last executing test programs: 4.176605242s ago: executing program 3 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003480)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x1a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008000100ac"], 0x2c}}, 0x8800) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x3, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r9}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000480)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010010008500000082000000"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.057928937s ago: executing program 1 (id=3331): r0 = socket(0x5, 0x5, 0x6000000) setsockopt(r0, 0x80, 0x7, &(0x7f0000000000)="e565e71c9b5263ebeda950cc71c9e958db739ea9e6ce32edcd34485b377b0b9f98508686f47aeee786d0ef823cfe1e92abd12fcd227049a9fa33f6ed68204e3edb78437dab43f25a6c81e7bafbadf25d4d73cb4ea7bb472835994db7e341c09a3af9fdf2f998a9ef97b3fbc315e5e3ed1bf2afcc1713e08b54f85894ec3ff9529eca58cf484e7d", 0x87) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xb76}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r1, 0x100}, &(0x7f0000000180)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0x0, 0x9}, {0xd, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)={0x5, [0xfc01, 0x7, 0x101, 0x9, 0x4]}, &(0x7f0000000340)=0xe) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000380)=""/226, &(0x7f0000000480)=0xe2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x9, 0x65, &(0x7f00000005c0)=""/101, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x0, 0x8, 0xfffffbff}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x1, 0x1, 0x5}, {0x3, 0x2, 0xc, 0xb}, {0x5, 0x2, 0x3}, {0x5, 0x1, 0x7, 0x4}, {0x3, 0x5, 0x3, 0x3}, {0x5, 0x4, 0x7, 0x1}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r4, 0x4) r5 = accept(0xffffffffffffffff, &(0x7f0000000880)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000900)=0x80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000940)={0x7f}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, r5, 0x0, 0xa, &(0x7f0000000980)='syzkaller\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r6}, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000a40)={r2, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0xfffe, 0x5dc4}, 0x90) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1200400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xf8, 0x464, 0x800, 0x70bd25, 0x25dfdbfd, "097e6a0cd3edaea5ff2abc38bd7a97c43531186214122c05a083fd0236567b4025a12bfb168c1a9f504d54de13649cdd3c771ebe411ad97ed285997d4dbae6899d4758c28137173b3c8837c3090274429a4c3766c29643c7d62ca1f501b4d54a89288c6322a04e656e8d58f6b733103fd2601e9f5844e6065fa4d533ede6dc5448fad377e9c937a7dc26de2268b7359228bfc571c70aa2cfdf03bd702123c1c51b9f760f9899f45440eb5f1d31aff7f2174a3c4a27c11c8dac02cacac01e13e6edfb6faee570fc977973130ab0ffae80bae6b333e1e668443f3db5f90549cee1aabd8fff46230f", ["", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x8010}, 0x4) recvmmsg$unix(r0, &(0x7f0000005d00)=[{{&(0x7f0000000cc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000000d40)=""/186, 0xba}, {&(0x7f0000000e00)=""/114, 0x72}, {&(0x7f0000000e80)=""/149, 0x95}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/247, 0xf7}, {&(0x7f0000002140)=""/128, 0x80}, {&(0x7f00000021c0)=""/213, 0xd5}, {&(0x7f00000022c0)=""/154, 0x9a}], 0x9, &(0x7f0000002440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000024c0), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002540)=""/240, 0xf0}, {&(0x7f0000002640)=""/12, 0xc}, {&(0x7f0000002680)=""/16, 0x10}, {&(0x7f00000026c0)=""/250, 0xfa}, {&(0x7f00000027c0)=""/23, 0x17}, {&(0x7f0000002800)=""/57, 0x39}, {&(0x7f0000002840)=""/205, 0xcd}, {&(0x7f0000002940)=""/22, 0x16}, {&(0x7f0000002980)=""/253, 0xfd}], 0x9, &(0x7f0000002b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000003f80)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/255, 0xff}, {&(0x7f0000003e00)=""/80, 0x50}, {&(0x7f0000003e80)=""/224, 0xe0}], 0x4}}, {{&(0x7f0000003fc0)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004040)=""/236, 0xec}, {&(0x7f0000004140)=""/19, 0x13}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/136, 0x88}, {&(0x7f0000004300)=""/74, 0x4a}, {&(0x7f0000004380)=""/165, 0xa5}], 0x6, &(0x7f00000044c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/100, 0x64}, {&(0x7f00000055c0)=""/97, 0x61}, {&(0x7f0000005640)=""/87, 0x57}], 0x4, &(0x7f0000005700)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000005780), 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005800)=""/13, 0xd}, {&(0x7f0000005840)=""/57, 0x39}, {&(0x7f0000005880)=""/161, 0xa1}, {&(0x7f0000005940)=""/192, 0xc0}], 0x4, &(0x7f0000005a40)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000005b00), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005b80)=""/175, 0xaf}, {&(0x7f0000005c40)=""/33, 0x21}], 0x2, &(0x7f0000005cc0)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x80, &(0x7f0000005ec0)) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005f40), r8) sendmsg$NL80211_CMD_GET_INTERFACE(r16, &(0x7f0000006000)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x20, r17, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x28}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r18 = accept(r10, 0x0, &(0x7f0000006040)) setsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000006080)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e22, 0x4, 0xa, 0x10, 0x20, 0x11, r3, r7}, {0x9, 0xe, 0xfffffffffffffffd, 0x6, 0x0, 0x1, 0xa528, 0xfffffffffffffffb}, {0x3736, 0x71, 0xe0000000, 0x8}, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d4, 0x32}, 0x2, @in6=@empty, 0x3503, 0x2, 0x0, 0x2, 0x7, 0x4, 0x6}}, 0xe8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006280)={r12, 0x20, &(0x7f0000006240)={&(0x7f0000006180)=""/27, 0x1b, 0x0, &(0x7f00000061c0)=""/121, 0x79}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000062c0)={0x1b, 0x0, 0x0, 0x8ac, 0x0, 0x1, 0x3ff, '\x00', r3, r11, 0x2, 0x5, 0x1}, 0x50) bind$alg(r9, &(0x7f0000006340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) ioctl$SIOCPNADDRESOURCE(r15, 0x89e0, &(0x7f00000063c0)) getsockopt$inet6_mreq(r14, 0x29, 0x1c, &(0x7f0000006400)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000006440)=0x14) sendmsg$TIPC_NL_MEDIA_SET(r13, &(0x7f00000066c0)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006680)={&(0x7f0000006500)={0x14c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa8b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4f49}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b16}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4d}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1084}, 0x20000000) 3.816834106s ago: executing program 3 (id=3333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x9, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x3, 0x5}, 0xe) sendto$inet6(r2, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r2, 0x1) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = socket(0x2b, 0x80000, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000000000000002000000020073797a31000000000894564e3766fda723b8044002000000090041009680067cab47f95a73797a300000000008"], 0x64}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x4c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 3.806279688s ago: executing program 1 (id=3334): r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0xac}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000300)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080) sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 3.59328884s ago: executing program 3 (id=3337): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) shutdown(r1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r6 = bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e5ff1ffeff000000000000f87118c634780e0d265f5133b559bd8ab64d229e416d1711c4cf4544dd12c6653a6e840d81426ef9974932a5d217c0fb0a20fc16c6fd45e633dfed404cf57077ff980000000023f4"], 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x72, &(0x7f0000000280)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xe, 0x1, 0x514}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0xb, 0xb}, {0x4, 0x5, 0x0, 0x4}, {0x5, 0x2, 0xb, 0x2}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x30, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xda, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="320000000101000000000000", @ANYRES32, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003040)=ANY=[@ANYRESDEC=r2, @ANYRES8=r8, @ANYBLOB="06005a0021001700", @ANYRES16=r1, @ANYBLOB, @ANYBLOB="9a2f7351f0cf9e3fc9a025df9f57e0b9216fff98a80a7eb0dcc46bf799fb1c3cb2d1c624a6fd2f7aa1396c9546fb4457882c138f3fe5441c47f5c821a6cebaf8ade3c75ee87f2ffe3e733e706aa7986ceb95e90ad56e6aff292bd077ef3916d40c38acb44ff546572a2a", @ANYBLOB="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", @ANYRESHEX=r9], 0x20) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@delqdisc={0x220, 0x25, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0x10}, {0xa, 0x9}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x800, 0xfffffff9, 0x0, 0x93, 0x2662, 0x6}}, {0x10, 0x2, [0xffd, 0x3, 0x4, 0x1, 0xffff, 0x1ff]}}, {{0x1c, 0x1, {0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x20000000, 0x7}}, {0x12, 0x2, [0x3, 0x6, 0x1, 0x4, 0x1, 0x0, 0xb]}}, {{0x1c, 0x1, {0x7f, 0x4, 0x80, 0x81, 0x2, 0x7ff, 0xb3e, 0x4}}, {0xc, 0x2, [0xf001, 0x6, 0xf, 0x3]}}, {{0x1c, 0x1, {0x4, 0x9, 0x5, 0x0, 0x0, 0x7, 0x101, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0x0]}}]}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0x70e, 0x3, 0x1, 0x5, 0x9d, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xcc, 0x0, 0x8, 0x8, 0x2, 0x2f, 0x7fff, 0x2}}, {0x8, 0x2, [0x0, 0x3]}}, {{0x1c, 0x1, {0x0, 0x7b, 0x6, 0x2c000000, 0x0, 0x5, 0x1ff, 0x3}}, {0xa, 0x2, [0x100, 0xb, 0x0]}}, {{0x1c, 0x1, {0x7, 0x3, 0x1000, 0x0, 0x1, 0x9, 0x8, 0x5}}, {0xe, 0x2, [0x7, 0xd, 0x4, 0x8, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x800, 0xff, 0x3, 0x512, 0x549, 0x2}}, {0x8, 0x2, [0xfff9, 0x80]}}, {{0x1c, 0x1, {0x9, 0x79, 0x6, 0x3, 0x2, 0x6, 0xfffffffd, 0x1}}, {0x6, 0x2, [0x4000]}}, {{0x1c, 0x1, {0x4, 0x4, 0x4, 0x8, 0x0, 0x7, 0x6, 0xa}}, {0x18, 0x2, [0x50b, 0x3, 0x7fff, 0x9, 0x5, 0x62e, 0x9, 0x6, 0x6, 0x6]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x6}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}, @TCA_PIE_BETA={0x8, 0x5, 0xf}]}}]}, 0x220}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r10, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000000200)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3.32277158s ago: executing program 3 (id=3340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x0, &(0x7f0000000040), 0x0, 0x2}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}}], 0x1, 0x4000) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}}, 0x0) 2.959975206s ago: executing program 2 (id=3345): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) write(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r1, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700"], 0x50}}, 0x0) (async) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) getpeername$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) 1.948761323s ago: executing program 2 (id=3355): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="020a0b02050000d03dbbe5e3c6c6cd2503001700db00000002002079d95864e0315e4e4cf893bdd02734f32c339b3cfac191960327511ee521cb9a9e1c4213dea50975f8e8ace746feb6d03e735058614bb71819322ee82dbbd47bef838b2c63864c31328d0217fa7558f9a2a03efc92b8d32612ddabb91ba221b78a67cf06393ed28fe84f4c1d2396ce2ac234642ffb7e7e5e57610f13d1e8e27020ca0dcdd3000000000000000000000000b7743aed74ab8c493c97e96135380c804b3105707d813aac8c335bc09e2246371499f737e8fbaf74ff30a2aed583d63a83da8b8fa7624c84e868bd980e007a6b5da3ba5e1f3949cd6e97ea02dfb79fc7fc8e01247311a042f32ca2d25f9ffc090000000091b1187f5c44d8512c26fdb3924d2ebf3953d2b51f4031703ed6fc457eb93b37178356d20aa9885b41683f35af33422c78b6e3e7fa0a963d6bbc8b15d37d12f8a9b670e99d3073a8bd003e31df1618880357a6d92e486634514e387afac5f11a32"], 0x28}}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70e1ff0000001400000018000180140002006970766c616e31000000000000000000"], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) close(r6) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r10, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0xe8, r9, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:auditd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xe8}, 0x2, 0x34005, 0x0, 0x4008815}, 0x4) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 1.947945138s ago: executing program 3 (id=3356): r0 = socket$unix(0x1, 0x1, 0x0) (async) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) (rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xb3666000) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) (async, rerun: 64) unshare(0x62040200) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000038000000050a01010600000000000000010020000c00024000000000000000010900010073797a31000000000c000480080002"], 0xd4}, 0x1, 0x0, 0x0, 0x4008005}, 0xc840) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYBLOB="2be149678db07c9f9d3207498a516d934b6b028c99cf2eef3f8986e5e996c362d5e497b5143f0abdb3a41a2cfb76cee01da1fbe5c1da89c3b7016a6c96e6041050764456679d9ad9b12c2e0275c5f8be5cd7b48725a2ab6101c5617b9c62188c608a8ad8bc89590000262c3b32e9a7581f7033983faafc0e2e8f34cc962d96948c73b812bbdb0bc7a80559c7c6d97b15961ae2108466ec392346dc26d6f5370ad21cb59c4362f195a36f3be49bbfc2b67faca956d4ce52c7f8b837bd4a827a216fa6c9dbd25b867df075b3e5a6ab32e1f65293e47bd55c61a3759c895f43d54b74cabd33f797d8113c1f14b0ac2dcabdfcab9b028a4d917a", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRESOCT=r7, @ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) unshare(0x28000600) (async, rerun: 32) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.927655979s ago: executing program 1 (id=3357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r3, 0x0, 0x10, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x1bb18000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x11, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7, 0xffffffffffffffff, 0x2000000}, 0xc) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r5, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x2000) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.666785271s ago: executing program 2 (id=3360): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000010000000000000000000000100000edffffff3f66d53255c368c7b0fe1785aa90"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.565142306s ago: executing program 0 (id=3361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94) 1.56375615s ago: executing program 2 (id=3362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x44000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c080}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc040}, 0x8004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x150, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a1dfaa3f0fe7c4856ba24225e0b7e47a3a13ea0d5793ff65e3ba074f4281c4"}}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "38b0ea102a620b8ba0b9d2994a81ddda3c729396ea1ecace75b457df1124ed364f4e1a1e617f36c941a02d3e1a6133c2de9bd92c03bbb1a9abed091336c6a7cfd58ff8b913897ad60f1bbc57b19a2720e1ab4d8aee6196eecec0a4289a8af9cf16bee0ef8e1f4ceaa5866c78ed8b6292f7ecddb386b5cd6c2da33aab8ba1e428ffd1b616ac63c430561f861335c0bbf8fb281dd0bcafb0938d03d114f4a8967b6d74c4d1df2b9ae2cfa1dad9f143f5205288e4aaf0566d2113cf49690602b68d95ad8cb05e41ab4714c5cc7042277a2c8b7e2b5eff839895d8d142532f9b3a60"}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x24004800}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x8, [@float={0xd, 0x0, 0x0, 0x10, 0x4}, @fwd={0xb}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x3, 0xa, 0x344a}, {0x7, 0x0, 0x5}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @datasec={0xf, 0x2, 0x0, 0xf, 0x2, [{0x2, 0xffffffff, 0x1}, {0x4, 0xce}], "cbe0"}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f0000000a00)=""/99, 0x9c, 0x63, 0x0, 0x2}, 0x28) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0xfea, 0x10}, 0xc) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0xffffffffffffffff, 0xfffffffc, 0x8}, 0xc) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x9, 0x2, 0x0, r5}]}, &(0x7f0000000800)='syzkaller\x00', 0xb, 0x45, &(0x7f0000000840)=""/69, 0x41000, 0x20, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000ac0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x9, 0xc00000, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f00)=[r8, r9, r10, r11, r12, r14, r15, r16], &(0x7f0000000f40)=[{0x4, 0x2, 0xd, 0x2}, {0x5, 0x4, 0x1, 0xc}, {0x3, 0x2, 0x6, 0x9}, {0x0, 0x5, 0xa, 0x1}], 0x10, 0x4d0}, 0x94) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r13) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000010c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r13, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xb8, r17, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0xc040) r19 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r19, &(0x7f0000006e40)=[{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001240)="c04e692cee99a1a9a8dfa8c60f19ba11083a4bcdbd7a5cd13776f05e85e01e47ce127a545fdedc9b6d9226a8bdc99b54189545df512aef5b5c329689b64d62897a5bbc4f4a06e822d84bbe638d9c08b819d85ce08629cd6ba4c59029510f7b3e4f3e186928c12d4b5b335e83d8be5b1c72b72538a30fadee09307690eb91e640ed849a6daad0d46bce0272382500fbbd04bf3674a86ac55e2c9114924e", 0x9d}, {&(0x7f0000001300)="1fbe016073ac3f3659562e1b7d6acc4f7366a7a9f4dfdd46bc7aa9221bdd64626779b2e13d229bf8f6107d1c49d09b0f4bc4eefa89c852a32bd7314ce8e1affd318c93429a340a8c76e737080773fa20c4bb8337b7e59b7e8d9c6e5091ae8c97fdc304bd7c7b428c25f638692706250d4d3e04fc99", 0x75}, {&(0x7f0000001380)="9128ba6d308fe78c20ed2bb4bb3526f960d569d024b0d49ed7aba33be203", 0x1e}, {&(0x7f00000013c0)="375fa151a6431f195ab7a2d521b768fd1fc59dc377e119775f424b603a4321afac783fe8ffacdcf4451f26b205b78456d9ed5ac76d7ece4b724dccb9543d61aa1fc29eb3831f34efe6d645ed33450899400db33d8702ecb5eab8a42a78f834680acbb2dd8e3b781bf12925dd0bf1f0f0cfec12c260f11c7813caf90de1134d13a7ec1ae00e491a34d144253b8e2a394f0488391dcee15c7d0e5c29e8c577c42d9f384c02", 0xa4}], 0x4, 0x0, 0x0, 0x20008800}, {0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000014c0)="a18dbcaab87b7f5b607e81f6bc0b8524b3a8be9d6dd6b1b4b87c3a18ee40f27598147a2430c3e56f5b40b201a95b974d25b1a22498861abd59d595634e498897735b32b89355a8368475989633c631344902f504d907e4a52b2a762ebb58d27d6f79f1256905254b76d00b0e1592fd14a267e08b30e402e3eb0058738858a311b4174013dca00fd6eefa4737733ae5b44de0c5c7adaa95efabf3d0c880674ed837c934c6286fdd8ea13a2fc9c3009f117d47723903ab139ad180266d594ee646555177d1b04faa7695b681f83d213d9f405b907df2bb3b2d6e8172", 0xdb}], 0x1, &(0x7f0000001600)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x86, "60d429bc4d6b79ea28fe4560fb34cb502e1368ea3a4c1db673cdbdb1b6b9d98258d3f7743e52441e183103f3cf23717decd52a643d181e130cdcac0f329e6a63e3691425d41526f4bd3bb9f6881185ec0f65cd28d6a48339f681fbf12c28666d59e34380200ac73d252b9ce8db6685060d2c2ef14bd53f314a766c4f778ee1f060a60756a009"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4732}, @iv={0xd8, 0x117, 0x2, 0xbd, "a4275a9ff688578448666b2a69e3d1ffeeed9c0716637bee35f16a98fc493f3ce7af743a48f61572c6b6bb07c4125669fc78dc5d4b02b9f4b38eaee00da468539e046f935aa7dbd849870c01d315b4862b22f0e9b74049abf0d6f2c5fbae38c7bc7f35841daa611f802b0544fb4c69302503deb7c2b1b9313f5ddafecb2c13511362b6978cf4f98f872abf1b024186ce5995e9b52a5f35d3c1e68b91ffaff51f244eacb6f2193610bc866d0a067e04cf5684b03470babbe03afbf7bb14"}, @op={0x18}, @iv={0x18}], 0x1208, 0x40000}, {0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002840)="32ab61ee", 0x4}, {&(0x7f0000002880)="3853f1064a7f1897fba8b4a690448f10040db7e3b394844719ce710e363c3ddc65b44108cee759a1882d37ec08367763680f177e41946fb3b798b20c455240df9183d5191e2e383a0bcf61f79f44e998d882e378a42f31b61e364479969624bfc130f82b6d387c9db2fe0699e2a69f6270ba700cfb19ad278b266da31b8ce959ae1acd612ab3f5461c1c1bbf0ac90de549ea05f0e42c26edae57513c822fc18acf67944f99037fb57c14011ace7d50c5425badc69064639f469f40e7589fccb77f6a40b6620a22b06f5255fc21993d22f84dfa8ef6e7546cf20fabedab", 0xdd}, {&(0x7f0000002980)="d52e782fb6ed41410f24b40980dc1f1c976aa0001f7c66f1d0c8e70c9cdd8286c3dc4398fd93f61753fca7e9b43217bd0f3b46c129bbfd056c250df2beae589becb11cea821ef768b12ef445245c30fb181fabca1953d4680756550e918b6f6de4640044a7a802c997fb19d2160d8f660b2d6bb180a33446663ac1acccdf76340f44d25a068520925d268c", 0x8b}], 0x3, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=[@iv={0x108, 0x117, 0x2, 0xf4, "fd1e109f4ac7bd0fb1f9647f611492b58f51741b7ad6f5b63131dc18e8e7b0b51964fe47b1bc598333fb0657f3dca9b51b6492eb2c39662cb297088db60e635d22a582211b5434d6b554a169adebab4773559bdfcaeea8682180000efaf9a3344e0334e856bd577c6aa5ef16688071360bf756dc8bd5698df02ae9e82d9f1b0df0e11cd2ef82d22ff795faaf0391b1eccb29936a36176f7906a3cdd154dda3e5fc56dfd3566569c52d60f739788372772b8bf68d05dd4c2121d7a56258f3606d43577a18f5553b1d0a5be1dd103365d8a515daa4828effc6a8bbb8662807fc425d07cbbbebc8b9fc34b630993a30ee1be051f15c"}, @iv={0x58, 0x117, 0x2, 0x41, "c62885ee8bcd3960ce34c321c0cd6aa0b4c2e3c3aced493ab3e105548803b3d6d58df28dd33319ad45c2d5a3b5fa0b5acbd0505f1553f4b612acb8a9e7df893f3c"}, @assoc={0x18, 0x117, 0x4, 0x41f1adc3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x60, 0x117, 0x2, 0x4c, "22848b0ea5e3b16e4f90391119eb8ee28538790976ca4c33f5541715bef359cd41ce9fa85c6d4fd2150316d7c3728d2618665a3cfedc892d689daab41c28be5e6c9732dd7ff588f95d4e4931"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x250, 0x80}, {0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d40)="f54eb3645323474ca66a931d64d7f0c818db0bc451d7c4e7a367181476", 0x1d}, {&(0x7f0000002d80)="348dc0dc1d2ad748cfe0fc4de542f35c2a466b435ea64faf7d7b03a32c113ae278fa0300be5d722e9ea755fb0d9eff49f7dc2c5eb0aba4e6f47f685413592052bbe5894b7fdc369714f49f8fc27291c4f5e817d719359b8f9dca14c618d9e2331c0639c57c50f3945bb92e78bf79971f1ceecd1197025d4bc96b389fd3b1a200a31ea77f3aab6c9092a75e098907a496ea419abf9e4730cf63", 0x99}], 0x2, &(0x7f0000002e80)=[@assoc={0x18, 0x117, 0x4, 0x635d}, @assoc={0x18}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xc0, 0x117, 0x2, 0xa7, "c6f2adccf22805795351cd87ee95e517e4760107d7c2aae079c1cc0993d496f1a748f991a4476e03934dca1ea32f2f77a8e925f97efc160646db4ccb1e0a433aafcc17a19e15bbb37b9d8268fcef3ac0f286bf7508f59396231c07bcb77117dadbd980ccc87678ac29749ac072e72b77a48c2160fff90ce49048e2c03160b597eab1111f8187032c042644fe4d36560dfcda54ecabab8e7116a7f60294a760ba47cb7acd45a59d"}, @op={0x18}], 0x138, 0x20040880}, {0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002fc0)="c9b0d5879a5eb5f697868d2a842a3a", 0xf}, {&(0x7f0000003000)="71706b43d36a63fe575adacc5a3f0fde8fa749c01628b22b1b64e91069b1760d15a568b6faff8a06bcb710931879e8ccda80073e651fb382abb6d8049bfba523bc2541bc2cdf0f646a424d836bfedb0ecd6405d071ec4442e682e15a137c3329f43b0c5641e9ef6325ccbfffe3edd7c957d5e684a8386edc593ec6a3db132c3cd31ad6d98045851ca35d9c3adc9dc754ff2d56f987b1406b7528250a729fec3fd8cfdff64aefdb951cf968bc19421de929dadffb461455a8013d55452f845878cb45e032094f25fa3db164f269626fdf27a6a367d320bf7fa88a27c8c7b28799fa415bbe390c66e281193e9a3d3a8308c70dc8fed6", 0xf5}, {&(0x7f0000003100)="db88d61a45e2aec9f9cc64c6bd66a13b6c82aaed7e4dc683472d56f58f52479a956c4e7a5c1db2a1a2858f6197305d4ebbb82ffed7828b594031aba27c764f7e9b17713f0bd7f280ebf66fd54ffc2210cd742211a36eac48245f43e83b678a7bf5fce9ab8df50580a5b7a69f8f0f34751249a5d1fb7ddcdd86506a3b91e88f548002d28c2e06df784856fd096000ab15a34beb92960418a58f25e85dc8152b9d00195ea3119e48a8cec1fa608d5b483213bd22b6afb90eefd2259afe9a791f523d051e623b155824300526aa1950578f58cd55f6e3443f0cf469c8492ef889e5ecc371dafb5ff5050343ad601f4537995a810bf4903e2b34c36fdb1b302038dd860e3a9f9a374668990fef892f377662d98d99f59bcde6dace20116214f3bcaf3847d696982adb3899ee23588936b201e160e61cbf02bbc9b5f67a3e202a02f91152523c70a56620273b07ad0ff82439ad5f62464ed588c707865424cce682b03b529f5c7e06641eb88fa316539e65e1d6cfc844eb9cd39528ef77bdc8423b4fd9fb5a0f83728af282ef07643b1cef4c0c9196ea0517d2b9f850946228138356cc7b50868d3c27d4cad0e1143cd77a95df4e9ccaa1edad150cd3916b4dd29e2eb4f5183533e3e2022adf7cdbe789dd451efd05014f12dfaff91689cfe2882db1cd1e71310a0f801327ca42488eb4152d4289fe4d78c2b3f5335a3d34125fb0adc27f8c7d947c7d0303a265250b0cb554d6efca54e1b7207042780b369d84e077a02ed2c979f345b220ae521ab139eef9619d3940f9070a03de3d55f67848b55a8c0929adcf479bb50a11b5b44a870d831350ed8f76f4ae2d2ef03ade6edbe600c28479a729fc9e82946b4d128a6d21ef32e5401eaa4589ab4b0e8432689a39fb4e254925619d3e761ab8500fed2690f70708f931910ecbcb242d9183db8b9b8a647ed0a1c2f797beb06726e45f4a2351cbee8df3f53a844b340eb91d7cc7536f92c8f92abfa76e52cdb373217b8147b0785ac613b310c06953951a0ec477de5d47f18a33072f8b2706f71fe9d08e9ed0fcb8b1083522b50f390f280b5eba511646a12c10ecc06b82b62dbacb905b91c46ae4363c36a26b50299da1009f2a5ef35af551056939dc507569232586f4133845f525b50db900391be8f780133b1edbbdd277349fee0d0d478c9d743bb0e20fdc97fdb9ecfa7b5e24e52ce6d5836493914ef087c6bd5c473d1e796915e43dc08d5c7915740fd76ca2a5ce6105461c5a36087bd848867e23996f670e691b9c1a5c344109271c66f46c95f6713aef20a24a594569d7f82ef3072cdba17cffc449eac6c41f764abf9f44048cf2cae2fb5ea46a4b0cfa59583cdbd7250cbce2a9293f5b0ce4c6933c964145703c63b6d021abd36949863d0343585af9562ab3c4eaefdedb8f4bdae883779b5948fd54e56a4c4d3f3f445cf77fe01b2465e3d9503064e36bcefe99d678554899089d2e8945ba821a691f19a5962fa67989897d707df05ff6a01848e9d567ff3906adb4a6e157b7262fc58dcc27035e31863428686064bb1feff753e4406885c0b0d4ec5da48f6915913569fd7e018a0b38f28ad73b835ca2d13fe72d9fc0485416eef55cdeef5f25f309bac1f71af5c0809af3407ef7704974e0528a5c60ef66e0561e76282385e21050c2d27105214941f8477333f237e8bc5d86265ce3410a4a7c62ff87cd646ded1c15cc530b9217165fecd12d44e488f6518404a44b5f098da6f5ddf74f88806e820409564f91545e62f4aed82aa404fb5752092771eaded5e1c63e2868c0809d87e29898eb9d7fb89320a5b159d940357ac8a82c8e9a39a12c3749e2f95e0d2b756ceca42bc9691489e5de02a08196cd7adf82f92b4ab43d0167dbb86e7a93fecfa370f0cc86e90a944b85a29909bf5c527a9d06372c698f40853eaf0290cc0bb062d59b6e2350510b65b1c889c5a54b34a0ba271ca38aaa63517e3230d4610c0b1b38a309e46ddb0b022ea2d4141532ac09f3dcdf1275d3bbb9cefd506ea5e963ed60d2e9fe63a191392e53c0213ece0bcb20f75732071ec45cdb0581e2bfaf79bace637a5cab202fba238de34779e2fcf3816ff9d9f41c5d7c460836bfbdd17cd0a79e13b26d72a94310392c9092a88be9f975eb46028f4d8296f831700edcf3864510544d8c5ad4a60f28ee2ddff6e84681dd9d778f499a8e7f4a1ca5e53b8fd2058303b3a6f583d561883e0642d4beb1032de99c05cdcb590689d509ca1c0b7d23da5425a0dff1c552ca964a0aded9b827e78b26cfe65e7ab5d1efd94804b84afa7e215c914c6991b6a3936e5ecaa587da2be3072bed7f95ab6c4ba42ec565d937e9cd952c1427d3cf6f9127757a54f5f19fa242ea1b8fb1e38559fb44dac07931f73b1098aafb241a32b9705e9c3c472ec957aaae388eefdebebcd5b27438094a2281626afaa99c975e6123b4ff96a65a8faccf7399168c9912ec083a829cbeeb9c64b9598f109dfb3d797f349d24072d078d7992c4911f6b34bf0ea1e26a5e5afe973587fbd6c0b589301a2c6c6319e228515f9708bdd42ddd8c5c1bfc0cb59a8c6fb48eef366cbbc32fa59b37bf947750e20d414deb61cdb011bf75c5d9c70852bf3efa67c27931312eda04226e15a594c532fa82a630edbb8a16e892c0715112840adf6306042b0fab300ec3cc617688185afdbe84b274af01a199d436912b06f54d1bb4d35d974bede272a9a5e7d2623482d32d7c028b3ee92426451dc4e5be268c4c7e6614547d8e195797545d7f6823a4a0d9303ad41cc3857c0fff12e39ceca8fbb99d40b767836221e615f23066c50c0cce4b27cec833c22fc01bce4a63731aaa7e9c442e6d26013ae68b909bcbaeda8c1548de9a4bac1e68988b85d91605f11b24fdc0732b55feddacad8b55b1319f534c57b2c5376cefcaa626317c5d85fd7fc6c3e0611024063f18f08d24946663d1eb6c7c75f183ec76180766328a035080ea91fc9bf940a36700aed23df498c2cd47ea597263a13db7f7a8b425f9e1518cce28b559dbe86a0dd0d9424eef8a14547af1864e47b4916c9d95d2e4793bbf508194e53bb2b64476588639bf15a2fa1be70ed9e76d54b7ff7e26c8c22687d461c5f3cecc2288f402fffe45ac70e5f572abf81ce64456d71d0fe14edca0c5b4f10a6ae7dd688a224f2196da3ec6a417957a4f48ac030cb22786c04cdcfefcf22134a11a9660efa83d84b50d6deca65d353a2f7fca87686bdbfa5fbc87d6db4785883a621153bc0bbba5e0ba4e30c0b429aa13dc7e2f00087216b5f7aed7139c99fde9ef10275a21ef604d81c0292cf89696525cf24e185e88dcd6db2a894dbff2e18967baee71b78a9a1f346ec0049614120afc305a08e185d25e09d1d52920bda408a0e2a27ecea91a118bdc7758795a49a35593e6380366198573cfbda318048ae6ad497dec4fc82b310d22c7877c0d3ce261954c712b094f208f8c7f539c62dd603f0b164759da6d93cc5d8759815607f5e08a57397186c3704f57317bc45879af242b9175649ae97158d7f4fbc27375bcde97de0923f786b3c2e03313c0cc69d7e69399e57e5bcc6e93ae1080d01f9d362d58808415ee5a499acb9378f3dc9c4f83fc59a0bf033058de25aa7a7c20b5c20e7ed4d9381bbbb8c3573ad8bb6ec6ebca44029222ef8708e55e73e3206ae524b7b743ea8ae10a2e97e43343d77632da81ca194f5345136c71a6d963dad53abf24b3670dd950161ff84b73b120ba12d27d288658e58e335eb4bb02747d6d1556ced74f924874d04b8de96275d8401d2a0566b7ec771b56a7aa083521740470075c9fcc696268d0926498261707679e387d5ad5f0d92cb8225e83254221e34c36d2a3ac53ff518322b9c53ed9e5507fbd4fbc72c146415f06be3ee145cf3e4afffd6be022e10230bb55d212b44b43075af8914d227f7c7dc072d7822e2ea7da43bf54e851e4fc829530ba36e5e195136c0350e1748715ec9ff60bb189eb9ed5b835c85331becfe57f347fea5f6c868b9da07608f7285ab295f68afb526e36bd0f97ce50b4baa8afd4e5e35a6505540cffba18a7ec270f96179c838b917911a6b2a50832852b4ea4d0f3478221e8620f9dd1786f73c97e30d06d290b28dbcacdee51ad298fcbfb432b0c8bce9e0e7a560567f5327181a8c1510cb7165a0b6e927a1c537f167453f231d23356f513568dd8c24b1084f4fd870500249cbc2c19719b69d763b776ab8bc1f433ac4600c6ecec1975217afd19620ffe311eb7332ff4d55035f5762760c7d3d57ce2fa495a25f7487b5730eb0d333ede1d598fc2882568f04402782ccf9d0c4df22b1f900c081a4ed59b422c52904ef2b813b83ce98bf3f65a8952fb4b853bf7278775e2644ef9e4c73db8cca7403d56297aadd2e24369347e802ceeaf0d74762a9dbb1ed70da3a231b4cf1086164383f6642b85a28b39583b9cbdda825931e330fc7e6d15612aaffea9f1885ba783f69ec2ff429e251e1ba651a88e8437f327a802c796a2b59832543f4b7e530429897f6fef09f39e0ebdabdfbd528bd7583640faedd13e49144436a3d25b88bf63d8ab9630ca4e16b28b2958e9d40a1d805074d6bd763eeceec3f0304845a9093f7cf7a82ab3151dbbc369076aefcd65f0f861a6f7f75159f93b08216c917d0771db0b9e57feba61819715e5ba98bc9f97d6043461f760c1a3c3c535dca5e4f2fb9072344c03dc42dbbdfb299b94af7449143092f908bba7dab0691bd0945b51447ad96d56b42c644b64c4ea1fbafc63960f69dec5f1d93d3bfa81a100a86b6f804cf958cc63f81acdf78b8399cb921c47fdb9db45c0980f8e8a39b024d2c6224f3d94b9e71d42cd96f2022f67c06ddbdb02e0fd2e85cd3bc595239d7a03401a2e7d23fa71fd53b14d668309f9f32e27ea0de4e5744315f35926649707cce9a374dcc2d173ff77f1ee1d76bbce21ff58b3aa5acc7f93daebe72afb9d226804da8baa5c9cb188442d3e9bec7ffb4489d416cb4b96b6a4091b85b1f6da8813b01f71a70fbbb2668acb764cba1e95c083afdaa53100b1ad8c9223cda799d9b81fc19fbc73c1617a68fc2a7a267dab8730a5e72e3cb93413efc95c50df7526b4f6be737a32e8c529fd90f70fa5df42305b2f27c15cd4b6b1da24acc7bcf5d62cee3b42b369f8a04d16422d80fdfacecf4578bc727718e8d96b1269a393cdafeb5ce10e001172172f4c8c05e8138bab6f58021976c40a9b4c6b3cb25e30bafb0f01aa31057c8dd010c937704415508b2910b590581bde19490bf7547f1a5219800a71aae0710f6a17ce4e4b94c3227289261a86a4d9413f8960a2a0edc768432ac8834e516d590e1eb8f8068d7ba42ba6a0f80233ac2333543edc6092db37fe4e48b35d963a3a9faa4318d83091b32c14ea0956b2a2fc8df1af9e10acef8d791e80e787853b62cb00c33e1e4d26916de3d5a012149230389f6657bf1bab6fc354917022ded7676c4a30ab8dc5584964f41ae7b7d5202ae01683f6cbff301271c038cd0b325fb3d271125cbbc2ac768d92cb861146e8caef010eba06f3b5d99fb2c241082fa6c41bc51c47d064cc2f615f60a5f53e920b7bd2d6263d6e03e31f07c19c7df3e31abfc8b0b7a077494f75f87397ba9ae4427eaa4d0432f1e615f8f79891018ab1e8421164d8efe002b41eac9c516f64bbb7d003265dd88445e7f539ab75571b5dc15e8156f794a31c2e29b005a4852f4f9bdfdc5a7e8d2a2bf5a76cc0ce76252e1e2187068b43e39bd5", 0x1000}], 0x3, &(0x7f0000004140)=[@op={0x18, 0x117, 0x3, 0x4c01e5423701f6db}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}, @iv={0x90, 0x117, 0x2, 0x7c, "6fd0567a71c239f4550210b1a06c7feeb861dbf3fa59bbffc8e5ede88a31e817311dac0c59573f7d51b22d612c2e384b0284a47b08c9969bdca57d5db2f4e0e7887094a94a4b34370e7a135222678d3948ee41a361a8587d7eb9f7187d598a0f7470de441492ac952afcc8e19521f49ac26a728c38343c9d5d34a642"}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x87, "0ade725a610e7a50a5eac520d24e2bf22276cfaca02a3e7890df2dba96ca9f0544ef2532125d1f1d558b625cb0c32e09e5514cac44c5eb32b0de01e34068f4bc6659f80ac5dc5dc419456770739babf89024a13c1bab30fc85b8fd9dad8f0e4b4c18607452ca523f86e5d438eb205c63ad0bcfb91cd0830c5780f26acec25789499bf6c800312c"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x21d8, 0x4008081}, {0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000006340)="12232608523bd13057b37e119a6d9adcaa85c88da33ab7ed696763f61dec0d24d7e6a7b406739ff75ad81b991e88d6729c3c5f610c6b66bf1627864eaf56b5da257f7981f28d56567bb3a064edd9f1f882c1e493437049658f074705925f49263f569f5a56a8b90dff307e9fcd3d7259", 0x70}, {&(0x7f00000063c0)="a4a90429a4eb10a10365f54bda1395027bd54e74f8844d04aeb0891ecf7da5cbdb73e3b57903b9cb8ef8561d346988621100d093ed8a546b6fe36d15cf94293b97dcd5414ecfcd719d47a7ee782203ff0bfc74937dfe", 0x56}, {&(0x7f0000006440)="969f4615f40f66dc396ab47e1ac57f7927e68d46d3761eb21f745e95e37906fcd619e8e0b8850a8660fe5e42ae416f913ad198eb621bfeead6b43de4f4f54bdfbe340ed00c44ed38bebda16a50398a5ce0ef9c26ef0211188d6219e67010933e427c7c5f0a218f0836ffe5e8a3a41fe73642e372d290f825927e63d0f3528e74081df36dbf47e972d8b08c6a9c892da0c6a91cf4835080cae9954deba1e4de97657f43fcdf30becacc9c3b9f37e6ad850fa7e768669a88cc3ce956", 0xbb}, {&(0x7f0000006500)="6977d0a8421451fbf92d0d88ce10e5fad480f1375734d2bc96566ce0f10bef1cfef6f96e8f1217c5468f4b1f755448e841f0a3c4863e4f160e254a9a49cb2d27dab020907d25b0d59ce709b2e0f3f2f671addf4f55b77b7cc2f0e034c1ed026ce6beba184a7ae8bd6d98c377", 0x6c}, {&(0x7f0000006580)="fbee24fcb1bafd34c9f4a69b20882ff1eaecbd5d90a9d391e700c0642712aaa1831b7a6e2224393197b4c7b96c6a2df1c4e14a8ab8adffe9e171906ee261ed391912e8d94ed5b7fdcc0f9b85f018ef849170541ea6740a95685589fcabca6be69456d691a88e0690e6503baeaae0e41e1a9ac70e6085c67a4bdd2404a183b75305dafb8372a31be286e5c43e6c949577537fcc0ee61a83a4c5fb9437a2a86d7cdcba18ce86826894cb7cebbb63df49c3865ec15ae22fdaf5b64fdac7b5468012362190554395cf68b61f9c37042c7585c6880f2d161eda82a5bab729733f35dbcf2a40a66c6b91ba", 0xe8}, {&(0x7f0000006680)="367daa6440f6a42137fd1fd35c465736d396adc5a7cefbde15d84db4024bce6d685665feb0536ad19212804f267060d07cdd6e57fc628834654b09ccd790f3fc35f8a411aa733fb21ab43818489774ee316eea84f3713d093017fe807607949004cd7844663f15e802c12f8e3c07536f9a", 0x71}, {&(0x7f0000006700)="30f423aa26b691d72594522c3d398fbe613174150aa0789a4b7e1e0ff94f15311ea8777bb7aa8775c98c646a871e88f4c7e6441d7800d2ae3d728e1cc32354373a973ab50ff159ec149cea8d129b729bc00a50c236c1f342b07d3e559c47ce7bd2f027256b76d7b32a7680397015a0e765f0ce8710994074ff2680ec3973a3645b324c98b6157e85740a72f7a180c894a14546fae8e880bd8db4e15efa048d905f147696588f32f18ff39cc316c5a19ce1a5c4f44ca5ea657949da1a8cdeabaee6f2440e961951", 0xc7}, {&(0x7f0000006800)="95ab6ac5a89b7fd713a9c5e370baa17378fcae15ec96071b211e026f6cb3940b885522f35cecf0d930f8227a92e73ee39f57087828", 0x35}], 0x8, 0x0, 0x0, 0xc0}, {0x0, 0x0, &(0x7f0000006940)=[{&(0x7f00000068c0)="1324b11db1803bd08923bf2555b75350e331427cace2372ed9aa32ff45d87b637c06f5", 0x23}, {&(0x7f0000006900)='3', 0x1}], 0x2, &(0x7f0000006980)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x59, "3016e1e26ac4c7842800b9ec007c2ced956db73585f13d52fe089a85daf3ccf3ed3fec52fab4b423fbe4ebbf58cd091bb8dbff5a7fd199224b709eaa9a49ee44715b5e14806b51148809a09cc2d94d5017bed6d179886928a7"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xe8, 0x117, 0x2, 0xd3, "03361a38e174521b99e5121eb95330746f017224b5f4d37521ecbf1fa9fb846aa917b91530742b6ef2e5ae79597a2c8dac3c591c2142c8f9ec415becd0b803baecb745d06f2f94320c5108ae6e76d9b4aa26f7241a0de5d4b8012accfd7b1087395217cb449c60b4b2228ab0f8618da4812ec69770472241a7ed774765e76f773309231832e52178ebcb21a0c52d720122c3d1de9bdcf4d7cebba9f840a343cded55120fee5b2183a8956321c89b688aa42cec82e35f12024710b23b15ad4a960ce86fe00d6607de637321a463e794da325d64"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xc8, 0x117, 0x2, 0xae, "e2ad0543b2f2910e4cd8bdadbf36feb1450de5ae4fc11d95d673ae0192c65f3ce4915420413ee34247503b949e28183d791944aba5a18b46b3785674799c851e85c21dae63c107b788a23a69dde7188e40e73e9ccab1a400a296ed01df4f51dfb207eada41044295e84e12d2bc96af58218e6c9aa87fe004ebbad4a9de0c26dde65a1c5dcbf8b9bc1075ea731a69646cf07599fae89ae217fa3cfe3dd42cafd0a09c8f68a9c69f30360323dc2dc9"}, @op={0x18}], 0x2b0, 0x10}, {0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f0000006c40)="42d499c9266dc766345c8f9eff342585bd4bcc0b6554617f", 0x18}, {&(0x7f0000006c80)="99111a47d85fe9b305f9dde43787631b5c8d911248208c15b71ca349890e1cd38b7ebd42fb36c10ab025f46ea94fc9b20b9cdd3ea39e0d8bf586cfee9e4bed9248c71217e51d388e4c6615c531a488599ef7d7024bb260b9107eea8df973693385a33a9d38adf331450d32eb91f485fb689c5159645bddec8eddd68a631c868821c485da7c91b3d72e2caff728c6256bf3ab760b7fec13b90058019818d5bb1e5276bab189fa28b56742409ede9919e6600df042c41e4596398b91cccc6bdd710548609507288316ebfa04a40053f7486e676d30b9da29291bc91d14e51fbc5278cc1d", 0xe3}, {&(0x7f0000006d80)="e9e023a60dc400edfc9acd3f4b305621f1420fa2da18ed5d58779c83d3ec27af8a48471cec", 0x25}], 0x3, &(0x7f0000006e00)=[@assoc={0x18, 0x117, 0x4, 0xd72e}], 0x18, 0x50}], 0x9, 0x806) sendmsg$kcm(r13, &(0x7f0000007340)={0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000007040)="2e3953bc43b15bdbee6a4bbaad483e002ab4f1baf21d266cb9b0fa1e12feee75665a15f776685376998d819d105a515718dae76448f547525d5a31db5a133e8af2d28fc81b71685e46cf83bbd9", 0x4d}, {&(0x7f00000070c0)="bcdd7c7115bd9c9919f43d3c6bbcd1a40d20993f7b5a1d0c5ae614e2cac77341f912e7e229254d913cd4878dc7e3a407b4e8ee52d384f380ac6e2647ad95696a5587c4b54900f58e357047bc81998d3013f50b21567a070a644b88b378c746774dbe4e8ca505d9b66f761e585634074b5e6c6dd2d1aa6ecd62109e3d50949fffe242058671ca9076d3bdcef27c3903ad727c3c64ff443323f73fab983610290b44d6703c017d4ad269dcb210ebe3b69fada6eb8d4b8e0acc64c226f96a4519a2", 0xc0}, {&(0x7f0000007180)="d22ad394f4ec08b1241a97fb44fa07992841553882f94bc3423f9e13a59109a49e05933cdff556cf7cd4d265027c0d4991b311a853ee3b99d579689f3411c1c02e140804b02659e668d911bc2326d2a3ad159e173a91f0f689efcb75e223f8ad93b2e48ea3af94834d90bdf9b94f2cfd78d6ae20b52d8d2eebe8a5cf32e48b73516f590d14443249a2d9616d9797047fec7b6f6ce939ab7bc7a9", 0x9a}, {&(0x7f0000007240)="89148d24f7129959811efd12aea07caeba8d5c2d26beeb39c460b9e2779ccb41d6f038393daf1c7415c2a5a665d4aa8afae6e706da6912ffde40ed87cda5631f778f912183bb96acef14081abe1ff14db1529a7129fd181712b50c0931dc25c64187bfd8eba306a75037af4da8f58e61bf9f124e6964a814eeb2d61a872b790fd79967ac2660299b01c884c301", 0x8d}], 0x4}, 0x24000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x9, &(0x7f0000007380)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0xc299, 0x34, 0x7, 0x3, 0x20, 0xfffffff5, 0x4}, &(0x7f0000007440)=0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x6, &(0x7f0000007480)={r20, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000007540)=0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f00000075c0)=@generic={&(0x7f0000007580)='./file0\x00', 0x0, 0x38}, 0x18) 1.519660037s ago: executing program 2 (id=3364): r0 = socket(0x2c, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x52}}], 0x1, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r2], 0x50) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000005440)={0x0, 0x0, &(0x7f0000005400)={&(0x7f0000004f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0e7be0432334b73c1ad779b35300125375", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf257200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000ab71542f0000fbffffffffffffe869ffffffffffffff0000000000000000000000000000da00000000000000000009000000000000000000000100000000d0efbb217483fda9965cfdd639ec2fc126131d69025b00a4069a098f9ac4446241dd3b576c2d132311d8d37736891f135c3cd7826173dcea25d624fe532499c56758b88e27d1b34690791dd463e80b0000000000000069f6e11a382f5e969d677fb003b18657d19c76bbe8942063d90ba24e365266d141df58ee50a0b82906a721a25c47cb47734176575464c47b8bbe15d18feb73489fed1097064318200ed108e93a6187f2c35d23c6dac2df328a2e81b1b821781b56c439e9834ae497c9286bfebf09dc3da1787239e920ee7ad84e0184a3d96dfa36a8"], 0xb8}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="c2ad5a0aaf26"], 0x28}}, 0x24000800) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r8}, 0x38) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$kcm(0x2, 0xa, 0x2) 1.437054993s ago: executing program 0 (id=3365): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'sit0\x00', {0x3ff}, 0x1000}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x84e) 1.389144995s ago: executing program 2 (id=3367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.270270016s ago: executing program 0 (id=3369): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) shutdown(r3, 0x0) (async) ppoll(&(0x7f0000000140)=[{r3, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1.26754378s ago: executing program 4 (id=3370): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) listen(r4, 0x39e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.059150915s ago: executing program 4 (id=3371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000200a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000840)='%pK \x00'}, 0x20) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0xb, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) unshare(0x28000600) 1.003544841s ago: executing program 1 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00ca002d0a0000030000000c000200160000001700000014000300766c616e"], 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20080080}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@gettaction={0x50, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x50}}, 0x20000010) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r5, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1dc, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4a}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef800000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0xb4, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2a, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c"}]}, @NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) unshare(0x62040200) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00ca002d0a0000030000000c000200160000001700000014000300766c616e"], 0x68}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20080080}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@gettaction={0x50, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x50}}, 0x20000010) (async) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r5, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1dc, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4a}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef800000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0xb4, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2a, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c"}]}, @NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) (async) unshare(0x62040200) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x4000800) (async) 949.88326ms ago: executing program 0 (id=3373): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="00000000000000b70300000000000085000000ee000000b7000000000000009500000100001a0000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000abcad53a4930450d66a36667a031d63145bd6ad9b1041d4d39b2dc1ed8653d20990fdfea9f23a8dbfe400a532ddd8696b3d51b35af440bb640e232eeb4ec95001ecae77424ad15aae919835f32ba6c63200f1cb4f35a1ebb69d6499f554162fabc0c7e29721255f806fdcdc3ae519c156f"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071122d0000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, 0x0, 0x4004) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 910.065447ms ago: executing program 4 (id=3374): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3001000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) (async) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x27) 719.337847ms ago: executing program 4 (id=3375): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x40, 0x101, 0x34, @dev={0xfe, 0x80, '\x00', 0x23}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x10, 0x8, 0x1000, 0xde41}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @local}, &(0x7f0000000200)=0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @multicast1}, &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0xf8, 0x1, 0x1, 0x40, @dev={0xfe, 0x80, '\x00', 0x3a}, @empty, 0x7, 0x40, 0x7, 0xcabd}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @private, @multicast1}, &(0x7f0000000580)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x7, 0xb7, 0x14, 0x3, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x67, 0x0, 0xb, 0x29, 0x0, @local, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0x1, [{0x1, 0xd, "24c9173637d9c2f0463d74"}, {0x2, 0x2}, {0x2, 0xb, "8769c1acf329285ed8"}]}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0xb, [0x1, 0x8]}, @rr={0x7, 0xf, 0x7e, [@multicast2, @loopback, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x80, 0x700, 0xa, 0xf21, {{0x19, 0x4, 0x0, 0x23, 0x64, 0x68, 0x0, 0x47, 0x4, 0x0, @empty, @empty, {[@cipso={0x86, 0x27, 0x3, [{0x7, 0x3, 'z'}, {0x6, 0xa, "e832f38bfdb019fa"}, {0x7, 0xa, "f8355e5ac3424a9f"}, {0x7, 0xa, "3b471c430b79fdcd"}]}, @timestamp_addr={0x44, 0x14, 0xc4, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x23}]}, @cipso={0x86, 0x11, 0x1, [{0x5, 0xb, "9a9680585e85e28c4c"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d4, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20044000}, 0x40084) r13 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r13, 0x111, 0x1, 0x798, 0x4) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r14, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b40)={r13, 0x10000, 0x7fff, 0x5}) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r16, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x90, r17, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r15) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(r18, &(0x7f0000001280)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000000ec0)={0x358, r19, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x11b459e1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x90, 0x3, "1c7f6e7f3f95871b992512c2f0b51a43e7bf489fd1a27c53061d54db74ffe8c75c1ef1d387283c5ee5386769ffec1f69d4ea3f6a21fca2a8ae84f131ba88512a895d9615369c736dad2349c789a390b91fd5457858caf891449572dc3902dfc2e2a2cbc84f5ee08ddf5fb5ce69986223542be984f325b731e75099bab48c1538c1b65e811bed8cff435bd739"}, @TIPC_NLA_NODE_ID={0x66, 0x3, "8901b2009670540ff8aae2b105b746ca92e061bcbcf15707ef14ee5e4991333817bd360c8073b58f2b854e8f948567b514a3e341d131ad39082113489a01fb5adc7f5485c4df1406683c4ec54ca671fd495eb99e395d8d64ef17fe8da9975624e8f8"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "6048c7c3734a4c929c363ca7d0f35a917fb94d1a765224f2f7bbdcb97939a4"}}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "762473389750a74ac108b35301f33bd5448182fb8166bcf3069b1c5e513c2c6537"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "761c1bf3b6d8278ceb2f9fa9c1c67403d520ab86aa061d8345b4c7662f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "924bf5cd6f911d096b9c399b7831eee54835f6be4c36ec1f47cbfdc999331e"}}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5a8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x838}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x4040081}, 0x80c5) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000012c0)={0x0, 0x1000, "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"}, &(0x7f0000002300)=0x1008) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002340)={r20, 0x4}, 0x8) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r15, &(0x7f0000002440)={&(0x7f0000002380), 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r19, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x90) (rerun: 32) ioctl$PPPIOCSCOMPRESS(r15, 0x4010744d) 545.064984ms ago: executing program 3 (id=3376): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x0, 0x8000) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='spi_setup\x00', r2}, 0x18) unshare(0x6020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 543.350329ms ago: executing program 4 (id=3377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x10000}}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x24}}, 0x20008801) 413.753498ms ago: executing program 4 (id=3378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_emit_ethernet(0x10b, &(0x7f0000000300)={@local, @empty, @void, {@mpls_mc={0x8848, {[], @generic="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"}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="100001800400048008000100004003"], 0x28}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x5}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x40, 0x8, 0x4, 0x406c, {{0x25, 0x4, 0x3, 0x4, 0x94, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xa9, 0x3, 0x7, [{@private=0xa010102, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf14}, {@empty, 0x6}, {@private=0xa010100, 0xfffff801}, {@remote, 0x4}, {@broadcast, 0x10}, {@private=0xa010100, 0x7ff}, {@multicast2, 0x7}]}, @cipso={0x86, 0x3b, 0x2, [{0x0, 0xe, "b932ae2a645a7f6034e8a28c"}, {0x6, 0x9, "0dfa1a63fbed24"}, {0x2, 0x8, "55b07cec76b7"}, {0x6, 0x12, "c92d1e05018aaf0c2ea10169a13c793f"}, {0x1, 0x4, "9c27"}]}]}}}}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r7}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00a689e6bb20000010110000000000000000000000000000000000ff0200000000000000000000000000014f144e200010907842060001"], 0x4a) 316.832059ms ago: executing program 1 (id=3379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x15}, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) close(r2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8081) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x10, 0x70bd2d, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0x7, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 100.988744ms ago: executing program 0 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x70bd20, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x30}]}}}]}, 0x40}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0xe}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x88}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}]}}], {0xfffffffffffffdd4}}, 0x58}, 0x1, 0x0, 0x0, 0x20044805}, 0x0) 47.781645ms ago: executing program 1 (id=3381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1b, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000010000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000000000850000942ef5fdffb60000000000000095971800fcffd73f000000000000000018110000000000000083c07e5a63fa88c5b2576bc76892f3dcd064641965798e1c699ac468f95ba385ee224e1c404e9e34ab428aa3a111dd255e9efda01d66610497e380d2d817acca9a2f3ab76919e9183f4bc2a64e06419e6cac7b9a703a053111350ef5e9795a10f563d487def952229e534f947358017379247cae9cf23d988a9970c00d1ac05c00000000b78909d645d4e3775f114e72c0521d85db2f61a57330d741166ba8cfad379b5c718132df47ce09e6c6066aa33d4fb888fac66c2a94102d758a336cbd", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1767, 0xc2, &(0x7f0000000440)=""/194, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)=[{0x3, 0x4, 0x10, 0x6}, {0x3, 0x2, 0x0, 0x9}, {0x0, 0x5, 0x5, 0xb}, {0x5, 0x3, 0x0, 0x5}, {0x3, 0x2, 0xb, 0x7}, {0x2, 0x5, 0xf, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@ifindex, 0xb, 0x1, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe99e}}, @call={0x85, 0x0, 0x0, 0xd4}, @ringbuf_query], &(0x7f00000008c0)='GPL\x00', 0x0, 0xdf, &(0x7f0000000900)=""/223, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xa, 0xfffff195, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a80)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000ac0)=[{0x2, 0x2, 0xf}, {0x0, 0x1, 0x3, 0x6}, {0x0, 0x4, 0x5, 0x1}]}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), 0xffffffffffffffff) r8 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x5, 0x3, 0x7, 0x800}, 0x10) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000300)={0x7c, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_auth_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@fallback=r0, r3, 0x2, 0x14, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shutdown(r0, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) 0s ago: executing program 0 (id=3382): syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500007400000000e36a82c115b52cca0e00019078ac1e0001ac1414aa05009078e00000e04600000000000000001100000a01010000000000830300070300443f3a55862dadc63c80030a010101000000000000000000000000ac14140000000000ac1414bb000000000000000000000000ac14140000000000ac"], 0x0) kernel console output (not intermixed with test programs): ctl cmd 1074025677 [ 210.264477][T13149] syzkaller1: linktype set to 778 [ 210.533493][T13168] delete_channel: no stack [ 210.538096][T13168] delete_channel: no stack [ 210.543026][T13168] delete_channel: no stack [ 210.547573][T13168] delete_channel: no stack [ 210.554001][T13168] delete_channel: no stack [ 210.565746][T13168] delete_channel: no stack [ 210.582120][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 210.596217][T13178] macvtap0: entered promiscuous mode [ 210.611601][T13178] batadv0: entered promiscuous mode [ 210.617020][T13178] macvtap0: entered allmulticast mode [ 210.625404][T13168] delete_channel: no stack [ 210.630286][T13168] delete_channel: no stack [ 210.630888][T13178] batadv0: entered allmulticast mode [ 210.637148][T13168] delete_channel: no stack [ 210.648864][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 210.650581][T13168] delete_channel: no stack [ 210.669672][T13168] delete_channel: no stack [ 210.679195][T13178] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 210.715670][T13181] batadv0: left allmulticast mode [ 210.721030][T13168] delete_channel: no stack [ 210.721159][T13168] delete_channel: no stack [ 210.721413][T13168] delete_channel: no stack [ 210.735891][T13181] batadv0: left promiscuous mode [ 210.739484][T13168] delete_channel: no stack [ 210.793240][T13168] delete_channel: no stack [ 210.806001][T13168] delete_channel: no stack [ 210.816905][T13168] delete_channel: no stack [ 210.821812][T13168] delete_channel: no stack [ 210.826635][T13168] delete_channel: no stack [ 210.833684][T13168] delete_channel: no stack [ 210.839221][T13168] delete_channel: no stack [ 210.845863][T13168] delete_channel: no stack [ 210.854296][T13168] delete_channel: no stack [ 210.864397][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 210.876512][T13188] netlink: 'syz.2.2029': attribute type 15 has an invalid length. [ 210.886335][T13168] delete_channel: no stack [ 210.893457][T13168] delete_channel: no stack [ 210.899271][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 210.908873][T13168] delete_channel: no stack [ 210.937128][T13168] delete_channel: no stack [ 210.943275][T13188] netlink: 'syz.2.2029': attribute type 15 has an invalid length. [ 210.955884][T13168] delete_channel: no stack [ 210.971880][T13168] delete_channel: no stack [ 211.006131][T13168] delete_channel: no stack [ 211.019605][T13168] delete_channel: no stack [ 211.037180][T13168] delete_channel: no stack [ 211.055658][T13168] delete_channel: no stack [ 211.073207][T13168] delete_channel: no stack [ 211.077823][T13168] delete_channel: no stack [ 211.112534][T13168] delete_channel: no stack [ 211.116039][T13203] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.132288][T13168] delete_channel: no stack [ 211.136967][T13168] delete_channel: no stack [ 211.163041][T13168] delete_channel: no stack [ 211.167650][T13168] delete_channel: no stack [ 211.197040][T13168] delete_channel: no stack [ 211.210390][T13168] delete_channel: no stack [ 211.218958][T13168] delete_channel: no stack [ 211.228977][T13212] tipc: Enabled bearer , priority 0 [ 211.247242][T13168] delete_channel: no stack [ 211.257461][T13168] delete_channel: no stack [ 211.269451][T13168] delete_channel: no stack [ 211.280845][T13168] delete_channel: no stack [ 211.285445][T13168] delete_channel: no stack [ 211.303712][T13168] delete_channel: no stack [ 211.308328][T13168] delete_channel: no stack [ 211.337786][T13168] delete_channel: no stack [ 211.352531][T13168] delete_channel: no stack [ 211.363492][T13212] tipc: Disabling bearer [ 211.382213][T13168] delete_channel: no stack [ 211.388609][T13168] delete_channel: no stack [ 211.396846][T13168] delete_channel: no stack [ 211.410170][T13168] delete_channel: no stack [ 211.414934][T13168] delete_channel: no stack [ 211.419688][T13168] delete_channel: no stack [ 211.427035][T13168] delete_channel: no stack [ 211.435036][T13168] delete_channel: no stack [ 211.445917][T13168] delete_channel: no stack [ 211.456731][T13168] delete_channel: no stack [ 211.465114][T13168] delete_channel: no stack [ 211.470430][T13168] delete_channel: no stack [ 211.572709][T13235] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 211.611932][T13240] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 211.627210][T13234] lo speed is unknown, defaulting to 1000 [ 211.684903][T13240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.701034][T13249] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 211.751082][T13249] netlink: 'syz.0.2049': attribute type 10 has an invalid length. [ 211.759244][T13249] veth0_macvtap: left promiscuous mode [ 211.765788][T13249] team0: Device veth0_macvtap failed to register rx_handler [ 211.867356][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2051'. [ 211.978376][T13261] sctp: [Deprecated]: syz.2.2052 (pid 13261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.978376][T13261] Use struct sctp_sack_info instead [ 212.341771][T13277] lo speed is unknown, defaulting to 1000 [ 212.533942][T13283] netlink: 'syz.2.2057': attribute type 11 has an invalid length. [ 212.661811][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'. [ 212.897588][T13291] syzkaller0: entered promiscuous mode [ 212.903256][T13291] syzkaller0: entered allmulticast mode [ 212.914175][T13293] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 212.922398][T13293] netlink: 'syz.2.2062': attribute type 2 has an invalid length. [ 212.936691][T13291] FAULT_INJECTION: forcing a failure. [ 212.936691][T13291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.950445][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.0.2061 Not tainted syzkaller #0 PREEMPT(full) [ 212.950492][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.950506][T13291] Call Trace: [ 212.950515][T13291] [ 212.950524][T13291] dump_stack_lvl+0x189/0x250 [ 212.950554][T13291] ? __pfx____ratelimit+0x10/0x10 [ 212.950585][T13291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.950609][T13291] ? __pfx__printk+0x10/0x10 [ 212.950636][T13291] ? __might_fault+0xb0/0x130 [ 212.950669][T13291] ? rcu_is_watching+0x15/0xb0 [ 212.950690][T13291] should_fail_ex+0x414/0x560 [ 212.950719][T13291] _copy_from_user+0x2d/0xb0 [ 212.950742][T13291] ___sys_recvmsg+0x12e/0x510 [ 212.950768][T13291] ? __pfx____sys_recvmsg+0x10/0x10 [ 212.950793][T13291] ? __fget_files+0x2a/0x420 [ 212.950810][T13291] ? rcu_is_watching+0x15/0xb0 [ 212.950838][T13291] ? __fget_files+0x3a0/0x420 [ 212.950862][T13291] do_recvmmsg+0x307/0x770 [ 212.950890][T13291] ? __pfx_do_recvmmsg+0x10/0x10 [ 212.950920][T13291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.950950][T13291] __x64_sys_recvmmsg+0x190/0x240 [ 212.950976][T13291] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 212.950999][T13291] ? rcu_is_watching+0x15/0xb0 [ 212.951021][T13291] ? rcu_is_watching+0x15/0xb0 [ 212.951043][T13291] do_syscall_64+0xfa/0x3b0 [ 212.951064][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.951084][T13291] ? clear_bhb_loop+0x60/0xb0 [ 212.951108][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.951128][T13291] RIP: 0033:0x7f1b0e78ebe9 [ 212.951147][T13291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.951167][T13291] RSP: 002b:00007f1b0f631038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.951197][T13291] RAX: ffffffffffffffda RBX: 00007f1b0e9b5fa0 RCX: 00007f1b0e78ebe9 [ 212.951213][T13291] RDX: 0000000000001b00 RSI: 0000200000005140 RDI: 0000000000000007 [ 212.951227][T13291] RBP: 00007f1b0f631090 R08: 0000000000000000 R09: 0000000000000000 [ 212.951240][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.951253][T13291] R13: 00007f1b0e9b6038 R14: 00007f1b0e9b5fa0 R15: 00007ffc25252278 [ 212.951278][T13291] [ 212.997280][T13295] syzkaller0: entered promiscuous mode [ 213.190745][T13295] syzkaller0: entered allmulticast mode [ 213.265439][ T5863] Bluetooth: hci4: link tx timeout [ 213.271216][ T5863] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 213.297805][T13306] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.2063'. [ 213.313997][T13301] syzkaller0: entered promiscuous mode [ 213.319522][T13301] syzkaller0: entered allmulticast mode [ 213.516850][T13309] batadv1: entered allmulticast mode [ 213.524028][T13309] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.580988][T13323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.686530][T13338] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 213.735071][T13338] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.766204][T13344] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:8 [ 213.769188][T13345] bond7: (slave ip6gretap1): making interface the new active one [ 213.782844][T13345] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 213.871514][T13338] veth19: entered promiscuous mode [ 213.913887][T13338] bond7: (slave veth19): Enslaving as an active interface with a down link [ 213.956144][T13345] erspan0: entered allmulticast mode [ 213.968918][T13345] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 214.038814][T13348] lo speed is unknown, defaulting to 1000 [ 214.080791][T13355] syzkaller0: entered promiscuous mode [ 214.085869][T13354] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 214.106742][T13355] syzkaller0: entered allmulticast mode [ 214.267897][T13363] syzkaller0: entered promiscuous mode [ 214.273786][T13363] syzkaller0: entered allmulticast mode [ 214.285181][T13367] syzkaller1: entered promiscuous mode [ 214.291265][T13367] syzkaller1: entered allmulticast mode [ 214.307800][T13373] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 214.316908][T13373] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 214.615951][T13392] netlink: 'syz.2.2089': attribute type 1 has an invalid length. [ 214.735526][T13392] bond5: entered promiscuous mode [ 214.752855][T13392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.774739][T13397] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 214.799789][T13393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.822628][T13393] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 214.835894][T13393] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 214.848387][T13393] bond5: (slave wireguard0): making interface the new active one [ 214.856600][T13393] wireguard0: entered promiscuous mode [ 214.864184][T13393] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 214.889782][T13411] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 214.908084][T13398] lo speed is unknown, defaulting to 1000 [ 214.921084][T13417] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 214.929607][T13417] netlink: 'syz.2.2094': attribute type 4 has an invalid length. [ 214.963414][T13417] __nla_validate_parse: 4 callbacks suppressed [ 214.963437][T13417] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2094'. [ 214.998452][T13417] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 215.023433][T13417] netlink: 'syz.2.2094': attribute type 4 has an invalid length. [ 215.031466][T13417] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2094'. [ 215.239716][T13436] syzkaller0: entered promiscuous mode [ 215.245569][T13436] syzkaller0: entered allmulticast mode [ 215.280297][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2099'. [ 215.292206][T13433] openvswitch: netlink: EtherType 0 is less than min 600 [ 215.350585][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 215.557286][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 215.674156][T13452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.690607][T13452] tipc: Enabling of bearer rejected, already enabled [ 215.753494][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2104'. [ 215.768640][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 215.781737][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.789587][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 215.802174][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.810452][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 215.826756][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.835353][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 215.846636][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 215.866209][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.876159][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.876717][T13461] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 215.887198][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.908582][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 215.909240][T13467] pimreg: left allmulticast mode [ 215.923031][T13459] openvswitch: netlink: Flow key attr not present in new flow. [ 216.052031][T13471] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 216.094911][T13478] vlan3: entered promiscuous mode [ 216.101582][T13478] team0: entered promiscuous mode [ 216.117359][T13480] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 216.138313][T13480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.647685][T13511] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 216.648970][T13509] syzkaller0: entered promiscuous mode [ 216.661524][T13509] syzkaller0: entered allmulticast mode [ 216.935192][T13522] vti0: entered promiscuous mode [ 216.954894][T13522] vti0: entered allmulticast mode [ 217.285888][T13558] syzkaller0: entered promiscuous mode [ 217.291726][T13558] syzkaller0: entered allmulticast mode [ 217.419787][T13573] netlink: 'syz.4.2144': attribute type 16 has an invalid length. [ 217.730835][T13605] lo speed is unknown, defaulting to 1000 [ 217.980885][T13602] lo speed is unknown, defaulting to 1000 [ 218.488033][T13639] unknown channel width for channel at 909000KHz? [ 218.509707][ T8321] IPVS: starting estimator thread 0... [ 218.608520][T13642] IPVS: using max 35 ests per chain, 84000 per kthread [ 218.720410][T13661] validate_nla: 64 callbacks suppressed [ 218.720431][T13661] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 218.774753][T13658] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.787274][T13658] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 218.798405][T13658] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 218.855589][T13667] syzkaller0: entered promiscuous mode [ 218.863079][T13667] syzkaller0: entered allmulticast mode [ 219.156152][T13682] syzkaller0: entered promiscuous mode [ 219.170023][T13682] syzkaller0: entered allmulticast mode [ 219.183778][T13682] FAULT_INJECTION: forcing a failure. [ 219.183778][T13682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.197995][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.2.2175 Not tainted syzkaller #0 PREEMPT(full) [ 219.198026][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.198040][T13682] Call Trace: [ 219.198048][T13682] [ 219.198057][T13682] dump_stack_lvl+0x189/0x250 [ 219.198088][T13682] ? __pfx____ratelimit+0x10/0x10 [ 219.198119][T13682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.198144][T13682] ? __pfx__printk+0x10/0x10 [ 219.198171][T13682] ? __might_fault+0xb0/0x130 [ 219.198202][T13682] ? process_measurement+0x3d8/0x1a40 [ 219.198227][T13682] ? rcu_is_watching+0x15/0xb0 [ 219.198249][T13682] ? rcu_is_watching+0x15/0xb0 [ 219.198271][T13682] should_fail_ex+0x414/0x560 [ 219.198301][T13682] _copy_to_iter+0x575/0x16f0 [ 219.198329][T13682] ? __pfx__copy_to_iter+0x10/0x10 [ 219.198348][T13682] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 219.198377][T13682] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 219.198405][T13682] __skb_datagram_iter+0xf8/0x990 [ 219.198431][T13682] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 219.198462][T13682] skb_copy_datagram_iter+0xc5/0x230 [ 219.198490][T13682] netlink_recvmsg+0x2ab/0xa30 [ 219.198516][T13682] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.198535][T13682] ? unwind_next_frame+0xa5/0x2390 [ 219.198561][T13682] ? unwind_next_frame+0xa5/0x2390 [ 219.198583][T13682] ? aa_sock_msg_perm+0xf1/0x1d0 [ 219.198604][T13682] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 219.198626][T13682] ? security_socket_recvmsg+0x7e/0x2e0 [ 219.198650][T13682] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.198670][T13682] sock_recvmsg+0x22c/0x270 [ 219.198701][T13682] ____sys_recvmsg+0x1c9/0x460 [ 219.198729][T13682] ? __pfx_____sys_recvmsg+0x10/0x10 [ 219.198761][T13682] ? import_iovec+0x74/0xa0 [ 219.198784][T13682] ___sys_recvmsg+0x1b5/0x510 [ 219.198809][T13682] ? __pfx____sys_recvmsg+0x10/0x10 [ 219.198834][T13682] ? __fget_files+0x2a/0x420 [ 219.198851][T13682] ? rcu_is_watching+0x15/0xb0 [ 219.198880][T13682] ? __fget_files+0x3a0/0x420 [ 219.198903][T13682] do_recvmmsg+0x307/0x770 [ 219.198929][T13682] ? __pfx_do_recvmmsg+0x10/0x10 [ 219.198958][T13682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.198996][T13682] __x64_sys_recvmmsg+0x190/0x240 [ 219.199021][T13682] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 219.199043][T13682] ? rcu_is_watching+0x15/0xb0 [ 219.199066][T13682] ? rcu_is_watching+0x15/0xb0 [ 219.199089][T13682] do_syscall_64+0xfa/0x3b0 [ 219.199109][T13682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.199130][T13682] ? clear_bhb_loop+0x60/0xb0 [ 219.199154][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.199174][T13682] RIP: 0033:0x7f3d73b8ebe9 [ 219.199192][T13682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.199211][T13682] RSP: 002b:00007f3d74911038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 219.199232][T13682] RAX: ffffffffffffffda RBX: 00007f3d73db5fa0 RCX: 00007f3d73b8ebe9 [ 219.199247][T13682] RDX: 0000000000001b00 RSI: 0000200000005140 RDI: 0000000000000007 [ 219.199266][T13682] RBP: 00007f3d74911090 R08: 0000000000000000 R09: 0000000000000000 [ 219.199278][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.199291][T13682] R13: 00007f3d73db6038 R14: 00007f3d73db5fa0 R15: 00007ffd59c816e8 [ 219.199316][T13682] [ 219.633546][T13693] netlink: 'syz.1.2176': attribute type 4 has an invalid length. [ 220.152924][T13718] syzkaller0: entered promiscuous mode [ 220.158536][T13718] syzkaller0: entered allmulticast mode [ 220.207107][T13732] __nla_validate_parse: 111 callbacks suppressed [ 220.207128][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 220.510311][T13740] block nbd1: shutting down sockets [ 220.679752][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2196'. [ 220.696362][T13762] bridge0: entered promiscuous mode [ 220.704895][T13762] bridge0: port 1(macvlan4) entered blocking state [ 220.711732][ T5863] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 220.720967][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 220.724340][T13762] bridge0: port 1(macvlan4) entered disabled state [ 220.738183][T13762] macvlan4: entered allmulticast mode [ 220.744105][T13762] bridge0: entered allmulticast mode [ 220.751236][T13762] macvlan4: left allmulticast mode [ 220.756408][T13762] bridge0: left allmulticast mode [ 220.762246][T13762] bridge0: left promiscuous mode [ 220.789772][T13771] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 220.840868][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 220.853790][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 222.017648][T13831] tun0: tun_chr_ioctl cmd 2148045848 [ 222.030138][T13833] tun0: tun_chr_ioctl cmd 21731 [ 222.082769][T13835] syzkaller1: entered promiscuous mode [ 222.090885][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 222.101452][T13835] syzkaller1: entered allmulticast mode [ 222.107353][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 222.132700][T13838] netlink: 'syz.3.2219': attribute type 18 has an invalid length. [ 222.236121][T13846] syzkaller0: entered promiscuous mode [ 222.254292][T13846] syzkaller0: entered allmulticast mode [ 222.267099][T13855] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2223'. [ 222.286407][T13855] net_ratelimit: 27 callbacks suppressed [ 222.286426][T13855] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.359678][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2223'. [ 222.372483][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 222.394904][T13861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2222'. [ 222.404565][T13857] lo speed is unknown, defaulting to 1000 [ 222.488009][T13863] !: renamed from dummy0 (while UP) [ 222.661709][T13869] lo speed is unknown, defaulting to 1000 [ 222.744116][T13875] bond0: (slave batadv0): Releasing backup interface [ 222.766250][T13875] bond5: left allmulticast mode [ 222.780008][T13875] bridge0: port 1(bond5) entered disabled state [ 223.076581][T13894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 223.243081][T13901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.250423][T13901] IPv6: NLM_F_CREATE should be set when creating new route [ 223.257674][T13901] IPv6: NLM_F_CREATE should be set when creating new route [ 223.284040][T13901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.545301][T13928] netlink: 'syz.1.2236': attribute type 3 has an invalid length. [ 223.685981][T13941] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 223.693509][T13941] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 223.990848][T13955] netlink: 'syz.4.2243': attribute type 10 has an invalid length. [ 224.004114][T13955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.017834][T13955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.029372][T13962] netlink: 'syz.2.2246': attribute type 1 has an invalid length. [ 224.039416][T13962] netlink: 'syz.2.2246': attribute type 6 has an invalid length. [ 224.047841][T13962] netlink: 'syz.2.2246': attribute type 3 has an invalid length. [ 224.079658][T13962] netlink: 'syz.2.2246': attribute type 1 has an invalid length. [ 224.081690][T13959] tipc: Enabled bearer , priority 0 [ 224.091407][T13962] netlink: 'syz.2.2246': attribute type 6 has an invalid length. [ 224.109684][T13962] netlink: 'syz.2.2246': attribute type 3 has an invalid length. [ 224.114867][T13959] syzkaller0: entered promiscuous mode [ 224.124955][T13959] syzkaller0: entered allmulticast mode [ 224.160727][T13959] tipc: Resetting bearer [ 224.178956][T13958] tipc: Resetting bearer [ 224.222027][T13958] tipc: Disabling bearer [ 224.266060][T13970] lo speed is unknown, defaulting to 1000 [ 224.428061][T13977] lo speed is unknown, defaulting to 1000 [ 224.915651][T14022] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 225.205697][T14022] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.968168][T14058] __nla_validate_parse: 6 callbacks suppressed [ 225.968190][T14058] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2270'. [ 225.997040][T14057] netlink: 'syz.0.2271': attribute type 3 has an invalid length. [ 226.116153][T14064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2272'. [ 226.125356][T14064] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 226.261909][T14068] lo speed is unknown, defaulting to 1000 [ 226.295443][T14082] netlink: 'syz.0.2277': attribute type 12 has an invalid length. [ 226.341854][T14082] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2277'. [ 226.552919][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2281'. [ 226.590294][T14086] lo speed is unknown, defaulting to 1000 [ 227.284058][T14117] syzkaller0: entered promiscuous mode [ 227.301790][T14117] syzkaller0: entered allmulticast mode [ 227.427879][T14126] k›*·]‘: entered promiscuous mode [ 227.582494][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2292'. [ 227.608747][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2291'. [ 227.652296][T14139] bond0: (slave rose0): Error: Device can not be enslaved while up [ 227.724027][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'. [ 227.852296][T14162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2297'. [ 227.861478][T14162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2297'. [ 227.870982][T14162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2297'. [ 228.057551][T14171] syz.1.2300: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.087934][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.1.2300 Not tainted syzkaller #0 PREEMPT(full) [ 228.087967][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.087982][T14171] Call Trace: [ 228.087990][T14171] [ 228.087999][T14171] dump_stack_lvl+0x189/0x250 [ 228.088033][T14171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.088060][T14171] ? __pfx__printk+0x10/0x10 [ 228.088087][T14171] ? lock_release+0x4b/0x3e0 [ 228.088129][T14171] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.088155][T14171] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 228.088181][T14171] warn_alloc+0x214/0x310 [ 228.088216][T14171] ? __pfx_warn_alloc+0x10/0x10 [ 228.088253][T14171] ? __get_vm_area_node+0x28f/0x300 [ 228.088281][T14171] ? packet_set_ring+0x6f4/0x2350 [ 228.088310][T14171] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 228.088356][T14171] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.088390][T14171] ? alloc_pages_mpol+0x3cd/0x4a0 [ 228.088420][T14171] ? packet_set_ring+0x6f4/0x2350 [ 228.088446][T14171] vzalloc_noprof+0xb2/0xf0 [ 228.088475][T14171] ? packet_set_ring+0x6f4/0x2350 [ 228.088500][T14171] packet_set_ring+0x6f4/0x2350 [ 228.088537][T14171] ? __pfx_packet_set_ring+0x10/0x10 [ 228.088562][T14171] ? lock_acquire+0x5f/0x360 [ 228.088594][T14171] ? rcu_is_watching+0x15/0xb0 [ 228.088616][T14171] ? lock_release+0x4b/0x3e0 [ 228.088644][T14171] ? __might_fault+0xb0/0x130 [ 228.088673][T14171] ? __might_fault+0xcc/0x130 [ 228.088702][T14171] ? _copy_from_user+0x94/0xb0 [ 228.088729][T14171] packet_setsockopt+0xc5a/0x12c0 [ 228.088757][T14171] ? __pfx_packet_setsockopt+0x10/0x10 [ 228.088784][T14171] ? file_init_path+0x3b/0x590 [ 228.088812][T14171] ? aa_sk_perm+0x81e/0x950 [ 228.088841][T14171] ? rcu_is_watching+0x15/0xb0 [ 228.088861][T14171] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.088890][T14171] ? lock_release+0x4b/0x3e0 [ 228.088920][T14171] ? __se_sys_futex+0x36f/0x400 [ 228.088950][T14171] ? aa_sock_opt_perm+0xff/0x1b0 [ 228.088971][T14171] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 228.088994][T14171] ? __pfx_packet_setsockopt+0x10/0x10 [ 228.089021][T14171] do_sock_setsockopt+0x179/0x1b0 [ 228.089046][T14171] __x64_sys_setsockopt+0x13f/0x1b0 [ 228.089070][T14171] do_syscall_64+0xfa/0x3b0 [ 228.089091][T14171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.089120][T14171] ? clear_bhb_loop+0x60/0xb0 [ 228.089144][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.089165][T14171] RIP: 0033:0x7f618798ebe9 [ 228.089184][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.089203][T14171] RSP: 002b:00007f6188779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.089227][T14171] RAX: ffffffffffffffda RBX: 00007f6187bb5fa0 RCX: 00007f618798ebe9 [ 228.089243][T14171] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000049 [ 228.089256][T14171] RBP: 00007f6187a11e19 R08: 000000000000001c R09: 0000000000000000 [ 228.089276][T14171] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 228.089289][T14171] R13: 00007f6187bb6038 R14: 00007f6187bb5fa0 R15: 00007fffcead8988 [ 228.089314][T14171] [ 228.089385][T14171] Mem-Info: [ 228.423146][T14171] active_anon:5571 inactive_anon:0 isolated_anon:0 [ 228.423146][T14171] active_file:3771 inactive_file:39889 isolated_file:0 [ 228.423146][T14171] unevictable:768 dirty:546 writeback:0 [ 228.423146][T14171] slab_reclaimable:12287 slab_unreclaimable:156755 [ 228.423146][T14171] mapped:29543 shmem:1357 pagetables:980 [ 228.423146][T14171] sec_pagetables:0 bounce:0 [ 228.423146][T14171] kernel_misc_reclaimable:0 [ 228.423146][T14171] free:1254933 free_pcp:21674 free_cma:0 [ 228.541912][T14171] Node 0 active_anon:22184kB inactive_anon:0kB active_file:15084kB inactive_file:159356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118072kB dirty:2184kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13876kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.587918][T14171] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.633464][T14187] syzkaller1: entered promiscuous mode [ 228.639385][T14187] syzkaller1: entered allmulticast mode [ 228.649101][T14171] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.710216][T14171] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 228.742403][T14171] Node 0 DMA32 free:1115564kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22140kB inactive_anon:0kB active_file:15084kB inactive_file:157788kB unevictable:1536kB writepending:284kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:65084kB local_pcp:39916kB free_cma:0kB [ 228.784454][T14189] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.793865][T14171] lowmem_reserve[]: 0 0 1 1 1 [ 228.798646][T14171] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 228.838692][T14171] lowmem_reserve[]: 0 0 0 0 0 [ 228.845458][T14171] Node 1 Normal free:3888412kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21444kB local_pcp:13448kB free_cma:0kB [ 228.877017][ T30] audit: type=1800 audit(1756476171.532:6): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2306" name="memory.events" dev="tmpfs" ino=2291 res=0 errno=0 [ 228.877077][ T30] audit: type=1804 audit(1756476171.532:7): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2306" name="/newroot/439/memory.events" dev="tmpfs" ino=2291 res=1 errno=0 [ 228.947659][T14171] lowmem_reserve[]: 0 0 0 0 0 [ 228.957772][T14171] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 228.992371][T14171] Node 0 DMA32: 2*4kB (UM) 593*8kB (U) 684*16kB (UM) 2095*32kB (UME) 606*64kB (UME) 75*128kB (UME) 51*256kB (UM) 20*512kB (UME) 24*1024kB (UME) 9*2048kB (UM) 224*4096kB (UM) = 1114928kB [ 229.047092][T14171] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 229.086805][T14171] Node 1 Normal: 197*4kB (U) 43*8kB (UME) 45*16kB (UME) 45*32kB (UME) 19*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3888412kB [ 229.114217][T14171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.125624][T14171] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 229.142736][T14171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.153610][T14171] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 229.209406][T14171] 46264 total pagecache pages [ 229.221745][T14171] 0 pages in swap cache [ 229.225949][T14171] Free swap = 124996kB [ 229.244856][T14171] Total swap = 124996kB [ 229.259345][T14171] 2097051 pages RAM [ 229.263323][T14171] 0 pages HighMem/MovableOnly [ 229.270400][T14171] 425667 pages reserved [ 229.274752][T14171] 0 pages cma reserved [ 229.422903][T14236] validate_nla: 4 callbacks suppressed [ 229.422923][T14236] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 229.453515][T14236] lo speed is unknown, defaulting to 1000 [ 229.674285][T14244] xt_l2tp: unknown flags: 51 [ 230.055778][T14263] v: renamed from ip6_vti0 [ 230.278787][T14278] netlink: 'syz.3.2328': attribute type 2 has an invalid length. [ 230.317732][T14278] k›*·]‘: entered promiscuous mode [ 230.361802][T14287] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 230.446803][T14278] erspan0: left allmulticast mode [ 230.504950][T14305] netlink: 'syz.1.2336': attribute type 21 has an invalid length. [ 230.515462][T14278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.534719][T14278] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.545525][T14278] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 230.609102][T14302] sit0: entered promiscuous mode [ 230.623811][T14308] netlink: 'syz.4.2337': attribute type 7 has an invalid length. [ 230.636631][T14302] sit0: entered allmulticast mode [ 230.646942][T14278] veth0_to_team: entered promiscuous mode [ 230.667043][T14278] veth0_to_team: entered allmulticast mode [ 231.025381][T14348] syzkaller1: entered promiscuous mode [ 231.049047][T14348] syzkaller1: entered allmulticast mode [ 231.095510][T14350] tipc: Enabled bearer , priority 0 [ 231.107815][T14353] __nla_validate_parse: 9 callbacks suppressed [ 231.107834][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 231.123670][T14350] syzkaller0: entered promiscuous mode [ 231.131335][T14350] syzkaller0: entered allmulticast mode [ 231.140161][T14353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2348'. [ 231.151572][T14350] tipc: Resetting bearer [ 231.159561][T14349] tipc: Resetting bearer [ 231.171574][T14349] tipc: Disabling bearer [ 231.245521][T14355] netlink: 'syz.2.2349': attribute type 2 has an invalid length. [ 231.270439][T14355] netlink: 'syz.2.2349': attribute type 8 has an invalid length. [ 231.281872][T14357] netlink: 'syz.4.2350': attribute type 23 has an invalid length. [ 231.290235][T14355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2349'. [ 231.311845][T14358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.803995][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 231.870041][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 232.167004][T12820] IPVS: starting estimator thread 0... [ 232.229424][T14414] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 232.239170][T14414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2368'. [ 232.259961][T14416] IPVS: using max 37 ests per chain, 88800 per kthread [ 232.288206][T14422] lo speed is unknown, defaulting to 1000 [ 232.515604][T14427] geneve0: entered allmulticast mode [ 232.680353][T14432] lo speed is unknown, defaulting to 1000 [ 232.802169][T14445] syz.2.2375 uses old SIOCAX25GETINFO [ 232.808405][T14445] IPVS: Error connecting to the multicast addr [ 233.102553][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 233.124392][T14451] lo speed is unknown, defaulting to 1000 [ 233.209597][T14456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2378'. [ 233.429783][T14474] syzkaller0: entered promiscuous mode [ 233.458620][T14474] syzkaller0: entered allmulticast mode [ 233.530828][T14468] lo speed is unknown, defaulting to 1000 [ 233.558367][T14478] tipc: Enabling of bearer rejected, already enabled [ 233.789794][T14487] batadv_slave_0: entered promiscuous mode [ 233.796335][T14487] batadv_slave_0: entered allmulticast mode [ 233.976965][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 233.990829][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 234.062125][T14500] tipc: Enabled bearer , priority 0 [ 234.082100][T14501] syzkaller0: entered promiscuous mode [ 234.087788][T14501] syzkaller0: entered allmulticast mode [ 234.095836][T14500] syzkaller0: entered promiscuous mode [ 234.101513][T14500] syzkaller0: entered allmulticast mode [ 234.125357][T14500] tipc: Resetting bearer [ 234.142878][T14500] tipc: Disabling bearer [ 234.413995][T14509] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.484576][T14519] lo speed is unknown, defaulting to 1000 [ 234.886052][T14537] syzkaller0: entered promiscuous mode [ 234.903264][T14537] syzkaller0: entered allmulticast mode [ 235.278776][T14558] tipc: Enabled bearer , priority 0 [ 235.286178][T14562] syzkaller0: entered promiscuous mode [ 235.291875][T14562] syzkaller0: entered allmulticast mode [ 235.332277][T14562] delete_channel: no stack [ 235.338334][T14565] erspan0: entered promiscuous mode [ 235.355214][T14562] tipc: Resetting bearer [ 235.376830][T14562] tipc: Disabling bearer [ 235.531160][T14575] netlink: 'syz.2.2413': attribute type 4 has an invalid length. [ 235.749067][T14591] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 235.807648][T14591] syzkaller0: entered promiscuous mode [ 235.814675][T14591] syzkaller0: entered allmulticast mode [ 235.901937][T14601] netlink: 'syz.3.2422': attribute type 10 has an invalid length. [ 235.935735][T14604] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.270056][T14610] nbd1: detected capacity change from 0 to 127 [ 236.282978][ T5863] block nbd1: Receive control failed (result -32) [ 236.282978][ T5871] block nbd1: Receive control failed (result -32) [ 236.308916][T14632] dvmrp0: entered allmulticast mode [ 236.339579][T14638] __nla_validate_parse: 13 callbacks suppressed [ 236.339598][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2434'. [ 236.506577][T14654] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 236.548788][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'. [ 236.563975][T14654] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.757677][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 236.766872][T14675] netlink: 'syz.3.2443': attribute type 5 has an invalid length. [ 236.775241][T14675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2443'. [ 236.789427][T14675] geneve4: entered promiscuous mode [ 236.795436][T14675] geneve4: entered allmulticast mode [ 236.802671][ T9649] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 236.811486][ T9649] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 236.828473][ T9649] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 236.837435][ T9649] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 237.201737][T14693] netlink: 'syz.3.2450': attribute type 14 has an invalid length. [ 237.233776][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 237.254915][T14696] lo speed is unknown, defaulting to 1000 [ 237.397277][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2455'. [ 237.732176][T14731] netlink: 'syz.3.2460': attribute type 11 has an invalid length. [ 237.786698][T14733] tipc: Enabled bearer , priority 0 [ 237.798734][T14733] syzkaller0: entered promiscuous mode [ 237.811391][T14733] syzkaller0: entered allmulticast mode [ 237.912762][T14734] tipc: Resetting bearer [ 237.941361][T14734] tipc: Disabling bearer [ 238.006196][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'. [ 238.035973][T14748] netlink: 'syz.1.2465': attribute type 21 has an invalid length. [ 238.176927][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 238.189560][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2467'. [ 238.255368][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 238.319585][T14767] vlan0: entered promiscuous mode [ 238.326467][T14767] bridge0: entered promiscuous mode [ 238.962281][T14802] tipc: Enabled bearer , priority 0 [ 238.970268][T14802] syzkaller0: entered promiscuous mode [ 238.976124][T14802] syzkaller0: entered allmulticast mode [ 239.028915][T14802] tipc: Resetting bearer [ 239.040249][T14801] tipc: Resetting bearer [ 239.062547][T14801] tipc: Disabling bearer [ 239.145297][T14808] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 239.287554][T14821] lo speed is unknown, defaulting to 1000 [ 239.526275][T14837] lo speed is unknown, defaulting to 1000 [ 240.003866][T14867] syzkaller0: entered promiscuous mode [ 240.009702][T14867] syzkaller0: entered allmulticast mode [ 240.094119][T14853] lo speed is unknown, defaulting to 1000 [ 240.281559][T14869] lo speed is unknown, defaulting to 1000 [ 241.006393][T14915] netlink: 'syz.4.2512': attribute type 30 has an invalid length. [ 241.210683][T14914] netlink: 'syz.2.2513': attribute type 303 has an invalid length. [ 241.374171][T14927] __nla_validate_parse: 12 callbacks suppressed [ 241.374194][T14927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2516'. [ 241.430221][T14927] 8021q: VLANs not supported on ipvlan1 [ 241.468110][T14929] batadv1: entered promiscuous mode [ 241.479581][T14931] sch_fq: defrate 0 ignored. [ 241.499061][T14927] macsec1: entered promiscuous mode [ 241.505981][T14927] macsec1: entered allmulticast mode [ 241.601714][ T30] audit: type=1800 audit(1756476184.292:8): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2519" name=CB dev="tmpfs" ino=2653 res=0 errno=0 [ 241.788121][T14950] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2524'. [ 241.849324][T14952] lo speed is unknown, defaulting to 1000 [ 242.218801][T14973] syzkaller1: entered promiscuous mode [ 242.231188][T14973] syzkaller1: entered allmulticast mode [ 242.453925][T14988] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 242.482343][T14984] lo speed is unknown, defaulting to 1000 [ 242.494627][T14988] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.534509][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 242.606324][T14992] veth7: entered promiscuous mode [ 242.826678][T15004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2538'. [ 242.878270][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 242.982937][T14993] lo speed is unknown, defaulting to 1000 [ 243.049298][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2533'. [ 243.068937][T15015] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 243.245149][T15019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2542'. [ 243.374054][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2544'. [ 243.430559][T15030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2544'. [ 243.506986][T15028] hsr_slave_1 (unregistering): left promiscuous mode [ 244.315551][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 244.327903][T15069] sit0: left promiscuous mode [ 244.344958][T15069] sit0: left allmulticast mode [ 244.350816][T15069] !: left promiscuous mode [ 244.355549][T15069] !: left allmulticast mode [ 244.379367][T15069] bond5: left promiscuous mode [ 244.384868][T15069] wireguard0: left promiscuous mode [ 244.574645][T15091] lo speed is unknown, defaulting to 1000 [ 245.118372][T15119] tipc: Enabled bearer , priority 0 [ 245.126333][T15119] syzkaller0: entered promiscuous mode [ 245.135668][T15119] syzkaller0: entered allmulticast mode [ 245.186787][T15119] tipc: Resetting bearer [ 245.283317][T15118] tipc: Resetting bearer [ 245.296292][T15138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.334032][T15118] tipc: Disabling bearer [ 245.988892][T15185] IPVS: length: 24 != 55320 [ 246.163151][T15196] lo speed is unknown, defaulting to 1000 [ 246.338836][T15207] tipc: Enabling of bearer rejected, failed to enable media [ 246.499529][T15202] lo speed is unknown, defaulting to 1000 [ 246.947560][T15231] __nla_validate_parse: 113 callbacks suppressed [ 246.947583][T15231] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2606'. [ 247.044700][T15236] vxcan1: mtu less than device minimum [ 247.084947][T15235] gretap1: entered promiscuous mode [ 247.091776][T15237] tipc: Enabling of bearer rejected, already enabled [ 247.119679][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 247.149666][T15235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2608'. [ 247.182945][T15237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2609'. [ 247.256720][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2612'. [ 247.316321][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 247.354265][T15252] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 247.362613][T15252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.428333][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2616'. [ 247.488404][T15254] lo speed is unknown, defaulting to 1000 [ 247.647357][T15268] bond7: (slave erspan0): Releasing active interface [ 247.716102][T15268] ip6gretap1: entered promiscuous mode [ 247.771126][T15268] bond0: (slave syz_tun): Releasing backup interface [ 247.807750][T15268] syz_tun: left promiscuous mode [ 247.835078][T15268] bond0: (slave dummy0): Releasing backup interface [ 247.853952][T15268] dummy0: left promiscuous mode [ 247.868389][T15268] team0: Port device geneve0 removed [ 247.887147][T15268] bond3: (slave geneve3): Releasing active interface [ 247.899695][T15268] bond4: (slave veth11): Releasing active interface [ 247.911442][T15268] batman_adv: batadv0: Removing interface: gretap1 [ 247.923354][T15268] bond7: (slave ip6gretap1): Releasing active interface [ 247.930762][T15268] bond7: (slave ip6gretap1): the permanent HWaddr of slave - aa:61:8b:20:e3:7b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 247.951672][T15268] ip6gretap1: left promiscuous mode [ 247.962141][T15268] bond7: (slave veth19): Releasing active interface [ 248.007236][T15274] netlink: 'syz.1.2621': attribute type 21 has an invalid length. [ 248.022024][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 248.064322][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.079011][T15274] netlink: 'syz.1.2621': attribute type 21 has an invalid length. [ 248.088728][ T9649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.107811][ T9649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.121158][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 248.143248][ T9649] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.346655][T15293] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 248.475988][T15299] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 248.528078][T15302] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 248.568696][T15299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.641266][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 248.653090][T15302] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.670635][T15304] bond0: (slave geneve2): making interface the new active one [ 248.696090][T15304] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 248.776473][ T3582] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.789687][ T3582] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.839117][ T3582] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.875025][ T3582] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.946877][T15323] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 248.995613][T15326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.012106][T15326] tipc: Failed to remove unknown binding: 66,1,1/0:1177401792/1177401794 [ 249.052556][T15332] sit0: entered promiscuous mode [ 249.062110][T15332] netlink: 'syz.3.2636': attribute type 1 has an invalid length. [ 249.117982][T15335] 8021q: adding VLAN 0 to HW filter on device bond10 [ 249.127404][T15335] bridge0: port 1(bond10) entered blocking state [ 249.134491][T15335] bridge0: port 1(bond10) entered disabled state [ 249.142277][T15335] bond10: entered allmulticast mode [ 249.150936][T15335] bond10: entered promiscuous mode [ 249.218915][T15343] sit0: left promiscuous mode [ 249.241945][T15343] veth0_to_team: left promiscuous mode [ 249.247698][T15343] veth0_to_team: left allmulticast mode [ 249.254216][T15343] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 249.261618][T15343] tipc: Resetting bearer [ 249.267840][T15343] syzkaller0: left promiscuous mode [ 249.273705][T15343] syzkaller0: left allmulticast mode [ 249.284478][T15343] macvtap0: left promiscuous mode [ 249.289997][T15343] macvtap0: left allmulticast mode [ 249.295335][T15343] batadv1: left allmulticast mode [ 249.303737][T15343] veth19: left promiscuous mode [ 249.311068][T15343] geneve4: left promiscuous mode [ 249.316183][T15343] geneve4: left allmulticast mode [ 249.340843][ T9649] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 249.356234][ T9649] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 249.375258][ T9649] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 249.396709][ T9649] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 249.823946][T15325] tipc: Failed to remove unknown binding: 66,1,1/0:1177401792/1177401794 [ 249.842308][T15325] tipc: Failed to remove unknown binding: 66,1,1/0:1177401792/1177401794 [ 249.904845][T15379] netlink: 'syz.0.2647': attribute type 8 has an invalid length. [ 249.922074][T15375] lo speed is unknown, defaulting to 1000 [ 249.944178][T15377] vlan0: entered promiscuous mode [ 249.984245][T15379] netlink: 'syz.0.2647': attribute type 41 has an invalid length. [ 250.314468][T15398] netlink: 'syz.2.2649': attribute type 83 has an invalid length. [ 250.387405][T15398] lo speed is unknown, defaulting to 1000 [ 250.418645][T15407] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.576947][T15421] netlink: 'syz.4.2658': attribute type 4 has an invalid length. [ 250.588300][T15421] netlink: 'syz.4.2658': attribute type 4 has an invalid length. [ 250.708547][T15418] syzkaller0: entered promiscuous mode [ 250.714675][T15418] syzkaller0: entered allmulticast mode [ 250.729252][T15421] lo speed is unknown, defaulting to 1000 [ 250.872356][T15423] lo speed is unknown, defaulting to 1000 [ 251.298260][T15440] lo speed is unknown, defaulting to 1000 [ 251.360610][T15423] syzkaller1: entered promiscuous mode [ 251.366275][T15423] syzkaller1: entered allmulticast mode [ 251.518040][T15441] lo speed is unknown, defaulting to 1000 [ 251.651407][T15458] bridge0: port 3(batadv1) entered blocking state [ 251.658181][T15458] bridge0: port 3(batadv1) entered disabled state [ 251.665051][T15458] batadv1: entered allmulticast mode [ 251.672012][T15458] batadv1: entered promiscuous mode [ 251.726373][T15454] lo speed is unknown, defaulting to 1000 [ 252.168275][ T9644] batman_adv: batadv1: IGMP Querier appeared [ 252.174790][ T9644] batman_adv: batadv1: MLD Querier appeared [ 252.289383][T15479] __nla_validate_parse: 10 callbacks suppressed [ 252.289405][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 252.378904][T15470] syzkaller0: entered promiscuous mode [ 252.388252][T15470] syzkaller0: entered allmulticast mode [ 252.415508][T15477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2672'. [ 252.773930][T15505] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2680'. [ 252.843259][T15497] lo speed is unknown, defaulting to 1000 [ 253.272042][T15538] validate_nla: 3 callbacks suppressed [ 253.272064][T15538] netlink: 'syz.4.2689': attribute type 1 has an invalid length. [ 253.469446][T15538] 8021q: adding VLAN 0 to HW filter on device bond9 [ 253.532677][T15547] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2691'. [ 253.603962][T15549] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2692'. [ 253.615782][T15554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2693'. [ 253.646824][T15554] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2693'. [ 253.657072][T15549] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2692'. [ 253.762929][T15556] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2694'. [ 253.802990][T15560] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.2694'. [ 254.372744][T15600] sctp: [Deprecated]: syz.0.2704 (pid 15600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.372744][T15600] Use struct sctp_sack_info instead [ 256.052770][T15643] bridge_slave_0: default FDB implementation only supports local addresses [ 256.094133][T15648] netlink: 'syz.2.2719': attribute type 1 has an invalid length. [ 256.100243][T15649] C: renamed from team_slave_0 [ 256.118505][T15649] netlink: 'syz.0.2717': attribute type 4 has an invalid length. [ 256.131933][T15649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 256.227143][T15652] bond9: (slave geneve3): making interface the new active one [ 256.258915][T15652] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 256.268952][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.289186][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.333560][T15648] 8021q: adding VLAN 0 to HW filter on device bond9 [ 256.349052][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.363843][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.484897][T15664] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 256.507551][T15664] pim6reg1: entered promiscuous mode [ 256.513121][T15664] pim6reg1: entered allmulticast mode [ 257.444754][T15596] Set syz1 is full, maxelem 65536 reached [ 258.092683][T15708] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 258.162467][T15710] tipc: Enabling of bearer rejected, already enabled [ 258.174163][T15710] syzkaller0: entered promiscuous mode [ 258.179692][T15710] syzkaller0: entered allmulticast mode [ 258.223817][T15713] netlink: 'syz.2.2738': attribute type 2 has an invalid length. [ 258.246385][T15713] __nla_validate_parse: 5 callbacks suppressed [ 258.246406][T15713] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2738'. [ 258.268651][ T30] audit: type=1804 audit(1756476200.942:9): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2740" name="/newroot/507/cgroup.controllers" dev="tmpfs" ino=2636 res=1 errno=0 [ 258.300817][ T30] audit: type=1800 audit(1756476200.942:10): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2740" name="cgroup.controllers" dev="tmpfs" ino=2636 res=0 errno=0 [ 258.357650][T15722] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 258.386576][T15722] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2743'. [ 258.655581][T15737] lo speed is unknown, defaulting to 1000 [ 259.175753][T15775] tipc: Enabled bearer , priority 0 [ 259.208843][T15762] lo speed is unknown, defaulting to 1000 [ 259.395207][T15778] tipc: Disabling bearer [ 259.543305][T15790] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2758'. [ 259.573982][T15763] lo speed is unknown, defaulting to 1000 [ 260.046475][T15808] bond5: (slave wireguard0): Releasing backup interface [ 260.078945][T15808] bond9: (slave geneve3): Releasing active interface [ 260.134972][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 260.163679][T15812] team0: Mode changed to "loadbalance" [ 260.174276][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 260.324450][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 260.340787][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 260.486952][T15831] siw: device registration error -23 [ 260.531534][T15831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2767'. [ 260.863823][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 261.160444][T15856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2774'. [ 261.275122][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.282811][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.378618][T15867] lo speed is unknown, defaulting to 1000 [ 261.740242][T15883] bond4: (slave geneve3): Opening slave failed [ 262.224795][T15919] netlink: 'syz.2.2789': attribute type 1 has an invalid length. [ 262.227484][T15917] siw: device registration error -23 [ 262.287582][T15917] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2786'. [ 262.373621][T15919] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 262.407475][T15923] lo speed is unknown, defaulting to 1000 [ 322.712238][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.686099][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2792'. [ 324.789268][T15941] lo speed is unknown, defaulting to 1000 [ 325.076270][T15950] nbd: device at index 4 is going down [ 325.098181][T15945] lo speed is unknown, defaulting to 1000 [ 325.171062][T15952] netlink: 'syz.2.2798': attribute type 21 has an invalid length. [ 325.282569][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2799'. [ 325.329363][T15958] lo speed is unknown, defaulting to 1000 [ 325.588575][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2802'. [ 325.685067][T15981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2800'. [ 325.694472][T15972] IPVS: Unknown mcast interface: wg0 [ 325.927917][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 325.973617][ T5871] block nbd2: Receive control failed (result -32) [ 326.427706][T16006] tipc: Enabled bearer , priority 0 [ 326.464228][T16006] syzkaller0: entered promiscuous mode [ 326.500371][T16006] syzkaller0: entered allmulticast mode [ 326.517614][T16006] tipc: Resetting bearer [ 326.532768][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2810'. [ 326.742841][T16022] sctp: [Deprecated]: syz.1.2813 (pid 16022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.742841][T16022] Use struct sctp_sack_info instead [ 326.803376][T16023] sctp: [Deprecated]: syz.1.2813 (pid 16023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.803376][T16023] Use struct sctp_sack_info instead [ 327.123507][T16034] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 327.171602][T16034] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.200274][T16002] tipc: Resetting bearer [ 327.234792][T16002] tipc: Disabling bearer [ 327.249671][T16034] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 327.320672][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.327995][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.335575][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.343406][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.351274][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.586279][T16040] lo speed is unknown, defaulting to 1000 [ 327.738218][ T5852] syz_tun (unregistering): left allmulticast mode [ 327.755845][T16053] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 327.869689][T16063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2825'. [ 327.935348][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 327.945108][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 328.096304][T16076] lo speed is unknown, defaulting to 1000 [ 328.126136][T16040] chnl_net:caif_netlink_parms(): no params data found [ 328.295812][T16040] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.303412][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.314035][T16040] bridge_slave_0: entered allmulticast mode [ 328.321449][T16040] bridge_slave_0: entered promiscuous mode [ 328.335294][T16040] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.342695][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.350619][T16040] bridge_slave_1: entered allmulticast mode [ 328.362947][T16040] bridge_slave_1: entered promiscuous mode [ 328.389149][T16090] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2832'. [ 328.417061][T16040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.432601][T16040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.467696][T16040] team0: Port device team_slave_0 added [ 328.484003][T16040] team0: Port device team_slave_1 added [ 328.583529][T16040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.591725][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.619207][T16040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.648956][T16040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.660217][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.688295][T16040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.718190][T16097] delete_channel: no stack [ 328.780927][T16040] hsr_slave_0: entered promiscuous mode [ 328.795290][T16040] hsr_slave_1: entered promiscuous mode [ 328.881088][T16101] netlink: zone id is out of range [ 328.898471][T16101] netlink: zone id is out of range [ 328.919008][T16101] netlink: zone id is out of range [ 328.933425][T16101] netlink: zone id is out of range [ 328.955931][T16101] netlink: zone id is out of range [ 328.973553][T16101] netlink: zone id is out of range [ 329.010861][T16101] netlink: zone id is out of range [ 329.016039][T16101] netlink: zone id is out of range [ 329.025098][T16101] netlink: zone id is out of range [ 329.032629][T16101] netlink: zone id is out of range [ 329.077708][T16110] syzkaller1: entered promiscuous mode [ 329.083678][T16110] syzkaller1: entered allmulticast mode [ 329.122982][T16110] nbd: socks must be embedded in a SOCK_ITEM attr [ 329.214118][T16120] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 329.239073][T16120] 8021q: adding VLAN 0 to HW filter on device bond10 [ 329.363477][T16129] team0: Mode changed to "loadbalance" [ 329.432477][ T5863] Bluetooth: hci5: command tx timeout [ 329.506684][T16130] batadv_slave_0: left promiscuous mode [ 329.516102][T16130] batadv_slave_0: left allmulticast mode [ 329.525427][T16130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.558188][T16130] macvlan0: left promiscuous mode [ 329.573953][T16130] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 329.582288][T16130] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 329.605178][T16130] wireguard0: left promiscuous mode [ 329.611065][T16130] wireguard0: left allmulticast mode [ 329.622909][T16130] bridge2: left promiscuous mode [ 329.627911][T16130] bridge2: left allmulticast mode [ 329.638618][T16130] vti0: left promiscuous mode [ 329.643975][T16130] vti0: left allmulticast mode [ 329.660756][T16130] macsec1: left promiscuous mode [ 329.665859][T16130] macsec1: left allmulticast mode [ 329.672371][T16130] veth7: left promiscuous mode [ 329.688891][ T9647] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.709659][ T9647] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.724579][ T9647] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.749221][ T9647] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.766319][T16040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.777192][T16040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.795206][T16040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.808924][T16108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.819064][T16040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.827400][T16108] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 329.847535][T16108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.873635][T16108] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 329.894281][T16108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.902239][T16152] __nla_validate_parse: 6 callbacks suppressed [ 329.902260][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 329.917800][T16108] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 329.926459][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2852'. [ 329.936061][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.944961][T16108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.955812][T16108] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 329.969870][T16108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 329.975861][T16108] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 329.987396][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.998850][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.006072][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.026044][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.033218][ T9647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.075975][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 330.124298][T16162] netlink: 'syz.1.2856': attribute type 2 has an invalid length. [ 330.180947][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 330.215385][T16162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.224340][T16162] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.264371][T16162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2856'. [ 330.274260][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 330.375117][T16180] syzkaller0: entered promiscuous mode [ 330.424215][T16180] syzkaller0: entered allmulticast mode [ 330.446864][T16180] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 330.545206][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.588233][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 330.611210][T16040] veth0_vlan: entered promiscuous mode [ 330.623313][T16040] veth1_vlan: entered promiscuous mode [ 330.651675][T16040] veth0_macvtap: entered promiscuous mode [ 330.664594][T16040] veth1_macvtap: entered promiscuous mode [ 330.676682][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 330.683345][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.697181][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.716110][ T9648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.738421][ T9648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.748246][ T9648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.766939][ T9648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.825832][ T9649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.845959][ T9649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.876797][ T9647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.885690][ T9647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.215553][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 331.225436][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 331.926492][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.935572][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.944297][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.957340][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.966321][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.049403][T16268] lo speed is unknown, defaulting to 1000 [ 332.050114][T16272] tunl0: Master is either lo or non-ether device [ 332.356065][T16268] chnl_net:caif_netlink_parms(): no params data found [ 332.413913][T16291] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 332.454230][T16268] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.461527][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.469089][T16268] bridge_slave_0: entered allmulticast mode [ 332.477036][T16268] bridge_slave_0: entered promiscuous mode [ 332.485391][T16268] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.493149][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.500547][T16268] bridge_slave_1: entered allmulticast mode [ 332.508193][T16268] bridge_slave_1: entered promiscuous mode [ 332.555831][T16268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.587264][T16268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.669256][T16268] team0: Port device team_slave_0 added [ 332.680544][T16268] team0: Port device team_slave_1 added [ 332.715848][T16268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.723538][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.750868][T16268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.766832][T16268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.774151][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.805612][T16268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.859576][T16268] hsr_slave_0: entered promiscuous mode [ 332.867492][T16268] hsr_slave_1: entered promiscuous mode [ 332.879753][T16268] debugfs: 'hsr0' already exists in 'hsr' [ 332.886153][T16268] Cannot create hsr debugfs directory [ 333.108321][T16268] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.299604][T16268] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.326067][T16301] lo speed is unknown, defaulting to 1000 [ 333.377635][T16268] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.478763][T16268] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.593676][T16268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.603747][T16268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.613706][T16268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.623786][T16268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.707746][T16268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.726088][T16268] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.743815][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.751039][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.785171][T16325] lo speed is unknown, defaulting to 1000 [ 333.794514][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.801711][ T9649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.991096][ T5871] Bluetooth: hci0: command tx timeout [ 334.062125][T16268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.198950][T16268] veth0_vlan: entered promiscuous mode [ 334.253447][T16268] veth1_vlan: entered promiscuous mode [ 334.382892][T16268] veth0_macvtap: entered promiscuous mode [ 334.418703][T16268] veth1_macvtap: entered promiscuous mode [ 334.487853][T16268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.524007][T16345] vlan0: entered promiscuous mode [ 334.550620][T16345] rdma_rxe: rxe_newlink: failed to add lo [ 334.576154][T16268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.614428][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.646158][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.685259][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.730507][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.913695][T16366] __nla_validate_parse: 138 callbacks suppressed [ 334.913716][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'. [ 334.961973][T16368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2909'. [ 334.995064][ T9647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.024106][ T9647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.106830][ T9647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.107561][ T30] audit: type=1800 audit(1756476277.792:11): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2911" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2849 res=0 errno=0 [ 335.133200][ T9647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.184407][T16375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2912'. [ 335.234455][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2912'. [ 335.288406][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 335.330798][T16377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 335.765588][T16393] pim6reg: entered allmulticast mode [ 335.810231][T16391] tipc: Enabled bearer , priority 0 [ 335.822680][T16391] tipc: Resetting bearer [ 335.829197][T16393] pim6reg: left allmulticast mode [ 335.882943][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 335.908492][T16390] tipc: Disabling bearer [ 335.936781][T16399] macsec1: entered promiscuous mode [ 335.960174][T16399] macvlan1: entered promiscuous mode [ 335.983862][T16399] macvlan1: left promiscuous mode [ 336.054501][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.065965][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.074929][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.081928][ T51] Bluetooth: hci0: command tx timeout [ 336.097332][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.110673][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.205680][T16404] lo speed is unknown, defaulting to 1000 [ 336.223155][T16415] netlink: 'syz.0.2922': attribute type 1 has an invalid length. [ 336.246819][T16418] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 336.266571][T16415] netlink: 'syz.0.2922': attribute type 1 has an invalid length. [ 336.360485][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.368095][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.517205][T16433] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 336.560162][T16418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.572545][T16418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.692368][T16433] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 336.708395][ T9651] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.773221][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'. [ 336.775618][ T9651] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.827377][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'. [ 336.904912][ T9651] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.037859][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2929'. [ 337.054801][T16445] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 337.095834][T16445] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 337.150059][ T9651] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.186782][T16449] macvlan2: entered promiscuous mode [ 337.202534][T16449] macvlan2: entered allmulticast mode [ 337.352317][T16460] sit0: entered promiscuous mode [ 337.357480][T16460] netlink: 'syz.4.2933': attribute type 1 has an invalid length. [ 337.469627][T16461] syzkaller1: entered promiscuous mode [ 337.475900][T16461] syzkaller1: entered allmulticast mode [ 337.598354][T16404] chnl_net:caif_netlink_parms(): no params data found [ 337.703030][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.720563][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.728579][T16404] bridge_slave_0: entered allmulticast mode [ 337.736189][T16404] bridge_slave_0: entered promiscuous mode [ 337.747006][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.758018][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.770100][T16404] bridge_slave_1: entered allmulticast mode [ 337.777178][T16404] bridge_slave_1: entered promiscuous mode [ 337.829162][ T30] audit: type=1804 audit(1756476280.512:12): pid=16498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2941" name="/newroot/20/cgroup.controllers" dev="tmpfs" ino=125 res=1 errno=0 [ 337.846059][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.886355][ T30] audit: type=1800 audit(1756476280.512:13): pid=16498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2941" name="cgroup.controllers" dev="tmpfs" ino=125 res=0 errno=0 [ 337.917391][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.919676][ T30] audit: type=1800 audit(1756476280.552:14): pid=16498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2941" name="cgroup.controllers" dev="tmpfs" ino=125 res=0 errno=0 [ 337.997433][T16404] team0: Port device team_slave_0 added [ 338.019241][T16404] team0: Port device team_slave_1 added [ 338.115751][T16508] lo speed is unknown, defaulting to 1000 [ 338.152297][ T5871] Bluetooth: hci2: command tx timeout [ 338.152339][ T5863] Bluetooth: hci0: command tx timeout [ 338.171388][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.178419][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.210266][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.227279][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.234745][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.270529][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.414706][T16404] hsr_slave_0: entered promiscuous mode [ 338.430769][T16404] hsr_slave_1: entered promiscuous mode [ 338.448494][T16404] debugfs: 'hsr0' already exists in 'hsr' [ 338.460217][T16404] Cannot create hsr debugfs directory [ 338.942668][T16540] netlink: 'syz.4.2952': attribute type 5 has an invalid length. [ 339.058529][T16404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.069011][T16404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.084113][T16404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.112281][T16404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.127240][T16542] tipc: Enabled bearer , priority 0 [ 339.135350][T16542] syzkaller0: entered promiscuous mode [ 339.146839][T16542] syzkaller0: entered allmulticast mode [ 339.172374][T16542] tipc: Resetting bearer [ 339.188075][T16541] tipc: Resetting bearer [ 339.196425][T16541] tipc: Disabling bearer [ 339.257990][T16404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.292892][T16404] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.308746][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.315877][ T9651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.329045][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.336187][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.554754][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.603797][T16564] netlink: 'syz.0.2958': attribute type 4 has an invalid length. [ 339.632293][T16564] netlink: 'syz.0.2958': attribute type 4 has an invalid length. [ 339.633795][T16404] veth0_vlan: entered promiscuous mode [ 339.661244][T16404] veth1_vlan: entered promiscuous mode [ 339.757073][T16568] lo speed is unknown, defaulting to 1000 [ 339.789626][T16404] veth0_macvtap: entered promiscuous mode [ 339.805842][T16404] veth1_macvtap: entered promiscuous mode [ 339.863190][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.906831][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.946879][ T9649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.975297][ T9649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.005365][ T9649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.049632][T16581] bond5: entered promiscuous mode [ 340.055474][ T9649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.075522][T16587] ip6gre1: entered promiscuous mode [ 340.128390][T16584] lo speed is unknown, defaulting to 1000 [ 340.197934][ T9649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.211008][ T9649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.234080][ T5863] Bluetooth: hci0: command tx timeout [ 340.234152][ T5871] Bluetooth: hci2: command tx timeout [ 340.284997][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.294170][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.428850][T16607] __nla_validate_parse: 6 callbacks suppressed [ 340.428870][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2971'. [ 340.457191][T16608] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 340.465496][T16608] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2916'. [ 340.474898][T16609] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 340.482779][T16609] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2916'. [ 340.705973][T16619] tipc: Enabled bearer , priority 0 [ 340.727192][T16619] syzkaller0: entered promiscuous mode [ 340.735172][T16619] syzkaller0: entered allmulticast mode [ 340.787971][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 340.876128][T16618] tipc: Resetting bearer [ 340.899390][T16618] tipc: Disabling bearer [ 341.027765][T16641] lo speed is unknown, defaulting to 1000 [ 341.080570][T16634] "syz.2.2979" (16634) uses obsolete ecb(arc4) skcipher [ 341.132044][T16648] netlink: 'syz.4.2983': attribute type 2 has an invalid length. [ 341.208087][T16652] unsupported nlmsg_type 40 [ 341.215207][T16654] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003 [ 341.225330][T16654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2985'. [ 341.240947][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2985'. [ 341.442088][T16663] tipc: Started in network mode [ 341.447245][T16663] tipc: Node identity 5a72fa74e133, cluster identity 4711 [ 341.470210][T16663] tipc: Enabled bearer , priority 0 [ 341.506965][T16663] syzkaller0: entered promiscuous mode [ 341.526894][T16663] syzkaller0: entered allmulticast mode [ 341.679229][T16663] tipc: Resetting bearer [ 341.735544][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2990'. [ 341.927436][T16660] tipc: Resetting bearer [ 342.068424][T16660] tipc: Disabling bearer [ 342.112708][T16705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2999'. [ 342.129447][T16703] lo speed is unknown, defaulting to 1000 [ 342.164898][T16705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2999'. [ 342.189751][T16705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2999'. [ 342.344601][ T5871] Bluetooth: hci2: command tx timeout [ 342.530406][T16718] tipc: Enabled bearer , priority 0 [ 342.542284][T16718] syzkaller0: entered promiscuous mode [ 342.554005][T16718] syzkaller0: entered allmulticast mode [ 342.629571][T16718] tipc: Resetting bearer [ 342.643341][T16717] tipc: Resetting bearer [ 342.793050][T16717] tipc: Disabling bearer [ 342.914734][T16728] lo speed is unknown, defaulting to 1000 [ 343.108348][T16761] tipc: Enabled bearer , priority 0 [ 343.129590][T16761] syzkaller0: entered promiscuous mode [ 343.138018][T16761] syzkaller0: entered allmulticast mode [ 343.165639][T16761] tipc: Resetting bearer [ 343.173734][T16759] tipc: Resetting bearer [ 343.186403][T16759] tipc: Disabling bearer [ 343.261811][T16763] lo speed is unknown, defaulting to 1000 [ 343.296393][T16771] bridge0: entered allmulticast mode [ 343.302799][T16771] bridge_slave_1: left allmulticast mode [ 343.305821][T16766] net_ratelimit: 14 callbacks suppressed [ 343.305841][T16766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.308648][T16771] bridge_slave_1: left promiscuous mode [ 343.334551][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.358131][T16771] bridge_slave_0: left allmulticast mode [ 343.371715][T16771] bridge_slave_0: left promiscuous mode [ 343.377607][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.419930][T16771] bridge0 (unregistering): left allmulticast mode [ 343.469273][T16773] bond0: (slave bond_slave_1): Releasing backup interface [ 343.991900][T16797] netlink: 'syz.0.3025': attribute type 49 has an invalid length. [ 343.995294][T16799] netlink: 'syz.0.3025': attribute type 49 has an invalid length. [ 344.244946][ T30] audit: type=1107 audit(1756476286.932:15): pid=16817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/æJ<.Y®Rrjþ§•á2l›¸²¹¤%Þ' [ 344.262494][T16811] lo speed is unknown, defaulting to 1000 [ 344.389936][ T5871] Bluetooth: hci2: command tx timeout [ 344.828979][T16850] bond0: Error: Cannot enslave bond to itself. [ 344.977750][T16860] tc_dump_action: action bad kind [ 345.010277][T16860] netlink: 'syz.0.3044': attribute type 21 has an invalid length. [ 345.117689][T16871] netlink: zone id is out of range [ 345.126098][T16871] netlink: zone id is out of range [ 345.146010][T16871] netlink: zone id is out of range [ 345.157549][T16871] netlink: zone id is out of range [ 345.177435][T16871] netlink: zone id is out of range [ 345.187566][T16871] netlink: zone id is out of range [ 345.212249][T16871] netlink: zone id is out of range [ 345.217981][T16871] netlink: get zone limit has 8 unknown bytes [ 345.242136][T16874] lo speed is unknown, defaulting to 1000 [ 345.252179][ T92] IPVS: starting estimator thread 0... [ 345.340044][T16884] IPVS: using max 45 ests per chain, 108000 per kthread [ 345.743084][T16914] lo speed is unknown, defaulting to 1000 [ 345.883778][T16920] ip6erspan0: entered allmulticast mode [ 345.993830][T16922] tun0: tun_chr_ioctl cmd 1074025675 [ 345.999199][T16922] tun0: persist enabled [ 346.033195][T16922] tun0: tun_chr_ioctl cmd 1074025675 [ 346.043711][T16922] tun0: persist disabled [ 346.133244][T16933] __nla_validate_parse: 17 callbacks suppressed [ 346.133266][T16933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3064'. [ 346.200718][T16933] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3064'. [ 346.238877][T16933] netlink: 'syz.4.3064': attribute type 5 has an invalid length. [ 346.260089][T16933] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3064'. [ 346.354350][T16933] lo speed is unknown, defaulting to 1000 [ 346.515535][T16951] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3067'. [ 346.535151][T16947] lo speed is unknown, defaulting to 1000 [ 346.597069][T16951] 0ªX¹¦À: renamed from caif0 [ 346.613874][T16951] 0ªX¹¦À: entered allmulticast mode [ 346.619671][T16951] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 347.319731][T16980] netlink: 'syz.3.3075': attribute type 83 has an invalid length. [ 347.395697][T16990] syzkaller1: entered allmulticast mode [ 347.420976][T16980] lo speed is unknown, defaulting to 1000 [ 347.596900][T16995] lo speed is unknown, defaulting to 1000 [ 347.677156][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3079'. [ 347.681160][T17004] netlink: 'syz.2.3080': attribute type 32 has an invalid length. [ 347.701157][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 347.711240][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 347.722283][T17004] (unnamed net_device) (uninitialized): option coupled_control: invalid value (64) [ 347.747751][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3079'. [ 347.763039][T16997] netlink: 'syz.4.3077': attribute type 13 has an invalid length. [ 347.788994][T16997] netlink: 'syz.4.3077': attribute type 17 has an invalid length. [ 347.794128][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 347.856027][T16997] erspan0: left promiscuous mode [ 347.905412][T16997] sit0: left promiscuous mode [ 347.922859][T16997] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.983509][T17008] erspan0: entered promiscuous mode [ 347.989062][T17008] macvtap1: entered promiscuous mode [ 348.000406][T17008] macvtap1: entered allmulticast mode [ 348.006925][T17008] erspan0: entered allmulticast mode [ 348.350442][ T13] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 348.404373][T17033] lo speed is unknown, defaulting to 1000 [ 348.722141][T17041] netlink: 'syz.3.3090': attribute type 39 has an invalid length. [ 348.769643][T17041] veth0_macvtap: left promiscuous mode [ 348.888551][T17048] netlink: 'syz.4.3093': attribute type 15 has an invalid length. [ 348.910193][T17048] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3093'. [ 348.935262][T17053] pim6reg: left allmulticast mode [ 349.044314][T17062] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 349.052184][T17060] lo speed is unknown, defaulting to 1000 [ 349.226701][T17066] netlink: 'syz.0.3099': attribute type 5 has an invalid length. [ 349.561041][T17088] netem: incorrect ge model size [ 349.566053][T17088] netem: change failed [ 349.657790][T17094] bridge_slave_0: left promiscuous mode [ 349.663693][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.684253][T17094] bridge_slave_1: left allmulticast mode [ 349.700090][T17094] bridge_slave_1: left promiscuous mode [ 349.730373][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.752782][T17094] team0: Port device team_slave_0 removed [ 349.781196][T17094] team0: Port device team_slave_1 removed [ 349.787612][T17094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.813617][T17094] bond2: (slave ip6gretap1): Removing an active aggregator [ 349.824227][T17094] bond2: (slave ip6gretap1): Releasing backup interface [ 349.847057][T17094] team0: Port device bridge2 removed [ 349.853172][T17094] batadv1: left allmulticast mode [ 349.859721][T17094] batadv1: left promiscuous mode [ 349.865055][T17094] bridge0: port 3(batadv1) entered disabled state [ 349.871695][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.879203][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.886624][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.898286][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.906168][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.922211][T17100] lo speed is unknown, defaulting to 1000 [ 350.029053][T17116] Bluetooth: MGMT ver 1.23 [ 350.048645][T17111] lo speed is unknown, defaulting to 1000 [ 350.487135][T17111] chnl_net:caif_netlink_parms(): no params data found [ 350.651894][T17111] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.673260][T17111] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.695318][T17111] bridge_slave_0: entered allmulticast mode [ 350.713569][T17111] bridge_slave_0: entered promiscuous mode [ 350.728450][T17147] tipc: Started in network mode [ 350.733714][T17147] tipc: Node identity fe9024e30ff1, cluster identity 4711 [ 350.741328][T17147] tipc: Enabled bearer , priority 0 [ 350.750997][T17150] syzkaller0: entered promiscuous mode [ 350.756593][T17150] syzkaller0: entered allmulticast mode [ 350.765212][T17111] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.772460][T17111] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.781009][T17111] bridge_slave_1: entered allmulticast mode [ 350.787826][T17111] bridge_slave_1: entered promiscuous mode [ 350.815617][T17147] tipc: Resetting bearer [ 350.826303][T17111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.838982][T17146] tipc: Resetting bearer [ 350.846592][T17146] tipc: Disabling bearer [ 350.858049][T17111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.913705][T17111] team0: Port device team_slave_0 added [ 350.922332][T17153] netlink: 'syz.4.3123': attribute type 1 has an invalid length. [ 350.930657][T17111] team0: Port device team_slave_1 added [ 350.973979][T17111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.981391][T17111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.009610][T17111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.024674][T17111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.033651][T17111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.114470][T17111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.426036][T17111] hsr_slave_0: entered promiscuous mode [ 351.433721][T17111] hsr_slave_1: entered promiscuous mode [ 351.441767][T17111] debugfs: 'hsr0' already exists in 'hsr' [ 351.448646][T17111] Cannot create hsr debugfs directory [ 351.654156][T17111] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.697393][T17111] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.756378][T17111] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.848182][T17111] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.991431][ T5871] Bluetooth: hci3: command tx timeout [ 352.056653][T17111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.296336][T17196] __nla_validate_parse: 6 callbacks suppressed [ 352.296356][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 352.317624][T17111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.340894][T17111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.364105][T17111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.491863][T17203] lo speed is unknown, defaulting to 1000 [ 352.589659][T17213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3136'. [ 352.611049][T17213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3136'. [ 352.663850][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 352.726363][T17215] tipc: Started in network mode [ 352.737088][T17215] tipc: Node identity , cluster identity 4711 [ 352.745213][T17215] tipc: Failed to obtain node identity [ 352.755967][T17215] tipc: Enabling of bearer rejected, failed to enable media [ 352.780840][T17218] syzkaller0: entered promiscuous mode [ 352.786892][T17218] syzkaller0: entered allmulticast mode [ 352.911919][T17111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.003258][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 353.029676][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 353.036404][T17111] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.077882][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.085200][ T9644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.121846][T17230] netlink: 'syz.2.3142': attribute type 1 has an invalid length. [ 353.122760][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.129698][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 353.145833][ T9644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.479448][T17241] vlan2: entered allmulticast mode [ 353.487928][T17241] bridge_slave_0: entered allmulticast mode [ 353.579472][T17263] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3149'. [ 353.662519][T17263] IPVS: Error connecting to the multicast addr [ 353.706638][T17111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.755390][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 353.777040][T17111] veth0_vlan: entered promiscuous mode [ 353.802476][T17111] veth1_vlan: entered promiscuous mode [ 353.838850][T17111] veth0_macvtap: entered promiscuous mode [ 353.862485][T17111] veth1_macvtap: entered promiscuous mode [ 353.893227][T17111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.908687][T17284] bond0: Unable to set down delay as MII monitoring is disabled [ 353.925864][T17111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.962993][ T9648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.985035][ T9648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.998926][ T9648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.023059][ T9648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.070717][ T5863] Bluetooth: hci3: command tx timeout [ 354.084188][T17290] lo speed is unknown, defaulting to 1000 [ 354.100493][ T9649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.113427][ T9649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.146287][ T9647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.167429][ T9647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.259388][T17294] netlink: 'syz.3.3157': attribute type 2 has an invalid length. [ 354.371159][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 354.380320][T17296] nbd: socks must be embedded in a SOCK_ITEM attr [ 354.894434][T17331] netlink: 'syz.3.3168': attribute type 11 has an invalid length. [ 355.119683][T17342] net_ratelimit: 2 callbacks suppressed [ 355.119702][T17342] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 355.155417][T17345] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072567586830) [ 355.188103][T17342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.198340][T17345] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 355.720892][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.728509][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.747298][T17383] nbd: couldn't find device at index 4 [ 355.880927][T17391] netlink: 'syz.4.3182': attribute type 5 has an invalid length. [ 356.077054][T17375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.091089][T17375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.151877][ T5863] Bluetooth: hci3: command 0x040f tx timeout [ 356.255187][ T9649] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.274540][ T9649] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.285322][ T9649] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.313614][ T9649] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.568018][T17414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.918827][T17436] netlink: 'syz.3.3193': attribute type 30 has an invalid length. [ 357.272414][T17462] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 357.569351][T17484] __nla_validate_parse: 15 callbacks suppressed [ 357.569379][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 357.618773][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 357.646191][T17484] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 357.685436][T17484] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3210'. [ 357.774095][T17484] nbd: socks must be embedded in a SOCK_ITEM attr [ 357.784196][T17484] block nbd3: shutting down sockets [ 357.948959][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3209'. [ 358.034259][T17516] tipc: Started in network mode [ 358.044051][T17516] tipc: Node identity cecdae36d54, cluster identity 4711 [ 358.052721][T17516] tipc: Enabled bearer , priority 0 [ 358.060124][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 358.076283][T17511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.091616][T17488] lo speed is unknown, defaulting to 1000 [ 358.097738][T17515] syzkaller0: entered promiscuous mode [ 358.117288][T17515] syzkaller0: entered allmulticast mode [ 358.230533][ T5871] Bluetooth: hci3: command 0x040f tx timeout [ 358.329166][T17516] tipc: Resetting bearer [ 358.345440][T17516] tipc: Disabling bearer [ 358.439122][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 358.503645][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 358.504330][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3224'. [ 358.670485][T17551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.928176][T17556] lo speed is unknown, defaulting to 1000 [ 359.090093][T17573] veth1_to_bridge: mtu less than device minimum [ 359.162080][T17576] netlink: 'syz.0.3233': attribute type 6 has an invalid length. [ 359.210401][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 359.261308][T17581] nbd: must specify a device to reconfigure [ 359.281882][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 359.475991][T17587] sctp: [Deprecated]: syz.1.3237 (pid 17587) Use of int in maxseg socket option. [ 359.475991][T17587] Use struct sctp_assoc_value instead [ 359.635626][T17595] netlink: 'syz.1.3240': attribute type 1 has an invalid length. [ 359.638568][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.652458][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.664273][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.675759][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.690161][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.732872][T17595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.788243][T17589] netlink: 'syz.0.3238': attribute type 12 has an invalid length. [ 359.813575][T17594] lo speed is unknown, defaulting to 1000 [ 360.252575][T17617] pim6reg1: entered promiscuous mode [ 360.258051][T17617] pim6reg1: entered allmulticast mode [ 360.328165][ T5863] Bluetooth: hci3: command 0x040f tx timeout [ 360.444138][T17624] netlink: 'syz.1.3242': attribute type 1 has an invalid length. [ 360.454026][T17624] netlink: 'syz.1.3242': attribute type 1 has an invalid length. [ 360.636339][T17635] tipc: Enabled bearer , priority 0 [ 360.658050][T17635] syzkaller0: entered promiscuous mode [ 360.676362][T17635] syzkaller0: entered allmulticast mode [ 360.719440][T17643] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 360.775972][T17635] syzkaller0: mtu greater than device maximum [ 360.791345][T17594] chnl_net:caif_netlink_parms(): no params data found [ 360.814698][T17633] tipc: Resetting bearer [ 360.836112][T17633] tipc: Disabling bearer [ 360.911870][T17594] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.919064][T17594] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.926819][T17594] bridge_slave_0: entered allmulticast mode [ 360.936237][T17594] bridge_slave_0: entered promiscuous mode [ 360.944116][T17594] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.952013][T17594] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.959394][T17594] bridge_slave_1: entered allmulticast mode [ 360.966627][T17594] bridge_slave_1: entered promiscuous mode [ 361.002655][T17594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.016725][T17594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.055526][T17594] team0: Port device team_slave_0 added [ 361.058333][T17665] netlink: 'syz.1.3259': attribute type 11 has an invalid length. [ 361.072237][T17594] team0: Port device team_slave_1 added [ 361.105315][T17594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.115070][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.142422][T17594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.155649][T17594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.164086][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.191041][T17594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.237350][T17594] hsr_slave_0: entered promiscuous mode [ 361.247070][T17594] hsr_slave_1: entered promiscuous mode [ 361.255246][T17594] debugfs: 'hsr0' already exists in 'hsr' [ 361.261452][T17594] Cannot create hsr debugfs directory [ 361.339477][T17669] vlan2: entered allmulticast mode [ 361.345187][T17669] bond2: entered allmulticast mode [ 361.588242][T17594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.602396][T17594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.617765][T17594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.637554][T17594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.724037][T17594] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.731256][T17594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.738708][T17594] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.745889][T17594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.766423][ T5863] Bluetooth: hci1: command tx timeout [ 361.786952][T17698] sctp: [Deprecated]: syz.2.3268 (pid 17698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.786952][T17698] Use struct sctp_sack_info instead [ 361.839172][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.860260][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.924453][T17594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.987010][T17594] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.005484][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.012737][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.045236][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.052486][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.432936][T17594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.726868][T17730] tun0: tun_chr_ioctl cmd 2148553947 [ 362.865245][T17738] __nla_validate_parse: 16 callbacks suppressed [ 362.865268][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 363.109044][T17744] macsec1: entered promiscuous mode [ 363.117574][T17744] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 363.137282][T17744] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 363.263270][T17594] veth0_vlan: entered promiscuous mode [ 363.277105][T17594] veth1_vlan: entered promiscuous mode [ 363.326953][T17594] veth0_macvtap: entered promiscuous mode [ 363.352146][T17750] dvmrp8: entered allmulticast mode [ 363.360448][T17594] veth1_macvtap: entered promiscuous mode [ 363.402355][T17754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3281'. [ 363.434455][T17594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.474476][T17594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.517401][ T3582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.541824][ T3582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.563261][ T9645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.588308][T17763] tc_dump_action: action bad kind [ 363.608301][ T9645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.628329][T17765] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 363.731702][ T9645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.755343][ T9645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.831871][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.833397][ T5863] Bluetooth: hci1: command tx timeout [ 363.854417][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.932157][T17777] vlan2: entered allmulticast mode [ 363.952535][T17777] hsr0: entered allmulticast mode [ 363.957768][T17777] hsr_slave_0: entered allmulticast mode [ 363.965185][T17777] hsr_slave_1: entered allmulticast mode [ 363.987747][T17784] vlan2: entered allmulticast mode [ 364.017583][T17783] netlink: 'syz.4.3229': attribute type 7 has an invalid length. [ 364.041387][T17774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.066936][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 364.145424][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 364.187980][T17774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.258220][T17800] netlink: 'syz.1.3291': attribute type 11 has an invalid length. [ 364.276412][T17800] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3291'. [ 364.325961][T17774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.355791][T17810] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3291'. [ 364.369293][T17807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.437502][T17774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.497914][T17812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.535517][T17815] tipc: Enabling of bearer rejected, failed to enable media [ 364.559387][T17815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.573994][T17815] bond0: (slave rose0): Enslaving as an active interface with an up link [ 364.634882][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 364.690951][ T9647] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.718425][ T9649] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.756480][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3299'. [ 364.763331][ T9649] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.799125][ T9649] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.830631][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'. [ 364.864940][T17830] bridge_slave_1: left allmulticast mode [ 364.885771][T17830] bridge_slave_1: left promiscuous mode [ 364.900159][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.913085][T17830] bridge_slave_0: left allmulticast mode [ 364.920524][T17830] bridge_slave_0: left promiscuous mode [ 364.926518][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.995668][T17834] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 365.614219][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.621872][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.910418][ T5863] Bluetooth: hci1: command tx timeout [ 366.056158][T17861] netlink: zone id is out of range [ 366.069040][T17861] netlink: zone id is out of range [ 366.082732][T17861] netlink: zone id is out of range [ 366.109033][T17862] netlink: del zone limit has 4 unknown bytes [ 366.151002][T17861] netlink: set zone limit has 4 unknown bytes [ 366.598206][T17840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.726035][T17840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.597912][T17868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3311'. [ 367.665330][ T9645] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.684247][ T9645] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.740616][ T9645] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.778276][ T9645] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.871121][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 367.895762][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3314'. [ 367.923738][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3314'. [ 367.992966][ T5863] Bluetooth: hci1: command tx timeout [ 368.135493][T17894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.221412][T17894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.296321][T17894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.388028][T17904] lo speed is unknown, defaulting to 1000 [ 368.431811][T17894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.592144][ T9649] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.635078][ T9647] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.660863][ T9647] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.683026][ T9647] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.866043][T17922] syzkaller1: entered promiscuous mode [ 368.906534][T17922] syzkaller1: entered allmulticast mode [ 368.972873][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 368.982802][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 368.986949][T17926] lo speed is unknown, defaulting to 1000 [ 369.002603][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 369.021322][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 369.049483][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 369.297536][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 369.375828][T17938] sctp: [Deprecated]: syz.3.3329 (pid 17938) Use of int in max_burst socket option. [ 369.375828][T17938] Use struct sctp_assoc_value instead [ 369.394769][T17943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.402165][T17943] IPv6: NLM_F_CREATE should be set when creating new route [ 369.409497][T17943] IPv6: NLM_F_CREATE should be set when creating new route [ 369.657220][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'. [ 369.688671][T17960] netlink: 'syz.2.3335': attribute type 2 has an invalid length. [ 369.713167][T17961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.720491][T17961] IPv6: NLM_F_CREATE should be set when creating new route [ 369.725283][T17960] k›*·]‘: entered promiscuous mode [ 369.799227][T17961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.807096][T17960] 0ªX¹¦À: left allmulticast mode [ 369.823667][T17960] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 369.904998][T17962] pim6reg: entered allmulticast mode [ 369.995216][T17968] pim6reg: left allmulticast mode [ 370.342320][T17989] ip6gre1: entered allmulticast mode [ 370.545306][T17995] lo speed is unknown, defaulting to 1000 [ 370.569384][T17999] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 370.676686][T18000] veth3: entered promiscuous mode [ 371.464883][T18025] lo speed is unknown, defaulting to 1000 [ 371.485637][T18031] netlink: 'syz.2.3355': attribute type 6 has an invalid length. [ 371.515977][T18031] netlink: 'syz.2.3355': attribute type 12 has an invalid length. [ 371.584652][T18041] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 371.658257][T18035] lo speed is unknown, defaulting to 1000 [ 372.527482][T18085] lo speed is unknown, defaulting to 1000 [ 372.955844][T18104] lo speed is unknown, defaulting to 1000 [ 373.559704][T18125] __nla_validate_parse: 11 callbacks suppressed [ 373.559728][T18125] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3383'. [ 373.604359][T18130] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 373.617534][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 373.626892][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3384'. [ 373.664686][T18125] syzkaller0: entered promiscuous mode [ 373.670997][T18125] syzkaller0: entered allmulticast mode [ 373.681301][T18130] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 373.735660][T18138] netlink: 'syz.3.3386': attribute type 11 has an invalid length. [ 373.928042][T18138] tipc: Enabled bearer , priority 0 [ 373.951892][T18138] syzkaller0: entered promiscuous mode [ 373.959014][T18138] syzkaller0: entered allmulticast mode [ 374.013377][T18138] tipc: Resetting bearer [ 374.035211][T18137] tipc: Resetting bearer [ 374.150905][T18137] tipc: Disabling bearer [ 374.276924][T18164] netlink: 'syz.1.3390': attribute type 1 has an invalid length. [ 374.294881][T18165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3389'. [ 374.300895][T18159] lo speed is unknown, defaulting to 1000 [ 374.317195][T18164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3390'. [ 463.039944][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 471.273544][ T9647] bond0 (unregistering): (slave geneve2): Releasing active interface [ 471.494530][ T9647] bond1 (unregistering): Released all slaves [ 471.507939][ T9647] bond2 (unregistering): Released all slaves [ 471.523542][ T9647] bond3 (unregistering): Released all slaves [ 471.537315][ T9647] bond0 (unregistering): Released all slaves [ 471.548075][ T9647] bond4 (unregistering): Released all slaves [ 471.558488][ T9647] bond5 (unregistering): Released all slaves [ 471.623358][ T9647] tipc: Disabling bearer [ 471.628820][ T9647] tipc: Left network mode [ 471.871114][ T9647] hsr_slave_0: left promiscuous mode [ 471.878749][ T9647] hsr_slave_1: left promiscuous mode [ 471.907694][ T9647] pimreg (unregistering): left allmulticast mode [ 472.245175][ T9647] IPVS: stop unused estimator thread 0... [ 483.510148][ T51] Bluetooth: hci3: command 0x040f tx timeout [ 483.516213][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 512.150247][ C1] ================================================================== [ 512.158896][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 512.166827][ C1] Read of size 2 at addr ffff88807837fc2a by task swapper/1/0 [ 512.174317][ C1] [ 512.176856][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 512.176876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.176892][ C1] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 512.176900][ C1] [ 512.176907][ C1] dump_stack_lvl+0x189/0x250 [ 512.176930][ C1] ? rcu_is_watching+0x15/0xb0 [ 512.176947][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.176964][ C1] ? rcu_is_watching+0x15/0xb0 [ 512.176979][ C1] ? lock_release+0x4b/0x3e0 [ 512.177004][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 512.177024][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 512.177045][ C1] print_report+0xca/0x240 [ 512.177059][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 512.177081][ C1] kasan_report+0x118/0x150 [ 512.177104][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 512.177129][ C1] rose_timer_expiry+0x471/0x4b0 [ 512.177152][ C1] call_timer_fn+0x17e/0x5f0 [ 512.177174][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.177195][ C1] ? call_timer_fn+0xbe/0x5f0 [ 512.177217][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 512.177243][ C1] ? rcu_is_watching+0x15/0xb0 [ 512.177258][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.177280][ C1] __run_timer_base+0x61a/0x860 [ 512.177300][ C1] ? ktime_get+0x3e/0x1f0 [ 512.177322][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 512.177341][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 512.177366][ C1] run_timer_softirq+0xb7/0x180 [ 512.177387][ C1] handle_softirqs+0x283/0x870 [ 512.177404][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 512.177420][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 512.177438][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 512.177459][ C1] __irq_exit_rcu+0xca/0x1f0 [ 512.177473][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 512.177492][ C1] irq_exit_rcu+0x9/0x30 [ 512.177505][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.177529][ C1] [ 512.177534][ C1] [ 512.177540][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.177562][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 512.177586][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 512.177601][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 512.177615][ C1] RAX: afae80b2a42b1d00 RBX: ffffffff819683b8 RCX: afae80b2a42b1d00 [ 512.177628][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 512.177645][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 512.177657][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38530 [ 512.177669][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 512.177681][ C1] ? do_idle+0x1e8/0x510 [ 512.177696][ C1] ? do_idle+0x1e8/0x510 [ 512.177711][ C1] default_idle+0x13/0x20 [ 512.177726][ C1] default_idle_call+0x74/0xb0 [ 512.177742][ C1] do_idle+0x1e8/0x510 [ 512.177757][ C1] ? __pfx_do_idle+0x10/0x10 [ 512.177779][ C1] cpu_startup_entry+0x44/0x60 [ 512.177793][ C1] start_secondary+0x101/0x110 [ 512.177817][ C1] common_startup_64+0x13e/0x147 [ 512.177844][ C1] [ 512.177850][ C1] [ 512.488513][ C1] Allocated by task 3582: [ 512.492869][ C1] kasan_save_track+0x3e/0x80 [ 512.497579][ C1] __kasan_kmalloc+0x93/0xb0 [ 512.502212][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 512.507698][ C1] batadv_forw_packet_alloc+0x1e9/0x390 [ 512.513589][ C1] batadv_iv_ogm_queue_add+0x85f/0xd30 [ 512.519077][ C1] batadv_iv_ogm_schedule+0x866/0xf00 [ 512.524525][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 512.531776][ C1] process_scheduled_works+0xae1/0x17b0 [ 512.537355][ C1] worker_thread+0x8a0/0xda0 [ 512.542152][ C1] kthread+0x70e/0x8a0 [ 512.546245][ C1] ret_from_fork+0x3f9/0x770 [ 512.550862][ C1] ret_from_fork_asm+0x1a/0x30 [ 512.555915][ C1] [ 512.558248][ C1] Freed by task 9645: [ 512.562494][ C1] kasan_save_track+0x3e/0x80 [ 512.567339][ C1] kasan_save_free_info+0x46/0x50 [ 512.572478][ C1] __kasan_slab_free+0x5b/0x80 [ 512.577268][ C1] kfree+0x18e/0x440 [ 512.581197][ C1] process_scheduled_works+0xae1/0x17b0 [ 512.587360][ C1] worker_thread+0x8a0/0xda0 [ 512.592047][ C1] kthread+0x70e/0x8a0 [ 512.596127][ C1] ret_from_fork+0x3f9/0x770 [ 512.600731][ C1] ret_from_fork_asm+0x1a/0x30 [ 512.605509][ C1] [ 512.607841][ C1] Last potentially related work creation: [ 512.613660][ C1] kasan_save_stack+0x3e/0x60 [ 512.618401][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 512.623622][ C1] insert_work+0x3d/0x330 [ 512.628064][ C1] __queue_work+0xbaf/0xfb0 [ 512.632604][ C1] call_timer_fn+0x17e/0x5f0 [ 512.637333][ C1] __run_timer_base+0x646/0x860 [ 512.642210][ C1] run_timer_softirq+0xb7/0x180 [ 512.647081][ C1] handle_softirqs+0x283/0x870 [ 512.651850][ C1] __irq_exit_rcu+0xca/0x1f0 [ 512.656448][ C1] irq_exit_rcu+0x9/0x30 [ 512.660698][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.666357][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.672347][ C1] [ 512.674697][ C1] The buggy address belongs to the object at ffff88807837fc00 [ 512.674697][ C1] which belongs to the cache kmalloc-512 of size 512 [ 512.688857][ C1] The buggy address is located 42 bytes inside of [ 512.688857][ C1] freed 512-byte region [ffff88807837fc00, ffff88807837fe00) [ 512.702587][ C1] [ 512.704929][ C1] The buggy address belongs to the physical page: [ 512.711365][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7837c [ 512.720261][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 512.728826][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 512.737102][ C1] page_type: f5(slab) [ 512.741115][ C1] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 512.749744][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 512.758473][ C1] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 512.767175][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 512.775898][ C1] head: 00fff00000000002 ffffea0001e0df01 00000000ffffffff 00000000ffffffff [ 512.784618][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 512.793661][ C1] page dumped because: kasan: bad access detected [ 512.800121][ C1] page_owner tracks the page as allocated [ 512.805855][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6628, tgid 6627 (syz.3.170), ts 90653378422, free_ts 90585872042 [ 512.826978][ C1] post_alloc_hook+0x240/0x2a0 [ 512.831776][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 512.837344][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 512.843196][ C1] alloc_pages_mpol+0x232/0x4a0 [ 512.848098][ C1] allocate_slab+0x8a/0x370 [ 512.852630][ C1] ___slab_alloc+0xbeb/0x1410 [ 512.857514][ C1] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 512.864147][ C1] kmemdup_noprof+0x2b/0x70 [ 512.868691][ C1] cache_create_net+0x2f/0x260 [ 512.873587][ C1] gss_svc_init_net+0x104/0x570 [ 512.878461][ C1] ops_init+0x359/0x5c0 [ 512.882633][ C1] setup_net+0x10c/0x320 [ 512.886897][ C1] copy_net_ns+0x31b/0x4d0 [ 512.891329][ C1] create_new_namespaces+0x3f3/0x720 [ 512.896633][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 512.902361][ C1] ksys_unshare+0x4c8/0x8c0 [ 512.906882][ C1] page last free pid 6618 tgid 6613 stack trace: [ 512.913212][ C1] __free_frozen_pages+0xbc4/0xd30 [ 512.918352][ C1] free_large_kmalloc+0x13a/0x1f0 [ 512.923400][ C1] free_netdev+0x3e2/0x700 [ 512.927828][ C1] netdev_run_todo+0xd0c/0xea0 [ 512.932606][ C1] tun_chr_close+0x13c/0x1c0 [ 512.937206][ C1] __fput+0x44c/0xa70 [ 512.941202][ C1] task_work_run+0x1d4/0x260 [ 512.945812][ C1] do_exit+0x6b5/0x2300 [ 512.949987][ C1] do_group_exit+0x21c/0x2d0 [ 512.954621][ C1] get_signal+0x1286/0x1340 [ 512.959148][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 512.964708][ C1] exit_to_user_mode_loop+0x75/0x110 [ 512.970009][ C1] do_syscall_64+0x2bd/0x3b0 [ 512.974606][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.980514][ C1] [ 512.982854][ C1] Memory state around the buggy address: [ 512.988483][ C1] ffff88807837fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 512.996813][ C1] ffff88807837fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 513.004989][ C1] >ffff88807837fc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.013252][ C1] ^ [ 513.018628][ C1] ffff88807837fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.026802][ C1] ffff88807837fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 513.035053][ C1] ================================================================== [ 513.043215][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 513.050442][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 513.059493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.069583][ C1] Call Trace: [ 513.072904][ C1] [ 513.075843][ C1] dump_stack_lvl+0x99/0x250 [ 513.080565][ C1] ? __asan_memcpy+0x40/0x70 [ 513.085288][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.090538][ C1] ? __pfx__printk+0x10/0x10 [ 513.095200][ C1] vpanic+0x281/0x750 [ 513.099221][ C1] ? __pfx_vpanic+0x10/0x10 [ 513.103763][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 513.108390][ C1] panic+0xb9/0xc0 [ 513.112128][ C1] ? __pfx_panic+0x10/0x10 [ 513.116594][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 513.122687][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 513.128607][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 513.133927][ C1] check_panic_on_warn+0x89/0xb0 [ 513.139286][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 513.144532][ C1] end_report+0x78/0x160 [ 513.148834][ C1] kasan_report+0x129/0x150 [ 513.153379][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 513.158642][ C1] rose_timer_expiry+0x471/0x4b0 [ 513.163621][ C1] call_timer_fn+0x17e/0x5f0 [ 513.168342][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 513.173840][ C1] ? call_timer_fn+0xbe/0x5f0 [ 513.178617][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 513.183961][ C1] ? rcu_is_watching+0x15/0xb0 [ 513.188749][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 513.194525][ C1] __run_timer_base+0x61a/0x860 [ 513.199414][ C1] ? ktime_get+0x3e/0x1f0 [ 513.203858][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 513.209262][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 513.215802][ C1] run_timer_softirq+0xb7/0x180 [ 513.220779][ C1] handle_softirqs+0x283/0x870 [ 513.225651][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 513.230542][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 513.235888][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 513.241117][ C1] __irq_exit_rcu+0xca/0x1f0 [ 513.245821][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 513.251041][ C1] irq_exit_rcu+0x9/0x30 [ 513.255310][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 513.260978][ C1] [ 513.264016][ C1] [ 513.266957][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.272948][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 513.278688][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 513.298310][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 513.304404][ C1] RAX: afae80b2a42b1d00 RBX: ffffffff819683b8 RCX: afae80b2a42b1d00 [ 513.312481][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 513.320935][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 513.328932][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38530 [ 513.336914][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 513.345015][ C1] ? do_idle+0x1e8/0x510 [ 513.349476][ C1] ? do_idle+0x1e8/0x510 [ 513.353832][ C1] default_idle+0x13/0x20 [ 513.358181][ C1] default_idle_call+0x74/0xb0 [ 513.362960][ C1] do_idle+0x1e8/0x510 [ 513.367046][ C1] ? __pfx_do_idle+0x10/0x10 [ 513.371690][ C1] cpu_startup_entry+0x44/0x60 [ 513.376466][ C1] start_secondary+0x101/0x110 [ 513.381267][ C1] common_startup_64+0x13e/0x147 [ 513.386243][ C1] [ 513.389747][ C1] Kernel Offset: disabled [ 513.394084][ C1] Rebooting in 86400 seconds..