ffa867374f86c1e4e71d339ba206f82f5e4fe41f82271f2d34ca8ae707b5fdecd238f525554c460ef5e9a3956432e4ab9c60e21319f59cc42f506b54071d6f4054d196f63b6f456b9845e8b58d2f1b8d65887c77eb70c9a2918a2e116bc5aeec2badc8519c87dbbdc40f5ece243ec488d8f6d91132b9b119e4e553f95e65e362c45374a6bde115b368424625fa637ba9a3febdb6a9dff9a", 0xd4}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f0000001b80)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001bc0)="58c2c4c2f13955bbc2c244e8d3c6641567e07b58f2559f62a6ac0ae18d23fae69ce68d795dce3c200539a67bffe19bc76826b3f07205b368cf2f665b2549b50ae295e398083306db6bf09f8c251ffdffe5191ab8fe3f99663a38b65de3f8f24a53a712e75eb80a974bbc980114b53372af94b3e4a324abdfa16c2adb67347f809b4a153e5c34e3f7b9", 0x89}, {&(0x7f0000001c80)="498044507806764ccb058e1e8b607af57b0085fa132d018818c56ff0becfc4bb6055af979a143b032ea0f05e178164", 0x2f}, {&(0x7f0000001cc0)="52a69ce474cf03a6eefe35dc6920460b8f46a36d04033ce49585be43385029c83aa7370793265b5832901801c2789e6306e7e9269bcacf6e05c8194f74aadf2ea50feaf35bb4aa6ce2b69aa2c9ee64b3dd8d98f01be7b49f0b1fd50ed35a99f206f5ffe72e65ddccbda00e8931929a92973f2065c813d583e47db24a65ae8241952a79d6795dbeb0b3ce11938d1b5a602847e2debe5aa5f09cd19e2812de513ca7b4b6c3f7b2ec620ca324ff4ea9440067f3f14b54e62d22ee5a3cae", 0xbc}, {&(0x7f0000001d80)="3f2ec27ea25c9909f4343b6cea70ada3274393d8d4fe7df3b994f64eabd46f58ec431041cd6ea2c5060209e51065dd6181e2aa890db374fd10318d3e30a3fd7580c5318d7f127dfb5111e331632a1296921c3174c074c625576a4eee9376a276893ada006a7c2635dc3e61c7b44aed919b9e2fad8520028a124d884a9c604ed07055bfbe41ae6249867b9ff132f256c19c8894d1a4cfe1cd73ea9e92da98b5d0a7a0261a285eacfbdf3a1dbe236312ef7f503d21441f78d0bbdd18d693ae94f140ca52d95f51a47d73827f3dae3ca1078f7d6958a05620e87f06fe4c00a81946d3e9800aa7a0b094faab5f93e211e6a4b5510e94311bea078cc4b34f2ee1db", 0xff}, {&(0x7f0000001e80)="03da7ec5b1b46942f393e22ac8a39b0697e83292ce9ebc5d036bd34595f658322528bc6d07b0fa94ffe6ee37f98f56ec292a5c856de25f6c3c419b6d48d654cb35519cf4122c07a77d49d732b7b3a9f274c64063b6a1a730b34f5c3f91471612b77b89ffd0fa094f24c744c3bf22bbdab3e077b6472bc3fbc9c242a9c5ee1695b15cae0d38c8f9020c580e58c0a38007efd3f944dc023ae4922055570912144225784574d287bb721f7afbfbdfc160ee44941f2b9b919064f960f6748ddb2a278844b46a7ad1034cf51a990c4cf8f727b479752a2013823b9bcfb2591bd0ac9e675cb454018d", 0xe6}, {&(0x7f0000001f80)="a116ee0ccd23608270258e554fa01a816d673caad9abab51f6c397f9b7c42cd33c81c17b6e647e0769a3919b3499e6f53ef990ad0a38c57f6d628f517e528b6e97f8efa0f51f9f1403e71712f84dcb3227f9cc8936360aa2ec210e72cfef03903c9045b2483d48bd81a68221341a61e42c129931f6e16b701722da6daad5e39d9dbf0ae2b98aa9eb8c7a06f3898eff9dcf9bb41bac66cb1c804f197c4d2ecde0d9", 0xa1}, {&(0x7f0000002040)="46d1c01fbf0f220a49f986", 0xb}], 0x7, 0x0, 0x0, 0x408c5}, {&(0x7f0000002100)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002140)="f22caeaae405297959d40e65b7f48d1e8c96927ae7ddbd4db6e5f527d774a78e212dcec1081bb75840700c2c9621757769c77c39cbbfb46d4a7baacfd289348abdd9a5d1792c2a2ae8cc95153c67b494dd0367ea16b2bc39b65867bb470f0eb71924a37a9b973d87a21e1fc48377d08551d86f40123573de9faabba497ac0da4ac5f1539e0703e88459fd3080c15fe93a253bf1d6c11f02f41223b4758378b770ef5c657da3cccfc7854a2aaf1792a07d94e70e355013becb0d2a7f982b7ed1e8ee68b06954371988ff67805bcfcdb", 0xcf}], 0x1, &(0x7f0000002340)=[@authinfo={0x18, 0x84, 0x6, {0x8000}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8008, 0x0, 0x4, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8000, 0x361c, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @init={0x18, 0x84, 0x0, {0x6, 0x2, 0xd, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0xe8, 0x8000}], 0x8, 0x44001) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002600)=0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000002640)={'lo\x00', {0x2, 0x0, @private}}) write$cgroup_subtree(r0, &(0x7f0000002680)={[{0x2d, 'rdma'}, {0x2b, 'blkio'}, {0x2d, 'rlimit'}]}, 0x15) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000026c0)={r6, 0x8, 0xffffffff, 0xff, 0x0, 0x4f, 0x32, 0x7c, {r6, @in={{0x2, 0xff, @loopback}}, 0x1, 0x101, 0x0, 0x1, 0x7fff}}, &(0x7f0000002780)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000027c0)={r7, 0x52, 0x43a0}, &(0x7f0000002800)=0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000028c0)={'syztnl0\x00', &(0x7f0000002840)={'erspan0\x00', r1, 0x41, 0xe17, 0x9bb, 0x1000, {{0xd, 0x4, 0x2, 0x4, 0x34, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@timestamp_prespec={0x44, 0x1c, 0xd5, 0x3, 0x1, [{@broadcast, 0xffffff11}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@multicast1, 0x8}]}, @noop]}}}}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002900)={0x17, 0x2, {0x100000000, @struct={0x3, 0x6}, 0x0, 0x2, 0x476, 0xf141, 0x0, 0x8000, 0x40, @usage=0x93, 0x3a8680, 0x6, [0xec9, 0x10001, 0x0, 0x8, 0x6]}, {0x0, @struct={0x4, 0x3ff}, 0x0, 0xae, 0x1000, 0x0, 0x98, 0x200, 0x414, @struct={0x800, 0xff}, 0x9, 0xe52, [0x0, 0x6, 0x4, 0x9, 0xac, 0x4000000080000000]}, {0x0, @struct={0xb43, 0x1000}, 0x0, 0x1, 0xf6d, 0x6, 0x6, 0xfffffffffffff0a5, 0x9a, @usage=0x4, 0x7071, 0x8, [0x7, 0x400, 0x8, 0x10, 0x4]}, {0x7a0, 0x5, 0xfffffffffffffffb}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002d00)={r9, 0xffffffffffff00aa, 0x9, 0x1}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000003100)={'\x00', @local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000031c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000003280)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40410004}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, r11, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x1810}, 0x1) recvfrom$packet(r0, &(0x7f00000032c0)=""/192, 0xc0, 0x0, &(0x7f0000003380)={0x11, 0xf6, r8, 0x1, 0x5, 0x6, @broadcast}, 0x14) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000033c0)={'batadv_slave_0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000003400)={r13}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r14, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x20, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x50}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000804) 1.291979942s ago: executing program 5 (id=1514): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x79, "fc2f1b89e76f79f5f6a0ebdab6969e2e981d3f8232b7aecbbfc8c09dfa96805c7e45557147f6e6a08d9d094e93df5dc9c4e306152cb2bfe7854841204f7d0a44e0555cc1896e4ce6ea9a9f65f2b3d5bbf3f7c1b537ee4713d94ff888fbe64ef75bcdd9b2cfb69799413bbe2334b6f5f0224a15d8f80adcc4d5"}, &(0x7f0000000040)=0x81) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x4, 0x3, 0x4, 0x3}}, 0x2e) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x5, 0x9}, 0x8) 1.215917352s ago: executing program 4 (id=1515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000b200000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.137408141s ago: executing program 2 (id=1516): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd7000003500000a000100500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a1c00040002004e244e240000fe80000000000000000000000000002e"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3174a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14040000}, 0x4000) (async) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3174a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14040000}, 0x4000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}}}, &(0x7f0000000340)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}}}, &(0x7f0000000340)=0x84) r11 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0xb, 0x2}) (async) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0xb, 0x2}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.04927453s ago: executing program 4 (id=1517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2100100000000000000001000000000000000b73797a00"/32], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x2c, 0x3e, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x806, 0x0, 0x0, @ipv4=@local}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 883.72664ms ago: executing program 5 (id=1518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x4040000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000003c0)=""/169, &(0x7f0000000000)=0xa9) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 781.257875ms ago: executing program 4 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0xfffffffffffffdea) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0xfffffffffffffdea) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x80) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, &(0x7f00000005c0), &(0x7f0000000780)='%pS \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfff8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0xa59, 0x18}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4, 0x10}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r8, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x540, 0x0, 0x1, 0xa173, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x540, 0x0, 0x1, 0xa173, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) 643.930587ms ago: executing program 2 (id=1520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x81, 0x7, 0x6, 0x80, 0x1, 0x7cd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x953}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060108000000000062b05bdb0c69cd7d000400050005000a00000005010400000000000900020073797a3000000000150003006861addc84c09c9755e1a9b28e6b8019affb7368"], 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000081) 439.526318ms ago: executing program 4 (id=1521): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x45, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x9}}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e4000000000000000000c7ff528f3b658ee1000000"], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011", 0x11) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="7727893bf51dca727fec62fda7a5e47519eb6caba59362c29847d6821c38df7d514e74e4c05aff377c0c4eb863613e1e822fbffe896a9e02c15053c31c590760e7e9dd4ffa2379bafac1cd36724bcba440d772328dba1d572b0302369d83830a9d26b0973b67800add28f600daa6c178665b0026fb5510a01b6fde5f8fe850e3c3f31debe6add69b06006aa5b6f771b679d99a861f924a430100"/165], 0x1c}}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x18) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r7) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08b9b8de", @ANYRES16=r9, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) read(r6, &(0x7f0000000000)=""/7, 0x7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, r11, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000200)) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "771324", 0x0, 0x3c, 0x0, @private1, @local}}}}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 438.042029ms ago: executing program 2 (id=1522): r0 = socket(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x9, 0xfffffff8, 0x8}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$nl_route(r4, 0x0, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x1ff) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r6, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r7, 0x29, 0x1e, &(0x7f0000000280)=0x100, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff018}, {0x6}]}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4000050) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) 287.126394ms ago: executing program 3 (id=1523): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4092}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f208000003000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r6, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff81}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9ea7}, {0x6, 0x11, 0x7}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x8, 0x3, 0x0) 53.406134ms ago: executing program 1 (id=1524): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000840)="a1c0ffff000039a9fe81bb4f6f1c0000a81eef54", 0x14}, {0x0}], 0x2}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100006000128009000100766c616e0000000050000280340004800100010001000000020000000c0001006b620004000000000c00010027060000080000000c00010005000000000600010000000000100003800c003900040500008b00000008000500c01e444edad1f5200a99acb18052abce45f0a1ff7cf1a5532e7167625814279344f887e78d000000", @ANYRES32=r2], 0x88}, 0x1, 0x0, 0x0, 0xc855}, 0x8000002) 0s ago: executing program 2 (id=1525): syz_emit_ethernet(0x50, &(0x7f00000000c0)={@remote, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}], @generic="1a83db27460084037b76583ccbc3ac4cb46ed4186e51e4388d5c2a2e2b351a9bb668d513afe35ba6c04319a8fb3ed2467be30ff70b5e7380d120"}}}}, &(0x7f0000000180)={0x1, 0x2, [0x9f6, 0x99c, 0x991, 0xc7a]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) socket$tipc(0x1e, 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x0, 0x0) accept4$tipc(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0xc0800) (async) accept4$tipc(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0xc0800) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000003c0)=""/4096, 0x18000, 0x800, 0x7f}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff"], 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000a3538f766aed5f000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3fd443188a7c747eb2278a273c1b800"], 0xfdef) kernel console output (not intermixed with test programs): 5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.037923][ T5864] Bluetooth: hci0: command tx timeout [ 90.040514][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.070256][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.071291][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.097092][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.110487][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.130349][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.182006][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.200706][ T5864] Bluetooth: hci1: command tx timeout [ 90.208872][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.268183][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.281437][ T5864] Bluetooth: hci2: command tx timeout [ 90.284617][ T51] Bluetooth: hci3: command tx timeout [ 90.289619][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.354740][ T51] Bluetooth: hci4: command tx timeout [ 90.372159][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.387614][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.567779][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.602101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.775361][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.817268][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.854284][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.886523][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.914286][ T6002] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 90.949894][ T6002] NCSI netlink: No device for ifindex 0 [ 91.063054][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.075496][ T6005] Zero length message leads to an empty skb [ 91.083132][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 91.094293][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.121343][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 91.149453][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 91.163799][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 91.175284][ T5999] netlink: 'syz.2.9': attribute type 6 has an invalid length. [ 91.378875][ T6018] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 91.444482][ T6012] tipc: Started in network mode [ 91.453351][ T6012] tipc: Node identity a22517f1c5a7, cluster identity 4711 [ 91.479385][ T6012] tipc: Enabled bearer , priority 0 [ 91.560799][ T6008] tipc: Resetting bearer [ 91.690061][ T6017] syzkaller0: entered promiscuous mode [ 91.800029][ T6017] syzkaller0: entered allmulticast mode [ 91.942555][ T6007] tipc: Resetting bearer [ 91.989567][ T6007] tipc: Disabling bearer [ 92.694734][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.812294][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 93.007656][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 93.129241][ T5938] IPVS: starting estimator thread 0... [ 93.212031][ T6068] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 93.235377][ T6075] IPVS: using max 40 ests per chain, 96000 per kthread [ 93.837988][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.545312][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 94.745726][ T6112] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 94.948248][ T6115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.35'. [ 95.761309][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.42'. [ 95.782714][ T6134] netlink: 96 bytes leftover after parsing attributes in process `syz.0.43'. [ 96.169501][ T6148] netlink: 'syz.0.45': attribute type 8 has an invalid length. [ 96.184498][ T6148] __nla_validate_parse: 4 callbacks suppressed [ 96.184514][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 96.222047][ T6150] netlink: 'syz.0.45': attribute type 8 has an invalid length. [ 96.251553][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 96.332440][ T6148] bond0: entered promiscuous mode [ 96.346911][ T6148] bond_slave_0: entered promiscuous mode [ 96.357887][ T6148] bond_slave_1: entered promiscuous mode [ 96.369083][ T6148] bond0: left promiscuous mode [ 96.403133][ T6148] bond_slave_0: left promiscuous mode [ 96.432955][ T6148] bond_slave_1: left promiscuous mode [ 96.459649][ T6150] bond0: entered promiscuous mode [ 96.465810][ T6150] bond_slave_0: entered promiscuous mode [ 96.472497][ T6150] bond_slave_1: entered promiscuous mode [ 96.482223][ T6150] bond0: left promiscuous mode [ 96.490054][ T6150] bond_slave_0: left promiscuous mode [ 96.497655][ T6150] bond_slave_1: left promiscuous mode [ 96.866507][ T6165] vlan2: entered allmulticast mode [ 96.884612][ T6165] batadv0: entered allmulticast mode [ 96.899181][ T6169] tipc: Started in network mode [ 96.908145][ T6169] tipc: Node identity 6674cd7902ce, cluster identity 4711 [ 96.929931][ T6169] tipc: Enabled bearer , priority 0 [ 97.051418][ T6169] tipc: Disabling bearer [ 97.079762][ T6172] can: request_module (can-proto-0) failed. [ 97.087254][ T6174] can: request_module (can-proto-0) failed. [ 97.557833][ T6198] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 98.503623][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 98.535220][ T6270] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 98.592985][ T6266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.65'. [ 98.626574][ T6277] syzkaller1: entered promiscuous mode [ 98.648822][ T6277] syzkaller1: entered allmulticast mode [ 98.692835][ T6266] gretap1: entered promiscuous mode [ 99.035927][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 99.047346][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.70'. [ 99.083375][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 99.100866][ T6290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.273207][ T6298] FAULT_INJECTION: forcing a failure. [ 99.273207][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.274236][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 99.307922][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.4.73 Not tainted syzkaller #0 PREEMPT(full) [ 99.307944][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.307960][ T6298] Call Trace: [ 99.307967][ T6298] [ 99.307975][ T6298] dump_stack_lvl+0x189/0x250 [ 99.308002][ T6298] ? __pfx____ratelimit+0x10/0x10 [ 99.308021][ T6298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.308039][ T6298] ? __pfx__printk+0x10/0x10 [ 99.308059][ T6298] ? __might_fault+0xb0/0x130 [ 99.308091][ T6298] should_fail_ex+0x414/0x560 [ 99.308118][ T6298] _copy_from_user+0x2d/0xb0 [ 99.308139][ T6298] ___sys_sendmsg+0x158/0x2a0 [ 99.308164][ T6298] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.308219][ T6298] ? __fget_files+0x2a/0x420 [ 99.308234][ T6298] ? __fget_files+0x3a0/0x420 [ 99.308259][ T6298] __x64_sys_sendmsg+0x19b/0x260 [ 99.308282][ T6298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.308312][ T6298] ? __pfx_ksys_write+0x10/0x10 [ 99.308330][ T6298] ? rcu_is_watching+0x15/0xb0 [ 99.308353][ T6298] ? do_syscall_64+0xbe/0x3b0 [ 99.308375][ T6298] do_syscall_64+0xfa/0x3b0 [ 99.308391][ T6298] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.308407][ T6298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.308423][ T6298] ? clear_bhb_loop+0x60/0xb0 [ 99.308442][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.308458][ T6298] RIP: 0033:0x7eff8c18eec9 [ 99.308480][ T6298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.308493][ T6298] RSP: 002b:00007eff8a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.308511][ T6298] RAX: ffffffffffffffda RBX: 00007eff8c3e5fa0 RCX: 00007eff8c18eec9 [ 99.308524][ T6298] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 99.308533][ T6298] RBP: 00007eff8a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.308542][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.308549][ T6298] R13: 00007eff8c3e6038 R14: 00007eff8c3e5fa0 R15: 00007fff39663f98 [ 99.308577][ T6298] [ 99.616471][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.626645][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.721626][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.737830][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.902613][ T5987] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.917375][ T5987] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.957836][ T6290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.062854][ T5987] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.073951][ T5987] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.145658][ T6290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.252730][ T6314] Bluetooth: MGMT ver 1.23 [ 100.321053][ T6290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.454330][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 100.570532][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 100.614585][ T6329] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 100.630983][ T6329] openvswitch: netlink: Duplicate key (type 0). [ 100.973287][ T5987] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.007328][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.060377][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.097480][ T6343] syz_tun: entered allmulticast mode [ 101.117464][ T6343] dvmrp8: entered allmulticast mode [ 101.151740][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.345793][ T6358] __nla_validate_parse: 1 callbacks suppressed [ 101.345810][ T6358] netlink: 92 bytes leftover after parsing attributes in process `syz.3.90'. [ 101.407813][ T6361] netlink: 'syz.3.90': attribute type 16 has an invalid length. [ 101.427058][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 101.518950][ T6341] syz_tun: left allmulticast mode [ 101.527482][ T6341] dvmrp8: left allmulticast mode [ 101.600587][ T6368] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 101.959304][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 102.022208][ T6384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.068149][ T6382] bond_slave_0: entered promiscuous mode [ 102.075049][ T6382] bond_slave_1: entered promiscuous mode [ 102.084767][ T6382] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.094274][ T6382] bond_slave_0: left promiscuous mode [ 102.101895][ T6382] bond_slave_1: left promiscuous mode [ 102.416001][ T6399] netlink: 296 bytes leftover after parsing attributes in process `syz.1.101'. [ 102.740531][ T6408] netlink: 48 bytes leftover after parsing attributes in process `syz.0.102'. [ 102.871945][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 104.509271][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 104.583746][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 105.636444][ T6515] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 105.698081][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.728412][ T6515] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.812800][ T6520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.862838][ T6521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.894448][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 105.926823][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.044412][ T6521] vlan2: entered promiscuous mode [ 106.061409][ T6521] veth0: entered promiscuous mode [ 106.104525][ T6537] netlink: 'syz.4.132': attribute type 11 has an invalid length. [ 106.114668][ T6537] netlink: 'syz.4.132': attribute type 4 has an invalid length. [ 106.145942][ T6520] vlan2: entered promiscuous mode [ 106.363484][ T6539] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 106.643290][ T6554] dummy0: entered promiscuous mode [ 106.673249][ T6556] __nla_validate_parse: 2 callbacks suppressed [ 106.673267][ T6556] netlink: 47 bytes leftover after parsing attributes in process `syz.1.137'. [ 106.715229][ T6554] vlan2: entered promiscuous mode [ 106.966561][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 107.335137][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.142'. [ 108.336268][ T6599] sctp: [Deprecated]: syz.3.150 (pid 6599) Use of int in max_burst socket option. [ 108.336268][ T6599] Use struct sctp_assoc_value instead [ 108.419083][ T6601] netlink: 277 bytes leftover after parsing attributes in process `syz.1.151'. [ 108.501882][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 108.502458][ T30] audit: type=1107 audit(1758614954.891:2): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 108.544553][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 108.546151][ T6603] netlink: 52 bytes leftover after parsing attributes in process `syz.4.152'. [ 108.600418][ T6244] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.641448][ T6244] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.674498][ T6244] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.718847][ T6244] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.884689][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 109.242544][ T6640] netlink: 128 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.800261][ T6641] syzkaller0: entered promiscuous mode [ 109.845379][ T6641] syzkaller0: entered allmulticast mode [ 110.700999][ T6402] Set syz1 is full, maxelem 65536 reached [ 111.857545][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.874540][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.887720][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.898264][ T6699] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.910191][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.925260][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 112.092930][ T6675] syzkaller0: entered promiscuous mode [ 112.100824][ T6675] syzkaller0: entered allmulticast mode [ 112.481355][ T6719] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 112.532946][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 113.573436][ T6719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.622320][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 113.652478][ T6720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.666337][ T6720] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.709115][ T6720] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 113.742892][ T6721] veth3: entered promiscuous mode [ 113.752108][ T6721] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.809978][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.835512][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.029879][ T6749] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 114.069207][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.080031][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.099795][ T6747] netlink: 'syz.0.178': attribute type 29 has an invalid length. [ 114.162171][ T6749] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 114.250619][ T6750] netlink: 'syz.0.178': attribute type 29 has an invalid length. [ 114.299380][ T6747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.178'. [ 114.339593][ T6747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 114.687556][ T6773] syzkaller1: entered promiscuous mode [ 114.717417][ T6773] syzkaller1: entered allmulticast mode [ 114.736621][ T6779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.187'. [ 115.157992][ C1] Illegal XDP return value 16128 on prog (id 64) dev lo, expect packet loss! [ 115.174271][ T6800] netlink: 'syz.3.191': attribute type 9 has an invalid length. [ 115.197218][ T6800] netlink: 'syz.3.191': attribute type 7 has an invalid length. [ 115.218742][ T6800] netlink: 'syz.3.191': attribute type 8 has an invalid length. [ 115.239827][ T6803] xt_policy: neither incoming nor outgoing policy selected [ 115.448154][ T6809] syzkaller1: entered promiscuous mode [ 115.460855][ T6809] syzkaller1: entered allmulticast mode [ 115.730914][ T6827] netlink: 'syz.4.198': attribute type 21 has an invalid length. [ 116.260729][ T30] audit: type=1804 audit(1758614962.651:3): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.208" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=242 res=1 errno=0 [ 116.373610][ T30] audit: type=1800 audit(1758614962.681:4): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.208" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=242 res=0 errno=0 [ 116.443057][ T6860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.455785][ T6860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.561798][ T6860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.573272][ T6860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.610172][ T6874] netlink: ct family unspecified [ 116.622783][ T6874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.695519][ T6860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.741964][ T6860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.911883][ T6860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.936830][ T6860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.245568][ T6906] __nla_validate_parse: 4 callbacks suppressed [ 117.245585][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 117.291776][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 117.378926][ T6244] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.410691][ T6244] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.510091][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 117.538787][ T6244] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.569477][ T6244] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.631482][ T6244] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.665863][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 117.704308][ T6244] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.754739][ T6236] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.776332][ T6236] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.935432][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 118.198908][ T6934] tipc: Enabled bearer , priority 0 [ 118.260693][ T6938] syzkaller0: entered promiscuous mode [ 118.314623][ T6938] syzkaller0: entered allmulticast mode [ 118.417209][ T6934] tipc: Resetting bearer [ 118.474808][ T6933] tipc: Resetting bearer [ 118.583679][ T6933] tipc: Disabling bearer [ 118.799887][ T9] IPVS: starting estimator thread 0... [ 118.831964][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 118.880853][ T6964] netlink: 244 bytes leftover after parsing attributes in process `syz.1.234'. [ 118.933640][ T6961] IPVS: using max 41 ests per chain, 98400 per kthread [ 119.199015][ T6976] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 119.236867][ T6976] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 119.264167][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 119.273540][ T6976] netlink: 188 bytes leftover after parsing attributes in process `syz.3.240'. [ 119.276465][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 119.305597][ T6980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.531044][ T6987] tipc: Started in network mode [ 119.567768][ T6987] tipc: Node identity 1ac3ce4b03bf, cluster identity 4711 [ 119.576963][ T6987] tipc: Enabled bearer , priority 0 [ 119.597762][ T6989] syzkaller0: entered promiscuous mode [ 119.607627][ T6989] syzkaller0: entered allmulticast mode [ 119.786001][ T7001] tipc: Resetting bearer [ 119.811065][ T6986] tipc: Resetting bearer [ 119.869475][ T6986] tipc: Disabling bearer [ 119.932458][ T7007] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 120.205167][ T7019] bridge_slave_0: left allmulticast mode [ 120.219687][ T7019] bridge_slave_0: left promiscuous mode [ 120.235805][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.253375][ T7019] bridge_slave_1: left allmulticast mode [ 120.270668][ T7019] bridge_slave_1: left promiscuous mode [ 120.286079][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.308711][ T7019] bond0: (slave bond_slave_0): Releasing backup interface [ 120.338787][ T7019] bond0: (slave bond_slave_1): Releasing backup interface [ 120.409631][ T7019] team0: Port device team_slave_0 removed [ 120.447106][ T7019] team0: Port device team_slave_1 removed [ 120.454708][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.464909][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.495326][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.503802][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.516020][ T7019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.815103][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.862667][ T7031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.388782][ T7054] syz_tun: entered allmulticast mode [ 121.435964][ T7054] dvmrp8: entered allmulticast mode [ 121.623483][ T7062] syz_tun: left allmulticast mode [ 121.649661][ T7062] dvmrp8: left allmulticast mode [ 122.031409][ T7073] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 122.115311][ T7070] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 122.151889][ T7073] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.268115][ T7076] __nla_validate_parse: 42 callbacks suppressed [ 122.268142][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 122.738160][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 123.016079][ T7095] nbd: must specify a device to reconfigure [ 123.314700][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 123.517217][ T7109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.277'. [ 123.578571][ T7110] syzkaller0: entered promiscuous mode [ 123.585228][ T7110] syzkaller0: entered allmulticast mode [ 123.732737][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 123.786450][ T7115] veth1_macvtap: left promiscuous mode [ 123.921496][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 123.935584][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 123.951787][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 123.970717][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 124.001607][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 124.015186][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 124.052311][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.066264][ T7117] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.083307][ T7117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.332218][ T7124] TCP: TCP_TX_DELAY enabled [ 124.868033][ T7147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.100887][ T7154] tipc: Enabled bearer , priority 0 [ 125.129002][ T7154] syzkaller0: entered promiscuous mode [ 125.152248][ T7154] syzkaller0: entered allmulticast mode [ 125.282787][ T7154] tipc: Resetting bearer [ 125.294697][ T7153] tipc: Resetting bearer [ 125.382716][ T7153] tipc: Disabling bearer [ 125.460802][ T7024] Set syz1 is full, maxelem 65536 reached [ 125.583110][ T7173] netlink: 'syz.3.294': attribute type 2 has an invalid length. [ 125.692716][ T7178] tipc: Enabled bearer , priority 0 [ 125.715176][ T7180] tipc: Enabling of bearer rejected, already enabled [ 125.735897][ T7177] syzkaller0: entered promiscuous mode [ 125.752604][ T7177] syzkaller0: entered allmulticast mode [ 125.866386][ T7178] tipc: Resetting bearer [ 125.915681][ T7175] tipc: Resetting bearer [ 125.980012][ T7175] tipc: Disabling bearer [ 126.211902][ T7196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.496010][ T7223] __nla_validate_parse: 91 callbacks suppressed [ 127.496029][ T7223] netlink: 308 bytes leftover after parsing attributes in process `syz.1.309'. [ 127.582598][ T7224] netlink: 64 bytes leftover after parsing attributes in process `syz.1.309'. [ 127.635132][ T7229] netlink: 'syz.4.311': attribute type 58 has an invalid length. [ 127.644451][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.311'. [ 127.730468][ T7216] bond0: (slave team0): Releasing backup interface [ 127.749586][ T7216] team0 (unregistering): Port device team_slave_0 removed [ 127.765044][ T7216] team0 (unregistering): Port device team_slave_1 removed [ 128.293934][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.324790][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.366344][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.401560][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.494420][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.534411][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.552125][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 128.592580][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.633693][ T7255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.175682][ T7339] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 130.256617][ T7297] vlan2: left allmulticast mode [ 130.262297][ T7297] batadv0: left allmulticast mode [ 130.268509][ T7297] gretap1: left promiscuous mode [ 130.280185][ T7297] veth3: left promiscuous mode [ 130.320456][ T7295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.331515][ T7308] hsr_slave_0: left promiscuous mode [ 130.340064][ T7308] hsr_slave_1: left promiscuous mode [ 130.412330][ T7316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.461430][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.492663][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.543754][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.568974][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.610585][ T7345] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 130.635510][ T7345] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 130.682867][ T7349] bond_slave_0: entered promiscuous mode [ 130.689280][ T7349] bond_slave_1: entered promiscuous mode [ 130.703775][ T7349] vlan2: entered promiscuous mode [ 130.715185][ T7349] bond0: entered promiscuous mode [ 130.941791][ T7360] pimreg: entered allmulticast mode [ 131.478439][ T7375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.276859][ T7413] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 132.375247][ T7402] gretap2: entered allmulticast mode [ 132.391542][ T7419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.910594][ T7441] __nla_validate_parse: 72 callbacks suppressed [ 132.910612][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 132.924582][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966385][ T7433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'. [ 132.977651][ T7433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.985861][ T7433] IPv6: NLM_F_CREATE should be set when creating new route [ 132.993962][ T7433] IPv6: NLM_F_CREATE should be set when creating new route [ 133.154516][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 133.493748][ T7448] geneve2: entered promiscuous mode [ 133.513555][ T7448] geneve2: entered allmulticast mode [ 133.553341][ T5987] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 1280 - 0 [ 133.567274][ T5987] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 1280 - 0 [ 133.609205][ T5987] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 1280 - 0 [ 133.648278][ T5874] IPVS: starting estimator thread 0... [ 133.665099][ T5987] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 1280 - 0 [ 133.746862][ T7462] IPVS: using max 24 ests per chain, 57600 per kthread [ 133.922563][ T7474] tipc: Enabled bearer , priority 0 [ 134.010984][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 134.043825][ T7481] syzkaller0: entered promiscuous mode [ 134.050369][ T7481] syzkaller0: entered allmulticast mode [ 134.065811][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.375'. [ 134.078169][ T7481] tipc: Resetting bearer [ 134.367533][ T7499] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.385361][ T7481] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 134.420637][ T7499] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 134.472659][ T7499] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 134.709450][ T7469] tipc: Resetting bearer [ 134.937027][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 135.008242][ T5925] tipc: Node number set to 1736579057 [ 136.118849][ T7469] tipc: Disabling bearer [ 136.143718][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.383'. [ 136.231814][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 136.623614][ T7545] veth0: entered promiscuous mode [ 136.793986][ T7539] netlink: 'syz.4.387': attribute type 16 has an invalid length. [ 136.802930][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 136.815227][ T7539] netlink: 'syz.4.387': attribute type 17 has an invalid length. [ 136.833045][ T7539] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.858300][ T7537] veth0: left promiscuous mode [ 137.393333][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 137.793096][ T7562] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 138.110437][ T7606] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 138.136121][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.144887][ T7606] team0: entered promiscuous mode [ 138.150650][ T7606] team_slave_0: entered promiscuous mode [ 138.158050][ T7606] team_slave_1: entered promiscuous mode [ 138.166296][ T7606] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.188303][ T7613] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.364637][ T7577] syz.2.399 (7577) used greatest stack depth: 17864 bytes left [ 138.648558][ T7637] netlink: 'syz.2.416': attribute type 9 has an invalid length. [ 138.791391][ T7640] __nla_validate_parse: 2 callbacks suppressed [ 138.791408][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 138.809156][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 138.832967][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 138.852449][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 139.049495][ T7652] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.422'. [ 139.061405][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 139.237680][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 139.402027][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 139.677528][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 140.183763][ T7722] syzkaller0: entered promiscuous mode [ 140.184169][ T7728] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001 [ 140.189685][ T7722] syzkaller0: entered allmulticast mode [ 140.494233][ T7734] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 142.268950][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 143.881439][ T7830] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 143.914001][ T7830] __nla_validate_parse: 6 callbacks suppressed [ 143.914020][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 144.119508][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 144.465300][ T7843] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.468'. [ 144.501490][ T5925] IPVS: starting estimator thread 0... [ 144.566892][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 144.616751][ T7844] IPVS: using max 26 ests per chain, 62400 per kthread [ 144.631606][ T7840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.468'. [ 145.272565][ T7877] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 145.427218][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.505599][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.526272][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.565916][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.618074][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 146.179961][ T7912] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 146.411047][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.701699][ T7936] batadv_slave_1: entered promiscuous mode [ 146.870713][ T7940] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 146.921644][ T7941] tipc: Enabling of bearer rejected, failed to enable media [ 147.450542][ T7930] batadv_slave_1: left promiscuous mode [ 147.539188][ T51] Bluetooth: hci4: link tx timeout [ 147.546318][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.575351][ T51] Bluetooth: hci4: link tx timeout [ 147.580882][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.590855][ T51] Bluetooth: hci4: link tx timeout [ 147.597835][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.606088][ T51] Bluetooth: hci4: link tx timeout [ 147.611840][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.625252][ T51] Bluetooth: hci4: link tx timeout [ 147.631261][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.642452][ T51] Bluetooth: hci4: link tx timeout [ 147.648934][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.667439][ T51] Bluetooth: hci4: link tx timeout [ 147.673203][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.682786][ T51] Bluetooth: hci4: link tx timeout [ 147.689345][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.697603][ T51] Bluetooth: hci4: link tx timeout [ 147.703881][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.847438][ T7982] warning: `syz.3.500' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.125629][ T7996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.343004][ T8007] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 148.457921][ T8007] bond0: (slave gretap0): Opening slave failed [ 148.536840][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.560336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.836869][ T8023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.405926][ T8047] __nla_validate_parse: 105 callbacks suppressed [ 149.405946][ T8047] netlink: 145036 bytes leftover after parsing attributes in process `syz.2.519'. [ 149.467552][ T8047] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 149.633720][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 149.657698][ T8054] veth0: entered promiscuous mode [ 149.708424][ T8054] batadv_slave_0: entered promiscuous mode [ 149.733758][ T8053] batadv_slave_0: left promiscuous mode [ 149.739897][ T8053] veth0: left promiscuous mode [ 149.920538][ T8065] !: renamed from dummy0 (while UP) [ 150.095400][ T8076] netlink: 'syz.4.529': attribute type 4 has an invalid length. [ 150.104082][ T8076] netlink: 17 bytes leftover after parsing attributes in process `syz.4.529'. [ 150.205275][ T8081] netlink: 'syz.4.529': attribute type 6 has an invalid length. [ 150.347306][ T8085] sctp: [Deprecated]: syz.2.531 (pid 8085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.347306][ T8085] Use struct sctp_sack_info instead [ 150.830088][ T8101] vlan2: entered allmulticast mode [ 150.853567][ T8101] dummy0: entered allmulticast mode [ 150.937469][ T8103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.150782][ T8122] netlink: 'syz.3.539': attribute type 9 has an invalid length. [ 151.767226][ T8127] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 152.086606][ T8131] dvmrp8: entered allmulticast mode [ 152.248080][ T8126] dvmrp8: left allmulticast mode [ 152.341266][ T8146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.543'. [ 152.510053][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 152.618556][ T8153] pim6reg: entered allmulticast mode [ 152.647776][ T8155] pim6reg: left allmulticast mode [ 153.337651][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 153.402096][ T8180] netlink: 152 bytes leftover after parsing attributes in process `syz.1.553'. [ 154.011646][ T8194] IPv6: sit2: Disabled Multicast RS [ 154.406133][ T8208] veth0: entered promiscuous mode [ 154.412352][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 154.525769][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 154.568885][ T8208] veth0 (unregistering): left promiscuous mode [ 154.675271][ T8216] tipc: Enabling of bearer rejected, failed to enable media [ 155.278604][ T8240] FAULT_INJECTION: forcing a failure. [ 155.278604][ T8240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.324187][ T8241] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 155.343849][ T8240] CPU: 0 UID: 0 PID: 8240 Comm: syz.3.568 Not tainted syzkaller #0 PREEMPT(full) [ 155.343875][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.343886][ T8240] Call Trace: [ 155.343894][ T8240] [ 155.343902][ T8240] dump_stack_lvl+0x189/0x250 [ 155.343925][ T8240] ? __pfx____ratelimit+0x10/0x10 [ 155.343944][ T8240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.343962][ T8240] ? __pfx__printk+0x10/0x10 [ 155.343984][ T8240] ? __might_fault+0xb0/0x130 [ 155.344023][ T8240] should_fail_ex+0x414/0x560 [ 155.344052][ T8240] _copy_from_user+0x2d/0xb0 [ 155.344073][ T8240] __sys_sendto+0x25c/0x520 [ 155.344096][ T8240] ? __pfx___sys_sendto+0x10/0x10 [ 155.344113][ T8240] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 155.344145][ T8240] ? __fget_files+0x3a0/0x420 [ 155.344168][ T8240] ? ksys_write+0x22a/0x250 [ 155.344192][ T8240] ? __pfx_ksys_write+0x10/0x10 [ 155.344209][ T8240] ? rcu_is_watching+0x15/0xb0 [ 155.344232][ T8240] __x64_sys_sendto+0xde/0x100 [ 155.344255][ T8240] do_syscall_64+0xfa/0x3b0 [ 155.344271][ T8240] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.344289][ T8240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.344305][ T8240] ? clear_bhb_loop+0x60/0xb0 [ 155.344325][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.344341][ T8240] RIP: 0033:0x7fd118f8eec9 [ 155.344365][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.344378][ T8240] RSP: 002b:00007fd119dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 155.344400][ T8240] RAX: ffffffffffffffda RBX: 00007fd1191e5fa0 RCX: 00007fd118f8eec9 [ 155.344413][ T8240] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000003 [ 155.344423][ T8240] RBP: 00007fd119dea090 R08: 0000200000000040 R09: 000000000000001c [ 155.344435][ T8240] R10: 0000000000048880 R11: 0000000000000246 R12: 0000000000000001 [ 155.344445][ T8240] R13: 00007fd1191e6038 R14: 00007fd1191e5fa0 R15: 00007ffd4f48beb8 [ 155.344475][ T8240] [ 155.835235][ T8241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.165536][ T8256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.569'. [ 156.979280][ T8270] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 157.142203][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.162929][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.174381][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.188470][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.199072][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.228580][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.240447][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 157.249341][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 157.261595][ T8275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.343907][ T8278] team1: entered promiscuous mode [ 157.349588][ T8278] team1: entered allmulticast mode [ 157.357663][ T8278] 8021q: adding VLAN 0 to HW filter on device team1 [ 157.802348][ T8306] tipc: Enabling of bearer rejected, failed to enable media [ 158.744946][ T8340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.843407][ T8343] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 158.912410][ T8349] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 159.585779][ T8365] tipc: Started in network mode [ 159.592164][ T8365] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 159.601694][ T8365] tipc: Enabled bearer , priority 2 [ 159.929278][ T8380] syzkaller1: entered promiscuous mode [ 159.936374][ T8380] syzkaller1: entered allmulticast mode [ 160.164498][ T8390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.571730][ T8406] __nla_validate_parse: 11 callbacks suppressed [ 160.571750][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 160.589944][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 160.713917][ T5874] tipc: Node number set to 9349802 [ 161.160006][ T8139] Set syz1 is full, maxelem 65536 reached [ 161.542255][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'. [ 161.599517][ T8447] netlink: 100 bytes leftover after parsing attributes in process `syz.4.619'. [ 162.085854][ T8458] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 162.094678][ T8458] netlink: 144 bytes leftover after parsing attributes in process `syz.1.622'. [ 162.120200][ T8458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.622'. [ 162.420804][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.577643][ T8461] veth3: entered promiscuous mode [ 162.647729][ T8466] batadv1: entered promiscuous mode [ 162.653296][ T8466] batadv1: entered allmulticast mode [ 162.790367][ T8475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.625'. [ 163.525339][ T8509] syz_tun: entered allmulticast mode [ 163.539620][ T8508] syz_tun: left allmulticast mode [ 163.811973][ T8523] netlink: 'syz.2.637': attribute type 39 has an invalid length. [ 163.815732][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.831636][ T8513] team0: Port device bond1 added [ 164.278576][ T8531] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001 [ 164.444923][ T8544] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 164.476410][ T8541] dvmrp8: entered allmulticast mode [ 164.637556][ T8549] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 164.657579][ T8551] netlink: 56 bytes leftover after parsing attributes in process `syz.1.645'. [ 164.746240][ T30] audit: type=1107 audit(1758615011.141:5): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯UÌ‹›Ù/ôšc!({Ö„¢µ‰÷‹Tõ°ìÁAs#V' [ 165.070113][ T8540] dvmrp8: left allmulticast mode [ 165.941663][ T8590] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 165.965995][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 165.968481][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 166.004093][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 166.199888][ T8585] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 166.854473][ T8622] netlink: 164 bytes leftover after parsing attributes in process `syz.3.660'. [ 166.907558][ T30] audit: type=1800 audit(1758615013.301:6): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.661" name="memory.events" dev="tmpfs" ino=695 res=0 errno=0 [ 166.914190][ T8622] netlink: 164 bytes leftover after parsing attributes in process `syz.3.660'. [ 166.973678][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.660'. [ 166.991168][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.662'. [ 167.168277][ T8628] bond3 (unregistering): Released all slaves [ 167.249707][ T8637] tipc: Started in network mode [ 167.263672][ T8637] tipc: Node identity 5ecafbd93c4f, cluster identity 4711 [ 167.271201][ T8637] tipc: Enabled bearer , priority 0 [ 167.288081][ T8639] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 167.337199][ T8640] syzkaller0: entered promiscuous mode [ 167.343396][ T8640] syzkaller0: entered allmulticast mode [ 167.391270][ T8639] bridge0: port 3(macsec0) entered blocking state [ 167.399931][ T8639] bridge0: port 3(macsec0) entered disabled state [ 167.412944][ T8639] macsec0: entered allmulticast mode [ 167.429676][ T8639] veth1_macvtap: entered allmulticast mode [ 167.468014][ T8639] macsec0: entered promiscuous mode [ 167.491311][ T8639] bridge0: port 3(macsec0) entered blocking state [ 167.498524][ T8639] bridge0: port 3(macsec0) entered forwarding state [ 167.975365][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'. [ 168.341231][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 168.397229][ T5865] tipc: Node number set to 1652947929 [ 169.249746][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 169.271335][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 169.342682][ T8703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.462521][ T8717] ipvlan2: entered promiscuous mode [ 169.581764][ T8719] tipc: Enabled bearer , priority 0 [ 169.655978][ T8722] trusted_key: syz.4.680 sent an empty control message without MSG_MORE. [ 169.665619][ T8719] syzkaller0: entered promiscuous mode [ 169.671204][ T8719] syzkaller0: entered allmulticast mode [ 169.677832][ T8719] tipc: Resetting bearer [ 169.988913][ T8743] Bluetooth: MGMT ver 1.23 [ 170.267995][ T8253] Set syz1 is full, maxelem 65536 reached [ 170.274423][ T6244] tipc: Resetting bearer [ 170.335345][ T8748] netlink: 'syz.4.685': attribute type 4 has an invalid length. [ 170.410789][ T8718] tipc: Resetting bearer [ 170.693767][ T5865] tipc: Node number set to 1689963897 [ 170.936922][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.965685][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.987381][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.996268][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.005010][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.960166][ T8718] tipc: Disabling bearer [ 172.117045][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 172.381911][ T8790] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 172.394524][ T8785] IPVS: stopping master sync thread 8790 ... [ 172.431080][ T8785] netlink: 'syz.2.695': attribute type 83 has an invalid length. [ 172.857538][ T8806] __nla_validate_parse: 17 callbacks suppressed [ 172.857559][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.699'. [ 172.895123][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 173.098471][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 173.154571][ T5864] Bluetooth: hci3: command tx timeout [ 173.784684][ T6252] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 173.801938][ T6252] bond0 (unregistering): Released all slaves [ 173.905249][ T6252] bond1 (unregistering): (slave veth3): Releasing active interface [ 173.914806][ T6252] bond1 (unregistering): Released all slaves [ 173.928443][ T6252] bond2 (unregistering): Released all slaves [ 173.944147][ T6252] bond3 (unregistering): Released all slaves [ 173.963041][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.970917][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.986080][ T8766] bridge_slave_0: entered allmulticast mode [ 174.001911][ T8766] bridge_slave_0: entered promiscuous mode [ 174.011961][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.020216][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.028308][ T8766] bridge_slave_1: entered allmulticast mode [ 174.037373][ T8766] bridge_slave_1: entered promiscuous mode [ 174.206418][ T6252] tipc: Left network mode [ 174.248840][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.266009][ T8839] netlink: 'syz.4.709': attribute type 3 has an invalid length. [ 174.288279][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.321231][ T8839] netlink: 224 bytes leftover after parsing attributes in process `syz.4.709'. [ 174.337151][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'. [ 174.359725][ T8841] openvswitch: netlink: EtherType 0 is less than min 600 [ 174.362565][ T8832] geneve2: entered promiscuous mode [ 174.416851][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 174.503954][ T8845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.710'. [ 174.563905][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 174.590415][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 174.605201][ T8852] openvswitch: netlink: Missing valid actions attribute. [ 174.614422][ T8852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.625205][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 174.660416][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 174.685167][ T8846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.734904][ T8766] team0: Port device team_slave_0 added [ 174.774682][ T8855] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 174.786580][ T8855] macvtap1: entered promiscuous mode [ 174.868161][ T8766] team0: Port device team_slave_1 added [ 175.097122][ T8869] netlink: 'syz.1.716': attribute type 15 has an invalid length. [ 175.131265][ T8869] netlink: 'syz.1.716': attribute type 27 has an invalid length. [ 175.131422][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.149806][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.181441][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.233504][ T5864] Bluetooth: hci3: command tx timeout [ 175.289065][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.297963][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.327630][ T8869] tipc: Resetting bearer [ 175.450651][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.469896][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.889321][ T8897] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 176.267266][ T8905] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 176.274735][ T5874] IPVS: starting estimator thread 0... [ 176.364355][ T8915] IPVS: using max 27 ests per chain, 64800 per kthread [ 176.669698][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.677337][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.706076][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.736242][ T8885] syzkaller0: entered promiscuous mode [ 176.742814][ T8885] syzkaller0: entered allmulticast mode [ 176.761395][ T6244] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.771379][ T6244] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.780712][ T6244] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 1280 - 0 [ 176.789626][ T6244] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.798730][ T6244] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.808822][ T6244] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 1280 - 0 [ 176.872097][ T8884] tipc: Enabling of bearer rejected, failed to enable media [ 176.889732][ T6244] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.904822][ T6244] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.956583][ T6244] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 1280 - 0 [ 176.969812][ T6244] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.989406][ T6244] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.007081][ T6244] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 1280 - 0 [ 177.130913][ T8766] hsr_slave_0: entered promiscuous mode [ 177.140490][ T8766] hsr_slave_1: entered promiscuous mode [ 177.156607][ T8766] debugfs: 'hsr0' already exists in 'hsr' [ 177.172871][ T8766] Cannot create hsr debugfs directory [ 177.326085][ T5864] Bluetooth: hci3: command tx timeout [ 177.749556][ T6252] IPVS: stop unused estimator thread 0... [ 177.879078][ T30] audit: type=1800 audit(1758615024.271:7): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.727" name="memory.events" dev="tmpfs" ino=923 res=0 errno=0 [ 178.156605][ T8958] __nla_validate_parse: 21 callbacks suppressed [ 178.156624][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 178.703279][ T8766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.853526][ T8766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.892640][ T8766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.929743][ T8766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.121922][ T9003] netlink: 'syz.1.737': attribute type 46 has an invalid length. [ 179.289009][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'. [ 179.365429][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.393978][ T5864] Bluetooth: hci3: command tx timeout [ 179.421294][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.450750][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.458657][ T6236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.560025][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.567505][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.813183][ T9031] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 180.086957][ T9040] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.110698][ T9040] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 180.214796][ T9035] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 180.233022][ T9035] bridge2: entered allmulticast mode [ 180.251315][ T9047] gretap1: entered promiscuous mode [ 180.295599][ T9047] bond3: (slave gretap1): making interface the new active one [ 180.338027][ T9047] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 180.436171][ T9051] macvlan3: entered promiscuous mode [ 180.456781][ T9051] macvlan3: entered allmulticast mode [ 180.463177][ T9051] bond3: entered promiscuous mode [ 180.488969][ T9051] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 180.513109][ T9051] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 180.536146][ T9051] bond3: left promiscuous mode [ 180.570944][ T9062] pimreg: entered allmulticast mode [ 180.577180][ T9062] pimreg: left allmulticast mode [ 180.615883][ T9069] macsec0: entered promiscuous mode [ 180.621364][ T9069] macsec0: entered allmulticast mode [ 180.695943][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.781321][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 180.803988][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 180.858714][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 180.884423][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 180.917235][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 180.963252][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 180.991100][ T9091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.994717][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 181.015928][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.2.750'. [ 181.687439][ T8766] veth0_vlan: entered promiscuous mode [ 181.734455][ T8766] veth1_vlan: entered promiscuous mode [ 181.907579][ T8766] veth0_macvtap: entered promiscuous mode [ 181.961313][ T8766] veth1_macvtap: entered promiscuous mode [ 181.975978][ T9135] tipc: Enabled bearer , priority 0 [ 182.001397][ T9135] syzkaller0: entered promiscuous mode [ 182.007856][ T9135] syzkaller0: entered allmulticast mode [ 182.077814][ T9135] tipc: Resetting bearer [ 182.113224][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.182618][ T9134] tipc: Resetting bearer [ 182.206559][ T9134] tipc: Disabling bearer [ 182.220949][ T9142] veth1: entered promiscuous mode [ 182.236484][ T9142] netlink: 'syz.3.761': attribute type 8 has an invalid length. [ 182.246680][ T9142] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 182.288179][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.331417][ T6234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.386377][ T6234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.408361][ T6234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.443879][ T6234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.671136][ T9162] syz.2.766: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.687404][ T9162] CPU: 1 UID: 0 PID: 9162 Comm: syz.2.766 Not tainted syzkaller #0 PREEMPT(full) [ 182.687427][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.687445][ T9162] Call Trace: [ 182.687452][ T9162] [ 182.687459][ T9162] dump_stack_lvl+0x189/0x250 [ 182.687488][ T9162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.687508][ T9162] ? __pfx__printk+0x10/0x10 [ 182.687532][ T9162] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.687554][ T9162] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.687576][ T9162] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 182.687599][ T9162] warn_alloc+0x214/0x310 [ 182.687624][ T9162] ? stack_depot_save_flags+0x40/0x860 [ 182.687650][ T9162] ? __pfx_warn_alloc+0x10/0x10 [ 182.687676][ T9162] ? kasan_save_track+0x4f/0x80 [ 182.687697][ T9162] ? xskq_create+0x56/0x170 [ 182.687713][ T9162] ? xsk_init_queue+0xb0/0x110 [ 182.687726][ T9162] ? xsk_setsockopt+0x4dc/0x8d0 [ 182.687747][ T9162] ? do_sock_setsockopt+0x179/0x1b0 [ 182.687767][ T9162] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 182.687786][ T9162] ? do_syscall_64+0xfa/0x3b0 [ 182.687803][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.687829][ T9162] __vmalloc_node_range_noprof+0x125/0x12f0 [ 182.687884][ T9162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.687914][ T9162] ? __kasan_kmalloc+0x93/0xb0 [ 182.687939][ T9162] vmalloc_user_noprof+0xad/0xf0 [ 182.687962][ T9162] ? xskq_create+0xbf/0x170 [ 182.687980][ T9162] xskq_create+0xbf/0x170 [ 182.688000][ T9162] xsk_init_queue+0xb0/0x110 [ 182.688020][ T9162] xsk_setsockopt+0x4dc/0x8d0 [ 182.688046][ T9162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.688069][ T9162] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.688097][ T9162] ? aa_sock_opt_perm+0xff/0x1b0 [ 182.688118][ T9162] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 182.688136][ T9162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.688161][ T9162] do_sock_setsockopt+0x179/0x1b0 [ 182.688185][ T9162] __x64_sys_setsockopt+0x13f/0x1b0 [ 182.688212][ T9162] do_syscall_64+0xfa/0x3b0 [ 182.688229][ T9162] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.688246][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.688267][ T9162] ? clear_bhb_loop+0x60/0xb0 [ 182.688289][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.688305][ T9162] RIP: 0033:0x7fad8b38eec9 [ 182.688322][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.688336][ T9162] RSP: 002b:00007fad8c145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.688355][ T9162] RAX: ffffffffffffffda RBX: 00007fad8b5e6090 RCX: 00007fad8b38eec9 [ 182.688368][ T9162] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 182.688379][ T9162] RBP: 00007fad8b411f91 R08: 0000000000000004 R09: 0000000000000000 [ 182.688390][ T9162] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.688402][ T9162] R13: 00007fad8b5e6128 R14: 00007fad8b5e6090 R15: 00007ffef0febbc8 [ 182.688460][ T9162] [ 182.688714][ T9162] Mem-Info: [ 183.000134][ T9162] active_anon:6226 inactive_anon:0 isolated_anon:0 [ 183.000134][ T9162] active_file:3076 inactive_file:39919 isolated_file:0 [ 183.000134][ T9162] unevictable:768 dirty:45 writeback:0 [ 183.000134][ T9162] slab_reclaimable:11205 slab_unreclaimable:102541 [ 183.000134][ T9162] mapped:31475 shmem:1419 pagetables:1239 [ 183.000134][ T9162] sec_pagetables:0 bounce:0 [ 183.000134][ T9162] kernel_misc_reclaimable:0 [ 183.000134][ T9162] free:1324081 free_pcp:14883 free_cma:0 [ 183.094598][ T9162] Node 0 active_anon:24992kB inactive_anon:0kB active_file:12304kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125860kB dirty:180kB writeback:0kB shmem:4344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12988kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.147616][ T9162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.203753][ T9162] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.233889][ T6244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.233910][ T6244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.256889][ T9162] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 183.264914][ T9162] Node 0 DMA32 free:1388996kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24748kB inactive_anon:0kB active_file:12304kB inactive_file:157908kB unevictable:1536kB writepending:176kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:38592kB local_pcp:20292kB free_cma:0kB [ 183.299523][ T9162] lowmem_reserve[]: 0 0 1 1 1 [ 183.305837][ T9162] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 183.352319][ T9162] lowmem_reserve[]: 0 0 0 0 0 [ 183.370579][ T9162] Node 1 Normal free:3891240kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21860kB local_pcp:10272kB free_cma:0kB [ 183.409918][ T9162] lowmem_reserve[]: 0 0 0 0 0 [ 183.415125][ T9162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.445078][ T9162] Node 0 DMA32: 1438*4kB (UME) 838*8kB (UM) 172*16kB (UME) 333*32kB (UME) 84*64kB (UM) 26*128kB (UME) 22*256kB (UME) 29*512kB (UME) 8*1024kB (UM) 7*2048kB (UME) 320*4096kB (UM) = 1388296kB [ 183.475636][ T9162] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 183.490388][ T9162] Node 1 Normal: 194*4kB (UE) 42*8kB (UME) 39*16kB (UME) 53*32kB (UME) 15*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (UM) = 3891240kB [ 183.509819][ T9162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.520168][ T9162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.530536][ T9162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.545507][ T9162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.556112][ T9162] 44361 total pagecache pages [ 183.565766][ T9162] 0 pages in swap cache [ 183.570381][ T9162] Free swap = 124996kB [ 183.578287][ T9162] Total swap = 124996kB [ 183.582647][ T9162] 2097051 pages RAM [ 183.587381][ T9162] 0 pages HighMem/MovableOnly [ 183.592487][ T9162] 425681 pages reserved [ 183.597398][ T9162] 0 pages cma reserved [ 183.624115][ T9192] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 183.717033][ T9185] __nla_validate_parse: 30 callbacks suppressed [ 183.717052][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 183.747445][ T9185] netlink: 'syz.4.771': attribute type 18 has an invalid length. [ 183.766049][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.794189][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.863231][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 183.992041][ T6252] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.992161][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 184.050786][ T6252] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.088047][ T6252] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.097296][ T9205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.775'. [ 184.143330][ T6252] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.170083][ T9185] netlink: 'syz.4.771': attribute type 18 has an invalid length. [ 184.183647][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 184.845199][ T9252] tipc: New replicast peer: 255.255.255.255 [ 184.877801][ T9252] tipc: Enabled bearer , priority 10 [ 184.926268][ T9260] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 186.017498][ T30] audit: type=1800 audit(1758615032.411:8): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.783" name="memory.events" dev="tmpfs" ino=990 res=0 errno=0 [ 186.571459][ T9307] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.790'. [ 187.345841][ T9351] tipc: Enabled bearer , priority 0 [ 187.783113][ T9351] syzkaller0: entered promiscuous mode [ 187.850255][ T9351] syzkaller0: entered allmulticast mode [ 187.986298][ T9381] netlink: 27 bytes leftover after parsing attributes in process `syz.5.802'. [ 187.987127][ T9351] tipc: Resetting bearer [ 188.857428][ T9350] tipc: Resetting bearer [ 190.217454][ T9485] netlink: 'syz.5.806': attribute type 1 has an invalid length. [ 190.239206][ T9485] netlink: 224 bytes leftover after parsing attributes in process `syz.5.806'. [ 191.890436][ T9350] tipc: Disabling bearer [ 191.905267][ T9489] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 192.017321][ T9486] netlink: 'syz.5.806': attribute type 1 has an invalid length. [ 192.026266][ T9486] netlink: 224 bytes leftover after parsing attributes in process `syz.5.806'. [ 192.176154][ T9503] netlink: 'syz.2.812': attribute type 21 has an invalid length. [ 192.276617][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 192.321831][ T9514] sctp: [Deprecated]: syz.4.814 (pid 9514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.321831][ T9514] Use struct sctp_sack_info instead [ 192.514518][ T9527] raw_sendmsg: syz.1.818 forgot to set AF_INET. Fix it! [ 192.760856][ T9546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.920533][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 192.956915][ T9569] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 1073741827, id = 0 [ 193.081068][ T9572] veth5: entered promiscuous mode [ 193.127046][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.136417][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.596818][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 193.710000][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 193.721371][ T9596] bridge_slave_1: left allmulticast mode [ 193.730222][ T9596] bridge_slave_1: left promiscuous mode [ 193.737791][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.764513][ T9596] bridge_slave_0: left allmulticast mode [ 193.777188][ T9599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'. [ 193.793995][ T9596] bridge_slave_0: left promiscuous mode [ 193.799957][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.101182][ T9615] netlink: 'syz.5.845': attribute type 1 has an invalid length. [ 194.110010][ T9615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.845'. [ 194.138174][ T9617] tipc: Failed to remove unknown binding: 66,1,1/0:2540959039/2540959041 [ 194.150180][ T9617] tipc: Failed to remove unknown binding: 66,1,1/0:2540959039/2540959041 [ 194.202254][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.845'. [ 194.205361][ T9623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.845'. [ 194.301212][ T9627] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 194.316983][ T9627] syzkaller0: entered promiscuous mode [ 194.322691][ T9627] syzkaller0: entered allmulticast mode [ 194.341977][ T9627] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 194.372688][ T30] audit: type=1804 audit(1758615040.761:9): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.850" name="/newroot/202/cgroup.controllers" dev="tmpfs" ino=1062 res=1 errno=0 [ 194.423132][ T30] audit: type=1800 audit(1758615040.791:10): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.850" name="cgroup.controllers" dev="tmpfs" ino=1062 res=0 errno=0 [ 194.502723][ T5925] IPVS: starting estimator thread 0... [ 194.529083][ T9641] bridge0: entered promiscuous mode [ 194.538474][ T9641] bridge0: left promiscuous mode [ 194.603815][ T9642] IPVS: using max 38 ests per chain, 91200 per kthread [ 194.607427][ T9646] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 194.768191][ T9655] sctp: [Deprecated]: syz.3.858 (pid 9655) Use of int in max_burst socket option deprecated. [ 194.768191][ T9655] Use struct sctp_assoc_value instead [ 195.209759][ T9668] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.222863][ T9668] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.305872][ T9668] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.340993][ T9668] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.492533][ T9668] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.502754][ T9668] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.707836][ T9680] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 195.799948][ T9668] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.814068][ T9668] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.967882][ T55] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.977433][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.072341][ T9453] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.116033][ T9453] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.162863][ T9453] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.175770][ T9453] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.194587][ T9700] nbd0: detected capacity change from 0 to 127 [ 196.207827][ T6258] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.220894][ T6258] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.229393][ T5864] block nbd0: Receive control failed (result -32) [ 197.312767][ T9732] __nla_validate_parse: 7 callbacks suppressed [ 197.312785][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 197.811371][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 198.110734][ T9761] tipc: Started in network mode [ 198.121310][ T9761] tipc: Node identity b25870cc82ef, cluster identity 4711 [ 198.135007][ T9761] tipc: Enabled bearer , priority 0 [ 198.149928][ T9761] syzkaller0: entered promiscuous mode [ 198.156577][ T9761] syzkaller0: entered allmulticast mode [ 198.164821][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.890'. [ 198.174125][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.890'. [ 198.221376][ T9761] tipc: Resetting bearer [ 198.395168][ T9771] batadv1: entered promiscuous mode [ 198.423470][ T9771] batadv1: entered allmulticast mode [ 198.622166][ T9760] tipc: Resetting bearer [ 198.718668][ T9760] tipc: Disabling bearer [ 198.720912][ T9800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.740241][ T9803] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 198.759250][ T9791] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 198.785867][ T9791] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 198.811720][ T9809] openvswitch: netlink: Message has 203 unknown bytes. [ 198.831485][ T9797] bridge_slave_0: left allmulticast mode [ 198.837357][ T9797] bridge_slave_0: left promiscuous mode [ 198.845904][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.854652][ T9810] openvswitch: netlink: Message has 203 unknown bytes. [ 198.885622][ T9797] bridge_slave_1: left allmulticast mode [ 198.910695][ T9797] bridge_slave_1: left promiscuous mode [ 198.920886][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.941547][ T9797] bond0: (slave bond_slave_0): Releasing backup interface [ 198.958426][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 198.974759][ T9797] bond0: (slave bond_slave_1): Releasing backup interface [ 199.009271][ T9797] team0: Port device team_slave_0 removed [ 199.027038][ T9797] team0: Port device team_slave_1 removed [ 199.033827][ T9797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.041237][ T9797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.050144][ T9797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.057676][ T9797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.067914][ T9797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.095672][ T9803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.140906][ T9816] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 199.266486][ T9829] tipc: Enabled bearer , priority 0 [ 199.285095][ T9829] syzkaller0: entered promiscuous mode [ 199.290695][ T9829] syzkaller0: entered allmulticast mode [ 199.402086][ T9839] syzkaller1: entered promiscuous mode [ 199.432150][ T9839] syzkaller1: entered allmulticast mode [ 199.496644][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'. [ 199.632834][ T9828] tipc: Resetting bearer [ 199.715030][ T9828] tipc: Disabling bearer [ 199.788018][ T9871] syz_tun: entered allmulticast mode [ 200.065415][ T9866] dvmrp8: entered allmulticast mode [ 200.411302][ T9857] syz_tun: left allmulticast mode [ 200.417557][ T9857] dvmrp8: left allmulticast mode [ 200.749425][ T9894] openvswitch: netlink: Message has 4 unknown bytes. [ 200.792706][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.922'. [ 200.842706][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 200.901643][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 200.987428][ T9907] af_packet: tpacket_rcv: packet too big, clamped from 100 to 4294967272. macoff=96 [ 201.025967][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'. [ 201.061515][ T9905] hsr_slave_0: left promiscuous mode [ 201.068499][ T9905] hsr_slave_1: left promiscuous mode [ 201.409381][ T9926] netlink: 'syz.5.930': attribute type 10 has an invalid length. [ 201.440875][ T9926] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.497165][ T9928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.002266][ T9944] syzkaller0: entered promiscuous mode [ 202.043873][ T9944] syzkaller0: entered allmulticast mode [ 202.060898][ T9947] 8021q: VLANs not supported on ip_vti0 [ 202.283375][ T9962] netlink: 'syz.3.942': attribute type 3 has an invalid length. [ 202.316357][ T9964] netlink: 'syz.1.943': attribute type 4 has an invalid length. [ 202.535010][ T9973] __nla_validate_parse: 5 callbacks suppressed [ 202.535026][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'. [ 202.564799][ T9970] tipc: Resetting bearer [ 202.748347][ T9986] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.948'. [ 202.765466][ T9986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.784905][ T9986] netlink: 71 bytes leftover after parsing attributes in process `syz.4.948'. [ 204.106517][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 204.190392][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 204.429859][T10020] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.962'. [ 204.535123][T10025] tun0: tun_chr_ioctl cmd 1074025675 [ 204.548210][T10025] tun0: persist enabled [ 204.586710][T10025] tun0: tun_chr_ioctl cmd 1074025675 [ 204.592036][T10025] tun0: persist enabled [ 204.829562][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 205.199808][T10036] macvtap0: entered promiscuous mode [ 205.205710][T10036] batadv0: entered promiscuous mode [ 205.216655][T10036] macvtap0: entered allmulticast mode [ 205.225722][T10036] batadv0: entered allmulticast mode [ 205.232763][T10036] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 205.669101][T10056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.972'. [ 205.673991][T10060] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 205.700445][T10056] ip_vti0: entered promiscuous mode [ 205.718592][T10056] ip_vti0: entered allmulticast mode [ 205.877161][T10064] atm:sigd_send: bad message type 36 [ 205.969503][T10069] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.025281][T10069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.975'. [ 206.364130][T10090] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.979'. [ 206.679228][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.685476][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 206.992353][T10125] vlan3: entered promiscuous mode [ 206.999051][T10125] macvtap0: entered promiscuous mode [ 207.106874][T10128] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 207.149228][T10128] gretap1: entered allmulticast mode [ 207.160958][T10128] bond3: (slave gretap1): making interface the new active one [ 207.170723][T10128] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 207.195207][T10130] tipc: Enabled bearer , priority 0 [ 207.204647][T10130] syzkaller0: entered promiscuous mode [ 207.210168][T10130] syzkaller0: entered allmulticast mode [ 207.281217][T10129] tipc: Resetting bearer [ 207.296632][T10129] tipc: Disabling bearer [ 207.309760][ T6234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.311112][T10133] tipc: Enabled bearer , priority 0 [ 207.319590][ T6234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.335960][T10133] syzkaller0: entered promiscuous mode [ 207.341458][ T30] audit: type=1800 audit(1758615053.731:11): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.988" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1075 res=0 errno=0 [ 207.364592][T10133] syzkaller0: entered allmulticast mode [ 207.568591][T10142] tipc: Resetting bearer [ 207.600287][T10132] tipc: Resetting bearer [ 207.614641][T10156] netlink: 'syz.3.993': attribute type 21 has an invalid length. [ 207.676454][T10162] netlink: 'syz.5.995': attribute type 27 has an invalid length. [ 207.679642][T10132] tipc: Disabling bearer [ 207.886265][T10170] __nla_validate_parse: 2 callbacks suppressed [ 207.886281][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.996'. [ 208.488875][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 208.845492][T10215] dvmrp8: entered allmulticast mode [ 208.944514][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 208.959642][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 208.989020][T10219] Bluetooth: MGMT ver 1.23 [ 208.995231][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1007'. [ 209.228568][T10214] dvmrp8: left allmulticast mode [ 209.325360][T10229] tipc: Enabling of bearer rejected, already enabled [ 209.340497][T10229] syzkaller0: mtu greater than device maximum [ 209.485733][T10236] sctp: [Deprecated]: syz.2.1014 (pid 10236) Use of int in max_burst socket option deprecated. [ 209.485733][T10236] Use struct sctp_assoc_value instead [ 209.508852][T10234] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1011'. [ 209.819909][T10252] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 210.250333][T10276] tipc: Enabled bearer , priority 0 [ 210.383019][T10267] syzkaller0: entered promiscuous mode [ 210.388890][T10267] syzkaller0: entered allmulticast mode [ 210.395889][T10267] tipc: Resetting bearer [ 210.850141][T10266] tipc: Resetting bearer [ 210.957731][T10297] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1025'. [ 212.316814][T10266] tipc: Disabling bearer [ 212.326247][T10297] ..0·: renamed from hsr0 (while UP) [ 212.334518][T10297] ..0·: entered allmulticast mode [ 212.339770][T10297] hsr_slave_0: entered allmulticast mode [ 212.345702][T10297] hsr_slave_1: entered allmulticast mode [ 212.351743][T10297] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 212.482633][T10302] bridge0: port 3(macsec0) entered disabled state [ 212.489334][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.497077][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.589472][T10302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.605884][T10302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.638440][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1027'. [ 212.677714][T10302] veth1_macvtap: left allmulticast mode [ 212.793276][ T6234] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.802095][ T6234] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.819936][T10327] netlink: 'syz.2.1030': attribute type 33 has an invalid length. [ 212.828090][T10327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1030'. [ 212.845809][ T6234] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.855053][ T6234] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.870482][ T6234] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.880789][ T6234] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.907185][ T6234] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.920051][ T6234] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.074651][T10338] vlan3: entered promiscuous mode [ 213.078780][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1034'. [ 213.088052][T10338] erspan0: entered promiscuous mode [ 213.444394][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'. [ 213.459328][T10366] bond_slave_0: entered allmulticast mode [ 213.520156][T10366] bond_slave_0: left allmulticast mode [ 213.751242][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.801985][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.814371][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.824078][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.833338][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.843305][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.853095][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.863220][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 213.921204][T10401] pim6reg: entered allmulticast mode [ 213.962729][T10399] pim6reg: left allmulticast mode [ 214.007645][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a447400: rx timeout, send abort [ 214.017372][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804a446c00: rx timeout, send abort [ 214.026179][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a447400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 214.041659][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804a446c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 214.250200][ T30] audit: type=1107 audit(1758615060.641:12): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 214.870826][T10449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.254314][T10451] geneve2: entered promiscuous mode [ 215.760528][T10485] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 216.834985][T10528] sctp: [Deprecated]: syz.4.1083 (pid 10528) Use of int in maxseg socket option. [ 216.834985][T10528] Use struct sctp_assoc_value instead [ 217.791598][T10570] netlink: 'syz.5.1096': attribute type 4 has an invalid length. [ 218.228045][T10602] dvmrp1: entered allmulticast mode [ 218.322030][T10605] dvmrp1: left allmulticast mode [ 218.877639][T10620] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 218.957453][T10623] __nla_validate_parse: 93 callbacks suppressed [ 218.957469][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1108'. [ 219.142759][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 219.251870][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 219.273756][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 219.528798][T10657] netlink: 'syz.4.1119': attribute type 6 has an invalid length. [ 219.558232][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 219.640897][T10662] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1122'. [ 219.832320][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 219.898282][T10679] syzkaller0: entered promiscuous mode [ 219.910653][T10679] syzkaller0: entered allmulticast mode [ 220.018266][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 220.122770][T10696] netlink: 'syz.2.1131': attribute type 13 has an invalid length. [ 220.193870][ T5873] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 220.269330][T10700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.369320][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 220.684446][T10727] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1138'. [ 221.375298][T10755] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 221.608297][T10771] geneve2: entered promiscuous mode [ 221.617192][T10771] geneve2: entered allmulticast mode [ 221.624695][ T9470] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 48903 - 0 [ 221.648883][ T9470] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 48903 - 0 [ 221.664877][ T9470] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 48903 - 0 [ 221.677289][ T9470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 48903 - 0 [ 221.729004][T10774] bridge: RTM_NEWNEIGH with invalid ether address [ 221.845488][T10784] vxcan3: entered allmulticast mode [ 221.859202][T10787] netlink: 'syz.2.1159': attribute type 15 has an invalid length. [ 222.178936][T10787] netlink: 'syz.2.1159': attribute type 15 has an invalid length. [ 222.190468][T10782] tipc: Enabled bearer , priority 0 [ 222.204102][T10794] syzkaller0: entered promiscuous mode [ 222.210055][T10794] syzkaller0: entered allmulticast mode [ 222.223902][ T6252] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.249247][ T6252] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.271874][ T6252] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.281773][ T5864] Bluetooth: hci3: command 0x0405 tx timeout [ 222.327591][T10777] tipc: Resetting bearer [ 222.370296][T10777] tipc: Disabling bearer [ 222.391731][ T6252] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.447607][T10802] ip6gre1: entered allmulticast mode [ 223.419293][T10869] netlink: 'syz.5.1178': attribute type 1 has an invalid length. [ 223.523944][T10871] bond2: (slave bridge1): making interface the new active one [ 223.532760][T10871] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 223.581402][T10873] dvmrp8: entered allmulticast mode [ 223.792649][T10880] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 224.028569][T10879] dvmrp8: left allmulticast mode [ 224.040499][T10899] __nla_validate_parse: 9 callbacks suppressed [ 224.040517][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'. [ 224.088194][T10901] tipc: Enabling of bearer rejected, already enabled [ 224.122605][T10901] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1185'. [ 224.373206][T10918] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 48903 - 0 [ 224.407203][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 224.419884][T10927] netlink: 'syz.3.1191': attribute type 5 has an invalid length. [ 224.427877][T10927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1191'. [ 224.451595][T10927] geneve3: entered promiscuous mode [ 224.457959][T10927] geneve3: entered allmulticast mode [ 224.484596][T10918] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 48903 - 0 [ 224.536313][ T9470] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 224.537984][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 224.549712][ T9470] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 224.820475][T10945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.970900][T10961] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 224.991291][T10962] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 225.147910][T10967] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1200'. [ 225.848302][T10991] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1209'. [ 225.866847][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1208'. [ 225.901334][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1208'. [ 226.025730][T10996] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1208'. [ 226.048339][T10918] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 48903 - 0 [ 226.083878][T10918] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 226.153706][T11001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.186880][T10918] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 48903 - 0 [ 226.197174][T10918] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 226.325373][ T6258] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 226.339570][ T6258] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 48903 - 0 [ 226.382535][T11012] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 226.414057][ T6258] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 226.441838][ T6258] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 48903 - 0 [ 226.493348][ T6252] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 226.502951][ T6252] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 48903 - 0 [ 226.525559][ T9470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 226.534759][ T9470] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 48903 - 0 [ 226.581782][T11019] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 226.760862][T11033] netlink: 'syz.4.1219': attribute type 2 has an invalid length. [ 226.815491][ T9] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 226.826285][T11038] delete_channel: no stack [ 226.854267][ T9] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 227.119177][T11050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.133148][T11050] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.175903][T11050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.589617][T11088] netlink: 'syz.3.1235': attribute type 3 has an invalid length. [ 227.645322][T11092] sctp: [Deprecated]: syz.4.1236 (pid 11092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.645322][T11092] Use struct sctp_sack_info instead [ 227.838118][T11103] netlink: 'syz.1.1241': attribute type 3 has an invalid length. [ 227.981956][T11113] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 228.716061][T11145] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 229.250638][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063f40400: rx timeout, send abort [ 229.259250][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888063f40400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.486205][T11175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.819457][T11194] __nla_validate_parse: 46 callbacks suppressed [ 229.819474][T11194] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1259'. [ 229.853001][T11192] tipc: Enabled bearer , priority 0 [ 229.885069][T11190] tipc: Disabling bearer [ 229.897058][T11197] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 229.906805][T11197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1263'. [ 230.127522][T11212] ipvlan1: entered promiscuous mode [ 230.146165][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 230.205399][T11212] ipvlan1 (unregistering): left promiscuous mode [ 230.207526][T11216] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 230.219945][T11216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1269'. [ 230.253755][T11214] syzkaller1: entered promiscuous mode [ 230.266337][T11214] syzkaller1: entered allmulticast mode [ 230.287429][T11216] geneve0: entered promiscuous mode [ 230.308148][T11216] team0: Port device geneve0 added [ 230.340223][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.364297][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.373738][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.420341][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.448935][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.475525][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.505382][T11219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.562381][ T9461] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.646095][ T9461] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.664045][ T9461] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.699446][ T9461] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.797152][T11232] syzkaller0: left promiscuous mode [ 230.802578][T11232] syzkaller0: left allmulticast mode [ 230.999408][T11239] veth9: entered promiscuous mode [ 231.249204][T11252] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 231.316773][T11258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.936521][T11307] sock: sock_timestamping_bind_phc: sock not bind to device [ 232.105962][T11310] block nbd1: server does not support multiple connections per device. [ 232.116028][T11310] block nbd1: shutting down sockets [ 232.158275][T11312] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 232.494528][T11330] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 232.944654][T11342] netlink: 'syz.3.1303': attribute type 30 has an invalid length. [ 233.026143][ T9461] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.060783][ T9461] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.072458][ T9461] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.084163][ T9461] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.738632][T11373] netlink: 'syz.3.1310': attribute type 13 has an invalid length. [ 233.748687][T11373] xfrm0: entered promiscuous mode [ 233.754211][T11373] xfrm0: entered allmulticast mode [ 234.019244][T11377] syz_tun: entered allmulticast mode [ 234.040420][T11377] dvmrp8: entered allmulticast mode [ 234.584699][T11389] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 234.835593][T11376] syz_tun: left allmulticast mode [ 234.841758][T11376] dvmrp8: left allmulticast mode [ 235.027908][T11186] Set syz1 is full, maxelem 65536 reached [ 235.386622][T11436] netlink: 'syz.5.1323': attribute type 1 has an invalid length. [ 235.459616][T11436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.668174][T11455] __nla_validate_parse: 39 callbacks suppressed [ 235.668194][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.686106][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.696497][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.706367][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.716498][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.727694][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.739675][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.749351][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.759022][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 235.768719][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 236.078054][T11455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.670814][T11493] 0ªX¹¦À: renamed from caif0 [ 236.693664][T11493] 0ªX¹¦À: entered allmulticast mode [ 236.704210][T11493] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 236.943778][T11511] ip6tnl2: entered promiscuous mode [ 236.949135][T11511] ip6tnl2: entered allmulticast mode [ 236.974616][T11511] team0: Device ip6tnl2 is of different type [ 237.051757][T11508] lo: entered allmulticast mode [ 237.064709][T11508] tunl0: entered allmulticast mode [ 237.102169][T11508] gre0: entered allmulticast mode [ 237.118646][T11508] gretap0: entered allmulticast mode [ 237.126826][T11508] erspan0: entered allmulticast mode [ 237.132895][T11508] ip_vti0: entered allmulticast mode [ 237.172430][T11508] ip6_vti0: entered allmulticast mode [ 237.205671][T11508] sit0: entered allmulticast mode [ 237.214573][T11508] ip6tnl0: entered allmulticast mode [ 237.230263][T11508] ip6gre0: entered allmulticast mode [ 237.257337][T11508] syz_tun: entered allmulticast mode [ 237.258714][T11528] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 237.265404][T11508] bridge0: entered allmulticast mode [ 237.277866][T11538] netlink: 'syz.5.1345': attribute type 13 has an invalid length. [ 237.288077][T11508] bond0: entered allmulticast mode [ 237.294367][T11508] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 237.301654][T11538] netlink: 'syz.5.1345': attribute type 17 has an invalid length. [ 237.311284][T11508] team0: entered allmulticast mode [ 237.318653][T11508] dummy0: entered allmulticast mode [ 237.325103][T11508] nlmon0: entered allmulticast mode [ 237.338704][T11508] caif0: entered allmulticast mode [ 237.344517][T11508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.373181][T11528] team0: Device dummy0 is up. Set it down before adding it as a team port [ 237.418802][T11544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.469878][T11538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.484465][T11544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.525845][T11545] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 237.531557][T11546] netlink: 'syz.1.1347': attribute type 3 has an invalid length. [ 237.571263][T11545] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.662147][T11545] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.747743][ T30] audit: type=1107 audit(1758615084.141:13): pid=11549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 237.769030][T11545] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.846445][T11550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.858270][T11550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.881738][T11545] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.939848][T11550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.952973][T11550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.021818][ T6234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.062499][T11550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.073179][T11550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.105940][ T9470] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.126224][T11552] IPVS: Scheduler module ip_vs_sip not found [ 238.137642][ T55] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.200583][T11550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.217710][T11550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.242884][ T6234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.254061][T11558] tipc: Enabling of bearer rejected, already enabled [ 238.272842][T11558] syzkaller0: entered promiscuous mode [ 238.280049][T11558] syzkaller0: entered allmulticast mode [ 238.291638][T11558] netlink: 'syz.3.1351': attribute type 13 has an invalid length. [ 238.347349][ T6258] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.357205][ T6258] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.381081][ T6258] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.389823][ T6258] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.418591][ T6234] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.427716][ T6234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.452024][ T55] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.466182][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.707675][T11579] tipc: Enabled bearer , priority 10 [ 238.742114][T11584] netlink: 'syz.3.1358': attribute type 11 has an invalid length. [ 239.507518][T11613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.890671][T11632] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 240.166538][T11660] pim6reg1: entered promiscuous mode [ 240.204859][T11660] pim6reg1: entered allmulticast mode [ 240.530577][T11680] tipc: Enabled bearer , priority 0 [ 240.549677][T11680] syzkaller0: entered promiscuous mode [ 240.567209][T11680] syzkaller0: entered allmulticast mode [ 240.614881][T11680] tipc: Resetting bearer [ 240.666304][T11679] tipc: Resetting bearer [ 240.714516][T11679] tipc: Disabling bearer [ 240.842818][T11694] wg1 speed is unknown, defaulting to 1000 [ 240.874397][T11694] wg1 speed is unknown, defaulting to 1000 [ 240.895868][T11694] wg1 speed is unknown, defaulting to 1000 [ 240.948310][T11694] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.116644][T11707] __nla_validate_parse: 36 callbacks suppressed [ 241.116662][T11707] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1386'. [ 241.134425][T11694] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 241.168678][T11707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.258655][T11713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'. [ 241.334108][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 241.372649][T11694] wg1 speed is unknown, defaulting to 1000 [ 241.386644][T11717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1389'. [ 241.405015][T11694] wg1 speed is unknown, defaulting to 1000 [ 241.424512][T11694] wg1 speed is unknown, defaulting to 1000 [ 241.470305][T11694] wg1 speed is unknown, defaulting to 1000 [ 241.485416][T11694] wg1 speed is unknown, defaulting to 1000 [ 241.990400][T11747] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 242.119357][T11759] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 242.327383][T11770] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 243.360760][T11747] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 243.393034][T11758] bridge3: entered promiscuous mode [ 243.411009][T11758] bridge3: entered allmulticast mode [ 243.566086][T11779] openvswitch: netlink: Flow key attr not present in new flow. [ 243.621238][T11779] 8021q: VLANs not supported on xfrm0 [ 243.683240][T11784] wg1 speed is unknown, defaulting to 1000 [ 243.879303][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 243.907567][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 243.935746][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 243.947763][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 243.961347][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 243.971671][T11807] ip_vti0: left promiscuous mode [ 243.976987][T11807] ip_vti0: left allmulticast mode [ 243.983365][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 244.099733][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.114629][T11807] 0ªX¹¦À: left allmulticast mode [ 244.119599][T11807] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 244.305681][T11828] netlink: 'syz.4.1413': attribute type 18 has an invalid length. [ 244.650853][T11844] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 244.682360][T11849] tipc: Enabled bearer , priority 0 [ 244.710124][T11849] syzkaller0: entered promiscuous mode [ 244.723353][T11849] syzkaller0: entered allmulticast mode [ 244.940002][T11873] netlink: 'syz.1.1423': attribute type 4 has an invalid length. [ 244.975676][T11871] tipc: Resetting bearer [ 245.151885][T11843] tipc: Resetting bearer [ 245.190372][T11843] tipc: Disabling bearer [ 245.861382][T11907] wg1 speed is unknown, defaulting to 1000 [ 246.287022][T11918] netlink: 'syz.1.1432': attribute type 3 has an invalid length. [ 246.304909][T11918] __nla_validate_parse: 15 callbacks suppressed [ 246.304934][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1432'. [ 246.356850][ T9453] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.394820][T11279] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.402895][ T9453] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.545030][T11933] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1437'. [ 246.721899][T11935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1436'. [ 246.993766][T11279] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.013005][T11279] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.022139][T11937] wg1 speed is unknown, defaulting to 1000 [ 247.183167][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 247.739003][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 248.706017][T11816] Set syz1 is full, maxelem 65536 reached [ 248.739188][T12001] bridge0: port 1(wlan0) entered blocking state [ 248.747219][T12001] bridge0: port 1(wlan0) entered disabled state [ 248.754530][T12001] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 248.810787][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 248.987570][T12012] wg1 speed is unknown, defaulting to 1000 [ 248.990473][T12015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.018768][T12014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1460'. [ 249.079155][T12014] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.168188][T12014] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.232221][T12014] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.312807][T12014] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.332862][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'. [ 249.345477][T12029] bridge_slave_1: left allmulticast mode [ 249.352304][T12029] bridge_slave_1: left promiscuous mode [ 249.366662][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.382486][T12029] bridge_slave_0: left allmulticast mode [ 249.398763][T12029] bridge_slave_0: left promiscuous mode [ 249.415106][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.548458][ T9470] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.583338][ T9470] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.638231][ T9470] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.650187][T12012] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1461'. [ 249.670156][T12012] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1461'. [ 249.670351][ T9470] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.743219][T12043] netlink: 'syz.3.1467': attribute type 5 has an invalid length. [ 250.526166][T12069] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 250.833634][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.878729][T12088] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 250.966410][T12088] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 250.981851][T12092] netlink: 'syz.2.1481': attribute type 7 has an invalid length. [ 251.048665][T12099] macsec1: entered promiscuous mode [ 251.057762][T12099] macsec1: entered allmulticast mode [ 251.071033][T12099] !: entered allmulticast mode [ 251.091142][T12099] !: left allmulticast mode [ 251.229941][T12101] rdma_rxe: rxe_newlink: failed to add lo [ 251.448423][ T30] audit: type=1800 audit(1758615097.841:14): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="rcK" name="ls" dev="sda1" ino=63 res=0 errno=0 [ 251.479188][T12120] __nla_validate_parse: 10 callbacks suppressed [ 251.479206][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1486'. Unknown signal 33 [ 251.552779][T12115] netlink: 12844 bytes leftover after parsing attributes in process `syz.1.1488'. [ 251.820261][T12134] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1491'. [ 251.909401][T12141] tipc: Enabling of bearer rejected, failed to enable media [ 251.987742][T12144] wg1 speed is unknown, defaulting to 1000 umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 252.206552][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. umount: proc busy - remounted read-only [ 252.600180][T12188] openvswitch: netlink: Message has -2 unknown bytes. [ 252.795908][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 253.238253][T12193] wg1 speed is unknown, defaulting to 1000 [ 253.433850][T12210] wg1 speed is unknown, defaulting to 1000 [ 253.753877][T12231] netlink: 'syz.5.1514': attribute type 10 has an invalid length. [ 253.885713][T12231] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.930931][T12231] bond0: (slave team0): Enslaving as an active interface with an up link [ 253.997403][T12237] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1516'. [ 254.051202][T12239] tipc: Cannot configure node identity twice [ 254.080667][T12240] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1516'. [ 254.703222][T12257] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1521'. [ 254.748439][T12257] batadv2: entered promiscuous mode [ 254.763476][T12257] batadv2: entered allmulticast mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 255.024987][T12265] wg1 speed is unknown, defaulting to 1000 Connection to 10.128.1.53 closed by remote host. acpid: exiting [ 255.893730][T11042] ================================================================== [ 255.901838][T11042] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 255.909395][T11042] Read of size 8 at addr ffff88807d4a80a0 by task khidpd_00070008/11042 [ 255.917720][T11042] [ 255.920035][T11042] CPU: 0 UID: 0 PID: 11042 Comm: khidpd_00070008 Not tainted syzkaller #0 PREEMPT(full) [ 255.920049][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.920056][T11042] Call Trace: [ 255.920061][T11042] [ 255.920067][T11042] dump_stack_lvl+0x189/0x250 [ 255.920083][T11042] ? __kasan_check_byte+0x12/0x40 [ 255.920098][T11042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.920108][T11042] ? lock_release+0x4b/0x3e0 [ 255.920124][T11042] ? __virt_addr_valid+0x4a5/0x5c0 [ 255.920137][T11042] print_report+0xca/0x240 [ 255.920146][T11042] ? __mutex_lock+0x801/0x1350 [ 255.920156][T11042] kasan_report+0x118/0x150 [ 255.920170][T11042] ? __mutex_lock+0x801/0x1350 [ 255.920181][T11042] __mutex_lock+0x801/0x1350 [ 255.920192][T11042] ? __mutex_lock+0x5bb/0x1350 [ 255.920203][T11042] ? l2cap_unregister_user+0x6a/0x1b0 [ 255.920215][T11042] ? __pfx___mutex_lock+0x10/0x10 [ 255.920225][T11042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 255.920244][T11042] l2cap_unregister_user+0x6a/0x1b0 [ 255.920255][T11042] hidp_session_thread+0x3c9/0x410 [ 255.920267][T11042] ? __pfx_hidp_session_thread+0x10/0x10 [ 255.920277][T11042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 255.920291][T11042] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 255.920304][T11042] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 255.920314][T11042] ? __kthread_parkme+0x7b/0x200 [ 255.920324][T11042] ? __kthread_parkme+0x1a1/0x200 [ 255.920335][T11042] kthread+0x70e/0x8a0 [ 255.920347][T11042] ? __pfx_hidp_session_thread+0x10/0x10 [ 255.920357][T11042] ? __pfx_kthread+0x10/0x10 [ 255.920368][T11042] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.920382][T11042] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.920392][T11042] ? __pfx_kthread+0x10/0x10 [ 255.920403][T11042] ret_from_fork+0x439/0x7d0 [ 255.920414][T11042] ? __pfx_ret_from_fork+0x10/0x10 [ 255.920424][T11042] ? __switch_to_asm+0x39/0x70 [ 255.920436][T11042] ? __switch_to_asm+0x33/0x70 [ 255.920447][T11042] ? __pfx_kthread+0x10/0x10 [ 255.920458][T11042] ret_from_fork_asm+0x1a/0x30 [ 255.920474][T11042] [ 255.920478][T11042] [ 256.121377][T11042] Allocated by task 8766: [ 256.125685][T11042] kasan_save_track+0x3e/0x80 [ 256.130352][T11042] __kasan_kmalloc+0x93/0xb0 [ 256.134922][T11042] __kmalloc_noprof+0x27a/0x4f0 [ 256.139752][T11042] hci_alloc_dev_priv+0x28/0x2060 [ 256.144757][T11042] vhci_create_device+0x120/0x650 [ 256.149761][T11042] vhci_write+0x3ce/0x4a0 [ 256.154072][T11042] vfs_write+0x5c9/0xb30 [ 256.158294][T11042] ksys_write+0x145/0x250 [ 256.162606][T11042] do_syscall_64+0xfa/0x3b0 [ 256.167089][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.172960][T11042] [ 256.175261][T11042] Freed by task 8766: [ 256.179216][T11042] kasan_save_track+0x3e/0x80 [ 256.183872][T11042] kasan_save_free_info+0x46/0x50 [ 256.188883][T11042] __kasan_slab_free+0x5b/0x80 [ 256.193632][T11042] kfree+0x18e/0x440 [ 256.197511][T11042] bt_host_release+0x82/0x90 [ 256.202078][T11042] device_release+0x9c/0x1c0 [ 256.206656][T11042] kobject_put+0x22b/0x480 [ 256.211057][T11042] vhci_release+0x15a/0x1a0 [ 256.215544][T11042] __fput+0x44c/0xa70 [ 256.219508][T11042] task_work_run+0x1d1/0x260 [ 256.224083][T11042] do_exit+0x6b5/0x2300 [ 256.228230][T11042] do_group_exit+0x21c/0x2d0 [ 256.232819][T11042] get_signal+0x1286/0x1340 [ 256.237300][T11042] arch_do_signal_or_restart+0x9a/0x750 [ 256.242916][T11042] exit_to_user_mode_loop+0x75/0x110 [ 256.248186][T11042] do_syscall_64+0x2bd/0x3b0 [ 256.252795][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.258668][T11042] [ 256.260973][T11042] Last potentially related work creation: [ 256.266664][T11042] kasan_save_stack+0x3e/0x60 [ 256.271325][T11042] kasan_record_aux_stack+0xbd/0xd0 [ 256.276503][T11042] insert_work+0x3d/0x330 [ 256.280818][T11042] __queue_work+0xcd2/0xfb0 [ 256.285304][T11042] queue_work_on+0x181/0x270 [ 256.289878][T11042] l2cap_chan_send+0x1110/0x2790 [ 256.294804][T11042] l2cap_sock_sendmsg+0x32e/0x4a0 [ 256.299841][T11042] __sock_sendmsg+0x21c/0x270 [ 256.304501][T11042] ____sys_sendmsg+0x52d/0x830 [ 256.309251][T11042] ___sys_sendmsg+0x21f/0x2a0 [ 256.313911][T11042] __sys_sendmmsg+0x227/0x430 [ 256.318596][T11042] __x64_sys_sendmmsg+0xa0/0xc0 [ 256.323431][T11042] do_syscall_64+0xfa/0x3b0 [ 256.327924][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.333888][T11042] [ 256.336195][T11042] Second to last potentially related work creation: [ 256.342755][T11042] kasan_save_stack+0x3e/0x60 [ 256.347419][T11042] kasan_record_aux_stack+0xbd/0xd0 [ 256.352609][T11042] insert_work+0x3d/0x330 [ 256.356925][T11042] __queue_work+0xbaf/0xfb0 [ 256.361443][T11042] queue_work_on+0x181/0x270 [ 256.366018][T11042] hci_cmd_sync_submit+0x285/0x2b0 [ 256.371112][T11042] mgmt_remove_adv_monitor_complete+0x257/0x600 [ 256.377339][T11042] hci_cmd_sync_work+0x261/0x3a0 [ 256.382258][T11042] process_scheduled_works+0xae1/0x17b0 [ 256.387788][T11042] worker_thread+0x8a0/0xda0 [ 256.392363][T11042] kthread+0x70e/0x8a0 [ 256.396422][T11042] ret_from_fork+0x439/0x7d0 [ 256.400993][T11042] ret_from_fork_asm+0x1a/0x30 [ 256.405781][T11042] [ 256.408085][T11042] The buggy address belongs to the object at ffff88807d4a8000 [ 256.408085][T11042] which belongs to the cache kmalloc-8k of size 8192 [ 256.422118][T11042] The buggy address is located 160 bytes inside of [ 256.422118][T11042] freed 8192-byte region [ffff88807d4a8000, ffff88807d4aa000) [ 256.435985][T11042] [ 256.438293][T11042] The buggy address belongs to the physical page: [ 256.444682][T11042] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d4a8 [ 256.453442][T11042] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 256.461927][T11042] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 256.469452][T11042] page_type: f5(slab) [ 256.473418][T11042] raw: 00fff00000000040 ffff88801a442280 ffffea0001c64400 dead000000000002 [ 256.481992][T11042] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 256.490559][T11042] head: 00fff00000000040 ffff88801a442280 ffffea0001c64400 dead000000000002 [ 256.499209][T11042] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 256.507862][T11042] head: 00fff00000000003 ffffea0001f52a01 00000000ffffffff 00000000ffffffff [ 256.516516][T11042] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 256.525162][T11042] page dumped because: kasan: bad access detected [ 256.531561][T11042] page_owner tracks the page as allocated [ 256.537253][T11042] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/0:0), ts 125618148190, free_ts 125206562756 [ 256.557634][T11042] post_alloc_hook+0x240/0x2a0 [ 256.562391][T11042] get_page_from_freelist+0x21e4/0x22c0 [ 256.567920][T11042] __alloc_frozen_pages_noprof+0x181/0x370 [ 256.573709][T11042] alloc_pages_mpol+0x232/0x4a0 [ 256.578541][T11042] allocate_slab+0x8a/0x370 [ 256.583029][T11042] ___slab_alloc+0xbeb/0x1420 [ 256.587687][T11042] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 256.594083][T11042] kmalloc_reserve+0x136/0x290 [ 256.598829][T11042] pskb_expand_head+0x18e/0x1150 [ 256.603754][T11042] __pskb_pull_tail+0x10a/0x15b0 [ 256.608676][T11042] skb_cow_data+0x2ec/0xc50 [ 256.613158][T11042] wg_packet_decrypt_worker+0x4d5/0xd10 [ 256.618683][T11042] process_scheduled_works+0xae1/0x17b0 [ 256.624205][T11042] worker_thread+0x8a0/0xda0 [ 256.628776][T11042] kthread+0x70e/0x8a0 [ 256.632827][T11042] ret_from_fork+0x439/0x7d0 [ 256.637400][T11042] page last free pid 5232 tgid 5232 stack trace: [ 256.643703][T11042] __free_frozen_pages+0xbc4/0xd30 [ 256.648803][T11042] __put_partials+0x156/0x1a0 [ 256.653458][T11042] put_cpu_partial+0x17c/0x250 [ 256.658201][T11042] __slab_free+0x2d5/0x3c0 [ 256.662593][T11042] qlist_free_all+0x97/0x140 [ 256.667165][T11042] kasan_quarantine_reduce+0x148/0x160 [ 256.672607][T11042] __kasan_slab_alloc+0x22/0x80 [ 256.677448][T11042] __kmalloc_noprof+0x224/0x4f0 [ 256.682282][T11042] tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.687805][T11042] tomoyo_path_perm+0x213/0x4b0 [ 256.692646][T11042] security_inode_getattr+0x12f/0x330 [ 256.698000][T11042] __x64_sys_newfstat+0xfc/0x200 [ 256.702918][T11042] do_syscall_64+0xfa/0x3b0 [ 256.707403][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.713275][T11042] [ 256.715580][T11042] Memory state around the buggy address: [ 256.721190][T11042] ffff88807d4a7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 256.729231][T11042] ffff88807d4a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.737267][T11042] >ffff88807d4a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.745305][T11042] ^ [ 256.750393][T11042] ffff88807d4a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.758431][T11042] ffff88807d4a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.766481][T11042] ================================================================== [ 256.776149][T11042] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.783375][T11042] CPU: 0 UID: 0 PID: 11042 Comm: khidpd_00070008 Not tainted syzkaller #0 PREEMPT(full) [ 256.793186][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.803244][T11042] Call Trace: [ 256.806530][T11042] [ 256.809447][T11042] dump_stack_lvl+0x99/0x250 [ 256.814026][T11042] ? __asan_memcpy+0x40/0x70 [ 256.818613][T11042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.823795][T11042] ? __pfx__printk+0x10/0x10 [ 256.828377][T11042] vpanic+0x281/0x750 [ 256.832340][T11042] ? __pfx_vpanic+0x10/0x10 [ 256.836824][T11042] ? irqentry_exit+0x74/0x90 [ 256.841402][T11042] panic+0xb9/0xc0 [ 256.845105][T11042] ? __pfx_panic+0x10/0x10 [ 256.849505][T11042] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 256.855384][T11042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.861268][T11042] ? __mutex_lock+0x801/0x1350 [ 256.866013][T11042] check_panic_on_warn+0x89/0xb0 [ 256.870937][T11042] ? __mutex_lock+0x801/0x1350 [ 256.875686][T11042] end_report+0x78/0x160 [ 256.879927][T11042] kasan_report+0x129/0x150 [ 256.884415][T11042] ? __mutex_lock+0x801/0x1350 [ 256.889168][T11042] __mutex_lock+0x801/0x1350 [ 256.893745][T11042] ? __mutex_lock+0x5bb/0x1350 [ 256.898491][T11042] ? l2cap_unregister_user+0x6a/0x1b0 [ 256.903846][T11042] ? __pfx___mutex_lock+0x10/0x10 [ 256.908854][T11042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.914739][T11042] l2cap_unregister_user+0x6a/0x1b0 [ 256.919924][T11042] hidp_session_thread+0x3c9/0x410 [ 256.925018][T11042] ? __pfx_hidp_session_thread+0x10/0x10 [ 256.930634][T11042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.936517][T11042] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 256.942742][T11042] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 256.948964][T11042] ? __kthread_parkme+0x7b/0x200 [ 256.953885][T11042] ? __kthread_parkme+0x1a1/0x200 [ 256.958891][T11042] kthread+0x70e/0x8a0 [ 256.962944][T11042] ? __pfx_hidp_session_thread+0x10/0x10 [ 256.968563][T11042] ? __pfx_kthread+0x10/0x10 [ 256.973141][T11042] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.978323][T11042] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.983503][T11042] ? __pfx_kthread+0x10/0x10 [ 256.988091][T11042] ret_from_fork+0x439/0x7d0 [ 256.992663][T11042] ? __pfx_ret_from_fork+0x10/0x10 [ 256.997756][T11042] ? __switch_to_asm+0x39/0x70 [ 257.002503][T11042] ? __switch_to_asm+0x33/0x70 [ 257.007249][T11042] ? __pfx_kthread+0x10/0x10 [ 257.011827][T11042] ret_from_fork_asm+0x1a/0x30 [ 257.016583][T11042] [ 257.019731][T11042] Kernel Offset: disabled [ 257.024034][T11042] Rebooting in 86400 seconds..