last executing test programs: 56.422203735s ago: executing program 2 (id=1671): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @random="50a245d5cde0", @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x400, 0x10001}}}}}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x23}}}}, [@NL80211_ATTR_KEYS={0x34, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bceddb30c7"}, @NL80211_KEY_SEQ={0xf, 0x4, "a3fde775345527f2ea3a30"}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x15, 0x34, @random="dbcdb3184d5a4c827c145e3d5b88b1175b"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xb6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x100}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xec}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x1000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0xc73, 0x9, 0x5d0, 0x6, 0x400}) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x20}, 0x10) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x14) (rerun: 32) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e0ec00004fcff", 0x58}], 0x1) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000c4) 56.085034278s ago: executing program 2 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010329c0000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000030000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000004000380140000001000010000000000000000000000000a"], 0x78}}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10000}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="050000000000020000004400000008000300", @ANYRES32=r8, @ANYBLOB="0c00238008001500b8000000"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @random="8196ebae518d"}, 0x10) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000001b71004d4e75959b42de608b92573a06ba333c996888b914ba3fb7251f1d724c5e93943725952c0ad494f1632dae05cfeb14c16c", @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44020000", @ANYRES16=r15, @ANYBLOB="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"], 0x244}}, 0x0) 55.953068549s ago: executing program 4 (id=1680): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x10, 0x2, 0x17f9, 0x7, 0x8, 0xc4, 0x1, 0x5, 0x9, 0x8, 0x3f4d3730, 0x8, 0x3, 0x4, 0x1, 0x7, [0x8000, 0x8]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010400000000000000000100000208000a400000000008000640ffffff0009000100000000080005400000001c0900020073797a320000000008000340000000880c0009800800028004000180140000001000010000000000000000000784000a"], 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x24, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket(0x1, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x10010500}, 0xc) (async) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x10010500}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80000, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 55.745304947s ago: executing program 4 (id=1683): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x315, 0x10441}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 55.743663456s ago: executing program 2 (id=1685): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00001e0001ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 55.380362679s ago: executing program 4 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000500340076000000080026006c090000140051"], 0x4c}}, 0x4804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@bridge_getneigh={0x16c, 0x1e, 0x4, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x240, 0x804}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7f}, @IFLA_VF_PORTS={0x144, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfffffffa}, @IFLA_PORT_PROFILE={0xa, 0x2, 'bond0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7718f829afce0c1fcdf946a199c4fcd6"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6a722a410de24d43b4bae2c22c922f89"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "08e3f6e49735f072847d4454bff49b41"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "06dd44ffe98264b4264b12913c3f21a2"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e63d84ca4688a9de36b1e83fc3e4a92a"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_PROFILE={0x6, 0x2, '\x1f\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2756561ff3e683ef15212282a0e0b811"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5b9f03b7032fe6e7257481d5bf4df748"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fe69903e068f18e2e2242b9573f35437"}, @IFLA_PORT_PROFILE={0x7, 0x2, '/:\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '&\\)\']\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b507cd5b52a1577494a7442f22052aa8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8657baea337656094dc581f6c484a2fa"}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4014) 55.095845267s ago: executing program 2 (id=1693): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40c1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x18, r3, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 55.095383505s ago: executing program 4 (id=1694): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x1}], 0x1) 54.757331843s ago: executing program 4 (id=1695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) 54.755815848s ago: executing program 2 (id=1696): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075205002f0012802a0001006272523658dc8eeb1c4a9dffd741696467650000bbecbcfac8477796cfcf4bc8dab198f38bd9797128a6627cf490963ccafdbefdc56ad2cd1a57eacf50b9cff0427fba0c2777f186e3858aaba229365426bf2c6f6c04b2d08389a58d187191d7129f1242b814485e6f100260a113bd8e51db1781e3067bde05ad386ea413d62a00113ae954b65222d200ce5117d761730f093b606e9fb44c1f33536624e46fcbf40de097090cda29720056481f61d41b59e8d8ec5646114732c88c07fa92d3fe2a34a5b38a7ac86d7668c66f297cd4c0efc1f274e158e7c8e99ea79c90e8fefdf0db"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 54.269292134s ago: executing program 4 (id=1699): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x315, 0x10441}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 53.836938803s ago: executing program 32 (id=1699): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x315, 0x10441}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 53.452552477s ago: executing program 2 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8}}, 0x1c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32=r4, @ANYRESHEX=r4, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESOCT=r4], 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000000)) 52.920980553s ago: executing program 33 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8}}, 0x1c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32=r4, @ANYRESHEX=r4, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESOCT=r4], 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000000)) 2.668339697s ago: executing program 6 (id=2241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x20}}, 0x40804) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @multicast1}], 0x20) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc050}, 0x40000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000180)) 2.275110581s ago: executing program 5 (id=2245): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@initdev, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r0, @ANYBLOB="0700000000000000000000000000000000001e00ede2c1c5bf3914cba493123c9c24a33e6828007ed3229580f5af395337ee226dc5afd8695cf9cfd12701e2c9ea2f70d69a6211f502926535bc2ad82dd8ebe6a69fd881c1507659e6a8bb0c0e5bc272bc8e63c7bc2903f00df6cca35e2b9cdbe3ec62dc4f3e29a877d93462492bdcff779a741f8371b34935983af650db5cfa5654b4eaaebe6d321ec94e7fa9f5b708b1c17f869818f2d3b61c415c44d92e1184f43651", @ANYRES32=r0, @ANYBLOB="b91b440ecf8ff2b5abda1891e8c090e70682733ec6daa7f1be7be650181a478bc4030c59235ad226b8c4a496955843c6a5e084c49adae40e333bc2d810f98c13120d842a87be7cd6ca8a641659f8e0e6cb31c835699f3be12de100eee6143a4f600625f9de3fea0ed74044b32a34045dd1", @ANYBLOB="00000000050000000400"/28], 0x50) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getnexthop={0x20, 0x6a, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000840) (rerun: 64) bind$802154_dgram(r2, &(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd29, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x9, 0xfffffffefffffffe, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (rerun: 32) 2.201090231s ago: executing program 3 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(r2, 0x7fffffff) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x140f, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4004000) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x480, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x428, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x7, 0x400, 0x6, 0x4, 0x44, 0x2, 0x9, 0x1, 0x400, 0x2, 0x957, 0xfffffffb, 0x4, 0x2, 0x0, 0x4, 0xfff, 0x8, 0x1, 0x8, 0xfffffffd, 0x8, 0x6, 0x401, 0x0, 0x24, 0x4, 0x1ff, 0x1, 0x7f, 0x19, 0x3, 0xfffff978, 0x3, 0x4e2, 0x4d3, 0xffffffff, 0x6, 0xd1, 0xc71, 0x4, 0x8, 0x40, 0x0, 0x4, 0xa, 0x8, 0x8, 0x0, 0x964000, 0x4, 0x2000, 0x7fffffff, 0x100, 0x10001, 0x200, 0x6497, 0x4, 0x9, 0xfffffff9, 0x6, 0x584c, 0xf9, 0x9, 0x72, 0x7fffffff, 0x0, 0x8001, 0x5, 0x1, 0x4, 0x5, 0xfffffffb, 0x4, 0xe7c, 0x8, 0x3, 0x6, 0x10000, 0xe, 0x1, 0xb, 0xbc56, 0x1, 0x1ff, 0x89, 0x12cc, 0x1, 0x1, 0x8, 0x9, 0x892, 0xc06, 0x8, 0x0, 0x9, 0xffff, 0x7ff, 0xfffff297, 0xffffffff, 0xffffa15f, 0x1, 0x5, 0x7fffffff, 0x3, 0x35, 0xe, 0x6, 0x1, 0x1, 0x3, 0x9, 0x0, 0x81, 0xa, 0x401, 0xab, 0x554, 0xff, 0x2, 0x7, 0x95, 0x9, 0x7fff, 0x4, 0x6, 0x4, 0xf4, 0x180000, 0x65e7, 0x1, 0x61e9, 0x0, 0x2, 0x5, 0x1, 0x8, 0x8, 0x4, 0x6, 0x1, 0x4800000, 0x0, 0x5ee4, 0x3, 0xffffffff, 0xff, 0x1, 0x0, 0x800000, 0x0, 0x0, 0x7fff, 0x6, 0x6, 0x2, 0x4936, 0x800, 0x8, 0x7, 0x8, 0x9b, 0x6, 0x1ff, 0x100, 0x1, 0x5, 0x7fffffff, 0x5, 0x0, 0x61, 0x6, 0x3, 0x1, 0x7, 0x9d3, 0x8, 0x6, 0x8, 0x7, 0xfffffff5, 0x5, 0x0, 0x101, 0x7, 0x4, 0x9, 0x7ff, 0xffffff00, 0x80000000, 0x8, 0xfffff5ec, 0x7ff, 0x9, 0x3d085eef, 0xffffffff, 0x4, 0x4, 0x3, 0xff, 0x2, 0x6, 0x1, 0x80000000, 0x7f, 0xe21, 0x5, 0x2c5, 0x1ff, 0x0, 0x6, 0x6, 0x4, 0xfffffff8, 0x400, 0x2b, 0x8, 0x5, 0x4, 0x4, 0x25, 0x10001, 0x65, 0x2, 0xffff, 0x55bf, 0x81, 0x8, 0x6, 0x5, 0x4ee, 0xffffffff, 0x6, 0x9, 0x9, 0x7, 0x7, 0x8, 0x9, 0x3, 0xfffff93d, 0x6, 0x9, 0x4, 0x1f1, 0x3, 0x5, 0x80, 0xffe1, 0x2, 0x6, 0x4, 0xd2c8, 0x3, 0xfaa2]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0xe, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0x480}}, 0x24000814) 2.123368612s ago: executing program 1 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004044}, 0x24000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2], 0x18}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRES16=r3, @ANYRESHEX, @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c000) 2.013344061s ago: executing program 5 (id=2248): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/95, 0x5f}], 0x5, &(0x7f00000004c0)=""/52, 0x34}, 0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x257ef000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) (async, rerun: 32) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, 'syz1\x00', @bcast, 0x98, 0x2, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write(r0, &(0x7f0000000640)="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", 0x1000) socket$kcm(0x29, 0x5, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x2, 0x5, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfa3, 0x0, 0x0, 0x0, 0x800}, [@alu={0x4, 0x0, 0x9, 0x5, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xb, 0x8, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000001680)='syzkaller\x00', 0x9, 0x96, &(0x7f00000016c0)=""/150, 0x41000, 0x10, '\x00', r1, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000017c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001800)=[{0x4, 0x3, 0x0, 0x6}, {0x3, 0x3, 0x1, 0xc}, {0x2, 0x3, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x9}, {0x1, 0x5, 0xa, 0xb}, {0x5, 0x2, 0x7, 0x9}, {0x1, 0x3, 0x2, 0x1}], 0x10, 0x518ae0f1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001940)=r4, 0x4) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001980), 0x40000, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000019c0)=0x8000000) pwritev(r5, &(0x7f0000002e00)=[{&(0x7f0000001a00)="3a4f0f1524f2a13dc8c5620daa2b3b5d1918689594080251361ab0c4d18416728a3c3223e7ae69a5553d2ea6c423f583ae4e166ec4995f0fcb84741b626c8a419436149ddba0bcda5a75f6767212d3b54dcaf89af85ff80f68a184303fc3dd31d4e61839d8af84a817f1eea834c12960fb4ffc0207674811de63032863358f1842879bd57049f00b6741baccb909ca517ffc24f3a84a8218754cde3f8edbd00bb0c014c2d97ee8f4cd1134e118c3d2da39e2e04e88", 0xb5}, {&(0x7f0000001ac0)="bce7afbee329102e3a57169580b1079d6019fc0207285d5ffdd4023004e540f02ba231d192b69fb66994545435234469433d7ab7f890cfe84d5baca148b0bd1b0229700bc5fcb7ea08e1913e560138d29d13b7c3330d927297a6d701bf5b9836b0e1dbad7d988fdb186d32ee77863cdf3ed5166410b71710080460faa4c76caa24fc222f83dc3191f02e2c0dd25e3f1e4883516172e47dd39bb8a173304eb08b23d179c4dc060f2c6b44d16a963049476206eb833eb9dc3db4", 0xb9}, {&(0x7f0000001b80)="50b250b3d5b502dd55667851524b1165db3f180a65392f850faa538070cb8edf4fa77aa6a93bb36fbd451785c8cd70e8d28c4e215ab4a8007a83c4fa2762d56f5640979b", 0x44}, {&(0x7f0000001c00)="2429b98c5ecdd95d92b571b74818708ef90b2208a134a16a015b131e36d5afdb5a77f4049fd2e56d89738244eea390207ba58b4b0bca7194354580a615e469acbab1b967b84253933c421aacdb2fa574f85f2bff28891d6e991cdcff402afba3add26651da012ba6b8cb4768b20936ec8b82d3077ef83097fe113f61e8fa26e5a270c68e834e7ef319f713caa333d214da38d6c96e621daa3cc177d33d5ce0fe57bfd39ab722abcec5", 0xa9}, {&(0x7f0000001cc0)="785086de24f018642845d4da65729981806212cabc07552b6779e7a75bf2ba58a5f0045bc6004ae9279f69bad5fe3a4fe48ed95592f299ebe8b78468697f0b82d51ca0b2268290fa6450c0676847ca9cb6c2dfe5e8c357b598e03f9cae1fdae8af8d2310dee6531987aec9dc65f9fe8296ac1c98f12f9a3a4a28cf76da4a4b1e85778f7c95634145849bf6d9", 0x8c}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="6eddbfe7d78d34cf28f98c30fdb018c17c9baeaaa71b3b5533a632ad03caaa79dd81d790dfded67cf4167a22b4ae0e83a105e559d1315932650ffff712cb72327d4237693552c9bee5028811ffd19d065681b3eb8c923a5ebe7575f38a1c737a21f9c9e46b329a7149e76c229f574b6b9fc71fb285496dde1521848da1cb", 0x7e}], 0x7, 0x8, 0x7fffffff) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)=@gettfilter={0x5c, 0x2e, 0x30, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff1, 0xf}, {0xfff2, 0x2}, {0x8, 0x10}}, [{0x8, 0xb, 0xa1ce}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x140000}, {0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0x97f2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008845) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002fc0)={r5, 0xd, 0x4, 0xf1ec}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000003180)={&(0x7f0000003000), 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0xb8, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003200)=@o_path={&(0x7f00000031c0)='./file0\x00', r6, 0x4000, r5}, 0x18) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x10) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4ed77cdf0168b0e8, &(0x7f0000003240)=0x5, 0x4) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000003280)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000032c0)=0x2, 0x4) (async, rerun: 64) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000003300)={0x1d, "ea71c82ba08a92f97243cef829ecdd45298504c14b38b04fb10fcc3088be309810778c6cecdebf0c54eae0805797b4f58ff977af3db66673922ad22d9310cf67e613ec18d068654b4e65effd468c54fcbe487c552e49a69b7a5d6bbc9a421e54f1ecd36b85c1eaeb3ea34715b2c0e5e3816694a4461f0a75dd8af536fa2c8c9f"}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socketpair(0x28, 0x800, 0xfd, &(0x7f0000003400)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003480)={r6, &(0x7f00000033c0)="99557bd15bf5d3bcd8dc1f3cdb5d55644606", &(0x7f0000003440)=@tcp=r8, 0x4}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000034c0)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000036c0)={r9, &(0x7f0000003500)="b635844185832cb2dce9bb66b9b9025f4a209e15bfe971a99a52c5e2095d33df069a81fc1e1146af344121147f11c6dda464c7dc3f5adbb2e802f8997ff84cd28da53b08f72f3e406c1e06f6c988be2dd7bb0eb21f37617bef05b82ee08f253230165422066810321f7c480eb85f39c494630ace8e8e86747313e0d910e23cfc7fa804d427a77ec2", &(0x7f00000035c0)=""/195}, 0x20) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000003700)={0x0, 0xffffc28d}) 1.880279403s ago: executing program 1 (id=2249): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x7, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000940)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x19, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xc5, 0x2, 0x3, 0x5, 0x7fff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x14, &(0x7f0000000080)=""/20, 0x41100, 0x3, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000000980)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x1, 0x6, 0x8}, 0x10, 0x212ae, r3, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x5, 0x3, 0x1, 0x2}], 0x10, 0x680c750e}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 1.766890198s ago: executing program 1 (id=2250): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) (async, rerun: 64) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) (async, rerun: 32) r6 = socket(0x1e, 0x4, 0x0) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) close(0x3) (async, rerun: 64) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r7, 0x0, 0x0, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.635437925s ago: executing program 6 (id=2251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x7, 0x8, 0x1, 0x8, 0x4b4, 0x5, 0xf]}}]}]}]}, 0x38}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.501202321s ago: executing program 5 (id=2252): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.499991779s ago: executing program 0 (id=2253): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x80) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdb862b010000000000000007410000004c00180000000665746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x60000041) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x5b2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.469681026s ago: executing program 6 (id=2254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) 1.445196937s ago: executing program 1 (id=2255): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0002000081000000e7f3f7f2b91f040dd7f5da00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) (async, rerun: 64) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r0}, 0xc) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000e00000010000000000000300000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000200100000000000000000000000000020000000000000000000000000000000000000000e0000002000000000000000000000000000000003300"/308], 0x17c}}, 0x0) 1.273174377s ago: executing program 0 (id=2256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0xd58}, 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000200)={0x9}, 0x4) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000000008e1000034000000"], 0x14}}, 0x0) 1.231014157s ago: executing program 6 (id=2257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x11a}}], 0x10}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0xb, 0x20}, 0x48) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8}, 0x10) listen(r6, 0xffffffff) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e7242cd7", 0x4}], 0x1}}], 0x1, 0x4000880) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x2}}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x3, [{0x7, 0x3, 0xe1}]}, @func={0xb, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/211, 0x5b, 0xd3, 0x0, 0x1, 0x70f501c7a04a13ec}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x79f7, '\x00', r10, r11, 0x4, 0x2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r10], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.194526498s ago: executing program 3 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01, 0x0, 0x24008041}, 0x0) 1.077292237s ago: executing program 3 (id=2259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x800, 0x7}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={r4, @in={{0x2, 0x4e21, @empty}}, [0x9, 0x7fffffff, 0x3, 0x80, 0x9, 0x9, 0x9, 0x7, 0x7, 0x5, 0x2, 0x6, 0x0, 0x3, 0x1c6]}, &(0x7f0000000340)=0x100) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a1a1011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="55c025bd7000fcdbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="0600360000ff"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1.003007072s ago: executing program 0 (id=2260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468305f746f5f62726964676500140003006772653000000000000000000000000014001680100001800c000700274d97e6"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x23}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x23}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1e000000000000004cec00000000004040000008", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000400"/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1e000000000000004cec00000000004040000008", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000400"/28], 0x48) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008000500000000000800040000000000"], 0x48}}, 0x0) 917.265466ms ago: executing program 1 (id=2261): r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@generic, &(0x7f0000000200)=0x80) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d5ffc92d72767896b02ba374245856e8bb79678e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x20040094) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @func={0x10, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52, 0x62}, 0x20) 669.041922ms ago: executing program 3 (id=2262): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="d2ef8e0676816d9289fbcccd5da234a5fa7901ebfeee34f63e5f94bb8adfe3637776c28a1ae019d0ac6af995c4699fa4b3e4f727fc0801caa074bb2d97a3d8acc97bd5f26f5159cff97d78e90b6d4ab1333ac2e0eb6bc17b030e49a6bedc42152d2631ad3df84a6faa59dda5125815ff3c059f42411c9dadfa43eb164f127c536ef86913c3af00731c145cca0ddf426df8a5", 0x92, 0x20000081, &(0x7f0000000380)={0xa, 0x4e21, 0x9, @private1, 0x2}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000440)=""/154, 0x52, 0x9a, 0xfffffffe}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0xffffffff, 0x4, 0xe00000000000}) bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r4}, 0x8) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 663.607585ms ago: executing program 6 (id=2263): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x200, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xfff2}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) 639.339885ms ago: executing program 0 (id=2264): socket$kcm(0x2, 0x922000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'gretap0\x00', {}, 0x5}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'gretap0\x00', {}, 0x5}) setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f00000008c0), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r6, &(0x7f0000000600)="414e3282d835dcddbb7669ca14f8ca6d7797ebf1ec61b641f13f8a80d91c95658195b6a37c43d39f284bcc0ac7dc4aaba8eed8101b3e80b5e85e9a75034a180fa9885c333acbf03456855badfd706346fc63edff601fc1f2597fbf304f9454a974a234be8249f27951b8cb20438f434f0bbccef082fd57b899a360de4af364669a294b4b5b0c7c0478142cc1244830cb85d6f5b7d7c7ebe35dcdca8ee4ac16655c4ebcd303fc26be", &(0x7f00000006c0)=""/59, 0x4}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) write$tun(r7, &(0x7f0000000080)={@void, @void, @ipv6=@dccp_packet={0xc, 0x6, "46dd3b", 0x38c, 0x21, 0xff, @dev={0xfe, 0x80, '\x00', 0x2b}, @remote, {[@hopopts={0x2c, 0x2a, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xc8, 0x2f, "e6b1ea43d203649162124fab83ca5126ae63212ea08e311dc558d9ed8e395f67b77293619172fe68384b872c0add89"}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xa, 0xa2, "5e6a9fa8e91b950946f02a265d959244f918c8524ca4ed21fc0d70f99a1071710f12e2bf7c16082686f9c1c7d3f14acdbe37d99a1c14bf09077776d79cdf01cd0be669333fbe808fbbcd5b05a0c5a4a609574ad53eac53262afd894f819284584c9708ace8dec5e73930068de97b894a7fd3ef15aac48b203f6b1d2a4e6949363715b9c49c26c919c7adc7f841b84a9111a624580c7d926bd74f57561e872452b7b3"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x10, [0xffffffff, 0x0, 0x30]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x13c9}, @generic={0x3, 0x35, "1166479f27bef638fd4ae898fa9c6e6166aaa84ad9d5e28b182d81fb7ef7f1659094b95092c192134bafa923c63a27036ec1a20a62"}, @enc_lim={0x4, 0x1, 0x6c}]}, @srh={0x5e, 0x2, 0x4, 0x1, 0x8, 0x8, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1]}, @fragment={0x73, 0x0, 0x1, 0x1, 0x0, 0xc, 0x68}, @routing={0x1d, 0x2, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}, @hopopts={0x3c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}, @hopopts={0x0, 0x1a, '\x00', [@generic={0x7, 0xb9, "615e425e74bc870860ab20b0920500d000f57feae903193159082d7cfe923b23b5ce8b80d6d26028d2d209e13a18bf905e13af5b324a7cfe3a02fe8a10c7abc6cf499c6e0d273a6c009fe5e95b70ac4e375c381f821137be7beea16d7a157b8fbb7a276d6a54a3f64a2ab30824808a414f138b90dcb33967fffec774c5216ea437742d09e8c2f09a004dd5d1f1139a0d525e30a8ae6d83b035345f787d2b6c54a696bfc6d0e9a39d9cec3917800b63bd3673d5c925d3ab7e83"}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @mcast2}, @pad1]}, @dstopts={0x89, 0x3, '\x00', [@pad1, @generic={0x9, 0x18, "8e4ab0415d859ca78825c69179a97a31c0375bb7151c9c6a"}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x67}, @routing={0x5e, 0xa, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x3, 0x7, "d346ff", 0xd1, "33f9e1"}, "ed8253728f68b5b1eee98716d20c2992cccc2ecc38c2d000b677205a8560108cbafcf8cca945cab0c3e9453141750f49f1087e4f"}}}}, 0x3b4) (async) write$tun(r7, &(0x7f0000000080)={@void, @void, @ipv6=@dccp_packet={0xc, 0x6, "46dd3b", 0x38c, 0x21, 0xff, @dev={0xfe, 0x80, '\x00', 0x2b}, @remote, {[@hopopts={0x2c, 0x2a, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xc8, 0x2f, "e6b1ea43d203649162124fab83ca5126ae63212ea08e311dc558d9ed8e395f67b77293619172fe68384b872c0add89"}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xa, 0xa2, "5e6a9fa8e91b950946f02a265d959244f918c8524ca4ed21fc0d70f99a1071710f12e2bf7c16082686f9c1c7d3f14acdbe37d99a1c14bf09077776d79cdf01cd0be669333fbe808fbbcd5b05a0c5a4a609574ad53eac53262afd894f819284584c9708ace8dec5e73930068de97b894a7fd3ef15aac48b203f6b1d2a4e6949363715b9c49c26c919c7adc7f841b84a9111a624580c7d926bd74f57561e872452b7b3"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x10, [0xffffffff, 0x0, 0x30]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x13c9}, @generic={0x3, 0x35, "1166479f27bef638fd4ae898fa9c6e6166aaa84ad9d5e28b182d81fb7ef7f1659094b95092c192134bafa923c63a27036ec1a20a62"}, @enc_lim={0x4, 0x1, 0x6c}]}, @srh={0x5e, 0x2, 0x4, 0x1, 0x8, 0x8, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1]}, @fragment={0x73, 0x0, 0x1, 0x1, 0x0, 0xc, 0x68}, @routing={0x1d, 0x2, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}, @hopopts={0x3c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}, @hopopts={0x0, 0x1a, '\x00', [@generic={0x7, 0xb9, "615e425e74bc870860ab20b0920500d000f57feae903193159082d7cfe923b23b5ce8b80d6d26028d2d209e13a18bf905e13af5b324a7cfe3a02fe8a10c7abc6cf499c6e0d273a6c009fe5e95b70ac4e375c381f821137be7beea16d7a157b8fbb7a276d6a54a3f64a2ab30824808a414f138b90dcb33967fffec774c5216ea437742d09e8c2f09a004dd5d1f1139a0d525e30a8ae6d83b035345f787d2b6c54a696bfc6d0e9a39d9cec3917800b63bd3673d5c925d3ab7e83"}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @mcast2}, @pad1]}, @dstopts={0x89, 0x3, '\x00', [@pad1, @generic={0x9, 0x18, "8e4ab0415d859ca78825c69179a97a31c0375bb7151c9c6a"}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x67}, @routing={0x5e, 0xa, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x3, 0x7, "d346ff", 0xd1, "33f9e1"}, "ed8253728f68b5b1eee98716d20c2992cccc2ecc38c2d000b677205a8560108cbafcf8cca945cab0c3e9453141750f49f1087e4f"}}}}, 0x3b4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r7}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r8, 0x4) 620.397644ms ago: executing program 5 (id=2265): syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x26, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a670300000000000000000100000008000440000000000900010073797a300000000038000380340000000400018004000680140007800c000100636f756e746572000400028014000180060001"], 0xe4}}, 0x0) 473.110487ms ago: executing program 1 (id=2266): r0 = socket(0x2, 0x3, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000340)=0x4081, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x28, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f00007d5000/0x1000)=nil, 0x1000, 0x700000d, 0x811, r7, 0x100000000) getsockopt$nfc_llcp(r5, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0500000071109a00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 472.448188ms ago: executing program 3 (id=2267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) accept(r0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xffff0001, 0x2f}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000007110a0000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 414.533856ms ago: executing program 6 (id=2268): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r3, 0xa21, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e26, @remote}}, 0x0, 0x0, 0x4e, 0x0, "25366c9c8467783835fb00d492c430c380e2a8b1ce8e820bc98bc75677ccedf1d307f2b62ed8335406ef1f5e68080b2f84c8e86a4487247a35151fbb0a3688cf394bd8d66dfeb454213e2000"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 320.307237ms ago: executing program 5 (id=2269): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25010100"], 0x114}], 0x1}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) unshare(0x22020400) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x8, 0x0, 0x0}}, 0x10) 217.313558ms ago: executing program 0 (id=2270): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x180000000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x13, r3, 0x3d195000) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) 215.148381ms ago: executing program 3 (id=2271): bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x8, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/91, 0x5b, 0x40000022, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 49.182874ms ago: executing program 5 (id=2272): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002000000000000000000000000cb64ae9ae6ae3e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0xad0dd8c7b616e32d, 0x10, 0x1, 0x7, {{0x2b, 0x4, 0x0, 0xe, 0xac, 0x68, 0x0, 0x18, 0x29, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0x75, [@multicast2]}, @lsrr={0x83, 0x7, 0x28, [@local]}, @ssrr={0x89, 0x7, 0x2d, [@multicast1]}, @cipso={0x86, 0x4e, 0x1, [{0x5, 0x7, "aafcb9a313"}, {0x2, 0x12, "5d5d3dadb830f192957a5d8615b097b5"}, {0x7, 0x6, "86ffbc61"}, {0x3, 0x11, "cfb2c19ce47dca71701cab7d3d1911"}, {0x6, 0x2}, {0x0, 0x7, "fd4a2191de"}, {0x6, 0xf, "d77784246f38d3d9582a063772"}]}, @timestamp_addr={0x44, 0x34, 0x35, 0x1, 0x2, [{@multicast1, 0x101}, {@rand_addr=0x64010100, 0x8000}, {@rand_addr=0x64010101, 0xffff}, {@multicast2, 0x80}, {@multicast1, 0x4}, {@broadcast, 0x4b94}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40840}, 0x40000d0) 0s ago: executing program 0 (id=2273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x81, 0x0) close(0x4) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) kernel console output (not intermixed with test programs): 98410][ T7905] dummy0: vlans aren't supported yet for dev_uc|mc_add() [ 153.563713][ T7904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.631766][ T7918] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 153.641781][ T7897] bond2: (slave veth0_to_bond): making interface the new active one [ 153.652315][ T7897] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.706023][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.751372][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.766231][ T7921] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.787897][ T7921] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 153.842006][ T7918] macvlan0: entered promiscuous mode [ 153.851232][ T7918] macvlan0: entered allmulticast mode [ 153.857800][ T7918] bond0: entered promiscuous mode [ 153.864338][ T7918] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 153.878954][ T7918] bond0: left promiscuous mode [ 154.128546][ T7938] sctp: [Deprecated]: syz.3.581 (pid 7938) Use of int in max_burst socket option. [ 154.128546][ T7938] Use struct sctp_assoc_value instead [ 154.662778][ T7967] __nla_validate_parse: 9 callbacks suppressed [ 154.662801][ T7967] netlink: 45 bytes leftover after parsing attributes in process `syz.3.589'. [ 154.695980][ T7969] IPVS: length: 203 != 24 [ 154.771597][ T7971] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 154.971010][ T7947] lo speed is unknown, defaulting to 1000 [ 156.180081][ T8037] bridge_slave_0: left allmulticast mode [ 156.229426][ T8037] bridge_slave_0: left promiscuous mode [ 156.284554][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.450677][ T8037] bridge_slave_1: left allmulticast mode [ 156.498472][ T8037] bridge_slave_1: left promiscuous mode [ 156.504943][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.537861][ T8049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.607'. [ 156.589630][ T8037] bond0: (slave bond_slave_0): Releasing backup interface [ 156.623966][ T8037] bond_slave_0: left allmulticast mode [ 156.689677][ T8037] bond0: (slave bond_slave_1): Releasing backup interface [ 156.709101][ T8037] bond_slave_1: left allmulticast mode [ 156.746773][ T8037] team0: Port device team_slave_0 removed [ 156.799866][ T8037] team0: Port device team_slave_1 removed [ 156.814752][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.826197][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.839063][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.852432][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.941614][ T43] syz!: Port: 1 Link DOWN [ 157.140820][ T8058] netlink: 'syz.1.610': attribute type 21 has an invalid length. [ 157.158671][ T8062] netlink: 'syz.3.611': attribute type 21 has an invalid length. [ 157.170662][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'. [ 157.292203][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 157.343851][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 157.691263][ T8084] netlink: 100 bytes leftover after parsing attributes in process `syz.4.617'. [ 157.698758][ T8088] netlink: 'syz.1.618': attribute type 3 has an invalid length. [ 157.705327][ T8084] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 157.720642][ T8084] syzkaller0: Linktype set failed because interface is up [ 157.729889][ T8092] IPv6: Can't replace route, no match found [ 157.744222][ T8089] geneve2: entered promiscuous mode [ 157.995664][ T8101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.624'. [ 158.035392][ T8100] syzkaller1: entered promiscuous mode [ 158.048057][ T8100] syzkaller1: entered allmulticast mode [ 158.164785][ T8110] netlink: 64 bytes leftover after parsing attributes in process `syz.3.625'. [ 158.195530][ T8111] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 158.255538][ T8112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.349594][ T8111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.489994][ T8115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.517476][ T8115] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.555105][ T8115] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 158.643576][ T8117] macvlan3: entered promiscuous mode [ 158.659252][ T8117] macvlan3: entered allmulticast mode [ 158.673751][ T8117] bond3: entered promiscuous mode [ 158.695670][ T8117] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 158.700961][ T8128] netlink: 156 bytes leftover after parsing attributes in process `syz.4.632'. [ 158.719370][ T8117] bond3: left promiscuous mode [ 158.765292][ T8134] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 158.987777][ T8147] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 159.016264][ T8147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.635'. [ 159.151227][ T8158] netlink: 'syz.4.641': attribute type 21 has an invalid length. [ 159.411331][ T8179] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 159.448195][ T8179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.470985][ T8179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.479431][ T8179] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 159.497674][ T8179] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 159.528395][ T8183] macvlan3: entered promiscuous mode [ 159.537285][ T8183] macvlan3: entered allmulticast mode [ 159.543976][ T8183] bond3: entered promiscuous mode [ 159.550171][ T8183] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 159.561230][ T8183] bond3: left promiscuous mode [ 159.756663][ T8163] __nla_validate_parse: 6 callbacks suppressed [ 159.756684][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 159.774533][ T8163] netlink: 244 bytes leftover after parsing attributes in process `syz.3.640'. [ 159.891312][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 159.905709][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 160.187720][ T8213] tipc: Enabled bearer , priority 0 [ 160.205436][ T8212] syzkaller0: entered promiscuous mode [ 160.210973][ T8212] syzkaller0: entered allmulticast mode [ 160.357345][ T8225] netlink: 'syz.1.660': attribute type 2 has an invalid length. [ 160.388571][ T8212] tipc: Resetting bearer [ 160.472179][ T8212] tipc: Disabling bearer [ 160.503787][ T8234] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.762109][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 160.873278][ T8249] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 160.916425][ T7003] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 161.193208][ T8260] netlink: 182888 bytes leftover after parsing attributes in process `syz.2.668'. [ 161.274719][ T8260] bond4: entered promiscuous mode [ 161.280513][ T8260] bond4: entered allmulticast mode [ 161.286430][ T8260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.309897][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 161.586997][ T8252] netlink: 'syz.2.668': attribute type 11 has an invalid length. [ 161.600247][ T8252] netlink: 'syz.2.668': attribute type 11 has an invalid length. [ 161.612907][ T8252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.668'. [ 161.841816][ T8294] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 161.858468][ T3890] syzkaller0: tun_net_xmit 76 [ 161.871732][ T3890] syzkaller0: tun_net_xmit 48 [ 161.877089][ T3890] syzkaller0: tun_net_xmit 76 [ 161.917272][ T8294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.984932][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 162.014390][ T8303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.037674][ T8303] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.051541][ T8303] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 162.150054][ T8294] gretap1: entered promiscuous mode [ 162.167885][ T8306] macvlan6: entered promiscuous mode [ 162.180250][ T8306] macvlan6: entered allmulticast mode [ 162.190477][ T8306] bond5: entered promiscuous mode [ 162.199023][ T8306] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 162.208985][ T8306] bond5: left promiscuous mode [ 162.360473][ T8318] netlink: 'syz.4.683': attribute type 2 has an invalid length. [ 162.478107][ T8324] netlink: 'syz.2.687': attribute type 11 has an invalid length. [ 162.494700][ T8324] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.687'. [ 163.835714][ T8373] veth1_vlan: mtu less than device minimum [ 164.057353][ T8382] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 164.184322][ T8394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.318502][ T8400] veth0_to_team: entered promiscuous mode [ 164.325288][ T8400] veth0_to_team: entered allmulticast mode [ 164.568624][ T8410] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 164.622053][ T8410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.642602][ T8415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.643198][ T8421] netlink: zone id is out of range [ 164.658742][ T8421] netlink: del zone limit has 4 unknown bytes [ 164.726261][ T8420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.768820][ T8420] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.825396][ T8420] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 164.935691][ T8430] macvlan6: entered promiscuous mode [ 164.948420][ T8430] macvlan6: entered allmulticast mode [ 164.960359][ T8430] bond6: entered promiscuous mode [ 164.976472][ T8430] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 164.988044][ T8430] bond6: left promiscuous mode [ 165.607880][ T8453] __nla_validate_parse: 5 callbacks suppressed [ 165.607900][ T8453] netlink: 100 bytes leftover after parsing attributes in process `syz.4.723'. [ 165.685121][ T8417] lo speed is unknown, defaulting to 1000 [ 165.780414][ T8464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.943537][ T8466] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 165.979226][ T8470] netlink: 'syz.1.730': attribute type 21 has an invalid length. [ 166.014208][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.029595][ T8470] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 166.094230][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.731'. [ 166.148072][ T8473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.169709][ T8473] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.182421][ T8473] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 166.219070][ T8476] macvlan0: entered promiscuous mode [ 166.226322][ T8476] macvlan0: entered allmulticast mode [ 166.232431][ T8476] bond2: entered promiscuous mode [ 166.238232][ T8476] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 166.248657][ T8476] bond2: left promiscuous mode [ 166.450273][ T8485] netlink: zone id is out of range [ 166.456916][ T8485] netlink: zone id is out of range [ 166.462656][ T8485] netlink: zone id is out of range [ 166.468213][ T8485] netlink: zone id is out of range [ 166.709768][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.744777][ T8490] sctp: [Deprecated]: syz.2.736 (pid 8490) Use of int in max_burst socket option deprecated. [ 166.744777][ T8490] Use struct sctp_assoc_value instead [ 167.450305][ T8516] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 167.481692][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 167.514857][ T8520] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 167.745196][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 167.878322][ T8545] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 167.926891][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 167.933905][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.754'. [ 167.978097][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 167.998377][ T8553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'. [ 168.185474][ T8556] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 168.212944][ T8556] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'. [ 168.630423][ T8587] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 168.777934][ T8587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.780758][ T8599] sctp: [Deprecated]: syz.0.772 (pid 8599) Use of int in max_burst socket option. [ 168.780758][ T8599] Use struct sctp_assoc_value instead [ 168.811621][ T8601] sctp: [Deprecated]: syz.0.772 (pid 8601) Use of int in max_burst socket option. [ 168.811621][ T8601] Use struct sctp_assoc_value instead [ 168.894201][ T8593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.913759][ T8593] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.935101][ T8593] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 169.009815][ T8598] macvlan6: entered promiscuous mode [ 169.015664][ T8598] macvlan6: entered allmulticast mode [ 169.022179][ T8598] bond7: entered promiscuous mode [ 169.028880][ T8598] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 169.043136][ T8598] bond7: left promiscuous mode [ 169.345211][ T8617] hsr_slave_1 (unregistering): left promiscuous mode [ 169.571565][ T8638] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 170.166905][ T8667] net_ratelimit: 21 callbacks suppressed [ 170.166930][ T8667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.654346][ T8698] netlink: 'syz.3.807': attribute type 19 has an invalid length. [ 170.695395][ T8698] __nla_validate_parse: 6 callbacks suppressed [ 170.695415][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 170.758852][ T8698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 170.897577][ T8710] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 170.927670][ T8711] tipc: Can't bind to reserved service type 1 [ 170.934636][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 170.944811][ T8713] syz.2.813: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 170.988780][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.2.813 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 170.988813][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.988826][ T8713] Call Trace: [ 170.988835][ T8713] [ 170.988844][ T8713] dump_stack_lvl+0x189/0x250 [ 170.988877][ T8713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.988899][ T8713] ? __pfx__printk+0x10/0x10 [ 170.988925][ T8713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 170.988951][ T8713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 170.988977][ T8713] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 170.989004][ T8713] warn_alloc+0x214/0x310 [ 170.989026][ T8713] ? stack_depot_save_flags+0x40/0x900 [ 170.989052][ T8713] ? __pfx_warn_alloc+0x10/0x10 [ 170.989077][ T8713] ? kasan_save_track+0x4f/0x80 [ 170.989105][ T8713] ? xskq_create+0x56/0x170 [ 170.989130][ T8713] ? xsk_init_queue+0xb0/0x110 [ 170.989152][ T8713] ? xsk_setsockopt+0x4dc/0x8d0 [ 170.989176][ T8713] ? do_sock_setsockopt+0x179/0x1b0 [ 170.989194][ T8713] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 170.989212][ T8713] ? do_syscall_64+0xfa/0x3b0 [ 170.989239][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.989270][ T8713] __vmalloc_node_range_noprof+0x125/0x12f0 [ 170.989329][ T8713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 170.989359][ T8713] ? __kasan_kmalloc+0x93/0xb0 [ 170.989400][ T8713] vmalloc_user_noprof+0xad/0xf0 [ 170.989421][ T8713] ? xskq_create+0xbf/0x170 [ 170.989451][ T8713] xskq_create+0xbf/0x170 [ 170.989482][ T8713] xsk_init_queue+0xb0/0x110 [ 170.989512][ T8713] xsk_setsockopt+0x4dc/0x8d0 [ 170.989540][ T8713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.989565][ T8713] ? __pfx_aa_sk_perm+0x10/0x10 [ 170.989596][ T8713] ? aa_sock_opt_perm+0x74/0x110 [ 170.989624][ T8713] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 170.989646][ T8713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.989673][ T8713] do_sock_setsockopt+0x179/0x1b0 [ 170.989700][ T8713] __x64_sys_setsockopt+0x13f/0x1b0 [ 170.989727][ T8713] do_syscall_64+0xfa/0x3b0 [ 170.989754][ T8713] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.989780][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.989799][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 170.989824][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.989843][ T8713] RIP: 0033:0x7f1df198eb69 [ 170.989862][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.989879][ T8713] RSP: 002b:00007f1df28cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.989901][ T8713] RAX: ffffffffffffffda RBX: 00007f1df1bb5fa0 RCX: 00007f1df198eb69 [ 170.989915][ T8713] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 170.989926][ T8713] RBP: 00007f1df1a11df1 R08: 0000000000000004 R09: 0000000000000000 [ 170.989938][ T8713] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.989951][ T8713] R13: 0000000000000000 R14: 00007f1df1bb5fa0 R15: 00007ffe27132e48 [ 170.989987][ T8713] [ 170.989994][ T8713] Mem-Info: [ 171.020422][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 171.034522][ T8713] active_anon:3590 inactive_anon:0 isolated_anon:0 [ 171.034522][ T8713] active_file:1237 inactive_file:39857 isolated_file:0 [ 171.034522][ T8713] unevictable:768 dirty:126 writeback:0 [ 171.034522][ T8713] slab_reclaimable:11349 slab_unreclaimable:103323 [ 171.034522][ T8713] mapped:28901 shmem:1368 pagetables:905 [ 171.034522][ T8713] sec_pagetables:0 bounce:0 [ 171.034522][ T8713] kernel_misc_reclaimable:0 [ 171.034522][ T8713] free:1325752 free_pcp:13433 free_cma:0 [ 171.034717][ T8713] Node 0 active_anon:14360kB inactive_anon:0kB active_file:4948kB inactive_file:159224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115604kB dirty:504kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12340kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.034775][ T8713] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.034824][ T8713] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.301149][ T8719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.303213][ T8713] lowmem_reserve[]: [ 171.453717][ T8720] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 171.480084][ T8713] 0 2500 2502 2502 2502 [ 171.484925][ T8713] Node 0 DMA32 free:1385328kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14388kB inactive_anon:0kB active_file:4948kB inactive_file:157384kB unevictable:1536kB writepending:504kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35752kB local_pcp:15328kB free_cma:0kB [ 171.535898][ T8713] lowmem_reserve[]: 0 0 1 1 1 [ 171.540721][ T8713] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 171.576908][ T8713] lowmem_reserve[]: 0 0 0 0 0 [ 171.581947][ T8713] Node 1 Normal free:3901876kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:8864kB free_cma:0kB [ 171.627291][ T8713] lowmem_reserve[]: 0 0 0 0 0 [ 171.635960][ T8713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.650413][ T8713] Node 0 DMA32: 1034*4kB (UM) 377*8kB (UM) 142*16kB (M) 209*32kB (UME) 83*64kB (UME) 44*128kB (UM) 23*256kB (UM) 13*512kB (UM) 8*1024kB (M) 5*2048kB (UME) 324*4096kB (UM) = 1385136kB [ 171.691955][ T8713] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 171.741394][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.820'. [ 171.771041][ T8744] netlink: 'syz.0.820': attribute type 7 has an invalid length. [ 171.783772][ T8744] netlink: 'syz.0.820': attribute type 8 has an invalid length. [ 171.803019][ T8713] Node 1 Normal: 159*4kB (UE) 47*8kB (UME) 40*16kB (UME) 80*32kB (UME) 29*64kB (UME) 4*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901876kB [ 171.831726][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 171.852328][ T8744] batadv_slave_1: entered promiscuous mode [ 171.860433][ T8744] batadv_slave_1: left promiscuous mode [ 171.897982][ T8713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.959351][ T8713] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.969259][ T8713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.986822][ T8713] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.039352][ T8713] 42459 total pagecache pages [ 172.044507][ T8713] 0 pages in swap cache [ 172.048708][ T8713] Free swap = 124996kB [ 172.053928][ T8713] Total swap = 124996kB [ 172.058241][ T8713] 2097051 pages RAM [ 172.062097][ T8713] 0 pages HighMem/MovableOnly [ 172.082548][ T8713] 424872 pages reserved [ 172.097748][ T8713] 0 pages cma reserved [ 172.135864][ T8756] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 172.293721][ T8769] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 172.486337][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 172.816786][ T8796] netlink: 'syz.0.837': attribute type 33 has an invalid length. [ 172.833205][ T8796] netlink: 152 bytes leftover after parsing attributes in process `syz.0.837'. [ 172.870063][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 174.068404][ T8780] team1: entered promiscuous mode [ 174.074999][ T8780] team1: entered allmulticast mode [ 174.105633][ T30] audit: type=1800 audit(1754226944.135:2): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.835" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 174.133934][ T8786] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 174.168938][ T8786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 174.204722][ T8786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 174.419754][ T8812] tipc: Enabling of bearer rejected, failed to enable media [ 174.570058][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 174.737578][ T8827] block nbd0: Unsupported socket: shutdown callout must be supported. [ 174.896028][ T8836] siw: device registration error -23 [ 174.918064][ T8835] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.967784][ T8835] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.990408][ T8842] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.226819][ T8852] veth1_to_bond: entered allmulticast mode [ 175.377785][ T8854] bond0: (slave bond_slave_1): Releasing backup interface [ 175.427134][ T8854] veth1_to_bond (unregistering): left allmulticast mode [ 175.669364][ T8879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.670286][ T8874] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 175.705331][ T8877] __nla_validate_parse: 1 callbacks suppressed [ 175.705353][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.866'. [ 175.711639][ T8880] gretap1: entered promiscuous mode [ 175.729440][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 175.738533][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.866'. [ 175.747552][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.866'. [ 175.885104][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 176.079038][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 176.629521][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.879'. [ 176.696675][ T8923] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 177.061218][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.891'. [ 177.696073][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 178.680330][ T7011] syzkaller0: tun_net_xmit 76 [ 178.703505][ T9] syzkaller0: tun_net_xmit 76 [ 178.709178][ T7011] syzkaller0: tun_net_xmit 48 [ 178.720754][ T9] syzkaller0: tun_net_xmit 76 [ 178.741419][ T8998] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 178.754140][ T8998] syzkaller0: Linktype set failed because interface is up [ 178.799339][ T9001] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 178.819164][ T9001] syzkaller0: Linktype set failed because interface is up [ 178.826924][ T9] syzkaller0: tun_net_xmit 76 [ 180.201723][ T9025] netlink: 'syz.2.915': attribute type 2 has an invalid length. [ 180.410438][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 180.719506][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 180.784480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.171755][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058cd8000: rx timeout, send abort [ 181.684748][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058cd8000: abort rx timeout. Force session deactivation [ 181.893527][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 181.959826][ T9046] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 182.228599][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.508479][ T9077] netlink: 68 bytes leftover after parsing attributes in process `syz.1.926'. [ 182.675746][ T9086] netlink: 104 bytes leftover after parsing attributes in process `syz.0.929'. [ 182.712418][ T9086] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.794139][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'. [ 182.838834][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 182.912984][ T9099] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.037706][ T9106] netlink: 'syz.4.934': attribute type 4 has an invalid length. [ 183.078828][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 183.209169][ T9113] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 183.468695][ T9122] netlink: 96 bytes leftover after parsing attributes in process `syz.3.939'. [ 183.512034][ T9128] netlink: 176 bytes leftover after parsing attributes in process `syz.1.941'. [ 183.523359][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.941'. [ 183.568790][ T9130] veth1_macvtap: left promiscuous mode [ 183.587691][ T9130] macsec0: entered allmulticast mode [ 184.513157][ T9166] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 184.603965][ T9166] 8021q: adding VLAN 0 to HW filter on device bond8 [ 184.610237][ T9174] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 184.658930][ T9174] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 184.941360][ T9188] netlink: 'syz.1.957': attribute type 13 has an invalid length. [ 184.981600][ T9190] pim6reg: entered allmulticast mode [ 185.000086][ T9188] macvtap0: refused to change device tx_queue_len [ 185.636951][ T9223] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 185.703475][ T9223] 8021q: adding VLAN 0 to HW filter on device bond9 [ 185.855151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.871597][ T9240] __nla_validate_parse: 4 callbacks suppressed [ 185.871621][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 185.892325][ T9243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.987487][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 186.019698][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 186.038472][ T9248] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 186.150363][ T9257] delete_channel: no stack [ 186.260214][ T9263] syz.3.982 uses old SIOCAX25GETINFO [ 186.272299][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 186.278169][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 186.307573][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.412299][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.448902][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 186.485491][ T9278] netlink: 'syz.2.986': attribute type 3 has an invalid length. [ 186.498559][ T9278] netlink: 'syz.2.986': attribute type 3 has an invalid length. [ 186.676072][ T9290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.900446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.048691][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.999'. [ 187.086425][ T9320] validate_nla: 98 callbacks suppressed [ 187.086446][ T9320] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 187.661054][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 187.689086][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1005'. [ 187.934576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.971266][ T9364] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.990097][ T9364] FAULT_INJECTION: forcing a failure. [ 187.990097][ T9364] name failslab, interval 1, probability 0, space 0, times 0 [ 188.007243][ T9364] CPU: 1 UID: 0 PID: 9364 Comm: syz.3.1009 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 188.007276][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.007288][ T9364] Call Trace: [ 188.007296][ T9364] [ 188.007306][ T9364] dump_stack_lvl+0x189/0x250 [ 188.007333][ T9364] ? __pfx____ratelimit+0x10/0x10 [ 188.007361][ T9364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.007381][ T9364] ? __pfx__printk+0x10/0x10 [ 188.007414][ T9364] ? __pfx___might_resched+0x10/0x10 [ 188.007441][ T9364] ? fs_reclaim_acquire+0x7d/0x100 [ 188.007469][ T9364] should_fail_ex+0x414/0x560 [ 188.007504][ T9364] ? __pfx_sock_alloc_inode+0x10/0x10 [ 188.007528][ T9364] should_failslab+0xa8/0x100 [ 188.007549][ T9364] ? __pfx_sock_alloc_inode+0x10/0x10 [ 188.007571][ T9364] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 188.007598][ T9364] ? sock_alloc_inode+0x28/0xc0 [ 188.007628][ T9364] ? __pfx_sock_alloc_inode+0x10/0x10 [ 188.007652][ T9364] sock_alloc_inode+0x28/0xc0 [ 188.007676][ T9364] alloc_inode+0x67/0x1b0 [ 188.007706][ T9364] __sock_create+0x12d/0x9f0 [ 188.007745][ T9364] mptcp_subflow_create_socket+0xfd/0xb40 [ 188.007779][ T9364] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 188.007797][ T9364] ? aa_label_sk_perm+0x413/0x560 [ 188.007824][ T9364] ? tomoyo_check_inet_address+0x275/0x8c0 [ 188.007858][ T9364] __mptcp_nmpc_sk+0x150/0x720 [ 188.007883][ T9364] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 188.007905][ T9364] ? look_up_lock_class+0x74/0x170 [ 188.007941][ T9364] mptcp_connect+0x71/0x830 [ 188.007974][ T9364] __inet_stream_connect+0x2ae/0xe80 [ 188.008026][ T9364] ? __local_bh_enable_ip+0x12d/0x1c0 [ 188.008054][ T9364] ? __pfx___inet_stream_connect+0x10/0x10 [ 188.008080][ T9364] ? __local_bh_enable_ip+0x12d/0x1c0 [ 188.008108][ T9364] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 188.008150][ T9364] inet_stream_connect+0x66/0xa0 [ 188.008179][ T9364] __sys_connect+0x316/0x440 [ 188.008212][ T9364] ? __fget_files+0x3a0/0x420 [ 188.008231][ T9364] ? __pfx___sys_connect+0x10/0x10 [ 188.008276][ T9364] ? __pfx_ksys_write+0x10/0x10 [ 188.008301][ T9364] ? rcu_is_watching+0x15/0xb0 [ 188.008340][ T9364] __x64_sys_connect+0x7a/0x90 [ 188.008371][ T9364] do_syscall_64+0xfa/0x3b0 [ 188.008400][ T9364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.008418][ T9364] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.008437][ T9364] ? clear_bhb_loop+0x60/0xb0 [ 188.008462][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.008481][ T9364] RIP: 0033:0x7f5fb0d8eb69 [ 188.008500][ T9364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.008516][ T9364] RSP: 002b:00007f5fb1c6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 188.008538][ T9364] RAX: ffffffffffffffda RBX: 00007f5fb0fb5fa0 RCX: 00007f5fb0d8eb69 [ 188.008552][ T9364] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 188.008564][ T9364] RBP: 00007f5fb1c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 188.008576][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.008588][ T9364] R13: 0000000000000000 R14: 00007f5fb0fb5fa0 R15: 00007ffe14c7bf68 [ 188.008622][ T9364] [ 188.008744][ T9364] socket: no more sockets [ 188.426952][ T9378] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 188.487026][ T9381] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.512759][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.522611][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.636553][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 188.733697][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 189.041463][ T9410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.084379][ T9410] FAULT_INJECTION: forcing a failure. [ 189.084379][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 189.114525][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.2.1025 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 189.114556][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.114567][ T9410] Call Trace: [ 189.114576][ T9410] [ 189.114585][ T9410] dump_stack_lvl+0x189/0x250 [ 189.114613][ T9410] ? __pfx____ratelimit+0x10/0x10 [ 189.114641][ T9410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.114662][ T9410] ? __pfx__printk+0x10/0x10 [ 189.114695][ T9410] ? __pfx___might_resched+0x10/0x10 [ 189.114721][ T9410] ? fs_reclaim_acquire+0x7d/0x100 [ 189.114749][ T9410] should_fail_ex+0x414/0x560 [ 189.114786][ T9410] should_failslab+0xa8/0x100 [ 189.114808][ T9410] kmem_cache_alloc_noprof+0x73/0x3c0 [ 189.114835][ T9410] ? security_inode_alloc+0x39/0x330 [ 189.114879][ T9410] security_inode_alloc+0x39/0x330 [ 189.114911][ T9410] inode_init_always_gfp+0x9ed/0xdc0 [ 189.114949][ T9410] ? __pfx_sock_alloc_inode+0x10/0x10 [ 189.114974][ T9410] alloc_inode+0x82/0x1b0 [ 189.115005][ T9410] __sock_create+0x12d/0x9f0 [ 189.115045][ T9410] mptcp_subflow_create_socket+0xfd/0xb40 [ 189.115066][ T9410] ? preempt_schedule_irq+0xb5/0x150 [ 189.115102][ T9410] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 189.115136][ T9410] __mptcp_nmpc_sk+0x150/0x720 [ 189.115161][ T9410] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 189.115184][ T9410] ? preempt_schedule_irq+0xde/0x150 [ 189.115209][ T9410] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 189.115240][ T9410] mptcp_connect+0x71/0x830 [ 189.115273][ T9410] __inet_stream_connect+0x2ae/0xe80 [ 189.115302][ T9410] ? inet_stream_connect+0x51/0xa0 [ 189.115333][ T9410] ? __pfx___inet_stream_connect+0x10/0x10 [ 189.115354][ T9410] ? __local_bh_enable_ip+0x135/0x1c0 [ 189.115387][ T9410] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 189.115429][ T9410] inet_stream_connect+0x66/0xa0 [ 189.115458][ T9410] __sys_connect+0x316/0x440 [ 189.115486][ T9410] ? __fget_files+0x3a0/0x420 [ 189.115512][ T9410] ? __pfx___sys_connect+0x10/0x10 [ 189.115556][ T9410] ? __pfx_ksys_write+0x10/0x10 [ 189.115581][ T9410] ? rcu_is_watching+0x15/0xb0 [ 189.115620][ T9410] __x64_sys_connect+0x7a/0x90 [ 189.115651][ T9410] do_syscall_64+0xfa/0x3b0 [ 189.115677][ T9410] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.115704][ T9410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.115723][ T9410] ? clear_bhb_loop+0x60/0xb0 [ 189.115768][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.115787][ T9410] RIP: 0033:0x7f1df198eb69 [ 189.115806][ T9410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.115823][ T9410] RSP: 002b:00007f1df28cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 189.115846][ T9410] RAX: ffffffffffffffda RBX: 00007f1df1bb5fa0 RCX: 00007f1df198eb69 [ 189.115869][ T9410] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 189.115882][ T9410] RBP: 00007f1df28cc090 R08: 0000000000000000 R09: 0000000000000000 [ 189.115893][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.115905][ T9410] R13: 0000000000000000 R14: 00007f1df1bb5fa0 R15: 00007ffe27132e48 [ 189.115939][ T9410] [ 189.117166][ T9410] socket: no more sockets [ 189.599582][ T9429] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.753218][ T9434] netlink: 'syz.0.1033': attribute type 9 has an invalid length. [ 190.162207][ T9458] tipc: Enabling of bearer rejected, failed to enable media [ 190.228300][ T9464] tipc: Enabling of bearer rejected, failed to enable media [ 190.266879][ T9464] Illegal XDP return value 1228665954 on prog (id 225) dev N/A, expect packet loss! [ 190.388522][ T9469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.430307][ T9477] macvlan0: entered promiscuous mode [ 190.443514][ T9477] macvlan0: entered allmulticast mode [ 190.472159][ T9477] bond3: (slave macvlan0): Opening slave failed [ 194.069969][ T9517] __nla_validate_parse: 3 callbacks suppressed [ 194.069989][ T9517] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1053'. [ 194.085914][ T9506] !: renamed from dummy0 (while UP) [ 194.348658][ T9522] netlink: 'syz.0.1055': attribute type 25 has an invalid length. [ 194.554629][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1059'. [ 194.601845][ T9534] vlan2: entered allmulticast mode [ 194.610992][ T9534] bridge0: entered allmulticast mode [ 194.616852][ T9534] bridge4: port 1(vlan2) entered blocking state [ 194.633774][ T9534] bridge4: port 1(vlan2) entered disabled state [ 194.660090][ T9534] vlan2: entered promiscuous mode [ 194.666306][ T9534] bridge0: entered promiscuous mode [ 194.671834][ T9542] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1061'. [ 194.692608][ T9540] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1062'. [ 194.738261][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.749673][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.069232][ T9559] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 195.148357][ T9559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.275302][ T9562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.283552][ T9562] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.340837][ T9562] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 195.458187][ T9574] macvlan0: entered promiscuous mode [ 195.468715][ T9574] macvlan0: entered allmulticast mode [ 195.477873][ T9574] bond4: entered promiscuous mode [ 195.498583][ T9574] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 195.536238][ T9574] bond4: left promiscuous mode [ 195.724583][ T9588] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.046597][ T9602] tipc: Enabled bearer , priority 0 [ 196.066203][ T9602] syzkaller0: entered promiscuous mode [ 196.078831][ T9602] syzkaller0: entered allmulticast mode [ 196.091705][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 196.112230][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 196.140264][ T9602] tipc: Resetting bearer [ 196.220778][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 196.242990][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'. [ 196.260134][ T9601] tipc: Resetting bearer [ 196.299212][ T9601] tipc: Disabling bearer [ 196.468864][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 196.522110][ T9630] ip6gretap1: entered allmulticast mode [ 196.581253][ T9637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.892955][ T9652] IPVS: ip_vs_edit_dest(): server weight less than zero [ 197.081771][ T9664] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 197.097182][ T9664] netlink: 'syz.0.1100': attribute type 3 has an invalid length. [ 197.109187][ T9664] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1100'. [ 197.556505][ T9688] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 197.567446][ T9691] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 197.612374][ T9688] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.727031][ T9698] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 197.740168][ T9704] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 197.838741][ T9704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.277430][ T5958] syzkaller0: tun_net_xmit 76 [ 198.589725][ T9741] syzkaller1: entered promiscuous mode [ 198.596283][ T9741] syzkaller1: entered allmulticast mode [ 198.671844][ T9745] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 198.706473][ T9745] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.851500][ T9750] netlink: 'syz.3.1124': attribute type 13 has an invalid length. [ 199.053506][ T5841] syzkaller0: tun_net_xmit 76 [ 199.087846][ T9762] __nla_validate_parse: 1 callbacks suppressed [ 199.087869][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1129'. [ 199.440927][ T9772] netlink: 'syz.3.1133': attribute type 62 has an invalid length. [ 199.694616][ T9785] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1138'. [ 199.813106][ T9794] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1141'. [ 199.849344][ T9794] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.950429][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1142'. [ 199.977258][ T9795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1140'. [ 200.110208][ T9810] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 200.118335][ T9810] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.209484][ T9822] netlink: 'syz.4.1148': attribute type 10 has an invalid length. [ 200.209592][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 200.235813][ T9822] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 200.246660][ T9822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.434648][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 200.457244][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 200.509289][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.870604][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 200.924057][ T9853] netlink: 'syz.1.1157': attribute type 15 has an invalid length. [ 201.065757][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 201.097354][ T9853] netlink: 'syz.1.1157': attribute type 15 has an invalid length. [ 201.157912][ T7003] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.233056][ T7003] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.276217][ T7003] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.341458][ T7003] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.620126][ T9884] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.821686][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.829517][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.597749][ T9935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.624638][ T9937] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 203.140807][ T9962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.405434][ T9976] netlink: 'syz.0.1200': attribute type 2 has an invalid length. [ 203.432347][ T9980] netlink: 'syz.0.1200': attribute type 2 has an invalid length. [ 203.681563][ T9994] netlink: 'syz.3.1205': attribute type 11 has an invalid length. [ 204.252216][ T9978] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 204.483086][T10049] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 204.558908][T10049] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.566216][T10049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.574182][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.581553][T10049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.600990][T10056] __nla_validate_parse: 6 callbacks suppressed [ 204.601011][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 204.614771][T10050] sctp: [Deprecated]: syz.2.1222 (pid 10050) Use of int in max_burst socket option deprecated. [ 204.614771][T10050] Use struct sctp_assoc_value instead [ 204.682257][T10058] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1221'. [ 204.730523][T10049] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 204.737199][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 205.177497][T10094] raw_sendmsg: syz.4.1233 forgot to set AF_INET. Fix it! [ 205.319857][T10102] netlink: 'syz.4.1235': attribute type 21 has an invalid length. [ 205.330509][T10102] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 205.406835][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 205.456886][ T5840] Bluetooth: hci1: command 0x0401 tx timeout [ 206.086197][T10135] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1245'. [ 206.211161][T10149] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1248'. [ 206.358092][T10159] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 206.491482][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 206.541764][T10170] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.835616][T10186] netlink: 'syz.4.1256': attribute type 6 has an invalid length. [ 207.401441][T10216] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 208.136316][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 208.155597][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 208.581000][T10255] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1274'. [ 208.700151][ T5844] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 208.750532][T10260] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.769541][ T5844] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 208.878615][T10269] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 209.010920][T10271] gretap1: entered promiscuous mode [ 209.173179][T10288] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 209.191345][T10291] openvswitch: netlink: Multiple metadata blocks provided [ 209.613924][T10319] __nla_validate_parse: 4 callbacks suppressed [ 209.613946][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 209.675242][T10323] netlink: 'syz.4.1295': attribute type 1 has an invalid length. [ 210.021989][T10345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.155326][T10353] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.183696][T10353] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.342296][T10362] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 210.383139][T10362] tipc: Enabling of bearer rejected, failed to enable media [ 210.508912][T10367] macvlan3: entered promiscuous mode [ 210.514357][T10367] macvlan3: entered allmulticast mode [ 210.543560][T10369] macvlan4: entered promiscuous mode [ 210.549190][T10369] macvlan4: entered allmulticast mode [ 210.673171][T10371] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1312'. [ 210.825823][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1313'. [ 210.933347][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 210.962799][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 211.020134][T10381] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 211.931416][T10419] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 212.035677][T10427] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1328'. [ 212.241197][T10435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.303461][T10435] syzkaller1: entered promiscuous mode [ 212.313026][T10435] syzkaller1: entered allmulticast mode [ 212.427805][T10405] lo speed is unknown, defaulting to 1000 [ 212.442157][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 212.457868][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 212.468641][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 212.491600][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 212.539400][T10439] veth0: entered promiscuous mode [ 212.560238][T10438] veth0: left promiscuous mode [ 213.047678][T10463] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 213.059364][T10463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.183066][T10465] netlink: 'syz.3.1342': attribute type 29 has an invalid length. [ 213.242766][T10465] netlink: 'syz.3.1342': attribute type 29 has an invalid length. [ 213.265720][T10465] netlink: 'syz.3.1342': attribute type 29 has an invalid length. [ 213.285621][T10465] netlink: 'syz.3.1342': attribute type 29 has an invalid length. [ 213.312403][T10470] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 213.563233][T10482] netlink: 'syz.1.1347': attribute type 6 has an invalid length. [ 213.637205][T10485] netlink: 'syz.0.1348': attribute type 26 has an invalid length. [ 214.271149][T10481] atomic_op ffff88807bc59998 conn xmit_atomic 0000000000000000 [ 214.360766][T10505] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 214.673378][T10518] __nla_validate_parse: 4 callbacks suppressed [ 214.673399][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 214.724126][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 215.008541][T10532] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 215.033755][T10532] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1362'. [ 215.047129][T10532] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 215.058005][T10532] netlink: 'syz.0.1362': attribute type 2 has an invalid length. [ 215.288674][T10548] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.598833][T10565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.685625][T10565] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 215.702996][T10565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1374'. [ 215.900535][T10575] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 215.929074][T10575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1378'. [ 216.444600][T10556] lo speed is unknown, defaulting to 1000 [ 216.519132][T10600] sock: sock_set_timeout: `syz.0.1385' (pid 10600) tries to set negative timeout [ 216.692833][ T5958] syzkaller0: tun_net_xmit 76 [ 216.709465][T10604] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 216.722669][T10604] netlink: 'syz.0.1387': attribute type 4 has an invalid length. [ 216.737408][T10604] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.771190][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.801885][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.936587][T10607] !: renamed from dummy0 (while UP) [ 217.023220][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 217.296520][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 217.296545][ T52] Bluetooth: hci1: command 0x0401 tx timeout [ 217.303190][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 217.309011][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 217.941679][T10642] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 218.023760][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1398'. [ 218.073763][T10642] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 218.569771][T10657] pimreg: entered allmulticast mode [ 218.580647][T10662] tipc: Enabling of bearer rejected, failed to enable media [ 218.617363][T10664] netlink: 'syz.1.1405': attribute type 2 has an invalid length. [ 218.702749][T10671] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 219.043324][ T5841] IPVS: starting estimator thread 0... [ 219.175193][T10695] IPVS: using max 22 ests per chain, 52800 per kthread [ 219.263249][T10699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.324551][T10701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.333257][T10701] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.355522][T10701] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 219.783981][T10727] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 219.916411][T10708] team0 (unregistering): Port device team_slave_0 removed [ 219.949820][T10708] team0 (unregistering): Port device team_slave_1 removed [ 220.238989][T10753] __nla_validate_parse: 10 callbacks suppressed [ 220.239009][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 220.246731][T10759] validate_nla: 2 callbacks suppressed [ 220.246747][T10759] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 220.260440][T10754] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 220.330457][T10758] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.353263][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 220.387969][T10754] bridge0: entered allmulticast mode [ 220.399895][T10754] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.315467][T10783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 221.377181][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 222.949758][T10824] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 222.963278][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 223.072318][T10830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.093746][ T5958] syzkaller0: tun_net_xmit 76 [ 223.257861][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 223.278923][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 223.392934][T10842] can: request_module (can-proto-0) failed. [ 223.411493][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 223.495069][T10845] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 223.968252][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 224.243382][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 224.283270][T10880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.380684][ T5841] IPVS: starting estimator thread 0... [ 224.537381][T10891] IPVS: using max 23 ests per chain, 55200 per kthread [ 225.457250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.797312][T10933] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 225.813163][T10933] IPv6: Can't replace route, no match found [ 225.966600][T10936] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1473'. [ 226.114040][T10943] syzkaller0: entered promiscuous mode [ 226.120866][T10943] syzkaller0: entered allmulticast mode [ 226.299404][T10954] netlink: 'syz.2.1477': attribute type 83 has an invalid length. [ 226.308715][T10952] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1475'. [ 226.351768][T10956] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.694944][T10970] sock: sock_set_timeout: `syz.0.1483' (pid 10970) tries to set negative timeout [ 226.759701][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 230.583204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 231.301988][T10995] tipc: Enabled bearer , priority 0 [ 231.314536][T10995] syzkaller0: entered promiscuous mode [ 231.333183][T10995] syzkaller0: entered allmulticast mode [ 231.340580][T10995] tipc: Resetting bearer [ 231.362857][T11007] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1490'. [ 231.479627][T11013] bond3 (unregistering): Released all slaves [ 231.524932][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 231.591509][T11010] tipc: Resetting bearer [ 232.038776][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1507'. [ 232.263729][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 232.402966][T11074] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1515'. [ 232.417088][T11075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1516'. [ 232.498603][T11077] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1518'. [ 232.510981][T11077] netlink: 'syz.3.1518': attribute type 6 has an invalid length. [ 232.526002][T11077] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 232.534591][T11077] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1518'. [ 232.574959][T11083] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 232.602094][T11083] team0: left allmulticast mode [ 232.610109][T11083] team_slave_0: left allmulticast mode [ 232.618935][T11083] team_slave_1: left allmulticast mode [ 232.627564][T11083] vlan0: left allmulticast mode [ 232.634600][T11083] veth0_vlan: left allmulticast mode [ 232.642055][T11083] team0: left promiscuous mode [ 232.652098][T11083] team_slave_0: left promiscuous mode [ 232.660764][T11083] team_slave_1: left promiscuous mode [ 232.669485][T11083] bridge0: port 3(team0) entered disabled state [ 232.691246][T11083] batman_adv: batadv0: Adding interface: team0 [ 232.700444][T11083] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.738124][T11083] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 233.219218][T11117] netlink: 'syz.2.1527': attribute type 29 has an invalid length. [ 233.281985][T11117] lo: entered allmulticast mode [ 233.469208][T11125] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 233.765090][T11139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.841800][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1536'. [ 233.947352][ T30] audit: type=1800 audit(1754227003.975:3): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1538" name="memory.events" dev="tmpfs" ino=1557 res=0 errno=0 [ 233.985063][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 234.016454][T11152] netlink: 'syz.0.1538': attribute type 14 has an invalid length. [ 234.048227][T11152] netlink: 'syz.0.1538': attribute type 13 has an invalid length. [ 234.457609][T11181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.797965][T11197] netlink: 'syz.2.1553': attribute type 5 has an invalid length. [ 234.851018][T11199] bridge0: port 3(veth0_to_bridge) entered blocking state [ 234.886980][T11199] bridge0: port 3(veth0_to_bridge) entered disabled state [ 234.911917][T11199] veth0_to_bridge: entered allmulticast mode [ 234.943337][T11199] veth0_to_bridge: entered promiscuous mode [ 234.974373][T11199] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.004185][T11199] bridge0: port 3(veth0_to_bridge) entered blocking state [ 235.011847][T11199] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 235.432820][T11226] netlink: 'syz.4.1562': attribute type 12 has an invalid length. [ 235.440794][T11226] netlink: 'syz.4.1562': attribute type 29 has an invalid length. [ 235.868270][T11255] nbd: must specify at least one socket [ 236.024316][T11259] tipc: Started in network mode [ 236.029275][T11259] tipc: Node identity ac14142f, cluster identity 4711 [ 236.083243][T11259] tipc: New replicast peer: 0.0.0.0 [ 236.089765][T11259] tipc: Enabled bearer , priority 10 [ 236.745008][T11286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.793592][T11287] tipc: New replicast peer: 0.0.0.0 [ 236.799527][T11287] tipc: Enabled bearer , priority 10 [ 236.827147][T11288] tipc: Enabling of bearer rejected, already enabled [ 236.922159][T11286] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 237.082684][ T5928] tipc: Node number set to 2886997039 [ 237.161940][T11291] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.237474][T11305] macvlan6: entered promiscuous mode [ 237.256629][T11305] macvlan6: entered allmulticast mode [ 237.266304][T11305] bond11: entered promiscuous mode [ 237.273138][T11305] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 237.286079][T11305] bond11: left promiscuous mode [ 237.441623][T11299] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.450890][T11299] bond11: (slave vxcan7): The slave device specified does not support setting the MAC address [ 237.466105][T11299] bond11: (slave vxcan7): Error -95 calling set_mac_address [ 237.493958][T11311] __nla_validate_parse: 9 callbacks suppressed [ 237.493979][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 237.830512][T11325] bond4: entered promiscuous mode [ 237.836324][T11325] bond4: entered allmulticast mode [ 237.843818][T11325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.028725][T11346] netlink: 'syz.1.1591': attribute type 161 has an invalid length. [ 238.160337][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1595'. [ 238.258772][T11358] tun0: tun_chr_ioctl cmd 1074025675 [ 238.276488][T11358] tun0: persist disabled [ 238.289187][T11361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1598'. [ 238.503626][T11371] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 238.529898][T11373] bond0: (slave bridge0): Releasing backup interface [ 238.559848][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.567475][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.577927][T11371] netlink: 'syz.0.1602': attribute type 10 has an invalid length. [ 238.619269][T11373] bridge_slave_0: left allmulticast mode [ 238.625256][T11373] bridge_slave_0: left promiscuous mode [ 238.631296][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.645857][T11373] bridge_slave_1: left allmulticast mode [ 238.652138][T11373] bridge_slave_1: left promiscuous mode [ 238.662369][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.678260][T11373] bond0: (slave bond_slave_0): Releasing backup interface [ 238.704674][T11373] team0: Port device team_slave_0 removed [ 238.744583][T11373] team0: Port device team_slave_1 removed [ 238.754851][T11373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.763711][T11373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.775027][T11373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.800909][T11373] bond0: (slave wlan1): Releasing backup interface [ 238.811135][T11373] bond2: (slave gretap2): Releasing active interface [ 238.833539][T11371] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 238.858095][T11371] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.925756][T11372] bond0: (slave wlan1): Releasing backup interface [ 239.028360][T11380] tipc: Enabling of bearer rejected, already enabled [ 239.042710][T11381] netlink: 'syz.1.1604': attribute type 11 has an invalid length. [ 239.069137][T11381] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1604'. [ 239.268399][T11404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 239.493426][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 239.502782][T11421] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 239.510547][T11421] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 239.530001][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1612'. [ 240.006854][T11443] syz.0.1617: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.033195][T11443] CPU: 0 UID: 0 PID: 11443 Comm: syz.0.1617 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 240.033229][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.033241][T11443] Call Trace: [ 240.033250][T11443] [ 240.033259][T11443] dump_stack_lvl+0x189/0x250 [ 240.033291][T11443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.033314][T11443] ? __pfx__printk+0x10/0x10 [ 240.033341][T11443] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.033363][T11443] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.033383][T11443] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 240.033408][T11443] warn_alloc+0x214/0x310 [ 240.033436][T11443] ? __pfx_warn_alloc+0x10/0x10 [ 240.033467][T11443] ? __get_vm_area_node+0x28f/0x300 [ 240.033497][T11443] ? packet_set_ring+0x6f4/0x2380 [ 240.033526][T11443] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 240.033583][T11443] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.033604][T11443] ? alloc_pages_mpol+0x3cd/0x4a0 [ 240.033636][T11443] ? packet_set_ring+0x6f4/0x2380 [ 240.033658][T11443] vzalloc_noprof+0xb2/0xf0 [ 240.033677][T11443] ? packet_set_ring+0x6f4/0x2380 [ 240.033701][T11443] packet_set_ring+0x6f4/0x2380 [ 240.033760][T11443] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 240.033799][T11443] ? __pfx_packet_set_ring+0x10/0x10 [ 240.033822][T11443] ? irqentry_exit+0x74/0x90 [ 240.033848][T11443] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.033886][T11443] ? packet_setsockopt+0xc3f/0x12c0 [ 240.033918][T11443] packet_setsockopt+0xc5a/0x12c0 [ 240.033946][T11443] ? __pfx_packet_setsockopt+0x10/0x10 [ 240.033977][T11443] ? __lock_acquire+0xab9/0xd20 [ 240.034012][T11443] ? aa_sk_perm+0x81e/0x950 [ 240.034044][T11443] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.034072][T11443] ? __fget_files+0x2a/0x420 [ 240.034092][T11443] ? aa_sock_opt_perm+0x74/0x110 [ 240.034228][T11443] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 240.034251][T11443] ? __pfx_packet_setsockopt+0x10/0x10 [ 240.034276][T11443] do_sock_setsockopt+0x179/0x1b0 [ 240.034301][T11443] __x64_sys_setsockopt+0x13f/0x1b0 [ 240.034326][T11443] do_syscall_64+0xfa/0x3b0 [ 240.034352][T11443] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.034377][T11443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.034397][T11443] ? clear_bhb_loop+0x60/0xb0 [ 240.034421][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.034441][T11443] RIP: 0033:0x7ff245b8eb69 [ 240.034460][T11443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.034478][T11443] RSP: 002b:00007ff2469cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.034500][T11443] RAX: ffffffffffffffda RBX: 00007ff245db6080 RCX: 00007ff245b8eb69 [ 240.034515][T11443] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000008 [ 240.034527][T11443] RBP: 00007ff245c11df1 R08: 000000000000001c R09: 0000000000000000 [ 240.034540][T11443] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.034552][T11443] R13: 0000000000000000 R14: 00007ff245db6080 R15: 00007ffcc688a388 [ 240.034586][T11443] [ 240.034714][T11443] Mem-Info: [ 240.099117][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 240.125842][T11443] active_anon:3630 inactive_anon:0 isolated_anon:0 [ 240.125842][T11443] active_file:1286 inactive_file:39885 isolated_file:0 [ 240.125842][T11443] unevictable:768 dirty:61 writeback:0 [ 240.125842][T11443] slab_reclaimable:11454 slab_unreclaimable:106861 [ 240.125842][T11443] mapped:28936 shmem:1368 pagetables:948 [ 240.125842][T11443] sec_pagetables:0 bounce:0 [ 240.125842][T11443] kernel_misc_reclaimable:0 [ 240.125842][T11443] free:1320520 free_pcp:14691 free_cma:0 [ 240.442247][T11443] Node 0 active_anon:14372kB inactive_anon:0kB active_file:5144kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115652kB dirty:244kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12860kB pagetables:3580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.488935][T11443] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.553070][T11443] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.627691][T11443] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 240.645320][T11443] Node 0 DMA32 free:1363676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14424kB inactive_anon:0kB active_file:5144kB inactive_file:157496kB unevictable:1536kB writepending:244kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:38268kB local_pcp:19308kB free_cma:0kB [ 240.750755][T11443] lowmem_reserve[]: 0 0 1 1 1 [ 240.776741][T11443] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 240.842383][T11459] syzkaller1: entered promiscuous mode [ 240.857932][T11443] lowmem_reserve[]: 0 0 0 0 0 [ 240.862598][T11459] syzkaller1: entered allmulticast mode [ 240.902079][T11443] Node 1 Normal free:3901876kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17640kB local_pcp:8904kB free_cma:0kB [ 240.943102][T11443] lowmem_reserve[]: 0 0 0 0 0 [ 240.948726][T11443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.988166][T11443] Node 0 DMA32: 1624*4kB (UME) 1202*8kB (UME) 594*16kB (UME) 204*32kB (UME) 29*64kB (UME) 32*128kB (UME) 39*256kB (UME) 36*512kB (UM) 18*1024kB (UM) 12*2048kB (UM) 307*4096kB (UM) = 1366992kB [ 241.088637][T11443] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 241.135467][T11443] Node 1 Normal: 159*4kB (UE) 47*8kB (UME) 40*16kB (UME) 80*32kB (UME) 29*64kB (UME) 4*128kB (UME) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901876kB [ 241.166540][T11443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.180580][T11443] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.196454][T11443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.214856][T11443] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.226925][T11443] 42536 total pagecache pages [ 241.231897][T11443] 0 pages in swap cache [ 241.236525][T11443] Free swap = 124996kB [ 241.240861][T11443] Total swap = 124996kB [ 241.247066][T11471] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1628'. [ 241.250455][T11443] 2097051 pages RAM [ 241.268573][T11443] 0 pages HighMem/MovableOnly [ 241.272828][T11473] syzkaller1: entered promiscuous mode [ 241.274442][T11443] 424872 pages reserved [ 241.286642][T11473] syzkaller1: entered allmulticast mode [ 241.288368][T11443] 0 pages cma reserved [ 241.460106][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 241.501728][T11492] vlan3: entered allmulticast mode [ 241.509217][T11492] bond0: entered allmulticast mode [ 241.515230][T11492] bond_slave_0: entered allmulticast mode [ 241.521122][T11492] bond_slave_1: entered allmulticast mode [ 241.629091][T11490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.698056][T11495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.709433][T11495] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 241.724970][T11495] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 242.450908][T11548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.473849][T11551] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.670914][T11563] team0: Device macvlan6 is up. Set it down before adding it as a team port [ 242.744146][T11569] netlink: 'syz.0.1655': attribute type 6 has an invalid length. [ 242.752289][T11569] __nla_validate_parse: 4 callbacks suppressed [ 242.752309][T11569] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1655'. [ 243.269312][T11593] tipc: Resetting bearer [ 243.280136][T11596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1663'. [ 243.291779][T11595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 243.304312][T11593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1664'. [ 243.308270][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 243.324823][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 243.327490][T11596] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1663'. [ 243.340378][T11595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1665'. [ 243.354572][T11591] tipc: Resetting bearer [ 243.384233][T11601] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1663'. [ 243.459237][T11603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'. [ 243.470173][T11598] hsr_slave_0 (unregistering): left promiscuous mode [ 243.512326][T11606] team0: Device macvlan4 is up. Set it down before adding it as a team port [ 243.624630][T11614] netlink: 'syz.1.1669': attribute type 2 has an invalid length. [ 243.777899][T11619] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 244.030456][T11632] netlink: 'syz.2.1677': attribute type 21 has an invalid length. [ 244.188478][T11640] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 244.284152][ T7013] tipc: Resetting bearer [ 244.369770][T11649] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 244.391908][T11650] team0: Device macvlan4 is up. Set it down before adding it as a team port [ 244.513039][T11649] 8021q: adding VLAN 0 to HW filter on device bond12 [ 244.617895][T11655] 8021q: adding VLAN 0 to HW filter on device bond12 [ 244.647136][T11655] bond12: (slave vxcan7): The slave device specified does not support setting the MAC address [ 244.660312][T11655] bond12: (slave vxcan7): Error -95 calling set_mac_address [ 244.736789][T11649] macvlan6: entered promiscuous mode [ 244.742693][T11649] macvlan6: entered allmulticast mode [ 244.749251][T11649] bond12: entered promiscuous mode [ 244.758311][T11649] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 244.770289][T11649] bond12: left promiscuous mode [ 244.821072][T11668] tipc: Enabled bearer , priority 0 [ 244.831831][T11668] geneve1: entered allmulticast mode [ 244.877475][T11668] tipc: Resetting bearer [ 245.159884][T11683] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.167360][T11683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.189737][T11683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.303736][T11667] tipc: Disabling bearer [ 245.580106][T11689] syz_tun (unregistering): left allmulticast mode [ 245.636207][T11689] team0: Port device macvlan2 removed [ 245.657788][T11701] sock: sock_timestamping_bind_phc: sock not bind to device [ 246.151572][T11700] pim6reg: entered allmulticast mode [ 246.325352][T11710] tipc: Enabled bearer , priority 0 [ 246.336224][T11710] syzkaller0: entered promiscuous mode [ 246.341844][T11710] syzkaller0: entered allmulticast mode [ 246.396855][T11710] tipc: Resetting bearer [ 246.432235][T11708] tipc: Resetting bearer [ 246.486391][T11708] tipc: Disabling bearer [ 246.727616][T11724] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 246.778252][T11724] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 246.834183][T11724] gretap2: entered promiscuous mode [ 246.842856][T11724] gretap2: entered allmulticast mode [ 246.848953][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.858732][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.867666][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.878706][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.897813][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.374442][T11730] lo speed is unknown, defaulting to 1000 [ 248.061050][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.085606][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.095791][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.104315][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.120078][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.253180][T11773] sock: sock_timestamping_bind_phc: sock not bind to device [ 248.283318][T11773] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 248.312002][T11773] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 248.619164][T11798] __nla_validate_parse: 14 callbacks suppressed [ 248.619186][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1726'. [ 248.812142][T11802] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 248.937156][T11802] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.972571][ T5157] Bluetooth: hci1: command tx timeout [ 249.004944][T11808] 8021q: adding VLAN 0 to HW filter on device bond7 [ 249.012507][T11808] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 249.030233][T11808] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 249.056737][T11730] chnl_net:caif_netlink_parms(): no params data found [ 249.071253][T11766] lo speed is unknown, defaulting to 1000 [ 249.126902][T11802] macvlan0: entered promiscuous mode [ 249.142842][T11802] macvlan0: entered allmulticast mode [ 249.152224][T11802] bond7: entered promiscuous mode [ 249.173714][T11802] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 249.193505][T11802] bond7: left promiscuous mode [ 249.475974][T11833] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 249.492958][T11831] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1735'. [ 249.695798][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.711435][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.724039][T11730] bridge_slave_0: entered allmulticast mode [ 249.738176][T11730] bridge_slave_0: entered promiscuous mode [ 249.760634][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.779885][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.793219][T11730] bridge_slave_1: entered allmulticast mode [ 249.801695][T11730] bridge_slave_1: entered promiscuous mode [ 249.871165][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 249.891985][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 249.970648][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.008515][ T30] audit: type=1800 audit(1754227020.045:4): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.051678][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.108947][ T30] audit: type=1800 audit(1754227020.045:5): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.173192][ T5157] Bluetooth: hci2: command tx timeout [ 250.219065][ T30] audit: type=1800 audit(1754227020.045:6): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.299198][ T30] audit: type=1800 audit(1754227020.045:7): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.379351][ T30] audit: type=1800 audit(1754227020.045:8): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.433494][ T30] audit: type=1800 audit(1754227020.045:9): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.472100][ T30] audit: type=1800 audit(1754227020.045:10): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.494876][ T30] audit: type=1800 audit(1754227020.045:11): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.516764][ T30] audit: type=1800 audit(1754227020.045:12): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.539017][ T30] audit: type=1800 audit(1754227020.045:13): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 250.635312][T11874] sock: sock_timestamping_bind_phc: sock not bind to device [ 250.655518][T11730] team0: Port device team_slave_0 added [ 250.679944][T11730] team0: Port device team_slave_1 added [ 250.785333][T11877] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 250.815683][T11877] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 250.843310][T11877] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.910032][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.922581][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.977419][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.013945][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.034474][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.076535][ T5157] Bluetooth: hci1: command tx timeout [ 251.095075][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.099631][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 251.238002][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 251.444857][T11730] hsr_slave_0: entered promiscuous mode [ 251.452272][T11730] hsr_slave_1: entered promiscuous mode [ 251.482844][T11730] debugfs: 'hsr0' already exists in 'hsr' [ 251.488813][T11730] Cannot create hsr debugfs directory [ 251.501820][T11766] chnl_net:caif_netlink_parms(): no params data found [ 251.532074][T11908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.706586][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.714270][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.721626][T11766] bridge_slave_0: entered allmulticast mode [ 251.730715][T11766] bridge_slave_0: entered promiscuous mode [ 251.755619][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.763786][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.771209][T11766] bridge_slave_1: entered allmulticast mode [ 251.779955][T11766] bridge_slave_1: entered promiscuous mode [ 251.858019][T11766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.880093][T11766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.931786][T11766] team0: Port device team_slave_0 added [ 251.958410][T11766] team0: Port device team_slave_1 added [ 252.117410][T11917] netlink: 'syz.0.1755': attribute type 10 has an invalid length. [ 252.135524][T11915] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 252.149057][T11917] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 252.160736][T11766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.175383][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.212506][T11766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.224505][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 252.246662][T11766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.255298][ T5157] Bluetooth: hci2: command tx timeout [ 252.258121][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.295744][T11766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.341234][T11730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.441807][T11730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.521866][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 252.533751][T11766] hsr_slave_0: entered promiscuous mode [ 252.540584][T11766] hsr_slave_1: entered promiscuous mode [ 252.547437][T11766] debugfs: 'hsr0' already exists in 'hsr' [ 252.557565][T11766] Cannot create hsr debugfs directory [ 252.568059][T11730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.576368][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 252.639951][T11730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.666787][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 252.804877][T11948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 253.132947][ T5157] Bluetooth: hci1: command tx timeout [ 253.327686][T11766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.374939][T11766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.405833][T11766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.433385][T11766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.631564][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.725253][T11730] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.749672][T11980] __nla_validate_parse: 1 callbacks suppressed [ 253.749692][T11980] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1771'. [ 253.752346][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.774195][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.780448][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 253.831600][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.838978][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.933403][T11766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.996083][T11766] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.017225][T11989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 254.055981][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.063333][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.105653][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.113029][ T7003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.334322][ T5157] Bluetooth: hci2: command tx timeout [ 254.791527][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 254.899297][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.956531][T11766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.213163][ T5157] Bluetooth: hci1: command tx timeout [ 255.261562][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1785'. [ 255.577861][T12044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1787'. [ 255.904358][T11730] veth0_vlan: entered promiscuous mode [ 255.977536][T11730] veth1_vlan: entered promiscuous mode [ 256.029391][T11766] veth0_vlan: entered promiscuous mode [ 256.118077][T11766] veth1_vlan: entered promiscuous mode [ 256.171208][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 256.188055][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.188167][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.218142][T11730] veth0_macvtap: entered promiscuous mode [ 256.238615][T11730] veth1_macvtap: entered promiscuous mode [ 256.325911][T11730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.354967][T11730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.413930][ T5157] Bluetooth: hci2: command tx timeout [ 256.434074][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.457348][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.505981][T11766] veth0_macvtap: entered promiscuous mode [ 256.535722][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.554890][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.624352][T11766] veth1_macvtap: entered promiscuous mode [ 256.646611][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1799'. [ 256.656883][T12081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1797'. [ 256.734782][T11766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.779544][T11766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.855796][ T7018] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.877039][ T7018] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.927681][ T7018] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.944186][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.957450][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.970799][T12094] netlink: 'syz.1.1801': attribute type 33 has an invalid length. [ 256.984342][T12094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1801'. [ 257.018730][ T7018] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.022001][T12090] netlink: 'syz.1.1801': attribute type 2 has an invalid length. [ 257.066031][T12090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1801'. [ 257.092052][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.117567][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.250710][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.266615][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.398158][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.411282][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.417938][T12105] tipc: Enabled bearer , priority 0 [ 257.475825][T12105] syzkaller0: entered promiscuous mode [ 257.493998][T12105] syzkaller0: entered allmulticast mode [ 257.511944][T12105] tipc: Resetting bearer [ 257.557218][T12105] openvswitch: netlink: Flow key attribute not present in set flow. [ 257.585587][T12110] netlink: 'syz.5.1806': attribute type 19 has an invalid length. [ 257.637088][T12102] tipc: Resetting bearer [ 257.728407][T12102] tipc: Disabling bearer [ 257.985453][T12124] gretap1: entered promiscuous mode [ 258.066294][T12128] macvlan2: entered promiscuous mode [ 258.084004][T12128] macvlan2: entered allmulticast mode [ 258.783428][T12163] __nla_validate_parse: 4 callbacks suppressed [ 258.783450][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 259.697918][T12191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1828'. [ 260.119181][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 260.470552][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1835'. [ 261.003940][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1842'. [ 261.183724][T12244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1844'. [ 261.215793][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 261.222636][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 261.250240][T12247] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 261.279271][T12248] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 261.280955][T12247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.327001][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.594411][T12261] netlink: 'syz.3.1851': attribute type 5 has an invalid length. [ 261.623406][T12261] netlink: 'syz.3.1851': attribute type 4 has an invalid length. [ 261.715972][T12268] gretap1: entered promiscuous mode [ 261.948996][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 262.011116][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1855'. [ 262.256195][T12291] netlink: 'syz.6.1858': attribute type 21 has an invalid length. [ 262.272834][T12292] netlink: 'syz.6.1858': attribute type 21 has an invalid length. [ 262.964162][T12311] syzkaller0: entered promiscuous mode [ 262.971152][T12311] syzkaller0: entered allmulticast mode [ 262.978617][T12323] netlink: 'syz.5.1866': attribute type 1 has an invalid length. [ 262.994718][T12323] netlink: 'syz.5.1866': attribute type 3 has an invalid length. [ 263.003595][T12324] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 263.022608][T12323] NCSI netlink: No device for ifindex 813332851 [ 263.176126][ T5945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.211638][ T5945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.314455][T12327] gretap1: entered promiscuous mode [ 263.422029][T12330] macvlan2: entered promiscuous mode [ 263.440799][T12330] macvlan2: entered allmulticast mode [ 263.476506][T12338] netlink: 'syz.5.1870': attribute type 2 has an invalid length. [ 263.647348][T12350] netlink: 'syz.5.1874': attribute type 6 has an invalid length. [ 263.679537][T12350] netlink: 'syz.5.1874': attribute type 5 has an invalid length. [ 263.707429][T12352] sctp: [Deprecated]: syz.1.1875 (pid 12352) Use of int in max_burst socket option. [ 263.707429][T12352] Use struct sctp_assoc_value instead [ 263.964011][T12368] __nla_validate_parse: 8 callbacks suppressed [ 263.964033][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1880'. [ 264.509836][T12401] syzkaller1: entered allmulticast mode [ 264.699512][T12409] Unsupported ieee802154 address type: 0 [ 264.810029][T12415] sctp: [Deprecated]: syz.3.1893 (pid 12415) Use of int in max_burst socket option deprecated. [ 264.810029][T12415] Use struct sctp_assoc_value instead [ 264.924764][T12421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1895'. [ 265.055279][T12425] netlink: 'syz.5.1896': attribute type 1 has an invalid length. [ 265.287413][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'. [ 265.493308][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1903'. [ 265.640972][T12463] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 265.657047][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1907'. [ 265.669585][T12463] batadv0: entered promiscuous mode [ 265.680788][T12463] batadv0: entered allmulticast mode [ 265.690948][T12463] bridge0: port 1(batadv0) entered blocking state [ 265.700202][T12463] bridge0: port 1(batadv0) entered disabled state [ 265.718536][T12463] bridge0: port 1(batadv0) entered blocking state [ 265.725307][T12463] bridge0: port 1(batadv0) entered listening state [ 265.757853][T12467] pim6reg1: entered promiscuous mode [ 265.764069][T12467] pim6reg1: entered allmulticast mode [ 266.045604][T12478] netlink: 'syz.0.1911': attribute type 8 has an invalid length. [ 266.136013][ T7018] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 266.146257][ T7018] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 266.164104][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 266.195143][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 266.406761][T12482] hsr_slave_1 (unregistering): left promiscuous mode [ 266.420411][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1915'. [ 266.793375][T12517] D: renamed from syzkaller0 [ 267.216834][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1928'. [ 267.293367][T12542] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1930'. [ 267.357489][T12546] tipc: Enabling of bearer rejected, failed to enable media [ 267.504628][T12548] bond0: entered promiscuous mode [ 267.509751][T12548] bond_slave_0: entered promiscuous mode [ 267.539868][T12548] bond_slave_1: entered promiscuous mode [ 267.574063][T12551] bridge: RTM_NEWNEIGH with invalid ether address [ 267.773041][ C0] bridge0: port 1(batadv0) entered learning state [ 267.819699][T12566] tipc: Enabled bearer , priority 0 [ 267.960604][T12576] netlink: 'syz.6.1941': attribute type 1 has an invalid length. [ 267.979772][T12577] netlink: 'syz.6.1941': attribute type 1 has an invalid length. [ 268.069448][T12580] C: renamed from lo (while UP) [ 268.118752][T12582] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 268.139974][T12582] netlink: 'syz.3.1942': attribute type 3 has an invalid length. [ 268.205908][T12586] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 268.214188][T12586] netlink: 'syz.0.1943': attribute type 3 has an invalid length. [ 268.222220][T12586] NCSI netlink: No device for ifindex 0 [ 268.231133][T12588] openvswitch: netlink: Flow key attr not present in new flow. [ 268.469210][T12595] sch_fq: defrate 0 ignored. [ 268.739367][T12565] tipc: Disabling bearer [ 269.182245][T12625] __nla_validate_parse: 9 callbacks suppressed [ 269.182270][T12625] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1955'. [ 269.557371][T12641] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.577936][T12642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.670583][T12647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1964'. [ 269.852629][ C0] bridge0: port 1(batadv0) entered forwarding state [ 269.859629][ C0] bridge0: topology change detected, propagating [ 270.529014][T12653] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 270.551048][T12654] gretap1: entered promiscuous mode [ 270.605160][T12668] netlink: 'syz.5.1971': attribute type 5 has an invalid length. [ 270.880589][T12677] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.934628][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 270.977206][T12683] tipc: Enabled bearer , priority 0 [ 271.018791][T12695] netlink: 'syz.5.1981': attribute type 21 has an invalid length. [ 271.030403][T12682] tipc: Disabling bearer [ 271.050817][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1981'. [ 271.090050][T12690] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1979'. [ 271.222117][T12701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1984'. [ 271.331797][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1987'. [ 271.494215][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'. [ 271.598156][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 271.758135][T12708] gretap1: entered promiscuous mode [ 272.594935][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1997'. [ 272.740111][T12749] netlink: 'syz.6.1998': attribute type 10 has an invalid length. [ 272.772258][T12748] netlink: 'syz.6.1998': attribute type 10 has an invalid length. [ 272.807449][T12749] dummy0: entered promiscuous mode [ 272.846333][T12749] bridge0: port 3(dummy0) entered blocking state [ 272.859750][T12749] bridge0: port 3(dummy0) entered disabled state [ 272.884271][T12749] dummy0: entered allmulticast mode [ 272.916957][T12749] bridge0: port 3(dummy0) entered blocking state [ 272.923809][T12749] bridge0: port 3(dummy0) entered forwarding state [ 273.196797][T12778] atomic_op ffff88806c62d998 conn xmit_atomic 0000000000000000 [ 273.430072][T12792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.971169][T12815] syzkaller0: entered promiscuous mode [ 273.989187][T12815] syzkaller0: entered allmulticast mode [ 274.222154][T12836] tipc: Enabling of bearer rejected, failed to enable media [ 277.087660][T12890] tipc: Enabled bearer , priority 0 [ 277.396887][T12897] tipc: Disabling bearer [ 277.454308][T12910] syzkaller1: entered promiscuous mode [ 277.470177][T12910] syzkaller1: entered allmulticast mode [ 277.560717][T12916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 277.669492][T12918] netlink: 'syz.0.2045': attribute type 21 has an invalid length. [ 277.681250][T12918] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.703308][T12923] __nla_validate_parse: 7 callbacks suppressed [ 277.703330][T12923] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2048'. [ 277.896210][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2051'. [ 278.001107][T12931] veth0_to_team: entered promiscuous mode [ 278.018528][T12931] veth0_to_team: entered allmulticast mode [ 278.058670][T12939] gretap1: entered promiscuous mode [ 278.124079][T12942] openvswitch: netlink: Missing key (keys=40, expected=100) [ 278.199982][T12947] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2054'. [ 278.216727][T12947] netlink: zone id is out of range [ 278.221911][T12947] netlink: zone id is out of range [ 278.230181][T12947] netlink: zone id is out of range [ 278.239833][T12947] netlink: get zone limit has 8 unknown bytes [ 278.674448][T12965] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2059'. [ 278.684453][T12965] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2059'. [ 279.125651][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2066'. [ 279.899068][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 281.431710][T12992] gretap1: entered promiscuous mode [ 281.487036][T13008] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 281.495171][T13008] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2073'. [ 281.505679][T13008] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 281.512391][T13006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.513912][T13008] netlink: 'syz.0.2073': attribute type 2 has an invalid length. [ 281.530850][T13008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2073'. [ 281.782167][T13023] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2077'. [ 282.119908][T13037] Bluetooth: MGMT ver 1.23 [ 282.401361][T13052] gretap1: entered promiscuous mode [ 282.553715][T13057] nbd0: detected capacity change from 0 to 127 [ 282.585357][ T5157] block nbd0: Receive control failed (result -32) [ 282.701277][T13064] veth0_to_team: entered promiscuous mode [ 282.718951][T13064] veth0_to_team: entered allmulticast mode [ 282.827912][T13074] __nla_validate_parse: 4 callbacks suppressed [ 282.827965][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 283.176093][T13093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2097'. [ 283.219707][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 283.264864][T13099] netlink: 'syz.6.2099': attribute type 1 has an invalid length. [ 283.298675][T13099] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2099'. [ 283.456541][T13103] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.529781][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 283.553345][T13106] netlink: 'syz.6.2102': attribute type 1 has an invalid length. [ 283.720253][T13113] sctp: [Deprecated]: syz.3.2103 (pid 13113) Use of int in max_burst socket option. [ 283.720253][T13113] Use struct sctp_assoc_value instead [ 283.751796][T13106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.849316][T13108] gretap1: entered promiscuous mode [ 283.891149][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'. [ 283.917772][T13108] bond2: (slave gretap1): making interface the new active one [ 283.948478][T13108] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 283.997928][T13111] macvlan2: entered promiscuous mode [ 284.043993][T13111] macvlan2: entered allmulticast mode [ 284.073204][T13111] bond2: entered promiscuous mode [ 284.079575][T13111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.124628][T13111] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 284.160257][T13111] bond2: left promiscuous mode [ 284.229176][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2107'. [ 284.509271][T13135] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2109'. [ 284.586540][T13139] netlink: 'syz.3.2110': attribute type 2 has an invalid length. Stopping sshd: [ 284.992226][T13151] netlink: 'syz.1.2113': attribute type 39 has an invalid length. stopped /usr/sbin/sshd (pid 5601) OK [ 285.428850][T13168] netlink: 'syz.5.2117': attribute type 10 has an invalid length. Stopping crond: [ 285.541494][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2119'. stopped /usr/sbin/crond (pid 5580) OK [ 285.819351][T13181] netlink: 'syz.0.2120': attribute type 4 has an invalid length. [ 286.000920][T13160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 Stopping dhcpcd... no /sbin/dhcpcd found; none killed [ 286.144474][T13165] bridge0: port 3(dummy0) entered disabled state [ 286.152052][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.160137][T13165] bridge0: port 1(bridge_slave_0) entered disabled state Stopping network: [ 286.367265][T13165] dummy0: left allmulticast mode [ 286.376769][T13165] dummy0: left promiscuous mode [ 286.398812][T13165] bridge0: port 3(dummy0) entered disabled state [ 286.714258][T13165] bridge_slave_0: left allmulticast mode [ 286.735251][T13165] bridge_slave_0: left promiscuous mode [ 286.741572][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.785560][T13165] bridge_slave_1: left allmulticast mode [ 286.791407][T13165] bridge_slave_1: left promiscuous mode [ 286.807026][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.845360][T13165] bond0: (slave bond_slave_0): Releasing backup interface [ 286.869389][T13165] bond0: (slave bond_slave_1): Releasing backup interface [ 286.922317][T13165] team0: Port device team_slave_0 removed [ 286.969778][T13165] team0: Port device team_slave_1 removed [ 286.992709][T13165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.009498][T13165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.043489][T13165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.079783][T13165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.457797][T13165] gretap1: left promiscuous mode [ 287.480711][T13165] bond2: (slave gretap1): Releasing active interface [ 287.527875][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.545399][T13168] bridge_slave_1: left allmulticast mode [ 287.582616][T13168] bridge_slave_1: left promiscuous mode [ 287.608087][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.621874][T13198] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 287.640255][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2121'. [ 287.662277][T13168] bridge_slave_1: entered promiscuous mode [ 287.671002][T13168] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 287.738855][ T1027] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.771679][ T1027] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.906234][T13198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.971513][T13203] macvlan4: entered promiscuous mode [ 287.999342][T13203] macvlan4: entered allmulticast mode [ 288.016036][T13217] RDS: rds_bind could not find a transport for ::ffff:0.0.0.8, load rds_tcp or rds_rdma? [ 288.024903][T13203] bond3: entered promiscuous mode [ 288.047585][T13203] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 288.065590][T13203] bond3: left promiscuous mode [ 288.151176][ T1027] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.203007][ T7016] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 288.211254][ T7016] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 288.227721][T13195] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 288.268018][ T1027] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.421504][T13195] IPVS: starting estimator thread 0... [ 288.504437][T13241] netlink: 'syz.3.2133': attribute type 21 has an invalid length. [ 288.517502][T13237] IPVS: using max 24 ests per chain, 57600 per kthread [ 288.546697][T13244] netlink: 'syz.3.2133': attribute type 21 has an invalid length. [ 288.879342][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 288.973019][T13196] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! OK [ 289.123782][T13271] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 289.146280][T13195] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! Stopping iptables: [ 289.296376][T13271] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.394922][T13282] macvlan0: entered promiscuous mode modprobe: can't change directory to '6.16.0-syzkaller-06600-g1dbf1d590d10': No such file or directory [ 289.434646][T13282] macvlan0: entered allmulticast mode iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL [ 289.472330][T13282] bond9: entered promiscuous mode [ 289.513292][T13282] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 289.603838][T13282] bond9: left promiscuous mode [ 289.645164][T13292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2147'. Stopping system message bus: [ 289.898411][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 289.933667][T13309] netlink: 'syz.0.2152': attribute type 9 has an invalid length. [ 289.952011][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 290.094179][T13320] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2155'. [ 290.185402][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2153'. [ 290.257828][T13325] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2157'. [ 290.335699][T13326] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2157'. [ 290.337893][T13324] macvtap1: entered allmulticast mode [ 290.421272][T13324] veth0_macvtap: entered allmulticast mode [ 290.572265][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2161'. done [ 290.938691][T13358] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 291.129089][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2168'. [ 291.138648][T13358] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.147630][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880590fa800: rx timeout, send abort [ 291.159427][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880590fa800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 291.351716][T13371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.822345][T13406] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 292.094599][T13415] Unsupported ieee802154 address type: 0 [ 292.106083][T13415] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.252846][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 292.328198][T13418] netlink: 'syz.6.2179': attribute type 1 has an invalid length. killall: udevd: no process killed [ 292.579013][T13418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.694077][T13417] bond3: (slave gretap2): making interface the new active one [ 292.714881][T13417] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 292.742875][T13426] netlink: 'syz.5.2181': attribute type 1 has an invalid length. [ 292.779590][T13417] syz.6.2179 (13417) used greatest stack depth: 18616 bytes left Stopping klogd: start-stop-daemon: warning: killing process 5196: No such process [ 292.976132][T13426] 8021q: adding VLAN 0 to HW filter on device bond2 FAIL [ 292.995667][T13442] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 293.051549][T13432] gretap1: entered promiscuous mode [ 293.119463][T13432] bond2: (slave gretap1): making interface the new active one [ 293.162022][T13432] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 293.240331][T13437] macvlan2: entered promiscuous mode Stopping acpid: [ 293.258954][T13437] macvlan2: entered allmulticast mode [ 293.289207][T13437] bond2: entered promiscuous mode [ 293.321845][T13437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.367651][T13437] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 293.424745][T13437] bond2: left promiscuous mode [ 293.513935][T13462] netlink: 'syz.6.2192': attribute type 2 has an invalid length. [ 293.529852][T13462] netlink: 'syz.6.2192': attribute type 1 has an invalid length. [ 294.333652][T13503] __nla_validate_parse: 7 callbacks suppressed [ 294.333678][T13503] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2203'. [ 294.399121][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2203'. [ 294.509860][T13510] netlink: 'syz.5.2205': attribute type 1 has an invalid length. [ 294.607204][T13510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.660471][T13510] macvlan2: entered promiscuous mode [ 294.670152][T13510] macvlan2: entered allmulticast mode [ 294.681641][T13510] bond3: entered promiscuous mode [ 294.693615][T13510] 8021q: adding VLAN 0 to HW filter on device macvlan2 OK [ 294.777475][T13510] bond3: left promiscuous mode [ 294.864799][T13521] netlink: 'syz.1.2209': attribute type 5 has an invalid length. Stopping syslogd: [ 295.171098][T13537] Bluetooth: MGMT ver 1.23 stopped /sbin/syslogd (pid 5189) OK [ 295.383390][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 295.581687][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2218'. [ 295.838817][T13558] netlink: 'syz.0.2219': attribute type 4 has an invalid length. [ 295.851963][T13559] netlink: 'syz.0.2219': attribute type 4 has an invalid length. [ 295.864168][T13560] netlink: 'syz.6.2220': attribute type 23 has an invalid length. [ 295.886664][T13559] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2219'. [ 295.902954][T13558] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2219'. [ 295.930083][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 295.966866][T13562] netlink: 'syz.1.2221': attribute type 30 has an invalid length. [ 295.984978][T13559] : renamed from bond0 (while UP) umount: can't remount debugfs read-only [ 296.127782][T13576] sctp: [Deprecated]: syz.5.2225 (pid 13576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.127782][T13576] Use struct sctp_sack_info instead [ 296.234279][T13574] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.2224'. [ 296.264122][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 296.303017][T13562] netlink: 'syz.1.2221': attribute type 30 has an invalid length. [ 296.362935][T13582] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 296.436215][T13582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.481418][T13582] macvlan0: entered promiscuous mode [ 296.491443][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2229'. [ 296.522898][T13582] macvlan0: entered allmulticast mode [ 296.529979][T13582] bond0: entered promiscuous mode [ 296.537493][T13582] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 296.550029][T13582] bond0: left promiscuous mode [ 297.076297][T13605] : entered promiscuous mode [ 298.703435][T13670] validate_nla: 3 callbacks suppressed [ 298.703456][T13670] netlink: 'syz.5.2252': attribute type 1 has an invalid length. [ 298.880114][T13670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.009783][T13680] macvlan2: entered promiscuous mode [ 299.062922][T13680] macvlan2: entered allmulticast mode [ 299.075664][T13680] bond4: entered promiscuous mode [ 299.111315][T13680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.147719][T13680] bond4: left promiscuous mode [ 299.253670][T13687] 8021q: VLANs not supported on wg1 [ 299.259876][T13689] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 299.393599][T13694] __nla_validate_parse: 14 callbacks suppressed [ 299.393625][T13694] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2261'. [ 299.604962][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'. [ 299.630211][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 299.876387][T13713] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2269'. [ 299.931463][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 300.332642][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! Connection to 10.128.0.127 closed by remote host. Sent SIGKILL to all processes [ 301.509609][T10357] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 301.521648][T10357] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 301.530439][T10357] CPU: 0 UID: 0 PID: 10357 Comm: kbnepd bnep0 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 301.542440][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.552611][T10357] RIP: 0010:klist_del+0x49/0x110 [ 301.557682][T10357] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65 [ 301.577474][T10357] RSP: 0018:ffffc9000dec7768 EFLAGS: 00010202 [ 301.583565][T10357] RAX: 000000000000000b RBX: ffff888058d5ac60 RCX: ffff888030aa1e00 [ 301.591647][T10357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 301.599645][T10357] RBP: ffffc9000dec7890 R08: ffff8880758110f3 R09: 1ffff1100eb0221e [ 301.607886][T10357] R10: dffffc0000000000 R11: ffffed100eb0221f R12: dffffc0000000000 [ 301.615867][T10357] R13: 1ffff1100b1ab58c R14: 0000000000000000 R15: ffff888059180750 [ 301.623852][T10357] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 301.632816][T10357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.639791][T10357] CR2: 00007ff790ff84c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 301.648065][T10357] Call Trace: [ 301.651359][T10357] [ 301.654414][T10357] device_del+0x280/0x8e0 [ 301.658781][T10357] ? _raw_spin_unlock_irq+0x2e/0x50 [ 301.664081][T10357] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 301.670337][T10357] ? __pfx_device_del+0x10/0x10 [ 301.675203][T10357] ? netdev_unregister_kobject+0x344/0x450 [ 301.681025][T10357] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 301.687806][T10357] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 301.694606][T10357] ? rtnl_net_dev_lock+0x257/0x2f0 [ 301.699925][T10357] unregister_netdevice_queue+0x33c/0x380 [ 301.705766][T10357] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 301.712070][T10357] ? rtnl_net_dev_lock+0x36/0x2f0 [ 301.717127][T10357] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 301.722454][T10357] unregister_netdev+0x1f/0x60 [ 301.727340][T10357] bnep_session+0x294d/0x2b40 [ 301.732031][T10357] ? __schedule+0x1755/0x4d30 [ 301.736894][T10357] ? __lock_acquire+0xab9/0xd20 [ 301.741779][T10357] ? __pfx_bnep_session+0x10/0x10 [ 301.746817][T10357] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 301.752909][T10357] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.759423][T10357] ? __pfx_woken_wake_function+0x10/0x10 [ 301.765349][T10357] ? __kthread_parkme+0x7b/0x200 [ 301.770513][T10357] ? __kthread_parkme+0x1a1/0x200 [ 301.775594][T10357] kthread+0x70e/0x8a0 [ 301.779712][T10357] ? __pfx_bnep_session+0x10/0x10 [ 301.784769][T10357] ? __pfx_kthread+0x10/0x10 [ 301.789475][T10357] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.794875][T10357] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.800132][T10357] ? __pfx_kthread+0x10/0x10 [ 301.804755][T10357] ret_from_fork+0x3fc/0x770 [ 301.809465][T10357] ? __pfx_ret_from_fork+0x10/0x10 [ 301.814614][T10357] ? __switch_to_asm+0x39/0x70 [ 301.819515][T10357] ? __switch_to_asm+0x33/0x70 [ 301.824666][T10357] ? __pfx_kthread+0x10/0x10 [ 301.829281][T10357] ret_from_fork_asm+0x1a/0x30 [ 301.834121][T10357] [ 301.837213][T10357] Modules linked in: Requesting system poweroff [ 301.843739][T10357] ---[ end trace 0000000000000000 ]--- [ 301.850488][T10357] RIP: 0010:klist_del+0x49/0x110 [ 301.855597][T10357] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65 [ 301.876151][T10357] RSP: 0018:ffffc9000dec7768 EFLAGS: 00010202 [ 301.882610][T10357] RAX: 000000000000000b RBX: ffff888058d5ac60 RCX: ffff888030aa1e00 [ 301.890840][T10357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 301.900084][T10357] RBP: ffffc9000dec7890 R08: ffff8880758110f3 R09: 1ffff1100eb0221e [ 301.908922][T10357] R10: dffffc0000000000 R11: ffffed100eb0221f R12: dffffc0000000000 [ 301.917020][T10357] R13: 1ffff1100b1ab58c R14: 0000000000000000 R15: ffff888059180750 [ 301.925297][T10357] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 301.934651][T10357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.941586][T10357] CR2: 00007ff790ff84c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 301.950326][T10357] Kernel panic - not syncing: Fatal exception [ 301.956723][T10357] Kernel Offset: disabled [ 301.961048][T10357] Rebooting in 86400 seconds..