last executing test programs: 1.950544362s ago: executing program 4 (id=1322): socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write(r0, &(0x7f0000000100)="240000001a005f2314f9f407000904000200000001000000000000000800040001000000f4f0ee174850f601590441ba9eef00d958bcc76c59f3611d65552bca5bcb8a1270ab2182d914c774b6615c2494169487612f636769d93e403a08c72b48b66f36a6a183636187d380f3f79ca5bbf274726c924ca67a2b144b197dcfbc5b4fd36584dbc077bc4fcb95c66594dfc366680431fd4ec852f7aec920c4d3f306f60972fc0a6737291dbea310c813252584000c92263062dab881d5b29f1d6a1977d95a9856919f3a689f9f26fa647ebac00e90af279d84a6c2689569568c4c47337c5409e5788a819946774fe4cd48308eb92ba200"/255, 0x147) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8008}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 1.813799297s ago: executing program 0 (id=1324): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x6, 0x1, 0x44, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x80000000, 0x7}}) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0x51504ff, 0x6, 0x41480, 0x1, 0x7, '\x00', r0, r1, 0x3, 0x2, 0x3, 0x1, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113800000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xd1, &(0x7f0000000240)=""/209, 0x0, 0x4, '\x00', r0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.74169668s ago: executing program 4 (id=1327): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2]}}) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 1.584869117s ago: executing program 0 (id=1331): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/84, 0x328000, 0x1000}, 0x20) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$kcm(0x2, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000006c0)="e2b3670909f7539dc4e27574d4ecc0c976872f792e0c872a91506f60f9ecd6c23a4955f1f58bbea5ee886945848ece9fc0ea505443dc25808c117837fdbedb95d268bd0eecb80d58fc35d218b0b2aafc516c363b7c370c43ee4fc45881b4bfcd26de39920f565c3d11260aff4561c47ec80d34a16d63568ec2689d0f700e3f855b395d6da42e84f41bb50ff6ce9530e3ab19b360eca8cc821b9eff65b2cdbd7f4b316d583f8425a7f025ed037815f7555b97", 0xb2}, {&(0x7f0000000780)="abf5ee062be5cc8f1acfcdfbb91f1e3d00d6a5d6f4f012f416537e902950e6842027a5a5367c4a6ddaeef39c79e81287e62b413e701f54120f6a7ad99015f3aac6c0732bc3311ac89461f3262e4095eb36034ae2e3167fbc04603002071b7b5e862360b26822f80b753475864f169387f0090ac629b621cbb80b0e8b7d5549a1fe7c92714a6dcd85768986bfe7a6715886aeedf38f48e9cbbea5a908a1d3ef3b546d9905fd51842094dcfd9fd46da5eed4129f21e10e1729d8764a37a43fb552cbba54edc5278b0ad8b45eeb15178641c4aa24c4a612bba8cc2d73", 0xdb}, {&(0x7f0000000880)="fcb607dca4ad7f7d145209db2ddf37df758902c0b4baccbde9e07af8652689285c944395e4fd428bf61802f1cb0b8b2800f130e74310b356fb1c44ec3fa75081f3d1d29b1972034e2855c0de0f9c32a48b29b14c344acd593819b6de8621398007a5829d7c21eaca5a2a97e1a0eb226de23f5c906477d989d08adeed2bf28c279690810eb5bdadfc3620086db67101f4de918fba72759fbd4276923dd10028b90449f038e3fc652ff1ca675a99db21cd83cef1e0d451", 0xb6}, {&(0x7f0000000940)="bf1609eb42ec65449e25b4611215803fa0d171885d70abdce68ff2317c7b722670e05d5384cf4e9cb176ffa3ef90410703009ab0948c9534411070a8dc560aab19d97774483b695b62664436353cdd107a846100dce8b8a2b5c360d9da80972dc6fc062d9916725bad9646ae037e253e9e9f481e44601c37b2f181a60b0741d157dd80bad83f2d956447bfa9acadc3c6095cc9477805be262256c7b6ce81f91cbe85a38a2950939034f63368d24a330c06d7352ab88e91c08bcb2a8ea10fee426f22ed3c371cec488d344a978f5da518ea5aabe8e511ab64976627e4aa", 0xdd}, {&(0x7f0000000a40)="4c7386fde0c2e779feb83560a8f2e92a1d6485da4ae83a41ea743276541cb9410135e2342af01578498e650b97837ce571210930198381517aa26f964529943c430001748f78ec0a620aefa4999f747d9ca455e4a29b62d58cbb80c5cca6b10dbf0f0e252ee9d63733bda3e1f34a239022a360375cefadc2e1105438c67e26a9cf1f2d69a2afd7f3f7225d65d62b04b7c2a3f9a60106bb6030bf35678f12964f1614ea7fc383156f036c456e6c33934ca90b3b6ccfefc56e590f6c834fbf686b9237d0f4f12f01742efefa75354c954b2699b283c108c51d93f4abee3490341387fe3d5cb4e0ea260421b027d02d0506", 0xf0}, {&(0x7f0000000b40)="f8c85f1dde7974785a4ae658c25dd799533966057d36328099e8f8d615b12b832330844e102a4bed802e022a02e0fbeba613cbf0e0c388f054601e76e4d9e2d6ce5697d355d4d9f3dce4215306c45f4cfbbc401a11d289572d444260b445b0b7737584577d991d7d654356e1ea10da76550d5c9facc6c49e7d2afc977c751aa8e947fb6da4281392f4441027e3a62c8fa223c2334ce79672674e46bdc77a41a78bda4d8cbe82e953dae14852749720f67e754fa26dd72f6225f8d11a994fb1c57e0b58b8567f731522c577dfad26218084a7384a28d59e46a2c02dcfe3eff437acdcaad1b7388ed8d4f5cc7a5c", 0xed}, {&(0x7f0000000c40)="4b99346473b3daa3ae6c59cfd2b3cf1d81bcd1189d1785c7bb2f12fe5de4c61ac538f5f58126381e24080dad621e271f1258f78d27d3fee94f1ae115949b55b6ac73c41582075eb3c0ca610e30d91626a435a58b7cabee1792634f60e506c71f0eea43e060891f70833a8a393d616f47310d68a5b278f96e02db0533ad28cbae98355dfe5536cf7d25572c81fe4f95b4c03e479d8a20f93bf299e43e99b2574fd2da5d74b6338e1f2977c0f69904b05ca826a413aeee572cb790e28301c77cb53704c657eec9", 0xc6}, {&(0x7f0000000d40)="7955c6ef19ed05991ad8252e2857f42fcba9dedaa85dd6f368e190ec142255086ce80701518658dc7455fb2c3929d70c20e7d79f021d5ed95cb49dc9d996f4ae00f9843cff42d3c85254959533e94132c103a9e5e79d4ee005d2401b095cf434efc25fa8691f32e9b5fd634e9192bc6ee371793f99ee1c11415a6bbb26ce731e9cb02d3c2e4dd877b539e1a877b24ce850fe74952f1673da8420cb909d5c16e7c06855a646f3bfe76e08215ad5017abb69934c9715fac3809813e6dbe4f99356fbb11ae4d9abeede1c846e28a0234fac27822f61fa3b3cc88c2e276113114d9c110fc8187b8826a56aadb24990", 0xed}], 0x8, 0x0, 0x0, 0x4000}, 0x44) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x1, @remote}]}, &(0x7f0000000140)=0x10) (rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0xf856, 0x0, 0x4, 0xdc8d, r4}, &(0x7f0000000240)=0x10) (async) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @remote}, 0xe) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000240)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r9) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0001800600060088480000040502"], 0x528}}, 0xc000) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="20002ab97000fedbdf254100000008000300143f0076c2cd831755d6a989e62898241570f89eb7f88501439c0198cd8b4ee218e3e1eed7828dc2e2cac8dd368181f136ea349986bb0779ccb6275f14bac6dd3dd6196a0cfbae3e61d354d5f8bbdfb8c0c70e88f9116b90969b5c59690773ae045a317b21e8705c0d9c83d791e02fc875ec9e4d6f26795b88dc", @ANYRES32=r11, @ANYBLOB="0c0099000d000000400000000500180110000000050018012900000008002700010000000500190104000000"], 0x48}, 0x1, 0x0, 0x0, 0x586476ee75591ebc}, 0x400c1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, 0x0, 0x8000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newchain={0x54, 0x64, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {0x7, 0xfff3}, {0x0, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0xe}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xf9, 0xf2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x54}}, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 1.562972126s ago: executing program 4 (id=1332): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000300001f0000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000300001f0000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r1], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r1], 0x48}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b9c0)=@newchain={0x880, 0x64, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff9}, {0x0, 0x8}, {0xf005f06f9dee0c73, 0xa}}, [@f_rsvp={{0x9}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x200, 0x2, 0x0, 0x9, 0x0, 0x1ff, 0x7, 0x80000000, 0x0, 0xf36, 0x1a, 0x7fffffff, 0x4, 0x7, 0x3, 0x8, 0xffffffff, 0xffffffff, 0x3, 0x4, 0x2, 0xfffffff9, 0x0, 0x6, 0x7, 0x5, 0x1, 0x65, 0x5, 0x5, 0x7, 0x9, 0x9, 0x10, 0x7, 0x6, 0x7, 0x7, 0x1000, 0xa94, 0x4, 0x101, 0x2, 0xfff, 0x7fff, 0xff000000, 0x7, 0x6, 0x4, 0x9c6, 0x4, 0x6, 0x4, 0xd, 0x5, 0xc5b7, 0x0, 0x1, 0x401, 0x0, 0xfffffffc, 0x9, 0x0, 0x7, 0x0, 0x3, 0x8001, 0x5, 0x101, 0xb9, 0x0, 0x9, 0x3, 0x80000000, 0x8001, 0x8, 0x4, 0x1, 0x3, 0x80, 0xe00b, 0x7, 0xd15, 0xff, 0x5, 0x5, 0x2e7b, 0x2, 0x7ff, 0x0, 0x8000, 0x7, 0x10001, 0x7fff, 0x3, 0x7, 0xf, 0xd, 0x264, 0x200, 0x3, 0xb23, 0x8, 0x5, 0x9, 0x4, 0x1, 0xe1f, 0x3, 0x1, 0x5, 0x5, 0x4, 0x5, 0x868, 0x3, 0xb, 0x5, 0x3, 0x7, 0x6, 0x8, 0x8, 0x400, 0x0, 0x43, 0x1, 0x2000, 0x101, 0x73f, 0xa03, 0x280, 0x3be, 0x1, 0x0, 0x6, 0x0, 0x4, 0x5, 0x6, 0xac, 0x8000, 0x5, 0x400, 0xfffff63a, 0x1, 0x4, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1000, 0xfff, 0x8, 0xd9d, 0x1, 0x7, 0x4202, 0x5, 0x2, 0x6, 0x4c7f, 0x62, 0x4, 0xe, 0x2, 0x8, 0x5, 0x8, 0xc7b, 0x33, 0xffffffff, 0x5, 0x5, 0x5, 0x0, 0x5, 0x2, 0xfb, 0x1, 0xd0, 0x0, 0xc7e, 0xdf7, 0x5, 0xf, 0x316e, 0x80, 0x101, 0xaaf1, 0x2a, 0x6, 0x57, 0x5, 0xb, 0x7, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x3, 0x35, 0xffff0000, 0x1, 0x167, 0x3, 0x6, 0x5, 0x8000, 0x7, 0xa, 0x5, 0x7d, 0x2, 0x3, 0xceb, 0x1, 0x40000000, 0xfffffff7, 0xfff, 0x3, 0xffffffff, 0x8, 0x8a0, 0x0, 0x9631, 0x800, 0x7, 0x8, 0x29, 0x3, 0x3, 0x2, 0x1, 0x100, 0xdb000000, 0xa, 0x7, 0x1, 0x4, 0x190, 0xf55, 0x10, 0x6, 0x80000000, 0x0, 0x4, 0x10, 0x1ff, 0x5, 0x7c, 0xffff0001, 0xc7200000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x1, 0x80, 0x6, 0x3, 0x2, 0xf, 0x7, 0xd, 0x1, 0x3, 0x7, 0x800, 0xffffeb99, 0x0, 0x0, 0x8e87, 0xed, 0x0, 0xdf, 0x2, 0x800, 0x0, 0x490, 0x94be, 0x1, 0x0, 0x0, 0x7, 0x6, 0x2, 0x80000000, 0xf14f, 0x4, 0x2, 0x4, 0x5, 0xec67, 0xffff, 0x7f, 0x8, 0x9, 0xffffffff, 0x487364d9, 0x4, 0x7, 0x2, 0x3, 0xfffffffb, 0x2, 0x100, 0x9, 0x0, 0x1, 0x80000, 0x3, 0x1, 0xffff, 0x6, 0x53f3, 0x1, 0x3, 0x6, 0x1, 0xfffffffb, 0xa, 0xfff, 0x9, 0x7, 0x5, 0x0, 0x7, 0x4ca, 0x5, 0xfffffffb, 0xfffffffd, 0x7, 0x80000000, 0xfb, 0xffffffff, 0x0, 0x9, 0x1eac, 0xa8, 0x100, 0x8, 0xfffffffb, 0x4, 0x7fffffff, 0x1000, 0x800000, 0x8, 0xe, 0x0, 0x0, 0xd50, 0x295, 0x0, 0x6, 0x3, 0xffffff19, 0x2, 0x5, 0x3, 0x8, 0x2, 0x8000, 0x4, 0x5, 0x8, 0x4dd, 0x800, 0x3, 0x5, 0x9, 0x7, 0x2d, 0x2, 0x2, 0x0, 0x1, 0x7, 0x7, 0x2, 0x0, 0x8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x401, 0x7fffffff, 0xfff, 0x2, 0xfffffeff, 0x3, 0x5, 0x2e47, 0x905, 0x7fff, 0xa94, 0x4, 0x1, 0x2, 0xffff, 0xfffffffe, 0x9, 0xfffffff1, 0x1, 0x7, 0xcf, 0xf, 0x80000001, 0x5a11, 0x9, 0x1, 0xfffffffd, 0x17a94dee, 0x6, 0x4, 0x100, 0x80000000, 0x5, 0x1ff, 0x9, 0x3, 0x6, 0x9, 0xfff, 0xc5e7, 0x6, 0x200, 0x8b6f, 0xfffffffe, 0x4c2, 0x9, 0x53b, 0x80000004, 0x3, 0xc8, 0x1, 0xbad, 0x7, 0x7ff, 0x9d, 0xeb, 0x2, 0x68, 0xc0100000, 0x0, 0x40, 0x80000001, 0x0, 0xfff, 0x5, 0x6, 0x5, 0x4, 0xfffffff7, 0x7, 0x4, 0x3, 0x91, 0x5, 0xa2b, 0x8, 0x3, 0x2, 0x7, 0x0, 0x5, 0x0, 0x8021, 0xa, 0x4, 0x4, 0xb, 0x6bf3, 0x8001, 0x9, 0x0, 0x4, 0x80000000, 0xe, 0x5, 0x3c, 0x7, 0xfffffffc, 0x5583, 0x8, 0x7, 0xfffffffc, 0x8, 0x1, 0x2, 0x9, 0xffffffff, 0x1ff, 0x6, 0x8, 0x1400000, 0x4, 0xfffffffb, 0x4, 0xffffff80, 0x8, 0xf, 0x80, 0xf, 0x5, 0x80000000, 0x7, 0x1, 0x4, 0x4]}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8}]}}, @f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x4}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x20000005}, 0x4800) (async) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b9c0)=@newchain={0x880, 0x64, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff9}, {0x0, 0x8}, {0xf005f06f9dee0c73, 0xa}}, [@f_rsvp={{0x9}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x200, 0x2, 0x0, 0x9, 0x0, 0x1ff, 0x7, 0x80000000, 0x0, 0xf36, 0x1a, 0x7fffffff, 0x4, 0x7, 0x3, 0x8, 0xffffffff, 0xffffffff, 0x3, 0x4, 0x2, 0xfffffff9, 0x0, 0x6, 0x7, 0x5, 0x1, 0x65, 0x5, 0x5, 0x7, 0x9, 0x9, 0x10, 0x7, 0x6, 0x7, 0x7, 0x1000, 0xa94, 0x4, 0x101, 0x2, 0xfff, 0x7fff, 0xff000000, 0x7, 0x6, 0x4, 0x9c6, 0x4, 0x6, 0x4, 0xd, 0x5, 0xc5b7, 0x0, 0x1, 0x401, 0x0, 0xfffffffc, 0x9, 0x0, 0x7, 0x0, 0x3, 0x8001, 0x5, 0x101, 0xb9, 0x0, 0x9, 0x3, 0x80000000, 0x8001, 0x8, 0x4, 0x1, 0x3, 0x80, 0xe00b, 0x7, 0xd15, 0xff, 0x5, 0x5, 0x2e7b, 0x2, 0x7ff, 0x0, 0x8000, 0x7, 0x10001, 0x7fff, 0x3, 0x7, 0xf, 0xd, 0x264, 0x200, 0x3, 0xb23, 0x8, 0x5, 0x9, 0x4, 0x1, 0xe1f, 0x3, 0x1, 0x5, 0x5, 0x4, 0x5, 0x868, 0x3, 0xb, 0x5, 0x3, 0x7, 0x6, 0x8, 0x8, 0x400, 0x0, 0x43, 0x1, 0x2000, 0x101, 0x73f, 0xa03, 0x280, 0x3be, 0x1, 0x0, 0x6, 0x0, 0x4, 0x5, 0x6, 0xac, 0x8000, 0x5, 0x400, 0xfffff63a, 0x1, 0x4, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1000, 0xfff, 0x8, 0xd9d, 0x1, 0x7, 0x4202, 0x5, 0x2, 0x6, 0x4c7f, 0x62, 0x4, 0xe, 0x2, 0x8, 0x5, 0x8, 0xc7b, 0x33, 0xffffffff, 0x5, 0x5, 0x5, 0x0, 0x5, 0x2, 0xfb, 0x1, 0xd0, 0x0, 0xc7e, 0xdf7, 0x5, 0xf, 0x316e, 0x80, 0x101, 0xaaf1, 0x2a, 0x6, 0x57, 0x5, 0xb, 0x7, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x3, 0x35, 0xffff0000, 0x1, 0x167, 0x3, 0x6, 0x5, 0x8000, 0x7, 0xa, 0x5, 0x7d, 0x2, 0x3, 0xceb, 0x1, 0x40000000, 0xfffffff7, 0xfff, 0x3, 0xffffffff, 0x8, 0x8a0, 0x0, 0x9631, 0x800, 0x7, 0x8, 0x29, 0x3, 0x3, 0x2, 0x1, 0x100, 0xdb000000, 0xa, 0x7, 0x1, 0x4, 0x190, 0xf55, 0x10, 0x6, 0x80000000, 0x0, 0x4, 0x10, 0x1ff, 0x5, 0x7c, 0xffff0001, 0xc7200000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x1, 0x80, 0x6, 0x3, 0x2, 0xf, 0x7, 0xd, 0x1, 0x3, 0x7, 0x800, 0xffffeb99, 0x0, 0x0, 0x8e87, 0xed, 0x0, 0xdf, 0x2, 0x800, 0x0, 0x490, 0x94be, 0x1, 0x0, 0x0, 0x7, 0x6, 0x2, 0x80000000, 0xf14f, 0x4, 0x2, 0x4, 0x5, 0xec67, 0xffff, 0x7f, 0x8, 0x9, 0xffffffff, 0x487364d9, 0x4, 0x7, 0x2, 0x3, 0xfffffffb, 0x2, 0x100, 0x9, 0x0, 0x1, 0x80000, 0x3, 0x1, 0xffff, 0x6, 0x53f3, 0x1, 0x3, 0x6, 0x1, 0xfffffffb, 0xa, 0xfff, 0x9, 0x7, 0x5, 0x0, 0x7, 0x4ca, 0x5, 0xfffffffb, 0xfffffffd, 0x7, 0x80000000, 0xfb, 0xffffffff, 0x0, 0x9, 0x1eac, 0xa8, 0x100, 0x8, 0xfffffffb, 0x4, 0x7fffffff, 0x1000, 0x800000, 0x8, 0xe, 0x0, 0x0, 0xd50, 0x295, 0x0, 0x6, 0x3, 0xffffff19, 0x2, 0x5, 0x3, 0x8, 0x2, 0x8000, 0x4, 0x5, 0x8, 0x4dd, 0x800, 0x3, 0x5, 0x9, 0x7, 0x2d, 0x2, 0x2, 0x0, 0x1, 0x7, 0x7, 0x2, 0x0, 0x8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x401, 0x7fffffff, 0xfff, 0x2, 0xfffffeff, 0x3, 0x5, 0x2e47, 0x905, 0x7fff, 0xa94, 0x4, 0x1, 0x2, 0xffff, 0xfffffffe, 0x9, 0xfffffff1, 0x1, 0x7, 0xcf, 0xf, 0x80000001, 0x5a11, 0x9, 0x1, 0xfffffffd, 0x17a94dee, 0x6, 0x4, 0x100, 0x80000000, 0x5, 0x1ff, 0x9, 0x3, 0x6, 0x9, 0xfff, 0xc5e7, 0x6, 0x200, 0x8b6f, 0xfffffffe, 0x4c2, 0x9, 0x53b, 0x80000004, 0x3, 0xc8, 0x1, 0xbad, 0x7, 0x7ff, 0x9d, 0xeb, 0x2, 0x68, 0xc0100000, 0x0, 0x40, 0x80000001, 0x0, 0xfff, 0x5, 0x6, 0x5, 0x4, 0xfffffff7, 0x7, 0x4, 0x3, 0x91, 0x5, 0xa2b, 0x8, 0x3, 0x2, 0x7, 0x0, 0x5, 0x0, 0x8021, 0xa, 0x4, 0x4, 0xb, 0x6bf3, 0x8001, 0x9, 0x0, 0x4, 0x80000000, 0xe, 0x5, 0x3c, 0x7, 0xfffffffc, 0x5583, 0x8, 0x7, 0xfffffffc, 0x8, 0x1, 0x2, 0x9, 0xffffffff, 0x1ff, 0x6, 0x8, 0x1400000, 0x4, 0xfffffffb, 0x4, 0xffffff80, 0x8, 0xf, 0x80, 0xf, 0x5, 0x80000000, 0x7, 0x1, 0x4, 0x4]}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8}]}}, @f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x4}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x20000005}, 0x4800) recvmsg$can_j1939(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/213, 0xd5}, {&(0x7f0000000180)=""/34, 0x22}], 0x2}, 0x2163) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=r6, @ANYBLOB="070600000000fcdbdf252d0000000c0005000200aaaaaaaaaaaa08002f000000000005002b00f900000008000200", @ANYRES32=r3, @ANYBLOB="05002e003000000005002e"], 0x48}, 0x1, 0x0, 0x0, 0x4008801}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 1.422266288s ago: executing program 3 (id=1334): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xffffffffffffff86) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)=""/70, 0x46}], 0x1}, 0x40000160) sendmsg$nl_generic(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x14, 0x42, 0x1, 0x70bd27, 0x25dfdffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1.362246764s ago: executing program 0 (id=1335): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x48093) recvmsg(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000e00), 0x0}, 0x20) 1.350229808s ago: executing program 4 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000001010102000000000000000002008000300002802c00018014000300fc02000000000000000000000000ecff13000400fc0000000000000000000000000000010c0019800800020099"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.257109788s ago: executing program 3 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x1c, &(0x7f0000000040)=0xa5c, 0x4) write(r0, &(0x7f0000000140)="24250000010006", 0x7) 1.058308583s ago: executing program 2 (id=1341): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xfffffffd) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xb4, 0xf1, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 972.743387ms ago: executing program 1 (id=1342): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2]}}) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 854.803353ms ago: executing program 1 (id=1343): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 852.744671ms ago: executing program 3 (id=1344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000003000000a00300000d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000340), &(0x7f0000000640)="d486dc0876b16914ab5a1ea4f3be3d81176f1bd606e3fa0bc3c9cfe2aa2b19cf496c01da3d4b28b69f58599e32ea752869e0886efe94b658a9e8cb14614204e9eefc6166d59b78f42d128c4b6ee9e37566d382d1176e3422871720a29c58829449c13878b0bbf960347564a625e25abf969ab398f3634659ef499757b81d2d66a4", 0x17fc, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400004012d75a000400100002000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800038004000500080000003e"], 0x44}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001b00)={0xd6c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1ff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xd}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd34, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x11, 0x1, "26f9679fb4a19846b89721e3c2"}}, {0xd0c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd08, 0x2, "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"}}]}]}, 0xd6c}}, 0x20040844) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0xffffffffffffffff, 0x6c, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x7, 0x22, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x880}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x799}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x80000000, 0xf6, &(0x7f0000000700)=""/246, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r7, r0, r8, r0, r9, r0, r0, r0, r1], 0x0, 0x10, 0x10, @void, @value}, 0x94) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500), 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980), 0x8}, 0x7}, {{0x0, 0x0, 0x0, 0x14}, 0xd5dd}, {{&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0xfeec, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/140, 0x7e}], 0x1}, 0x9}], 0x6, 0x40008020, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x24, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_generic(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x40, 0x3a, 0x400, 0x70bd29, 0x25dfdbfc, {0x16}, [@typed={0x4, 0x104}, @nested={0x28, 0x3, 0x0, 0x1, [@typed={0xf, 0x13d, 0x0, 0x0, @str='ip6gretap0\x00'}, @nested={0x4, 0x2f}, @nested={0x4, 0xd3}, @nested={0x4, 0x6c}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r12, 0x107, 0x18, &(0x7f0000000800)={r11, 0x1, 0x6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f00000004c0), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xfff1}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2f}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf81b}]}}]}, 0x44}}, 0xd2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) 780.544516ms ago: executing program 2 (id=1345): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000544a77c778bee6347e08c09fa64c314253efa7d01a22f1fe8aa3b2ac"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0x19, 0x2000, 0xffffffffffffffff, @value}, 0x20) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1}}], 0x2, 0x40884) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r7, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'sit0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 649.996926ms ago: executing program 1 (id=1346): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8b, 0x5, 0x9, 0x33, @local, @remote, 0x20, 0x80, 0xdedb, 0x8}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x9, &(0x7f0000000140)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 643.558736ms ago: executing program 2 (id=1347): r0 = socket$inet_udp(0x2, 0x2, 0x0) tee(r0, r0, 0x2341, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e00000000000000070000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000001a0000000000000000000000000000000012689774843447dc49317d5635f819e8f1a5da6ccfcfdc99659cc96eb9f423f3b83f78b61544a16ee35e7177aafe385604e06446edcc76493a84ad7a044838e9b26b55be5c58b3c8b508c8e477e6b1c530085bbae18a3b135f2f5faa4bc5e2ce7602cf67d43b67b18e9b173dbc1457357aafe5b628", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0xb3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x0, 0x0, 0xf6, 0x0, &(0x7f0000000300)=""/246, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e97e7ef4d514b61398f1e27e411c40fa9835e1657d5e6acf4652ba37b142c"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7f35736af9c0c1100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000500ec0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="940c208f01003424000000", @ANYRES16=r10, @ANYBLOB="080027bd7000fcdbdf250400000008000200010000000800040003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048844}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000780)=0x12, 0x80c00) syz_genetlink_get_family_id$net_dm(0x0, r11) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x24000001) 526.387067ms ago: executing program 3 (id=1348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) 525.881877ms ago: executing program 2 (id=1349): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffd}}, 0x2e) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)={0x32}, 0x8) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x7f, 0x10, 0x2, 0x5, 0x7b, 0x7, 0x1, 0x7254}, &(0x7f0000000280)={0x4, 0x3, 0x7ff, 0x80, 0x3ff, 0xad1, 0x1, 0x80000000}, &(0x7f0000000440)={0x3, 0xf, 0x10000, 0xe, 0x7, 0x0, 0x1}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x688770f5]}, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff800, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x0) 476.962348ms ago: executing program 1 (id=1350): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000400000008000000010000e380000000", @ANYRES32=0x0, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3}, 0x38) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x8000) (async) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x8000) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4880) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1) (async) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2509000000e27e5602032c30437ee2a16e74ede98264ff292a9e27d99cd370750d493d5afcc86f0c278e06eef9975430fe3bbc4d00427ef4aad462f10e0f2cc3bce0883415236ad034fab7c9ab33255e93323c011f988432029cfd6a665cad"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="8daf157b1d2cda173f4705d3470e3ce8591863e380a4928523d55a3598e926ec4c11157b2d37d2", 0x27}, {&(0x7f0000000280)="5a2745444abe785a004c", 0xa}, {&(0x7f0000000300)="d8b8d407d3cd6079dfd9d24eacac2818e76cea2e6df0eb5d07fbc1a09bcfadd0b1af85ac557a51df64b262d0efa66cffaa12af1450bccbb1cf54c36304351280a6d0cd41daca027c36efbb9c438838bfb50a6f0f1a2cd2b2", 0x58}], 0x3}, 0x0) (async) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="8daf157b1d2cda173f4705d3470e3ce8591863e380a4928523d55a3598e926ec4c11157b2d37d2", 0x27}, {&(0x7f0000000280)="5a2745444abe785a004c", 0xa}, {&(0x7f0000000300)="d8b8d407d3cd6079dfd9d24eacac2818e76cea2e6df0eb5d07fbc1a09bcfadd0b1af85ac557a51df64b262d0efa66cffaa12af1450bccbb1cf54c36304351280a6d0cd41daca027c36efbb9c438838bfb50a6f0f1a2cd2b2", 0x58}], 0x3}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x800}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x800}) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000042) (async) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000042) 417.40399ms ago: executing program 3 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x54}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delvlan={0x48, 0x71, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4b, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7f}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x1d4, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x78, 0x8, "a3e10cbf9ac7915bfa5284b61ae9ab2f4d6c7adeca6b539ef91575537a3e3f5937421c5da82686d4db52ca3380329eed2070ba570c6c6336d1bdb305b1f10cfec9ecb7455defa04e9fff130d51d4c7f4b61ebd98e15fadc5205a7f16e70567ded2ffe25adbef9b6ee2baa7c6185a36fbedf36e7d"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x101, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1fc}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180200004002000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801, @void, @value}, 0x94) 362.298005ms ago: executing program 0 (id=1352): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a4, 0x65, 0x2, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x10}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x158, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x11c, 0x2, [@m_ife={0x118, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xb70}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffa}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0xc8, 0x6, "c5f40ae830c95c19f5b469890d1e1fb656a8f44c7f037aaa4cb7325e0c4fc2f7e4520a7c2fd24487a6263bd2800d288f4fddda747cedebe6f9203243692540862cbbee6cbdd95dec8dac1d94b0d9d92b96dde19e45282b1474628595182bb2bb16dbcd01d0919da8b024e55ce53583710066844a3b3c314a5d946464e03d5a1b973921436b7763bd36c17c0c928a4008b11bc47fbffcc815e699a6397317776da96f5db0c228c8c3d57902b21528e4e98e09c893c09cf1c2d59603aa3c402329ec6e4556"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f00000005c0)=0xfffffffffffffff9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000000000000000002000000000000000001000084080000000600000001960000030000000000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x440c0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x7, 0x30}, 0x0) unshare(0x2040400) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 361.812101ms ago: executing program 4 (id=1353): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2]}}) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 328.368612ms ago: executing program 2 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000406000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000a00000808000440b70800"/28], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async) close(r0) 233.540823ms ago: executing program 0 (id=1355): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000f000040000001f000000c3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0023040000000000000200ed84a980080026006401010204000f00"], 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="ad56b6c5000000802c56aa364364b3d6ae9d6dcd3292ea54a3113dd2a6a772ceea", 0x21) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x200}]}}]}, 0x3c}}, 0x0) 158.220223ms ago: executing program 1 (id=1356): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 157.614719ms ago: executing program 4 (id=1357): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb6, &(0x7f0000010140), &(0x7f00000001c0)=0x4) bind$tipc(r0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @loopback}, {0x4e24, 0x4e22, 0x8}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000850000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$sock_buf(r8, 0x1, 0x55, &(0x7f0000000a40)=""/192, &(0x7f0000000140)=0xc0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa8}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0042f39b485762961d21115a44ba87035c2aa63c3ebcd82d04fbe8c026e4d187b8db336432e5bf46786de7ae83da8276", @ANYRES32=r6, @ANYRES32=r7], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0600000000000000b703005f0000000000850000000c000000b7000000000000009500000000000000bba1437c36531b2424ab223bcb9700a19f925b6ee660a1eba9a071d258e9c752e1079da49b904a736022b98c4f2cc738117206fcdc45279eca2b1d3f788280b787a35ed3e05f7e5986fbcffb421a91255716c8b32b5677003217646fdc"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r9, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000440), 0x10) listen(r11, 0x4) listen(r11, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 144.873826ms ago: executing program 2 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="658300000000000000000100000008002a01424c30b88def9eb2024597222c1665eff266df05be6f9964c7aac48273894d79ffee7837d648a8442d5ea651aa0500000000000000bede46da3d6e0540540ad2264859ce383a2f74362c63b60d333043b220c02211fd4a4102e255e005c895a37a5a796a769a04441474fd931fae1b397e090003b67b26cd36a12baadac21ab906e0516ebdf53a4d0000000000000000000000000000ec49290a2c64043cc0bab7ee6e28925c551cd37fa3bbb93d96b9d287186c12f865f394b11de33e0f6c3b6e68ec4719a6c4130bcb43d7b9489fd9a41b0cb1808d12491f6b8f8289119f124168db6813e476e973aae717d290f3e6ef40e03794b372ee4305ff1dbd475b1c9a02a5d896f0f7b641962ead1b8c31aec9f5ff80799a9d0a530be25d3a696dd1c484e53dacfc35bd28e075c52521f0c397c65722598d4885f24fb155203e1ab15401c05f935567ab91e933021d5af404e267a326f5d04afd75395aede01f7ded", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r2, 0x10b, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @void, @val={0xc, 0x99, {0x2, 0x7a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40800) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x80000001, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 74.138588ms ago: executing program 0 (id=1359): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x10, @private1, 0x480b3c04}, 0x1c, 0x0}}, {{&(0x7f0000001680)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7ff7ffff}, 0x39, 0x0, 0x4d, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000002900000039000000730000f400000074db03ee4e6465b7f3332248622cec675edf59403744dd1067af34df5cdcce7a98a3681e0e38983dbee2d29e6c0a0c7923bc0ff53e9a3ae13795f64419d9b16a900dc5ef6ca9fd626e4ea5daa795d0f291f432c15d9fe200d256e4091b34243f600ffc259a5702e10effb21c27203f5c3f05bf164852510db458398e5d4da7c76f10bbd2fcb89bd30b92037c9bdb6a2bf9e6551f243ed58c303aff77eb44cc6a942c30e93105bed006bc1f7b9025eacd15a202d180b7dc232cbc293618ab6aae6e21"], 0x18}}], 0x2, 0x80) socket(0x2b, 0x80801, 0x1) (async) r1 = socket(0x2b, 0x80801, 0x1) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x2aea}}, 0x80, 0x0}}], 0x35, 0x80) (async) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x2aea}}, 0x80, 0x0}}], 0x35, 0x80) socket(0x11, 0x800000003, 0x0) (async) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff, 0xffe0}, {0xf, 0x2}, {0x5, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x10001}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) (async) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) connect$netlink(r4, &(0x7f0000000000)=@proc, 0xc) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r6, 0x0, 0x0) (async) connect$netrom(r6, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0xdb039000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0xdb039000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000101000000000000000100dcd080fad0be", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000500"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000101000000000000000100dcd080fad0be", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000500"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000300)="e427043db2aa47", &(0x7f0000000500)=""/163}, 0x20) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)) 30.349771ms ago: executing program 3 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1], 0x28}}, 0x802) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r2) 0s ago: executing program 1 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1228108a}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "96f09058a37f3f857dddb5d4bf7413b4"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2204c800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x7, 0xc20, 0x3, 0x8, 0x3, [0x0, 0x34700000, 0x3]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000580)={0xc0, 0x0, 0x400, 0x0, 0x400, {}, [@ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "04ba01198e042fc74230857b08d37ae58b1d1071f53ac9ffd442324fa725c6f60b1707b2f56454b3b096d7d8c931101f9917afac383d5d873696d3b435510fef1f70ea2cd72dd72fa46f851537f888b1b075edaa661b28031115324bd7f4f6aeb28dbb2f8643f2451d3c021d0b91dc9c9f822339b21f72c0265bed5647376e45f23f12e5678c8e751c1615dd0f"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x20, &(0x7f0000000e40)={&(0x7f0000000700)=""/67, 0x43, 0x0, &(0x7f0000000e00)=""/25, 0x19}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x20, &(0x7f0000000e40)={&(0x7f0000000700)=""/67, 0x43, 0x0, &(0x7f0000000e00)=""/25, 0x19}}, 0x10) kernel console output (not intermixed with test programs): dge_slave_0: entered allmulticast mode [ 75.363822][ T5839] bridge_slave_0: entered promiscuous mode [ 75.372458][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.379700][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.386997][ T5839] bridge_slave_1: entered allmulticast mode [ 75.393909][ T5839] bridge_slave_1: entered promiscuous mode [ 75.402693][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.413656][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.421119][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.447532][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.492787][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.521550][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.553687][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.583248][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.603615][ T5844] team0: Port device team_slave_0 added [ 75.612924][ T5844] team0: Port device team_slave_1 added [ 75.621697][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.650168][ T5840] team0: Port device team_slave_0 added [ 75.660014][ T5842] hsr_slave_0: entered promiscuous mode [ 75.666244][ T5842] hsr_slave_1: entered promiscuous mode [ 75.704803][ T5840] team0: Port device team_slave_1 added [ 75.714035][ T5841] team0: Port device team_slave_0 added [ 75.733413][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.740904][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.767134][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.806049][ T5841] team0: Port device team_slave_1 added [ 75.812773][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.819914][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.845948][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.866092][ T5839] team0: Port device team_slave_0 added [ 75.882806][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.889985][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.916244][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.955243][ T5839] team0: Port device team_slave_1 added [ 75.962519][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.969649][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.995976][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.007972][ T5853] Bluetooth: hci1: command tx timeout [ 76.016921][ T5853] Bluetooth: hci0: command tx timeout [ 76.036653][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.043679][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.070053][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.087890][ T5851] Bluetooth: hci4: command tx timeout [ 76.087890][ T5855] Bluetooth: hci3: command tx timeout [ 76.088265][ T5853] Bluetooth: hci2: command tx timeout [ 76.116760][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.123768][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.153971][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.183494][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.191074][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.217259][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.243980][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.251129][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.278094][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.292678][ T5844] hsr_slave_0: entered promiscuous mode [ 76.299623][ T5844] hsr_slave_1: entered promiscuous mode [ 76.305672][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.313726][ T5844] Cannot create hsr debugfs directory [ 76.342172][ T5840] hsr_slave_0: entered promiscuous mode [ 76.348413][ T5840] hsr_slave_1: entered promiscuous mode [ 76.354427][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.362804][ T5840] Cannot create hsr debugfs directory [ 76.434311][ T5841] hsr_slave_0: entered promiscuous mode [ 76.440644][ T5841] hsr_slave_1: entered promiscuous mode [ 76.448216][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.455815][ T5841] Cannot create hsr debugfs directory [ 76.591658][ T5839] hsr_slave_0: entered promiscuous mode [ 76.598543][ T5839] hsr_slave_1: entered promiscuous mode [ 76.604589][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.612262][ T5839] Cannot create hsr debugfs directory [ 76.804569][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.820737][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.849170][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.885188][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.971135][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.981154][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.995826][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.027459][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.043335][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.063440][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.085130][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.108430][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.173547][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.185333][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.214987][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.235554][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.297789][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.312120][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.324404][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.335018][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.438816][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.460599][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.489151][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.505520][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.522488][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.544298][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.552114][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.563086][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.570340][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.599899][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.607052][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.625790][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.632942][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.665043][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.733832][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.744553][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.768248][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.775367][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.831593][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.838836][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.869580][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.891129][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.954987][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.984000][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.002237][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.009424][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.022163][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.049183][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.056412][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.106527][ T5853] Bluetooth: hci0: command tx timeout [ 78.106939][ T5855] Bluetooth: hci1: command tx timeout [ 78.113432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.124571][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.167782][ T5855] Bluetooth: hci2: command tx timeout [ 78.168170][ T5853] Bluetooth: hci3: command tx timeout [ 78.173221][ T5855] Bluetooth: hci4: command tx timeout [ 78.215086][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.245715][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.252937][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.318289][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.412100][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.506441][ T5840] veth0_vlan: entered promiscuous mode [ 78.514428][ T5842] veth0_vlan: entered promiscuous mode [ 78.539172][ T5840] veth1_vlan: entered promiscuous mode [ 78.635320][ T5842] veth1_vlan: entered promiscuous mode [ 78.663616][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.674667][ T5840] veth0_macvtap: entered promiscuous mode [ 78.710136][ T5840] veth1_macvtap: entered promiscuous mode [ 78.766159][ T5842] veth0_macvtap: entered promiscuous mode [ 78.780584][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.793174][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.819286][ T5842] veth1_macvtap: entered promiscuous mode [ 78.837656][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.851915][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861934][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872270][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.959716][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.971768][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.984684][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.012060][ T5841] veth0_vlan: entered promiscuous mode [ 79.021651][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.033129][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.045124][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.076142][ T5841] veth1_vlan: entered promiscuous mode [ 79.093428][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102358][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111769][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.121370][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.153056][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.161761][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.189178][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.239278][ T5844] veth0_vlan: entered promiscuous mode [ 79.248318][ T756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.258161][ T756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.271414][ T5844] veth1_vlan: entered promiscuous mode [ 79.315815][ T5841] veth0_macvtap: entered promiscuous mode [ 79.341248][ T5841] veth1_macvtap: entered promiscuous mode [ 79.412081][ T5839] veth0_vlan: entered promiscuous mode [ 79.447494][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.451402][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.455345][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.480236][ T5839] veth1_vlan: entered promiscuous mode [ 79.500047][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.544384][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.572118][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.585392][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.604006][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.617697][ T5844] veth0_macvtap: entered promiscuous mode [ 79.650503][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.661711][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.672669][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.683343][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.697287][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.714534][ T5844] veth1_macvtap: entered promiscuous mode [ 79.732723][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.751537][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.754280][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.768647][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.779715][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.788834][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.823963][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.841282][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.853124][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.863795][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.873753][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.884246][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.898165][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.949545][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.962839][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.976028][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.987604][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.997635][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.008648][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.023181][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.061908][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.081722][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.092741][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.101983][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.162417][ T5839] veth0_macvtap: entered promiscuous mode [ 80.168387][ T5855] Bluetooth: hci0: command tx timeout [ 80.177938][ T5855] Bluetooth: hci1: command tx timeout [ 80.197908][ T5839] veth1_macvtap: entered promiscuous mode [ 80.246956][ T5855] Bluetooth: hci3: command tx timeout [ 80.248657][ T5853] Bluetooth: hci2: command tx timeout [ 80.252393][ T5855] Bluetooth: hci4: command tx timeout [ 80.326028][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.362856][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.387672][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.398695][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.421886][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.437171][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.447343][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.458075][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.467985][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.481696][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.500085][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.581421][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.595202][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.615907][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.627152][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.639142][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.663493][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.673595][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.690658][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.712629][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.731858][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.742048][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.751688][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.760967][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.781006][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.807182][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.147754][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.178388][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.252398][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.291442][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.458913][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.486620][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.555319][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.566469][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.236973][ T5961] syzkaller1: entered promiscuous mode [ 82.242536][ T5961] syzkaller1: entered allmulticast mode [ 82.256881][ T5855] Bluetooth: hci1: command tx timeout [ 82.258821][ T5853] Bluetooth: hci0: command tx timeout [ 82.327561][ T5853] Bluetooth: hci2: command tx timeout [ 82.328718][ T5855] Bluetooth: hci3: command tx timeout [ 82.333084][ T5851] Bluetooth: hci4: command tx timeout [ 82.508230][ T5965] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 82.666177][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 82.689952][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 83.488364][ T5976] vlan2: entered promiscuous mode [ 83.527074][ T5976] bridge0: entered promiscuous mode [ 83.535341][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.544104][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.635796][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.643746][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.651993][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.659217][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.702059][ T5965] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.840180][ T5965] syz.3.4 (5965) used greatest stack depth: 19344 bytes left [ 84.767112][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.794946][ T6018] IPVS: Error joining to the multicast group [ 84.841839][ T6025] sock: sock_set_timeout: `syz.4.20' (pid 6025) tries to set negative timeout [ 84.881007][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.912686][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 85.087555][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.514508][ T5931] IPVS: starting estimator thread 0... [ 85.609558][ T6067] IPVS: using max 21 ests per chain, 50400 per kthread [ 85.695859][ T6069] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 85.848671][ T6071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.136962][ T6082] Bluetooth: MGMT ver 1.23 [ 86.208228][ T6071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.483629][ T6071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.658965][ T6071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.812165][ T6096] netlink: 116 bytes leftover after parsing attributes in process `syz.1.32'. [ 86.851150][ T6096] Zero length message leads to an empty skb [ 86.910642][ T6071] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.997434][ T6071] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.059823][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.077508][ T6071] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.120541][ T6071] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.200431][ T6106] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 87.283455][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.783508][ T6110] vlan2: entered allmulticast mode [ 87.883988][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 87.895024][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 88.123283][ T6117] netlink: 'syz.3.40': attribute type 21 has an invalid length. [ 88.307357][ T6128] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 3, id = 0 [ 88.335888][ T6123] netlink: 'syz.0.41': attribute type 11 has an invalid length. [ 88.354359][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41'. [ 88.396133][ T6129] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 88.415880][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 88.453556][ T6129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.42'. [ 88.800338][ T6150] netlink: 272 bytes leftover after parsing attributes in process `syz.1.45'. [ 88.845083][ T6150] netlink: 272 bytes leftover after parsing attributes in process `syz.1.45'. [ 89.269303][ T6158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.370076][ T6158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.569646][ T6172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.592626][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 89.901739][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 89.979025][ T6179] openvswitch: netlink: Message has 8 unknown bytes. [ 89.987865][ T6158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.037721][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.54'. [ 90.047793][ T6182] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.084512][ T6179] netlink: 'syz.1.55': attribute type 12 has an invalid length. [ 90.118837][ T6158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.167178][ T6184] pim6reg1: entered promiscuous mode [ 90.172893][ T6184] pim6reg1: entered allmulticast mode [ 90.253245][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 90.380988][ T6158] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464264][ T6158] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.541726][ T6158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.600359][ T6158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974091][ T6214] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 92.172292][ T26] cfg80211: failed to load regulatory.db [ 92.355392][ T6240] xt_TCPMSS: Only works on TCP SYN packets [ 93.252551][ T6270] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 93.312559][ T6270] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 93.325752][ T6270] gretap1: entered promiscuous mode [ 93.358621][ T6270] gretap1: entered allmulticast mode [ 93.606772][ T6284] __nla_validate_parse: 1 callbacks suppressed [ 93.606791][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 94.313305][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.81'. [ 94.887462][ T6351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.86'. [ 97.293237][ T6447] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 97.332163][ T6447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.271804][ T6480] lo: entered allmulticast mode [ 98.287476][ T6480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.473239][ T6484] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 98.522561][ T6484] bond1: entered promiscuous mode [ 98.540795][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.723067][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 98.732945][ T6502] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 98.759549][ T6502] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 98.783563][ T6502] netlink: 80 bytes leftover after parsing attributes in process `syz.0.119'. [ 98.786059][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 99.139303][ T6508] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.121'. [ 99.156727][ T6508] openvswitch: netlink: Missing key (keys=40, expected=80) [ 100.246198][ T6527] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.371894][ T6539] lo: entered allmulticast mode [ 100.384571][ T6539] lo: left allmulticast mode [ 100.395561][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 100.409961][ T6539] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 100.504605][ T6527] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.828227][ T6554] netlink: 44 bytes leftover after parsing attributes in process `syz.0.137'. [ 100.986856][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.087638][ T6527] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.244919][ T6527] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.261649][ T6563] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 101.287480][ T6563] netlink: 224 bytes leftover after parsing attributes in process `syz.3.139'. [ 101.571054][ T6527] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.588669][ T6527] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.624951][ T6527] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.686876][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 101.769899][ T6527] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.637364][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.153'. [ 102.885241][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 103.634673][ T6642] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 103.770877][ T6647] Cannot find del_set index 65534 as target [ 104.818651][ T6689] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.882329][ T6694] syzkaller1: entered promiscuous mode [ 104.888291][ T6694] syzkaller1: entered allmulticast mode [ 104.905594][ T6689] __nla_validate_parse: 3 callbacks suppressed [ 104.905614][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 104.955320][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 105.288827][ T5893] IPv4: Oversized IP packet from 127.0.0.1 [ 105.296887][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 105.303402][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 105.521122][ T6723] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 105.578584][ T6723] syz_tun: entered promiscuous mode [ 105.605156][ T6723] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.618752][ T6726] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 106.198215][ T6744] netlink: 4488 bytes leftover after parsing attributes in process `syz.1.195'. [ 106.831898][ T6758] syzkaller1: entered promiscuous mode [ 106.855358][ T6758] syzkaller1: entered allmulticast mode [ 107.335601][ T6778] netlink: 124 bytes leftover after parsing attributes in process `syz.4.203'. [ 107.358346][ T6781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.204'. [ 107.416629][ T6778] netlink: 'syz.4.203': attribute type 3 has an invalid length. [ 107.686802][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 107.824898][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 108.263636][ T6818] hsr0: entered promiscuous mode [ 108.280751][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 109.020160][ T6818] hsr_slave_0: left promiscuous mode [ 109.023369][ T6842] Illegal XDP return value 4294967294 on prog (id 83) dev N/A, expect packet loss! [ 109.161419][ T6818] hsr_slave_1: left promiscuous mode [ 109.603019][ T6851] geneve2: entered promiscuous mode [ 110.077800][ T6869] x_tables: duplicate underflow at hook 3 [ 110.241455][ T6871] xt_CT: No such helper "snmp" [ 110.537086][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 111.766237][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 112.052310][ T6933] team0: No ports can be present during mode change [ 112.637045][ T6942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.653818][ T6942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.668519][ T6942] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 112.684241][ T6942] bond0 (unregistering): Released all slaves [ 112.715953][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 113.371438][ T6988] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 113.397510][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 113.464481][ T6988] netlink: 6 bytes leftover after parsing attributes in process `syz.1.241'. [ 113.503730][ T6988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.993764][ T7007] netlink: 45 bytes leftover after parsing attributes in process `syz.1.245'. [ 114.300192][ T7024] Bluetooth: MGMT ver 1.23 [ 114.588471][ T7032] bridge0: port 3(gretap0) entered blocking state [ 114.613412][ T7032] bridge0: port 3(gretap0) entered disabled state [ 114.623175][ T7032] gretap0: entered allmulticast mode [ 114.670907][ T7032] gretap0: entered promiscuous mode [ 114.687455][ T7032] bridge0: port 3(gretap0) entered blocking state [ 114.694402][ T7032] bridge0: port 3(gretap0) entered forwarding state [ 114.835113][ T7045] trusted_key: syz.0.253 sent an empty control message without MSG_MORE. [ 115.367575][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 115.630758][ T7062] @ÿ: renamed from bond_slave_0 [ 115.744445][ T7070] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 115.899817][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 116.346556][ T7086] dccp_invalid_packet: P.Data Offset(100) too large [ 116.977041][ T7095] xt_TCPMSS: Only works on TCP SYN packets [ 116.989297][ T7096] netlink: 'syz.4.267': attribute type 10 has an invalid length. [ 117.046466][ T7096] netlink: 2 bytes leftover after parsing attributes in process `syz.4.267'. [ 117.092552][ T7096] team0: entered promiscuous mode [ 117.107718][ T7096] team_slave_0: entered promiscuous mode [ 117.146784][ T7096] team_slave_1: entered promiscuous mode [ 117.172464][ T7096] bridge0: port 3(team0) entered blocking state [ 117.195124][ T7096] bridge0: port 3(team0) entered disabled state [ 117.208435][ T7096] team0: entered allmulticast mode [ 117.223971][ T7096] team_slave_0: entered allmulticast mode [ 117.234101][ T7096] team_slave_1: entered allmulticast mode [ 117.254385][ T7096] bridge0: port 3(team0) entered blocking state [ 117.260862][ T7096] bridge0: port 3(team0) entered forwarding state [ 117.438868][ T7110] netlink: 'syz.3.273': attribute type 4 has an invalid length. [ 117.769882][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 117.788743][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 118.198044][ T7139] xt_TCPMSS: Only works on TCP SYN packets [ 118.390058][ T7147] syz_tun: entered promiscuous mode [ 118.405710][ T7147] syz_tun: entered allmulticast mode [ 118.888997][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.288'. [ 118.914704][ T7162] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (16) [ 119.088249][ T7166] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.192460][ T7166] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.204080][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.229786][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.245697][ T7171] netlink: 10 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.271634][ T7166] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.335856][ T7166] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.481055][ T7166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.533747][ T7166] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.589328][ T7166] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.623878][ T7166] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.628074][ T7182] xt_TCPMSS: Only works on TCP SYN packets [ 120.061166][ T7189] bridge0: entered promiscuous mode [ 120.067312][ T7189] vlan2: entered promiscuous mode [ 120.093089][ T7203] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 120.156033][ T7196] batman_adv: batadv0: Adding interface: dummy0 [ 120.171790][ T7196] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.206889][ T7196] batman_adv: batadv0: Interface activated: dummy0 [ 120.226703][ T7198] batadv0: mtu less than device minimum [ 120.238739][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.251005][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.262997][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.274973][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.287246][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.299249][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.311345][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.323374][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.335464][ T7198] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.647604][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 120.795581][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 121.068172][ T7235] netlink: 19 bytes leftover after parsing attributes in process `syz.2.310'. [ 121.092411][ T7237] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.329346][ T7237] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.512503][ T7237] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.556040][ T7232] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 121.667473][ T7237] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.468565][ T7295] netlink: 148 bytes leftover after parsing attributes in process `syz.2.321'. [ 122.573831][ T7301] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 122.606473][ T7301] netlink: 228 bytes leftover after parsing attributes in process `syz.1.323'. [ 123.232358][ T7320] netlink: 'syz.1.329': attribute type 2 has an invalid length. [ 123.266427][ T7320] netlink: 'syz.1.329': attribute type 8 has an invalid length. [ 123.274135][ T7320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.329'. [ 123.401214][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 123.602387][ T7333] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 123.709270][ T7333] bond2: entered promiscuous mode [ 123.726582][ T7333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.744741][ T7339] bond2: (slave bridge2): making interface the new active one [ 123.754391][ T7339] bridge2: entered promiscuous mode [ 123.761179][ T7339] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 123.939274][ T7237] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.028406][ T7237] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.120703][ T7237] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.136269][ T7237] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.327561][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.339'. [ 124.347020][ T7362] netlink: 3 bytes leftover after parsing attributes in process `syz.2.339'. [ 124.716921][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 124.752416][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 125.033134][ T7387] xt_hashlimit: size too large, truncated to 1048576 [ 125.110018][ T7392] xt_hashlimit: size too large, truncated to 1048576 [ 125.488547][ T7399] tipc: Started in network mode [ 125.493508][ T7399] tipc: Node identity 3232a71f6f4a, cluster identity 4711 [ 125.540560][ T7399] tipc: Enabled bearer , priority 0 [ 125.864051][ T7399] tipc: Resetting bearer [ 126.578189][ T5930] tipc: Node number set to 1568188191 [ 128.244291][ T7399] tipc: Disabling bearer [ 128.503514][ T7458] xt_hashlimit: size too large, truncated to 1048576 [ 128.555744][ T7454] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.738220][ T7454] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.786816][ T7471] net_ratelimit: 11 callbacks suppressed [ 128.786838][ T7471] dccp_invalid_packet: P.Data Offset(102) too large [ 128.844470][ T7464] batadv_slave_1: entered promiscuous mode [ 128.895860][ T7477] __nla_validate_parse: 2 callbacks suppressed [ 128.895884][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 129.051138][ T7454] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.074298][ T7468] batadv_slave_1: left promiscuous mode [ 129.144629][ T7454] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.290054][ T7489] Bluetooth: MGMT ver 1.23 [ 129.364950][ T7454] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.411618][ T7492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.370'. [ 129.463639][ T7454] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.495258][ T7454] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.521273][ T7454] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.540694][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.887758][ T7514] xt_hashlimit: max too large, truncated to 1048576 [ 130.414589][ T7522] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 130.430323][ T7522] netlink: 92 bytes leftover after parsing attributes in process `syz.4.380'. [ 130.439678][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 130.450607][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 131.273092][ T7574] xt_hashlimit: size too large, truncated to 1048576 [ 131.324600][ T7577] netlink: 'syz.2.393': attribute type 12 has an invalid length. [ 131.438910][ T7582] tipc: Started in network mode [ 131.453367][ T7582] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711 [ 131.483658][ T7582] tipc: Enabling of bearer rejected, failed to enable media [ 131.522525][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 131.674295][ T7591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.397'. [ 131.806611][ T7588] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 131.812184][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 132.294927][ T7614] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (64) [ 132.662527][ T7627] SET target dimension over the limit! [ 133.130129][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.146494][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.547223][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.606724][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.656458][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.697746][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.756510][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.799565][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 133.826402][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.876581][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.926419][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.986437][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.036492][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.087200][ T7612] batadv_slave_0: entered promiscuous mode [ 134.124831][ T7612] batadv_slave_0: left promiscuous mode [ 134.190375][ T7645] bridge0: entered promiscuous mode [ 134.229146][ T7645] bridge0: left promiscuous mode [ 134.410218][ T7651] No such timeout policy "syz0" [ 134.848984][ T7668] Bluetooth: MGMT ver 1.23 [ 134.864736][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 134.878535][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 135.055802][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 135.065418][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 135.639238][ T5930] IPVS: starting estimator thread 0... [ 135.760893][ T7694] IPVS: using max 19 ests per chain, 45600 per kthread [ 136.000946][ T5893] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/3 [ 136.046145][ T5893] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 136.251571][ T7713] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 136.308648][ T7713] netlink: 45 bytes leftover after parsing attributes in process `syz.0.430'. [ 136.504577][ T6031] IPVS: stop unused estimator thread 0... [ 136.530992][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.437'. [ 136.550423][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 136.566140][ T7726] tap0: tun_chr_ioctl cmd 1074025677 [ 136.572587][ T7726] tap0: linktype set to 773 [ 136.595945][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 136.866212][ T7738] bpq0: entered allmulticast mode [ 137.191646][ T7752] netlink: 'syz.1.443': attribute type 2 has an invalid length. [ 137.655506][ T7777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.665904][ T7777] bond0: (slave bond1): Enslaving as an active interface with an up link [ 137.784445][ T7786] netlink: 'syz.4.453': attribute type 6 has an invalid length. [ 137.829262][ T7788] netlink: 'syz.4.453': attribute type 6 has an invalid length. [ 138.067135][ T7800] netlink: 'syz.4.456': attribute type 2 has an invalid length. [ 138.186728][ T7800] : entered promiscuous mode [ 138.641031][ T7818] xt_hashlimit: size too large, truncated to 1048576 [ 138.699228][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 138.766205][ T7823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.463'. [ 138.996010][ T30] audit: type=1107 audit(1742929892.132:2): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š±‹fàd&r4ÑQ?@ò^Á6ÎÌ6$.‹»ë…¨¬Œª¿{R—Ë]ÀÝz@º’ìóÞë}[Þ]õp·€ÏOK¨‘òî”Ñm®x\ÏŠû¸‚' [ 139.288673][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.827649][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 139.893360][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.960077][ T7869] netlink: 'syz.2.482': attribute type 29 has an invalid length. [ 140.018311][ T7874] netlink: 'syz.2.482': attribute type 29 has an invalid length. [ 140.041334][ T7872] xt_TCPMSS: Only works on TCP SYN packets [ 140.071817][ T7880] netlink: 'syz.2.482': attribute type 29 has an invalid length. [ 140.775242][ T7903] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 140.784852][ T7896] can: request_module (can-proto-0) failed. [ 141.189414][ T7908] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 141.285972][ T7916] __nla_validate_parse: 5 callbacks suppressed [ 141.285994][ T7916] netlink: 188 bytes leftover after parsing attributes in process `syz.2.494'. [ 141.448979][ T7921] netlink: 'syz.3.490': attribute type 11 has an invalid length. [ 141.458069][ T7921] netlink: 232 bytes leftover after parsing attributes in process `syz.3.490'. [ 141.517490][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 141.592944][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 141.802918][ T7929] syz.1.495 (7929) used greatest stack depth: 18800 bytes left [ 142.087007][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 142.123565][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 142.213897][ T7950] xt_hashlimit: size too large, truncated to 1048576 [ 142.444735][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 144.687191][ T7983] IPVS: Error connecting to the multicast addr [ 144.700458][ T7985] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.728389][ T7980] netlink: 'syz.4.511': attribute type 7 has an invalid length. [ 145.326871][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 145.675087][ T8025] sock: sock_timestamping_bind_phc: sock not bind to device [ 145.811959][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 145.945157][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.525'. [ 146.732388][ T8068] __nla_validate_parse: 2 callbacks suppressed [ 146.732411][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 146.900355][ T8072] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 147.766744][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 148.046761][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 148.081471][ T8102] gretap0: entered promiscuous mode [ 148.113488][ T8102] gretap0: left promiscuous mode [ 148.322408][ T8116] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 148.343592][ T8116] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 148.591626][ T8123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.711739][ T8128] vlan2: entered allmulticast mode [ 148.724904][ T8128] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 149.141494][ T8117] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 149.295642][ T8139] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 149.691909][ T8155] xt_hashlimit: size too large, truncated to 1048576 [ 149.834976][ T8149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.940325][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 149.984270][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 150.007846][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.567'. [ 150.047042][ T8170] block nbd0: Unsupported socket: shutdown callout must be supported. [ 150.114873][ T8149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.244988][ T8149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.363819][ T8149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.407806][ T5851] Bluetooth: hci1: command 0x080f tx timeout [ 150.459451][ T8181] netlink: 'syz.1.569': attribute type 2 has an invalid length. [ 150.542843][ T8181] fþ: entered promiscuous mode [ 150.552654][ T8183] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 150.678376][ T8149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.731566][ T8149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.773443][ T8149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.832411][ T8185] wireguard0: entered promiscuous mode [ 150.859453][ T8185] wireguard0: entered allmulticast mode [ 150.908657][ T8193] netlink: 'syz.4.571': attribute type 4 has an invalid length. [ 150.930826][ T8197] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.005517][ T8149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.075224][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 151.262993][ T8206] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 151.899848][ T8238] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 151.944814][ T8238] syz_tun: entered promiscuous mode [ 152.018078][ T8238] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 152.091178][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 152.138157][ T8250] netlink: 64 bytes leftover after parsing attributes in process `syz.3.588'. [ 152.207097][ T8257] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 152.241749][ T8257] bond0: entered promiscuous mode [ 152.256768][ T8257] bond_slave_0: entered promiscuous mode [ 152.276798][ T8257] bond_slave_1: entered promiscuous mode [ 152.282692][ T8257] bond1: entered promiscuous mode [ 152.323476][ T8257] bond0: left promiscuous mode [ 152.336443][ T8257] bond_slave_0: left promiscuous mode [ 152.342310][ T8257] bond_slave_1: left promiscuous mode [ 152.353839][ T8257] bond1: left promiscuous mode [ 152.381610][ T8260] netlink: 'syz.1.590': attribute type 2 has an invalid length. [ 152.410430][ T8260] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.590'. [ 152.705977][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 153.806956][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.814388][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.873620][ T8304] batman_adv: batadv0: Interface deactivated: dummy0 [ 153.983050][ T8304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.997603][ T8304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.062749][ T8304] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.072788][ T8304] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.083817][ T8304] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.096559][ T8304] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.127916][ T8304] vlan2: left promiscuous mode [ 154.132952][ T8304] bridge0: left promiscuous mode [ 154.176792][ T8326] lo: left allmulticast mode [ 154.274688][ T8326] bridge0: port 3(gretap0) entered disabled state [ 154.329284][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.337940][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.517094][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.567814][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.594454][ T8340] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 154.787062][ T8326] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.795497][ T8326] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.804882][ T8326] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.813528][ T8326] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.822606][ T8326] geneve2: left promiscuous mode [ 154.890261][ T8353] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 155.157262][ T8365] netlink: 'syz.1.616': attribute type 72 has an invalid length. [ 155.203473][ T8366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.615'. [ 155.220088][ T8365] netlink: 200 bytes leftover after parsing attributes in process `syz.1.616'. [ 155.278434][ T8361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.335570][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 155.383671][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 155.507978][ T8361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.547295][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 155.561483][ T8384] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 155.757916][ T8361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.837956][ T8394] netlink: 'syz.3.622': attribute type 29 has an invalid length. [ 155.858265][ T8395] netlink: 'syz.3.622': attribute type 29 has an invalid length. [ 155.880681][ T8394] netlink: 516 bytes leftover after parsing attributes in process `syz.3.622'. [ 155.907407][ T8394] unsupported nla_type 58 [ 156.010155][ T8361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.125652][ T8404] unsupported nlmsg_type 40 [ 156.753951][ T8409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.784566][ T8409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.799969][ T8409] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 156.845802][ T8409] bond0 (unregistering): Released all slaves [ 156.880112][ T8361] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.983155][ T8361] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.053547][ T8361] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.156228][ T8424] __nla_validate_parse: 1 callbacks suppressed [ 157.156264][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.633'. [ 157.180726][ T8361] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.604601][ T8431] netlink: 'syz.3.636': attribute type 7 has an invalid length. [ 157.647728][ T8431] netlink: 56 bytes leftover after parsing attributes in process `syz.3.636'. [ 157.674939][ T8431] netlink: 576 bytes leftover after parsing attributes in process `syz.3.636'. [ 158.243103][ T8455] veth0_to_bridge: entered promiscuous mode [ 158.448575][ T8461] veth0_to_bridge: left promiscuous mode [ 158.648812][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.646'. [ 158.784574][ T8474] xt_CT: No such helper "snmp" [ 158.811793][ T8483] netlink: 188 bytes leftover after parsing attributes in process `syz.1.649'. [ 158.821758][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'. [ 158.943834][ T8483] veth1_macvtap: left promiscuous mode [ 158.962296][ T8483] macsec0: entered allmulticast mode [ 159.015638][ T8487] netlink: 96 bytes leftover after parsing attributes in process `syz.0.650'. [ 159.390478][ T8497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.653'. [ 160.000106][ T8522] netlink: 'syz.4.659': attribute type 8 has an invalid length. [ 160.340498][ T8534] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 160.845805][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.667'. [ 160.886693][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.667'. [ 161.210616][ T8565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 161.421620][ T8422] Set syz1 is full, maxelem 65536 reached [ 162.352704][ T30] audit: type=1107 audit(1742929915.492:3): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 162.580273][ T8608] __nla_validate_parse: 3 callbacks suppressed [ 162.580293][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.775386][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.790855][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.843752][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.869179][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.906936][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.940361][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 162.974207][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'. [ 162.985660][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 163.028330][ T8608] netlink: 356 bytes leftover after parsing attributes in process `syz.1.678'. [ 163.114677][ T8621] tipc: Started in network mode [ 163.135970][ T8621] tipc: Node identity 7, cluster identity 4711 [ 163.162071][ T8621] tipc: Node number set to 7 [ 163.178808][ T8621] tipc: Cannot configure node identity twice [ 163.198873][ T8624] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 163.259500][ T8624] netlink: 'syz.2.682': attribute type 2 has an invalid length. [ 163.553635][ T8638] vlan3: entered allmulticast mode [ 163.585726][ T8638] batadv0: entered allmulticast mode [ 163.821314][ T8646] pimreg: entered allmulticast mode [ 163.914539][ T8642] pimreg: left allmulticast mode [ 164.153745][ T8659] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 164.173870][ T8659] netlink: 'syz.0.695': attribute type 4 has an invalid length. [ 164.184795][ T8660] xt_bpf: check failed: parse error [ 164.693970][ T8684] nbd: must specify at least one socket [ 165.547838][ T8730] netlink: 'syz.4.711': attribute type 5 has an invalid length. [ 166.261877][ T8760] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.270728][ T8760] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.279663][ T8760] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.288427][ T8760] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.351246][ T8760] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.360246][ T8760] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.368831][ T8760] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.377327][ T8760] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.721914][ T8772] No such timeout policy "syz0" [ 166.809115][ T8778] netlink: 'syz.0.723': attribute type 21 has an invalid length. [ 166.817461][ T8778] netlink: 'syz.0.723': attribute type 4 has an invalid length. [ 166.828479][ T8778] netlink: 'syz.0.723': attribute type 5 has an invalid length. [ 166.872867][ T5851] block nbd0: Receive control failed (result -107) [ 166.957342][ T8772] nbd0: detected capacity change from 0 to 256 [ 166.988463][ T5856] block nbd0: Dead connection, failed to find a fallback [ 167.006501][ T5856] block nbd0: shutting down sockets [ 167.093298][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.118335][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.135494][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.190329][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.214669][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.275046][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.290401][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.336507][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.364367][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.396482][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.417849][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.457251][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.465356][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.516678][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.526781][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.586744][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.594639][ T5856] ldm_validate_partition_table(): Disk read failed. [ 167.621627][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.657269][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.664357][ T8804] netlink: 'syz.0.731': attribute type 58 has an invalid length. [ 167.685491][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.706460][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.716924][ T5856] Dev nbd0: unable to read RDB block 0 [ 167.722916][ T5856] nbd0: unable to read partition table [ 167.798813][ T5856] ldm_validate_partition_table(): Disk read failed. [ 167.805911][ T5856] Dev nbd0: unable to read RDB block 0 [ 167.853963][ T5856] nbd0: unable to read partition table [ 167.982063][ T8818] netlink: 'syz.0.735': attribute type 4 has an invalid length. [ 168.255921][ T8830] __nla_validate_parse: 50 callbacks suppressed [ 168.255947][ T8830] netlink: 188 bytes leftover after parsing attributes in process `syz.1.737'. [ 168.344154][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 168.375094][ T8830] vlan0: entered promiscuous mode [ 168.515490][ T8832] syz_tun: left promiscuous mode [ 168.529876][ T8841] sctp: [Deprecated]: syz.3.740 (pid 8841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.529876][ T8841] Use struct sctp_sack_info instead [ 168.565268][ T8832] bridge0: port 3(team0) entered disabled state [ 168.571938][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.579492][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.867957][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.896152][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.037965][ T8832] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.066026][ T8832] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.076717][ T5896] hid-generic 0005:15C2:5505.0002: item fetching failed at offset 0/4 [ 169.086256][ T5896] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22 [ 169.104499][ T8832] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.116421][ T8832] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.228632][ T8832] gretap1: left promiscuous mode [ 169.252162][ T8832] gretap1: left allmulticast mode [ 169.525863][ T8872] can: request_module (can-proto-3) failed. [ 169.660591][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 169.727283][ T8890] netlink: 'syz.4.749': attribute type 11 has an invalid length. [ 169.879572][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 169.938660][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 169.972406][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 170.015065][ T8902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 170.033209][ T8902] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 170.270353][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 170.285216][ T8914] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 170.421520][ T8919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.757'. [ 170.609160][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 170.678303][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.729584][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 171.206710][ T5853] Bluetooth: hci2: command 0x0405 tx timeout [ 171.646098][ T8964] netlink: 'syz.4.769': attribute type 2 has an invalid length. [ 171.657434][ T8965] sctp: [Deprecated]: syz.0.770 (pid 8965) Use of int in max_burst socket option. [ 171.657434][ T8965] Use struct sctp_assoc_value instead [ 171.673148][ T8966] xt_l2tp: unknown flags: 10 [ 171.678451][ T8964] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 172.181924][ T8990] netlink: 'syz.1.776': attribute type 4 has an invalid length. [ 172.412930][ T9000] netlink: 'syz.2.780': attribute type 3 has an invalid length. [ 172.671179][ T9014] gretap0: left allmulticast mode [ 172.696504][ T9014] gretap0: left promiscuous mode [ 172.701753][ T9014] bridge0: port 3(gretap0) entered disabled state [ 172.813606][ T9014] bridge_slave_0: left promiscuous mode [ 172.819705][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.834827][ T9014] bridge_slave_1: left allmulticast mode [ 172.854389][ T9014] bridge_slave_1: left promiscuous mode [ 172.869229][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.885528][ T9014] bond0: (slave bond_slave_0): Releasing backup interface [ 172.899509][ T9014] bond0: (slave bond_slave_1): Releasing backup interface [ 172.927061][ T9014] team0: Port device team_slave_0 removed [ 172.957281][ T9014] team0: Port device team_slave_1 removed [ 172.963554][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.020289][ T9023] team0: Mode changed to "loadbalance" [ 173.244003][ T5851] Bluetooth: hci2: link tx timeout [ 173.250467][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.461749][ T9037] __nla_validate_parse: 2 callbacks suppressed [ 173.461778][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 173.764949][ T9070] netlink: 1364 bytes leftover after parsing attributes in process `syz.4.796'. [ 173.913547][ T9079] xt_hashlimit: size too large, truncated to 1048576 [ 173.959394][ T9079] syz.4.798: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.998463][ T9079] CPU: 1 UID: 0 PID: 9079 Comm: syz.4.798 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 173.998494][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.998510][ T9079] Call Trace: [ 173.998517][ T9079] [ 173.998524][ T9079] dump_stack_lvl+0x241/0x360 [ 173.998559][ T9079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.998582][ T9079] ? __pfx__printk+0x10/0x10 [ 173.998611][ T9079] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 173.998637][ T9079] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 173.998685][ T9079] warn_alloc+0x278/0x410 [ 173.998712][ T9079] ? __pfx_warn_alloc+0x10/0x10 [ 173.998740][ T9079] ? htable_create+0x102/0x880 [ 173.998762][ T9079] ? __get_vm_area_node+0x1c8/0x2d0 [ 173.998794][ T9079] ? __get_vm_area_node+0x25c/0x2d0 [ 173.998839][ T9079] __vmalloc_node_range_noprof+0x62f/0x1380 [ 173.998889][ T9079] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.998921][ T9079] ? htable_create+0x102/0x880 [ 173.998943][ T9079] vmalloc_noprof+0x79/0x90 [ 173.998963][ T9079] ? htable_create+0x102/0x880 [ 173.998985][ T9079] htable_create+0x102/0x880 [ 173.999014][ T9079] hashlimit_mt_check_common+0x710/0xa40 [ 173.999046][ T9079] hashlimit_mt_check_v1+0x2ea/0x540 [ 173.999072][ T9079] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 173.999092][ T9079] ? trace_contention_end+0x3c/0x120 [ 173.999121][ T9079] ? cpus_read_unlock+0xa6/0x140 [ 173.999147][ T9079] ? __mutex_unlock_slowpath+0x227/0x800 [ 173.999182][ T9079] xt_check_match+0x368/0xa40 [ 173.999205][ T9079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.999237][ T9079] ? __pfx_xt_check_match+0x10/0x10 [ 173.999272][ T9079] ? xt_find_match+0x1df/0x230 [ 173.999314][ T9079] translate_table+0x1704/0x2490 [ 173.999374][ T9079] ? __pfx_translate_table+0x10/0x10 [ 173.999405][ T9079] ? __might_fault+0xaa/0x120 [ 173.999425][ T9079] ? __pfx_lock_release+0x10/0x10 [ 173.999463][ T9079] ? __virt_addr_valid+0x183/0x530 [ 173.999487][ T9079] ? __might_fault+0xc6/0x120 [ 173.999513][ T9079] ? copy_from_sockptr_offset+0x6b/0xb0 [ 173.999547][ T9079] do_ip6t_set_ctl+0xe4c/0x1270 [ 173.999584][ T9079] ? nf_setsockopt+0x240/0x2c0 [ 173.999603][ T9079] ? aa_label_sk_perm+0x4f3/0x6c0 [ 173.999633][ T9079] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 173.999665][ T9079] ? rcu_is_watching+0x15/0xb0 [ 173.999689][ T9079] ? trace_contention_end+0x3c/0x120 [ 173.999723][ T9079] ? __mutex_unlock_slowpath+0x227/0x800 [ 173.999763][ T9079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.999817][ T9079] nf_setsockopt+0x295/0x2c0 [ 173.999845][ T9079] rawv6_setsockopt+0x2ac/0x690 [ 173.999882][ T9079] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 173.999903][ T9079] ? __pfx_lock_acquire+0x10/0x10 [ 173.999930][ T9079] ? aa_sock_opt_perm+0x79/0x120 [ 173.999961][ T9079] ? sock_common_setsockopt+0x37/0xc0 [ 173.999996][ T9079] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 174.000028][ T9079] do_sock_setsockopt+0x3af/0x720 [ 174.000058][ T9079] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 174.000087][ T9079] ? __fget_files+0x395/0x410 [ 174.000115][ T9079] ? __fget_files+0x2a/0x410 [ 174.000153][ T9079] __x64_sys_setsockopt+0x1ee/0x280 [ 174.000184][ T9079] do_syscall_64+0xf3/0x230 [ 174.000213][ T9079] ? clear_bhb_loop+0x35/0x90 [ 174.000246][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.000280][ T9079] RIP: 0033:0x7f2e8c18d169 [ 174.000302][ T9079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.000318][ T9079] RSP: 002b:00007f2e8cf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.000339][ T9079] RAX: ffffffffffffffda RBX: 00007f2e8c3a6160 RCX: 00007f2e8c18d169 [ 174.000353][ T9079] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 174.000364][ T9079] RBP: 00007f2e8c20e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 174.000376][ T9079] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 174.000388][ T9079] R13: 0000000000000000 R14: 00007f2e8c3a6160 R15: 00007ffd0d6a0468 [ 174.000417][ T9079] [ 174.000425][ T9079] Mem-Info: [ 174.415748][ T9079] active_anon:6509 inactive_anon:0 isolated_anon:0 [ 174.415748][ T9079] active_file:1430 inactive_file:38338 isolated_file:0 [ 174.415748][ T9079] unevictable:768 dirty:102 writeback:0 [ 174.415748][ T9079] slab_reclaimable:10376 slab_unreclaimable:103306 [ 174.415748][ T9079] mapped:28491 shmem:1412 pagetables:879 [ 174.415748][ T9079] sec_pagetables:0 bounce:0 [ 174.415748][ T9079] kernel_misc_reclaimable:0 [ 174.415748][ T9079] free:1326708 free_pcp:4718 free_cma:0 [ 174.546415][ T9079] Node 0 active_anon:26136kB inactive_anon:0kB active_file:5720kB inactive_file:153276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114164kB dirty:408kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12456kB pagetables:3516kB sec_pagetables:0kB all_unreclaimable? no [ 174.616500][ T9079] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 174.702275][ T9079] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.777638][ T30] audit: type=1800 audit(1742929927.912:4): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.805" name="(" dev="tmpfs" ino=832 res=0 errno=0 [ 174.786059][ T9079] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 174.831100][ T9079] Node 0 DMA32 free:1407116kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:25996kB inactive_anon:0kB active_file:5720kB inactive_file:152952kB unevictable:1536kB writepending:408kB present:3129332kB managed:2549680kB mlocked:0kB bounce:0kB free_pcp:2116kB local_pcp:824kB free_cma:0kB [ 174.909060][ T9079] lowmem_reserve[]: 0 0 0 0 0 [ 174.925500][ T9079] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.013463][ T9079] lowmem_reserve[]: 0 0 0 0 0 [ 175.039180][ T9079] Node 1 Normal free:3900976kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.120072][ T9079] lowmem_reserve[]: 0 0 0 0 0 [ 175.142448][ T9079] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.174883][ T9079] Node 0 DMA32: 1252*4kB (UME) 321*8kB (UME) 225*16kB (UME) 200*32kB (UME) 161*64kB (UM) 71*128kB (UME) 39*256kB (UM) 32*512kB (UM) 19*1024kB (UME) 6*2048kB (UE) 318*4096kB (UM) = 1397608kB [ 175.195832][ T9129] netlink: 'syz.3.810': attribute type 5 has an invalid length. [ 175.226449][ T9079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.296239][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 175.296682][ T9079] Node 1 Normal: 232*4kB (UE) 84*8kB (UME) 43*16kB (UME) 242*32kB (UME) 112*64kB (UME) 26*128kB (UME) 20*256kB (UME) 7*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3900976kB [ 175.380560][ T9079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.426135][ T9079] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.473542][ T9079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.502980][ T9079] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.521694][ T9079] 41178 total pagecache pages [ 175.529292][ T9079] 0 pages in swap cache [ 175.533648][ T9079] Free swap = 124996kB [ 175.542393][ T9079] Total swap = 124996kB [ 175.549582][ T9079] 2097051 pages RAM [ 175.553680][ T9079] 0 pages HighMem/MovableOnly [ 175.562346][ T9079] 427909 pages reserved [ 175.569411][ T9079] 0 pages cma reserved [ 175.921165][ T9144] pim6reg: entered allmulticast mode [ 175.982663][ T9146] pim6reg: left allmulticast mode [ 176.132237][ T9156] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 176.361236][ T9163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 176.634724][ T9185] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.823'. [ 176.696983][ T9185] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.823'. [ 176.873911][ T9199] macsec0: entered promiscuous mode [ 176.881049][ T9197] macsec0: left promiscuous mode [ 176.956607][ T9201] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 177.190782][ T9215] SET target dimension over the limit! [ 177.289980][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 177.306869][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.834'. [ 177.525243][ T9230] netlink: 'syz.1.837': attribute type 10 has an invalid length. [ 177.580578][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.604172][ T9230] bond0: (slave team0): Enslaving as an active interface with an up link [ 177.907743][ T9252] batadv_slave_0: entered promiscuous mode [ 177.930056][ T9253] pim6reg: entered allmulticast mode [ 177.967390][ T9253] pim6reg: left allmulticast mode [ 178.012800][ T9252] batadv_slave_0: left promiscuous mode [ 178.443415][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 178.482787][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'. [ 178.490001][ T9286] bridge2: entered promiscuous mode [ 178.528882][ T9286] bridge2: entered allmulticast mode [ 178.553186][ T9286] team0: Device bridge2 is up. Set it down before adding it as a team port [ 179.060956][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 179.267006][ T9305] netlink: 'syz.2.862': attribute type 39 has an invalid length. [ 179.382383][ T9308] netlink: 'syz.0.864': attribute type 58 has an invalid length. [ 179.433174][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.864'. [ 179.778438][ T9317] xt_bpf: check failed: parse error [ 180.062439][ T9337] Unsupported ieee802154 address type: 0 [ 180.898029][ T9327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.868'. [ 181.210594][ T9369] netlink: 88 bytes leftover after parsing attributes in process `syz.2.880'. [ 181.680621][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.885'. [ 181.727347][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 181.755518][ T9386] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.763906][ T9386] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.772275][ T9386] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.780623][ T9386] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.790609][ T9392] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 181.809781][ T9386] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.818360][ T9386] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.826900][ T9386] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.835306][ T9386] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.927786][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.070398][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.082559][ T9399] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 182.096695][ T9399] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 182.145549][ T9392] ip6erspan0: entered promiscuous mode [ 182.178848][ T9392] bond0: (slave ip6erspan0): making interface the new active one [ 182.202074][ T9392] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 182.288814][ T9418] netlink: 165 bytes leftover after parsing attributes in process `syz.2.894'. [ 182.397868][ T9422] macvlan2: entered promiscuous mode [ 182.416390][ T9422] bridge0: entered promiscuous mode [ 182.422616][ T9424] netlink: 137456 bytes leftover after parsing attributes in process `syz.4.898'. [ 182.422985][ T9422] bridge0: port 3(macvlan2) entered blocking state [ 182.438998][ T9422] bridge0: port 3(macvlan2) entered disabled state [ 182.447067][ T9422] macvlan2: entered allmulticast mode [ 182.457452][ T9422] bridge0: entered allmulticast mode [ 182.462704][ T9424] netlink: zone id is out of range [ 182.463951][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 182.480354][ T9422] macvlan2: left allmulticast mode [ 182.484450][ T9424] netlink: zone id is out of range [ 182.490166][ T9422] bridge0: left allmulticast mode [ 182.491933][ T9424] netlink: zone id is out of range [ 182.502254][ T9422] bridge0: left promiscuous mode [ 182.507092][ T9424] netlink: zone id is out of range [ 182.512635][ T9424] netlink: zone id is out of range [ 182.519564][ T9424] netlink: zone id is out of range [ 182.524873][ T9424] netlink: zone id is out of range [ 182.530430][ T9424] netlink: zone id is out of range [ 182.535724][ T9424] netlink: zone id is out of range [ 182.540992][ T9424] netlink: zone id is out of range [ 182.705967][ T9433] sctp: [Deprecated]: syz.0.900 (pid 9433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.705967][ T9433] Use struct sctp_sack_info instead [ 182.721220][ T9440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 182.749094][ T9438] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 182.896796][ T9446] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 183.368986][ T9472] netlink: 'syz.3.911': attribute type 26 has an invalid length. [ 183.553834][ T9491] __nla_validate_parse: 3 callbacks suppressed [ 183.553855][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 183.573675][ T9492] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 183.585099][ T9492] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.916'. [ 183.620677][ T9486] syzkaller0: entered promiscuous mode [ 183.626194][ T9486] syzkaller0: entered allmulticast mode [ 183.642288][ T9491] ipvlan2: entered promiscuous mode [ 183.664585][ T9491] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 183.691640][ T9491] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.804046][ T9508] sctp: [Deprecated]: syz.1.919 (pid 9508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.804046][ T9508] Use struct sctp_sack_info instead [ 184.145627][ T9518] netlink: 'syz.4.923': attribute type 39 has an invalid length. [ 186.168152][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 186.305142][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'. [ 186.582264][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 186.677985][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'. [ 186.706464][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'. [ 186.725680][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 186.745033][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'. [ 186.766538][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'. [ 187.226954][ T9590] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 187.505429][ T9605] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 187.776725][ T9615] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 187.855369][ T9617] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 187.863340][ T9617] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 187.873979][ T9615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.954844][ T9621] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 188.073054][ T9625] dvmrp0: entered allmulticast mode [ 188.352179][ T9628] syzkaller0: entered promiscuous mode [ 188.371440][ T9628] syzkaller0: entered allmulticast mode [ 189.108645][ T9665] IPVS: length: 78 != 2712 [ 189.607300][ T9683] __nla_validate_parse: 5 callbacks suppressed [ 189.607320][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 189.650261][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.967'. [ 191.495883][ T9670] netlink: 2 bytes leftover after parsing attributes in process `syz.4.965'. [ 191.867987][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 192.009142][ T9710] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 192.026502][ T9710] netlink: 224 bytes leftover after parsing attributes in process `syz.3.977'. [ 192.140887][ T9714] bond0: (slave bond1): Error -95 calling ndo_bpf [ 192.453981][ T9731] ip6tnl2: entered promiscuous mode [ 192.678804][ T9742] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 192.774779][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 192.783953][ T9749] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 192.787639][ T9746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.986'. [ 192.801621][ T9747] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.824155][ T9747] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.847991][ T9749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.988'. [ 192.862501][ T9753] sit0: entered promiscuous mode [ 192.874962][ T9753] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 192.893131][ T9753] netlink: 1 bytes leftover after parsing attributes in process `syz.4.987'. [ 192.908363][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 193.461868][ T9766] netlink: 'syz.3.995': attribute type 29 has an invalid length. [ 193.495391][ T9767] bond0: entered promiscuous mode [ 193.525468][ T9767] batadv0: entered promiscuous mode [ 193.561795][ T9767] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 193.617940][ T9767] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 193.681715][ T9767] bond0: left promiscuous mode [ 193.700431][ T9767] batadv0: left promiscuous mode [ 194.413318][ T9820] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 194.639658][ T9828] net_ratelimit: 2094 callbacks suppressed [ 194.639680][ T9828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.957593][ T9834] netlink: 'syz.0.1009': attribute type 16 has an invalid length. [ 194.974457][ T9834] netlink: 'syz.0.1009': attribute type 17 has an invalid length. [ 194.990269][ T9836] __nla_validate_parse: 3 callbacks suppressed [ 194.990290][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'. [ 195.033280][ T9834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.064358][ T9843] netlink: 1112 bytes leftover after parsing attributes in process `syz.2.1011'. [ 196.182791][ T9890] FAULT_INJECTION: forcing a failure. [ 196.182791][ T9890] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.230439][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.1.1024 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 196.230471][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.230484][ T9890] Call Trace: [ 196.230491][ T9890] [ 196.230500][ T9890] dump_stack_lvl+0x241/0x360 [ 196.230539][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.230563][ T9890] ? __pfx__printk+0x10/0x10 [ 196.230585][ T9890] ? __pfx_lock_release+0x10/0x10 [ 196.230618][ T9890] ? vfs_write+0x7fa/0xd10 [ 196.230645][ T9890] should_fail_ex+0x40a/0x550 [ 196.230681][ T9890] _copy_from_user+0x2d/0xb0 [ 196.230711][ T9890] move_addr_to_kernel+0x82/0x150 [ 196.230744][ T9890] __sys_connect+0xb6/0x2d0 [ 196.230766][ T9890] ? __fget_files+0x2a/0x410 [ 196.230796][ T9890] ? __pfx___sys_connect+0x10/0x10 [ 196.230831][ T9890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.230862][ T9890] ? do_syscall_64+0x100/0x230 [ 196.230892][ T9890] __x64_sys_connect+0x7a/0x90 [ 196.230915][ T9890] do_syscall_64+0xf3/0x230 [ 196.230945][ T9890] ? clear_bhb_loop+0x35/0x90 [ 196.230978][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.231006][ T9890] RIP: 0033:0x7f0814b8d169 [ 196.231030][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.231046][ T9890] RSP: 002b:00007f08159b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 196.231077][ T9890] RAX: ffffffffffffffda RBX: 00007f0814da5fa0 RCX: 00007f0814b8d169 [ 196.231092][ T9890] RDX: 0000000000000032 RSI: 0000200000000340 RDI: 0000000000000004 [ 196.231104][ T9890] RBP: 00007f08159b8090 R08: 0000000000000000 R09: 0000000000000000 [ 196.231116][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.231127][ T9890] R13: 0000000000000000 R14: 00007f0814da5fa0 R15: 00007ffdb7c9cbc8 [ 196.231155][ T9890] [ 196.649515][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 196.655990][ T5858] Bluetooth: hci1: command 0x080f tx timeout [ 196.663111][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 196.760443][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 196.773557][ T9899] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1029'. [ 196.809300][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 197.034576][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 197.106477][ T5894] IPVS: starting estimator thread 0... [ 197.206988][ T9921] IPVS: using max 20 ests per chain, 48000 per kthread [ 197.221005][ T9927] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1038'. [ 197.232580][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 197.244019][ T9927] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 197.278402][ T9934] FAULT_INJECTION: forcing a failure. [ 197.278402][ T9934] name failslab, interval 1, probability 0, space 0, times 1 [ 197.300775][ T9934] CPU: 1 UID: 0 PID: 9934 Comm: syz.1.1040 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 197.300806][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.300819][ T9934] Call Trace: [ 197.300826][ T9934] [ 197.300835][ T9934] dump_stack_lvl+0x241/0x360 [ 197.300867][ T9934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.300890][ T9934] ? __pfx__printk+0x10/0x10 [ 197.300914][ T9934] ? __kmalloc_cache_noprof+0x48/0x390 [ 197.300946][ T9934] ? __pfx___might_resched+0x10/0x10 [ 197.300980][ T9934] ? l2tp_tunnel_get+0x89/0x500 [ 197.301018][ T9934] should_fail_ex+0x40a/0x550 [ 197.301054][ T9934] should_failslab+0xac/0x100 [ 197.301084][ T9934] __kmalloc_cache_noprof+0x70/0x390 [ 197.301112][ T9934] ? l2tp_tunnel_create+0x92/0x400 [ 197.301131][ T9934] ? __pfx_l2tp_tunnel_get+0x10/0x10 [ 197.301166][ T9934] l2tp_tunnel_create+0x92/0x400 [ 197.301192][ T9934] pppol2tp_connect+0x862/0x1960 [ 197.301227][ T9934] ? __pfx_pppol2tp_connect+0x10/0x10 [ 197.301249][ T9934] ? aa_sk_perm+0x96d/0xab0 [ 197.301302][ T9934] __sys_connect+0x288/0x2d0 [ 197.301325][ T9934] ? __fget_files+0x2a/0x410 [ 197.301355][ T9934] ? __pfx___sys_connect+0x10/0x10 [ 197.301389][ T9934] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.301422][ T9934] ? do_syscall_64+0x100/0x230 [ 197.301457][ T9934] __x64_sys_connect+0x7a/0x90 [ 197.301479][ T9934] do_syscall_64+0xf3/0x230 [ 197.301509][ T9934] ? clear_bhb_loop+0x35/0x90 [ 197.301541][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.301570][ T9934] RIP: 0033:0x7f0814b8d169 [ 197.301588][ T9934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.301604][ T9934] RSP: 002b:00007f08159b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 197.301627][ T9934] RAX: ffffffffffffffda RBX: 00007f0814da5fa0 RCX: 00007f0814b8d169 [ 197.301642][ T9934] RDX: 0000000000000032 RSI: 0000200000000340 RDI: 0000000000000004 [ 197.301654][ T9934] RBP: 00007f08159b8090 R08: 0000000000000000 R09: 0000000000000000 [ 197.301667][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.301679][ T9934] R13: 0000000000000000 R14: 00007f0814da5fa0 R15: 00007ffdb7c9cbc8 [ 197.301708][ T9934] [ 197.574764][ T9937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 197.656762][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 197.777269][ T9952] netlink: 'syz.1.1044': attribute type 11 has an invalid length. [ 197.886654][ T9962] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 197.916542][ T9962] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 197.993070][ T9961] netlink: 'syz.4.1048': attribute type 4 has an invalid length. [ 198.119864][ T9973] IPVS: Scheduler module ip_vs_sip not found [ 198.135448][ T9966] IPVS: length: 24 != 16106127384 [ 198.150825][ T9971] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.176557][ T9971] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.675126][T10000] pimreg0: tun_chr_ioctl cmd 1074025677 [ 198.681616][T10000] pimreg0: linktype set to 805 [ 198.835309][T10012] netlink: 'syz.4.1060': attribute type 11 has an invalid length. [ 199.395868][T10030] FAULT_INJECTION: forcing a failure. [ 199.395868][T10030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.409332][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.0.1064 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 199.409359][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.409372][T10030] Call Trace: [ 199.409379][T10030] [ 199.409387][T10030] dump_stack_lvl+0x241/0x360 [ 199.409419][T10030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.409441][T10030] ? __pfx__printk+0x10/0x10 [ 199.409464][T10030] ? __pfx_lock_release+0x10/0x10 [ 199.409504][T10030] should_fail_ex+0x40a/0x550 [ 199.409541][T10030] _copy_from_user+0x2d/0xb0 [ 199.409570][T10030] copy_msghdr_from_user+0xae/0x680 [ 199.409609][T10030] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 199.409638][T10030] ? __fget_files+0x2a/0x410 [ 199.409672][T10030] ? __fget_files+0x2a/0x410 [ 199.409711][T10030] __sys_sendmsg+0x209/0x350 [ 199.409741][T10030] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.409793][T10030] ? do_sys_openat2+0x17a/0x1d0 [ 199.409850][T10030] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.409884][T10030] ? do_syscall_64+0x100/0x230 [ 199.409918][T10030] ? do_syscall_64+0xb6/0x230 [ 199.409950][T10030] do_syscall_64+0xf3/0x230 [ 199.409981][T10030] ? clear_bhb_loop+0x35/0x90 [ 199.410010][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.410036][T10030] RIP: 0033:0x7f709898d169 [ 199.410052][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.410066][T10030] RSP: 002b:00007f709971c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.410084][T10030] RAX: ffffffffffffffda RBX: 00007f7098ba6080 RCX: 00007f709898d169 [ 199.410097][T10030] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000004 [ 199.410108][T10030] RBP: 00007f709971c090 R08: 0000000000000000 R09: 0000000000000000 [ 199.410118][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.410127][T10030] R13: 0000000000000001 R14: 00007f7098ba6080 R15: 00007ffec2f65538 [ 199.410151][T10030] [ 199.705273][T10022] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 199.936863][T10040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.145832][T10040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.538470][T10067] __nla_validate_parse: 6 callbacks suppressed [ 200.538496][T10067] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1075'. [ 200.604313][T10072] sit0: entered promiscuous mode [ 200.619041][T10072] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 200.711797][T10072] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1077'. [ 201.023947][T10092] netlink: 'syz.1.1082': attribute type 21 has an invalid length. [ 201.032156][T10092] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1082'. [ 201.062542][T10092] netlink: 'syz.1.1082': attribute type 5 has an invalid length. [ 201.089846][T10092] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1082'. [ 201.162607][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 201.482200][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.529317][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.546663][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.555299][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.560168][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1091'. [ 201.575884][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.614407][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.652746][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.674384][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.699357][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.709497][T10125] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.820789][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 201.851820][T10136] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.862626][T10136] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.878113][T10138] sit0: entered promiscuous mode [ 201.883572][T10138] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 201.891683][T10138] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1094'. [ 202.035440][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 202.421729][T10152] bridge0: entered promiscuous mode [ 202.428889][T10152] bridge0: port 3(macsec2) entered blocking state [ 202.435517][T10152] bridge0: port 3(macsec2) entered disabled state [ 202.442532][T10152] macsec2: entered allmulticast mode [ 202.448051][T10152] bridge0: entered allmulticast mode [ 202.459684][T10152] macsec2: left allmulticast mode [ 202.466528][T10152] bridge0: left allmulticast mode [ 202.473602][T10152] bridge0: left promiscuous mode [ 202.539097][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 202.653674][T10160] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 203.257140][T10191] FAULT_INJECTION: forcing a failure. [ 203.257140][T10191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.317858][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.2.1109 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 203.317888][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.317901][T10191] Call Trace: [ 203.317909][T10191] [ 203.317917][T10191] dump_stack_lvl+0x241/0x360 [ 203.317958][T10191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.317982][T10191] ? __pfx__printk+0x10/0x10 [ 203.318005][T10191] ? __pfx_lock_release+0x10/0x10 [ 203.318046][T10191] should_fail_ex+0x40a/0x550 [ 203.318082][T10191] _copy_from_iter+0x1df/0x1c40 [ 203.318108][T10191] ? __virt_addr_valid+0x183/0x530 [ 203.318130][T10191] ? __pfx_lock_release+0x10/0x10 [ 203.318168][T10191] ? __alloc_skb+0x28f/0x440 [ 203.318191][T10191] ? __pfx__copy_from_iter+0x10/0x10 [ 203.318218][T10191] ? __virt_addr_valid+0x183/0x530 [ 203.318238][T10191] ? __virt_addr_valid+0x183/0x530 [ 203.318256][T10191] ? __virt_addr_valid+0x45f/0x530 [ 203.318276][T10191] ? __phys_addr_symbol+0x2f/0x70 [ 203.318295][T10191] ? __check_object_size+0x47a/0x730 [ 203.318329][T10191] netlink_sendmsg+0x742/0xcb0 [ 203.318361][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.318386][T10191] ? aa_sock_msg_perm+0x91/0x160 [ 203.318424][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.318442][T10191] __sock_sendmsg+0x221/0x270 [ 203.318478][T10191] ____sys_sendmsg+0x53a/0x860 [ 203.318512][T10191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.318536][T10191] ? __fget_files+0x2a/0x410 [ 203.318570][T10191] ? __fget_files+0x2a/0x410 [ 203.318609][T10191] __sys_sendmsg+0x269/0x350 [ 203.318646][T10191] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.318726][T10191] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.318762][T10191] ? do_syscall_64+0x100/0x230 [ 203.318796][T10191] ? do_syscall_64+0xb6/0x230 [ 203.318829][T10191] do_syscall_64+0xf3/0x230 [ 203.318860][T10191] ? clear_bhb_loop+0x35/0x90 [ 203.318893][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.318921][T10191] RIP: 0033:0x7fab7a78d169 [ 203.318939][T10191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.318955][T10191] RSP: 002b:00007fab7b66d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.318978][T10191] RAX: ffffffffffffffda RBX: 00007fab7a9a6080 RCX: 00007fab7a78d169 [ 203.318993][T10191] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000004 [ 203.319005][T10191] RBP: 00007fab7b66d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.319018][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.319029][T10191] R13: 0000000000000001 R14: 00007fab7a9a6080 R15: 00007ffe67e0b138 [ 203.319058][T10191] [ 203.727169][T10204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.736891][T10204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 203.770890][T10208] sit0: entered promiscuous mode [ 203.812112][T10208] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 205.623770][T10274] __nla_validate_parse: 10 callbacks suppressed [ 205.623793][T10274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1140'. [ 205.656750][T10284] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1141'. [ 205.906913][T10290] netlink: 'syz.1.1140': attribute type 30 has an invalid length. [ 205.924354][T10290] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 205.937118][T10290] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 206.301257][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 206.321609][T10306] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1148'. [ 206.588001][T10317] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1152'. [ 207.652378][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 207.860643][T10369] netlink: 'syz.0.1168': attribute type 5 has an invalid length. [ 207.888362][T10369] syzkaller0: entered allmulticast mode [ 208.374806][T10394] netlink: 'syz.4.1173': attribute type 14 has an invalid length. [ 209.194179][T10432] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 209.235006][T10443] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 209.398428][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 209.535384][T10455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.688374][T10455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.810229][T10455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.874811][T10477] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 209.887597][T10477] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1194'. [ 210.091926][T10455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.211823][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'. [ 210.227071][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 210.252539][T10489] netlink: 'syz.2.1199': attribute type 20 has an invalid length. [ 210.295624][T10485] netlink: 'syz.3.1197': attribute type 11 has an invalid length. [ 210.401792][T10455] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.472940][T10455] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.522638][T10499] netlink: 'syz.2.1201': attribute type 30 has an invalid length. [ 210.534828][T10455] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.565373][T10499] netlink: 'syz.2.1201': attribute type 15 has an invalid length. [ 210.584933][T10499] netlink: 'syz.2.1201': attribute type 30 has an invalid length. [ 210.631455][T10455] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.977497][T10504] net_ratelimit: 25 callbacks suppressed [ 210.977518][T10504] openvswitch: netlink: IPv4 tunnel dst address is zero [ 211.271839][T10511] sit0: left promiscuous mode [ 211.345207][ T8855] IPVS: starting estimator thread 0... [ 211.406589][T10511] syz_tun: left promiscuous mode [ 211.446561][T10518] IPVS: using max 22 ests per chain, 52800 per kthread [ 211.510174][T10511] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.517848][T10511] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.705295][T10511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.753241][T10511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.870309][T10511] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.879758][T10511] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.899414][T10511] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.912519][T10511] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.945235][T10511] bond1: left promiscuous mode [ 211.970830][T10511] ip6erspan0: left promiscuous mode [ 212.027269][T10521] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 212.194559][T10530] netlink: 'syz.3.1209': attribute type 5 has an invalid length. [ 212.202696][T10528] sit0: entered promiscuous mode [ 212.208030][T10528] __nla_validate_parse: 4 callbacks suppressed [ 212.208047][T10528] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1208'. [ 212.434050][T10548] lo speed is unknown, defaulting to 1000 [ 212.448378][T10548] lo speed is unknown, defaulting to 1000 [ 212.469219][T10548] lo speed is unknown, defaulting to 1000 [ 212.512579][T10548] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 212.550400][T10552] xt_CT: No such helper "pptp" [ 212.621144][T10548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 212.674288][T10548] lo speed is unknown, defaulting to 1000 [ 212.683127][T10548] lo speed is unknown, defaulting to 1000 [ 212.690498][T10548] lo speed is unknown, defaulting to 1000 [ 212.699043][T10548] lo speed is unknown, defaulting to 1000 [ 212.705982][T10548] lo speed is unknown, defaulting to 1000 [ 213.068547][T10576] vlan3: entered promiscuous mode [ 213.073673][T10576] team0: entered promiscuous mode [ 213.101393][T10576] team_slave_0: entered promiscuous mode [ 213.117914][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 213.129024][T10576] team_slave_1: entered promiscuous mode [ 213.163231][T10580] validate_nla: 1 callbacks suppressed [ 213.163254][T10580] netlink: 'syz.0.1224': attribute type 25 has an invalid length. [ 213.226589][T10581] lo speed is unknown, defaulting to 1000 [ 213.298768][T10587] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.317736][T10587] IPv6: Can't replace route, no match found [ 213.533395][ T30] audit: type=1107 audit(1742929966.672:5): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 213.685190][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'. [ 214.254043][T10636] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 214.260388][T10636] syzkaller1: linktype set to 825 [ 214.402805][T10641] netlink: 'syz.2.1244': attribute type 11 has an invalid length. [ 214.531544][T10643] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1245'. [ 214.546586][T10643] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1245'. [ 215.503856][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 215.663398][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'. [ 215.898319][T10689] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 215.906220][T10689] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1257'. [ 216.341899][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1261'. [ 216.517927][T10705] x_tables: duplicate underflow at hook 2 [ 216.652590][T10709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.699279][T10706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.778943][T10714] FAULT_INJECTION: forcing a failure. [ 216.778943][T10714] name failslab, interval 1, probability 0, space 0, times 0 [ 216.796593][T10714] CPU: 1 UID: 0 PID: 10714 Comm: syz.4.1264 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 216.796623][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.796635][T10714] Call Trace: [ 216.796642][T10714] [ 216.796651][T10714] dump_stack_lvl+0x241/0x360 [ 216.796695][T10714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.796725][T10714] ? __pfx__printk+0x10/0x10 [ 216.796748][T10714] ? __kmalloc_noprof+0xb5/0x4c0 [ 216.796779][T10714] ? __pfx___might_resched+0x10/0x10 [ 216.796805][T10714] ? aa_get_newest_label+0xff/0x6f0 [ 216.796859][T10714] ? genl_get_cmd+0x19e/0xce0 [ 216.796893][T10714] should_fail_ex+0x40a/0x550 [ 216.796931][T10714] should_failslab+0xac/0x100 [ 216.796962][T10714] __kmalloc_noprof+0xdd/0x4c0 [ 216.796992][T10714] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 216.797018][T10714] ? apparmor_capable+0x13b/0x1b0 [ 216.797048][T10714] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 216.797084][T10714] genl_rcv_msg+0x80b/0xec0 [ 216.797120][T10714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.797178][T10714] ? __pfx_lock_acquire+0x10/0x10 [ 216.797209][T10714] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 216.797232][T10714] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 216.797260][T10714] ? __pfx_nl802154_post_doit+0x10/0x10 [ 216.797285][T10714] ? __pfx___might_resched+0x10/0x10 [ 216.797325][T10714] netlink_rcv_skb+0x206/0x480 [ 216.797360][T10714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.797388][T10714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.797455][T10714] genl_rcv+0x28/0x40 [ 216.797479][T10714] netlink_unicast+0x7f6/0x990 [ 216.797525][T10714] ? __pfx_netlink_unicast+0x10/0x10 [ 216.797553][T10714] ? __virt_addr_valid+0x45f/0x530 [ 216.797575][T10714] ? __phys_addr_symbol+0x2f/0x70 [ 216.797595][T10714] ? __check_object_size+0x47a/0x730 [ 216.797630][T10714] netlink_sendmsg+0x8de/0xcb0 [ 216.797670][T10714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.797697][T10714] ? aa_sock_msg_perm+0x91/0x160 [ 216.797736][T10714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.797755][T10714] __sock_sendmsg+0x221/0x270 [ 216.797797][T10714] ____sys_sendmsg+0x53a/0x860 [ 216.797833][T10714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.797857][T10714] ? __fget_files+0x2a/0x410 [ 216.797892][T10714] ? __fget_files+0x2a/0x410 [ 216.797934][T10714] __sys_sendmsg+0x269/0x350 [ 216.797966][T10714] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.798003][T10714] ? do_sys_openat2+0x17a/0x1d0 [ 216.798061][T10714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.798098][T10714] ? do_syscall_64+0x100/0x230 [ 216.798140][T10714] ? do_syscall_64+0xb6/0x230 [ 216.798175][T10714] do_syscall_64+0xf3/0x230 [ 216.798206][T10714] ? clear_bhb_loop+0x35/0x90 [ 216.798240][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.798292][T10714] RIP: 0033:0x7f2e8c18d169 [ 216.798316][T10714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.798334][T10714] RSP: 002b:00007f2e8cf6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.798357][T10714] RAX: ffffffffffffffda RBX: 00007f2e8c3a6080 RCX: 00007f2e8c18d169 [ 216.798372][T10714] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000004 [ 216.798385][T10714] RBP: 00007f2e8cf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.798398][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.798410][T10714] R13: 0000000000000001 R14: 00007f2e8c3a6080 R15: 00007ffd0d6a0468 [ 216.798442][T10714] [ 217.333240][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 217.342685][T10717] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.366680][T10717] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.278264][T10736] netlink: 'syz.4.1272': attribute type 10 has an invalid length. [ 218.312183][T10736] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 218.544927][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 218.550176][T10736] bond0: entered promiscuous mode [ 218.567153][T10736] bond_slave_0: entered promiscuous mode [ 218.584612][T10736] bond_slave_1: entered promiscuous mode [ 218.606745][T10736] bond1: entered promiscuous mode [ 218.614228][T10736] syz_tun: entered promiscuous mode [ 218.636586][T10736] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 218.644217][T10741] IPVS: Error joining to the multicast group [ 218.924094][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 219.277969][T10764] syzkaller1: entered promiscuous mode [ 219.283807][T10764] syzkaller1: entered allmulticast mode [ 219.312461][T10769] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1280'. [ 219.341166][T10769] netlink: 'syz.4.1280': attribute type 3 has an invalid length. [ 219.646424][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 219.647736][T10785] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 219.663479][T10785] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1285'. [ 219.992127][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 220.044708][T10795] netlink: 'syz.1.1288': attribute type 21 has an invalid length. [ 220.369675][T10816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1294'. [ 220.530250][T10825] netlink: 'syz.3.1298': attribute type 1 has an invalid length. [ 220.566630][T10825] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1298'. [ 220.610737][T10828] No such timeout policy "syz0" [ 221.089286][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 221.218250][T10841] lo speed is unknown, defaulting to 1000 [ 221.224709][T10843] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 221.271456][T10843] netlink: 'syz.1.1303': attribute type 2 has an invalid length. [ 221.331397][T10858] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 221.402515][T10858] bond2: entered promiscuous mode [ 221.416779][T10858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.104111][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 223.124126][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 223.377213][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 223.802721][T10985] tipc: New replicast peer: 255.255.255.255 [ 223.822390][T10985] tipc: Enabled bearer , priority 10 [ 223.839464][T10985] netlink: 'syz.2.1345': attribute type 21 has an invalid length. [ 223.852901][T10985] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1345'. [ 223.864307][T10985] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 223.875896][T10985] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 223.886025][T10985] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1345'. [ 223.943511][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 224.320691][T11011] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 224.538499][T11024] netlink: 'syz.2.1358': attribute type 298 has an invalid length. [ 224.615090][T11027] ================================================================== [ 224.623223][T11027] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 224.632037][T11027] Write of size 8 at addr ffff88801272dc70 by task syz.4.1357/11027 [ 224.640169][T11027] [ 224.642533][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.4.1357 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 224.642563][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.642578][T11027] Call Trace: [ 224.642587][T11027] [ 224.642595][T11027] dump_stack_lvl+0x241/0x360 [ 224.642627][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.642651][T11027] ? __pfx__printk+0x10/0x10 [ 224.642674][T11027] ? _printk+0xd5/0x120 [ 224.642693][T11027] ? __virt_addr_valid+0x183/0x530 [ 224.642715][T11027] ? __virt_addr_valid+0x183/0x530 [ 224.642736][T11027] print_report+0x16e/0x5b0 [ 224.642764][T11027] ? __virt_addr_valid+0x183/0x530 [ 224.642784][T11027] ? __virt_addr_valid+0x183/0x530 [ 224.642803][T11027] ? __virt_addr_valid+0x45f/0x530 [ 224.642822][T11027] ? __phys_addr+0xba/0x170 [ 224.642843][T11027] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 224.642868][T11027] kasan_report+0x143/0x180 [ 224.642897][T11027] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 224.642926][T11027] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 224.642961][T11027] wg_socket_init+0x78f/0xea0 [ 224.642996][T11027] ? __pfx_wg_socket_init+0x10/0x10 [ 224.643023][T11027] ? trace_contention_end+0x3c/0x120 [ 224.643048][T11027] ? __pfx_wg_receive+0x10/0x10 [ 224.643079][T11027] ? ib_device_get_by_netdev+0x595/0x5e0 [ 224.643114][T11027] ? wg_open+0x22d/0x420 [ 224.643146][T11027] wg_open+0x255/0x420 [ 224.643168][T11027] __dev_open+0x45a/0x8a0 [ 224.643204][T11027] ? __pfx___dev_open+0x10/0x10 [ 224.643238][T11027] ? dev_set_rx_mode+0xb8/0x2e0 [ 224.643263][T11027] __dev_change_flags+0x1e2/0x6f0 [ 224.643286][T11027] ? wg_packet_queue_init+0x228/0x310 [ 224.643313][T11027] ? __pfx___dev_change_flags+0x10/0x10 [ 224.643343][T11027] rtnl_newlink_create+0x5ea/0xbd0 [ 224.643373][T11027] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 224.643398][T11027] ? __pfx___mutex_lock+0x10/0x10 [ 224.643434][T11027] ? ns_capable+0x8a/0xf0 [ 224.643461][T11027] rtnl_newlink+0x167a/0x1d90 [ 224.643491][T11027] ? __pfx_rtnl_newlink+0x10/0x10 [ 224.643511][T11027] ? __pfx_validate_chain+0x10/0x10 [ 224.643544][T11027] ? validate_chain+0x11e/0x5920 [ 224.643567][T11027] ? __pfx_lock_acquire+0x10/0x10 [ 224.643599][T11027] ? __pfx_lock_release+0x10/0x10 [ 224.643632][T11027] ? __pfx_validate_chain+0x10/0x10 [ 224.643656][T11027] ? mark_lock+0x9a/0x360 [ 224.643677][T11027] ? __lock_acquire+0x1397/0x2100 [ 224.643726][T11027] ? __pfx_lock_release+0x10/0x10 [ 224.643766][T11027] ? __pfx_rtnl_newlink+0x10/0x10 [ 224.643787][T11027] rtnetlink_rcv_msg+0x791/0xcf0 [ 224.643820][T11027] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 224.643854][T11027] ? __lock_acquire+0x1397/0x2100 [ 224.643887][T11027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.643929][T11027] netlink_rcv_skb+0x206/0x480 [ 224.643973][T11027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 224.644008][T11027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.644054][T11027] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.644089][T11027] netlink_unicast+0x7f6/0x990 [ 224.644124][T11027] ? __pfx_netlink_unicast+0x10/0x10 [ 224.644153][T11027] ? __virt_addr_valid+0x45f/0x530 [ 224.644174][T11027] ? __phys_addr_symbol+0x2f/0x70 [ 224.644194][T11027] ? __check_object_size+0x47a/0x730 [ 224.644226][T11027] netlink_sendmsg+0x8de/0xcb0 [ 224.644253][T11027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.644276][T11027] ? aa_sock_msg_perm+0x91/0x160 [ 224.644312][T11027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.644331][T11027] __sock_sendmsg+0x221/0x270 [ 224.644366][T11027] ____sys_sendmsg+0x53a/0x860 [ 224.644396][T11027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.644422][T11027] ? __fget_files+0x2a/0x410 [ 224.644455][T11027] ? __fget_files+0x2a/0x410 [ 224.644490][T11027] __sys_sendmsg+0x269/0x350 [ 224.644516][T11027] ? __pfx_futex_wake+0x10/0x10 [ 224.644550][T11027] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.644598][T11027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.644632][T11027] ? do_syscall_64+0x100/0x230 [ 224.644666][T11027] ? do_syscall_64+0xb6/0x230 [ 224.644698][T11027] do_syscall_64+0xf3/0x230 [ 224.644729][T11027] ? clear_bhb_loop+0x35/0x90 [ 224.644762][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.644791][T11027] RIP: 0033:0x7f2e8c18d169 [ 224.644809][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.644827][T11027] RSP: 002b:00007f2e8cf8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.644851][T11027] RAX: ffffffffffffffda RBX: 00007f2e8c3a5fa0 RCX: 00007f2e8c18d169 [ 224.644868][T11027] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 224.644882][T11027] RBP: 00007f2e8c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.644895][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.644908][T11027] R13: 0000000000000000 R14: 00007f2e8c3a5fa0 R15: 00007ffd0d6a0468 [ 224.644932][T11027] [ 224.644940][T11027] [ 225.121359][T11027] Allocated by task 10951: [ 225.125782][T11027] kasan_save_track+0x3f/0x80 [ 225.130474][T11027] __kasan_slab_alloc+0x66/0x80 [ 225.135344][T11027] kmem_cache_alloc_noprof+0x1d9/0x380 [ 225.140910][T11027] sk_prot_alloc+0x58/0x210 [ 225.145436][T11027] sk_alloc+0x3e/0x370 [ 225.149519][T11027] inet_create+0x648/0xea0 [ 225.153948][T11027] __sock_create+0x4c0/0xa30 [ 225.158559][T11027] __sys_socket+0x150/0x3c0 [ 225.163157][T11027] __x64_sys_socket+0x7a/0x90 [ 225.167927][T11027] do_syscall_64+0xf3/0x230 [ 225.172450][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.178384][T11027] [ 225.180716][T11027] Freed by task 10950: [ 225.184826][T11027] kasan_save_track+0x3f/0x80 [ 225.189547][T11027] kasan_save_free_info+0x40/0x50 [ 225.194587][T11027] __kasan_slab_free+0x59/0x70 [ 225.199360][T11027] kmem_cache_free+0x195/0x410 [ 225.204140][T11027] __sk_destruct+0x4fd/0x690 [ 225.208749][T11027] inet_release+0x17d/0x200 [ 225.213287][T11027] sock_close+0xbc/0x240 [ 225.217628][T11027] __fput+0x3e9/0x9f0 [ 225.221657][T11027] task_work_run+0x24f/0x310 [ 225.226258][T11027] syscall_exit_to_user_mode+0x13f/0x340 [ 225.231912][T11027] do_syscall_64+0x100/0x230 [ 225.236522][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.242423][T11027] [ 225.244748][T11027] The buggy address belongs to the object at ffff88801272d540 [ 225.244748][T11027] which belongs to the cache UDP of size 1856 [ 225.258199][T11027] The buggy address is located 1840 bytes inside of [ 225.258199][T11027] freed 1856-byte region [ffff88801272d540, ffff88801272dc80) [ 225.272186][T11027] [ 225.274518][T11027] The buggy address belongs to the physical page: [ 225.280939][T11027] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12728 [ 225.289726][T11027] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 225.298230][T11027] memcg:ffff8880306e0101 [ 225.302472][T11027] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 225.310040][T11027] page_type: f5(slab) [ 225.314041][T11027] raw: 00fff00000000040 ffff8880212dfc80 dead000000000122 0000000000000000 [ 225.322634][T11027] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff8880306e0101 [ 225.331225][T11027] head: 00fff00000000040 ffff8880212dfc80 dead000000000122 0000000000000000 [ 225.339901][T11027] head: 0000000000000000 0000000080100010 00000000f5000000 ffff8880306e0101 [ 225.348607][T11027] head: 00fff00000000003 ffffea000049ca01 ffffffffffffffff 0000000000000000 [ 225.357305][T11027] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 225.365979][T11027] page dumped because: kasan: bad access detected [ 225.372418][T11027] page_owner tracks the page as allocated [ 225.378134][T11027] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5990, tgid 5988 (syz.2.12), ts 83769411461, free_ts 83767771858 [ 225.399157][T11027] post_alloc_hook+0x1f4/0x240 [ 225.403946][T11027] get_page_from_freelist+0x365c/0x37a0 [ 225.409499][T11027] __alloc_frozen_pages_noprof+0x292/0x710 [ 225.415318][T11027] alloc_pages_mpol+0x311/0x660 [ 225.420302][T11027] allocate_slab+0x8f/0x3a0 [ 225.424814][T11027] ___slab_alloc+0xc27/0x14a0 [ 225.429513][T11027] __slab_alloc+0x58/0xa0 [ 225.433861][T11027] kmem_cache_alloc_noprof+0x268/0x380 [ 225.439338][T11027] sk_prot_alloc+0x58/0x210 [ 225.443849][T11027] sk_alloc+0x3e/0x370 [ 225.448013][T11027] inet_create+0x648/0xea0 [ 225.452447][T11027] __sock_create+0x4c0/0xa30 [ 225.457055][T11027] __sys_socket+0x150/0x3c0 [ 225.461567][T11027] __x64_sys_socket+0x7a/0x90 [ 225.466349][T11027] do_syscall_64+0xf3/0x230 [ 225.470867][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.476793][T11027] page last free pid 5990 tgid 5988 stack trace: [ 225.483122][T11027] free_frozen_pages+0xe0d/0x10e0 [ 225.488155][T11027] __folio_put+0x2b3/0x360 [ 225.492587][T11027] free_large_kmalloc+0xfe/0x180 [ 225.497569][T11027] kfree+0x212/0x430 [ 225.501475][T11027] bpf_check+0x6ec6/0x1bcd0 [ 225.506025][T11027] bpf_prog_load+0x1664/0x20e0 [ 225.510810][T11027] __sys_bpf+0x4ea/0x820 [ 225.515072][T11027] __x64_sys_bpf+0x7c/0x90 [ 225.519509][T11027] do_syscall_64+0xf3/0x230 [ 225.524040][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.530215][T11027] [ 225.532606][T11027] Memory state around the buggy address: [ 225.538238][T11027] ffff88801272db00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.546396][T11027] ffff88801272db80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.554469][T11027] >ffff88801272dc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.562566][T11027] ^ [ 225.570292][T11027] ffff88801272dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.578365][T11027] ffff88801272dd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.586515][T11027] ================================================================== [ 225.596232][T11027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 225.603487][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.4.1357 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 225.614371][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.624447][T11027] Call Trace: [ 225.627746][T11027] [ 225.630687][T11027] dump_stack_lvl+0x241/0x360 [ 225.635381][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.640590][T11027] ? __pfx__printk+0x10/0x10 [ 225.645190][T11027] ? vscnprintf+0x5d/0x90 [ 225.649534][T11027] panic+0x349/0x880 [ 225.653438][T11027] ? check_panic_on_warn+0x21/0xb0 [ 225.658572][T11027] ? __pfx_panic+0x10/0x10 [ 225.662995][T11027] ? mark_lock+0x9a/0x360 [ 225.667346][T11027] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 225.673250][T11027] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 225.679160][T11027] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.685522][T11027] ? print_report+0x519/0x5b0 [ 225.690227][T11027] check_panic_on_warn+0x86/0xb0 [ 225.695204][T11027] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 225.701215][T11027] end_report+0x77/0x160 [ 225.705471][T11027] kasan_report+0x154/0x180 [ 225.709996][T11027] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 225.715992][T11027] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 225.721817][T11027] wg_socket_init+0x78f/0xea0 [ 225.726513][T11027] ? __pfx_wg_socket_init+0x10/0x10 [ 225.731730][T11027] ? trace_contention_end+0x3c/0x120 [ 225.737025][T11027] ? __pfx_wg_receive+0x10/0x10 [ 225.741893][T11027] ? ib_device_get_by_netdev+0x595/0x5e0 [ 225.747641][T11027] ? wg_open+0x22d/0x420 [ 225.751902][T11027] wg_open+0x255/0x420 [ 225.755989][T11027] __dev_open+0x45a/0x8a0 [ 225.760349][T11027] ? __pfx___dev_open+0x10/0x10 [ 225.765218][T11027] ? dev_set_rx_mode+0xb8/0x2e0 [ 225.770167][T11027] __dev_change_flags+0x1e2/0x6f0 [ 225.775288][T11027] ? wg_packet_queue_init+0x228/0x310 [ 225.780678][T11027] ? __pfx___dev_change_flags+0x10/0x10 [ 225.786262][T11027] rtnl_newlink_create+0x5ea/0xbd0 [ 225.791402][T11027] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 225.797049][T11027] ? __pfx___mutex_lock+0x10/0x10 [ 225.802097][T11027] ? ns_capable+0x8a/0xf0 [ 225.806449][T11027] rtnl_newlink+0x167a/0x1d90 [ 225.811162][T11027] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.816295][T11027] ? __pfx_validate_chain+0x10/0x10 [ 225.821627][T11027] ? validate_chain+0x11e/0x5920 [ 225.826675][T11027] ? __pfx_lock_acquire+0x10/0x10 [ 225.831722][T11027] ? __pfx_lock_release+0x10/0x10 [ 225.836769][T11027] ? __pfx_validate_chain+0x10/0x10 [ 225.841992][T11027] ? mark_lock+0x9a/0x360 [ 225.846377][T11027] ? __lock_acquire+0x1397/0x2100 [ 225.851450][T11027] ? __pfx_lock_release+0x10/0x10 [ 225.856520][T11027] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.861571][T11027] rtnetlink_rcv_msg+0x791/0xcf0 [ 225.866738][T11027] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 225.871971][T11027] ? __lock_acquire+0x1397/0x2100 [ 225.877278][T11027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.882770][T11027] netlink_rcv_skb+0x206/0x480 [ 225.887569][T11027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.893053][T11027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.898365][T11027] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.903670][T11027] netlink_unicast+0x7f6/0x990 [ 225.908472][T11027] ? __pfx_netlink_unicast+0x10/0x10 [ 225.913862][T11027] ? __virt_addr_valid+0x45f/0x530 [ 225.919015][T11027] ? __phys_addr_symbol+0x2f/0x70 [ 225.924048][T11027] ? __check_object_size+0x47a/0x730 [ 225.929350][T11027] netlink_sendmsg+0x8de/0xcb0 [ 225.934218][T11027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.939514][T11027] ? aa_sock_msg_perm+0x91/0x160 [ 225.944477][T11027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.949791][T11027] __sock_sendmsg+0x221/0x270 [ 225.954490][T11027] ____sys_sendmsg+0x53a/0x860 [ 225.959359][T11027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.964656][T11027] ? __fget_files+0x2a/0x410 [ 225.969271][T11027] ? __fget_files+0x2a/0x410 [ 225.973882][T11027] __sys_sendmsg+0x269/0x350 [ 225.978485][T11027] ? __pfx_futex_wake+0x10/0x10 [ 225.983464][T11027] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.988723][T11027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.995171][T11027] ? do_syscall_64+0x100/0x230 [ 225.999959][T11027] ? do_syscall_64+0xb6/0x230 [ 226.004664][T11027] do_syscall_64+0xf3/0x230 [ 226.009280][T11027] ? clear_bhb_loop+0x35/0x90 [ 226.013973][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.019883][T11027] RIP: 0033:0x7f2e8c18d169 [ 226.024304][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.043920][T11027] RSP: 002b:00007f2e8cf8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.052544][T11027] RAX: ffffffffffffffda RBX: 00007f2e8c3a5fa0 RCX: 00007f2e8c18d169 [ 226.060527][T11027] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 226.068508][T11027] RBP: 00007f2e8c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 226.076489][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.084469][T11027] R13: 0000000000000000 R14: 00007f2e8c3a5fa0 R15: 00007ffd0d6a0468 [ 226.092720][T11027] [ 226.096116][T11027] Kernel Offset: disabled [ 226.100531][T11027] Rebooting in 86400 seconds..