last executing test programs: 49.365861701s ago: executing program 4 (id=1228): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @initdev}, &(0x7f0000000180)=0xc) sendmsg(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@xdp={0x2c, 0x3, r1, 0x1e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)="be3b80960e7f8467e7fed66a", 0xc}, {&(0x7f00000002c0)="4e1e29565350b551b4bb4ba7061eb7993c94abc562409f9c364f94e950", 0x1d}, {&(0x7f0000000300)="49ed5a004fa50408d308a8b3b19833f446c60b919916e596c8d139ddc61d2dfc", 0x20}, {&(0x7f0000000340)="ea26d777403a06d72e013a99f957fb0ec2299a69e6ae09ffce3b9adde62af0578b1148a7cc533fd45b3f910a42b3b304cee438ad70da12525cf081eaa4ffffd4436ce1b4f1fa36bc7468179a7062b0af17e383c921922427ca3fa52f554ba617d5126ca040fa4e8d73568e7f3b", 0x6d}, {&(0x7f00000003c0)="cdffcf39f21fc6533d0c90dde30f11bf6190cc31250c0fde3e518f1af49cea00c1bf838925c97339c1fcb49c4614be7ecf1c1a6aa025639d05756f6cceab172e6559c2dd67b89ae032d52a23e54e3fe9a279d5bd2d283c45b8a2e2a5604676a949134d2f4fbc28f03c984bdfafe705c3c09e79a0393e7b15aae0f126d61f9591cc65de268fe1f1f29479802e18e884ed8040bef47e0b0e85b27473cd879d9cef26f947329f9dade1373cecfc1c20b9ec95f6", 0xb2}, {&(0x7f0000000480)="b78c7996c9d59b3927c40dacc04d40a261dc7843868ac9ba5c216033b45faa3ee8229b6f07a85ab2a7ae83974a736247312389", 0x33}], 0x6, &(0x7f0000000e40)=[{0xc8, 0x11c, 0x1, "8cbcd86610a7917ec0dd849a850f432e49f276fe135dbf330f69b400ace170f27ab049767c248fca6cb88e697b1e0c2d7b8cb66a3328fed55c59c457d4038b3c55624b885561e6f369afd4f6b67fd31b3a076f63a34c19547ab30e1fd2c9dace0e29f58d3919bfc34ae85a445b96dc3dbec33b14d98c3e96f870cdcb060ed49f6e1f282b1bd488ba76931fa2b20e95dfe6ee63d448a7dab36a083ad72305848ec0425b650ae4f06e7d901ba6c6f34277ae98e65b"}, {0x1010, 0x108, 0x4, "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"}, {0xb8, 0x117, 0xc2, "dea55263512c283ebb67d46050d556ebfd6fc55e38f7e43f01c4e6e6f7d1d7d6bbe39534b453cdd31072f414e3f38b348b497bd10ffca2484c067b1f05bdd4a7c916636d5263c6b9d78d67543b49254515230342d00aa7038073cf27db2be8a4eb17e9db15194b89b7b9bd5225787f526b3b3d6c0001cd7d669cefbe2b99bfdde03c02ed2f533d58d90341f704f162f26ab919162201f81b0e8dc443ccfb1738c75f99f0"}, {0x90, 0xff, 0x9, "6f29b3370a32a3631bb0dceeb571288800b1abfe808da6223762f8ad5f7891948276a6c472e9e1bf18abf796bb868ee6809c67dacf751756c44032a31d69a73f002e3d3fdf7c32d6f4973f7848ce5e57542ebadaaa0ab8ed995b351d965a442fc81522f073e15e40e4b7df0169375af7983e868ab907ba46d4c63d7b235ea824"}, {0x110, 0x5, 0x45d3b89f, "2cb0e6de186002ded6e15868fd4f99d24242892fd1ed3619e43e8820d54970dd429936c4834e6cabb7fe9715100fc3266fe7f4e0609629745ceb9f2624903699063b2b9c14adadcebe8ace420669f5228ef3265ef5b61fe0e079bdc7a3f7edc70f8127373a97978ac72df1bd3557674558d53bfd771b4bced9f6cadbc65107b81016980c9af7c5af42ed1d1a6aeabba035586ec363a6c052306b9d4ead3a956f1874254ffccbf3c9d20985651acb19bc347e1a69eebc4ed4ac03ce043cc7c382eb62442b5d3370c43b90024ea201a7c8d8c149c21f29b698ae7c1e7915f2c46f8f97508f903a60b59b891edfbfa08cc6b099b6dbdffe9a7ab377805c769e"}, {0xa8, 0x104, 0xc, "01b2225eea502241eb8bbcbeb36530030996246423f9221798742d41b29452dc22c7229a2f57d414700d8066e4a05f0bcc6b268304d8096272286ca912fa83588de8732b0c569fc40fd2652b111a212251871993d04a5ed8186c7418ba61b0eb20c14716c614a33b6acb225280729fe0797b74ef14ba6bd0558e69b358b8cfdac347426240c6e4aad576edd6fab3df952a"}], 0x13d8}, 0x4010) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 49.232421936s ago: executing program 4 (id=1230): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xdba8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000326e0d1cb3aa6e9227f9f1069d6fc08b780c19f4fc9ed586a5dab6085dd736a4aaa30125f8c5f8b425dc36f005e14ec814403eceaff03bd67dbb59614d24c90358b09c7eb298ad5e1aa07cf53e016ed0a58b59874043b3fea672e1b786221ce5636009e07f74649eb97ffed3d48cd9a51e13ab607df4b1fd3641767a99"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r6, 0x0, 0x40004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a5fdeb69a751e94df53ad7e900de4c164e071a0000000000007b443803cf578f", '\x00', "066580001e00"}, 0x38) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000580)="9de3d8b2b4e937250b2f57cfc1ca8ee7", 0x10}], 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x840}, 0x1) recvfrom(r8, &(0x7f0000000400)=""/60, 0x3c, 0x40016110, 0x0, 0x34) 49.012984446s ago: executing program 4 (id=1233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendfile(r3, r2, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='f2fs_reserve_new_blocks\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x10, 0x3}, {0x1, 0x2}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x30}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x4}, {0x2, 0x1, 0x63}, {0x1, 0xd8}, {0x5, 0x3, 0xd3}, {0x5, 0x9, 0x3}, {0x4, 0x800, 0x7}, {0x3, 0x59a9, 0x3}, {0x1, 0xe, 0x3fcef354}, {0x5, 0xfffffffe, 0x8000}], '!f'}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/3, 0x10d, 0x3, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fbd1df2521000000050020000000000009001f0070687931000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) 40.101194418s ago: executing program 4 (id=1233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendfile(r3, r2, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='f2fs_reserve_new_blocks\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x10, 0x3}, {0x1, 0x2}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x30}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x4}, {0x2, 0x1, 0x63}, {0x1, 0xd8}, {0x5, 0x3, 0xd3}, {0x5, 0x9, 0x3}, {0x4, 0x800, 0x7}, {0x3, 0x59a9, 0x3}, {0x1, 0xe, 0x3fcef354}, {0x5, 0xfffffffe, 0x8000}], '!f'}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/3, 0x10d, 0x3, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fbd1df2521000000050020000000000009001f0070687931000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) 26.487875623s ago: executing program 4 (id=1233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendfile(r3, r2, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='f2fs_reserve_new_blocks\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x10, 0x3}, {0x1, 0x2}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x30}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x4}, {0x2, 0x1, 0x63}, {0x1, 0xd8}, {0x5, 0x3, 0xd3}, {0x5, 0x9, 0x3}, {0x4, 0x800, 0x7}, {0x3, 0x59a9, 0x3}, {0x1, 0xe, 0x3fcef354}, {0x5, 0xfffffffe, 0x8000}], '!f'}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/3, 0x10d, 0x3, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fbd1df2521000000050020000000000009001f0070687931000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) 10.92788196s ago: executing program 4 (id=1233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendfile(r3, r2, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='f2fs_reserve_new_blocks\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @dev}, &(0x7f0000000300)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0x10, 0x3}, {0x1, 0x2}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x30}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x4}, {0x2, 0x1, 0x63}, {0x1, 0xd8}, {0x5, 0x3, 0xd3}, {0x5, 0x9, 0x3}, {0x4, 0x800, 0x7}, {0x3, 0x59a9, 0x3}, {0x1, 0xe, 0x3fcef354}, {0x5, 0xfffffffe, 0x8000}], '!f'}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/3, 0x10d, 0x3, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x896b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xc45, 0xbb, &(0x7f0000000100)=""/187, 0x41100, 0x60, '\x00', r4, @fallback=0x4, r5, 0x8, &(0x7f0000000500)={0x5, 0xfffffffa}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fbd1df2521000000050020000000000009001f0070687931000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) 3.920062757s ago: executing program 2 (id=1537): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000010000000400000f3c83e190018310000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xfffff4fd}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000002100)=""/4098, 0x1002}, {&(0x7f0000001c00)=""/76, 0x4c}, {&(0x7f0000001e80)=""/234, 0xea}], 0x5}, 0x80000010}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x20, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000180)={0x1, 'wg1\x00', {}, 0x7}) (async, rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4008, 0x3, 0x318, 0x1b0, 0x32, 0x148, 0x1b0, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x40, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x0, 0x0, 0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x7], 0x0, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket(0x18, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) bind$packet(r6, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async, rerun: 64) sendmmsg(r8, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) (async) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) (async) socket$igmp6(0xa, 0x3, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 3.476509755s ago: executing program 2 (id=1538): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008b00)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/255, 0xff}, {&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/120, 0x78}], 0x3, &(0x7f00000004c0)=""/80, 0x50}, 0x9}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/75, 0x4b}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/183, 0xb7}], 0x8, &(0x7f0000001c40)=""/181, 0xb5}, 0x200}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001d00)=""/107, 0x6b}, {&(0x7f0000001d80)=""/216, 0xd8}, {&(0x7f0000001e80)=""/87, 0x57}, {&(0x7f0000001f00)=""/163, 0xa3}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/35, 0x23}], 0x6, &(0x7f0000003080)=""/36, 0x24}, 0x13f9}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000030c0)=""/160, 0xa0}, {&(0x7f0000003180)=""/86, 0x56}, {&(0x7f0000003200)=""/89, 0x59}, {&(0x7f0000003280)=""/226, 0xe2}, {&(0x7f0000003380)=""/132, 0x84}, {&(0x7f0000003440)=""/50, 0x32}, {&(0x7f0000003480)=""/116, 0x74}], 0x7, &(0x7f0000003580)=""/7, 0x7}, 0x4}, {{&(0x7f00000035c0)=@alg, 0x80, &(0x7f0000004880)=[{&(0x7f0000003640)=""/87, 0x57}, {&(0x7f00000036c0)=""/169, 0xa9}, {&(0x7f0000003780)=""/253, 0xfd}, {&(0x7f0000003880)}, {&(0x7f0000004780)=""/3, 0x3}, {&(0x7f00000047c0)=""/103, 0x67}, {&(0x7f0000004840)=""/52, 0x34}], 0x7, &(0x7f0000004900)=""/158, 0x9e}, 0x2}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f00000049c0)=""/68, 0x44}, {&(0x7f0000004a40)=""/237, 0xed}, {&(0x7f0000004b40)=""/211, 0xd3}, {&(0x7f0000004c40)=""/122, 0x7a}, {&(0x7f0000004cc0)=""/201, 0xc9}, {&(0x7f0000004dc0)=""/173, 0xad}, {&(0x7f0000004e80)=""/59, 0x3b}, {&(0x7f0000004ec0)=""/99, 0x63}, {&(0x7f0000004f40)=""/133, 0x85}, {&(0x7f0000008d00)=""/231, 0xe7}], 0xa, &(0x7f00000051c0)=""/7, 0x7}, 0xb}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f0000005200)=""/92, 0x5c}, {&(0x7f0000005280)=""/7, 0x7}, {&(0x7f00000052c0)=""/241, 0xf1}, {&(0x7f00000053c0)=""/131, 0x83}, {&(0x7f0000005480)=""/130, 0x82}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/202, 0xca}, {&(0x7f0000006640)=""/100, 0x64}, {&(0x7f00000066c0)=""/4096, 0x1000}], 0x9, &(0x7f0000007780)=""/169, 0xa9}, 0x3}, {{&(0x7f0000007840)=@rc, 0x80, &(0x7f00000089c0)=[{&(0x7f00000078c0)=""/32, 0x20}, {&(0x7f0000007900)=""/153, 0x99}, {&(0x7f00000079c0)=""/4096, 0x1000}], 0x3, &(0x7f0000008a00)=""/246, 0xf6}, 0x8}], 0x8, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f000000a080)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000a040)={&(0x7f000000cf40)={0x13d8, 0x14, 0x20, 0x70bd27, 0x25dfdbfd, {0x15, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "1d"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "87e5936efa396634049f65023b89e0a20ffc3077a388649a462f7407e53ce532188bb2f18abec0fd85e5a9511e2c58aef0934289ae2f4d0d2eef5eae6886cb926ecead06b7f5dd415111dfe130f39f1d7394ed76c580bce1da44c6792d56a28c986103d43f77687de44bf653e35d46ea5ed89315c93f60d579205d1d547e6a0a71171845ca69e6be929e5f0ff80acc5f68dfeb2738849087b3f7754b"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "91e7eed23bb839df4b8da2407dbbedd2855709109dd71356683b970350b627fed5d8a64115aea8554366761e448261ef8bc522f72b2fea0635386e55a028df36ce5213de07b568525e81f3b520534801a304a3b6c7ea4d41f8d7df3fab356658bde780e164424311c630c70c1e9c97d2e5c1723566caad3a5a1652173be56bc4941334f30a3420f1e35f4231fdd163f0400310eb220b1e567c4c61453c0465df9bff3fbb3f2dcafca9e843c02f54fd21c386c0ba4c4c5df4efe7833083c3bd806712feddbe46ce9b80754a62bc5f583869272b"}, @INET_DIAG_REQ_BYTECODE={0x101b, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "f61e16d0a85d7dbe61e461ca9d1c584f74702398d432d95571007d76d320af7f4c6e4eb361cc14ff0600d28c848ab3a616eea4901fd7ea51bd7b315e9986ac38d3b6e4870cfd664f108847df3217d23e6ac3ea0078d549df92a8a01b2d5e8a258e2a47ec93284bfb5e777103ba6a4523fb9e88f268215cb069fbf349efa83e1cfc7d9011a7b811965809e747d139679b95d9c0bd513cbc0de598449f5ba7e755010ab81b18fc731ae8ec89498214dbdbfb774eea2bccef9a434ec06c33710000000000"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "bbcb82b0f0e2561e433be6cf7bd2b496d2b1333b0fcf77d113e6c33adb69c0b69835dab1a155aa0528f20d40becece24722616c802a72a7b4b85230d119667ee8c153d7b1219e3ca1878ee9c3fdd294640107ce70ea36ce114cb05c1247e0ac80e39fca29c422ca65653e4f55eee5a32685a4e3378f1cfa05ea79498d9daeaf457a6e15559bb7200d13bd5ea9692302b2a6f29fbb45ec6e4b1d5351b3a096eb201e1c4d012ea5df437c4ef6362c79c4deb9b3983d667a2"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "d41036ac59a8374e1fb760207744fc5c445f5922f53d6dbea9ce437def8c22144b8f929d91f772d1d6cfc8a4a82b9ae27ed3ea9676af84f5b977ff57fd933c5709e63f6ef5a41f3b62ce186981f010a77a"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "ddc3de7c45f317d498c2db2ff023cc6d59a5aa4baaa466f439604406183e495ca933caddc9252e4e168530614fa5fd96c8f27e1f9487ecf9a85f1ad9c4da378071fbf9d01c"}]}, 0x13d8}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r5, &(0x7f0000000000)='\"', 0x1) syz_emit_ethernet(0x25, &(0x7f000000a0c0)=ANY=[@ANYBLOB="aa7309e4851a69335e60a57b35eda8aaaaaaaa23aaaaaaaaaaaa81002200001101ab768b70ebac0800698c7218acdefb77d7ff5f731dba4123f13a67d35e1177d52a06e581cc0051e2044889230d6e29007f0e81a0777fee9c4831db3583946114795051b13494"], &(0x7f00000001c0)={0x1, 0x1, [0x15, 0x8e4, 0xd8d, 0x2b5]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000055f80000b702000000000000850000008600000018510000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0x21, &(0x7f000000a3c0), 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000000a480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r5, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f000000a500)={r3, 0xd532, 0xffff, 0x2}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000000a540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa2, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000000a5c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000a6c0)={0x1b, 0x24, &(0x7f000000a180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x395}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @call={0x85, 0x0, 0x0, 0x8f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f000000a2c0)='syzkaller\x00', 0xd, 0x89, &(0x7f000000a300)=""/137, 0x41000, 0x0, '\x00', r4, @fallback=0x21, r7, 0x8, &(0x7f000000a400)={0x6, 0x1}, 0x8, 0x10, &(0x7f000000a440)={0x1, 0xc, 0x1, 0x224}, 0x10, 0xffffffffffffffff, r0, 0x4, &(0x7f000000a640)=[r8, r9, r10, r11, r1, 0xffffffffffffffff], &(0x7f000000a680)=[{0x4, 0x5, 0xf, 0x4}, {0x3, 0x3, 0xb, 0x7}, {0x0, 0x2, 0x5, 0x8}, {0x2, 0x1, 0xc, 0x3}], 0x10, 0x1000, @void, @value}, 0x94) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 2.52702364s ago: executing program 2 (id=1543): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 2.14831518s ago: executing program 0 (id=1547): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) writev(r5, &(0x7f0000000240)=[{0x0}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}}, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0x1, 0x4, [@broadcast, @local, @multicast1, @private=0xa010100]}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x40000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x1ff) sendto$inet(r8, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x20040054) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0500"/12, @ANYRESHEX=r5, @ANYBLOB="2bb9dcab5337445510b21fd603c6426c3a5133a1cba744bfb07af657f90f537972be4d2e9e03a790d94fa0edf46624e52d5995312958b9dc45b88a7ff6c7a8149c5197bdc50d9bca637829a527f466b229a812ded82910d3ac311f85181992db3e05d276da5ae36ae26973a6266ff710c7465ee699f42ce052c731a786003f906a241239281d445c5e9410a2a6a40849b68e3fc2d9bc1494f67a551df213cdd39d6bc1e4dc10b6c725320350c34b09fcc5e6aac7d82292", @ANYRESHEX=r12], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 2.147337841s ago: executing program 3 (id=1548): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/166, 0xa6}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0x94}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47d78}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd146}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10) 2.078674386s ago: executing program 1 (id=1549): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0x10001}, 0x8}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x0, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, 0xfc, 0x4, 0xfe, 0x5, 0x200}, [@RTA_TABLE={0x8, 0xf, 0x9}]}, 0x24}}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xf12c, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x30000000, 0x92, &(0x7f0000000380)=""/146, 0x40f00, 0x3d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x8, 0x6, 0xad5}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000640)=[r5, r6, r7], &(0x7f0000000680)=[{0x4, 0x5, 0x5, 0x3}, {0x0, 0x2, 0x7, 0x5}, {0x4, 0x4, 0xe, 0x7}, {0x1, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x4, 0xc}, {0x3, 0x1, 0x5, 0x5}, {0x4, 0x2, 0x3, 0xa}], 0x10, 0x5, @void, @value}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)=0x2) (async) epoll_create1(0x80000) (async) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)={@empty, @private, 0x0}, &(0x7f0000000a40)=0xc) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@func={0xd, 0x0, 0x0, 0xc, 0x5}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x1ff, [{0x5, 0x1}, {0x2, 0x2, 0x5158}, {0x0, 0x4}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x6d, 0x4}]}, {0x0, [0x0, 0x761d7ddb7d15e034]}}, &(0x7f0000000b00)=""/4096, 0x68, 0x1000, 0x1, 0xc5, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1f, 0x2, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000008c0)='syzkaller\x00', 0x80, 0xfb, &(0x7f0000000900)=""/251, 0x40f00, 0x8, '\x00', r9, @fallback=0x1f, r10, 0x8, &(0x7f0000001b40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x3, 0x9, 0x7fff, 0x5}, 0x10, 0xffffffffffffffff, r8, 0x3, 0x0, &(0x7f0000001bc0)=[{0x0, 0x5, 0xe, 0xa}, {0x1, 0x4, 0x5, 0x1}, {0x3, 0x1, 0x4, 0x4}], 0x10, 0xffffffff, @void, @value}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)=@ipv6_getnexthop={0x5c, 0x6a, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44009}, 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002f00)={r3, &(0x7f0000001e00)="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", &(0x7f0000002e00)=""/217}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003200)={r8, 0xe0, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000002f80)=[0x0], &(0x7f0000002fc0)=[0x0, 0x0], 0x0, 0x7f, &(0x7f0000003000)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003040), &(0x7f0000003080), 0x8, 0xc2, 0x8, 0x8, &(0x7f00000030c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003240)=r11, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003280)) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0xc27d4aff4f1d182f}, 0xc, &(0x7f00000033c0)={&(0x7f0000003340)={0x68, r12, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003440)='vegas\x00', 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x6, 0x13, &(0x7f0000003480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe2f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003540)='syzkaller\x00', 0xf, 0x1000, &(0x7f0000003580)=""/4096, 0x41100, 0x18, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004580)={0x1, 0x6, 0x200, 0xda76}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000045c0)=[{0x2, 0x5, 0x7, 0x8}], 0x10, 0x3, @void, @value}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r13, &(0x7f00000047c0)={&(0x7f00000046c0), 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x2c, r12, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008840) (async) socket(0x10, 0x0, 0x1) 1.785209063s ago: executing program 3 (id=1550): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000093040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.666306219s ago: executing program 3 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x4, 0x4, 0x8001, 0x10100, r0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, @void, @value, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x8}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="11e7"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x2c}}, 0x4000000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0xfffe}, 0x20) 1.624811221s ago: executing program 1 (id=1552): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) epoll_create1(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000ffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.561220403s ago: executing program 2 (id=1553): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.420147013s ago: executing program 0 (id=1554): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x2}) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000002c0)={0x8, 0x8, 0x5, @empty, 'netpci0\x00'}) 1.39205407s ago: executing program 2 (id=1555): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000002a31659d8772915ae08e000000000500000a20000000000a01080000000000000000010000030900010073797a30000000002c000000030a010100000000000000b9010000000900010073797a30000000000900030073797a320000000030000000060a010400000000000000000100000008000b400000000008000a40000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xa4}}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) shutdown(r5, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32=r4, @ANYBLOB="06000e0003000000080007006401010108000a00", @ANYRES32=r4], 0x54}}, 0x0) 1.298716631s ago: executing program 1 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000048010000090a010400000000000000000300000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d040012800800084000000000dc000980c80002"], 0x190}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.224763844s ago: executing program 3 (id=1557): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, 0x2b, 0x300, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @typed={0x7, 0x3, 0x0, 0x0, @str='\'.\x00'}, @typed={0x13, 0x2, 0x0, 0x0, @str='fault_injection'}]}, 0x34}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000300000004000000120000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, 0x0, &(0x7f0000000440)}, 0x20) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="0101000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.162070631s ago: executing program 1 (id=1558): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="061410070200000028bd7000fcdbdf25"], 0x10}}, 0x4400c0b0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@loopback, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffc, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x32}, 0x2, @in6=@private0, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 1.112312174s ago: executing program 0 (id=1559): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000001440)=@assoc_value, &(0x7f0000001480)=0x8) (async) shutdown(r0, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="f724a64600000001f9ffdeffffffffff000004e10400010001000000"], 0x1c}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x9, 0x1008, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xd, @void, @value, @void, @value}, 0x50) (async) gettid() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000440)="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", &(0x7f0000000300)=""/156}, 0x20) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f00)={{0x14}, [@NFT_MSG_NEWRULE={0x2d8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2ac, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '?'}]}]}}}, {0x26c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x258, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_IMMEDIATE_DATA={0x19c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "8bb9650e9a524f19aea84f5b4dfbe8f1a08f5128c78b95ea8a1524c43a86443f70c4a58ec8377985ec06fc548287a62e3d6386aab9062e8f796c29e9ce9d53fe17d6c0020f772767b8d6a523e536e5ba994141ed787fd0c301f0018f13346aeb408195535bdf32f98906f82bfdf5b678121252a9c519408d02480fae7623c9b1"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "d32bcb7317d3b997353b438cbb8be7aa8e5696f0d399498c5ed27f0dfa526b34b15f772cf0e76f81a19b1bd60528bc99238955ec46bdd3976671e6bf917310a57d8c05dadd3681f25111344b913f1530120126a8e9130083eae26cf2dede741006d9e289e2"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "0574aeeb57dc2cdcbc08d7759a3e3ab770743605df91747b2f70c930a98913143b60fe5edf6efad1217d2e02e0ff72e5d9d89c89e728ab9f94875164a8208a6cf5b6fd55ee6e8f960e78e78bc71ce8cc0d06e16c046f397c015964281c0d7afdf6091742a3ccb4e6236dafb52030cfcfd72ae4462d18ac2a846c6fbeb87904241eba35f2e6ad2aa2ea4f1662ce3348"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x300}}, 0x0) (async) close(0x3) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3ff) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) 1.03682941s ago: executing program 3 (id=1560): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$tipc(r0, &(0x7f0000001dc0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200070004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000200"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0xd4c0fd6532132767, 0x1, 0x2, 0x0, {{0x23, 0x4, 0x1, 0x2, 0x8c, 0x67, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@end, @timestamp_addr={0x44, 0x1c, 0x9b, 0x1, 0x8, [{@private=0xa010102, 0x2}, {@multicast1, 0x1}, {@empty, 0xfffffffd}]}, @timestamp_prespec={0x44, 0x44, 0x68, 0x3, 0x1, [{@local, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xfffffc00}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x4}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xcb0}, {@multicast1, 0x200}, {@local, 0x2}]}, @ssrr={0x89, 0x17, 0x84, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100]}]}}}}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0x4, 0x8, 0x0, @void, @value}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000", @ANYRES8=r10, @ANYRES32=0x0], 0x90}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004875) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r11, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9c7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x81, &(0x7f00000002c0)=""/129, 0x41100, 0x11, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x4, 0x100, 0x156}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r5], &(0x7f0000000500)=[{0x1, 0x4, 0xb, 0x3}, {0x4, 0x4, 0xf, 0x6}, {0x3, 0x5, 0x1, 0x5}, {0x3, 0x5, 0x10, 0x8}, {0x2, 0x3, 0x10, 0x7}, {0x0, 0x1, 0x3, 0x5}, {0x3, 0x3, 0xf, 0x9}], 0x10, 0x2, @void, @value}, 0x94) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_int(r12, 0x1, 0x1, &(0x7f0000000280)=0x6, 0x4) 22.650166ms ago: executing program 1 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {0xfff1, 0x60b5efdf7c757e48}, {0x8, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x480c0}, 0x80) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2}, 0x1, 0x4, 0x3, 0x3}}, 0x2e) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@local, 0x0, 0x0, 0x50, 0x0, [{@local}, {@dev}, {@broadcast}, {}, {@dev}]}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ae886e1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xe, 0x31, &(0x7f00000003c0)=""/49, 0x41000, 0x0, '\x00', r1, 0x0, r5, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xc, 0xd2d2, 0x100}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0x0, 0x9}, {0x0, 0x3, 0x9, 0xa}, {0x2, 0x5, 0x3, 0x2}, {0x4, 0x5, 0x0, 0xa}, {0x4, 0x5, 0xd, 0x3}], 0x10, 0x3, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x48080) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x5b, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip_vti0\x00', r7, 0x8, 0x8000, 0xff, 0x6, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0xad, [@dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x17, 0x6c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @rand_addr=0x64010102, @private=0xa010100]}, @end, @cipso={0x86, 0x29, 0xfffffffffffffffd, [{0x6, 0x8, "15442527bc3f"}, {0x5, 0x9, "fb60f3ac49b93c"}, {0x0, 0x12, "3f2ac188583964274718aa4fe949bf2b"}]}]}}}}}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b00), r8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r5}, 0x20) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x6, '\x00', 0x0, r5, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000c80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000e80)={{r4}, r11, 0x1a, @unused=[0x8, 0x71008e54, 0x4, 0x240000000000000], @name="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"}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ec0), r5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x81, 0x6, 0x15, @dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x701, 0x700, 0x7fffffff, 0xfffffffb}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000020c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0xa0, r12, 0x600, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xea}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x80) bind$qrtr(r6, &(0x7f0000002100)={0x2a, 0x2}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{r10, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)=r5}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x15, &(0x7f0000002200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x3, 0xa, 0x0, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff504d, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_val={0x18, 0x9, 0x2, 0x0, r4}]}, &(0x7f00000022c0)='syzkaller\x00', 0xb198, 0x7c, &(0x7f0000002300)=""/124, 0x40f00, 0x0, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000002380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000023c0)={0x2, 0x5, 0xe2, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002400)=[r4, r10, 0xffffffffffffffff, 0x1, r9, r9], &(0x7f0000002440)=[{0x5, 0x2, 0x0, 0xb}, {0x1, 0x5, 0x9, 0x4}, {0x4, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x6, 0x2}, {0x0, 0x5, 0x4, 0xa}, {0x5, 0x5, 0xd, 0xc}, {0x1, 0x5, 0x0, 0x2}, {0x1, 0x2, 0x10, 0xc}], 0x10, 0x3, @void, @value}, 0x94) (async) setsockopt(r0, 0xfffff11b, 0x5, &(0x7f0000002580)="1a1f6a81b0db3589f5cee94a7657f66c4e7640b6b518883266ed868caec78e52a227d5fac23a18aef02ca1f3902f18e443abe25ee5c0180b6940de185dd15aebfbfd6f485cae6414fb85541e1c23cfa22602b4fd3e126503f44ad9117f9948acdb3e56e903220e0135b90e94ca222106a534f1c01362c3d5e7c07e81527986ced0f3ba07cb32816462ea4c590ab182aebeb95c01a91eeaedf172a53aaf41475691283a288cf94265a539a1d3b8c412b8", 0xb0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002740)={@fallback=r0, 0x10, 0x1, 0x6b, &(0x7f0000002640)=[0x0], 0x1, 0x0, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a80)={0xffffffffffffffff, 0xe0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000002800)=[0x0], &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000002880)=[{}, {}], 0x10, 0x10, &(0x7f00000028c0), &(0x7f0000002900), 0x8, 0x65, 0x8, 0x8, &(0x7f0000002940)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002780)={@fallback=r10, r15, 0x33, 0x20, r15, @void, @void, @void, @value=r17, r16}, 0x20) 21.237112ms ago: executing program 0 (id=1562): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x1, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newchain={0x3c, 0x64, 0x320, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x1, 0xb}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0xc, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) epoll_create1(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 17.341015ms ago: executing program 1 (id=1563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x8000005}, 0x4) (async) sendto$inet6(r2, &(0x7f0000000040)="cfc61a24", 0x4, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @private1, 0xfffffff8}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0xb5}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) 15.846089ms ago: executing program 3 (id=1564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES64=r4, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r7, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc691bcffe1d1982a394fb44ed513975fe652678d5ce57f9b54ecd9045c02d86e82d247338"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000007000007061a84ef3eb4f2d4bafaf33680dbad201b5b05e0601baea296a16fcc30aa18a1c4f1b8851b3a2d778bc42a00000049c4046e4e73694e1428d6e105822b000000000000000081c14513311e2a45cd2cd12ffbba523bbd08cec31ef15c8c300c87d7dd629b524320b12bdd97c01051dc5373a90e6fdd8fba8961de690ae9c0ae27ebf981283fc8f167ff9984eeb09c887036014879bf58805b5c77304692642304d929decbdf06979482d3087fe43433b35c615e274829d4cb750beb6c9f7f29"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x488c4) close(r10) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cb, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x1000) write(r13, &(0x7f0000000040)="05000000010000", 0x7) 10.249683ms ago: executing program 0 (id=1565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 7.763407ms ago: executing program 0 (id=1566): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) epoll_create1(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000ffe00000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 0s ago: executing program 2 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x7, 0xff}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd29, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xfff3}, {}, {0xc, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xaa2}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xaa3}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @broadcast}, @TCA_FLOWER_KEY_FLAGS={0x8}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x6}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x200440d4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r9 = socket$inet6(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r10}, 0x10) sendto$inet6(r9, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): `syz.1.462'. [ 195.912414][ T7556] syz_tun: entered allmulticast mode [ 195.927850][ T7553] syz_tun: left allmulticast mode [ 196.312592][ T7580] syz.3.467 (7580) used obsolete PPPIOCDETACH ioctl [ 196.830869][ T7596] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 196.927112][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 197.020608][ T7603] vlan2: entered allmulticast mode [ 197.072106][ T7605] netlink: 'syz.2.476': attribute type 5 has an invalid length. [ 197.087307][ T7605] netlink: 'syz.2.476': attribute type 7 has an invalid length. [ 197.114321][ T7605] : entered promiscuous mode [ 197.207742][ T7605] syzkaller0: entered promiscuous mode [ 197.213418][ T7605] syzkaller0: entered allmulticast mode [ 197.216379][ T7612] SET target dimension over the limit! [ 197.248390][ T7612] SET target dimension over the limit! [ 197.264422][ T7612] SET target dimension over the limit! [ 198.540561][ T7627] __nla_validate_parse: 9 callbacks suppressed [ 198.540584][ T7627] netlink: 236 bytes leftover after parsing attributes in process `syz.0.482'. [ 198.743190][ T7639] sctp: [Deprecated]: syz.2.487 (pid 7639) Use of int in max_burst socket option. [ 198.743190][ T7639] Use struct sctp_assoc_value instead [ 198.923201][ T7653] xt_TCPMSS: Only works on TCP SYN packets [ 198.940005][ T7653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.973945][ T7648] xt_CT: No such helper "snmp" [ 198.995936][ T7650] xt_CT: No such helper "snmp" [ 199.307796][ T7669] IPv6: Can't replace route, no match found [ 199.371649][ T7678] netlink: 136 bytes leftover after parsing attributes in process `syz.4.498'. [ 199.437532][ T7678] netlink: 136 bytes leftover after parsing attributes in process `syz.4.498'. [ 199.670875][ T7687] syz.4.500 uses old SIOCAX25GETINFO [ 199.752414][ T7694] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 199.801463][ T7701] syz.0.502: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.889786][ T7701] CPU: 1 UID: 0 PID: 7701 Comm: syz.0.502 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 199.889818][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.889830][ T7701] Call Trace: [ 199.889838][ T7701] [ 199.889848][ T7701] dump_stack_lvl+0x189/0x250 [ 199.889891][ T7701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.889925][ T7701] ? __pfx__printk+0x10/0x10 [ 199.889949][ T7701] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.889985][ T7701] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.890022][ T7701] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 199.890060][ T7701] warn_alloc+0x214/0x310 [ 199.890081][ T7701] ? stack_depot_save_flags+0x40/0x900 [ 199.890115][ T7701] ? __pfx_warn_alloc+0x10/0x10 [ 199.890138][ T7701] ? kasan_save_track+0x4f/0x80 [ 199.890166][ T7701] ? xskq_create+0x56/0x170 [ 199.890189][ T7701] ? xsk_init_queue+0xb0/0x110 [ 199.890210][ T7701] ? xsk_setsockopt+0x43f/0x710 [ 199.890236][ T7701] ? do_sock_setsockopt+0x25a/0x3e0 [ 199.890268][ T7701] ? __x64_sys_setsockopt+0x18b/0x220 [ 199.890299][ T7701] ? do_syscall_64+0xfa/0x3b0 [ 199.890324][ T7701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.890354][ T7701] __vmalloc_node_range_noprof+0x125/0x1340 [ 199.890424][ T7701] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.890461][ T7701] ? xskq_create+0x56/0x170 [ 199.890487][ T7701] ? __kasan_kmalloc+0x93/0xb0 [ 199.890520][ T7701] vmalloc_user_noprof+0xad/0xf0 [ 199.890541][ T7701] ? xskq_create+0xbf/0x170 [ 199.890567][ T7701] xskq_create+0xbf/0x170 [ 199.890594][ T7701] xsk_init_queue+0xb0/0x110 [ 199.890622][ T7701] xsk_setsockopt+0x43f/0x710 [ 199.890648][ T7701] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.890674][ T7701] ? __lock_acquire+0xab9/0xd20 [ 199.890713][ T7701] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 199.890739][ T7701] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.890764][ T7701] do_sock_setsockopt+0x25a/0x3e0 [ 199.890801][ T7701] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 199.890840][ T7701] ? __fget_files+0x2a/0x420 [ 199.890882][ T7701] __x64_sys_setsockopt+0x18b/0x220 [ 199.890923][ T7701] do_syscall_64+0xfa/0x3b0 [ 199.890949][ T7701] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.890973][ T7701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.890995][ T7701] ? clear_bhb_loop+0x60/0xb0 [ 199.891022][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.891042][ T7701] RIP: 0033:0x7f3a94b8e929 [ 199.891061][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.891078][ T7701] RSP: 002b:00007f3a9592e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.891101][ T7701] RAX: ffffffffffffffda RBX: 00007f3a94db6160 RCX: 00007f3a94b8e929 [ 199.891116][ T7701] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 199.891128][ T7701] RBP: 00007f3a94c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 199.891141][ T7701] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.891153][ T7701] R13: 0000000000000000 R14: 00007f3a94db6160 R15: 00007ffeecf429a8 [ 199.891186][ T7701] [ 200.212899][ T7714] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 200.214893][ T7701] Mem-Info: [ 200.221620][ T7714] veth0_vlan: left promiscuous mode [ 200.224705][ T7701] active_anon:6611 inactive_anon:0 isolated_anon:0 [ 200.224705][ T7701] active_file:1485 inactive_file:39861 isolated_file:0 [ 200.224705][ T7701] unevictable:768 dirty:353 writeback:0 [ 200.224705][ T7701] slab_reclaimable:10621 slab_unreclaimable:114285 [ 200.224705][ T7701] mapped:29001 shmem:1411 pagetables:747 [ 200.224705][ T7701] sec_pagetables:0 bounce:0 [ 200.224705][ T7701] kernel_misc_reclaimable:0 [ 200.224705][ T7701] free:1316367 free_pcp:372 free_cma:0 [ 200.231808][ T7714] veth0_vlan: entered promiscuous mode [ 200.284743][ T7714] team0: Device veth0_vlan failed to register rx_handler [ 200.285737][ T7701] Node 0 active_anon:26444kB inactive_anon:0kB active_file:5940kB inactive_file:159244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116004kB dirty:1412kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11252kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.343003][ T7701] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.390619][ T7701] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.418259][ T7701] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 200.424630][ T7701] Node 0 DMA32 free:1333068kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:26128kB inactive_anon:0kB active_file:5940kB inactive_file:157416kB unevictable:1536kB writepending:1412kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:2960kB local_pcp:1132kB free_cma:0kB [ 200.455795][ T7701] lowmem_reserve[]: 0 0 1 1 1 [ 200.460597][ T7701] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 200.488432][ T7701] lowmem_reserve[]: 0 0 0 0 0 [ 200.493382][ T7701] Node 1 Normal free:3916440kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.522496][ T7701] lowmem_reserve[]: 0 0 0 0 0 [ 200.527644][ T7701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.545788][ T7701] Node 0 DMA32: 341*4kB (UE) 384*8kB (U) 329*16kB (UME) 245*32kB (UME) 346*64kB (UME) 195*128kB (UME) 64*256kB (UM) 20*512kB (UM) 10*1024kB (UM) 7*2048kB (UME) 297*4096kB (UM) = 1332356kB [ 200.605846][ T7714] syz.4.505 (7714) used greatest stack depth: 19320 bytes left [ 200.618891][ T7701] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 200.666708][ T7701] Node 1 Normal: 194*4kB (UE) 50*8kB (UME) 42*16kB (UME) 217*32kB (UME) 115*64kB (UME) 35*128kB (UME) 22*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 946*4096kB (M) = 3916440kB [ 200.699936][ T7701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.730701][ T7701] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 200.788655][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 200.815512][ T7701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.829326][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 200.860967][ T7701] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 200.896749][ T7701] 42705 total pagecache pages [ 200.900873][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 200.901945][ T7701] 0 pages in swap cache [ 200.918525][ T7701] Free swap = 124996kB [ 200.923204][ T7701] Total swap = 124996kB [ 200.927395][ T7701] 2097051 pages RAM [ 200.941043][ T5835] cgroup: fork rejected by pids controller in /syz3 [ 200.966847][ T7701] 0 pages HighMem/MovableOnly [ 200.987274][ T7701] 424631 pages reserved [ 201.011463][ T7701] 0 pages cma reserved [ 201.288295][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 201.689213][ T7756] netlink: 84 bytes leftover after parsing attributes in process `syz.4.520'. [ 201.712065][ T7757] tipc: Enabling of bearer rejected, failed to enable media [ 201.926914][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.080087][ T7773] netlink: 'syz.1.522': attribute type 21 has an invalid length. [ 202.204399][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.214280][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.239917][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.252086][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.262891][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.364719][ T7782] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 202.429197][ T7780] smc: net device bond0 applied user defined pnetid SYZ0 [ 202.560243][ T7787] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 202.607467][ T7792] netlink: 76 bytes leftover after parsing attributes in process `syz.2.528'. [ 202.618201][ T7787] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 202.623300][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 202.648815][ T7792] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20001 [ 202.889948][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 203.318416][ T7819] bond1: entered promiscuous mode [ 203.326732][ T7819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.345049][ T7819] bond1: left promiscuous mode [ 203.500826][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.525969][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.533384][ T7774] bridge_slave_0: entered allmulticast mode [ 203.541437][ T7774] bridge_slave_0: entered promiscuous mode [ 203.550235][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.557588][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.565158][ T7774] bridge_slave_1: entered allmulticast mode [ 203.577832][ T7774] bridge_slave_1: entered promiscuous mode [ 203.711908][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.736867][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.831117][ T7774] team0: Port device team_slave_0 added [ 203.855105][ T7774] team0: Port device team_slave_1 added [ 203.969775][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.998387][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.035695][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.058302][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.073774][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.114211][ T7853] xt_NFQUEUE: number of total queues is 0 [ 204.122484][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.277373][ T7774] hsr_slave_0: entered promiscuous mode [ 204.283268][ T5831] Bluetooth: hci4: command tx timeout [ 204.306552][ T7774] hsr_slave_1: entered promiscuous mode [ 204.319594][ T7774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.328070][ T7774] Cannot create hsr debugfs directory [ 204.681296][ T5831] Bluetooth: hci0: command tx timeout [ 204.750001][ T7851] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 205.837812][ T7905] __nla_validate_parse: 2 callbacks suppressed [ 205.837830][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 205.913059][ T7897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.935154][ T7897] team0: Port device bond2 added [ 205.943556][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 205.954147][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 206.183958][ T7774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.227140][ T7774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.251893][ T7921] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 206.259848][ T7921] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.303335][ T7774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.330474][ T7774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.361273][ T5831] Bluetooth: hci4: command tx timeout [ 206.546022][ T7935] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 206.584670][ T7937] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 206.637952][ T7937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.660794][ T7940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.668726][ T7940] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.680678][ T7940] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 206.734357][ T7937] veth3: entered promiscuous mode [ 206.748201][ T7937] bond2: (slave veth3): Enslaving as an active interface with a down link [ 206.761450][ T5831] Bluetooth: hci0: command 0x0401 tx timeout [ 206.816070][ T7935] veth5: entered promiscuous mode [ 206.837214][ T7935] bond2: (slave veth5): Enslaving as an active interface with a down link [ 207.486168][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.493661][ T7952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.569'. [ 207.528901][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.614955][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.622209][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.935463][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.959027][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.069402][ T7958] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.079727][ T7958] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.088703][ T7958] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.098091][ T7958] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.146371][ T7958] bridge2: left promiscuous mode [ 208.210891][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.218124][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.441657][ T5831] Bluetooth: hci4: command tx timeout [ 208.468521][ T7970] IPv6: syztnl1: Disabled Multicast RS [ 208.572382][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.574'. [ 208.587584][ T7966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.674276][ T7971] sctp: [Deprecated]: syz.0.574 (pid 7971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.674276][ T7971] Use struct sctp_sack_info instead [ 208.692721][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.574'. [ 208.705078][ T7977] openvswitch: netlink: EtherType 0 is less than min 600 [ 209.030439][ T7989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.113373][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'. [ 209.131670][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'. [ 209.146865][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.578'. [ 209.191372][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'. [ 209.337835][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.619462][ T7774] veth0_vlan: entered promiscuous mode [ 209.659660][ T7774] veth1_vlan: entered promiscuous mode [ 209.746720][ T7774] veth0_macvtap: entered promiscuous mode [ 209.765691][ T7774] veth1_macvtap: entered promiscuous mode [ 209.826150][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.877695][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.923920][ T7774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.953380][ T7774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.978048][ T7774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.982054][ T8034] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 209.997709][ T7774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.007531][ T8034] netlink: 'syz.1.592': attribute type 3 has an invalid length. [ 210.255532][ T8041] vlan2: entered allmulticast mode [ 210.358086][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.384632][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.444973][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.461466][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.531337][ T5848] Bluetooth: hci4: command tx timeout [ 210.691896][ T8056] netlink: 'syz.4.598': attribute type 2 has an invalid length. [ 210.828501][ T8061] netlink: 'syz.3.516': attribute type 21 has an invalid length. [ 211.037832][ T8069] __nla_validate_parse: 17 callbacks suppressed [ 211.037856][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 211.146892][ T8069] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 211.149104][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 211.523707][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 211.714877][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 211.742468][ T8106] bond0: option use_carrier: invalid value (5) [ 211.801575][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 211.807804][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.813557][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 211.814031][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.828375][ T5848] block nbd1: Receive control failed (result -104) [ 211.995786][ T8118] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 212.124228][ T8123] netlink: 'syz.2.618': attribute type 2 has an invalid length. [ 212.149136][ T8123] þ`Ì: entered promiscuous mode [ 212.880493][ T8158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.628'. [ 212.950203][ T8158] vlan0: entered allmulticast mode [ 212.955522][ T8158] veth0_vlan: entered allmulticast mode [ 213.077136][ T8170] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 213.100198][ T8166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.193581][ T8170] bond1: entered promiscuous mode [ 213.199592][ T8170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.262079][ T8170] netlink: 320 bytes leftover after parsing attributes in process `syz.4.631'. [ 213.318283][ T8166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.397815][ T8181] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.633'. [ 213.408770][ T8181] netlink: zone id is out of range [ 213.414268][ T8181] netlink: zone id is out of range [ 213.419861][ T8181] netlink: get zone limit has 8 unknown bytes [ 213.490392][ T8166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.610617][ T8166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.764390][ T8166] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.785057][ T8166] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.838491][ T8166] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.882430][ T8195] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 213.903914][ T8195] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 213.927981][ T8195] netlink: 192 bytes leftover after parsing attributes in process `syz.4.637'. [ 213.987681][ T8199] netlink: zone id is out of range [ 213.993386][ T8199] netlink: zone id is out of range [ 213.998535][ T8199] netlink: zone id is out of range [ 214.019344][ T8199] netlink: zone id is out of range [ 214.030287][ T8199] netlink: zone id is out of range [ 214.036676][ T8166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.046410][ T8199] netlink: zone id is out of range [ 214.054235][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.637'. [ 214.077465][ T8200] sctp: [Deprecated]: syz.0.638 (pid 8200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.077465][ T8200] Use struct sctp_sack_info instead [ 214.294889][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'. [ 214.524687][ T8221] !: renamed from dummy0 [ 215.366509][ T8247] syzkaller1: entered promiscuous mode [ 215.389453][ T8247] syzkaller1: entered allmulticast mode [ 215.447417][ T8248] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 153 [ 216.255327][ T8297] tipc: Enabled bearer , priority 0 [ 216.351372][ T8299] __nla_validate_parse: 4 callbacks suppressed [ 216.351393][ T8299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 216.433122][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 216.481554][ T8297] syzkaller0: entered promiscuous mode [ 216.487133][ T8297] syzkaller0: entered allmulticast mode [ 216.508377][ T8297] tipc: Resetting bearer [ 216.581819][ T8316] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 216.632955][ T8296] tipc: Resetting bearer [ 216.822850][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 218.237125][ T8296] tipc: Disabling bearer [ 218.496848][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 218.690523][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 218.694790][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 218.935538][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 218.968745][ T8378] net_ratelimit: 400 callbacks suppressed [ 218.968768][ T8378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.031288][ T8382] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 219.194312][ T10] IPVS: starting estimator thread 0... [ 219.261493][ T8395] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 219.301399][ T8389] IPVS: using max 26 ests per chain, 62400 per kthread [ 219.386862][ T8402] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 219.467402][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 219.497346][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.694'. [ 219.655351][ T8415] netlink: 'syz.3.698': attribute type 4 has an invalid length. [ 219.708401][ T8421] netlink: 'syz.3.698': attribute type 4 has an invalid length. [ 219.747914][ T8417] dummy0: default FDB implementation only supports local addresses [ 219.752659][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 219.805751][ T8422] lo: entered promiscuous mode [ 219.810295][ T8424] netlink: del zone limit has 4 unknown bytes [ 219.810566][ T8422] lo: entered allmulticast mode [ 219.845390][ T8422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.871680][ T8430] RDS: rds_bind could not find a transport for ::8001:0:20:0, load rds_tcp or rds_rdma? [ 219.988870][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.996739][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.182505][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.201778][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.390667][ T8415] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.399222][ T8415] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.412573][ T8415] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.420995][ T8415] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.747176][ T8460] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 221.359559][ T8491] netlink: 'syz.0.718': attribute type 3 has an invalid length. [ 221.849749][ T8514] __nla_validate_parse: 3 callbacks suppressed [ 221.849770][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.724'. [ 221.939171][ T8517] pim6reg1: entered promiscuous mode [ 221.945185][ T8517] pim6reg1: entered allmulticast mode [ 222.109574][ T8517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.120509][ T8517] team0: Port device bond4 added [ 222.133115][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 222.148741][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 222.160278][ T8528] netlink: 2 bytes leftover after parsing attributes in process `syz.1.727'. [ 222.625695][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 222.780436][ T8544] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.882062][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 222.922240][ T6038] wlan0: Trigger new scan to find an IBSS to join [ 223.127747][ T8561] netlink: 'syz.1.738': attribute type 14 has an invalid length. [ 223.531550][ T8586] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 223.554906][ T8586] bridge4: entered allmulticast mode [ 224.143087][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 224.349872][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'. [ 224.606518][ T8632] ip6tnl1: entered promiscuous mode [ 224.613582][ T8632] ip6tnl1: entered allmulticast mode [ 224.620306][ T8632] team0: Device ip6tnl1 is of different type [ 224.814343][ T8638] syzkaller0: entered promiscuous mode [ 224.820002][ T8638] syzkaller0: entered allmulticast mode [ 224.839006][ T8641] vlan0: entered promiscuous mode [ 224.862707][ T8638] netlink: 124 bytes leftover after parsing attributes in process `syz.2.759'. [ 225.963076][ T13] wlan0: Trigger new scan to find an IBSS to join [ 226.245284][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 226.475021][ T8679] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 226.879583][ T8714] __nla_validate_parse: 1 callbacks suppressed [ 226.879602][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.778'. [ 226.974236][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.185044][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 227.248710][ T8726] bond0: entered promiscuous mode [ 227.258002][ T8726] bond_slave_0: entered promiscuous mode [ 227.281659][ T8726] bond_slave_1: entered promiscuous mode [ 227.448267][ T30] audit: type=1107 audit(1749122643.332:4): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 227.532074][ T8737] netlink: 'syz.3.786': attribute type 16 has an invalid length. [ 227.919054][ T8751] netlink: 160 bytes leftover after parsing attributes in process `syz.2.789'. [ 228.130578][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 228.180879][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.242710][ T8774] netlink: 'syz.3.793': attribute type 39 has an invalid length. [ 228.298176][ T8775] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 228.356384][ T8783] vlan0: entered promiscuous mode [ 228.524514][ T8791] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 229.220572][ T8820] xt_CT: No such helper "pptp" [ 229.228178][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 230.029858][ T8814] netlink: 'syz.1.806': attribute type 4 has an invalid length. [ 230.142785][ T8846] wireguard0: entered promiscuous mode [ 230.165879][ T8846] wireguard0: entered allmulticast mode [ 230.688277][ T8863] ieee802154 phy1 wpan1: encryption failed: -90 [ 230.824101][ T8872] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 230.835841][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.822'. [ 231.403854][ T8895] netlink: 'syz.0.826': attribute type 9 has an invalid length. [ 232.065437][ T8909] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 232.178565][ T8918] netlink: 'syz.1.833': attribute type 2 has an invalid length. [ 232.483118][ T8927] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 232.785573][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 232.857379][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 232.903597][ T8948] macsec1: entered allmulticast mode [ 232.908984][ T8948] erspan0: entered allmulticast mode [ 232.936615][ T8948] erspan0: left allmulticast mode [ 233.553322][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 233.600414][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 233.633954][ T8967] Cannot find del_set index 0 as target [ 234.151181][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 234.404226][ T9013] bond0: option lp_interval: invalid value (18446744073709551604) [ 234.414241][ T9013] bond0: option lp_interval: allowed values 1 - 2147483647 [ 234.507049][ T9018] netlink: 'syz.4.863': attribute type 9 has an invalid length. [ 235.018849][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 235.100269][ T9044] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.175121][ T9046] netlink: 830 bytes leftover after parsing attributes in process `syz.1.868'. [ 235.187476][ T9048] netlink: 36 bytes leftover after parsing attributes in process `syz.4.871'. [ 235.426541][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 235.439200][ T9058] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 235.471379][ T9058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.805787][ T9070] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 235.819486][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.879'. [ 236.026139][ T9085] sctp: [Deprecated]: syz.1.881 (pid 9085) Use of int in max_burst socket option. [ 236.026139][ T9085] Use struct sctp_assoc_value instead [ 236.412354][ T9104] dvmrp1: left allmulticast mode [ 236.798018][ T9122] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 236.813814][ T9122] netlink: 'syz.4.892': attribute type 2 has an invalid length. [ 237.022277][ T9140] netlink: 'syz.0.896': attribute type 29 has an invalid length. [ 237.235426][ T9147] bridge_slave_0: left allmulticast mode [ 237.241478][ T9147] bridge_slave_0: left promiscuous mode [ 237.247839][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.271350][ T9147] bridge_slave_1: left allmulticast mode [ 237.277555][ T9147] bridge_slave_1: left promiscuous mode [ 237.306908][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.382052][ T9147] bond0: (slave bond_slave_0): Releasing backup interface [ 237.453327][ T9147] bond0: (slave bond_slave_1): Releasing backup interface [ 237.506532][ T9147] team0: Port device team_slave_0 removed [ 237.543434][ T9147] team0: Port device team_slave_1 removed [ 237.571899][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.607334][ T9147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.666442][ T9147] team0: Port device bond2 removed [ 238.091961][ T9170] syzkaller1: entered promiscuous mode [ 238.109360][ T9170] syzkaller1: entered allmulticast mode [ 238.427818][ T9183] __nla_validate_parse: 4 callbacks suppressed [ 238.427837][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.905'. [ 238.769594][ T9198] netlink: 136 bytes leftover after parsing attributes in process `syz.4.910'. [ 238.778778][ T9198] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 239.570093][ T9227] netlink: 'syz.1.918': attribute type 14 has an invalid length. [ 239.709898][ T9236] netlink: 56 bytes leftover after parsing attributes in process `syz.1.922'. [ 240.234410][ T9264] xt_TCPMSS: Only works on TCP SYN packets [ 240.249947][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 240.410928][ T9276] tap0: tun_chr_ioctl cmd 2147767506 [ 240.584237][ T9281] sctp: [Deprecated]: syz.0.935 (pid 9281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.584237][ T9281] Use struct sctp_sack_info instead [ 240.691233][ T5844] Bluetooth: hci4: command tx timeout [ 240.899727][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 240.914483][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 241.055197][ T9305] Bluetooth: MGMT ver 1.23 [ 241.146270][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 241.161460][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 241.204276][ T9307] netlink: 'syz.4.942': attribute type 10 has an invalid length. [ 241.222415][ T9307] dummy0: entered promiscuous mode [ 241.378573][ T9318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.947'. [ 241.471983][ T9324] netlink: 'syz.2.949': attribute type 11 has an invalid length. [ 241.493967][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 242.683975][ T9355] Bluetooth: MGMT ver 1.23 [ 242.762079][ T9355] geneve2: entered promiscuous mode [ 242.789592][ T9362] netlink: 'syz.3.962': attribute type 4 has an invalid length. [ 243.444752][ T9393] tipc: Can't bind to reserved service type 0 [ 243.649545][ T9403] __nla_validate_parse: 37 callbacks suppressed [ 243.649565][ T9403] netlink: 5 bytes leftover after parsing attributes in process `syz.2.972'. [ 243.701549][ T9403] 0ªX¹¦D: renamed from gretap0 [ 244.038490][ T9403] 0ªX¹¦D: entered allmulticast mode [ 244.100116][ T9403] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 244.151791][ T9408] bond0: option min_links: invalid value (18446744071562067969) [ 244.170026][ T9408] bond0: option min_links: allowed values 0 - 2147483647 [ 244.367656][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 244.502672][ T9422] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.511680][ T9422] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.519909][ T9422] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.528463][ T9422] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.576465][ T9422] team0: Port device vxlan0 added [ 244.636709][ T9436] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 244.644802][ T9436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.983'. [ 245.132179][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 245.158980][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 245.307783][ T9465] netlink: 'syz.2.989': attribute type 13 has an invalid length. [ 245.744921][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.756263][ T9481] netlink: 'syz.2.993': attribute type 16 has an invalid length. [ 245.767789][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.787467][ T9483] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.796046][ T9481] netlink: 'syz.2.993': attribute type 17 has an invalid length. [ 245.864307][ T9487] netlink: 312 bytes leftover after parsing attributes in process `syz.3.997'. [ 245.947308][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.954666][ T9481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.973477][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.980753][ T9481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.277207][ T9514] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1004'. [ 246.835450][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 247.265813][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 247.474105][ T9555] raw_sendmsg: syz.4.1017 forgot to set AF_INET. Fix it! [ 247.514754][ T9554] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1018'. [ 248.771292][ T9600] bridge2: entered promiscuous mode [ 248.785598][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.810645][ T9600] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 248.824289][ T9600] __nla_validate_parse: 11 callbacks suppressed [ 248.824307][ T9600] netlink: 600 bytes leftover after parsing attributes in process `syz.0.1033'. [ 248.825109][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.847419][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 248.856883][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 249.178859][ T9629] bridge6: entered promiscuous mode [ 249.193534][ T9629] bridge6: entered allmulticast mode [ 249.284066][ T9635] bridge7: entered promiscuous mode [ 249.305854][ T9635] bridge7: entered allmulticast mode [ 249.900974][ T9655] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1052'. [ 249.934022][ T9655] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1052'. [ 249.978907][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1052'. [ 250.163284][ T9660] netlink: 'syz.0.1054': attribute type 5 has an invalid length. [ 250.171084][ T9660] netlink: 'syz.0.1054': attribute type 7 has an invalid length. [ 250.223948][ T9660] : entered promiscuous mode [ 250.358939][ T9670] netlink: 'syz.2.1058': attribute type 30 has an invalid length. [ 250.360687][ T9675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1060'. [ 250.417567][ T9675] IPVS: set_ctl: invalid protocol: 2 172.30.1.4:20004 [ 251.338133][ T9699] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1072'. [ 251.724260][ T9726] tipc: Failed to remove unknown binding: 66,2,2/0:2185556346/2185556347 [ 251.975104][ T9740] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.998955][ T9740] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.008010][ T9740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.064422][ T9740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.091748][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'. [ 252.215624][ T9756] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1083'. [ 254.031468][ T9823] bond0: left promiscuous mode [ 254.079654][ T9823] bond_slave_0: left promiscuous mode [ 254.110840][ T9823] bond_slave_1: left promiscuous mode [ 254.180170][ T9823] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 254.293178][ T9823] bridge3: left promiscuous mode [ 254.321813][ T9823] bond1: left promiscuous mode [ 254.356004][ T9823] bridge4: left allmulticast mode [ 254.363478][ T9823] bridge6: left promiscuous mode [ 254.379902][ T9823] bridge6: left allmulticast mode [ 254.404117][ T9823] bridge7: left promiscuous mode [ 254.433790][ T9823] bridge7: left allmulticast mode [ 254.720056][ T9838] __nla_validate_parse: 5 callbacks suppressed [ 254.720077][ T9838] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1110'. [ 255.149068][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'. [ 255.360561][ T9856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.406948][ T9863] batadv_slave_0: entered allmulticast mode [ 255.631819][ T9870] ipt_ECN: cannot use operation on non-tcp rule [ 255.888109][ T9877] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1121'. [ 256.309031][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 256.332373][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.429304][ T9893] bond0: (slave macvlan2): Releasing backup interface [ 256.815806][ T9905] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 257.017991][ T9917] syzkaller0: entered promiscuous mode [ 257.048500][ T9917] syzkaller0: entered allmulticast mode [ 257.127509][ T9924] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1134'. [ 257.396877][ T9933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1137'. [ 257.434203][ T9931] netlink: 'syz.1.1136': attribute type 142 has an invalid length. [ 257.704103][ T9946] bridge0: port 3(erspan0) entered blocking state [ 257.718603][ T9946] bridge0: port 3(erspan0) entered disabled state [ 257.726664][ T9946] erspan0: entered allmulticast mode [ 257.734202][ T9946] erspan0: entered promiscuous mode [ 257.744147][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 257.754293][ T9946] erspan0: left allmulticast mode [ 257.759556][ T9946] erspan0: left promiscuous mode [ 257.769234][ T9946] bridge0: port 3(erspan0) entered disabled state [ 258.638283][ T9963] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1146'. [ 258.690697][ T9965] vlan2: entered allmulticast mode [ 258.695993][ T9965] hsr0: entered allmulticast mode [ 258.701063][ T9965] hsr_slave_0: entered allmulticast mode [ 258.733223][ T9965] hsr_slave_1: entered allmulticast mode [ 259.753231][T10018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 259.779040][T10018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 259.822756][T10022] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1161'. [ 259.989117][T10024] netlink: 'syz.0.1162': attribute type 5 has an invalid length. [ 269.125845][T10063] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 269.142235][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 269.163377][T10067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1175'. [ 269.179497][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 269.196760][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 269.762958][T10091] bridge_slave_0: left allmulticast mode [ 269.771358][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 269.780898][T10091] bridge_slave_0: left promiscuous mode [ 269.788827][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.805537][T10091] bridge_slave_1: left allmulticast mode [ 269.812275][T10091] bridge_slave_1: left promiscuous mode [ 269.818120][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.832593][T10097] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 269.844663][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 269.860508][T10091] bond0: (slave bond_slave_0): Releasing backup interface [ 269.877010][T10091] bond0: (slave bond_slave_1): Releasing backup interface [ 269.889580][T10100] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 269.915374][T10091] team0: Port device team_slave_0 removed [ 269.936066][T10091] team0: Port device team_slave_1 removed [ 269.968733][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.978596][T10091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.993080][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.000633][T10091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.046849][T10091] bond2: (slave veth3): Releasing active interface [ 270.050338][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1183'. [ 270.067706][T10091] bond2: (slave veth5): Releasing active interface [ 270.083011][T10091] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.092266][T10091] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.100674][T10091] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.109285][T10091] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.137378][T10091] team0: Port device vxlan0 removed [ 270.154032][T10096] netlink: 'syz.2.1182': attribute type 30 has an invalid length. [ 270.228308][T10102] bridge0: port 1(vlan2) entered blocking state [ 270.246861][T10102] bridge0: port 1(vlan2) entered disabled state [ 270.253567][T10102] vlan2: entered allmulticast mode [ 270.258899][T10102] bond0: entered allmulticast mode [ 270.272822][T10106] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 270.289883][T10106] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 270.310070][T10106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'. [ 270.518500][T10113] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1186'. [ 270.526241][T10111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 270.555224][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 270.564525][T10115] netlink: 'syz.1.1188': attribute type 21 has an invalid length. [ 270.696183][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.757572][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.823906][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.905626][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.934900][T10125] IPVS: length: 87 != 8 [ 272.292369][T10170] wireguard0: entered promiscuous mode [ 272.299945][T10170] wireguard0: entered allmulticast mode [ 272.985334][T10221] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 273.185702][T10232] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 273.322698][T10240] 8021q: VLANs not supported on nlmon0 [ 274.347637][T10272] __nla_validate_parse: 16 callbacks suppressed [ 274.347660][T10272] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1238'. [ 274.567690][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.576720][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.585399][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.594997][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.602960][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.160565][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 275.221625][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 275.356510][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 275.425777][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 275.438929][T10282] chnl_net:caif_netlink_parms(): no params data found [ 275.457216][T10310] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1250'. [ 275.726390][T10321] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 275.750278][T10320] 8021q: VLANs not supported on vcan0 [ 275.754942][T10321] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 276.392499][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.404896][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.413349][T10282] bridge_slave_0: entered allmulticast mode [ 276.581819][T10282] bridge_slave_0: entered promiscuous mode [ 276.590746][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.598196][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.605710][T10282] bridge_slave_1: entered allmulticast mode [ 276.613749][T10282] bridge_slave_1: entered promiscuous mode [ 276.683360][ T5831] Bluetooth: hci0: command tx timeout [ 276.726151][T10341] vlan3: entered promiscuous mode [ 276.770389][T10341] team0: entered promiscuous mode [ 276.824296][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.838297][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.850930][T10340] tap0: tun_chr_ioctl cmd 2147767506 [ 276.930737][T10346] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 276.999880][T10346] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 277.017954][T10282] team0: Port device team_slave_0 added [ 277.060622][T10282] team0: Port device team_slave_1 added [ 277.076674][T10358] netlink: 'syz.2.1265': attribute type 11 has an invalid length. [ 277.081343][T10357] vlan2: entered promiscuous mode [ 277.089866][T10357] bridge0: entered promiscuous mode [ 277.101394][T10358] netlink: 'syz.2.1265': attribute type 11 has an invalid length. [ 277.119481][T10358] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1265'. [ 277.245791][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.264050][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.299254][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.320506][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.337449][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.368681][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.403325][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1267'. [ 277.547510][T10282] hsr_slave_0: entered promiscuous mode [ 277.559468][T10375] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 277.560418][T10282] hsr_slave_1: entered promiscuous mode [ 277.583311][T10375] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1270'. [ 277.585478][T10282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.620547][T10282] Cannot create hsr debugfs directory [ 277.974340][T10384] batadv_slave_0: entered promiscuous mode [ 277.988174][T10384] netlink: 'syz.2.1273': attribute type 2 has an invalid length. [ 278.169907][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 278.737734][T10416] bond2: entered promiscuous mode [ 278.743257][T10416] bond2: entered allmulticast mode [ 278.749893][T10416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.761554][ T5831] Bluetooth: hci0: command tx timeout [ 278.790535][T10395] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 278.814431][T10282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.858184][T10282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.894366][T10422] ip6gre1: entered allmulticast mode [ 278.903016][T10282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.966393][T10282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.004057][T10432] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 279.328299][T10282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.366764][T10282] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.400486][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.407774][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.458248][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.465495][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.855783][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.900077][T10469] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 279.913883][T10469] __nla_validate_parse: 1 callbacks suppressed [ 279.913901][T10469] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1297'. [ 280.029454][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 280.077833][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 280.088126][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 280.107537][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 280.124161][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 280.134366][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 280.350173][T10490] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1302'. [ 280.583456][T10282] veth0_vlan: entered promiscuous mode [ 280.619184][T10282] veth1_vlan: entered promiscuous mode [ 280.698440][T10507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 280.765798][T10282] veth0_macvtap: entered promiscuous mode [ 280.829206][T10282] veth1_macvtap: entered promiscuous mode [ 280.841574][ T5831] Bluetooth: hci0: command tx timeout [ 280.856832][T10512] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 280.897651][T10514] 8021q: VLANs not supported on vcan0 [ 280.906416][T10512] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 280.924977][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.097898][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.120243][T10527] !: renamed from dummy0 (while UP) [ 281.183074][T10282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.212003][T10282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.220769][T10282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.244286][T10282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.465732][T10536] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 281.675887][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 281.914372][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.940296][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.012341][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.020925][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.333294][T10575] sctp: [Deprecated]: syz.0.1330 (pid 10575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.333294][T10575] Use struct sctp_sack_info instead [ 282.479248][T10581] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 282.534690][T10581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.764779][ T6036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.941058][ T6036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.090982][ T6036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.264950][ T6036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.612614][T10621] vlan4: entered allmulticast mode [ 283.787967][T10624] xfrm0: entered promiscuous mode [ 283.852244][T10624] xfrm0: entered allmulticast mode [ 283.947519][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.957296][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.959516][ T6036] bridge_slave_1: left allmulticast mode [ 283.978091][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.987662][ T6036] bridge_slave_1: left promiscuous mode [ 283.994391][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.002984][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.004084][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.104189][ T6036] bridge_slave_0: left allmulticast mode [ 284.139716][ T6036] bridge_slave_0: left promiscuous mode [ 284.192217][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.906634][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.918318][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.928822][ T6036] bond0 (unregistering): Released all slaves [ 285.247963][T10651] __nla_validate_parse: 7 callbacks suppressed [ 285.247985][T10651] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1347'. [ 285.289412][T10651] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1347'. [ 285.650677][ T6036] hsr_slave_0: left promiscuous mode [ 285.665765][ T6036] hsr_slave_1: left promiscuous mode [ 285.672365][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.679873][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.751793][T10649] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1346'. [ 285.765858][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.775975][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.818241][ T6036] veth1_macvtap: left promiscuous mode [ 285.824596][ T6036] veth0_macvtap: left promiscuous mode [ 285.830430][ T6036] veth1_vlan: left promiscuous mode [ 285.836321][ T6036] veth0_vlan: left promiscuous mode [ 286.043062][ T5844] Bluetooth: hci0: command tx timeout [ 286.608625][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 286.648204][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 287.039450][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 287.700432][T10631] chnl_net:caif_netlink_parms(): no params data found [ 287.835376][T10680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 287.847570][T10680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 287.857074][T10680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 287.866312][T10680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 287.875960][T10680] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 287.885878][T10680] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 287.895066][T10680] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 287.906975][T10680] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 287.909568][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'. [ 287.925777][T10680] geneve2: entered allmulticast mode [ 288.005493][T10683] block nbd2: server does not support multiple connections per device. [ 288.017632][T10683] block nbd2: shutting down sockets [ 288.032395][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.051338][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.065901][T10631] bridge_slave_0: entered allmulticast mode [ 288.086552][T10631] bridge_slave_0: entered promiscuous mode [ 288.115280][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.122607][ T5844] Bluetooth: hci0: command tx timeout [ 288.134192][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.143178][T10631] bridge_slave_1: entered allmulticast mode [ 288.155421][T10631] bridge_slave_1: entered promiscuous mode [ 288.305932][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.330775][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.463154][T10631] team0: Port device team_slave_0 added [ 288.480959][T10631] team0: Port device team_slave_1 added [ 288.522128][T10700] netlink: zone id is out of range [ 288.592264][T10700] netlink: set zone limit has 4 unknown bytes [ 288.618692][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.641035][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.672858][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.715615][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.723257][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.749724][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.067758][T10631] hsr_slave_0: entered promiscuous mode [ 289.107997][T10631] hsr_slave_1: entered promiscuous mode [ 289.125269][T10631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.134844][T10631] Cannot create hsr debugfs directory [ 289.215245][T10717] tipc: Started in network mode [ 289.226052][T10717] tipc: Node identity 22436df89d13, cluster identity 4711 [ 289.233743][T10717] tipc: Enabled bearer , priority 0 [ 289.279858][T10723] bridge0: port 2(syz_tun) entered blocking state [ 289.286692][T10723] bridge0: port 2(syz_tun) entered disabled state [ 289.293586][T10723] syz_tun: entered allmulticast mode [ 289.300257][T10723] syz_tun: entered promiscuous mode [ 289.306036][T10723] vlan2: entered promiscuous mode [ 289.312325][T10723] bond0: entered promiscuous mode [ 289.320991][T10723] bridge0: port 2(syz_tun) entered blocking state [ 289.327587][T10723] bridge0: port 2(syz_tun) entered forwarding state [ 289.335755][T10717] syzkaller0: entered promiscuous mode [ 289.342904][T10717] syzkaller0: entered allmulticast mode [ 289.370268][T10717] tipc: Resetting bearer [ 289.412458][T10716] tipc: Resetting bearer [ 289.433836][T10716] tipc: Disabling bearer [ 289.556619][T10727] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 289.596527][T10727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.650728][T10730] vlan4: entered allmulticast mode [ 289.698627][T10727] bond4: (slave gretap0): making interface the new active one [ 289.714761][T10727] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 289.749938][T10727] syz.2.1364 (10727) used greatest stack depth: 18360 bytes left [ 289.777229][T10734] xt_hashlimit: size too large, truncated to 1048576 [ 289.787503][T10736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1367'. [ 289.799322][T10732] xfrm1: entered promiscuous mode [ 289.825320][T10732] xfrm1: entered allmulticast mode [ 290.159233][T10744] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1370'. [ 290.173616][T10742] lo: left promiscuous mode [ 290.178286][T10742] lo: left allmulticast mode [ 290.201332][ T5844] Bluetooth: hci0: command tx timeout [ 290.212502][T10742] 0ªX¹¦D: left allmulticast mode [ 290.663454][T10742] bridge0: port 2(syz_tun) entered disabled state [ 291.164116][T10742] batadv_slave_0: left promiscuous mode [ 291.393589][T10742] vlan0: left promiscuous mode [ 291.534874][T10742] veth3: left promiscuous mode [ 291.540557][T10742] veth5: left promiscuous mode [ 291.548183][T10742] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.559204][T10742] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.571037][T10742] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.579888][T10742] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.589245][T10742] geneve2: left promiscuous mode [ 291.855879][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1375'. [ 291.870219][T10768] netlink: 'syz.3.1376': attribute type 2 has an invalid length. [ 291.919668][T10768] þ: entered promiscuous mode [ 291.940741][T10631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.953094][T10631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.962526][T10773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1377'. [ 292.026300][T10631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.052787][T10631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.176328][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 292.221607][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 292.283534][ T5844] Bluetooth: hci0: command tx timeout [ 292.550122][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.644878][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.681900][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.689222][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.761849][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.769135][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.666276][T10631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.958789][T10797] syzkaller1: entered promiscuous mode [ 293.981425][T10797] syzkaller1: entered allmulticast mode [ 294.003382][T10797] netlink: 'syz.3.1385': attribute type 4 has an invalid length. [ 294.215174][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.388511][T10812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.474524][T10812] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 294.492279][T10812] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1389'. [ 294.912715][T10631] veth0_vlan: entered promiscuous mode [ 294.932816][T10631] veth1_vlan: entered promiscuous mode [ 294.946481][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1390'. [ 294.981267][T10824] openvswitch: netlink: Flow key attr not present in new flow. [ 295.030911][T10631] veth0_macvtap: entered promiscuous mode [ 295.060771][T10631] veth1_macvtap: entered promiscuous mode [ 295.121771][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.155559][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.193976][T10631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.197263][T10825] RDS: rds_bind could not find a transport for fe80::1b, load rds_tcp or rds_rdma? [ 295.211423][T10631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.233541][T10631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.243032][T10811] netlink: 'syz.3.1388': attribute type 4 has an invalid length. [ 295.271204][T10631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.527427][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.541224][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.604982][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.619647][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.850255][T10832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1392'. [ 295.905134][T10831] xt_l2tp: missing protocol rule (udp|l2tpip) [ 295.931368][T10831] tipc: Started in network mode [ 295.936801][T10831] tipc: Node identity 3acef3a1b4ba, cluster identity 4711 [ 295.956692][T10831] tipc: Enabled bearer , priority 0 [ 295.966015][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'. [ 296.120414][T10834] syzkaller0: entered promiscuous mode [ 296.135400][T10834] syzkaller0: entered allmulticast mode [ 296.145019][T10834] tipc: Resetting bearer [ 296.202044][T10830] tipc: Resetting bearer [ 296.984022][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.999834][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.016916][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.041405][ T5834] tipc: Node number set to 2390029217 [ 297.050279][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.065602][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.699078][T10830] tipc: Disabling bearer [ 299.081751][ T5831] Bluetooth: hci0: command tx timeout [ 299.137135][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 299.185295][T10850] nbd: couldn't find device at index 536870912 [ 299.206086][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.465710][T10867] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1399'. [ 299.498090][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1399'. [ 299.557661][T10837] chnl_net:caif_netlink_parms(): no params data found [ 299.674252][T10875] FAULT_INJECTION: forcing a failure. [ 299.674252][T10875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.691917][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.0.1401 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 299.691958][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.691983][T10875] Call Trace: [ 299.691992][T10875] [ 299.692002][T10875] dump_stack_lvl+0x189/0x250 [ 299.692042][T10875] ? __pfx____ratelimit+0x10/0x10 [ 299.692070][T10875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.692104][T10875] ? __pfx__printk+0x10/0x10 [ 299.692129][T10875] ? __might_fault+0xb0/0x130 [ 299.692172][T10875] should_fail_ex+0x414/0x560 [ 299.692207][T10875] _copy_from_user+0x2d/0xb0 [ 299.692231][T10875] ___sys_sendmsg+0x158/0x2a0 [ 299.692257][T10875] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.692319][T10875] ? __fget_files+0x2a/0x420 [ 299.692351][T10875] ? __fget_files+0x3a0/0x420 [ 299.692396][T10875] __x64_sys_sendmsg+0x19b/0x260 [ 299.692421][T10875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.692454][T10875] ? __pfx_ksys_write+0x10/0x10 [ 299.692480][T10875] ? rcu_is_watching+0x15/0xb0 [ 299.692516][T10875] ? do_syscall_64+0xbe/0x3b0 [ 299.692549][T10875] do_syscall_64+0xfa/0x3b0 [ 299.692575][T10875] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.692600][T10875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.692621][T10875] ? clear_bhb_loop+0x60/0xb0 [ 299.692647][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.692668][T10875] RIP: 0033:0x7f3a94b8e929 [ 299.692687][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.692707][T10875] RSP: 002b:00007f3a95970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.692730][T10875] RAX: ffffffffffffffda RBX: 00007f3a94db5fa0 RCX: 00007f3a94b8e929 [ 299.692745][T10875] RDX: 0000000000020024 RSI: 0000200000000300 RDI: 0000000000000004 [ 299.692760][T10875] RBP: 00007f3a95970090 R08: 0000000000000000 R09: 0000000000000000 [ 299.692773][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.692786][T10875] R13: 0000000000000000 R14: 00007f3a94db5fa0 R15: 00007ffeecf429a8 [ 299.692819][T10875] [ 300.035477][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.048129][T10882] xt_policy: neither incoming nor outgoing policy selected [ 300.125935][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.287199][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.489247][T10904] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1407'. [ 300.546556][T10908] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1407'. [ 300.558061][T10908] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1407'. [ 300.700108][T10837] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.709552][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.722826][T10837] bridge_slave_0: entered allmulticast mode [ 300.736327][T10837] bridge_slave_0: entered promiscuous mode [ 300.785290][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.814378][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.853544][T10837] bridge_slave_1: entered allmulticast mode [ 300.878014][T10837] bridge_slave_1: entered promiscuous mode [ 300.905604][T10926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.946577][T10928] FAULT_INJECTION: forcing a failure. [ 300.946577][T10928] name failslab, interval 1, probability 0, space 0, times 0 [ 300.976127][T10928] CPU: 0 UID: 0 PID: 10928 Comm: syz.3.1413 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 300.976158][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.976172][T10928] Call Trace: [ 300.976180][T10928] [ 300.976189][T10928] dump_stack_lvl+0x189/0x250 [ 300.976229][T10928] ? __pfx____ratelimit+0x10/0x10 [ 300.976255][T10928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.976289][T10928] ? __pfx__printk+0x10/0x10 [ 300.976318][T10928] ? __pfx___might_resched+0x10/0x10 [ 300.976355][T10928] should_fail_ex+0x414/0x560 [ 300.976387][T10928] should_failslab+0xa8/0x100 [ 300.976421][T10928] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 300.976454][T10928] ? __alloc_skb+0x112/0x2d0 [ 300.976490][T10928] __alloc_skb+0x112/0x2d0 [ 300.976528][T10928] netlink_sendmsg+0x5c6/0xb30 [ 300.976559][T10928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.976588][T10928] ? aa_sock_msg_perm+0x94/0x160 [ 300.976618][T10928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.976644][T10928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.976664][T10928] __sock_sendmsg+0x219/0x270 [ 300.976696][T10928] ____sys_sendmsg+0x505/0x830 [ 300.976733][T10928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.976766][T10928] ? import_iovec+0x74/0xa0 [ 300.976791][T10928] ___sys_sendmsg+0x21f/0x2a0 [ 300.976816][T10928] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.976880][T10928] ? __fget_files+0x2a/0x420 [ 300.976911][T10928] ? __fget_files+0x3a0/0x420 [ 300.976955][T10928] __x64_sys_sendmsg+0x19b/0x260 [ 300.976981][T10928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.977015][T10928] ? __pfx_ksys_write+0x10/0x10 [ 300.977041][T10928] ? rcu_is_watching+0x15/0xb0 [ 300.977077][T10928] ? do_syscall_64+0xbe/0x3b0 [ 300.977109][T10928] do_syscall_64+0xfa/0x3b0 [ 300.977135][T10928] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.977161][T10928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.977182][T10928] ? clear_bhb_loop+0x60/0xb0 [ 300.977208][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.977228][T10928] RIP: 0033:0x7fc8e418e929 [ 300.977247][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.977266][T10928] RSP: 002b:00007fc8e4f52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.977289][T10928] RAX: ffffffffffffffda RBX: 00007fc8e43b5fa0 RCX: 00007fc8e418e929 [ 300.977305][T10928] RDX: 0000000000020024 RSI: 0000200000000300 RDI: 0000000000000004 [ 300.977319][T10928] RBP: 00007fc8e4f52090 R08: 0000000000000000 R09: 0000000000000000 [ 300.977333][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.977345][T10928] R13: 0000000000000000 R14: 00007fc8e43b5fa0 R15: 00007ffc337d6638 [ 300.977380][T10928] [ 301.329290][ T5831] Bluetooth: hci0: command tx timeout [ 301.379300][T10837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.398427][T10837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.428963][ T13] bridge_slave_1: left allmulticast mode [ 301.439566][ T13] bridge_slave_1: left promiscuous mode [ 301.446812][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.500533][ T13] bridge_slave_0: left allmulticast mode [ 301.509877][ T13] bridge_slave_0: left promiscuous mode [ 301.516001][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.787783][T10948] openvswitch: netlink: IP tunnel dst address not specified [ 302.068329][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.079854][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.091059][ T13] bond0 (unregistering): Released all slaves [ 302.177979][T10837] team0: Port device team_slave_0 added [ 302.284785][T10837] team0: Port device team_slave_1 added [ 302.679815][T10959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1422'. [ 302.695387][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 302.989813][T10837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.021477][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.099891][T10837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.123470][T10837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.130472][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.157395][T10837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.230883][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 303.358242][T10971] vlan3: entered promiscuous mode [ 303.399385][ T13] hsr_slave_0: left promiscuous mode [ 303.399664][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1428'. [ 303.416139][ T13] hsr_slave_1: left promiscuous mode [ 303.421226][ T5831] Bluetooth: hci0: command tx timeout [ 303.430207][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.438726][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.448080][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.456008][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.483153][ T13] veth1_macvtap: left promiscuous mode [ 303.489713][ T13] veth0_macvtap: left promiscuous mode [ 303.495586][ T13] veth1_vlan: left promiscuous mode [ 303.500920][ T13] veth0_vlan: left promiscuous mode [ 304.080623][ T13] team0 (unregistering): Port device team_slave_1 removed [ 304.128329][ T13] team0 (unregistering): Port device team_slave_0 removed [ 304.157366][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1431'. [ 304.211639][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 304.580289][T10837] hsr_slave_0: entered promiscuous mode [ 304.586951][T10837] hsr_slave_1: entered promiscuous mode [ 304.599989][T10837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.607873][T10837] Cannot create hsr debugfs directory [ 304.616053][T10980] FAULT_INJECTION: forcing a failure. [ 304.616053][T10980] name failslab, interval 1, probability 0, space 0, times 0 [ 304.631278][T10980] CPU: 1 UID: 0 PID: 10980 Comm: syz.1.1429 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 304.631308][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.631321][T10980] Call Trace: [ 304.631330][T10980] [ 304.631339][T10980] dump_stack_lvl+0x189/0x250 [ 304.631376][T10980] ? __pfx____ratelimit+0x10/0x10 [ 304.631402][T10980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.631434][T10980] ? __pfx__printk+0x10/0x10 [ 304.631470][T10980] ? __pfx___might_resched+0x10/0x10 [ 304.631498][T10980] ? fs_reclaim_acquire+0x7d/0x100 [ 304.631526][T10980] should_fail_ex+0x414/0x560 [ 304.631557][T10980] should_failslab+0xa8/0x100 [ 304.631607][T10980] __kmalloc_cache_noprof+0x70/0x3d0 [ 304.631642][T10980] ? garp_init_applicant+0x13a/0x450 [ 304.631676][T10980] garp_init_applicant+0x13a/0x450 [ 304.631707][T10980] register_vlan_dev+0x225/0x800 [ 304.631762][T10980] vlan_newlink+0x4b2/0x610 [ 304.631789][T10980] ? __pfx_vlan_newlink+0x10/0x10 [ 304.631816][T10980] rtnl_newlink_create+0x310/0xb00 [ 304.631854][T10980] ? __mutex_lock+0x51b/0xe80 [ 304.631886][T10980] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 304.631916][T10980] ? rtnl_newlink+0x8db/0x1c70 [ 304.631947][T10980] ? __pfx___mutex_lock+0x10/0x10 [ 304.631985][T10980] ? ns_capable+0x8a/0xf0 [ 304.632020][T10980] rtnl_newlink+0x16d6/0x1c70 [ 304.632067][T10980] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.632094][T10980] ? is_bpf_text_address+0x26/0x2b0 [ 304.632131][T10980] ? __lock_acquire+0xab9/0xd20 [ 304.632172][T10980] ? __lock_acquire+0xab9/0xd20 [ 304.632222][T10980] ? is_bpf_text_address+0x26/0x2b0 [ 304.632256][T10980] ? is_bpf_text_address+0x292/0x2b0 [ 304.632302][T10980] ? is_bpf_text_address+0x26/0x2b0 [ 304.632335][T10980] ? kernel_text_address+0xa5/0xe0 [ 304.632376][T10980] ? __lock_acquire+0xab9/0xd20 [ 304.632434][T10980] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.632470][T10980] rtnetlink_rcv_msg+0x7cf/0xb70 [ 304.632504][T10980] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 304.632533][T10980] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.632584][T10980] netlink_rcv_skb+0x205/0x470 [ 304.632618][T10980] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.632650][T10980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.632698][T10980] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.632730][T10980] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.632768][T10980] netlink_unicast+0x758/0x8d0 [ 304.632811][T10980] netlink_sendmsg+0x805/0xb30 [ 304.632843][T10980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.632867][T10980] ? aa_sock_msg_perm+0x94/0x160 [ 304.632896][T10980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.632920][T10980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.632953][T10980] __sock_sendmsg+0x219/0x270 [ 304.632984][T10980] ____sys_sendmsg+0x505/0x830 [ 304.633011][T10980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.633042][T10980] ? import_iovec+0x74/0xa0 [ 304.633067][T10980] ___sys_sendmsg+0x21f/0x2a0 [ 304.633091][T10980] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.633155][T10980] ? __fget_files+0x2a/0x420 [ 304.633183][T10980] ? __fget_files+0x3a0/0x420 [ 304.633226][T10980] __x64_sys_sendmsg+0x19b/0x260 [ 304.633250][T10980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.633283][T10980] ? __pfx_ksys_write+0x10/0x10 [ 304.633306][T10980] ? rcu_is_watching+0x15/0xb0 [ 304.633341][T10980] ? do_syscall_64+0xbe/0x3b0 [ 304.633390][T10980] do_syscall_64+0xfa/0x3b0 [ 304.633415][T10980] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.633446][T10980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.633467][T10980] ? clear_bhb_loop+0x60/0xb0 [ 304.633506][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.633526][T10980] RIP: 0033:0x7f122138e929 [ 304.633544][T10980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.633562][T10980] RSP: 002b:00007f12221b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.633585][T10980] RAX: ffffffffffffffda RBX: 00007f12215b5fa0 RCX: 00007f122138e929 [ 304.633600][T10980] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 304.633613][T10980] RBP: 00007f12221b4090 R08: 0000000000000000 R09: 0000000000000000 [ 304.633626][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.633638][T10980] R13: 0000000000000000 R14: 00007f12215b5fa0 R15: 00007ffc429471a8 [ 304.633672][T10980] [ 304.651890][T10990] tc_dump_action: action bad kind [ 305.202247][T11000] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 305.499526][ T5831] Bluetooth: hci0: command tx timeout [ 305.834397][T11007] FAULT_INJECTION: forcing a failure. [ 305.834397][T11007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.883946][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.0.1437 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 305.883982][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.883996][T11007] Call Trace: [ 305.884004][T11007] [ 305.884014][T11007] dump_stack_lvl+0x189/0x250 [ 305.884053][T11007] ? __pfx____ratelimit+0x10/0x10 [ 305.884079][T11007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.884112][T11007] ? __pfx__printk+0x10/0x10 [ 305.884135][T11007] ? __might_fault+0xb0/0x130 [ 305.884179][T11007] should_fail_ex+0x414/0x560 [ 305.884211][T11007] _copy_from_iter+0x1db/0x16f0 [ 305.884248][T11007] ? rcu_is_watching+0x15/0xb0 [ 305.884280][T11007] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 305.884313][T11007] ? __pfx__copy_from_iter+0x10/0x10 [ 305.884347][T11007] ? __build_skb_around+0x257/0x3e0 [ 305.884383][T11007] ? netlink_sendmsg+0x642/0xb30 [ 305.884400][T11007] ? skb_put+0x11b/0x210 [ 305.884437][T11007] netlink_sendmsg+0x6b2/0xb30 [ 305.884468][T11007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.884491][T11007] ? aa_sock_msg_perm+0x94/0x160 [ 305.884521][T11007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.884547][T11007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.884575][T11007] __sock_sendmsg+0x219/0x270 [ 305.884605][T11007] ____sys_sendmsg+0x505/0x830 [ 305.884633][T11007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.884665][T11007] ? import_iovec+0x74/0xa0 [ 305.884697][T11007] ___sys_sendmsg+0x21f/0x2a0 [ 305.884727][T11007] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.884790][T11007] ? __fget_files+0x2a/0x420 [ 305.884820][T11007] ? __fget_files+0x3a0/0x420 [ 305.884864][T11007] __x64_sys_sendmsg+0x19b/0x260 [ 305.884889][T11007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.884922][T11007] ? __pfx_ksys_write+0x10/0x10 [ 305.884946][T11007] ? rcu_is_watching+0x15/0xb0 [ 305.884987][T11007] ? do_syscall_64+0xbe/0x3b0 [ 305.885025][T11007] do_syscall_64+0xfa/0x3b0 [ 305.885051][T11007] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.885076][T11007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.885096][T11007] ? clear_bhb_loop+0x60/0xb0 [ 305.885123][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.885143][T11007] RIP: 0033:0x7f3a94b8e929 [ 305.885162][T11007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.885181][T11007] RSP: 002b:00007f3a95970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.885203][T11007] RAX: ffffffffffffffda RBX: 00007f3a94db5fa0 RCX: 00007f3a94b8e929 [ 305.885219][T11007] RDX: 0000000000020024 RSI: 0000200000000300 RDI: 0000000000000004 [ 305.885232][T11007] RBP: 00007f3a95970090 R08: 0000000000000000 R09: 0000000000000000 [ 305.885245][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.885257][T11007] R13: 0000000000000000 R14: 00007f3a94db5fa0 R15: 00007ffeecf429a8 [ 305.885289][T11007] [ 306.331865][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 306.369295][T11015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1442'. [ 306.400072][T11019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1440'. [ 306.524157][T11028] xt_socket: unknown flags 0xfc [ 306.637018][T11019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.648202][T11019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.659238][T11019] bond0 (unregistering): Released all slaves [ 306.718018][T11030] vlan3: entered promiscuous mode [ 306.723547][T11030] bridge0: entered promiscuous mode [ 306.949781][T11039] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 307.120576][T10837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.174528][T10837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.217800][T10837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.246332][T10837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.450178][T11052] FAULT_INJECTION: forcing a failure. [ 307.450178][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 307.478158][T11052] CPU: 1 UID: 0 PID: 11052 Comm: syz.0.1450 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 307.478191][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.478205][T11052] Call Trace: [ 307.478214][T11052] [ 307.478223][T11052] dump_stack_lvl+0x189/0x250 [ 307.478262][T11052] ? __pfx____ratelimit+0x10/0x10 [ 307.478288][T11052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.478321][T11052] ? __pfx__printk+0x10/0x10 [ 307.478347][T11052] ? __pfx___might_resched+0x10/0x10 [ 307.478388][T11052] ? fs_reclaim_acquire+0x7d/0x100 [ 307.478415][T11052] should_fail_ex+0x414/0x560 [ 307.478449][T11052] should_failslab+0xa8/0x100 [ 307.478484][T11052] __kmalloc_noprof+0xcb/0x4f0 [ 307.478513][T11052] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 307.478548][T11052] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 307.478585][T11052] genl_family_rcv_msg_doit+0xb8/0x300 [ 307.478619][T11052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 307.478649][T11052] ? rcu_is_watching+0x15/0xb0 [ 307.478682][T11052] ? apparmor_capable+0x137/0x1b0 [ 307.478718][T11052] ? bpf_lsm_capable+0x9/0x20 [ 307.478750][T11052] ? security_capable+0x7e/0x2e0 [ 307.478784][T11052] genl_rcv_msg+0x60e/0x790 [ 307.478817][T11052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.478841][T11052] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 307.478862][T11052] ? __pfx_nl80211_authenticate+0x10/0x10 [ 307.478890][T11052] ? __pfx_nl80211_post_doit+0x10/0x10 [ 307.478931][T11052] netlink_rcv_skb+0x205/0x470 [ 307.478965][T11052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.479014][T11052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.479068][T11052] ? down_read+0x1ad/0x2e0 [ 307.479101][T11052] genl_rcv+0x28/0x40 [ 307.479124][T11052] netlink_unicast+0x758/0x8d0 [ 307.479167][T11052] netlink_sendmsg+0x805/0xb30 [ 307.479199][T11052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.479223][T11052] ? aa_sock_msg_perm+0x94/0x160 [ 307.479253][T11052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.479278][T11052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.479300][T11052] __sock_sendmsg+0x219/0x270 [ 307.479332][T11052] ____sys_sendmsg+0x505/0x830 [ 307.479360][T11052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.479399][T11052] ? import_iovec+0x74/0xa0 [ 307.479425][T11052] ___sys_sendmsg+0x21f/0x2a0 [ 307.479450][T11052] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.479515][T11052] ? __fget_files+0x2a/0x420 [ 307.479546][T11052] ? __fget_files+0x3a0/0x420 [ 307.479589][T11052] __x64_sys_sendmsg+0x19b/0x260 [ 307.479613][T11052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.479643][T11052] ? __pfx_ksys_write+0x10/0x10 [ 307.479666][T11052] ? rcu_is_watching+0x15/0xb0 [ 307.479701][T11052] ? do_syscall_64+0xbe/0x3b0 [ 307.479732][T11052] do_syscall_64+0xfa/0x3b0 [ 307.479757][T11052] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.479785][T11052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.479806][T11052] ? clear_bhb_loop+0x60/0xb0 [ 307.479832][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.479853][T11052] RIP: 0033:0x7f3a94b8e929 [ 307.479873][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.479891][T11052] RSP: 002b:00007f3a95970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.479914][T11052] RAX: ffffffffffffffda RBX: 00007f3a94db5fa0 RCX: 00007f3a94b8e929 [ 307.479930][T11052] RDX: 0000000000020024 RSI: 0000200000000300 RDI: 0000000000000004 [ 307.479944][T11052] RBP: 00007f3a95970090 R08: 0000000000000000 R09: 0000000000000000 [ 307.479957][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.479969][T11052] R13: 0000000000000000 R14: 00007f3a94db5fa0 R15: 00007ffeecf429a8 [ 307.480003][T11052] [ 307.914234][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 307.923287][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.945955][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.981273][T10837] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.993901][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.001239][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.026831][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.034074][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.050574][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1453'. [ 308.078022][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1453'. [ 308.127880][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1453'. [ 308.145915][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1453'. [ 308.349902][T11080] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 308.378009][T11080] vlan4: entered promiscuous mode [ 308.422274][T11080] team0: entered promiscuous mode [ 308.427474][T11080] C: entered promiscuous mode [ 308.439826][T11080] team_slave_1: entered promiscuous mode [ 308.511971][T11080] bond4: entered promiscuous mode [ 308.681834][T11089] FAULT_INJECTION: forcing a failure. [ 308.681834][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 308.701317][T11089] CPU: 0 UID: 0 PID: 11089 Comm: syz.1.1458 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 308.701349][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.701363][T11089] Call Trace: [ 308.701372][T11089] [ 308.701381][T11089] dump_stack_lvl+0x189/0x250 [ 308.701420][T11089] ? __pfx____ratelimit+0x10/0x10 [ 308.701446][T11089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.701479][T11089] ? __pfx__printk+0x10/0x10 [ 308.701506][T11089] ? __pfx___might_resched+0x10/0x10 [ 308.701537][T11089] ? fs_reclaim_acquire+0x7d/0x100 [ 308.701565][T11089] should_fail_ex+0x414/0x560 [ 308.701598][T11089] should_failslab+0xa8/0x100 [ 308.701632][T11089] __kmalloc_cache_noprof+0x70/0x3d0 [ 308.701662][T11089] ? alloc_netdev_mqs+0xc36/0x11e0 [ 308.701694][T11089] alloc_netdev_mqs+0xc36/0x11e0 [ 308.701728][T11089] rtnl_create_link+0x31f/0xd10 [ 308.701761][T11089] rtnl_newlink_create+0x25c/0xb00 [ 308.701800][T11089] ? __mutex_lock+0x51b/0xe80 [ 308.701835][T11089] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 308.701865][T11089] ? rtnl_newlink+0x8db/0x1c70 [ 308.701898][T11089] ? __pfx___mutex_lock+0x10/0x10 [ 308.701937][T11089] ? ns_capable+0x8a/0xf0 [ 308.701972][T11089] rtnl_newlink+0x16d6/0x1c70 [ 308.702021][T11089] ? __pfx_rtnl_newlink+0x10/0x10 [ 308.702049][T11089] ? is_bpf_text_address+0x26/0x2b0 [ 308.702087][T11089] ? __lock_acquire+0xab9/0xd20 [ 308.702129][T11089] ? __lock_acquire+0xab9/0xd20 [ 308.702181][T11089] ? is_bpf_text_address+0x26/0x2b0 [ 308.702216][T11089] ? is_bpf_text_address+0x292/0x2b0 [ 308.702244][T11089] ? is_bpf_text_address+0x26/0x2b0 [ 308.702284][T11089] ? kernel_text_address+0xa5/0xe0 [ 308.702325][T11089] ? __lock_acquire+0xab9/0xd20 [ 308.702386][T11089] ? __pfx_rtnl_newlink+0x10/0x10 [ 308.702415][T11089] rtnetlink_rcv_msg+0x7cf/0xb70 [ 308.702450][T11089] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 308.702479][T11089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.702529][T11089] netlink_rcv_skb+0x205/0x470 [ 308.702563][T11089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.702595][T11089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.702644][T11089] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.702676][T11089] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.702716][T11089] netlink_unicast+0x758/0x8d0 [ 308.702759][T11089] netlink_sendmsg+0x805/0xb30 [ 308.702791][T11089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.702815][T11089] ? aa_sock_msg_perm+0x94/0x160 [ 308.702843][T11089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.702868][T11089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.702889][T11089] __sock_sendmsg+0x219/0x270 [ 308.702920][T11089] ____sys_sendmsg+0x505/0x830 [ 308.702948][T11089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.702981][T11089] ? import_iovec+0x74/0xa0 [ 308.703007][T11089] ___sys_sendmsg+0x21f/0x2a0 [ 308.703032][T11089] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.703098][T11089] ? __fget_files+0x2a/0x420 [ 308.703127][T11089] ? __fget_files+0x3a0/0x420 [ 308.703172][T11089] __x64_sys_sendmsg+0x19b/0x260 [ 308.703197][T11089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.703235][T11089] ? rcu_is_watching+0x15/0xb0 [ 308.703272][T11089] ? trace_sys_enter+0x25/0x120 [ 308.703306][T11089] do_syscall_64+0xfa/0x3b0 [ 308.703332][T11089] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.703357][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.703378][T11089] ? clear_bhb_loop+0x60/0xb0 [ 308.703404][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.703424][T11089] RIP: 0033:0x7f122138e929 [ 308.703443][T11089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.703462][T11089] RSP: 002b:00007f12221b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.703485][T11089] RAX: ffffffffffffffda RBX: 00007f12215b5fa0 RCX: 00007f122138e929 [ 308.703501][T11089] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 308.703514][T11089] RBP: 00007f12221b4090 R08: 0000000000000000 R09: 0000000000000000 [ 308.703527][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.703539][T11089] R13: 0000000000000000 R14: 00007f12215b5fa0 R15: 00007ffc429471a8 [ 308.703574][T11089] [ 309.421837][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 309.457670][T11100] netlink: 'syz.2.1460': attribute type 39 has an invalid length. [ 309.638383][T10837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.756955][T11115] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1464'. [ 309.781701][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 309.920271][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1466'. [ 309.986305][T11119] vlan3: entered promiscuous mode [ 310.002469][T11119] !: entered promiscuous mode [ 310.633980][T10837] veth0_vlan: entered promiscuous mode [ 310.660588][T10837] veth1_vlan: entered promiscuous mode [ 310.733454][T10837] veth0_macvtap: entered promiscuous mode [ 310.748670][T10837] veth1_macvtap: entered promiscuous mode [ 310.783519][T10837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.854756][T10837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.902113][T10837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.926481][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 310.938935][T10837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.950538][T10837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.964459][T10837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.987265][T11165] netlink: 'syz.2.1478': attribute type 16 has an invalid length. [ 310.995616][T11165] netlink: 'syz.2.1478': attribute type 17 has an invalid length. [ 311.105001][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.122420][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.216499][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.250523][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.556868][T11178] bridge0: port 1(syz_tun) entered blocking state [ 311.578262][T11178] bridge0: port 1(syz_tun) entered disabled state [ 311.592691][T11178] syz_tun: entered allmulticast mode [ 311.607873][T11178] syz_tun: entered promiscuous mode [ 311.818921][ T6047] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.867254][T11192] FAULT_INJECTION: forcing a failure. [ 311.867254][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 311.931511][T11192] CPU: 0 UID: 0 PID: 11192 Comm: syz.1.1487 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 311.931544][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.931558][T11192] Call Trace: [ 311.931566][T11192] [ 311.931575][T11192] dump_stack_lvl+0x189/0x250 [ 311.931614][T11192] ? __pfx____ratelimit+0x10/0x10 [ 311.931641][T11192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.931673][T11192] ? __pfx__printk+0x10/0x10 [ 311.931704][T11192] ? __pfx___might_resched+0x10/0x10 [ 311.931743][T11192] ? fs_reclaim_acquire+0x7d/0x100 [ 311.931771][T11192] should_fail_ex+0x414/0x560 [ 311.931805][T11192] should_failslab+0xa8/0x100 [ 311.931838][T11192] __kmalloc_cache_noprof+0x70/0x3d0 [ 311.931868][T11192] ? vlan_vid_add+0x145/0x760 [ 311.931905][T11192] vlan_vid_add+0x145/0x760 [ 311.931934][T11192] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 311.931971][T11192] register_vlan_dev+0x9e/0x800 [ 311.932005][T11192] ? vlan_changelink+0x4ac/0x560 [ 311.932029][T11192] ? vlan_check_real_dev+0x148/0x380 [ 311.932066][T11192] vlan_newlink+0x4b2/0x610 [ 311.932093][T11192] ? __pfx_vlan_newlink+0x10/0x10 [ 311.932121][T11192] rtnl_newlink_create+0x310/0xb00 [ 311.932161][T11192] ? __mutex_lock+0x51b/0xe80 [ 311.932194][T11192] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.932225][T11192] ? rtnl_newlink+0x8db/0x1c70 [ 311.932258][T11192] ? __pfx___mutex_lock+0x10/0x10 [ 311.932297][T11192] ? ns_capable+0x8a/0xf0 [ 311.932332][T11192] rtnl_newlink+0x16d6/0x1c70 [ 311.932382][T11192] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.932422][T11192] ? __lock_acquire+0xab9/0xd20 [ 311.932464][T11192] ? __lock_acquire+0xab9/0xd20 [ 311.932516][T11192] ? is_bpf_text_address+0x26/0x2b0 [ 311.932551][T11192] ? is_bpf_text_address+0x292/0x2b0 [ 311.932579][T11192] ? is_bpf_text_address+0x26/0x2b0 [ 311.932612][T11192] ? kernel_text_address+0xa5/0xe0 [ 311.932654][T11192] ? __lock_acquire+0xab9/0xd20 [ 311.932711][T11192] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.932747][T11192] rtnetlink_rcv_msg+0x7cf/0xb70 [ 311.932782][T11192] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 311.932811][T11192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.932862][T11192] netlink_rcv_skb+0x205/0x470 [ 311.932896][T11192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.932928][T11192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.932977][T11192] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.933009][T11192] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.933049][T11192] netlink_unicast+0x758/0x8d0 [ 311.933092][T11192] netlink_sendmsg+0x805/0xb30 [ 311.933123][T11192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.933147][T11192] ? aa_sock_msg_perm+0x94/0x160 [ 311.933177][T11192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.933201][T11192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.933222][T11192] __sock_sendmsg+0x219/0x270 [ 311.933254][T11192] ____sys_sendmsg+0x505/0x830 [ 311.933282][T11192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.933315][T11192] ? import_iovec+0x74/0xa0 [ 311.933340][T11192] ___sys_sendmsg+0x21f/0x2a0 [ 311.933365][T11192] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.933430][T11192] ? __fget_files+0x2a/0x420 [ 311.933460][T11192] ? __fget_files+0x3a0/0x420 [ 311.933505][T11192] __x64_sys_sendmsg+0x19b/0x260 [ 311.933530][T11192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.933564][T11192] ? __pfx_ksys_write+0x10/0x10 [ 311.933589][T11192] ? rcu_is_watching+0x15/0xb0 [ 311.933626][T11192] ? do_syscall_64+0xbe/0x3b0 [ 311.933657][T11192] do_syscall_64+0xfa/0x3b0 [ 311.933683][T11192] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.933708][T11192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.933741][T11192] ? clear_bhb_loop+0x60/0xb0 [ 311.933768][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.933789][T11192] RIP: 0033:0x7f122138e929 [ 311.933809][T11192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.933827][T11192] RSP: 002b:00007f12221b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.933850][T11192] RAX: ffffffffffffffda RBX: 00007f12215b5fa0 RCX: 00007f122138e929 [ 311.933866][T11192] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 311.933880][T11192] RBP: 00007f12221b4090 R08: 0000000000000000 R09: 0000000000000000 [ 311.933893][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.933906][T11192] R13: 0000000000000000 R14: 00007f12215b5fa0 R15: 00007ffc429471a8 [ 311.933941][T11192] [ 312.440469][ T6047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.551761][ T6047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.955828][T11198] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1490'. [ 312.994044][T11198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.017375][T11203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1492'. [ 313.063834][T11202] x_tables: duplicate underflow at hook 3 [ 313.105164][ T6047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.377512][T11219] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.1496'. [ 313.421676][T11219] openvswitch: netlink: Message has 5 unknown bytes. [ 313.497305][ T6047] bridge_slave_1: left allmulticast mode [ 313.504119][ T6047] bridge_slave_1: left promiscuous mode [ 313.520295][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.558159][ T6047] bridge_slave_0: left allmulticast mode [ 313.576585][ T6047] bridge_slave_0: left promiscuous mode [ 313.594837][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.710205][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.721733][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.730743][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.740130][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.751053][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.541395][ T6047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.555328][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.567694][ T6047] bond0 (unregistering): Released all slaves [ 315.333078][ T6047] hsr_slave_0: left promiscuous mode [ 315.367933][ T6047] hsr_slave_1: left promiscuous mode [ 315.376643][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.387714][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.407970][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.417608][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.456612][ T6047] veth1_macvtap: left promiscuous mode [ 315.462322][ T6047] veth0_macvtap: left promiscuous mode [ 315.467984][ T6047] veth1_vlan: left promiscuous mode [ 315.473405][ T6047] veth0_vlan: left promiscuous mode [ 315.801301][ T5831] Bluetooth: hci0: command tx timeout [ 315.995498][ T6047] team0 (unregistering): Port device team_slave_1 removed [ 316.048366][ T6047] team0 (unregistering): Port device team_slave_0 removed [ 316.530953][T11295] FAULT_INJECTION: forcing a failure. [ 316.530953][T11295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.558968][T11295] CPU: 0 UID: 0 PID: 11295 Comm: syz.2.1517 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 316.559000][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.559014][T11295] Call Trace: [ 316.559022][T11295] [ 316.559031][T11295] dump_stack_lvl+0x189/0x250 [ 316.559069][T11295] ? __pfx____ratelimit+0x10/0x10 [ 316.559096][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.559128][T11295] ? __pfx__printk+0x10/0x10 [ 316.559162][T11295] should_fail_ex+0x414/0x560 [ 316.559195][T11295] _copy_to_user+0x31/0xb0 [ 316.559218][T11295] simple_read_from_buffer+0xe1/0x170 [ 316.559254][T11295] proc_fail_nth_read+0x1df/0x250 [ 316.559278][T11295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.559303][T11295] ? rw_verify_area+0x258/0x650 [ 316.559329][T11295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.559352][T11295] vfs_read+0x200/0x980 [ 316.559393][T11295] ? __pfx___mutex_lock+0x10/0x10 [ 316.559422][T11295] ? __pfx_vfs_read+0x10/0x10 [ 316.559451][T11295] ? __fget_files+0x2a/0x420 [ 316.559489][T11295] ? __fget_files+0x3a0/0x420 [ 316.559519][T11295] ? __fget_files+0x2a/0x420 [ 316.559560][T11295] ksys_read+0x145/0x250 [ 316.559592][T11295] ? __pfx_ksys_read+0x10/0x10 [ 316.559618][T11295] ? rcu_is_watching+0x15/0xb0 [ 316.559655][T11295] ? do_syscall_64+0xbe/0x3b0 [ 316.559687][T11295] do_syscall_64+0xfa/0x3b0 [ 316.559713][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.559737][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.559758][T11295] ? clear_bhb_loop+0x60/0xb0 [ 316.559785][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.559805][T11295] RIP: 0033:0x7fc05bf8d33c [ 316.559823][T11295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.559841][T11295] RSP: 002b:00007fc05ce1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.559863][T11295] RAX: ffffffffffffffda RBX: 00007fc05c1b5fa0 RCX: 00007fc05bf8d33c [ 316.559878][T11295] RDX: 000000000000000f RSI: 00007fc05ce1f0a0 RDI: 0000000000000008 [ 316.559892][T11295] RBP: 00007fc05ce1f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.559905][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.559918][T11295] R13: 0000000000000000 R14: 00007fc05c1b5fa0 R15: 00007ffdc258dc18 [ 316.559953][T11295] [ 316.855987][T11299] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 316.860896][T11302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1518'. [ 316.992683][T11233] chnl_net:caif_netlink_parms(): no params data found [ 317.517875][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.535559][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.544732][T11233] bridge_slave_0: entered allmulticast mode [ 317.565974][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 317.567577][T11233] bridge_slave_0: entered promiscuous mode [ 317.608348][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.616709][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.624310][T11233] bridge_slave_1: entered allmulticast mode [ 317.638845][T11233] bridge_slave_1: entered promiscuous mode [ 317.704930][T11334] 8021q: VLANs not supported on ipvlan1 [ 317.745793][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.759896][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.788102][T11331] syz.0.1526 (11331) used greatest stack depth: 17992 bytes left [ 317.887654][ T5831] Bluetooth: hci0: command tx timeout [ 317.976466][T11233] team0: Port device team_slave_0 added [ 318.013117][T11233] team0: Port device team_slave_1 added [ 318.144824][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.180892][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.216650][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.238520][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 318.252088][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.271434][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.301189][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 318.314793][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.329331][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1529'. [ 318.373747][T11349] geneve0: entered allmulticast mode [ 318.391804][T11354] xt_bpf: check failed: parse error [ 318.495873][T11233] hsr_slave_0: entered promiscuous mode [ 318.507044][T11233] hsr_slave_1: entered promiscuous mode [ 318.516305][T11233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.528306][T11233] Cannot create hsr debugfs directory [ 318.600569][T11359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1534'. [ 318.799906][T11370] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 318.831668][T11370] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1535'. [ 318.869263][T11355] Cannot find add_set index 0 as target [ 319.587771][T11382] netlink: 'syz.0.1539': attribute type 39 has an invalid length. [ 319.690506][T11233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.734584][T11233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.768169][T11233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.788872][T11233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.962871][ T5831] Bluetooth: hci0: command tx timeout [ 320.026384][T11233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.064834][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.087105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.094342][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.161908][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.169218][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.594956][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.667322][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 320.705122][T11417] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 320.731689][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.732910][T11418] netlink: 'syz.0.1547': attribute type 10 has an invalid length. [ 321.145192][T11436] vlan2: entered promiscuous mode [ 321.285464][T11442] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.335959][T11233] veth0_vlan: entered promiscuous mode [ 321.389957][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1556'. [ 321.403614][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 321.426329][T11233] veth1_vlan: entered promiscuous mode [ 321.546125][T11233] veth0_macvtap: entered promiscuous mode [ 321.585377][T11451] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 321.639625][T11233] veth1_macvtap: entered promiscuous mode [ 321.708219][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.749794][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.789249][T11233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.821210][T11233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.836745][T11233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.871666][T11233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.922593][T11472] vlan4: entered promiscuous mode [ 322.032157][T11479] syz.3.1564: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.047550][ T5844] Bluetooth: hci0: command tx timeout [ 322.075385][T11479] CPU: 0 UID: 0 PID: 11479 Comm: syz.3.1564 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 322.075418][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.075433][T11479] Call Trace: [ 322.075441][T11479] [ 322.075450][T11479] dump_stack_lvl+0x189/0x250 [ 322.075493][T11479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.075527][T11479] ? __pfx__printk+0x10/0x10 [ 322.075550][T11479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.075585][T11479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.075622][T11479] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 322.075660][T11479] warn_alloc+0x214/0x310 [ 322.075681][T11479] ? stack_depot_save_flags+0x40/0x900 [ 322.075713][T11479] ? __pfx_warn_alloc+0x10/0x10 [ 322.075736][T11479] ? kasan_save_track+0x4f/0x80 [ 322.075763][T11479] ? xskq_create+0x56/0x170 [ 322.075786][T11479] ? xsk_init_queue+0xb0/0x110 [ 322.075806][T11479] ? xsk_setsockopt+0x43f/0x710 [ 322.075826][T11479] ? do_sock_setsockopt+0x25a/0x3e0 [ 322.075857][T11479] ? __x64_sys_setsockopt+0x18b/0x220 [ 322.075889][T11479] ? do_syscall_64+0xfa/0x3b0 [ 322.075913][T11479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.075943][T11479] __vmalloc_node_range_noprof+0x125/0x1340 [ 322.076054][T11479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.076096][T11479] ? __kasan_kmalloc+0x93/0xb0 [ 322.076129][T11479] vmalloc_user_noprof+0xad/0xf0 [ 322.076150][T11479] ? xskq_create+0xbf/0x170 [ 322.076175][T11479] xskq_create+0xbf/0x170 [ 322.076209][T11479] xsk_init_queue+0xb0/0x110 [ 322.076235][T11479] xsk_setsockopt+0x43f/0x710 [ 322.076261][T11479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.076282][T11479] ? __lock_acquire+0xab9/0xd20 [ 322.076320][T11479] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 322.076344][T11479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.076369][T11479] do_sock_setsockopt+0x25a/0x3e0 [ 322.076405][T11479] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 322.076443][T11479] ? __fget_files+0x2a/0x420 [ 322.076484][T11479] __x64_sys_setsockopt+0x18b/0x220 [ 322.076524][T11479] do_syscall_64+0xfa/0x3b0 [ 322.076550][T11479] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.076575][T11479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.076596][T11479] ? clear_bhb_loop+0x60/0xb0 [ 322.076639][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.076661][T11479] RIP: 0033:0x7fc8e418e929 [ 322.076681][T11479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.076700][T11479] RSP: 002b:00007fc8e4f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.076723][T11479] RAX: ffffffffffffffda RBX: 00007fc8e43b6080 RCX: 00007fc8e418e929 [ 322.076738][T11479] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 322.076752][T11479] RBP: 00007fc8e4210b39 R08: 0000000000000004 R09: 0000000000000000 [ 322.076767][T11479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.076781][T11479] R13: 0000000000000000 R14: 00007fc8e43b6080 R15: 00007ffc337d6638 [ 322.076816][T11479] [ 322.079512][T11479] Mem-Info: [ 322.087465][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.120599][T11479] active_anon:6536 inactive_anon:0 isolated_anon:0 [ 322.120599][T11479] active_file:1685 inactive_file:39926 isolated_file:0 [ 322.120599][T11479] unevictable:768 dirty:210 writeback:0 [ 322.120599][T11479] slab_reclaimable:11665 slab_unreclaimable:118027 [ 322.120599][T11479] mapped:30224 shmem:1361 pagetables:638 [ 322.120599][T11479] sec_pagetables:0 bounce:0 [ 322.120599][T11479] kernel_misc_reclaimable:0 [ 322.120599][T11479] free:1301141 free_pcp:821 free_cma:0 [ 322.150733][T11479] Node 0 active_anon:26144kB inactive_anon:0kB active_file:6740kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120896kB dirty:836kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12264kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.161185][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.169723][T11479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.306741][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.446621][T11479] Node 0 [ 322.483234][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.547759][T11479] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.591313][T11479] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 322.611012][T11479] Node 0 DMA32 free:1271152kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:26196kB inactive_anon:0kB active_file:6740kB inactive_file:157676kB unevictable:1536kB writepending:836kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:3240kB local_pcp:2444kB free_cma:0kB [ 322.654389][T11485] 8021q: VLANs not supported on vcan0 [ 322.672173][T11479] lowmem_reserve[]: 0 0 1 1 1 [ 322.675340][T11478] Bluetooth: MGMT ver 1.23 [ 322.704272][T11486] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1567'. [ 322.737367][T11482] ================================================================== [ 322.745496][T11482] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 [ 322.751365][T11479] Node 0 [ 322.753785][T11482] Read of size 8 at addr ffff888050ff4858 by task syz.3.1564/11482 [ 322.753811][T11482] [ 322.756755][T11479] Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 322.764649][T11482] CPU: 0 UID: 0 PID: 11482 Comm: syz.3.1564 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 322.764678][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.764692][T11482] Call Trace: [ 322.764702][T11482] [ 322.764712][T11482] dump_stack_lvl+0x189/0x250 [ 322.764747][T11482] ? __virt_addr_valid+0x1c8/0x5c0 [ 322.764767][T11482] ? rcu_is_watching+0x15/0xb0 [ 322.764805][T11482] ? __kasan_check_byte+0x12/0x40 [ 322.764842][T11482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.764881][T11482] ? rcu_is_watching+0x15/0xb0 [ 322.764916][T11482] ? lock_release+0x4b/0x3e0 [ 322.764953][T11482] ? __virt_addr_valid+0x1c8/0x5c0 [ 322.764976][T11482] ? __virt_addr_valid+0x4a5/0x5c0 [ 322.765001][T11482] print_report+0xd2/0x2b0 [ 322.765033][T11482] ? skb_queue_purge_reason+0x99/0x360 [ 322.765067][T11482] kasan_report+0x118/0x150 [ 322.765104][T11482] ? skb_queue_purge_reason+0x99/0x360 [ 322.765142][T11482] skb_queue_purge_reason+0x99/0x360 [ 322.765179][T11482] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 322.765214][T11482] ? __pfx___mutex_lock+0x10/0x10 [ 322.765246][T11482] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.765283][T11482] ? drain_workqueue+0x2cb/0x390 [ 322.765309][T11482] ? __pfx_vhci_flush+0x10/0x10 [ 322.765340][T11482] vhci_flush+0x44/0x50 [ 322.765369][T11482] hci_dev_reset+0x41d/0x5c0 [ 322.765400][T11482] sock_do_ioctl+0xd9/0x300 [ 322.765430][T11482] ? __pfx_sock_do_ioctl+0x10/0x10 [ 322.765458][T11482] ? __lock_acquire+0xab9/0xd20 [ 322.765499][T11482] sock_ioctl+0x576/0x790 [ 322.765529][T11482] ? __pfx_sock_ioctl+0x10/0x10 [ 322.765559][T11482] ? __fget_files+0x2a/0x420 [ 322.765595][T11482] ? __fget_files+0x3a0/0x420 [ 322.765631][T11482] ? __fget_files+0x2a/0x420 [ 322.765669][T11482] ? bpf_lsm_file_ioctl+0x9/0x20 [ 322.765703][T11482] ? __pfx_sock_ioctl+0x10/0x10 [ 322.765731][T11482] __se_sys_ioctl+0xf9/0x170 [ 322.765763][T11482] do_syscall_64+0xfa/0x3b0 [ 322.765803][T11482] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.765832][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.765858][T11482] ? clear_bhb_loop+0x60/0xb0 [ 322.765886][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.765912][T11482] RIP: 0033:0x7fc8e418e929 [ 322.765933][T11482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.765957][T11482] RSP: 002b:00007fc8e4f10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.765983][T11482] RAX: ffffffffffffffda RBX: 00007fc8e43b6160 RCX: 00007fc8e418e929 [ 322.766003][T11482] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000c [ 322.766019][T11482] RBP: 00007fc8e4210b39 R08: 0000000000000000 R09: 0000000000000000 [ 322.766034][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.766051][T11482] R13: 0000000000000000 R14: 00007fc8e43b6160 R15: 00007ffc337d6638 [ 322.766080][T11482] [ 322.766089][T11482] [ 323.082650][T11482] Allocated by task 11233: [ 323.087084][T11482] kasan_save_track+0x3e/0x80 [ 323.091814][T11482] __kasan_kmalloc+0x93/0xb0 [ 323.096439][T11482] __kmalloc_cache_noprof+0x230/0x3d0 [ 323.101835][T11482] vhci_open+0x57/0x360 [ 323.106023][T11482] misc_open+0x2b9/0x330 [ 323.110287][T11482] chrdev_open+0x4c9/0x5e0 [ 323.114724][T11482] do_dentry_open+0xdf0/0x1970 [ 323.119500][T11482] vfs_open+0x3b/0x340 [ 323.123587][T11482] path_openat+0x2ee5/0x3830 [ 323.128379][T11482] do_filp_open+0x1fa/0x410 [ 323.132899][T11482] do_sys_openat2+0x121/0x1c0 [ 323.137693][T11482] __x64_sys_openat+0x138/0x170 [ 323.142570][T11482] do_syscall_64+0xfa/0x3b0 [ 323.147094][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.153086][T11482] [ 323.155422][T11482] Freed by task 11233: [ 323.159501][T11482] kasan_save_track+0x3e/0x80 [ 323.164198][T11482] kasan_save_free_info+0x46/0x50 [ 323.169252][T11482] __kasan_slab_free+0x62/0x70 [ 323.174037][T11482] kfree+0x18e/0x440 [ 323.177950][T11482] vhci_release+0xbc/0xd0 [ 323.182301][T11482] __fput+0x44c/0xa70 [ 323.186292][T11482] task_work_run+0x1d1/0x260 [ 323.190894][T11482] do_exit+0x8d1/0x2550 [ 323.195076][T11482] do_group_exit+0x21c/0x2d0 [ 323.199696][T11482] __x64_sys_exit_group+0x3f/0x40 [ 323.204750][T11482] x64_sys_call+0x21ba/0x21c0 [ 323.209445][T11482] do_syscall_64+0xfa/0x3b0 [ 323.213969][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.219876][T11482] [ 323.222214][T11482] The buggy address belongs to the object at ffff888050ff4800 [ 323.222214][T11482] which belongs to the cache kmalloc-1k of size 1024 [ 323.236278][T11482] The buggy address is located 88 bytes inside of [ 323.236278][T11482] freed 1024-byte region [ffff888050ff4800, ffff888050ff4c00) [ 323.250090][T11482] [ 323.252424][T11482] The buggy address belongs to the physical page: [ 323.258857][T11482] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50ff0 [ 323.267637][T11482] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.276145][T11482] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.283710][T11482] page_type: f5(slab) [ 323.287720][T11482] raw: 00fff00000000040 ffff88801a441dc0 dead000000000100 dead000000000122 [ 323.296425][T11482] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 323.305031][T11482] head: 00fff00000000040 ffff88801a441dc0 dead000000000100 dead000000000122 [ 323.313730][T11482] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 323.322509][T11482] head: 00fff00000000003 ffffea000143fc01 00000000ffffffff 00000000ffffffff [ 323.331213][T11482] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 323.339891][T11482] page dumped because: kasan: bad access detected [ 323.346327][T11482] page_owner tracks the page as allocated [ 323.352081][T11482] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 139393200595, free_ts 120440732939 [ 323.371204][T11482] post_alloc_hook+0x240/0x2a0 [ 323.375990][T11482] get_page_from_freelist+0x21e0/0x22c0 [ 323.381560][T11482] __alloc_frozen_pages_noprof+0x181/0x370 [ 323.387379][T11482] alloc_pages_mpol+0x232/0x4a0 [ 323.392252][T11482] allocate_slab+0x8a/0x3b0 [ 323.396767][T11482] ___slab_alloc+0xbfc/0x1480 [ 323.401452][T11482] __kmalloc_noprof+0x305/0x4f0 [ 323.406319][T11482] ieee802_11_parse_elems_full+0x152/0x2b20 [ 323.412238][T11482] ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0 [ 323.418327][T11482] ieee80211_iface_work+0x806/0xfe0 [ 323.423560][T11482] cfg80211_wiphy_work+0x2dc/0x460 [ 323.428700][T11482] process_scheduled_works+0xae1/0x17b0 [ 323.434261][T11482] worker_thread+0x8a0/0xda0 [ 323.438885][T11482] kthread+0x70e/0x8a0 [ 323.442967][T11482] ret_from_fork+0x3fc/0x770 [ 323.447594][T11482] ret_from_fork_asm+0x1a/0x30 [ 323.452389][T11482] page last free pid 6343 tgid 6343 stack trace: [ 323.458717][T11482] __free_frozen_pages+0xc6e/0xe50 [ 323.463837][T11482] kasan_depopulate_vmalloc_pte+0x74/0xa0 [ 323.469571][T11482] __apply_to_page_range+0xb8f/0x1380 [ 323.474959][T11482] kasan_release_vmalloc+0xa2/0xd0 [ 323.480084][T11482] purge_vmap_node+0x214/0x8f0 [ 323.484857][T11482] process_scheduled_works+0xae1/0x17b0 [ 323.490432][T11482] worker_thread+0x8a0/0xda0 [ 323.495060][T11482] kthread+0x70e/0x8a0 [ 323.499153][T11482] ret_from_fork+0x3fc/0x770 [ 323.503763][T11482] ret_from_fork_asm+0x1a/0x30 [ 323.508548][T11482] [ 323.510878][T11482] Memory state around the buggy address: [ 323.516521][T11482] ffff888050ff4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.524593][T11482] ffff888050ff4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.532662][T11482] >ffff888050ff4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.540746][T11482] ^ [ 323.547686][T11482] ffff888050ff4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.555768][T11482] ffff888050ff4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.563925][T11482] ================================================================== [ 323.602334][T11479] lowmem_reserve[]: 0 0 0 0 0 [ 323.629993][T11479] Node 1 Normal free:3916476kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.657097][T11482] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.657125][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.3.1564 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 323.657160][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.657177][T11482] Call Trace: [ 323.657187][T11482] [ 323.657198][T11482] dump_stack_lvl+0x99/0x250 [ 323.657245][T11482] ? __asan_memcpy+0x40/0x70 [ 323.657275][T11482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.657316][T11482] ? __pfx__printk+0x10/0x10 [ 323.657352][T11482] panic+0x2db/0x790 [ 323.657392][T11482] ? __pfx_panic+0x10/0x10 [ 323.657434][T11482] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 323.657464][T11482] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.657505][T11482] ? print_memory_metadata+0x314/0x400 [ 323.657541][T11482] ? skb_queue_purge_reason+0x99/0x360 [ 323.657577][T11482] check_panic_on_warn+0x89/0xb0 [ 323.657608][T11482] ? skb_queue_purge_reason+0x99/0x360 [ 323.657648][T11482] end_report+0x78/0x160 [ 323.657684][T11482] kasan_report+0x129/0x150 [ 323.657721][T11482] ? skb_queue_purge_reason+0x99/0x360 [ 323.657762][T11482] skb_queue_purge_reason+0x99/0x360 [ 323.657799][T11482] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 323.657834][T11482] ? __pfx___mutex_lock+0x10/0x10 [ 323.657866][T11482] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.657904][T11482] ? drain_workqueue+0x2cb/0x390 [ 323.657932][T11482] ? __pfx_vhci_flush+0x10/0x10 [ 323.657971][T11482] vhci_flush+0x44/0x50 [ 323.658003][T11482] hci_dev_reset+0x41d/0x5c0 [ 323.658032][T11482] sock_do_ioctl+0xd9/0x300 [ 323.658065][T11482] ? __pfx_sock_do_ioctl+0x10/0x10 [ 323.658094][T11482] ? __lock_acquire+0xab9/0xd20 [ 323.658138][T11482] sock_ioctl+0x576/0x790 [ 323.658168][T11482] ? __pfx_sock_ioctl+0x10/0x10 [ 323.658198][T11482] ? __fget_files+0x2a/0x420 [ 323.658237][T11482] ? __fget_files+0x3a0/0x420 [ 323.658273][T11482] ? __fget_files+0x2a/0x420 [ 323.658313][T11482] ? bpf_lsm_file_ioctl+0x9/0x20 [ 323.658348][T11482] ? __pfx_sock_ioctl+0x10/0x10 [ 323.658378][T11482] __se_sys_ioctl+0xf9/0x170 [ 323.658410][T11482] do_syscall_64+0xfa/0x3b0 [ 323.658442][T11482] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.658472][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.658497][T11482] ? clear_bhb_loop+0x60/0xb0 [ 323.658526][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.658551][T11482] RIP: 0033:0x7fc8e418e929 [ 323.658573][T11482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.658596][T11482] RSP: 002b:00007fc8e4f10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.658624][T11482] RAX: ffffffffffffffda RBX: 00007fc8e43b6160 RCX: 00007fc8e418e929 [ 323.658653][T11482] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000c [ 323.658670][T11482] RBP: 00007fc8e4210b39 R08: 0000000000000000 R09: 0000000000000000 [ 323.658687][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.658702][T11482] R13: 0000000000000000 R14: 00007fc8e43b6160 R15: 00007ffc337d6638 [ 323.658732][T11482] [ 323.659129][T11482] Kernel Offset: disabled