last executing test programs: 3.173910979s ago: executing program 0 (id=1721): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x2, 0x3ff, "09650bced381"}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf2520010000000000000000000000000001ac141439000000000000000000000000000000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000090900030073797a3100000000000000000000000000000000000000f488a8161b4ff44dac14c6b9c17609a66011d8514c27010cb8e5f0b4cdf9e4565dfb0043af9e11ffd5fd419fdfd996e95bf3cacf81ba38a9c4239680a5e2c96da4c3ba589e562b045a501115b99491d43ae6538bcaadf42192"], 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x40) 3.050836908s ago: executing program 0 (id=1724): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="18000000010005", 0x7) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001af8bf67233eb2288b176a86d092fa6a8617aa854998e1f5c44c3f4417b1362970e0a1fbdbe1327eb960a3b12268a9c356bf27ab60f4dc6f021d948ae9a233e1fe3f5e224f61bf01514ad0b7084f81b75b0596dd311d469472570cf514a981b136abc2e77a80e65c1534cd9d5913f8534882e8c99358efccda1a279b730277032638248ed"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.123639031s ago: executing program 0 (id=1745): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) recvfrom$inet(r1, &(0x7f00000000c0)=""/57, 0x39, 0x40010102, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) 1.993963083s ago: executing program 3 (id=1748): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000001c0), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="560a0000000000006111bc00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30213a1b", @ANYRES16=r4, @ANYBLOB="010829bd70000000000007000000050013000900000014000800"/42], 0x30}}, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r5, &(0x7f0000000180)={0x27}, 0x14) (async) sendmmsg$inet(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 1.67318434s ago: executing program 4 (id=1752): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffeb2, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, 0x0, 0x0, 0x1}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="070f308fad9fa0c5772100b616426c7e835af0903247d72ee2743cfe9bb616ef26eedb3d4f8521922f59ec86da5db7854859b736023fdf3b7d2cba2c99bfcd1091e9088609a98b89764ace001f3d6dbe8827fa4747c23b15ef", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="010000003020470008000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffc5, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 1.331657042s ago: executing program 4 (id=1755): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4bf33a746126a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/190], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES8=r3], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe(&(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) bind$802154_raw(r8, &(0x7f00000009c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0xfffffffffffffcf6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x80) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r5, 0x100000000) 1.200502854s ago: executing program 1 (id=1756): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x338, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "e0f5f67eda2cec437ae990ec0f88d7dac6923859dd7e2fe8b133a5f550eb9cb707ca1c4bd8d5cfdef316261aef7f4b4cf3d957312d151763c4d7edd4572c635b3f3ee76d8a6591edbbc6e03ad9ed918bdfabe4ba1d039064a7b5fa710641644e9b3aa66bc36750aeaf6e7c3535093be4a69810f752711769b7e3eb45d0948ae9e1301bb0785ddf097fed24a918dc6a3a89d05647aeff978957d2e8bd1837ec455ed097198bbc96a791b8f1a893b2835e6379a31bef3cd9692741f58ac8da12ce18"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x248, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[,{!{{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x17#{-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hfsc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@-&}{!8\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*):-[%/\\\xd2'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hfsc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'cgroup\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaac}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']\xcc/-}$\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@:+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-^#\')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r6 = socket(0x10, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r13, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r14, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r15 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000a00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000a40)=0x10) 1.1672635s ago: executing program 0 (id=1757): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x82) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40008880}, 0x4) (rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async, rerun: 64) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) (async) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000040)) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000001c0)=""/17, &(0x7f0000000200)=0x11) (async) recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x8, [0x1, 0xf, 0xc, 0xa, 0x3, 0xf, 0x6, 0x10, 0xe, 0x0, 0xb, 0x3, 0x7, 0x0, 0x0, 0xb], 0x1, [0x79, 0x1, 0xd07, 0xfffd, 0xffff, 0x8, 0x5, 0x9, 0x2, 0xc5a, 0x81, 0x6, 0xb, 0x10, 0xd65, 0x4], [0x1, 0x3, 0x1b, 0x3, 0x6, 0x8001, 0x5, 0x1, 0x6, 0x0, 0x9, 0x92c4, 0x7, 0x1, 0x0, 0x7]}}}}]}, 0x88}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r7, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x18, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x4}, {@multicast2, 0xa}]}]}}}}}}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.033937465s ago: executing program 3 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x64, r1, 0x1, 0x20000002, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4e4cdf4989"}, @NL80211_KEY_IDX={0x5}]}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) 976.757307ms ago: executing program 2 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x50, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x50}}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="86d0a9fd80898b17369222a75a516947e316cadb011d7ab6ec9941bb7762b060dd169d03f306d4eba2042c6e0c4bd8119365b8a1fa81c5268ec44f8783d6d35d17d1b5510864e38a3be416dfd6cc945e443d551eca28c24522183545adddc94f139d8f7e0ff9f581c750299595b885f3758e88e2f203061086f9ab752137da3769b93cabd466ce01fe7efa2930a600b34dc5ef54ebf2b6c671820a792580e8d6c3fd952e73e99df74b2f14512950a82c13751cca19f8f52b70bbcadc3626519064f24b707653cc601e16674c18d86b5a1b4bc29f9c2c66e0980c38b53c7bbf31feefa9bcbc5a292b4646"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0xffffffffffffff6f) 929.371912ms ago: executing program 2 (id=1760): r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) writev(r1, &(0x7f0000001180)=[{&(0x7f00000000c0)="0f9eb4dc6c623184321520e26698dd348748fa8e868806d126864be07d2b00175c60500a443911525e669d0a746801258ca02b0412767df317362843289578f54a9fab064f469be5eb1404cc538daa5a7ba2ebaa0186bf386658c75993c835138dbf99d2bc3fe87dca528e39c4b886c62dce17227ed188c524584eed9d2f10dfebf190fe6d7c097d6ce10befc8904b73b88a5abc77eb5ee0b07772a9f79d7bb4e4144e91f9dbbbf71048902199b3caace4cf", 0xb2}, {&(0x7f0000000180)="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", 0x1000}], 0x2) getsockname$inet(r2, &(0x7f00000011c0)={0x2, 0x0, @initdev}, &(0x7f0000001200)=0x10) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001240)={0xa2, {{0x2, 0x4e21, @loopback}}}, 0x88) writev(r0, &(0x7f0000002600)=[{&(0x7f0000001300)="cea15168b1e968f6c937a3e232dc53a96b35e1dd4d113e8a2cb6a0b1df985eecdba2350b0a1675c218d7503c19cee5e1801309dfcabc2e541d47fd9a12b7d2b3f5da8a501895025f9940574ccb984a7c0b166a766d36c2ce3c1643b819545bbbeac23c1a4e9d456144fd29f734445b9fd02d6827d370", 0x76}, {&(0x7f0000001380)="40feef4c47cab6901c897375e02cfb5add37860aa36ad77f82fa64fc89e4f5b2155bc3fd8bee8c3a5cf28cdf2676e45d2771c90efc5bd1deb4d3a7b9c162cd6be2408c8d76dd445672b7615d9681d83d9cb4b318f9d8413877f9d66965d5eb29a9afd574c226825f870e93417061526b30f48f9041a794f9e603bec30fd2340a35ea4d8ef6792332edf422d02e9345f39f1f7fd1a03de0d1d5818b42bb20fc2d509c4c2ff14e88550978a4a192c7", 0xae}, {&(0x7f0000001440)="3d781a0d7900400c842c1e540ad1cdde78fd00c24b4100b3f986cfb72c3494cea128078cf7", 0x25}, {&(0x7f0000001480)="88aa777fbfc79473816b6f53d85dc138b19f72f8575a1aa1e4764d080cceb3af9a224749250ab752d8f77a4c084e01cba12ac4c99a7c449543d981202e13937a7b279f62c7476d6ac7df8f8185a8cacd062c844fcf8789d4c396808c12ecbd891906ed70122310b68ca5d301198f0d81852fca18b539980a5ad6334129b896de91f3b0199226e29c75fa32d64b2f058fc950288c4219fd1e52", 0x99}, {&(0x7f0000001540)="03a789f92f088b87aa6396380b8558da17f0562a780159802736af9cc259e968e0b0358782a14f7c3c91ae9a0dbe722a299349b30a805286e426dc7882311d36dbe1428bfeca214c01bcdcc2520be25d845ad5d4a22bb7cdfdf9388f851d9daf47168b4f9d51d478f35eee68b1ce42c603c6ab10023a94df7688fe3756b347c2fd4392a316ffb0b1828311ba53c40fabf5e771e8baa539bc0b3ee2078ef2c65f2e88610aab6ce7f21eb7c4422f569054d324ed1ecb94bda2c26188c5b693", 0xbe}, {&(0x7f0000001600)="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", 0x1000}], 0x6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000002680)={0x0, 0xc, 0x30, 0x8, 0x1}, &(0x7f00000026c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000002700)={r3, 0xfff, 0xdd, "e6aae9829aad73e4d6c9cbe0df057cbec2819fc536c2082ecce5043d9a876e9e1931c0b5f43b5d55569439bf91b27618ff3423c78a51c950c65931490e90f211a57af47dc3efb68565a95a0ce43012bd67737df3bb7db12eac6e663d460afa8a3dac6b96231408b5ead4bb6afb646f03d08a229173736248958e7e6878f981d5bdcc31122238814523b1a5608f2efa06def5f0546992627c108e12d29a2abaa72d1f445347c7a8817ff6585a4c18b385d8f87411bbf1deda9577639daa71c2b2d04fb760b132b1d91468f8d320a6af11f0fb3b161e115105c8ef30f2ff"}, 0xe5) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000002800)={0x1, "f4"}, 0x2) sendto$x25(r1, &(0x7f0000002840)="9d9ea2c13f8a515e4a79d612d0615b8a70bb795ff4b2f8f8372c7432ad5ec9ee8b5057346bac8fcd9aba66cdb80068d4bfb218b40834bac24ce2d1509f8a72bace8fa1d696906b3bacd437544b2ed685afbaba43f179ab88bc3ec288aab8301900d8d6feb50b4f1cf3cfcdb16c07521af690bef1abf5d0e1b9bf2296e0ad9baf9e5d8a6042fc049a14cfdf8a7f33f5fdfe2cb11bc2add2bf983d44bb7f4a5f2cb3d1b0dd0e98a02c2d", 0xa9, 0x240408d0, &(0x7f0000002900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r1) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000002a80)={r3, 0x7f}, &(0x7f0000002ac0)=0x8) r6 = socket(0x25, 0x1, 0x8) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000002b00), 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000002f40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f00)={&(0x7f0000002bc0)={0x314, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "8893a2cb6226ad2edf68d4cde21a2aab09ba0027652e5c6f1973d6f48a43e79d9f83134648e262d1a93e77231ae33f8893c7ec4ff4252922d8026309589e033d90c83a65bffd99799619ab5192927e0295e54e9ea54f3f78c876000407234b6194773df6b92b1e0ea380dc44506fef5fbc1c455e01a655129b1b3cb8e47bd63b06d0da549588ea3389201845d8e25524f7292a9cf7b4676bee2e7fed6af2cff0f5735a70d5639f8d4ad80349a5"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x72}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d33}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc17e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d48}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f0000002f80)=0x5, &(0x7f0000002fc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000003000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000003040)={0x1d, r9}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000003080), r6) syz_genetlink_get_family_id$wireguard(&(0x7f00000030c0), r1) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003140), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000003640)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003600)={&(0x7f00000031c0)={0x424, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2b9c714ddc00e40d66fa4eade17c07e2b48d6671d18050ccbbe485c5d4a402fd"}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x1000}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x278, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffa}}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x20000040}, 0x8845) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000037c0)={&(0x7f00000036c0)={0xdc, r5, 0x402, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x542}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2a6}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x81]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xa50, 0x1, 0x3, 0x3]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x150}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x63}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x804}, 0x40805) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000003840)={0x10, {{0xa, 0x4e20, 0x2, @empty}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x36f3, @mcast2, 0x400}}, {{0xa, 0x4e23, 0x8, @private2, 0xa3}}, {{0xa, 0x4e20, 0x7fff, @local, 0x7f}}, {{0xa, 0x4e24, 0x0, @remote, 0xf}}, {{0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x4}, 0xa25}}, {{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x390) 925.307874ms ago: executing program 3 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRESOCT=r6, @ANYRESHEX=0x0], 0x28}}, 0x4008000) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) getsockopt(r0, 0x1, 0x14, &(0x7f0000000140)=""/210, &(0x7f0000003fc0)=0xd2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) 775.025115ms ago: executing program 3 (id=1762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0xc00000000000000}, 0x0) 648.484818ms ago: executing program 2 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x30}, {0x6, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x1, 0x0, {0x3774, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x8, 0x6d}}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x60, 0x1}, {0x60}, {0x5, 0x1}, {0x6}, {0x5, 0x1}, {0xb, 0x1}, {0x18, 0x1}, {0x5}, {0x58, 0x1}, {0x36, 0x1}, {0x5, 0x1}, {0x1b, 0x1}, {0x1}, {0x24, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x60}, {0x3, 0x1}, {0x24}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x64, r9, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4e4cdf4989"}, @NL80211_KEY_IDX={0x5}]}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) 638.221702ms ago: executing program 3 (id=1764): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x44000) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x44000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), 0x0}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0xe, 0x3}, {0x10, 0x3}, {0x10, 0x1}, {0x10, 0x3}]}, @enum64={0xd, 0x5, 0x0, 0x13, 0x0, 0xe, [{0xe, 0x800, 0x5}, {0x8, 0xc, 0xfff}, {0x4, 0x2, 0xda}, {0x9, 0x3507, 0x4}, {0x9, 0xe75, 0x7}]}]}, {0x0, [0x2e, 0x6f, 0x61, 0x61]}}, &(0x7f00000002c0)=""/77, 0xa6, 0x4d, 0x1, 0xffffffff}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2336, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2336, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = accept4(r1, &(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000340)=0x80, 0x0) setsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000000500)=0x9, 0x4) 615.047137ms ago: executing program 0 (id=1765): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@RTA_PRIORITY={0x8, 0x1e, 0x4}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'ipvlan1\x00', {}, 0x7e18}) listen(r3, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x10, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) 563.390639ms ago: executing program 2 (id=1766): r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x9, 0x4) (async) ioctl$sock_ifreq(r0, 0xb0, &(0x7f0000000080)={'\x00', @ifru_mtu=0x7}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x8001, 0x5c5, 0x0, 0x6, 0x4}) (async) bind$netrom(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) sendto$ax25(r1, &(0x7f0000000180)="19c2c42ff65efb041c520cad707576d1a06fe58154b1095f247d1d7f50ea2c95f6e0f8412459bf79d3b82a19b0df60f88034b66c56439416127eeabc363cf8a6b4640d5aa7a2a9fa105b71e1097b80d33dc3b98a9872ea5d87a99347fc8061004b1d4d4ec7a3e074f96c67e38a6919d36d2914db5afef48cf7ccba83c4e2b10bb2bd219cc73ecdbecddc0ce688015c10e774234ddacf7f86fa7815ad17147652710377bfd734e78950b45a527f6f3cbc261f5c95a8943902e611b3265ef2d737e065409f5f04147125f0f6668536577c3245462b2cfeef1429666336311b59790f814e92235bf30ca6db1e6e108677417a39c5b98a", 0xf5, 0x10, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) listen(r0, 0x7ff) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000300)={0x0, @aes128, 0x0, @desc3}) (async, rerun: 32) getpeername$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_IE={0x5a, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @supported_rates, @measure_req={0x26, 0x44, {0x1, 0x4d, 0x8, "a9496d6503a074d14442b9b9052bf9ed30b537abb4ac9e6d8d7e671865504a039d1bd5b0c1a7078beb2e72834a63318d83e956eed866f113cb6b1a380ee44c7119"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xa5, 0x28}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8001}, 0xc080) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0xf5}}, 0x0, 0x0, 0x4a, 0x0, "370a9b8b766c2ced1814455e28c69132bb7ebc35290d43b0f6cf9e89d489ad9282673198eac557ff247c0689fe4ec708dc8367ab35a824b88e404068dfec4f32dcc34427b8fb3c0e83f68cd16c26c5ed"}, 0xd8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) (async) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ppoll(&(0x7f0000000740)=[{r5, 0x20}, {r6, 0x8}, {r7, 0x440}, {r0, 0x1058}], 0x4, &(0x7f00000007c0)={r8, r9+60000000}, &(0x7f0000000800)={[0xacf]}, 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000940)={&(0x7f0000000840), 0x10, &(0x7f0000000900)={&(0x7f0000000880)={0x4, 0xc, 0x40, {0x0, 0x2710}, {0x77359400}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "164c18464333460f"}}, 0x48}}, 0x8004) (async) r10 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r2, &(0x7f0000000980)={0x50000008}) (async) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x3101, 0xda, &(0x7f00000009c0)="da3a94614cc8cfa25567acab4de84b4dd1f6d995934f5a739e18848cbf2a44758080d0dfada5225990e320e90e516a6789dbee1ee4a407193cc9de3d3bc6597cc70f6c0a0d1e32cb48aa90e5fbdc06340fd43c3fe9a20099563e37e504800849439ad2cb36dd6648ef18e029ffaa0c3d6bdcc9dc22595989a18a7f33c3b9bbec6d13f064f7858894609d83c5f62d3b897a3c8955e3f36fb635dce9f9bf1439b78529736851927607544b8a4040390b3ea57dc9373b9454cdcbd754926d1a76390fb1ae18745cf546d46ac8147cb19bba0387ef27ee5e4b550a92", 0x1, 0x1}]}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xe6, 0x8}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5b5}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x1) (async) recvmmsg(r3, &(0x7f0000007680)=[{{&(0x7f0000000c80)=@caif, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d00)=""/109, 0x6d}, {&(0x7f0000000d80)=""/90, 0x5a}, {&(0x7f0000000e00)=""/89, 0x59}, {&(0x7f0000000e80)=""/33, 0x21}, {&(0x7f0000000ec0)=""/210, 0xd2}, {&(0x7f0000000fc0)=""/181, 0xb5}], 0x6, &(0x7f0000001100)=""/42, 0x2a}, 0xffffff68}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000011c0)=""/134, 0x86}, {&(0x7f0000001280)=""/37, 0x25}, {&(0x7f00000012c0)=""/181, 0xb5}, {&(0x7f0000001380)=""/235, 0xeb}, {&(0x7f0000001480)=""/51, 0x33}], 0x5, &(0x7f0000001540)=""/122, 0x7a}, 0xb}, {{&(0x7f00000015c0)=@nfc, 0x80, &(0x7f0000001900)=[{&(0x7f0000001640)=""/227, 0xe3}, {&(0x7f0000001740)=""/172, 0xac}, {&(0x7f0000001800)=""/254, 0xfe}], 0x3, &(0x7f0000001940)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000002940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/223, 0xdf}], 0x1, &(0x7f0000002b00)=""/29, 0x1d}, 0x4}, {{&(0x7f0000002b40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/116, 0x74}, {&(0x7f0000002c40)=""/125, 0x7d}], 0x2, &(0x7f0000002d00)=""/25, 0x19}, 0x2}, {{&(0x7f0000002d40)=@qipcrtr, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/49, 0x31}, {&(0x7f0000003e00)=""/145, 0x91}, {&(0x7f0000003ec0)=""/128, 0x80}], 0x4, &(0x7f0000003f80)=""/247, 0xf7}}, {{&(0x7f0000004080)=@nfc_llcp, 0x80, &(0x7f0000007480)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/238, 0xee}, {&(0x7f0000005200)=""/213, 0xd5}, {&(0x7f0000005300)=""/147, 0x93}, {&(0x7f00000053c0)=""/150, 0x96}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/4096, 0x1000}], 0x7, &(0x7f0000007500)=""/44, 0x2c}, 0x7}, {{&(0x7f0000007540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, 0x80, &(0x7f0000007640)=[{&(0x7f00000075c0)=""/124, 0x7c}], 0x1}, 0x1}], 0x8, 0x40002040, &(0x7f0000007880)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000007980)={&(0x7f00000078c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000007940)={&(0x7f0000007900)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000007a40)=0x1, 0x4) 563.085361ms ago: executing program 1 (id=1767): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) close(r0) 481.222932ms ago: executing program 3 (id=1768): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x95}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x25a5, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r8, @ANYBLOB="2104040000e107697a72972fad0008000300", @ANYRES32=r2, @ANYBLOB="e7005b00720be0763b9010befdd081973fac24500e13ed1da82663339c69cd88d69504d23575dcbb8428e5514632dbc5e1faad7c73d21280e31814070153825f0c208dcd0e1ac0eb36b8b3491369c44cfd88321eb620d49a44896634f52af607e8c136ed22e9c92cf188d004f8859a1efffb2ea36b79aad4a78245bf9793624539184f1d555858b604dde6e16aae3663892c7c1220056f7c61da6db8e83a66b31d06e9475c63e1226accc518b71fff71c422a1a6685d96bf8e72e97f0986b1a52cae346edb9ad9948af102f4490d29f1768065ccb08c98e683caab358d987ae2fdcf1f84da8235000600650080000000"], 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r8, @ANYBLOB="2104040000e107697a72972fad0008000300", @ANYRES32=r2, @ANYBLOB="e7005b00720be0763b9010befdd081973fac24500e13ed1da82663339c69cd88d69504d23575dcbb8428e5514632dbc5e1faad7c73d21280e31814070153825f0c208dcd0e1ac0eb36b8b3491369c44cfd88321eb620d49a44896634f52af607e8c136ed22e9c92cf188d004f8859a1efffb2ea36b79aad4a78245bf9793624539184f1d555858b604dde6e16aae3663892c7c1220056f7c61da6db8e83a66b31d06e9475c63e1226accc518b71fff71c422a1a6685d96bf8e72e97f0986b1a52cae346edb9ad9948af102f4490d29f1768065ccb08c98e683caab358d987ae2fdcf1f84da8235000600650080000000"], 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 474.572486ms ago: executing program 1 (id=1769): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000102000000000700003500776c616e3000000000000000000000000a000100ef05b9b215d00000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x9) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000480)={0xb}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r6, 0x1ff, 0x30}, &(0x7f0000000180)=0xc) ioctl(r2, 0x8b2a, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000102000000000700003500776c616e3000000000000000000000000a000100ef05b9b215d00000"], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x9) (async) epoll_create1(0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000480)={0xb}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r6, 0x1ff, 0x30}, &(0x7f0000000180)=0xc) (async) ioctl(r2, 0x8b2a, &(0x7f0000000040)) (async) 380.556802ms ago: executing program 2 (id=1770): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0xffffffffffffff5a, 0x0}, 0x2442}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000004100)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x6}, {{0x0, 0x0, 0x0}, 0x11}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4105, 0x1009}, {&(0x7f0000006080)=""/4076, 0xfec}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f0000000600)=""/135, 0x87}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010060, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @multicast}]}, 0x40}}, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="00008828", 0x1e, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x8, 0x6, @local}, 0x14) listen(r4, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110750000000000a60000005c0000009500004000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 380.087358ms ago: executing program 4 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xae96, 0x8, 0x81, 0x3}]}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000002000010029bd7000fedbdf25020010800700000300000000080010000400000008000200e00000010c000c4000000000000000ecf5f0f364c44126751a5bcc4618c78eab2412e39de50bddc04c6e2baa84d351129e17da5ca38ffe0b8bb5662b13bfb5dcd8cb3a0dc4618c36b9c7a6f511770a6c9fca96"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x12f, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) 297.130645ms ago: executing program 0 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) (async, rerun: 64) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) (async) syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000140)="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", 0x2d1}, {&(0x7f0000000640)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12fece00264e2e2338818bf36792ac35df1355b93b821d4a29cf7851569ebb699346c0324d2dbb8ea4a57c3b54ad2b3cde6bf426a680056dca9a240b3200f9ac27effc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f23708202eed7dc4161d79565d8ce8e8627c361715e9ad5f78f6bc", 0xef}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd0400000000000000d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000000540)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46", 0x16}], 0x5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x9, 0x48a2, "58bb04272524"}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) 265.067389ms ago: executing program 4 (id=1773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r6}, &(0x7f0000000340)=0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmmsg$alg(r8, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 192.584372ms ago: executing program 1 (id=1774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x71}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x7, 0xc, 0x0, 0x29}}]}, @NL80211_ATTR_IE={0x6f, 0x2a, [@link_id={0x65, 0x12, {@random="6584980cc258", @device_a, @device_b}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x16, {0x1, 0x9, @void, @val=0x11, @val="b59fecd482c32203b09361ca5fe17059"}}, @mic={0x8c, 0x18, {0xf77, "8e0000c58ae7", @long="87a6163dd652107ff962c8dc1d8598cc"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x64, 0x9}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4a52}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000380001800c0001006269747769736500280002800800014000000014080002400000001209000640000000030400048008000340000000010900010073797a30"], 0x10c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x48080) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 192.0726ms ago: executing program 2 (id=1775): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000180)=0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x84) recvmsg$can_raw(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x35, 0x1003, 0x62}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c01000000000000309958ba7c9e57cc690e2cc2edc18ae65e0f4cbd070001", @ANYRES32=0x0, @ANYBLOB="00010000ac0000002c0012800b000100697036746e6c00001c000280050004000300000008000700090000000800070000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 135.809211ms ago: executing program 1 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x44, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x804}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xed337b9d797a1803}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc01}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x200400a4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000004140)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000003f80)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000000a40)=""/196, 0xc4}], 0x5}, 0x6}, {{&(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000c40)=""/218, 0xda}, {&(0x7f0000000d40)=""/29, 0x1d}], 0x3, &(0x7f0000000dc0)=""/150, 0x96}, 0x200}, {{&(0x7f0000000e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/201, 0xc9}, {&(0x7f0000001000)=""/40, 0x28}, {&(0x7f0000001040)=""/111, 0x6f}], 0x3, &(0x7f0000001100)=""/4096, 0x1000}}, {{&(0x7f0000002100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002180)=""/79, 0x4f}, {&(0x7f0000002200)=""/51, 0x33}, {&(0x7f0000002240)=""/30, 0x1e}], 0x3, &(0x7f00000022c0)=""/157, 0x9d}, 0x101}, {{&(0x7f0000002380)=@x25, 0x80, &(0x7f0000003780)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/218, 0xda}, {&(0x7f0000003500)=""/150, 0x96}, {&(0x7f00000035c0)=""/183, 0xb7}, {&(0x7f0000003680)=""/214, 0xd6}], 0x5, &(0x7f0000003800)=""/86, 0x56}, 0x74}, {{&(0x7f0000003880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003900)=""/74, 0x4a}], 0x1}, 0x7}, {{&(0x7f00000039c0)=@ax25={{}, [@null, @remote, @null, @null, @bcast, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003a40)=""/207, 0xcf}, {&(0x7f0000003b40)=""/235, 0xeb}, {&(0x7f0000003c40)=""/127, 0x7f}, {&(0x7f0000003cc0)=""/184, 0xb8}, {&(0x7f0000003d80)=""/42, 0x2a}, {&(0x7f0000003dc0)=""/247, 0xf7}], 0x6, &(0x7f0000003f40)=""/60, 0x3c}, 0xffffffff}], 0x7, 0x42, &(0x7f0000004180)={r8, r9+60000000}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r7, @ANYBLOB="08002600111700000a000600ffffffffffff000008003500000000000a0034000202020202020000200050800500090002000000090001004e4cdf49890000000500020000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) 106.275199ms ago: executing program 4 (id=1777): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="83a3000062b669b3dca1062e3617422cf48886fec5dbf9300644574907a9ae9a2fbd66bfdbbda6", @ANYRES16=r2, @ANYBLOB="030b28bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 513.16µs ago: executing program 1 (id=1778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f086dd1bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e5feca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in=@loopback, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x110) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e00)={0x150, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x150}, 0x1, 0x0, 0x0, 0x50001}, 0x24000001) 0s ago: executing program 4 (id=1779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0x28, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): gth: 249 > 1 [ 71.764630][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.804356][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.823397][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.826532][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.832059][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.839327][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.845930][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.853819][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.867891][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.876670][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.877079][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.883921][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.899443][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.907629][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.930379][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.941036][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.967883][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.975979][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.988892][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.012058][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.026369][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.034102][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.049649][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.058384][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.550183][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 72.678352][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 72.789333][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 72.859899][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 72.934671][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.943152][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.950766][ T5861] bridge_slave_0: entered allmulticast mode [ 72.958199][ T5861] bridge_slave_0: entered promiscuous mode [ 72.975944][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 73.015038][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.022209][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.029812][ T5861] bridge_slave_1: entered allmulticast mode [ 73.036983][ T5861] bridge_slave_1: entered promiscuous mode [ 73.070939][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.078377][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.085622][ T5860] bridge_slave_0: entered allmulticast mode [ 73.092756][ T5860] bridge_slave_0: entered promiscuous mode [ 73.150563][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.158427][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.166110][ T5860] bridge_slave_1: entered allmulticast mode [ 73.173176][ T5860] bridge_slave_1: entered promiscuous mode [ 73.243914][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.269849][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.277338][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.284510][ T5874] bridge_slave_0: entered allmulticast mode [ 73.292458][ T5874] bridge_slave_0: entered promiscuous mode [ 73.303086][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.314630][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.348666][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.356329][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.363533][ T5874] bridge_slave_1: entered allmulticast mode [ 73.370780][ T5874] bridge_slave_1: entered promiscuous mode [ 73.392213][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.478173][ T5861] team0: Port device team_slave_0 added [ 73.485609][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.493282][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.501023][ T5879] bridge_slave_0: entered allmulticast mode [ 73.508572][ T5879] bridge_slave_0: entered promiscuous mode [ 73.517872][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.525425][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.532614][ T5879] bridge_slave_1: entered allmulticast mode [ 73.540790][ T5879] bridge_slave_1: entered promiscuous mode [ 73.547522][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.554682][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.562155][ T5871] bridge_slave_0: entered allmulticast mode [ 73.569505][ T5871] bridge_slave_0: entered promiscuous mode [ 73.578812][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.591493][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.620812][ T5861] team0: Port device team_slave_1 added [ 73.664156][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.671531][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.679007][ T5871] bridge_slave_1: entered allmulticast mode [ 73.688117][ T5871] bridge_slave_1: entered promiscuous mode [ 73.720749][ T5860] team0: Port device team_slave_0 added [ 73.730183][ T5860] team0: Port device team_slave_1 added [ 73.737110][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.744059][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.770371][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.852540][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.859562][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.886061][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.907298][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.919857][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.931464][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.943994][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.956407][ T5874] team0: Port device team_slave_0 added [ 73.962902][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.966002][ T5868] Bluetooth: hci1: command tx timeout [ 73.970530][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001458][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.041931][ T5874] team0: Port device team_slave_1 added [ 74.048123][ T5868] Bluetooth: hci0: command tx timeout [ 74.048131][ T5864] Bluetooth: hci3: command tx timeout [ 74.065480][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.072456][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.098552][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.125121][ T5868] Bluetooth: hci2: command tx timeout [ 74.125159][ T5864] Bluetooth: hci4: command tx timeout [ 74.212374][ T5879] team0: Port device team_slave_0 added [ 74.220266][ T5871] team0: Port device team_slave_0 added [ 74.231110][ T5871] team0: Port device team_slave_1 added [ 74.237792][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.245122][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.271059][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.288658][ T5861] hsr_slave_0: entered promiscuous mode [ 74.295367][ T5861] hsr_slave_1: entered promiscuous mode [ 74.307796][ T5860] hsr_slave_0: entered promiscuous mode [ 74.314101][ T5860] hsr_slave_1: entered promiscuous mode [ 74.320509][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 74.326386][ T5860] Cannot create hsr debugfs directory [ 74.333556][ T5879] team0: Port device team_slave_1 added [ 74.365919][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.372885][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.399175][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.491569][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.500345][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.526683][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.538787][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.545877][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.571902][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.584963][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.591915][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.618118][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.659283][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.666371][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.692401][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.772134][ T5874] hsr_slave_0: entered promiscuous mode [ 74.778996][ T5874] hsr_slave_1: entered promiscuous mode [ 74.785792][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 74.791537][ T5874] Cannot create hsr debugfs directory [ 74.897845][ T5871] hsr_slave_0: entered promiscuous mode [ 74.904146][ T5871] hsr_slave_1: entered promiscuous mode [ 74.910533][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 74.916580][ T5871] Cannot create hsr debugfs directory [ 74.970470][ T5879] hsr_slave_0: entered promiscuous mode [ 74.978405][ T5879] hsr_slave_1: entered promiscuous mode [ 74.984492][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 74.990290][ T5879] Cannot create hsr debugfs directory [ 75.433659][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.457482][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.469597][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.486811][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.550485][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.563269][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.573080][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.588434][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.670943][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.701956][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.713734][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.742938][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.843153][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.853716][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.870141][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.880915][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.007953][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.020721][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.032718][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.045622][ T5864] Bluetooth: hci1: command tx timeout [ 76.064444][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.098755][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.123305][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.130259][ T5864] Bluetooth: hci0: command tx timeout [ 76.137265][ T5864] Bluetooth: hci3: command tx timeout [ 76.174254][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.205134][ T5864] Bluetooth: hci2: command tx timeout [ 76.209277][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.216068][ T5864] Bluetooth: hci4: command tx timeout [ 76.229399][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.254444][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.261688][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.271787][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.278944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.300111][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.322023][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.329207][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.360267][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.367430][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.378968][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.386128][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.398491][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.405633][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.493620][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.509496][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.583552][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.664403][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.724499][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.822530][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.851668][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.858890][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.881603][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.888796][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.021677][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.049882][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.057099][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.097710][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.104885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.121815][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.190464][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.214515][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.359736][ T5861] veth0_vlan: entered promiscuous mode [ 77.430486][ T5874] veth0_vlan: entered promiscuous mode [ 77.438742][ T5861] veth1_vlan: entered promiscuous mode [ 77.497431][ T5874] veth1_vlan: entered promiscuous mode [ 77.535059][ T5860] veth0_vlan: entered promiscuous mode [ 77.551561][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.569101][ T5860] veth1_vlan: entered promiscuous mode [ 77.627290][ T5861] veth0_macvtap: entered promiscuous mode [ 77.659941][ T5874] veth0_macvtap: entered promiscuous mode [ 77.693359][ T5861] veth1_macvtap: entered promiscuous mode [ 77.719541][ T5874] veth1_macvtap: entered promiscuous mode [ 77.742790][ T5860] veth0_macvtap: entered promiscuous mode [ 77.772512][ T5860] veth1_macvtap: entered promiscuous mode [ 77.812661][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.832740][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.843868][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.862390][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.882885][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.900533][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.922003][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.944422][ T3156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.976809][ T3156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.017801][ T3156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.031646][ T3156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.073346][ T3156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111340][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.120469][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.135170][ T5864] Bluetooth: hci1: command tx timeout [ 78.169670][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181917][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192708][ T5879] veth0_vlan: entered promiscuous mode [ 78.206580][ T5864] Bluetooth: hci3: command tx timeout [ 78.206867][ T5868] Bluetooth: hci0: command tx timeout [ 78.266414][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.277897][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.295514][ T5868] Bluetooth: hci4: command tx timeout [ 78.300961][ T5868] Bluetooth: hci2: command tx timeout [ 78.323801][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.334048][ T5879] veth1_vlan: entered promiscuous mode [ 78.363739][ T5871] veth0_vlan: entered promiscuous mode [ 78.377659][ T3156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.395714][ T3156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.422254][ T5871] veth1_vlan: entered promiscuous mode [ 78.426996][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.437135][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.489417][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.499624][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.567097][ T5879] veth0_macvtap: entered promiscuous mode [ 78.578267][ T5879] veth1_macvtap: entered promiscuous mode [ 78.616058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.624396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.631489][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.636523][ T5871] veth0_macvtap: entered promiscuous mode [ 78.645013][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.675558][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.682866][ T5871] veth1_macvtap: entered promiscuous mode [ 78.691257][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.703799][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.750394][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.783474][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.800802][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.839260][ T3455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.929182][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.955947][ T3455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.965929][ T3455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.994338][ T3455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.073885][ T3156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.160276][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.178591][ T3156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.190483][ T3156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.243756][ T3156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.308055][ T3156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.338928][ T3156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.481324][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.511783][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.550375][ T6002] sctp: failed to load transform for md5: -2 [ 79.589550][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.629849][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.698816][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.747949][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.763401][ T6010] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 [ 79.766400][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.889761][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.935515][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.947957][ T6018] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 80.009360][ T6018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.126980][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 80.212465][ T5868] Bluetooth: hci1: command tx timeout [ 80.285305][ T5868] Bluetooth: hci3: command tx timeout [ 80.285492][ T5864] Bluetooth: hci0: command tx timeout [ 80.373255][ T5864] Bluetooth: hci2: command tx timeout [ 80.374732][ T5868] Bluetooth: hci4: command tx timeout [ 80.469647][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 80.534224][ T6043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17'. [ 80.550685][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 80.643943][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 81.119165][ T6074] Zero length message leads to an empty skb [ 81.221187][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 81.352790][ T6086] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 81.534115][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.543759][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.553122][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.562428][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.980575][ T6117] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 82.444351][ T6141] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.506855][ T6144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.671074][ T6153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.098881][ T6178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.110633][ T6178] team0: Failed to send options change via netlink (err -105) [ 83.123069][ T6178] team0: Port device bond1 added [ 83.129950][ T6182] openvswitch: netlink: IP tunnel dst address not specified [ 83.320379][ T6193] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 83.454373][ T6195] syz.4.69 uses obsolete (PF_INET,SOCK_PACKET) [ 83.490377][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.523316][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.911472][ T6229] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 84.346123][ T6241] sctp: failed to load transform for md5: -2 [ 84.513270][ T5862] IPVS: starting estimator thread 0... [ 84.645260][ T6262] IPVS: using max 30 ests per chain, 72000 per kthread [ 84.802617][ T6278] __nla_validate_parse: 15 callbacks suppressed [ 84.802637][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 85.118933][ T6311] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 85.269496][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.277928][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.719254][ T6305] geneve2: entered promiscuous mode [ 85.734050][ T6305] geneve2: entered allmulticast mode [ 85.776377][ T6311] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.789710][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.106'. [ 85.821824][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.852897][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 85.881499][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.908268][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 85.919537][ T6352] tap0: tun_chr_ioctl cmd 1074025676 [ 85.926223][ T6352] tap0: owner set to 0 [ 85.945063][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.966793][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 85.983811][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 86.019785][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.064890][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 86.073863][ T6365] warning: `syz.2.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.138626][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 86.141344][ T6371] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 86.274690][ T6365] bond1 (unregistering): Released all slaves [ 86.353969][ T6376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'. [ 86.363075][ T6348] IPVS: starting estimator thread 0... [ 86.376601][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.121'. [ 86.386619][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 86.405781][ T6385] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.120'. [ 86.418502][ T6389] openvswitch: netlink: Flow key attr not present in new flow. [ 86.458116][ T6386] netlink: 'syz.4.120': attribute type 12 has an invalid length. [ 86.475619][ T6391] IPVS: using max 31 ests per chain, 74400 per kthread [ 86.604062][ T6401] tipc: Started in network mode [ 86.609750][ T6401] tipc: Node identity 32d3cb5a67ac, cluster identity 4711 [ 86.621641][ T6401] tipc: Enabled bearer , priority 0 [ 86.628791][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 86.640004][ T6405] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 86.642566][ T6401] syzkaller0: entered promiscuous mode [ 86.651754][ T6405] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 86.669700][ T6401] syzkaller0: entered allmulticast mode [ 86.692270][ T6401] tipc: Resetting bearer [ 86.701855][ T6400] tipc: Resetting bearer [ 86.728909][ T6400] tipc: Disabling bearer [ 86.773062][ T1211] cfg80211: failed to load regulatory.db [ 86.780129][ T6407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.827916][ T6421] openvswitch: netlink: Missing key (keys=40, expected=80) [ 86.866362][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.129'. [ 87.064039][ T6424] syz.4.132 (6424) used greatest stack depth: 16088 bytes left [ 87.073733][ T6432] vlan1: entered allmulticast mode [ 87.087361][ T6432] veth0_vlan: entered allmulticast mode [ 87.341204][ T6449] sctp: failed to load transform for md5: -2 [ 87.617031][ T6475] Bluetooth: MGMT ver 1.23 [ 87.884676][ T6483] syzkaller0: entered promiscuous mode [ 87.892728][ T6483] syzkaller0: entered allmulticast mode [ 87.908604][ T6499] tipc: Enabling of bearer rejected, failed to enable media [ 87.958624][ T6483] tipc: Started in network mode [ 87.963588][ T6483] tipc: Node identity , cluster identity 4711 [ 87.979321][ T6483] tipc: Failed to obtain node identity [ 87.986723][ T6483] tipc: Enabling of bearer rejected, failed to enable media [ 88.012658][ T6483] tc_dump_action: action bad kind [ 88.495126][ T6533] can: request_module (can-proto-0) failed. [ 89.414329][ T6530] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 89.558410][ T5941] IPVS: starting estimator thread 0... [ 89.559414][ T6553] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 89.590757][ T6553] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 89.648294][ T6559] IPv6: sit1: Disabled Multicast RS [ 89.664951][ T6555] IPVS: using max 26 ests per chain, 62400 per kthread [ 89.691200][ T6559] sit1: entered allmulticast mode [ 89.851158][ T6576] netem: incorrect ge model size [ 89.856997][ T6576] netem: change failed [ 89.879639][ T6575] netlink: 'syz.0.172': attribute type 153 has an invalid length. [ 90.031251][ T6580] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 90.085134][ T6580] __nla_validate_parse: 9 callbacks suppressed [ 90.085151][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 90.106784][ T6575] IPVS: Error connecting to the multicast addr [ 90.127781][ T6594] netlink: 192 bytes leftover after parsing attributes in process `syz.4.178'. [ 90.182644][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.178'. [ 90.230163][ T6601] netlink: 232 bytes leftover after parsing attributes in process `syz.3.182'. [ 90.244219][ T6594] wg2: entered promiscuous mode [ 90.313899][ T6607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.354976][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 90.374087][ T6609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.181'. [ 90.404880][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 90.435053][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 90.981342][ T6629] netlink: 'syz.3.191': attribute type 29 has an invalid length. [ 91.012783][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 91.147745][ T6635] tipc: Started in network mode [ 91.152654][ T6635] tipc: Node identity d2ec99711e3, cluster identity 4711 [ 91.175039][ T6635] tipc: Enabled bearer , priority 0 [ 91.185542][ T6635] syzkaller0: entered promiscuous mode [ 91.191041][ T6635] syzkaller0: entered allmulticast mode [ 91.239983][ T6635] tipc: Resetting bearer [ 91.305145][ T6628] tipc: Resetting bearer [ 91.351081][ T6628] tipc: Disabling bearer [ 91.526687][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 91.662206][ T6624] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 91.688622][ T6651] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 92.160585][ T6680] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 92.251389][ T6684] bridge_slave_0: left allmulticast mode [ 92.257362][ T6684] bridge_slave_0: left promiscuous mode [ 92.263287][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.279901][ T6684] bridge_slave_1: left allmulticast mode [ 92.286606][ T6684] bridge_slave_1: left promiscuous mode [ 92.292481][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.308576][ T6684] bond0: (slave bond_slave_0): Releasing backup interface [ 92.324202][ T6684] bond0: (slave bond_slave_1): Releasing backup interface [ 92.357601][ T6684] team0: Port device team_slave_0 removed [ 92.378538][ T6684] team0: Port device team_slave_1 removed [ 92.387219][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.394639][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.407046][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.414586][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.447974][ T6684] bond0: (slave wlan1): Releasing backup interface [ 92.807816][ T6715] trusted_key: syz.4.217 sent an empty control message without MSG_MORE. [ 92.845664][ T6716] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 92.855637][ T6715] netlink: zone id is out of range [ 92.879507][ T6715] netlink: zone id is out of range [ 92.891921][ T6715] netlink: get zone limit has 8 unknown bytes [ 93.012394][ T6728] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 93.049759][ T6728] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 93.142023][ T6741] unsupported nla_type 58 [ 93.150314][ T6741] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 94.414415][ T6809] netlink: 'syz.4.248': attribute type 3 has an invalid length. [ 94.434386][ T6809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.442008][ T6809] IPv6: NLM_F_CREATE should be set when creating new route [ 94.529568][ T6819] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.948710][ T6837] netlink: 'syz.0.255': attribute type 11 has an invalid length. [ 95.107055][ T6841] tipc: Enabled bearer , priority 0 [ 95.149626][ T6841] syzkaller0: entered promiscuous mode [ 95.156304][ T6841] syzkaller0: entered allmulticast mode [ 95.192958][ T6841] tipc: Resetting bearer [ 95.204729][ T6844] __nla_validate_parse: 21 callbacks suppressed [ 95.204747][ T6844] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.257'. [ 95.205004][ T6840] tipc: Resetting bearer [ 95.238127][ T6843] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.257'. [ 95.341755][ T6840] tipc: Disabling bearer [ 95.532667][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.259'. [ 95.554742][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.259'. [ 95.639657][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 95.665001][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 95.825334][ T6867] tipc: Can't bind to reserved service type 0 [ 95.879607][ T6867] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 95.954426][ T6872] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 96.044385][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 96.229501][ T6887] wireguard: wg2: Could not create IPv4 socket [ 96.361066][ T6893] netlink: 128 bytes leftover after parsing attributes in process `syz.4.275'. [ 96.487690][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 96.677353][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 96.718771][ T6911] gtp0: entered promiscuous mode [ 96.723849][ T6911] gtp0: entered allmulticast mode [ 97.493123][ T6923] netlink: 'syz.3.286': attribute type 11 has an invalid length. [ 97.663013][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.772150][ T6930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.791533][ T6940] netlink: 'syz.2.291': attribute type 39 has an invalid length. [ 97.846024][ T6938] tipc: Enabled bearer , priority 0 [ 97.919384][ T6936] syzkaller0: entered promiscuous mode [ 97.925336][ T6936] syzkaller0: entered allmulticast mode [ 97.940636][ T6929] tipc: Resetting bearer [ 97.969909][ T6929] tipc: Disabling bearer [ 98.333055][ T6341] IPVS: starting estimator thread 0... [ 98.358513][ T6965] netlink: 'syz.4.297': attribute type 5 has an invalid length. [ 98.435301][ T6964] IPVS: using max 34 ests per chain, 81600 per kthread [ 98.892462][ T6981] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 99.038775][ T6774] Set syz1 is full, maxelem 65536 reached [ 99.061503][ T6981] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 99.073221][ T6981] gretap1: entered promiscuous mode [ 99.088327][ T6981] gretap1: entered allmulticast mode [ 99.321610][ T6999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.334195][ T6988] raw_sendmsg: syz.3.303 forgot to set AF_INET. Fix it! [ 99.389980][ T7004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.434361][ T7006] netlink: 'syz.2.305': attribute type 30 has an invalid length. [ 99.513063][ T7009] delete_channel: no stack [ 99.755642][ T7029] veth0: entered promiscuous mode [ 99.795263][ T7022] veth0: left promiscuous mode [ 99.950737][ T7041] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 100.070438][ T7048] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.097596][ T7048] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 100.268110][ T7041] gretap2: entered promiscuous mode [ 100.318925][ T7041] bond2: (slave gretap2): making interface the new active one [ 100.343600][ T7041] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 100.381333][ T7060] macvlan2: entered promiscuous mode [ 100.389045][ T7060] macvlan2: entered allmulticast mode [ 100.397867][ T7060] bond2: entered promiscuous mode [ 100.403964][ T7060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.418654][ T7060] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 100.431774][ T7060] bond2: left promiscuous mode [ 100.651523][ T7094] __nla_validate_parse: 18 callbacks suppressed [ 100.651545][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 100.983528][ T7116] delete_channel: no stack [ 101.031248][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'. [ 101.148895][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 101.266683][ T7137] netlink: 'syz.0.344': attribute type 83 has an invalid length. [ 101.298399][ T7138] ieee802154 phy0 wpan0: encryption failed: -90 [ 101.321264][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 101.365519][ T7142] netlink: 'syz.4.347': attribute type 13 has an invalid length. [ 101.394649][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 101.425900][ T7142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.544161][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 101.574345][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 101.583480][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 101.609723][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.630502][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.640228][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.652878][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.705499][ T7160] netlink: 'syz.3.353': attribute type 9 has an invalid length. [ 101.713316][ T7160] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.353'. [ 102.154073][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 102.178082][ T7194] macvtap1: entered allmulticast mode [ 102.184033][ T7194] veth0_macvtap: entered allmulticast mode [ 102.196593][ T7198] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 102.209468][ T7201] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 102.326854][ T7208] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 102.398761][ T7200] ifb1: entered promiscuous mode [ 102.403767][ T7200] ifb1: entered allmulticast mode [ 103.971826][ T7306] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 104.118739][ T7322] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 104.175286][ T7322] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 104.624221][ T7351] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 105.743516][ T7398] __nla_validate_parse: 17 callbacks suppressed [ 105.743534][ T7398] netlink: 104 bytes leftover after parsing attributes in process `syz.1.409'. [ 105.781286][ T7402] netlink: 248 bytes leftover after parsing attributes in process `syz.3.410'. [ 105.811624][ T7402] NCSI netlink: No device for ifindex 0 [ 105.826855][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.862593][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.002551][ T7452] netlink: 'syz.1.419': attribute type 2 has an invalid length. [ 107.761788][ T7449] netlink: 48 bytes leftover after parsing attributes in process `syz.3.418'. [ 107.776639][ T7455] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 108.136625][ T7477] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 108.158408][ T7481] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 108.632131][ T7516] !: renamed from dummy0 (while UP) [ 108.683234][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 108.810228][ T7527] netlink: 100 bytes leftover after parsing attributes in process `syz.1.441'. [ 109.285583][ T7560] bond1 (unregistering): Released all slaves [ 109.461800][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 109.475612][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 109.510806][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 109.537641][ T7580] netlink: 2 bytes leftover after parsing attributes in process `syz.4.455'. [ 109.549167][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 110.323712][ T7621] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 111.269283][ T7597] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 111.440183][ T7630] netem: incorrect ge model size [ 111.530906][ T7630] netem: change failed [ 111.576140][ T7639] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 111.616557][ T7639] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 111.844574][ T7655] __nla_validate_parse: 3 callbacks suppressed [ 111.844592][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 111.862768][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 111.966199][ T7665] netlink: 96 bytes leftover after parsing attributes in process `syz.0.478'. [ 111.967515][ T7666] netlink: 96 bytes leftover after parsing attributes in process `syz.0.478'. [ 111.995380][ T7665] 8021q: VLANs not supported on gre0 [ 112.015772][ T7666] 8021q: VLANs not supported on gre0 [ 112.023225][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.480'. [ 112.034530][ T7669] vxcan1: entered promiscuous mode [ 112.041668][ T7669] vxcan1: entered allmulticast mode [ 112.224881][ T7684] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 112.276019][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.482'. [ 112.304614][ T7684] team0: Port device geneve0 added [ 112.317411][ T3455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.330085][ T3455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.342669][ T3455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.400641][ T3455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.412546][ T7691] tipc: Enabling of bearer rejected, failed to enable media [ 112.491601][ T7696] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 112.515984][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 112.551578][ T7698] vcan1: entered allmulticast mode [ 112.762976][ T7711] netlink: 76 bytes leftover after parsing attributes in process `syz.4.490'. [ 112.793477][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 112.955954][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 113.251098][ T7749] tipc: Enabled bearer , priority 0 [ 113.261126][ T7753] netlink: 'syz.3.502': attribute type 5 has an invalid length. [ 113.272562][ T7749] syzkaller0: entered promiscuous mode [ 113.278295][ T7755] netlink: 'syz.3.502': attribute type 5 has an invalid length. [ 113.287884][ T7749] syzkaller0: entered allmulticast mode [ 113.333779][ T7745] tipc: Resetting bearer [ 113.367411][ T7745] tipc: Disabling bearer [ 113.508848][ T7765] syzkaller1: entered promiscuous mode [ 113.519803][ T7765] syzkaller1: entered allmulticast mode [ 113.570650][ T7776] tipc: Enabled bearer , priority 0 [ 113.580206][ T7776] syzkaller0: entered promiscuous mode [ 113.596245][ T7776] syzkaller0: entered allmulticast mode [ 113.682764][ T7776] tipc: Resetting bearer [ 113.708933][ T7774] tipc: Resetting bearer [ 113.754844][ T7774] tipc: Disabling bearer [ 113.863150][ T7797] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 113.974097][ T7803] macvtap1: entered promiscuous mode [ 113.981078][ T7803] vlan0: entered promiscuous mode [ 114.001688][ T7803] macvtap1: entered allmulticast mode [ 114.020745][ T7803] vlan0: entered allmulticast mode [ 114.033517][ T7803] veth0_vlan: entered allmulticast mode [ 114.258134][ T7826] netlink: 'syz.4.525': attribute type 32 has an invalid length. [ 114.268409][ T7826] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 114.861633][ T7870] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 115.299794][ T7899] netlink: 'syz.4.541': attribute type 58 has an invalid length. [ 115.512536][ T7915] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.933956][ T7932] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 116.020656][ T7935] syzkaller0: entered promiscuous mode [ 116.039548][ T7935] syzkaller0: entered allmulticast mode [ 116.597108][ T7962] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 116.651561][ T7962] bond1: (slave gretap1): making interface the new active one [ 116.660201][ T7962] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 116.664484][ T7965] netlink: 'syz.1.559': attribute type 11 has an invalid length. [ 116.673761][ T7962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.899369][ T7982] veth1_macvtap: left promiscuous mode [ 116.985824][ T7982] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 117.000216][ T7982] __nla_validate_parse: 17 callbacks suppressed [ 117.000233][ T7982] netlink: 52 bytes leftover after parsing attributes in process `syz.3.565'. [ 117.142349][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 117.333035][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.340366][ T8006] IPv6: NLM_F_CREATE should be set when creating new route [ 117.499439][ T8012] Bluetooth: MGMT ver 1.23 [ 117.610452][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.576'. [ 118.008956][ T8031] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 118.271251][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 118.314157][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 118.377277][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 118.423232][ T8046] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 118.451659][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 118.463119][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 118.509351][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 118.518822][ T1146] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.531503][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 118.541476][ T1146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.572346][ T1146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.592104][ T1146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.604740][ T8062] 8021q: VLANs not supported on ip_vti0 [ 119.160324][ T8102] netlink: 'syz.0.606': attribute type 13 has an invalid length. [ 119.171776][ T8102] macvtap0: entered allmulticast mode [ 119.180334][ T8102] macvtap0: refused to change device tx_queue_len [ 119.277142][ T8101] tap0: tun_chr_ioctl cmd 1074025677 [ 119.283264][ T8101] tap0: linktype set to 65534 [ 119.520547][ T8125] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 119.570476][ T8125] team_slave_0: entered promiscuous mode [ 119.576484][ T8125] team_slave_1: entered promiscuous mode [ 119.675058][ T8136] netlink: 'syz.2.617': attribute type 13 has an invalid length. [ 119.682911][ T8136] netlink: 'syz.2.617': attribute type 58 has an invalid length. [ 119.756758][ T8139] veth0_macvtap: left promiscuous mode [ 119.926620][ T8158] nftables ruleset with unbound set [ 120.175640][ T8166] tipc: Started in network mode [ 120.187192][ T8166] tipc: Node identity 32feb18157ad, cluster identity 4711 [ 120.194667][ T8166] tipc: Enabled bearer , priority 0 [ 120.208257][ T8166] syzkaller0: entered promiscuous mode [ 120.213854][ T8166] syzkaller0: entered allmulticast mode [ 120.222677][ T8170] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 120.302056][ T8170] netlink: 'syz.1.630': attribute type 4 has an invalid length. [ 120.394360][ T8180] openvswitch: netlink: IP tunnel dst address not specified [ 120.471144][ T8174] syzkaller0: entered allmulticast mode [ 120.482738][ T8163] tipc: Resetting bearer [ 120.499310][ T8163] tipc: Disabling bearer [ 120.513162][ T8184] openvswitch: netlink: IPv6 tunnel dst address is zero [ 122.145744][ T8205] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 122.154681][ T8205] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 122.358534][ T8216] syzkaller0: entered promiscuous mode [ 122.364132][ T8216] syzkaller0: entered allmulticast mode [ 122.545294][ T8230] sit1: entered promiscuous mode [ 122.553163][ T8230] sit1: entered allmulticast mode [ 122.647774][ T8243] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 123.187496][ T8264] tipc: Enabling of bearer rejected, failed to enable media [ 123.320964][ T8271] __nla_validate_parse: 13 callbacks suppressed [ 123.320982][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 123.347474][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 123.529258][ T8280] syzkaller0: entered promiscuous mode [ 123.536307][ T8280] syzkaller0: entered allmulticast mode [ 123.640298][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 123.720478][ T8286] tipc: Started in network mode [ 123.725684][ T8286] tipc: Node identity 9eaece18d3d2, cluster identity 4711 [ 123.733661][ T8286] tipc: Enabled bearer , priority 0 [ 123.747936][ T8286] syzkaller0: entered promiscuous mode [ 123.753442][ T8286] syzkaller0: entered allmulticast mode [ 123.775483][ T8285] tipc: Resetting bearer [ 123.815605][ T8285] tipc: Disabling bearer [ 123.829014][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'. [ 123.830749][ T8296] netlink: 'syz.0.670': attribute type 83 has an invalid length. [ 123.849638][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 123.859539][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 123.872033][ T8297] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 124.002136][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 124.012747][ T8312] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.125245][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 124.258807][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 124.299144][ T8335] netlink: 'syz.1.681': attribute type 21 has an invalid length. [ 124.305427][ T8330] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.410432][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 124.512196][ T8346] netlink: zone id is out of range [ 124.521545][ T8346] netlink: zone id is out of range [ 124.528807][ T8346] netlink: zone id is out of range [ 124.534526][ T8346] netlink: zone id is out of range [ 124.540292][ T8346] netlink: zone id is out of range [ 124.573482][ T8341] gtp0: entered promiscuous mode [ 124.584299][ T8341] gtp0: entered allmulticast mode [ 125.005777][ T8372] pim6reg1: entered promiscuous mode [ 125.011114][ T8372] pim6reg1: entered allmulticast mode [ 125.716452][ T8424] macsec0: entered promiscuous mode [ 125.721900][ T8424] macsec0: entered allmulticast mode [ 125.740310][ T8424] veth1_macvtap: entered allmulticast mode [ 125.750788][ T8424] bridge0: port 3(macsec0) entered blocking state [ 125.757756][ T8424] bridge0: port 3(macsec0) entered disabled state [ 125.881085][ T8438] netlink: 'syz.0.716': attribute type 39 has an invalid length. [ 125.899083][ T8432] veth3: entered promiscuous mode [ 125.951167][ T8435] gretap1: entered allmulticast mode [ 126.163019][ T8455] net_ratelimit: 1 callbacks suppressed [ 126.163037][ T8455] openvswitch: netlink: Flow key attr not present in new flow. [ 126.433777][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.801398][ T8501] sock: sock_set_timeout: `syz.3.738' (pid 8501) tries to set negative timeout [ 126.816187][ T8501] delete_channel: no stack [ 126.975664][ T8512] netlink: 'syz.1.742': attribute type 23 has an invalid length. [ 126.985345][ T8512] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 127.016781][ T8512] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 127.368493][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.381959][ T8537] 8021q: VLANs not supported on lo [ 127.427779][ T8540] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 127.453627][ T8542] tc_dump_action: action bad kind [ 127.478415][ T8540] bond2: (slave bridge4): making interface the new active one [ 127.488261][ T8540] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 127.514188][ T8545] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 127.740181][ T8560] delete_channel: no stack [ 128.343760][ T8614] __nla_validate_parse: 17 callbacks suppressed [ 128.343773][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'. [ 128.373194][ T8614] bridge0: port 1(batadv1) entered blocking state [ 128.380124][ T8614] bridge0: port 1(batadv1) entered disabled state [ 128.387382][ T8614] batadv1: entered allmulticast mode [ 128.396147][ T8614] batadv1: entered promiscuous mode [ 128.877017][ T1146] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 128.886930][ T1146] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 129.234423][ T8644] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.782'. [ 129.237306][ T8642] netlink: 'syz.3.781': attribute type 25 has an invalid length. [ 129.404193][ T8653] netlink: 148 bytes leftover after parsing attributes in process `syz.2.788'. [ 129.473305][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 129.749895][ T8679] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 129.800395][ T8679] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 129.842720][ T8679] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 129.852621][ T8679] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 129.919862][ T8689] : entered promiscuous mode [ 130.033898][ T8691] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.061356][ T8701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.802'. [ 130.275569][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 130.340197][ T8713] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 130.348452][ T8713] netlink: 224 bytes leftover after parsing attributes in process `syz.4.808'. [ 130.358186][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 130.369882][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.808'. [ 130.657874][ T8721] sch_fq: defrate 0 ignored. [ 130.930664][ T8730] syzkaller0: entered promiscuous mode [ 130.937432][ T8730] syzkaller0: entered allmulticast mode [ 130.976044][ T8730] netlink: 184 bytes leftover after parsing attributes in process `syz.3.813'. [ 131.007767][ T8735] nbd: must specify at least one socket [ 131.210068][ T8744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.217415][ T8744] IPv6: NLM_F_CREATE should be set when creating new route [ 132.860587][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.290250][ T8828] netlink: 'syz.0.840': attribute type 29 has an invalid length. [ 133.574214][ T8839] __nla_validate_parse: 2 callbacks suppressed [ 133.574240][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 133.828113][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 134.106440][ T8860] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 134.163704][ T8862] syzkaller0: entered promiscuous mode [ 134.170629][ T8862] syzkaller0: entered allmulticast mode [ 134.181095][ T8860] tipc: Started in network mode [ 134.186648][ T8860] tipc: Node identity 420a6ab91114, cluster identity 4711 [ 134.194073][ T8860] tipc: Enabled bearer , priority 0 [ 134.225325][ T8860] tipc: Resetting bearer [ 134.251871][ T8860] tipc: Disabling bearer [ 134.367020][ T8870] netlink: 348 bytes leftover after parsing attributes in process `syz.3.852'. [ 134.406933][ T8868] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 134.520635][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 134.576274][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 134.600420][ T8886] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 134.791592][ T8898] bridge_slave_0: left allmulticast mode [ 134.806373][ T8898] bridge_slave_0: left promiscuous mode [ 134.818437][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.508974][ T8898] bridge_slave_1: left allmulticast mode [ 137.523320][ T8898] bridge_slave_1: left promiscuous mode [ 137.531102][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.551447][ T8898] bond0: (slave bond_slave_0): Releasing backup interface [ 137.664316][ T8898] bond0: (slave bond_slave_1): Releasing backup interface [ 137.693447][ T8898] team0: Port device team_slave_0 removed [ 137.708002][ T8898] team0: Port device team_slave_1 removed [ 137.720699][ T8898] bridge0: port 3(macsec0) entered disabled state [ 137.756825][ T8898] team0: Port device geneve0 removed [ 137.780657][ T8898] bond2: (slave gretap2): Releasing active interface [ 138.206369][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.265661][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 138.281883][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.308767][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.380334][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.512119][ T8941] pim6reg527: entered allmulticast mode [ 138.532911][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 138.728992][ T8954] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 138.737401][ T8954] netlink: 'syz.2.875': attribute type 4 has an invalid length. [ 138.782684][ T8957] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 138.791588][ T8954] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.875'. [ 138.795318][ T5941] IPVS: starting estimator thread 0... [ 138.810299][ T8958] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 138.821387][ T8957] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 138.872233][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.877'. [ 138.883430][ T8957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.914287][ T8966] netlink: 71 bytes leftover after parsing attributes in process `syz.3.878'. [ 138.923388][ T8959] IPVS: using max 40 ests per chain, 96000 per kthread [ 138.940160][ T8958] bond3: (slave geneve2): making interface the new active one [ 138.950010][ T8958] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 138.993482][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 139.458370][ T9003] netlink: 'syz.0.885': attribute type 2 has an invalid length. [ 139.564654][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 139.661012][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.891'. [ 139.790365][ T9020] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 139.830061][ T9020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.854108][ T9020] bond2: (slave geneve2): making interface the new active one [ 139.864417][ T9020] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 139.928557][ T9025] netlink: 'syz.1.895': attribute type 7 has an invalid length. [ 140.332131][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 140.351557][ T9037] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.398491][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 140.444880][ T9037] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.541236][ T9057] netlink: 'syz.0.902': attribute type 5 has an invalid length. [ 140.741596][ T9062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.751628][ T9066] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 140.808382][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 140.956174][ T9081] ªªªªªª: renamed from vlan0 [ 141.023806][ T9088] sock: sock_set_timeout: `syz.2.911' (pid 9088) tries to set negative timeout [ 141.045177][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 141.416515][ T9124] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 141.509540][ T9129] syzkaller1: entered promiscuous mode [ 141.545482][ T9129] syzkaller1: entered allmulticast mode [ 141.608848][ T9130] team0: Device ip6gre1 is of different type [ 141.734689][ T9141] netlink: 'syz.0.927': attribute type 14 has an invalid length. [ 141.973161][ T9150] team0: Device gtp0 is of different type [ 142.030184][ T9152] tipc: Enabled bearer , priority 0 [ 142.042639][ T9147] syzkaller0: entered promiscuous mode [ 142.054194][ T9147] syzkaller0: entered allmulticast mode [ 142.101492][ T9147] tipc: Resetting bearer [ 142.144468][ T9146] tipc: Resetting bearer [ 142.245831][ T9146] tipc: Disabling bearer [ 142.439757][ T9163] pim6reg1: entered promiscuous mode [ 142.451713][ T9163] pim6reg1: entered allmulticast mode [ 142.877258][ T9203] netlink: 'syz.0.945': attribute type 8 has an invalid length. [ 143.007660][ T9209] macvtap0: left allmulticast mode [ 143.014069][ T9209] veth1_macvtap: left allmulticast mode [ 143.026577][ T9209] macsec0: left promiscuous mode [ 143.031635][ T9209] macsec0: left allmulticast mode [ 143.064031][ T9209] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 143.070968][ T9216] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 143.090998][ T9209] geneve2: left promiscuous mode [ 143.108339][ T9209] geneve2: left allmulticast mode [ 143.169257][ T9209] gtp0: left promiscuous mode [ 143.184170][ T9209] gtp0: left allmulticast mode [ 143.201027][ T9209] gretap1: left promiscuous mode [ 143.215834][ T9209] gretap1: left allmulticast mode [ 143.250998][ T9209] gretap2: left promiscuous mode [ 143.302248][ T9209] sit1: left promiscuous mode [ 143.334178][ T9209] sit1: left allmulticast mode [ 143.389016][ T9215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.445610][ T1146] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 143.497704][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 143.639570][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 143.676234][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 143.882436][ T9243] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 144.026810][ T9254] __nla_validate_parse: 10 callbacks suppressed [ 144.026828][ T9254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.959'. [ 144.045406][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 144.055622][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'. [ 144.072952][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 144.089172][ T9254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.418549][ T9277] netlink: 256 bytes leftover after parsing attributes in process `syz.4.968'. [ 144.532911][ T9280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.679223][ T9296] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 144.813510][ T9305] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 144.823775][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 145.036949][ T9320] tc_dump_action: action bad kind [ 145.319548][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 145.334218][ T9339] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 145.354356][ T9339] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 145.362829][ T9339] gretap2: entered promiscuous mode [ 145.369372][ T9339] gretap2: entered allmulticast mode [ 145.470300][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 145.641923][ T9360] openvswitch: netlink: Missing key (keys=40, expected=80) [ 145.654267][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.796251][ T9366] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 145.833911][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 145.893685][ T9367] gretap3: entered promiscuous mode [ 146.540967][ T9397] bond3: entered promiscuous mode [ 146.563007][ T9397] bridge0: port 3(bond3) entered blocking state [ 146.572481][ T9397] bridge0: port 3(bond3) entered disabled state [ 146.581091][ T9397] bond3: entered allmulticast mode [ 146.642732][ T9419] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1015'. [ 146.816454][ T9432] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.942403][ T9436] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 147.264229][ T9453] tipc: Enabled bearer , priority 0 [ 147.289484][ T9453] syzkaller0: entered promiscuous mode [ 147.302595][ T9453] syzkaller0: entered allmulticast mode [ 147.394152][ T9461] tipc: Resetting bearer [ 147.451239][ T9451] tipc: Resetting bearer [ 147.469380][ T9451] tipc: Disabling bearer [ 147.775379][ T9481] GUP no longer grows the stack in syz.1.1037 (9481): 200000003000-20000000a000 (200000001000) [ 147.793666][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.1.1037 Not tainted syzkaller #0 PREEMPT(full) [ 147.793693][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.793710][ T9481] Call Trace: [ 147.793718][ T9481] [ 147.793727][ T9481] dump_stack_lvl+0x189/0x250 [ 147.793763][ T9481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.793784][ T9481] ? __pfx__printk+0x10/0x10 [ 147.793804][ T9481] ? find_vma+0xe7/0x160 [ 147.793826][ T9481] ? __lock_acquire+0xab9/0xd20 [ 147.793869][ T9481] __get_user_pages+0x24d0/0x2ce0 [ 147.793894][ T9481] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 147.793945][ T9481] ? rcu_is_watching+0x15/0xb0 [ 147.793970][ T9481] __gup_longterm_locked+0xde9/0x1660 [ 147.794007][ T9481] ? sanity_check_pinned_pages+0x123a/0x1300 [ 147.794038][ T9481] gup_fast_fallback+0x1e6a/0x2010 [ 147.794096][ T9481] ? __pfx_gup_fast_fallback+0x10/0x10 [ 147.794114][ T9481] ? stack_trace_save+0x9c/0xe0 [ 147.794133][ T9481] ? __pfx_stack_trace_save+0x10/0x10 [ 147.794163][ T9481] ? pin_user_pages_fast+0x4d/0xb0 [ 147.794185][ T9481] iov_iter_extract_pages+0x35a/0x5e0 [ 147.794216][ T9481] extract_iter_to_sg+0xe46/0x24e0 [ 147.794259][ T9481] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 147.794304][ T9481] ? __asan_memset+0x22/0x50 [ 147.794327][ T9481] af_alg_get_rsgl+0x436/0x810 [ 147.794370][ T9481] aead_recvmsg+0x4cc/0x13f0 [ 147.794418][ T9481] ? __pfx_aead_recvmsg+0x10/0x10 [ 147.794444][ T9481] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 147.794465][ T9481] ? __pfx_aead_recvmsg+0x10/0x10 [ 147.794488][ T9481] sock_recvmsg_nosec+0x183/0x1c0 [ 147.794516][ T9481] ____sys_recvmsg+0x3aa/0x460 [ 147.794546][ T9481] ? __pfx_____sys_recvmsg+0x10/0x10 [ 147.794585][ T9481] ? import_iovec+0x74/0xa0 [ 147.794609][ T9481] ___sys_recvmsg+0x1b5/0x510 [ 147.794636][ T9481] ? __pfx____sys_recvmsg+0x10/0x10 [ 147.794694][ T9481] ? __might_fault+0xb0/0x130 [ 147.794721][ T9481] do_recvmmsg+0x307/0x770 [ 147.794751][ T9481] ? __pfx_do_recvmmsg+0x10/0x10 [ 147.794769][ T9481] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 147.794804][ T9481] ? __pfx_do_futex+0x10/0x10 [ 147.794841][ T9481] __x64_sys_recvmmsg+0x190/0x240 [ 147.794871][ T9481] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 147.794888][ T9481] ? rcu_is_watching+0x15/0xb0 [ 147.794912][ T9481] ? do_syscall_64+0xbe/0x3b0 [ 147.794933][ T9481] do_syscall_64+0xfa/0x3b0 [ 147.794947][ T9481] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.794970][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.794986][ T9481] ? clear_bhb_loop+0x60/0xb0 [ 147.795007][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.795023][ T9481] RIP: 0033:0x7f08d758ebe9 [ 147.795047][ T9481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.795062][ T9481] RSP: 002b:00007f08d8422038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 147.795082][ T9481] RAX: ffffffffffffffda RBX: 00007f08d77c5fa0 RCX: 00007f08d758ebe9 [ 147.795094][ T9481] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b [ 147.795105][ T9481] RBP: 00007f08d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 147.795115][ T9481] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 147.795126][ T9481] R13: 00007f08d77c6038 R14: 00007f08d77c5fa0 R15: 00007fff6f8033c8 [ 147.795157][ T9481] [ 149.014989][ T9546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.119548][ T9559] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 149.179363][ T9559] bond4: (slave gretap1): making interface the new active one [ 149.193761][ T9559] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 149.213765][ T9559] __nla_validate_parse: 9 callbacks suppressed [ 149.213794][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1063'. [ 149.236549][ T9559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.249585][ T9563] syzkaller0: entered allmulticast mode [ 149.445112][ T9573] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 149.447183][ T9574] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 149.648151][ T9570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.679695][ T9570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.791191][ T9570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.833134][ T9570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.901795][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 150.018685][ T9570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.066859][ T9570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.078236][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 150.138142][ T9613] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.157697][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 150.169157][ T9570] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.171364][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 150.180229][ T9570] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.201541][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 150.225291][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 150.250622][ T9602] tipc: Enabled bearer , priority 0 [ 150.318365][ T9601] tipc: Disabling bearer [ 150.344370][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 150.397616][ T9625] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1080'. [ 150.429256][ T9625] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1080'. [ 150.464119][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.479235][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.495362][ T9619] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 150.519949][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.531426][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.569058][ T9629] syzkaller1: entered promiscuous mode [ 150.574567][ T9629] syzkaller1: entered allmulticast mode [ 150.600436][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.618622][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.644112][ T9633] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 150.664136][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.675725][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.682486][ T9639] netlink: 'syz.0.1086': attribute type 33 has an invalid length. [ 151.299334][ T9681] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 151.433043][ T9633] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 151.758068][ T9709] netlink: 'syz.1.1110': attribute type 18 has an invalid length. [ 151.872263][ T9719] TCP: TCP_TX_DELAY enabled [ 152.102865][ T9731] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.629077][ T9760] openvswitch: netlink: Unknown key attributes 2 [ 152.647900][ T9753] syzkaller0: entered promiscuous mode [ 152.656583][ T9753] syzkaller0: entered allmulticast mode [ 152.685365][ T5868] Bluetooth: hci2: command 0x0401 tx timeout [ 154.284578][ T9762] tipc: Enabled bearer , priority 0 [ 154.335637][ T9786] tipc: Resetting bearer [ 154.356835][ T9752] tipc: Resetting bearer [ 154.396993][ T9752] tipc: Disabling bearer [ 154.468212][ T9804] Driver unsupported XDP return value 0 on prog (id 308) dev N/A, expect packet loss! [ 154.501801][ T9802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.522250][ T9802] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.693601][ T9815] __nla_validate_parse: 10 callbacks suppressed [ 154.693619][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1137'. [ 154.716031][ T9813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1136'. [ 154.971713][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 155.053298][ T9843] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 155.316358][ T9872] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 155.346294][ T9872] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1152'. [ 155.350538][ T9875] syz.3.1152: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.397174][ T9878] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1155'. [ 155.444633][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.3.1152 Not tainted syzkaller #0 PREEMPT(full) [ 155.444657][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.444667][ T9875] Call Trace: [ 155.444673][ T9875] [ 155.444681][ T9875] dump_stack_lvl+0x189/0x250 [ 155.444709][ T9875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.444728][ T9875] ? __pfx__printk+0x10/0x10 [ 155.444750][ T9875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 155.444770][ T9875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 155.444789][ T9875] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 155.444809][ T9875] warn_alloc+0x214/0x310 [ 155.444833][ T9875] ? stack_depot_save_flags+0x40/0x860 [ 155.444856][ T9875] ? __pfx_warn_alloc+0x10/0x10 [ 155.444880][ T9875] ? kasan_save_track+0x4f/0x80 [ 155.444900][ T9875] ? xskq_create+0x56/0x170 [ 155.444919][ T9875] ? xsk_init_queue+0xb0/0x110 [ 155.444937][ T9875] ? xsk_setsockopt+0x4dc/0x8d0 [ 155.444955][ T9875] ? do_sock_setsockopt+0x179/0x1b0 [ 155.444970][ T9875] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 155.444984][ T9875] ? do_syscall_64+0xfa/0x3b0 [ 155.444998][ T9875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.445023][ T9875] __vmalloc_node_range_noprof+0x125/0x12f0 [ 155.445082][ T9875] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.445110][ T9875] ? __kasan_kmalloc+0x93/0xb0 [ 155.445134][ T9875] vmalloc_user_noprof+0xad/0xf0 [ 155.445155][ T9875] ? xskq_create+0xbf/0x170 [ 155.445176][ T9875] xskq_create+0xbf/0x170 [ 155.445200][ T9875] xsk_init_queue+0xb0/0x110 [ 155.445223][ T9875] xsk_setsockopt+0x4dc/0x8d0 [ 155.445247][ T9875] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.445274][ T9875] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.445301][ T9875] ? aa_sock_opt_perm+0xff/0x1b0 [ 155.445320][ T9875] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.445336][ T9875] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.445358][ T9875] do_sock_setsockopt+0x179/0x1b0 [ 155.445379][ T9875] __x64_sys_setsockopt+0x13f/0x1b0 [ 155.445403][ T9875] do_syscall_64+0xfa/0x3b0 [ 155.445417][ T9875] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.445438][ T9875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.445454][ T9875] ? clear_bhb_loop+0x60/0xb0 [ 155.445475][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.445490][ T9875] RIP: 0033:0x7fa84bd8ebe9 [ 155.445506][ T9875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.445518][ T9875] RSP: 002b:00007fa84cbc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.445536][ T9875] RAX: ffffffffffffffda RBX: 00007fa84bfc6090 RCX: 00007fa84bd8ebe9 [ 155.445548][ T9875] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 155.445558][ T9875] RBP: 00007fa84be11e19 R08: 0000000000000004 R09: 0000000000000000 [ 155.445568][ T9875] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.445578][ T9875] R13: 00007fa84bfc6128 R14: 00007fa84bfc6090 R15: 00007ffee24bd7b8 [ 155.445608][ T9875] [ 155.514403][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 155.539089][ T9875] Mem-Info: [ 155.539112][ T9875] active_anon:7472 inactive_anon:0 isolated_anon:0 [ 155.539112][ T9875] active_file:2697 inactive_file:39872 isolated_file:0 [ 155.539112][ T9875] unevictable:768 dirty:57 writeback:0 [ 155.539112][ T9875] slab_reclaimable:11994 slab_unreclaimable:111480 [ 155.539112][ T9875] mapped:28963 shmem:1357 pagetables:1143 [ 155.539112][ T9875] sec_pagetables:0 bounce:0 [ 155.539112][ T9875] kernel_misc_reclaimable:0 [ 155.539112][ T9875] free:1308683 free_pcp:16352 free_cma:0 [ 155.539162][ T9875] Node 0 active_anon:29888kB inactive_anon:0kB active_file:10788kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115852kB dirty:224kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.539208][ T9875] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.539250][ T9875] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.539306][ T9875] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 155.539346][ T9875] Node 0 DMA32 free:1329936kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29836kB inactive_anon:0kB active_file:10788kB inactive_file:157724kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:47800kB local_pcp:27428kB free_cma:0kB [ 155.539393][ T9875] lowmem_reserve[]: 0 0 1 1 1 [ 155.539427][ T9875] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 155.539474][ T9875] lowmem_reserve[]: 0 0 0 0 0 [ 155.539511][ T9875] Node 1 Normal free:3889412kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17600kB local_pcp:13088kB free_cma:0kB [ 155.539563][ T9875] lowmem_reserve[]: 0 0 0 [ 155.977702][ T9897] netlink: 'syz.1.1159': attribute type 5 has an invalid length. [ 156.014046][ T9875] 0 0 [ 156.065968][ T9875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.082796][ T9875] Node 0 DMA32: 2624*4kB (UME) 975*8kB (UME) 253*16kB (UM) 376*32kB (UM) 131*64kB (UME) 59*128kB (UME) 11*256kB (UM) 12*512kB (ME) 10*1024kB (ME) 7*2048kB (ME) 305*4096kB (UM) = 1333128kB [ 156.175659][ T9875] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 156.201461][ T9875] Node 1 Normal: 173*4kB (UME) 44*8kB (UME) 47*16kB (UME) 112*32kB (UME) 32*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3889412kB [ 156.267447][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 156.274665][ T9875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.291320][ T9875] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.300956][ T9875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.312631][ T9875] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.322997][ T9875] 43922 total pagecache pages [ 156.335965][ T9875] 0 pages in swap cache [ 156.402925][ T9875] Free swap = 124996kB [ 156.418100][ T9875] Total swap = 124996kB [ 156.426667][ T9875] 2097051 pages RAM [ 156.432260][ T9875] 0 pages HighMem/MovableOnly [ 156.439377][ T9875] 425662 pages reserved [ 156.443594][ T9875] 0 pages cma reserved [ 156.508806][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'. [ 156.621002][ T9939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1173'. [ 156.642578][ T9939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1173'. [ 158.331748][T10040] netlink: 'syz.1.1206': attribute type 5 has an invalid length. [ 158.379722][T10042] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 158.709527][T10059] macvtap2: entered allmulticast mode [ 158.784422][T10064] netlink: 'syz.1.1214': attribute type 29 has an invalid length. [ 159.138071][T10077] nft_compat: unsupported protocol 1 [ 159.226260][T10085] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 159.299189][T10085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.358808][T10088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.367190][T10088] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.382131][T10088] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 159.407883][T10095] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 159.448855][T10085] veth5: entered promiscuous mode [ 159.460232][T10085] bond4: (slave veth5): Enslaving as an active interface with a down link [ 159.486429][T10085] vlan2: entered allmulticast mode [ 159.491961][T10085] bond4: entered allmulticast mode [ 159.603041][T10107] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.618991][T10107] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.627924][T10107] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.684632][T10111] tc_dump_action: action bad kind [ 159.764636][T10115] netlink: 'syz.0.1225': attribute type 7 has an invalid length. [ 159.838779][T10117] syzkaller0: entered promiscuous mode [ 159.844434][T10117] syzkaller0: entered allmulticast mode [ 159.862357][T10117] wlan0: mtu greater than device maximum [ 160.161622][T10127] __nla_validate_parse: 8 callbacks suppressed [ 160.161640][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1233'. [ 160.170050][T10123] openvswitch: netlink: IP tunnel dst address not specified [ 160.240296][T10123] openvswitch: netlink: IP tunnel dst address not specified [ 160.435146][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 160.449582][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 160.589207][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 160.600589][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 160.615052][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 160.818456][T10169] syzkaller0: entered promiscuous mode [ 160.824059][T10169] syzkaller0: entered allmulticast mode [ 160.865969][T10173] tipc: Enabled bearer , priority 0 [ 160.931830][T10154] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 161.028789][T10153] tipc: Resetting bearer [ 161.079872][T10191] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 161.080341][T10153] tipc: Disabling bearer [ 161.096665][T10191] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1249'. [ 161.264737][T10199] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1252'. [ 161.282394][T10199] gretap0: entered promiscuous mode [ 161.380603][T10206] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 161.813714][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 161.876120][T10240] bridge2: port 1(veth5) entered blocking state [ 161.905444][T10240] bridge2: port 1(veth5) entered disabled state [ 161.911941][T10240] veth5: entered allmulticast mode [ 161.931267][T10240] veth5: entered promiscuous mode [ 161.981308][T10244] bridge2: port 2(veth0_to_bond) entered blocking state [ 162.006707][T10244] bridge2: port 2(veth0_to_bond) entered disabled state [ 162.016987][T10251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.027184][T10244] veth0_to_bond: entered allmulticast mode [ 162.062754][T10244] veth0_to_bond: entered promiscuous mode [ 162.096258][T10247] pim6reg: entered allmulticast mode [ 162.249659][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 162.341310][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 162.398266][T10279] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 162.421157][T10281] netlink: 'syz.1.1278': attribute type 83 has an invalid length. [ 162.608686][T10297] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 162.686069][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 162.722786][T10299] team0: Device wireguard0 is of different type [ 162.735352][T10303] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 162.786541][T10302] bond2 (unregistering): Released all slaves [ 162.897871][T10303] bond2 (unregistering): Released all slaves [ 163.111020][T10322] netlink: 'syz.1.1290': attribute type 9 has an invalid length. [ 163.122153][T10322] netlink: 'syz.1.1290': attribute type 9 has an invalid length. [ 163.153717][T10317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.192253][T10317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.297842][T10334] bond4: entered promiscuous mode [ 163.303044][T10334] bond4: entered allmulticast mode [ 163.309252][T10334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.348597][T10340] netlink: 'syz.1.1292': attribute type 16 has an invalid length. [ 163.384364][T10340] netlink: 'syz.1.1292': attribute type 17 has an invalid length. [ 163.394496][T10341] netlink: 'syz.3.1294': attribute type 2 has an invalid length. [ 163.513761][T10334] bond4 (unregistering): Released all slaves [ 163.580687][T10340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.959116][T10375] netlink: zone id is out of range [ 163.974059][T10375] netlink: zone id is out of range [ 163.979925][T10375] netlink: zone id is out of range [ 163.985797][T10375] netlink: zone id is out of range [ 163.991088][T10375] netlink: zone id is out of range [ 164.001926][T10375] netlink: zone id is out of range [ 164.227712][T10395] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 164.523491][T10422] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:19492 [ 164.907744][T10448] net_ratelimit: 19 callbacks suppressed [ 164.907769][T10448] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 165.343241][T10484] tipc: Enabled bearer , priority 0 [ 165.368324][T10484] syzkaller0: entered promiscuous mode [ 165.374347][T10484] syzkaller0: entered allmulticast mode [ 165.404716][T10484] tipc: Resetting bearer [ 165.415262][T10483] tipc: Resetting bearer [ 165.443484][T10483] tipc: Disabling bearer [ 165.651349][T10502] __nla_validate_parse: 13 callbacks suppressed [ 165.651368][T10502] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1340'. [ 165.939586][T10520] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1348'. [ 165.970202][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 166.480103][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 166.537841][T10565] validate_nla: 8 callbacks suppressed [ 166.537859][T10565] netlink: 'syz.3.1362': attribute type 83 has an invalid length. [ 166.787005][T10583] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 166.830922][T10583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.883964][T10585] hsr_slave_1 (unregistering): left promiscuous mode [ 166.991622][T10600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'. [ 167.072573][T10601] veth5: entered promiscuous mode [ 167.125900][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 167.303768][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 167.725744][T10630] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1380'. [ 167.850800][T10653] tipc: Enabled bearer , priority 0 [ 167.859118][T10653] syzkaller0: entered promiscuous mode [ 167.864621][T10653] syzkaller0: entered allmulticast mode [ 167.901934][T10653] tipc: Resetting bearer [ 167.914600][T10652] tipc: Resetting bearer [ 167.941887][T10652] tipc: Disabling bearer [ 168.100821][T10665] tipc: Enabled bearer , priority 0 [ 168.108980][T10665] syzkaller0: entered promiscuous mode [ 168.114724][T10665] syzkaller0: entered allmulticast mode [ 168.140506][T10665] tipc: Resetting bearer [ 168.151030][T10664] tipc: Resetting bearer [ 168.171548][T10664] tipc: Disabling bearer [ 168.475697][T10668] block nbd1: server does not support multiple connections per device. [ 168.495428][T10668] block nbd1: shutting down sockets [ 168.560050][T10674] tipc: Enabled bearer , priority 0 [ 168.570345][T10674] syzkaller0: entered promiscuous mode [ 168.577251][T10674] syzkaller0: entered allmulticast mode [ 168.611500][T10679] netlink: 'syz.1.1398': attribute type 4 has an invalid length. [ 168.628773][T10673] tipc: Resetting bearer [ 168.632260][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 168.638971][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 168.681347][T10673] tipc: Disabling bearer [ 169.097765][T10717] xfrm1: entered allmulticast mode [ 169.311603][T10728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.389228][T10734] netlink: 'syz.0.1416': attribute type 4 has an invalid length. [ 169.410166][T10735] netlink: 'syz.0.1416': attribute type 4 has an invalid length. [ 169.422530][T10734] netlink: 'syz.0.1416': attribute type 4 has an invalid length. [ 169.538262][T10748] tipc: Enabled bearer , priority 0 [ 169.576481][T10752] syzkaller0: entered promiscuous mode [ 169.599179][T10752] syzkaller0: entered allmulticast mode [ 169.745830][T10752] tipc: Resetting bearer [ 169.790674][T10752] tipc: Disabling bearer [ 169.999737][T10780] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 170.018643][T10780] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 170.225926][T10794] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 170.760823][T10810] syz.0.1440: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 170.798831][T10810] CPU: 1 UID: 0 PID: 10810 Comm: syz.0.1440 Not tainted syzkaller #0 PREEMPT(full) [ 170.798857][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.798867][T10810] Call Trace: [ 170.798874][T10810] [ 170.798882][T10810] dump_stack_lvl+0x189/0x250 [ 170.798909][T10810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.798929][T10810] ? __pfx__printk+0x10/0x10 [ 170.798951][T10810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 170.798971][T10810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 170.798992][T10810] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 170.799014][T10810] warn_alloc+0x214/0x310 [ 170.799043][T10810] ? __pfx_warn_alloc+0x10/0x10 [ 170.799075][T10810] ? __get_vm_area_node+0x28f/0x300 [ 170.799097][T10810] ? hash_ipportip_create+0x358/0xfe0 [ 170.799119][T10810] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 170.799140][T10810] ? do_syscall_64+0xfa/0x3b0 [ 170.799192][T10810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 170.799220][T10810] ? rcu_is_watching+0x15/0xb0 [ 170.799238][T10810] ? hash_ipportip_create+0x358/0xfe0 [ 170.799254][T10810] ? hash_ipportip_create+0x358/0xfe0 [ 170.799269][T10810] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 170.799292][T10810] ? hash_ipportip_create+0x358/0xfe0 [ 170.799310][T10810] ? hash_ipportip_create+0x2fe/0xfe0 [ 170.799333][T10810] hash_ipportip_create+0x358/0xfe0 [ 170.799360][T10810] ? __nla_parse+0x40/0x60 [ 170.799383][T10810] ? __pfx_hash_ipportip_create+0x10/0x10 [ 170.799403][T10810] ip_set_create+0xa97/0x1940 [ 170.799423][T10810] ? ip_set_create+0x4a2/0x1940 [ 170.799455][T10810] ? __pfx_ip_set_create+0x10/0x10 [ 170.799514][T10810] nfnetlink_rcv_msg+0xb4d/0x1130 [ 170.799536][T10810] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 170.799576][T10810] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 170.799624][T10810] ? __kernel_text_address+0xd/0x40 [ 170.799644][T10810] ? unwind_get_return_address+0x4d/0x90 [ 170.799662][T10810] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.799681][T10810] ? arch_stack_walk+0xfc/0x150 [ 170.799714][T10810] netlink_rcv_skb+0x208/0x470 [ 170.799737][T10810] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 170.799756][T10810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.799786][T10810] ? bpf_lsm_capable+0x9/0x20 [ 170.799804][T10810] ? security_capable+0x7e/0x2e0 [ 170.799837][T10810] nfnetlink_rcv+0x26a/0x2520 [ 170.799857][T10810] ? is_bpf_text_address+0x26/0x2b0 [ 170.799882][T10810] ? kernel_text_address+0xa5/0xe0 [ 170.799902][T10810] ? __kernel_text_address+0xd/0x40 [ 170.799921][T10810] ? unwind_get_return_address+0x4d/0x90 [ 170.799939][T10810] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.799957][T10810] ? arch_stack_walk+0xfc/0x150 [ 170.799991][T10810] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 170.800013][T10810] ? stack_depot_save_flags+0x40/0x860 [ 170.800039][T10810] ? __lock_acquire+0xab9/0xd20 [ 170.800089][T10810] ? __lock_acquire+0xab9/0xd20 [ 170.800122][T10810] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.800151][T10810] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.800189][T10810] netlink_unicast+0x82c/0x9e0 [ 170.800219][T10810] ? __pfx_netlink_unicast+0x10/0x10 [ 170.800243][T10810] ? netlink_sendmsg+0x642/0xb30 [ 170.800256][T10810] ? skb_put+0x11b/0x210 [ 170.800277][T10810] netlink_sendmsg+0x805/0xb30 [ 170.800304][T10810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.800324][T10810] ? aa_sock_msg_perm+0xf1/0x1d0 [ 170.800343][T10810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.800360][T10810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.800377][T10810] __sock_sendmsg+0x21c/0x270 [ 170.800402][T10810] ____sys_sendmsg+0x505/0x830 [ 170.800427][T10810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.800455][T10810] ? import_iovec+0x74/0xa0 [ 170.800479][T10810] ___sys_sendmsg+0x21f/0x2a0 [ 170.800501][T10810] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.800559][T10810] ? __fget_files+0x2a/0x420 [ 170.800580][T10810] ? __fget_files+0x3a0/0x420 [ 170.800614][T10810] __x64_sys_sendmsg+0x19b/0x260 [ 170.800635][T10810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.800665][T10810] ? rcu_is_watching+0x15/0xb0 [ 170.800688][T10810] ? do_syscall_64+0xbe/0x3b0 [ 170.800708][T10810] do_syscall_64+0xfa/0x3b0 [ 170.800722][T10810] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.800743][T10810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.800761][T10810] ? clear_bhb_loop+0x60/0xb0 [ 170.800781][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.800797][T10810] RIP: 0033:0x7fe0feb8ebe9 [ 170.800814][T10810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.800828][T10810] RSP: 002b:00007fe0ff9cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.800847][T10810] RAX: ffffffffffffffda RBX: 00007fe0fedc5fa0 RCX: 00007fe0feb8ebe9 [ 170.800859][T10810] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 170.800870][T10810] RBP: 00007fe0fec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.800880][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.800890][T10810] R13: 00007fe0fedc6038 R14: 00007fe0fedc5fa0 R15: 00007ffce2d54348 [ 170.800921][T10810] [ 170.803251][T10810] Mem-Info: [ 171.151692][T10831] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 171.161187][T10810] active_anon:7405 inactive_anon:0 isolated_anon:0 [ 171.161187][T10810] active_file:2825 inactive_file:39878 isolated_file:0 [ 171.161187][T10810] unevictable:768 dirty:14 writeback:0 [ 171.161187][T10810] slab_reclaimable:11807 slab_unreclaimable:110905 [ 171.161187][T10810] mapped:28959 shmem:1357 pagetables:1127 [ 171.161187][T10810] sec_pagetables:0 bounce:0 [ 171.161187][T10810] kernel_misc_reclaimable:0 [ 171.161187][T10810] free:1300793 free_pcp:23947 free_cma:0 [ 171.378793][T10810] Node 0 active_anon:29620kB inactive_anon:0kB active_file:11300kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115836kB dirty:52kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12700kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.411026][T10810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.448318][T10810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.478575][T10810] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 171.484372][T10810] Node 0 DMA32 free:1298376kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29568kB inactive_anon:0kB active_file:11300kB inactive_file:157748kB unevictable:1536kB writepending:116kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:78876kB local_pcp:50440kB free_cma:0kB [ 171.517728][T10810] lowmem_reserve[]: 0 0 1 1 1 [ 171.522472][T10810] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 171.552287][T10810] lowmem_reserve[]: 0 0 0 0 0 [ 171.557655][T10810] Node 1 Normal free:3889412kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17640kB local_pcp:4544kB free_cma:0kB [ 171.589006][T10810] lowmem_reserve[]: 0 0 0 0 0 [ 171.593706][T10810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.606713][T10810] Node 0 DMA32: 764*4kB (UM) 773*8kB (UME) 392*16kB (UME) 718*32kB (UME) 215*64kB (UME) 46*128kB (UME) 12*256kB (UM) 16*512kB (UME) 14*1024kB (UME) 11*2048kB (UME) 291*4096kB (UM) = 1298200kB [ 171.625960][T10810] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 171.638316][T10810] Node 1 Normal: 173*4kB (UME) 44*8kB (UME) 47*16kB (UME) 112*32kB (UME) 32*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3889412kB [ 171.657136][T10810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.671708][T10810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.681416][T10810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.691083][T10810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.700877][T10810] 44056 total pagecache pages [ 171.705651][T10810] 0 pages in swap cache [ 171.710187][T10810] Free swap = 124996kB [ 171.714339][T10810] Total swap = 124996kB [ 171.718586][T10810] 2097051 pages RAM [ 171.722392][T10810] 0 pages HighMem/MovableOnly [ 171.728127][T10810] 425662 pages reserved [ 171.732295][T10810] 0 pages cma reserved [ 192.946944][T10848] sctp: [Deprecated]: syz.4.1450 (pid 10848) Use of int in maxseg socket option. [ 192.946944][T10848] Use struct sctp_assoc_value instead [ 192.971309][T10850] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 192.980692][T10850] __nla_validate_parse: 9 callbacks suppressed [ 192.980710][T10850] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1449'. [ 193.012515][T10850] netlink: 'syz.3.1449': attribute type 2 has an invalid length. [ 193.049384][T10850] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 193.353997][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 193.407656][T10880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1456'. [ 193.417049][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1456'. [ 193.512703][T10886] geneve2: entered promiscuous mode [ 193.530873][T10886] geneve2: entered allmulticast mode [ 193.599108][ T3455] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.633696][ T3455] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.663951][ T3455] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 193.677401][ T3455] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 194.272519][T10932] nbd: must specify at least one socket [ 194.281550][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1473'. [ 194.315449][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.322234][T10934] netlink: 'syz.3.1474': attribute type 2 has an invalid length. [ 194.749392][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 195.154319][T10990] tipc: Enabled bearer , priority 0 [ 195.162391][T10990] syzkaller0: entered promiscuous mode [ 195.168726][T10990] syzkaller0: entered allmulticast mode [ 195.197696][T10990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1488'. [ 195.262793][T10999] tipc: Resetting bearer [ 195.310428][T10989] tipc: Resetting bearer [ 195.438267][T10989] tipc: Disabling bearer [ 195.470457][T11005] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 195.533865][T11017] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 195.550385][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 195.585320][T11020] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1496'. [ 195.702576][T11017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.734436][T11016] veth0_macvtap: left promiscuous mode [ 195.811932][T11017] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1497'. [ 195.917362][T11022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.938068][T11022] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.962795][T11022] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 196.056125][T11026] veth5: entered promiscuous mode [ 196.065800][T11026] bond5: (slave veth5): Enslaving as an active interface with a down link [ 196.093617][T11049] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 196.257733][T11058] macsec1: entered promiscuous mode [ 196.263186][T11058] macsec1: entered allmulticast mode [ 196.369760][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 196.375943][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 196.456547][T11070] bond0: Error: Cannot enslave bond to itself. [ 196.478600][T11074] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 196.520331][T11079] gtp0: entered promiscuous mode [ 196.526449][T11079] gtp0: entered allmulticast mode [ 196.553451][T11081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.639368][T11094] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 196.869715][T11111] 8021q: VLANs not supported on ip6tnl0 [ 197.623674][T11157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.637257][T11158] netlink: 'syz.4.1540': attribute type 7 has an invalid length. [ 198.158295][T11176] __nla_validate_parse: 11 callbacks suppressed [ 198.158315][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 198.339401][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 198.960900][T11221] sch_fq: defrate 0 ignored. [ 198.976755][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 199.458264][T11253] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1574'. [ 199.619235][T11274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1580'. [ 199.794990][T11282] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 199.823726][T11282] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.870001][T11282] bond6: (slave veth7): Enslaving as an active interface with a down link [ 199.903210][T11282] veth9: entered promiscuous mode [ 199.912831][T11282] bond6: (slave veth9): Enslaving as an active interface with a down link [ 199.980675][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 200.012892][T11288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.070382][T11292] veth7: entered allmulticast mode [ 200.150688][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 200.284025][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1588'. [ 200.325871][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 200.350239][T11302] veth3: entered promiscuous mode [ 200.356083][T11302] veth3: entered allmulticast mode [ 200.496695][T11306] bridge3: port 1(veth9) entered blocking state [ 200.520185][T11306] bridge3: port 1(veth9) entered disabled state [ 200.533469][T11306] veth9: entered allmulticast mode [ 200.544258][T11306] veth9: entered promiscuous mode [ 200.561813][T11313] veth0_to_bond: left allmulticast mode [ 200.580146][T11321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1591'. [ 200.591845][T11313] veth0_to_bond: left promiscuous mode [ 200.617576][T11313] bridge2: port 2(veth0_to_bond) entered disabled state [ 200.659427][T11313] bridge3: port 2(veth0_to_bond) entered blocking state [ 200.669348][T11313] bridge3: port 2(veth0_to_bond) entered disabled state [ 200.676949][T11313] veth0_to_bond: entered allmulticast mode [ 200.692270][T11313] veth0_to_bond: entered promiscuous mode [ 200.699973][T11312] netem: change failed [ 200.898195][T11342] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 201.333025][T11377] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 201.900803][T11406] nbd: device at index 1 is going down [ 202.073809][T11416] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 202.085644][T11416] nbd: couldn't find device at index 1048576 [ 202.096116][T11422] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 202.117919][T11422] nbd: couldn't find device at index 1048576 [ 202.262282][T11428] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 202.353971][T11428] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 202.363496][T11438] netlink: 'syz.2.1632': attribute type 21 has an invalid length. [ 202.873308][T11468] tipc: Enabled bearer , priority 0 [ 202.882113][T11468] syzkaller0: entered promiscuous mode [ 202.888128][T11468] syzkaller0: entered allmulticast mode [ 202.920691][T11468] tipc: Resetting bearer [ 202.929951][T11467] tipc: Resetting bearer [ 202.955751][T11467] tipc: Disabling bearer [ 203.272162][T11480] netlink: 'syz.0.1648': attribute type 16 has an invalid length. [ 203.290024][T11480] netlink: 'syz.0.1648': attribute type 17 has an invalid length. [ 203.312789][T11497] netlink: 'syz.4.1654': attribute type 6 has an invalid length. [ 203.332652][T11497] netlink: 'syz.4.1654': attribute type 6 has an invalid length. [ 203.532700][T11504] sctp: [Deprecated]: syz.3.1656 (pid 11504) Use of int in max_burst socket option. [ 203.532700][T11504] Use struct sctp_assoc_value instead [ 203.601885][T11508] __nla_validate_parse: 12 callbacks suppressed [ 203.601901][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 203.626207][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 203.654163][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 203.679697][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 203.806529][T11508] bridge0: port 1(vlan0) entered blocking state [ 203.813112][T11508] bridge0: port 1(vlan0) entered disabled state [ 203.822950][T11508] vlan0: entered allmulticast mode [ 203.829131][T11508] bridge0: entered allmulticast mode [ 203.840217][T11508] vlan0: left allmulticast mode [ 203.847108][T11508] bridge0: left allmulticast mode [ 203.988973][T11534] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 204.018102][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 204.505581][T11571] veth1_to_hsr: mtu less than device minimum [ 204.564718][T11573] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.1678'. [ 204.857331][T11585] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1682'. [ 204.908934][T11585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.006333][T11595] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1684'. [ 205.036172][T11595] validate_nla: 67 callbacks suppressed [ 205.036188][T11595] netlink: 'syz.1.1684': attribute type 12 has an invalid length. [ 205.110854][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 205.492282][T11618] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 205.542209][T11618] netlink: 'syz.1.1690': attribute type 2 has an invalid length. [ 205.551156][T11618] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 205.665793][T11641] netlink: 'syz.4.1693': attribute type 12 has an invalid length. [ 205.768051][T11646] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 206.185458][T11670] netlink: 'syz.0.1701': attribute type 10 has an invalid length. [ 206.210931][T11656] syzkaller0: entered promiscuous mode [ 206.216804][T11656] syzkaller0: entered allmulticast mode [ 206.229333][T11670] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 206.358098][T11677] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:0 [ 208.247149][T11708] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 208.464047][T11724] FAULT_INJECTION: forcing a failure. [ 208.464047][T11724] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.484381][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.1.1718 Not tainted syzkaller #0 PREEMPT(full) [ 208.484405][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.484415][T11724] Call Trace: [ 208.484422][T11724] [ 208.484430][T11724] dump_stack_lvl+0x189/0x250 [ 208.484456][T11724] ? __pfx____ratelimit+0x10/0x10 [ 208.484478][T11724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.484496][T11724] ? __pfx__printk+0x10/0x10 [ 208.484517][T11724] ? __might_fault+0xb0/0x130 [ 208.484548][T11724] should_fail_ex+0x414/0x560 [ 208.484573][T11724] _copy_from_iter+0x1de/0x1790 [ 208.484597][T11724] ? rcu_is_watching+0x15/0xb0 [ 208.484615][T11724] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 208.484637][T11724] ? __pfx__copy_from_iter+0x10/0x10 [ 208.484655][T11724] ? __build_skb_around+0x257/0x3e0 [ 208.484675][T11724] ? netlink_sendmsg+0x642/0xb30 [ 208.484687][T11724] ? skb_put+0x11b/0x210 [ 208.484706][T11724] netlink_sendmsg+0x6b2/0xb30 [ 208.484731][T11724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.484750][T11724] ? aa_sock_msg_perm+0xf1/0x1d0 [ 208.484773][T11724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.484790][T11724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.484806][T11724] __sock_sendmsg+0x21c/0x270 [ 208.484830][T11724] ____sys_sendmsg+0x505/0x830 [ 208.484850][T11724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.484874][T11724] ? import_iovec+0x74/0xa0 [ 208.484895][T11724] ___sys_sendmsg+0x21f/0x2a0 [ 208.484913][T11724] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.484962][T11724] ? __fget_files+0x2a/0x420 [ 208.484980][T11724] ? __fget_files+0x3a0/0x420 [ 208.485009][T11724] __x64_sys_sendmsg+0x19b/0x260 [ 208.485029][T11724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.485050][T11724] ? __pfx_ksys_write+0x10/0x10 [ 208.485066][T11724] ? rcu_is_watching+0x15/0xb0 [ 208.485084][T11724] ? do_syscall_64+0xbe/0x3b0 [ 208.485101][T11724] do_syscall_64+0xfa/0x3b0 [ 208.485113][T11724] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.485133][T11724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.485148][T11724] ? clear_bhb_loop+0x60/0xb0 [ 208.485168][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.485192][T11724] RIP: 0033:0x7f08d758ebe9 [ 208.485208][T11724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.485220][T11724] RSP: 002b:00007f08d8422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.485239][T11724] RAX: ffffffffffffffda RBX: 00007f08d77c5fa0 RCX: 00007f08d758ebe9 [ 208.485249][T11724] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 208.485258][T11724] RBP: 00007f08d8422090 R08: 0000000000000000 R09: 0000000000000000 [ 208.485267][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.485276][T11724] R13: 00007f08d77c6038 R14: 00007f08d77c5fa0 R15: 00007fff6f8033c8 [ 208.485302][T11724] [ 208.863024][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 210.499941][T11755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1725'. [ 210.711483][T11768] delete_channel: no stack [ 210.768932][T11772] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1734'. [ 210.772170][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 210.778763][T11772] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 210.812957][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1733'. [ 210.814156][T11772] openvswitch: netlink: Duplicate key (type 0). [ 210.909502][T11773] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1733'. [ 210.954550][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 211.102165][T11788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.121365][T11790] netlink: 'syz.2.1740': attribute type 83 has an invalid length. [ 211.131578][T11781] hsr_slave_0 (unregistering): left promiscuous mode [ 211.160450][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1741'. [ 211.175459][T11792] netlink: 'syz.4.1741': attribute type 29 has an invalid length. [ 211.194298][T11792] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 211.221360][T11792] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1741'. [ 211.230950][T11792] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 211.257399][T11792] netlink: 'syz.4.1741': attribute type 2 has an invalid length. [ 211.442342][T11794] pimreg: entered allmulticast mode [ 211.460449][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 211.881289][T11838] syzkaller1: entered promiscuous mode [ 211.912812][T11838] syzkaller1: entered allmulticast mode [ 212.139745][T11846] 8021q: VLANs not supported on lo [ 212.861868][T11881] netlink: 'syz.0.1765': attribute type 10 has an invalid length. [ 212.879452][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.891947][T11881] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.920612][T11890] netlink: 'syz.0.1765': attribute type 10 has an invalid length. [ 212.959203][T11890] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.090423][T11903] openvswitch: netlink: Key type 303 is out of range max 32 [ 213.261811][T11911] netlink: 'syz.4.1773': attribute type 17 has an invalid length. [ 213.306783][T11921] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 213.442484][T11926] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.490008][T11928] ================================================================== [ 213.498207][T11928] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 213.506110][T11928] Read of size 1 at addr ffff88807e8d8770 by task syz.1.1778/11928 [ 213.514080][T11928] [ 213.516393][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.1.1778 Not tainted syzkaller #0 PREEMPT(full) [ 213.516411][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.516421][T11928] Call Trace: [ 213.516430][T11928] [ 213.516437][T11928] dump_stack_lvl+0x189/0x250 [ 213.516456][T11928] ? __kasan_check_byte+0x12/0x40 [ 213.516476][T11928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.516491][T11928] ? lock_release+0x4b/0x3e0 [ 213.516511][T11928] ? __virt_addr_valid+0x4a5/0x5c0 [ 213.516529][T11928] print_report+0xca/0x240 [ 213.516543][T11928] ? xfrm_state_find+0x2cf2/0x5400 [ 213.516556][T11928] kasan_report+0x118/0x150 [ 213.516574][T11928] ? xfrm_state_find+0x2cf2/0x5400 [ 213.516590][T11928] xfrm_state_find+0x2cf2/0x5400 [ 213.516607][T11928] ? validate_chain+0x897/0x2140 [ 213.516623][T11928] ? xfrm_state_find+0x1da/0x5400 [ 213.516639][T11928] ? __pfx_xfrm_state_find+0x10/0x10 [ 213.516658][T11928] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 213.516683][T11928] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 213.516701][T11928] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 213.516719][T11928] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 213.516736][T11928] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 213.516764][T11928] ? xfrm_expand_policies+0x41f/0x6a0 [ 213.516782][T11928] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 213.516800][T11928] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 213.516817][T11928] ? __asan_memset+0x22/0x50 [ 213.516833][T11928] xfrm_lookup_route+0x3c/0x1c0 [ 213.516855][T11928] ip_tunnel_xmit+0x96b/0x2390 [ 213.516880][T11928] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 213.516895][T11928] ? gre_build_header+0x31c/0xa40 [ 213.516912][T11928] ? __pfx_gre_build_header+0x10/0x10 [ 213.516926][T11928] ? iptunnel_handle_offloads+0x2fd/0x630 [ 213.516948][T11928] ipgre_xmit+0x89e/0xc50 [ 213.516965][T11928] ? __pfx_ipgre_xmit+0x10/0x10 [ 213.516983][T11928] dev_hard_start_xmit+0x2d7/0x830 [ 213.517005][T11928] __dev_queue_xmit+0x1b8d/0x3b50 [ 213.517019][T11928] ? do_syscall_64+0xfa/0x3b0 [ 213.517032][T11928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.517049][T11928] ? __dev_queue_xmit+0x27b/0x3b50 [ 213.517068][T11928] ? __pfx___dev_queue_xmit+0x10/0x10 [ 213.517088][T11928] ? rcu_is_watching+0x15/0xb0 [ 213.517104][T11928] ? skb_release_data+0x2b6/0x7c0 [ 213.517121][T11928] ? pskb_expand_head+0xad0/0x1150 [ 213.517137][T11928] ? __bpf_redirect+0x56d/0xe40 [ 213.517157][T11928] __bpf_tx_skb+0x18e/0x260 [ 213.517172][T11928] bpf_clone_redirect+0x272/0x3d0 [ 213.517192][T11928] ? bpf_test_run+0x197/0x7b0 [ 213.517211][T11928] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 213.517226][T11928] ? preempt_schedule+0xae/0xc0 [ 213.517242][T11928] ? bpf_test_run+0x197/0x7b0 [ 213.517259][T11928] ? preempt_schedule_common+0x83/0xd0 [ 213.517276][T11928] ? preempt_schedule+0xae/0xc0 [ 213.517292][T11928] ? __pfx_preempt_schedule+0x10/0x10 [ 213.517309][T11928] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 213.517324][T11928] ? preempt_schedule_thunk+0x16/0x30 [ 213.517342][T11928] ? __local_bh_disable_ip+0xf1/0x190 [ 213.517359][T11928] ? __pfx___cant_migrate+0x10/0x10 [ 213.517372][T11928] ? __local_bh_enable_ip+0x13e/0x1c0 [ 213.517384][T11928] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 213.517398][T11928] ? bpf_test_timer_continue+0x136/0x350 [ 213.517418][T11928] bpf_test_run+0x318/0x7b0 [ 213.517443][T11928] ? __pfx_bpf_test_run+0x10/0x10 [ 213.517470][T11928] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 213.517487][T11928] ? convert___skb_to_skb+0x3d/0x590 [ 213.517505][T11928] bpf_prog_test_run_skb+0xb30/0x1560 [ 213.517529][T11928] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 213.517547][T11928] bpf_prog_test_run+0x2c7/0x340 [ 213.517567][T11928] __sys_bpf+0x581/0x870 [ 213.517584][T11928] ? __pfx___sys_bpf+0x10/0x10 [ 213.517606][T11928] ? rcu_is_watching+0x15/0xb0 [ 213.517621][T11928] __x64_sys_bpf+0x7c/0x90 [ 213.517635][T11928] do_syscall_64+0xfa/0x3b0 [ 213.517647][T11928] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.517664][T11928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.517677][T11928] ? clear_bhb_loop+0x60/0xb0 [ 213.517692][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.517705][T11928] RIP: 0033:0x7f08d758ebe9 [ 213.517718][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.517730][T11928] RSP: 002b:00007f08d8422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.517746][T11928] RAX: ffffffffffffffda RBX: 00007f08d77c5fa0 RCX: 00007f08d758ebe9 [ 213.517757][T11928] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 213.517767][T11928] RBP: 00007f08d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.517776][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.517784][T11928] R13: 00007f08d77c6038 R14: 00007f08d77c5fa0 R15: 00007fff6f8033c8 [ 213.517800][T11928] [ 213.517805][T11928] [ 213.990291][T11928] Allocated by task 6661: [ 213.994618][T11928] kasan_save_track+0x3e/0x80 [ 213.999287][T11928] __kasan_slab_alloc+0x6c/0x80 [ 214.004141][T11928] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 214.009591][T11928] xfrm_state_alloc+0x24/0x2f0 [ 214.014358][T11928] __find_acq_core+0x8a7/0x1c00 [ 214.019191][T11928] xfrm_find_acq+0x78/0xa0 [ 214.023591][T11928] xfrm_alloc_userspi+0x6b3/0xc90 [ 214.028617][T11928] xfrm_user_rcv_msg+0x7a3/0xab0 [ 214.033568][T11928] netlink_rcv_skb+0x208/0x470 [ 214.038328][T11928] xfrm_netlink_rcv+0x79/0x90 [ 214.042992][T11928] netlink_unicast+0x82c/0x9e0 [ 214.047741][T11928] netlink_sendmsg+0x805/0xb30 [ 214.052586][T11928] __sock_sendmsg+0x21c/0x270 [ 214.057290][T11928] ____sys_sendmsg+0x505/0x830 [ 214.062142][T11928] ___sys_sendmsg+0x21f/0x2a0 [ 214.066807][T11928] __x64_sys_sendmsg+0x19b/0x260 [ 214.071737][T11928] do_syscall_64+0xfa/0x3b0 [ 214.076227][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.082133][T11928] [ 214.084454][T11928] Freed by task 6341: [ 214.088428][T11928] kasan_save_track+0x3e/0x80 [ 214.093092][T11928] kasan_save_free_info+0x46/0x50 [ 214.098098][T11928] __kasan_slab_free+0x5b/0x80 [ 214.102847][T11928] kmem_cache_free+0x18f/0x400 [ 214.107616][T11928] xfrm_state_gc_task+0x52d/0x6b0 [ 214.112642][T11928] process_scheduled_works+0xae1/0x17b0 [ 214.118169][T11928] worker_thread+0x8a0/0xda0 [ 214.122744][T11928] kthread+0x70e/0x8a0 [ 214.126814][T11928] ret_from_fork+0x3f9/0x770 [ 214.131390][T11928] ret_from_fork_asm+0x1a/0x30 [ 214.136138][T11928] [ 214.138442][T11928] The buggy address belongs to the object at ffff88807e8d8440 [ 214.138442][T11928] which belongs to the cache xfrm_state of size 928 [ 214.152389][T11928] The buggy address is located 816 bytes inside of [ 214.152389][T11928] freed 928-byte region [ffff88807e8d8440, ffff88807e8d87e0) [ 214.166178][T11928] [ 214.168485][T11928] The buggy address belongs to the physical page: [ 214.174974][T11928] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e8d8440 pfn:0x7e8d8 [ 214.185025][T11928] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 214.193524][T11928] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 214.201085][T11928] page_type: f5(slab) [ 214.205067][T11928] raw: 00fff00000000040 ffff88801ab53500 dead000000000122 0000000000000000 [ 214.213654][T11928] raw: ffff88807e8d8440 00000000800f000d 00000000f5000000 0000000000000000 [ 214.222228][T11928] head: 00fff00000000040 ffff88801ab53500 dead000000000122 0000000000000000 [ 214.230885][T11928] head: ffff88807e8d8440 00000000800f000d 00000000f5000000 0000000000000000 [ 214.239537][T11928] head: 00fff00000000002 ffffea0001fa3601 00000000ffffffff 00000000ffffffff [ 214.248186][T11928] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 214.256833][T11928] page dumped because: kasan: bad access detected [ 214.263347][T11928] page_owner tracks the page as allocated [ 214.269056][T11928] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6150, tgid 6149 (syz.1.55), ts 82612979895, free_ts 82549083888 [ 214.287966][T11928] post_alloc_hook+0x240/0x2a0 [ 214.292747][T11928] get_page_from_freelist+0x21e4/0x22c0 [ 214.298285][T11928] __alloc_frozen_pages_noprof+0x181/0x370 [ 214.304074][T11928] alloc_pages_mpol+0x232/0x4a0 [ 214.308923][T11928] allocate_slab+0x8a/0x370 [ 214.313405][T11928] ___slab_alloc+0xbeb/0x1410 [ 214.318065][T11928] kmem_cache_alloc_noprof+0x283/0x3c0 [ 214.323511][T11928] xfrm_state_alloc+0x24/0x2f0 [ 214.328264][T11928] xfrm_add_sa+0x17d1/0x4070 [ 214.332837][T11928] xfrm_user_rcv_msg+0x7a3/0xab0 [ 214.337756][T11928] netlink_rcv_skb+0x208/0x470 [ 214.342511][T11928] xfrm_netlink_rcv+0x79/0x90 [ 214.347168][T11928] netlink_unicast+0x82c/0x9e0 [ 214.351915][T11928] netlink_sendmsg+0x805/0xb30 [ 214.356658][T11928] __sock_sendmsg+0x21c/0x270 [ 214.361417][T11928] ____sys_sendmsg+0x505/0x830 [ 214.366166][T11928] page last free pid 5860 tgid 5860 stack trace: [ 214.372469][T11928] __free_frozen_pages+0xbc4/0xd30 [ 214.377570][T11928] __slab_free+0x303/0x3c0 [ 214.381966][T11928] qlist_free_all+0x97/0x140 [ 214.386539][T11928] kasan_quarantine_reduce+0x148/0x160 [ 214.391979][T11928] __kasan_slab_alloc+0x22/0x80 [ 214.396813][T11928] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 214.402255][T11928] getname_flags+0xb8/0x540 [ 214.406736][T11928] __x64_sys_unlink+0x3a/0x50 [ 214.411402][T11928] do_syscall_64+0xfa/0x3b0 [ 214.415894][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.421774][T11928] [ 214.424112][T11928] Memory state around the buggy address: [ 214.429736][T11928] ffff88807e8d8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.437867][T11928] ffff88807e8d8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.445920][T11928] >ffff88807e8d8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.453981][T11928] ^ [ 214.461678][T11928] ffff88807e8d8780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 214.469722][T11928] ffff88807e8d8800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.477762][T11928] ================================================================== [ 214.486011][T11928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 214.493211][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.1.1778 Not tainted syzkaller #0 PREEMPT(full) [ 214.502585][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.512644][T11928] Call Trace: [ 214.515929][T11928] [ 214.518863][T11928] dump_stack_lvl+0x99/0x250 [ 214.523468][T11928] ? __asan_memcpy+0x40/0x70 [ 214.528072][T11928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.533286][T11928] ? __pfx__printk+0x10/0x10 [ 214.537899][T11928] vpanic+0x281/0x750 [ 214.541896][T11928] ? __pfx_vpanic+0x10/0x10 [ 214.546411][T11928] ? irqentry_exit+0x74/0x90 [ 214.551029][T11928] panic+0xb9/0xc0 [ 214.554774][T11928] ? __pfx_panic+0x10/0x10 [ 214.559203][T11928] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 214.565099][T11928] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.570989][T11928] ? xfrm_state_find+0x2cf2/0x5400 [ 214.576089][T11928] check_panic_on_warn+0x89/0xb0 [ 214.581015][T11928] ? xfrm_state_find+0x2cf2/0x5400 [ 214.586112][T11928] end_report+0x78/0x160 [ 214.590345][T11928] kasan_report+0x129/0x150 [ 214.594843][T11928] ? xfrm_state_find+0x2cf2/0x5400 [ 214.599957][T11928] xfrm_state_find+0x2cf2/0x5400 [ 214.604899][T11928] ? validate_chain+0x897/0x2140 [ 214.609835][T11928] ? xfrm_state_find+0x1da/0x5400 [ 214.614847][T11928] ? __pfx_xfrm_state_find+0x10/0x10 [ 214.620129][T11928] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 214.626286][T11928] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 214.632171][T11928] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 214.638747][T11928] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 214.644636][T11928] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 214.650621][T11928] ? xfrm_expand_policies+0x41f/0x6a0 [ 214.655983][T11928] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 214.661345][T11928] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 214.667138][T11928] ? __asan_memset+0x22/0x50 [ 214.671717][T11928] xfrm_lookup_route+0x3c/0x1c0 [ 214.676559][T11928] ip_tunnel_xmit+0x96b/0x2390 [ 214.681320][T11928] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 214.686502][T11928] ? gre_build_header+0x31c/0xa40 [ 214.691514][T11928] ? __pfx_gre_build_header+0x10/0x10 [ 214.696870][T11928] ? iptunnel_handle_offloads+0x2fd/0x630 [ 214.702577][T11928] ipgre_xmit+0x89e/0xc50 [ 214.706897][T11928] ? __pfx_ipgre_xmit+0x10/0x10 [ 214.711780][T11928] dev_hard_start_xmit+0x2d7/0x830 [ 214.716883][T11928] __dev_queue_xmit+0x1b8d/0x3b50 [ 214.721892][T11928] ? do_syscall_64+0xfa/0x3b0 [ 214.726552][T11928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.732603][T11928] ? __dev_queue_xmit+0x27b/0x3b50 [ 214.737701][T11928] ? __pfx___dev_queue_xmit+0x10/0x10 [ 214.743149][T11928] ? rcu_is_watching+0x15/0xb0 [ 214.747896][T11928] ? skb_release_data+0x2b6/0x7c0 [ 214.752911][T11928] ? pskb_expand_head+0xad0/0x1150 [ 214.758006][T11928] ? __bpf_redirect+0x56d/0xe40 [ 214.762847][T11928] __bpf_tx_skb+0x18e/0x260 [ 214.767346][T11928] bpf_clone_redirect+0x272/0x3d0 [ 214.772389][T11928] ? bpf_test_run+0x197/0x7b0 [ 214.777181][T11928] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 214.782631][T11928] ? preempt_schedule+0xae/0xc0 [ 214.787470][T11928] ? bpf_test_run+0x197/0x7b0 [ 214.792136][T11928] ? preempt_schedule_common+0x83/0xd0 [ 214.797580][T11928] ? preempt_schedule+0xae/0xc0 [ 214.802417][T11928] ? __pfx_preempt_schedule+0x10/0x10 [ 214.807775][T11928] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 214.813827][T11928] ? preempt_schedule_thunk+0x16/0x30 [ 214.819191][T11928] ? __local_bh_disable_ip+0xf1/0x190 [ 214.824546][T11928] ? __pfx___cant_migrate+0x10/0x10 [ 214.829727][T11928] ? __local_bh_enable_ip+0x13e/0x1c0 [ 214.835089][T11928] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 214.840790][T11928] ? bpf_test_timer_continue+0x136/0x350 [ 214.846413][T11928] bpf_test_run+0x318/0x7b0 [ 214.850917][T11928] ? __pfx_bpf_test_run+0x10/0x10 [ 214.855939][T11928] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 214.861509][T11928] ? convert___skb_to_skb+0x3d/0x590 [ 214.866784][T11928] bpf_prog_test_run_skb+0xb30/0x1560 [ 214.872185][T11928] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 214.877979][T11928] bpf_prog_test_run+0x2c7/0x340 [ 214.882999][T11928] __sys_bpf+0x581/0x870 [ 214.887231][T11928] ? __pfx___sys_bpf+0x10/0x10 [ 214.891995][T11928] ? rcu_is_watching+0x15/0xb0 [ 214.896763][T11928] __x64_sys_bpf+0x7c/0x90 [ 214.901193][T11928] do_syscall_64+0xfa/0x3b0 [ 214.905680][T11928] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.910870][T11928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.916922][T11928] ? clear_bhb_loop+0x60/0xb0 [ 214.921583][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.927462][T11928] RIP: 0033:0x7f08d758ebe9 [ 214.931861][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.951623][T11928] RSP: 002b:00007f08d8422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.960025][T11928] RAX: ffffffffffffffda RBX: 00007f08d77c5fa0 RCX: 00007f08d758ebe9 [ 214.967984][T11928] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 214.975938][T11928] RBP: 00007f08d7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 214.983893][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.991850][T11928] R13: 00007f08d77c6038 R14: 00007f08d77c5fa0 R15: 00007fff6f8033c8 [ 214.999818][T11928] [ 215.003091][T11928] Kernel Offset: disabled [ 215.007397][T11928] Rebooting in 86400 seconds..