last executing test programs: 3.94338075s ago: executing program 1 (id=884): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x0, @l2={'eth', 0x3a, 'ip_vti0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x24000004) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) read(r4, &(0x7f00000009c0)=""/4096, 0x1000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0x5}, 0x18) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf25140000000c000780080002000040"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async, rerun: 64) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) (rerun: 64) write$rfkill(r8, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) 3.565644982s ago: executing program 1 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000574acee822dc07ab0751857674e84d0e00000000009500000000000080"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 2.451961647s ago: executing program 1 (id=907): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x0, 0x6}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x600000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 4) close(0x4) 1.701315554s ago: executing program 0 (id=919): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 1.585126991s ago: executing program 3 (id=920): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000b5b6699dd9e0b9ea36746e6c3000001c0000000000001c001a80180002801400018008000300ffffff7f0800000005000000"], 0x50}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000954b13e2b24c77000000000000009bd22226dbd7c1ca5eff2fee73"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1200000005000000080000000900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="05df3f000200"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="011a80000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e6574646576736902000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x3d, &(0x7f00000005c0)=""/136, &(0x7f0000000480)=0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}}, 0x4040010) 1.270309376s ago: executing program 0 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x6, 0x10, 0x29, @mcast1, @loopback, 0x80, 0x80, 0x5, 0xa}}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffda6) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getnetconf={0x44, 0x52, 0xd08, 0x70bd2a, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x81}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048854) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.173563599s ago: executing program 1 (id=923): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000007000000000000000900000018190000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000018000500850000000c000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) 1.169574348s ago: executing program 4 (id=924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000800850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.102033745s ago: executing program 1 (id=925): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x0, 0x6}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x600000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1.074888128s ago: executing program 4 (id=926): socket(0x1e, 0x4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x600000000000000, 0x0, 0x7fffffff, 0x300}, 0x0, 0x0) close(0x4) 981.15598ms ago: executing program 2 (id=927): r0 = socket(0x1e, 0x4, 0x0) epoll_create(0x3) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x0, 0x6}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x2, 0x0}, 0x8) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x84c290d764bc66d4}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x1b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf5d0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x7, 0x2, 0x0, 0x1, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x94, 0x7, 0xc, 0x80, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x74}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x10a}}}, &(0x7f0000000240)='syzkaller\x00', 0x40, 0xb5, &(0x7f0000000580)=""/181, 0x41100, 0x3a, '\x00', 0x0, @fallback=0xc, r6, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x2, 0x5, 0xffffffff}, 0x10, r7, r8, 0x0, &(0x7f0000000940)=[r9], 0x0, 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xf, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000280)='GPL\x00', 0x10001, 0xd1, &(0x7f0000001380)=""/209, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x5, 0xc, 0xa7, 0xffffffff}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001500)=[{0x4, 0x3, 0xe, 0x3}, {0x3, 0x4, 0x7, 0x7}, {0x4, 0x2, 0x10}], 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x40008, 0x800008}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r12 = socket(0xa, 0x3, 0x2) setsockopt$inet6_int(r12, 0x29, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000080)) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0) socket$netlink(0x10, 0x3, 0x10) 945.863953ms ago: executing program 2 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x82, &(0x7f0000000580)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @loopback, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3, 0x2b}, @timestamp_prespec={0x44, 0x3c, 0x40, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@loopback, 0x200}, {@local}, {@rand_addr=0x1}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54054}, 0x40084) 920.735009ms ago: executing program 0 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x1, 0x2, 0x3, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0xf, [{@rand_addr=0x64010102, 0x9}, {@empty, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x80000000}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) (async) unshare(0x22020400) (async) r3 = socket(0x40000000015, 0x5, 0x0) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) (async) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="ce9ada41c8f5", 0x6}], 0x1, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r5, 0x0, r12, 0x0, 0x2, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x290, r13, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x4}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r2}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa5f9}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 813.580562ms ago: executing program 2 (id=930): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0xd, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x14, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x50000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0xc2, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in6=@local, 0x3506, 0x1, 0x8, 0xfc, 0x9075}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 804.864495ms ago: executing program 4 (id=931): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES16], 0xdd12}], 0x1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2, 0x9, 0xff, 0x0, 0x29, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x96, 0x0, 0x0, 0x70bd2d, 0x3506}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x18, 0x14}, @sadb_lifetime={0x4, 0x3, 0x3, 0xfffffffffffffff7, 0x42a8, 0x38}, @sadb_address={0x3, 0x7, 0x6c, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @remote}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x80, @empty, 0x100}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x6378, 0x3504}, @sadb_x_nat_t_type={0x1, 0x14, 0x6f}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x25, 0x14, 0x14}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@remote, 0xa, 0x10, 0x4}]}, 0x148}}, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x7}, 0x8) 731.855307ms ago: executing program 2 (id=932): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES16], 0xdd12}], 0x1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2, 0x9, 0xff, 0x0, 0x29, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x96, 0x0, 0x0, 0x70bd2d, 0x3506}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x18, 0x14}, @sadb_lifetime={0x4, 0x3, 0x3, 0xfffffffffffffff7, 0x42a8, 0x38}, @sadb_address={0x3, 0x7, 0x6c, 0x0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @remote}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x80, @empty, 0x100}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x6378, 0x3504}, @sadb_x_nat_t_type={0x1, 0x14, 0x6f}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x25, 0x14, 0x14}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@remote, 0xa, 0x10, 0x4}]}, 0x148}}, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x7}, 0x8) 726.130122ms ago: executing program 3 (id=933): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000400000095000000002d451520079ba1cfa241b88b5b060000001800000000000000000000000000000095000000000000008510"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x12, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x6, 0xa, 0xffffffffffffffe0, 0x4}, @ringbuf_query, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x33aa9bb3346275f0, 0x5, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x90, &(0x7f00000001c0)=""/144, 0x1e00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x2, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='snd_soc_dapm_path\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socket(0xa, 0x3, 0x3a) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x7fff, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 589.681503ms ago: executing program 0 (id=934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003f4b300012800b00010067656e657665000020000280080001000100000014000700000000000000000000000000000000001400030067656e65766531000000000000000000"], 0x64}}, 0x2000000) 433.950172ms ago: executing program 3 (id=935): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xf4, r5, 0xe701ac47a3d23ecd, 0x0, 0x10002, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0xf4}}, 0x8800) socket$kcm(0x2, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pread64(r6, &(0x7f00000000c0)=""/29, 0xffffffffffffffa0, 0x4004) socket$inet6(0xa, 0x5, 0x0) socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, &(0x7f0000000440), 0x0}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000e6f586a8719e699b5eb431c4f0a4da38b83a32757b6121fada1d453fdad0ca19f25bad3b6118f4015cade858767a93ce6ca932e42e7e8a8df85213e453", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf2518000000050005000100000005000500000000000800070002000000440001801400020064756d6d793000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f76746930000000000000000008000300000000000800070005000000050005000000000008000700ff0f0000"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x2a, {0x2, 0x0, @empty}, 'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r9 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2d, 0x0, 0x7ffe}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 407.025006ms ago: executing program 2 (id=936): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000007000000000000000900000018190000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000018000600850000000c000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) 335.559161ms ago: executing program 0 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000004000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 269.513517ms ago: executing program 0 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 268.872489ms ago: executing program 2 (id=939): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x0, 0x6}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x371, 0xa, 0x1b, 0x11}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x600000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 255.726039ms ago: executing program 4 (id=940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001a40)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, 0x0}}], 0x2, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@rand_addr=0x2, 0x4e23, 0x0, 0x4e26, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffc}, 0x101}, [@mark={0xc, 0x15, {0x350759, 0xce4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x34, r4, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x240, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb91e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff3343}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48ce}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbe95}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40}, 0x40) 169.525073ms ago: executing program 3 (id=941): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800010003001200fdffff7f00000000000000000c0004"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000013c0)=0xc7f) (async) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xc000200a}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="29aac70025f4ff9be7"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040810) 168.813598ms ago: executing program 1 (id=942): socket(0x1e, 0x4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x600000000000000, 0x0, 0x7fffffff, 0x700}, 0x0, 0x0) close(0x4) 136.429804ms ago: executing program 4 (id=943): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x27, @short}, 0x14) syz_emit_ethernet(0x109, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x2, 0xfb, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop]}}, {0x2001, 0x880b, 0xe3, 0x0, @gue={{0x2, 0x0, 0x1, 0x3}, "daa367f55d0f64ac6628504b6ceaf56e5c1e9c5e6ef98524c3bae64e3a4c8edda39b5127603c779b99693292899e141ed6a85d5ae55e7c6767dafe968bc02499d48ea45bc63124b8d0dd623a758a27d7be527113edf54adf4d3856e3bc15c4f0f1ac5c92a20b49cae17c3cd4eb42846111e4548819e0243c9c031714199b82d481a6a100383f2c5676495b9974c994b0d686bf36358464c589ed46278716c248b8910f53dd56b323c359d66637ca2fe0d3ea4e7152ae7ba2236ee174f841f016d754e49f6abc1216c630df6538b47c22a987b9"}}}}}}, 0x0) 82.09771ms ago: executing program 3 (id=944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x32c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1fc8c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x745d4241}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14cce349}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14d28751}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b7a7cb3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d13a856}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a8d}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30134082}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf045}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33adca32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c91c5f2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e5579ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x735456dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7be417}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x860d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5704}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a03e6ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb462}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x414e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1136}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7193}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe64a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x381c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8af2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12bbe945}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5034d7a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49e0c131}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25340477}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d3959e3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcce5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1142}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x198c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fffffff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4186bb79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15ef353b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4b4}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f3c2951}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x295f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43659e05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffed}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12a4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56f0ab8d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xec, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x743123d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37d994f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f8c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e91be2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22191993}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b896b6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87fe}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ab1a37a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4071}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x720ab779}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc35c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x164cc393}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc77b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9677}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fa4f517}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x805f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34efb0a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ab4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1660}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fe3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64b4f0b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1812}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b924308}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5570}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1da82002}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f4af6c2}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20000006}, 0x20000014) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x44) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000680), r0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000006c0), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000840)={&(0x7f00000007c0)={0x4, 0x584, 0xd0, {}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "0c10fbed0e6ec5cd"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x81) (async, rerun: 32) r7 = accept(r3, &(0x7f00000008c0)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000940)=0x80) (rerun: 32) recvfrom$phonet(r7, &(0x7f0000000980)=""/129, 0x81, 0x10140, 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x244}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @tail_call, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xc, 0x7, 0xe, 0xffffffffffffffe0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}]}, &(0x7f0000000b80)='syzkaller\x00', 0x80000000, 0x72, &(0x7f0000000bc0)=""/114, 0x41000, 0x40, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x4, 0xf, 0xff, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000c80)=[0x1, r1, r7, 0x1, 0x1, r7], &(0x7f0000000cc0)=[{0x2, 0x3, 0x10, 0xd}, {0x5, 0x1, 0x8, 0x9}, {0x5, 0x1, 0x0, 0x4}, {0x4, 0x4, 0xb, 0x4}, {0x3, 0x5, 0xb, 0x1}, {0x5, 0x3, 0xb, 0xb}], 0x10, 0x1}, 0x94) readv(r8, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/217, 0xd9}, {&(0x7f0000000f00)=""/242, 0xf2}, {&(0x7f0000001000)=""/45, 0x2d}, {&(0x7f0000001040)=""/104, 0x68}, {&(0x7f00000010c0)=""/96, 0x60}], 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r3) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000001200)=0x102804e, 0x4) r9 = socket$inet6(0xa, 0x800, 0xc) r10 = accept4(r9, &(0x7f0000001240)=@caif=@rfm, &(0x7f00000012c0)=0x80, 0x80000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000001300)={0x0, 'bond_slave_1\x00', {0x1}, 0x7}) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x70, 0x0, 0x400, 0x30000, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:etc_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x10000080) (rerun: 64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x63, &(0x7f0000001480)={'TPROXY\x00'}, &(0x7f00000014c0)=0x1e) r11 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r13 = getpid() (async) r14 = getgid() sendmmsg$unix(r11, &(0x7f0000002640)=[{{&(0x7f0000001500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001580)="6ab5218a88c9719281867285b3115b8529a9558152fffbc2d7a7b1b010c640d74e1c3d09a5c77462922d0cbbaf022f27315a022231c78078e6f46befb6ed3d30ce4459493f49d87cf90a8254310dbb6452cc7d24c9510c4ee565974609583335584eab32cf944d0df96e2093f01c823423f4744141c4a1456617370c24a0a568c4606a2948dd6ef057aea9b59d9e1469d7458d8c6132ac4978e53c6624d868de960f25ab41ce028770072fdfe63d4bf7521a2e78ed8c13623fdefa19f1f6ef66c6d28c80d940eded01165b9a3510242d803327fa0f87175099d9f751d6b5d29d37536f2fef", 0xe5}, {&(0x7f0000001680)="2cba2cc0bff737441dd2c7f0f1ec13bc5c9b4f65f31e0472bee401b01a4da4756f07a81a985cbe897a741fc534de9be041b94416218373d28d1f4273ad74e9e4cd947a40833aa8e1741134e09c5a1746390a488195687222060588e7c09960c4d85954943f34214744b087dd2f206e714c9fe6b03efdfd4cec06528afd3955db54953cc515a41b15dbf695b72cc00fb78971ed9aa5122a809429b5b331e585a45d0e5c94f17f07c47063d60ee360bb203720201def9a2d6aed4bb050de5f1aa37dfc64cda5c202334be03862e3f75762d9d31b703424ee7039889d0998c8941b5f8977872003df940858e7b1a2373f134039", 0xf2}, {&(0x7f0000001780)="4d136a7adf2424c50b0d3bc91e8d4ee0ddb0026800da8ae1c628515aa7aeca512dfb09f26034773eb225f6150614b648ad165852ae671a429c28c8e83758e4fcf4ead375e6dd6946a4fa8064aa803593e1bca0150d95f548954599cb77cc267508c10cf54895993ea390011d7a460ed7d8ba151efe77c6ce7168a1613504d6f095198bfc653a0fa6a0b2f0f8bf2599c1998326f64288a58af9fc2d8205464d8b567b6a3218ff3b7fa123a2e4962d9c9dd4395cdb974be77ab25d6b98c8", 0xbd}, {&(0x7f0000001840)="2eafd509caad1657bbddb52aba75512babff7f376b6f7aa2eaadff0914426e25d9f85b81f71208f7300451d1f9670b8cb7581164aecadfce390dfb3397969c28c66ca3f573822f8e112896c1e9ef4a35d2b7ebb0076b8656725586210585b22648bc46128dab1c59e34e98598a8694079c244e2320d92204521564d50f2005ad3714", 0x82}, {&(0x7f0000001900)="2e415b308a29df43d18ef520226a079de1ecf15df5945a5bfb56eb667ff4f3843d84f9ca877253f7378c1dac4ddfdfbc3886855260ec9c6ddf392ddc4b79fa1fae921372e6d7a80a4f9c32af1e94001c2b6fee4181f4aa3cd5471c356c104638b5361973ddc9c2fd45c9883437ef7b67f99b9596e75cad2d18c2050ff73f61637e0c80da7736c5ed5d3c47a375f48590a7dc36c62d2955116ab34f28f7ec868af66cb3f7c5029545da571241efd35117af3fc907e78dc3bf940c1db737ed3a1a61fcc453dd6a09902c871b2f8adc07cc8165904a3260b7e207dee5623da5", 0xde}, {&(0x7f0000001a00)="4ae57115d28286d32b74297b07264af08f13b046276c75fabbb9f50d5ed6c12a71ea986d75ee4d9741098ccc1d36128fd0789a43ca638cd98fdc088b9c4a2bc1a6f8ff99beb2e8aadb349b68e7f4ce0f1e4b211ce11902c1", 0x58}, {&(0x7f0000001a80)="b63f3f14337738ab4876f3b02427e743359d276139f12f3c", 0x18}, {&(0x7f0000001ac0)="01ef4b911c82947add857114e8c2e5", 0xf}, {&(0x7f0000001b00)="6928d9d5811edb2efecb5f0da8408f24bad249412d371001373e259705d6f33cef9ac025153ed92a4d7ee97bd96bcac44dd1602f7259c0a04e7ce8b725e97aaa2b4dd24eee2f0f2f8066af254807dc9266ae8dab21ec50522ee0eca9cc24f05c31e1571313848602dbaf22bf763306a3ae", 0x71}], 0x9, &(0x7f0000001c40)=[@rights={{0x20, 0x1, 0x1, [r9, r12, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}], 0x40, 0x87184c239ae2dd5c}}, {{&(0x7f0000001c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d00)="de66d960183638c94e0f1e8614b6d15ffc21607c55a29421b9651a12e090e46cb38789315c", 0x25}, {&(0x7f0000001d40)="097d1c4199805dcfa8cdc9065b6027c953d1609f781b41671f2920e9709787899f123473b62d69cce63a1f34ed6c3ec064c124e3ba67f6fceff5308e852f8e8ffddc6162bfc1c760b9e39527e54548f44379e7464da51b9ae67c2788e5ece8c4c84956f93cb26240d8967577039383b5265885649143ea522cbe8a254e90199f4f97546e84df835a81d168ff07128ff2fa950764c21c063af340d615ae781deea7a6c5d7b5e09e3eaaff428c6d9e654c88629d31380c04ee9251388e111ed2681302e8e7bb30bd719f382a9cfc0097", 0xcf}, {&(0x7f0000001e40)="074097630ffa9ff809c5652ffe1948c026eb665c50bf333c3d9b8b8920d037c3", 0x20}, {&(0x7f0000001e80)="56bf5e2b1957730c261b2e6483c9a7ec706cedf74fd1b5f303c27668c8", 0x1d}], 0x4, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r8, r3, r9]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r8, r9, 0xffffffffffffffff]}}], 0xf8, 0x1}}], 0x2, 0x4000000) 1.295896ms ago: executing program 4 (id=945): r0 = socket$kcm(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) (rerun: 32) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000117863ac6e5286dd60f53a0400303a02008ec70446bf69fc66000000000000030040bbff02000000000000000000000000000102009078a829640034bbcfad00000000fc0100000000f5ff00ff010000000000000000000000000001"], 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@deltclass={0x58, 0x29, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff6, 0x16}, {0x6, 0xffff}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_RATE={0x6, 0x5, {0xc, 0xd}}, @TCA_RATE={0x6, 0x5, {0xad, 0x98}}, @tclass_kind_options=@c_netem={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x20040054) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x2, {0x0, 0xf0}, 0xff}, 0xfffffffffffffcaa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r5, 0x20, 0x70bd25, 0x6, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045) (async, rerun: 32) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r5, 0xa0a, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000880)={&(0x7f0000000340)={0x2, 0x4e21, @private=0xa010100}, 0x6, &(0x7f0000000680)=[{&(0x7f00000005c0)="6e08ca8f06c693e9beebc6c69b227d61b44d868e37d11ad3010317a311b33339a7841df02549eba33462f605fbc9b7", 0x2f}, {&(0x7f0000000600)="a39de010338530", 0x7}, {&(0x7f0000000740)="7aeefbeda1da7f18bc167559a82617e690181a6d732dc20b8c82eaa306dee94454b15ce15b244222a4668eb73ec90f63b69de9b22272edf0504d6bdb20365830a4a55ac5f9d1272064c0d541d77464eed967565bb6f6be8c5129aa4f5fef7df3fecd54d168f2deb0bf8aeb7e2cb1c76b6dd07943f23bf9abca9d18c4d2a4ad851af00b6da9a68d2fb9629bc033f56b90", 0x90}, {&(0x7f00000008c0)="5e2b5f580d8b8dd6c96e35d71e29c4173c1ad4987cdd160ea4fb318fc77c393a2ebd1ec2ec676c646e49239061e2514bdb60f6aac10c4216a758238928", 0x36}], 0x4, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x435}}], 0x30}, 0xc000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x80) 0s ago: executing program 3 (id=946): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. [ 86.959373][ T5851] cgroup: Unknown subsys name 'net' [ 87.138778][ T5851] cgroup: Unknown subsys name 'cpuset' [ 87.150220][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.917963][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.234277][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.253974][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.261833][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.270753][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.279040][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.315534][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.333710][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.343691][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.352756][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.363370][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.452782][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.463915][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.471593][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.480535][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.488999][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.517920][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.528419][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.538686][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.547892][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.556018][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.579926][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.590542][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.599278][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.615807][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.624374][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.996264][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 94.268167][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.275556][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.283030][ T5866] bridge_slave_0: entered allmulticast mode [ 94.291319][ T5866] bridge_slave_0: entered promiscuous mode [ 94.314018][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 94.382386][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.392771][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.401515][ T5866] bridge_slave_1: entered allmulticast mode [ 94.410355][ T5866] bridge_slave_1: entered promiscuous mode [ 94.487866][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.506314][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.531012][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 94.558491][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 94.619796][ T5866] team0: Port device team_slave_0 added [ 94.684413][ T5866] team0: Port device team_slave_1 added [ 94.777998][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.785324][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.792554][ T5861] bridge_slave_0: entered allmulticast mode [ 94.802029][ T5861] bridge_slave_0: entered promiscuous mode [ 94.865628][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.872930][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.880475][ T5861] bridge_slave_1: entered allmulticast mode [ 94.889995][ T5861] bridge_slave_1: entered promiscuous mode [ 94.906941][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.914322][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.940336][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.016745][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.024302][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.050408][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.061642][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.069088][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.076957][ T5871] bridge_slave_0: entered allmulticast mode [ 95.085053][ T5871] bridge_slave_0: entered promiscuous mode [ 95.105933][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.115921][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.123381][ T5868] bridge_slave_0: entered allmulticast mode [ 95.131040][ T5868] bridge_slave_0: entered promiscuous mode [ 95.139312][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 95.163287][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.170568][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.178290][ T5871] bridge_slave_1: entered allmulticast mode [ 95.185655][ T5871] bridge_slave_1: entered promiscuous mode [ 95.195157][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.206040][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.213590][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.221370][ T5868] bridge_slave_1: entered allmulticast mode [ 95.229934][ T5868] bridge_slave_1: entered promiscuous mode [ 95.271309][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.313981][ T5183] Bluetooth: hci0: command tx timeout [ 95.398431][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.416560][ T5861] team0: Port device team_slave_0 added [ 95.441324][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.467466][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.477199][ T5183] Bluetooth: hci1: command tx timeout [ 95.484963][ T5861] team0: Port device team_slave_1 added [ 95.508147][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.538453][ T5866] hsr_slave_0: entered promiscuous mode [ 95.545128][ T5866] hsr_slave_1: entered promiscuous mode [ 95.553807][ T5183] Bluetooth: hci2: command tx timeout [ 95.600120][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.607413][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.615355][ T5872] bridge_slave_0: entered allmulticast mode [ 95.622729][ T5872] bridge_slave_0: entered promiscuous mode [ 95.633820][ T5183] Bluetooth: hci3: command tx timeout [ 95.652237][ T5868] team0: Port device team_slave_0 added [ 95.672528][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.679955][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.706334][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.716462][ T5183] Bluetooth: hci4: command tx timeout [ 95.717877][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.729694][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.737551][ T5872] bridge_slave_1: entered allmulticast mode [ 95.745508][ T5872] bridge_slave_1: entered promiscuous mode [ 95.768213][ T5868] team0: Port device team_slave_1 added [ 95.791256][ T5871] team0: Port device team_slave_0 added [ 95.798245][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.805790][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.831840][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.889844][ T5871] team0: Port device team_slave_1 added [ 95.913939][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.924341][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.931328][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.957835][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.016008][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.026242][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.033351][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.059426][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.072018][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.079820][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.106467][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.119479][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.126809][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.153039][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.297974][ T5872] team0: Port device team_slave_0 added [ 96.311251][ T5861] hsr_slave_0: entered promiscuous mode [ 96.317994][ T5861] hsr_slave_1: entered promiscuous mode [ 96.324623][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 96.330493][ T5861] Cannot create hsr debugfs directory [ 96.372824][ T5872] team0: Port device team_slave_1 added [ 96.399604][ T5871] hsr_slave_0: entered promiscuous mode [ 96.407486][ T5871] hsr_slave_1: entered promiscuous mode [ 96.413932][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 96.419694][ T5871] Cannot create hsr debugfs directory [ 96.452306][ T5868] hsr_slave_0: entered promiscuous mode [ 96.459262][ T5868] hsr_slave_1: entered promiscuous mode [ 96.465730][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 96.471528][ T5868] Cannot create hsr debugfs directory [ 96.492863][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.500608][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.527120][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.591529][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.598674][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.625103][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.899321][ T5872] hsr_slave_0: entered promiscuous mode [ 96.906588][ T5872] hsr_slave_1: entered promiscuous mode [ 96.912813][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 96.919275][ T5872] Cannot create hsr debugfs directory [ 97.158165][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.191877][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.241622][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.276736][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.317744][ T928] cfg80211: failed to load regulatory.db [ 97.376824][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.389257][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.403502][ T5183] Bluetooth: hci0: command tx timeout [ 97.419012][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.430896][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.498696][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.521336][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.536817][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.551168][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.559883][ T5183] Bluetooth: hci1: command tx timeout [ 97.634001][ T5183] Bluetooth: hci2: command tx timeout [ 97.696869][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.709495][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.722075][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.726711][ T5183] Bluetooth: hci3: command tx timeout [ 97.739404][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.795347][ T5183] Bluetooth: hci4: command tx timeout [ 97.914393][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.940255][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.951460][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.975059][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.987179][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.007214][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.017503][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.073458][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.080918][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.095162][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.117619][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.124843][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.157674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.165059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.201361][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.223892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.231071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.299563][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.337514][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.367591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.374813][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.436054][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.443267][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.470307][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.502239][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.509603][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.560354][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.567673][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.630993][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.703003][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.715277][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.770932][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.840576][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.881038][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.888265][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.968872][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.976116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.171223][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.241069][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.369430][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.476267][ T5183] Bluetooth: hci0: command tx timeout [ 99.511972][ T5861] veth0_vlan: entered promiscuous mode [ 99.541276][ T5866] veth0_vlan: entered promiscuous mode [ 99.585338][ T5861] veth1_vlan: entered promiscuous mode [ 99.621681][ T5866] veth1_vlan: entered promiscuous mode [ 99.634643][ T5183] Bluetooth: hci1: command tx timeout [ 99.647658][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.713345][ T5183] Bluetooth: hci2: command tx timeout [ 99.761725][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.795223][ T5183] Bluetooth: hci3: command tx timeout [ 99.842308][ T5866] veth0_macvtap: entered promiscuous mode [ 99.873966][ T5183] Bluetooth: hci4: command tx timeout [ 99.892478][ T5861] veth0_macvtap: entered promiscuous mode [ 99.905456][ T5866] veth1_macvtap: entered promiscuous mode [ 99.912762][ T5861] veth1_macvtap: entered promiscuous mode [ 99.949660][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.985346][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.011385][ T5871] veth0_vlan: entered promiscuous mode [ 100.029606][ T5872] veth0_vlan: entered promiscuous mode [ 100.038987][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.050247][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.061985][ T73] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.086643][ T73] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.110162][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.142309][ T5872] veth1_vlan: entered promiscuous mode [ 100.150571][ T5871] veth1_vlan: entered promiscuous mode [ 100.158486][ T5868] veth0_vlan: entered promiscuous mode [ 100.177065][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.218528][ T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.231276][ T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.261514][ T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.270981][ T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.285381][ T5868] veth1_vlan: entered promiscuous mode [ 100.313666][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.321664][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.411684][ T5871] veth0_macvtap: entered promiscuous mode [ 100.430448][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.444804][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.446927][ T5871] veth1_macvtap: entered promiscuous mode [ 100.481596][ T5872] veth0_macvtap: entered promiscuous mode [ 100.525656][ T5872] veth1_macvtap: entered promiscuous mode [ 100.548138][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.567143][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.571674][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.656332][ T5868] veth0_macvtap: entered promiscuous mode [ 100.679281][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.708687][ T5976] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 100.717268][ T5976] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3'. [ 100.723055][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.726736][ T5976] NCSI netlink: No device for ifindex 0 [ 100.742269][ T5868] veth1_macvtap: entered promiscuous mode [ 100.762204][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.779065][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.819739][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.880038][ T1003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.921909][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.958132][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.987138][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.000113][ T1003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.028456][ T1003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.081793][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.104456][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.136470][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.152959][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.170980][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.228928][ T5986] Zero length message leads to an empty skb [ 101.247123][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.296092][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.322573][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.389019][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.405640][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.557453][ T5183] Bluetooth: hci0: command tx timeout [ 101.630633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.642499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.713885][ T5183] Bluetooth: hci1: command tx timeout [ 101.748885][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.779899][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.793904][ T5183] Bluetooth: hci2: command tx timeout [ 101.811663][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.830052][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.850109][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.873543][ T5183] Bluetooth: hci3: command tx timeout [ 101.953447][ T5183] Bluetooth: hci4: command tx timeout [ 101.975814][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.999855][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.071954][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.111019][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.139949][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.180506][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.759127][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.839031][ T5998] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.848649][ T5996] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 102.872212][ T5996] syzkaller1: entered promiscuous mode [ 102.878037][ T5996] syzkaller1: entered allmulticast mode [ 103.179472][ T6002] netlink: 'syz.4.7': attribute type 2 has an invalid length. [ 103.351398][ T6002] : entered promiscuous mode [ 103.445625][ T6012] bridge0: port 3(macvtap0) entered blocking state [ 103.466481][ T6012] bridge0: port 3(macvtap0) entered disabled state [ 103.491364][ T6012] macvtap0: entered allmulticast mode [ 103.497201][ T6012] veth0_macvtap: entered allmulticast mode [ 103.509998][ T6012] macvtap0: left allmulticast mode [ 103.516475][ T6012] veth0_macvtap: left allmulticast mode [ 104.509855][ T6041] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 104.627449][ T6041] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 104.634108][ T6043] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 104.926334][ T6041] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 105.089576][ T6043] vlan2: entered allmulticast mode [ 105.100770][ T6043] veth1: entered allmulticast mode [ 105.111974][ T6043] veth1: entered promiscuous mode [ 105.132544][ T6043] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 105.166953][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 105.177692][ T6049] tc_dump_action: action bad kind [ 105.218922][ T6061] bridge_slave_0: left allmulticast mode [ 105.244438][ T6061] bridge_slave_0: left promiscuous mode [ 105.274952][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.326507][ T6061] bridge_slave_1: left allmulticast mode [ 105.337994][ T6061] bridge_slave_1: left promiscuous mode [ 105.354309][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.439705][ T6061] bond0: (slave bond_slave_0): Releasing backup interface [ 105.503779][ T6061] bond0: (slave bond_slave_1): Releasing backup interface [ 105.605091][ T6061] team0: Port device team_slave_0 removed [ 105.649665][ T6061] team0: Port device team_slave_1 removed [ 105.693771][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.730949][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.758284][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.777866][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.871952][ T6058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.987554][ T6085] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 106.708505][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 106.774063][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 107.559788][ T6123] netlink: 64 bytes leftover after parsing attributes in process `syz.3.26'. [ 108.563495][ T6150] netlink: 216 bytes leftover after parsing attributes in process `syz.1.35'. [ 108.623023][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 108.658937][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'. [ 109.200402][ T6164] syzkaller1: entered promiscuous mode [ 109.215428][ T6164] syzkaller1: entered allmulticast mode [ 109.367357][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 109.417052][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 109.883426][ T6184] netlink: 156 bytes leftover after parsing attributes in process `syz.1.42'. [ 110.280503][ T6212] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 110.398130][ T6212] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 111.462004][ T6257] Bluetooth: MGMT ver 1.23 [ 111.521497][ T6248] warning: `syz.1.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.780283][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 112.663776][ T6283] syzkaller1: entered allmulticast mode [ 138.278694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.285403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.105833][ T5183] Bluetooth: hci4: link tx timeout [ 170.111264][ T5183] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 170.132024][ T5183] Bluetooth: hci4: link tx timeout [ 170.137545][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.193817][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 174.275771][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 199.717064][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.723534][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.153344][ T6484] Bluetooth: hci2: command 0x0406 tx timeout [ 217.159537][ T6483] Bluetooth: hci3: command 0x0406 tx timeout [ 217.168761][ T6484] Bluetooth: hci0: command 0x0406 tx timeout [ 217.175363][ T6483] Bluetooth: hci1: command 0x0406 tx timeout [ 235.201000][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 235.236897][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 235.255844][ T6497] tipc: Started in network mode [ 235.266481][ T6497] tipc: Node identity ae63c457485e, cluster identity 4711 [ 235.280144][ T6497] tipc: Enabled bearer , priority 0 [ 235.356403][ T6493] bond1: entered promiscuous mode [ 235.361601][ T6493] bond1: entered allmulticast mode [ 235.374513][ T6493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.382639][ T6497] syzkaller0: entered promiscuous mode [ 235.418558][ T6497] syzkaller0: entered allmulticast mode [ 235.569136][ T6497] tipc: Resetting bearer [ 235.602125][ T6513] Bluetooth: MGMT ver 1.23 [ 235.657524][ T6496] tipc: Resetting bearer [ 235.691735][ T6496] tipc: Disabling bearer [ 235.979218][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.68'. [ 236.374161][ T6512] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 236.415221][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.78'. [ 236.478724][ T6544] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 236.505629][ T6544] netlink: 172 bytes leftover after parsing attributes in process `syz.4.78'. [ 236.603140][ T6543] delete_channel: no stack [ 237.029125][ T6566] pimreg: entered allmulticast mode [ 237.089939][ T6565] dvmrp8: entered allmulticast mode [ 237.124175][ T6565] pimreg: left allmulticast mode [ 237.135079][ T6565] dvmrp8: left allmulticast mode [ 237.849421][ T6594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.913827][ T6597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 237.963366][ T6597] openvswitch: netlink: Flow key attr not present in new flow. [ 238.070385][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 238.433099][ T6485] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.759034][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 238.778121][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 238.788876][ T6630] netlink: 'syz.0.101': attribute type 18 has an invalid length. [ 239.022396][ T6647] netlink: 256 bytes leftover after parsing attributes in process `syz.3.106'. [ 239.347506][ T6662] pim6reg1: entered promiscuous mode [ 239.357426][ T6662] pim6reg1: entered allmulticast mode [ 239.831535][ T6675] tap0: tun_chr_ioctl cmd 1074025677 [ 239.863900][ T6675] tap0: linktype set to 823 [ 240.237120][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.287547][ T6694] __nla_validate_parse: 4 callbacks suppressed [ 240.287566][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 240.336791][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 240.366079][ T6694] netlink: 'syz.0.122': attribute type 30 has an invalid length. [ 240.752706][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 240.945222][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 241.014069][ T6485] block nbd0: Receive control failed (result -107) [ 241.071824][ T6719] nbd0: detected capacity change from 0 to 32 [ 241.117820][ T6560] block nbd0: Dead connection, failed to find a fallback [ 241.126659][ T6560] block nbd0: shutting down sockets [ 241.132611][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.135140][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 241.144772][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.162039][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.180127][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.188786][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.199997][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.208991][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.218635][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.227784][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.244024][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.270489][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.292376][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.307860][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.436667][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.463350][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.489568][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.512961][ T6560] ldm_validate_partition_table(): Disk read failed. [ 241.527336][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.549797][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.586822][ T6560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 241.605797][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.133'. [ 241.614280][ T6560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 241.640921][ T6560] Dev nbd0: unable to read RDB block 0 [ 241.671930][ T6560] nbd0: unable to read partition table [ 241.704407][ T6560] ldm_validate_partition_table(): Disk read failed. [ 241.729374][ T6560] Dev nbd0: unable to read RDB block 0 [ 241.740324][ T6560] nbd0: unable to read partition table [ 242.201567][ T6752] delete_channel: no stack [ 242.500812][ T6763] trusted_key: syz.4.142 sent an empty control message without MSG_MORE. [ 242.510489][ T6762] netlink: 'syz.2.141': attribute type 16 has an invalid length. [ 242.549825][ T6762] netlink: 'syz.2.141': attribute type 17 has an invalid length. [ 242.839796][ T6768] vlan2: entered promiscuous mode [ 242.847256][ T6768] bridge0: entered promiscuous mode [ 242.856676][ T6768] bridge0: port 3(vlan2) entered blocking state [ 242.864570][ T6768] bridge0: port 3(vlan2) entered disabled state [ 242.871258][ T6768] vlan2: entered allmulticast mode [ 242.877674][ T6768] bridge0: entered allmulticast mode [ 242.906370][ T6768] vlan2: left allmulticast mode [ 242.911430][ T6768] bridge0: left allmulticast mode [ 242.944966][ T6769] vlan2: entered promiscuous mode [ 242.955225][ T6769] bridge0: port 3(vlan2) entered blocking state [ 242.961997][ T6769] bridge0: port 3(vlan2) entered disabled state [ 242.970706][ T6769] vlan2: entered allmulticast mode [ 242.985177][ T6769] bridge0: entered allmulticast mode [ 243.016206][ T6769] vlan2: left allmulticast mode [ 243.021324][ T6769] bridge0: left allmulticast mode [ 243.497801][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 244.361904][ T6782] netlink: 'syz.2.147': attribute type 12 has an invalid length. [ 244.519811][ T6797] netlink: 16530 bytes leftover after parsing attributes in process `syz.1.152'. [ 244.584993][ T30] audit: type=1804 audit(1755784998.251:2): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.152" name="/newroot/27/cgroup.controllers" dev="tmpfs" ino=156 res=1 errno=0 [ 244.638078][ T30] audit: type=1800 audit(1755784998.251:3): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.152" name="cgroup.controllers" dev="tmpfs" ino=156 res=0 errno=0 [ 245.026398][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 245.112736][ T6821] tipc: Started in network mode [ 245.119861][ T6821] tipc: Node identity c6023ad6edc5, cluster identity 4711 [ 245.127795][ T6821] tipc: Enabled bearer , priority 0 [ 245.136727][ T6825] tipc: Started in network mode [ 245.142652][ T6825] tipc: Node identity 521e5ca151b9, cluster identity 4711 [ 245.150886][ T6825] tipc: Enabled bearer , priority 0 [ 245.350121][ T6829] syzkaller0: entered promiscuous mode [ 245.355885][ T6829] syzkaller0: entered allmulticast mode [ 245.362487][ T6829] tipc: Resetting bearer [ 245.372700][ T6828] syzkaller0: entered promiscuous mode [ 245.382318][ T6828] syzkaller0: entered allmulticast mode [ 245.395577][ T6833] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.488156][ T6603] tipc: Resetting bearer [ 245.494465][ T6828] netlink: 256 bytes leftover after parsing attributes in process `syz.3.163'. [ 245.520279][ T6828] netlink: 56 bytes leftover after parsing attributes in process `syz.3.163'. [ 245.531520][ T6824] tipc: Resetting bearer [ 245.538781][ T6839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.166'. [ 246.246900][ T928] tipc: Node number set to 61299873 [ 246.253783][ T928] tipc: Node number set to 734477014 [ 246.829945][ T6824] tipc: Disabling bearer [ 246.842985][ T6821] tipc: Resetting bearer [ 246.852879][ T6820] tipc: Resetting bearer [ 246.931989][ T6820] tipc: Disabling bearer [ 247.360368][ T6872] syzkaller1: entered promiscuous mode [ 247.382646][ T6872] syzkaller1: entered allmulticast mode [ 247.503602][ T6880] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 247.759513][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 247.773311][ T6887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.137844][ T6899] pim6reg1: entered promiscuous mode [ 248.144029][ T6899] pim6reg1: entered allmulticast mode [ 248.528532][ T6911] netlink: 'syz.4.183': attribute type 13 has an invalid length. [ 248.555318][ T6911] netlink: 'syz.4.183': attribute type 17 has an invalid length. [ 248.730363][ T6911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.897549][ T6931] sctp: [Deprecated]: syz.4.188 (pid 6931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.897549][ T6931] Use struct sctp_sack_info instead [ 249.165222][ T6938] team0: entered promiscuous mode [ 249.214582][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 249.547587][ T6938] team0 (unregistering): left promiscuous mode [ 249.866200][ T6954] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 249.985278][ T6965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 250.091878][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 250.151592][ T6972] geneve2: entered promiscuous mode [ 250.167492][ T6972] geneve2: entered allmulticast mode [ 250.404469][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 250.441953][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 251.155240][ T7011] syzkaller1: entered promiscuous mode [ 251.160835][ T7011] syzkaller1: entered allmulticast mode [ 251.226789][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 251.272720][ T7014] netlink: 48 bytes leftover after parsing attributes in process `syz.4.209'. [ 251.565131][ T7019] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 251.579675][ T7019] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 251.588263][ T7019] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 252.611491][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 252.873715][ T7068] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 252.886882][ T7068] netlink: 'syz.1.227': attribute type 5 has an invalid length. [ 253.168682][ T7084] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 253.221548][ T7084] macsec1: entered promiscuous mode [ 253.245134][ T7084] macsec1: entered allmulticast mode [ 253.263455][ T7084] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 253.329032][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 254.112857][ T7129] syzkaller1: entered promiscuous mode [ 254.132407][ T7129] syzkaller1: entered allmulticast mode [ 254.189352][ T7129] netlink: 'syz.0.244': attribute type 12 has an invalid length. [ 254.420671][ T7143] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 254.477544][ T7143] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 254.682374][ T7151] netlink: 'syz.3.249': attribute type 3 has an invalid length. [ 254.771059][ T7151] syz_tun: entered allmulticast mode [ 254.849467][ T7151] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.933000][ T7151] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 254.983331][ T7154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.143630][ T7148] syz_tun: left allmulticast mode [ 255.380969][ T7152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.391710][ T7152] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 255.434117][ T7152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.453108][ T7152] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 255.524699][ T7152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.530674][ T7152] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 255.607450][ T7152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.657818][ T7152] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 255.694838][ T7152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 255.701705][ T7152] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 256.429188][ T7214] netlink: 'syz.0.265': attribute type 13 has an invalid length. [ 256.870051][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 256.895438][ T7232] pim6reg: entered allmulticast mode [ 256.931193][ T7232] pim6reg: left allmulticast mode [ 257.081202][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 257.118958][ T7237] lo: Caught tx_queue_len zero misconfig [ 257.516402][ T7265] netlink: 256 bytes leftover after parsing attributes in process `syz.0.275'. [ 257.603266][ T7265] netlink: 56 bytes leftover after parsing attributes in process `syz.0.275'. [ 257.747378][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.755505][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.042558][ T7280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.244115][ T7251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.300986][ T7251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.801488][ T7276] syzkaller1: entered promiscuous mode [ 258.820380][ T7276] syzkaller1: entered allmulticast mode [ 258.853189][ T73] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.899901][ T73] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.056889][ T7303] netlink: 80 bytes leftover after parsing attributes in process `syz.0.279'. [ 259.101161][ T73] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.143760][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.267460][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 259.317354][ T7316] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 260.591980][ T7368] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 261.159010][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.161418][ T7386] tipc: Enabled bearer , priority 0 [ 261.173340][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.176866][ T7386] syzkaller0: entered promiscuous mode [ 261.221272][ T7386] syzkaller0: entered allmulticast mode [ 261.372520][ T7392] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20004 [ 261.386453][ T7392] netlink: 203080 bytes leftover after parsing attributes in process `syz.2.299'. [ 261.610522][ T7385] tipc: Resetting bearer [ 261.669909][ T7385] tipc: Disabling bearer [ 261.687136][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 261.928444][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 262.029238][ T7417] tipc: Enabled bearer , priority 0 [ 262.037323][ T7417] syzkaller0: entered promiscuous mode [ 262.050301][ T7417] syzkaller0: entered allmulticast mode [ 262.080104][ T7415] tipc: Resetting bearer [ 262.110311][ T7415] tipc: Disabling bearer [ 262.478150][ T7443] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 262.555927][ T7442] tipc: Enabled bearer , priority 0 [ 262.563971][ T7442] syzkaller0: entered promiscuous mode [ 262.569491][ T7442] syzkaller0: entered allmulticast mode [ 262.619768][ T7442] tipc: Resetting bearer [ 262.637620][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 262.650343][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 262.660846][ T7442] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 262.677036][ T7442] netlink: 10 bytes leftover after parsing attributes in process `syz.2.314'. [ 262.765156][ T7442] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.790665][ T7442] block nbd1: shutting down sockets [ 262.890999][ T7439] tipc: Resetting bearer [ 263.061148][ T7459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.319'. [ 263.069832][ T7439] tipc: Disabling bearer [ 263.070442][ T7459] openvswitch: netlink: Flow actions attr not present in new flow. [ 263.348532][ T5233] udevd[5233]: worker [6560] terminated by signal 33 (Unknown signal 33) [ 263.701917][ T7484] netlink: 'syz.0.326': attribute type 5 has an invalid length. [ 263.730608][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 263.741728][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 263.801929][ T7484] gretap1: entered promiscuous mode [ 263.807346][ T7484] gretap1: entered allmulticast mode [ 264.260138][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.339'. [ 264.378327][ T7521] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 264.398120][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 264.410258][ T7527] netlink: 'syz.3.341': attribute type 9 has an invalid length. [ 264.420338][ T7521] netlink: 'syz.2.340': attribute type 10 has an invalid length. [ 264.432153][ T7521] team0: Device ipvlan1 failed to register rx_handler [ 264.696561][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 264.966205][ T7543] tipc: Enabled bearer , priority 0 [ 265.004157][ T7543] syzkaller0: entered promiscuous mode [ 265.009705][ T7543] syzkaller0: entered allmulticast mode [ 265.061238][ T7543] tipc: Enabling of bearer rejected, failed to enable media [ 265.097562][ T7543] tipc: Resetting bearer [ 265.106562][ T7547] netlink: 'syz.4.347': attribute type 11 has an invalid length. [ 265.126717][ T7542] tipc: Resetting bearer [ 265.166905][ T7542] tipc: Disabling bearer [ 265.709388][ T7574] bond0: (slave wlan0): Releasing backup interface [ 265.731388][ T7576] netlink: 'syz.4.357': attribute type 10 has an invalid length. [ 265.756888][ T7576] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 266.138288][ T7581] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 266.412703][ T7589] netlink: 'syz.3.363': attribute type 13 has an invalid length. [ 266.750260][ T7603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.320558][ T7643] vxcan2: entered promiscuous mode [ 267.549948][ T7662] netlink: 'syz.0.382': attribute type 2 has an invalid length. [ 267.605769][ T7665] __nla_validate_parse: 7 callbacks suppressed [ 267.605790][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 267.658368][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 267.682019][ T7675] bridge_slave_0: left allmulticast mode [ 267.689620][ T7675] bridge_slave_0: left promiscuous mode [ 267.699685][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.709903][ T7675] bridge_slave_1: left allmulticast mode [ 267.716542][ T7675] bridge_slave_1: left promiscuous mode [ 267.722353][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.738377][ T7675] bond0: (slave bond_slave_0): Releasing backup interface [ 267.756858][ T7675] bond0: (slave bond_slave_1): Releasing backup interface [ 267.769281][ T7675] team0: Port device team_slave_0 removed [ 267.779462][ T7675] team0: Port device team_slave_1 removed [ 267.788013][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.797638][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.943980][ T7683] nbd: must specify at least one socket [ 267.952850][ T7681] nbd: nbd0 already in use [ 268.224700][ T7296] IPVS: starting estimator thread 0... [ 268.277156][ T7705] block nbd0: NBD_DISCONNECT [ 268.295328][ T7705] block nbd0: Send disconnect failed -107 [ 268.353829][ T7704] IPVS: using max 30 ests per chain, 72000 per kthread [ 268.992425][ T7716] netlink: 'syz.1.398': attribute type 66 has an invalid length. [ 269.692101][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.407'. [ 269.759133][ T7749] sctp: [Deprecated]: syz.0.408 (pid 7749) Use of int in max_burst socket option. [ 269.759133][ T7749] Use struct sctp_assoc_value instead [ 270.255472][ T7761] !: renamed from dummy0 (while UP) [ 271.333529][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 271.405475][ T30] audit: type=1800 audit(1755785025.071:4): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.419" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 271.405975][ T7801] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 271.466591][ T7803] tipc: Started in network mode [ 271.489473][ T7803] tipc: Node identity a2a472596ce9, cluster identity 4711 [ 271.504210][ T7801] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 271.518119][ T7803] tipc: Enabled bearer , priority 0 [ 271.537098][ T7801] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 271.544643][ T7811] syzkaller0: entered promiscuous mode [ 271.550289][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 271.576396][ T7811] syzkaller0: entered allmulticast mode [ 271.822222][ T7803] tipc: Resetting bearer [ 271.930427][ T7802] tipc: Resetting bearer [ 271.961858][ T7832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.973336][ T7832] netlink: 180 bytes leftover after parsing attributes in process `syz.2.427'. [ 272.218090][ T7802] tipc: Disabling bearer [ 272.410632][ T7830] netlink: 11382 bytes leftover after parsing attributes in process `syz.3.426'. [ 272.734148][ T30] audit: type=1800 audit(1755785026.391:5): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.430" name="blkio.bfq.time_recursive" dev="tmpfs" ino=496 res=0 errno=0 [ 272.942138][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 272.978943][ T7874] netlink: 180 bytes leftover after parsing attributes in process `syz.3.432'. [ 272.992957][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 273.012199][ T7875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.433'. [ 273.192762][ T7883] ip6tnl0: Caught tx_queue_len zero misconfig [ 273.492453][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.500477][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.529292][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.536580][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.544445][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.551662][ T7902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.618710][ T7902] team0: Port device bridge0 added [ 274.191059][ T7920] netlink: 128 bytes leftover after parsing attributes in process `syz.0.446'. [ 274.217549][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 274.361446][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 274.402518][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 274.496257][ T7920] syz.0.446 (7920) used greatest stack depth: 17864 bytes left [ 274.500800][ T7937] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 274.630511][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 274.773775][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.455'. [ 275.219386][ T7975] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 275.228821][ T7976] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 275.372770][ T7982] bridge_slave_0: left allmulticast mode [ 275.402459][ T7982] bridge_slave_0: left promiscuous mode [ 275.413624][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.436621][ T7982] bridge_slave_1: left allmulticast mode [ 275.465995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.468159][ T7982] bridge_slave_1: left promiscuous mode [ 275.487410][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.541357][ T7982] bond0: (slave bond_slave_0): Releasing backup interface [ 275.542106][ T7994] netlink: 'syz.2.463': attribute type 16 has an invalid length. [ 275.562865][ T7982] bond0: (slave bond_slave_1): Releasing backup interface [ 275.584937][ T7982] team0: Port device team_slave_0 removed [ 275.599308][ T7982] team0: Port device team_slave_1 removed [ 275.619434][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.628874][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.647316][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.655459][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.684760][ T7982] bond0: (slave vlan2): Releasing backup interface [ 275.722590][ T7982] veth1: left promiscuous mode [ 275.750888][ T7981] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 275.766917][ T7981] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 275.862035][ T7990] gretap1: entered promiscuous mode [ 275.913811][ T7990] bond1: (slave gretap1): making interface the new active one [ 275.927521][ T7990] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 275.962775][ T8000] erspan0: entered promiscuous mode [ 275.972408][ T8000] erspan0: left promiscuous mode [ 276.411198][ T8024] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 276.463326][ T8024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.549600][ T8029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.581491][ T8029] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 276.646038][ T8029] bond2: (slave vcan1): Error -95 calling set_mac_address [ 276.796414][ T8024] gretap1: entered promiscuous mode [ 276.841817][ T8024] bond2: (slave gretap1): making interface the new active one [ 276.857083][ T8024] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 276.929626][ T8029] macvlan3: entered promiscuous mode [ 276.952035][ T8029] macvlan3: entered allmulticast mode [ 276.966493][ T8029] bond2: entered promiscuous mode [ 276.985092][ T8029] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 277.026091][ T8029] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 277.045884][ T8029] bond2: left promiscuous mode [ 277.180603][ T8062] vlan0: entered promiscuous mode [ 277.433789][ T8039] can: request_module (can-proto-0) failed. [ 277.495948][ T8045] syzkaller0: entered promiscuous mode [ 277.501566][ T8045] syzkaller0: entered allmulticast mode [ 278.843163][ T8094] lo: entered allmulticast mode [ 279.039262][ T8103] __nla_validate_parse: 9 callbacks suppressed [ 279.039283][ T8103] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.492'. [ 279.256192][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 279.311271][ T8116] geneve2: entered promiscuous mode [ 279.322069][ T8119] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 279.342694][ T8116] geneve2: entered allmulticast mode [ 279.348445][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 279.349904][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 279.587178][ T8128] netlink: 120 bytes leftover after parsing attributes in process `syz.2.499'. [ 279.836482][ T8138] vxcan1: entered allmulticast mode [ 280.099688][ T8150] netlink: 184 bytes leftover after parsing attributes in process `syz.4.505'. [ 280.366225][ T8160] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 280.366885][ T8130] netlink: 'syz.0.500': attribute type 6 has an invalid length. [ 280.802098][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 280.912052][ T8173] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.069025][ T8182] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.514'. [ 281.152727][ T8185] tipc: Enabling of bearer rejected, failed to enable media [ 281.221126][ T8185] pim6reg1: entered promiscuous mode [ 281.236446][ T8185] pim6reg1: entered allmulticast mode [ 282.468160][ T8254] netlink: 224 bytes leftover after parsing attributes in process `syz.0.532'. [ 282.516254][ T8254] openvswitch: netlink: Flow key attr not present in new flow. [ 282.619037][ T8254] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 282.657002][ T8254] netlink: 128 bytes leftover after parsing attributes in process `syz.0.532'. [ 282.687972][ T8254] netlink: 'syz.0.532': attribute type 2 has an invalid length. [ 282.696511][ T8254] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 282.910632][ T8267] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 282.921552][ T8268] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 282.947704][ T8273] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 283.126434][ T8273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.136692][ T8283] netlink: 'syz.3.541': attribute type 12 has an invalid length. [ 283.147174][ T8273] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 283.465837][ T8305] IPv6: Can't replace route, no match found [ 283.756757][ T8314] lo: Caught tx_queue_len zero misconfig [ 283.763979][ T8313] netlink: 'syz.2.546': attribute type 4 has an invalid length. [ 283.823466][ T8321] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0 [ 283.859198][ T8319] IPVS: stopping backup sync thread 8321 ... [ 284.160804][ T8326] Driver unsupported XDP return value 0 on prog (id 250) dev N/A, expect packet loss! [ 284.351736][ T8354] __nla_validate_parse: 3 callbacks suppressed [ 284.351756][ T8354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.555'. [ 284.387292][ T8354] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 284.458950][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.514404][ T8359] bond3: (slave gretap2): making interface the new active one [ 284.525135][ T8359] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 284.834626][ T8327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.896660][ T8379] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 284.955184][ T8379] netlink: 172 bytes leftover after parsing attributes in process `syz.4.562'. [ 285.150115][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 285.402925][ T8406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.570'. [ 285.442683][ T8409] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.471848][ T8393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.550109][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'. [ 285.706318][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'. [ 285.837440][ T8393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.021552][ T8393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.169350][ T8393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.358728][ T73] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.392864][ T73] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.448469][ T7854] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.480069][ T73] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.505913][ T8507] pimreg: entered allmulticast mode [ 286.517433][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 286.649679][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 287.407214][ T8615] delete_channel: no stack [ 287.468566][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 287.799336][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 287.821554][ T8632] gtp0: entered promiscuous mode [ 287.835569][ T8632] gtp0: entered allmulticast mode [ 287.848891][ T8632] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 287.864371][ T8633] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 287.883345][ T8633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.891426][ T8632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.014779][ T8637] wg1: entered promiscuous mode [ 288.031605][ T8637] wg1: entered allmulticast mode [ 288.347598][ T8655] syzkaller0: entered promiscuous mode [ 288.359515][ T8655] syzkaller0: entered allmulticast mode [ 288.821538][ T8684] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 289.364842][ T8717] openvswitch: netlink: Key type 251 is out of range max 32 [ 289.381415][ T8710] siw: device registration error -23 [ 289.408892][ T8717] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 289.409023][ T8710] __nla_validate_parse: 3 callbacks suppressed [ 289.409041][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'. [ 289.530762][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 289.541414][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 289.755964][ T8743] netlink: 'syz.1.621': attribute type 13 has an invalid length. [ 289.764851][ T8743] netlink: 'syz.1.621': attribute type 17 has an invalid length. [ 290.051697][ T8745] bridge0: port 3(erspan0) entered blocking state [ 290.060434][ T8745] bridge0: port 3(erspan0) entered disabled state [ 290.068100][ T8745] erspan0: entered allmulticast mode [ 290.076277][ T8745] erspan0: entered promiscuous mode [ 290.082366][ T8745] bridge0: port 3(erspan0) entered blocking state [ 290.089302][ T8745] bridge0: port 3(erspan0) entered listening state [ 290.151839][ T8746] erspan0: left allmulticast mode [ 290.169131][ T8746] erspan0: left promiscuous mode [ 290.176416][ T8746] bridge0: port 3(erspan0) entered disabled state [ 290.834008][ T6485] Bluetooth: hci4: command tx timeout [ 291.151987][ T8794] syz.3.632: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.176482][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.3.632 Not tainted syzkaller #0 PREEMPT(full) [ 291.176513][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.176535][ T8794] Call Trace: [ 291.176545][ T8794] [ 291.176556][ T8794] dump_stack_lvl+0x189/0x250 [ 291.176591][ T8794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.176626][ T8794] ? __pfx__printk+0x10/0x10 [ 291.176659][ T8794] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.176685][ T8794] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.176713][ T8794] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.176742][ T8794] warn_alloc+0x214/0x310 [ 291.176778][ T8794] ? stack_depot_save_flags+0x40/0x860 [ 291.176811][ T8794] ? __pfx_warn_alloc+0x10/0x10 [ 291.176848][ T8794] ? kasan_save_track+0x4f/0x80 [ 291.176877][ T8794] ? xskq_create+0x56/0x170 [ 291.176905][ T8794] ? xsk_init_queue+0xb0/0x110 [ 291.176930][ T8794] ? xsk_setsockopt+0x4dc/0x8d0 [ 291.176955][ T8794] ? do_sock_setsockopt+0x17c/0x1b0 [ 291.176975][ T8794] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 291.176993][ T8794] ? do_syscall_64+0xfa/0x3b0 [ 291.177024][ T8794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.177054][ T8794] __vmalloc_node_range_noprof+0x125/0x12f0 [ 291.177120][ T8794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.177165][ T8794] ? __kasan_kmalloc+0x93/0xb0 [ 291.177199][ T8794] vmalloc_user_noprof+0xad/0xf0 [ 291.177232][ T8794] ? xskq_create+0xbf/0x170 [ 291.177262][ T8794] xskq_create+0xbf/0x170 [ 291.177293][ T8794] xsk_init_queue+0xb0/0x110 [ 291.177325][ T8794] xsk_setsockopt+0x4dc/0x8d0 [ 291.177355][ T8794] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.177382][ T8794] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.177417][ T8794] ? aa_sock_opt_perm+0xff/0x1b0 [ 291.177440][ T8794] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.177463][ T8794] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.177492][ T8794] do_sock_setsockopt+0x17c/0x1b0 [ 291.177518][ T8794] __x64_sys_setsockopt+0x13f/0x1b0 [ 291.177545][ T8794] do_syscall_64+0xfa/0x3b0 [ 291.177575][ T8794] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.177613][ T8794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.177633][ T8794] ? clear_bhb_loop+0x60/0xb0 [ 291.177659][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.177679][ T8794] RIP: 0033:0x7faef498ebe9 [ 291.177706][ T8794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.177723][ T8794] RSP: 002b:00007faef5755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.177745][ T8794] RAX: ffffffffffffffda RBX: 00007faef4bb5fa0 RCX: 00007faef498ebe9 [ 291.177760][ T8794] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 291.177771][ T8794] RBP: 00007faef4a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 291.177784][ T8794] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.177797][ T8794] R13: 00007faef4bb6038 R14: 00007faef4bb5fa0 R15: 00007ffd68214718 [ 291.177830][ T8794] [ 291.178130][ T8794] Mem-Info: [ 291.496637][ T8794] active_anon:4450 inactive_anon:0 isolated_anon:0 [ 291.496637][ T8794] active_file:3077 inactive_file:39886 isolated_file:0 [ 291.496637][ T8794] unevictable:768 dirty:276 writeback:0 [ 291.496637][ T8794] slab_reclaimable:11054 slab_unreclaimable:110317 [ 291.496637][ T8794] mapped:29142 shmem:1353 pagetables:1077 [ 291.496637][ T8794] sec_pagetables:0 bounce:0 [ 291.496637][ T8794] kernel_misc_reclaimable:0 [ 291.496637][ T8794] free:1323634 free_pcp:13316 free_cma:0 [ 291.542825][ T8794] Node 0 active_anon:17800kB inactive_anon:0kB active_file:12308kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116568kB dirty:1104kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12652kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.635536][ T8794] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.670642][ T8794] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.720260][ T8794] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 291.736759][ T8794] Node 0 DMA32 free:1389080kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17652kB inactive_anon:0kB active_file:12308kB inactive_file:157776kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2557464kB mlocked:0kB bounce:0kB free_pcp:32648kB local_pcp:15272kB free_cma:0kB [ 291.770773][ T8794] lowmem_reserve[]: 0 0 1 1 1 [ 291.800060][ T8794] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 291.873482][ T8794] lowmem_reserve[]: 0 0 0 0 0 [ 291.890254][ T8794] Node 1 Normal free:3885976kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19264kB local_pcp:12256kB free_cma:0kB [ 291.967400][ T8794] lowmem_reserve[]: 0 0 0 0 0 [ 291.972223][ T8794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.033430][ T8794] Node 0 DMA32: 908*4kB (UME) 283*8kB (UM) 201*16kB (UM) 1431*32kB (UM) 397*64kB (UM) 144*128kB (UME) 76*256kB (UME) 55*512kB (UME) 27*1024kB (UM) 1*2048kB (E) 295*4096kB (M) = 1384376kB [ 292.091403][ T8794] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 292.149742][ T8814] netlink: 'syz.1.638': attribute type 7 has an invalid length. [ 292.149792][ T8794] Node 1 Normal: 184*4kB [ 292.171304][ T8814] netlink: 'syz.1.638': attribute type 8 has an invalid length. [ 292.178138][ T8794] (UE) 35*8kB (UME) 34*16kB (UME) 102*32kB (UME) 35*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3885976kB [ 292.263128][ T8794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.285188][ T8794] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 292.313143][ T8794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.332987][ T8794] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.342445][ T8794] 44312 total pagecache pages [ 292.363176][ T8794] 0 pages in swap cache [ 292.367508][ T8794] Free swap = 124996kB [ 292.371690][ T8794] Total swap = 124996kB [ 292.375989][ T8794] 2097051 pages RAM [ 292.379896][ T8794] 0 pages HighMem/MovableOnly [ 292.384733][ T8794] 425659 pages reserved [ 292.388910][ T8794] 0 pages cma reserved [ 292.582074][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 292.673968][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 292.694412][ T8836] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 292.714827][ T8838] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 292.722680][ T8838] netlink: 244 bytes leftover after parsing attributes in process `syz.0.644'. [ 293.437063][ T8871] tipc: Enabled bearer , priority 0 [ 293.446070][ T8871] syzkaller0: entered promiscuous mode [ 293.451739][ T8871] syzkaller0: entered allmulticast mode [ 293.587857][ T8871] tipc: Resetting bearer [ 293.613322][ T8867] tipc: Resetting bearer [ 293.635253][ T8867] tipc: Disabling bearer [ 294.338780][ T8900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 294.356886][ T8900] netlink: 'syz.3.661': attribute type 6 has an invalid length. [ 294.916451][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.666'. [ 294.942883][ T8921] tipc: Started in network mode [ 294.951460][ T8921] tipc: Node identity 8a2273e1021e, cluster identity 4711 [ 294.961759][ T8921] tipc: Enabled bearer , priority 0 [ 294.968951][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.666'. [ 295.076288][ T8917] tipc: Disabling bearer [ 295.218555][ T8933] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 295.243739][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.4.671'. [ 295.544918][ T8944] netlink: 56 bytes leftover after parsing attributes in process `syz.4.674'. [ 295.554919][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.674'. [ 295.570817][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 295.582342][ T8944] netlink: 'syz.4.674': attribute type 2 has an invalid length. [ 295.927318][ T8950] netlink: 'syz.3.677': attribute type 10 has an invalid length. [ 295.969654][ T8950] batman_adv: batadv0: Adding interface: netdevsim0 [ 296.008151][ T8950] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.042585][ T8950] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 296.295792][ T8982] ip6tnl1: entered promiscuous mode [ 296.327330][ T8982] ip6tnl1: entered allmulticast mode [ 296.557171][ T8989] syzkaller0: entered promiscuous mode [ 296.562965][ T8989] syzkaller0: entered allmulticast mode [ 297.070665][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 298.126814][ T9014] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 298.472878][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.696'. [ 298.512769][ T9043] netlink: 'syz.4.697': attribute type 5 has an invalid length. [ 299.174739][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.703'. [ 300.230123][ T9072] netlink: 'syz.0.706': attribute type 3 has an invalid length. [ 300.243220][ T9072] netlink: 'syz.0.706': attribute type 3 has an invalid length. [ 300.262465][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.706'. [ 300.379769][ T9073] syzkaller0: entered promiscuous mode [ 300.388218][ T9073] syzkaller0: entered allmulticast mode [ 300.462303][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 300.535163][ T9092] sctp: [Deprecated]: syz.3.712 (pid 9092) Use of int in maxseg socket option. [ 300.535163][ T9092] Use struct sctp_assoc_value instead [ 300.797547][ T9098] team0 (unregistering): Port device team_slave_0 removed [ 300.811673][ T9098] team0 (unregistering): Port device team_slave_1 removed [ 301.250129][ T9121] netlink: 'syz.4.722': attribute type 4 has an invalid length. [ 301.294531][ T9125] netlink: 248 bytes leftover after parsing attributes in process `syz.3.723'. [ 301.449501][ T9133] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 301.463743][ T9128] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 301.580594][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.727'. [ 301.668569][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.727'. [ 301.827358][ T9137] bond4: entered promiscuous mode [ 301.836950][ T9137] bond4: entered allmulticast mode [ 301.842663][ T9137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.855020][ T9148] netlink: 6 bytes leftover after parsing attributes in process `syz.0.729'. [ 302.582319][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 303.017417][ T9187] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 303.100226][ T9189] tipc: Enabled bearer , priority 0 [ 303.108147][ T9189] syzkaller0: entered promiscuous mode [ 303.124714][ T9189] syzkaller0: entered allmulticast mode [ 303.181354][ T9189] tipc: Resetting bearer [ 303.203172][ T9188] tipc: Resetting bearer [ 303.229481][ T9188] tipc: Disabling bearer [ 303.653135][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 304.917908][ T9212] veth0_to_bond: entered allmulticast mode [ 305.328832][ T9233] netlink: 'syz.3.752': attribute type 2 has an invalid length. [ 305.344565][ T9233] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.752'. [ 305.665319][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 306.056683][ T9260] netlink: 176 bytes leftover after parsing attributes in process `syz.4.759'. [ 306.624128][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 306.892103][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.914909][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.950521][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.008210][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.174837][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 307.276695][ T9294] bridge2: port 1(veth3) entered blocking state [ 307.287108][ T9294] bridge2: port 1(veth3) entered disabled state [ 307.294244][ T9294] veth3: entered allmulticast mode [ 307.306768][ T9294] veth3: entered promiscuous mode [ 307.316007][ T9297] netlink: 'syz.2.769': attribute type 13 has an invalid length. [ 307.346630][ T9297] netlink: 'syz.2.769': attribute type 17 has an invalid length. [ 307.462437][ T9297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.791431][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.775'. [ 307.952581][ T9320] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.777'. [ 308.142081][ T9326] nbd: must specify at least one socket [ 308.257023][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.782'. [ 308.267081][ T9336] netlink: 260 bytes leftover after parsing attributes in process `syz.2.782'. [ 308.267539][ T9335] netlink: 'syz.4.784': attribute type 9 has an invalid length. [ 308.285797][ T9337] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2950 [ 308.316566][ T9336] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2950 [ 308.438086][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 308.509519][ T9349] netlink: 'syz.4.788': attribute type 5 has an invalid length. [ 308.852167][ T9372] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 308.863095][ T9372] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 308.879876][ T7846] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.897404][ T7856] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.912024][ T7856] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.969484][ T7856] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.009342][ T9376] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.140859][ T9388] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 309.189436][ T9388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.244807][ T9372] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 309.282563][ T9372] vlan2: entered allmulticast mode [ 309.288134][ T9372] veth1: entered allmulticast mode [ 309.294335][ T9372] veth1: entered promiscuous mode [ 309.300454][ T9372] veth1: left promiscuous mode [ 309.308776][ T9372] bond5: (slave vlan2): making interface the new active one [ 309.316607][ T9372] bond5: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 309.335600][ T9372] veth1: entered promiscuous mode [ 309.341873][ T9372] vlan2: entered promiscuous mode [ 309.347951][ T9372] bond5: (slave vlan2): Enslaving as an active interface with an up link [ 309.900857][ T9420] netlink: 'syz.3.806': attribute type 2 has an invalid length. [ 310.048646][ T9430] openvswitch: netlink: Flow actions attr not present in new flow. [ 310.363237][ T9448] netlink: 'syz.0.815': attribute type 83 has an invalid length. [ 310.498181][ T9453] __nla_validate_parse: 9 callbacks suppressed [ 310.498330][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 310.531088][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 310.856889][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.818'. [ 310.906813][ T30] audit: type=1800 audit(1755785064.571:6): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.816" name="memory.events" dev="tmpfs" ino=739 res=0 errno=0 [ 311.390492][ T9486] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 311.505841][ T9484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.600499][ T9486] bond3: entered promiscuous mode [ 311.606451][ T9486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.672246][ T9493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.687066][ T9493] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 311.700043][ T9493] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 311.713884][ T9493] bond3: (slave vxcan3): making interface the new active one [ 311.721317][ T9493] vxcan3: entered promiscuous mode [ 311.729385][ T9493] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 311.822252][ T9484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.972672][ T9484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.134822][ T9531] netlink: 'syz.1.831': attribute type 30 has an invalid length. [ 312.160152][ T9532] netlink: 'syz.1.831': attribute type 21 has an invalid length. [ 312.254895][ T9484] batman_adv: batadv0: Removing interface: netdevsim0 [ 312.293541][ T9484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.344437][ T9531] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 312.363635][ T9531] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 312.783398][ T7856] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.908357][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 312.959602][ T7856] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.037308][ T7856] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.095008][ T3438] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.324577][ T9592] netlink: 360 bytes leftover after parsing attributes in process `syz.1.844'. [ 313.839744][ T9612] IPVS: set_ctl: invalid protocol: 8 172.20.20.34:20003 [ 314.211613][ T9633] netlink: 68 bytes leftover after parsing attributes in process `syz.2.853'. [ 314.494983][ T9640] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 314.590076][ T9640] macsec0: entered promiscuous mode [ 314.610817][ T9640] macsec0: entered allmulticast mode [ 314.742365][ T9659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.858'. [ 314.840247][ T9663] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 314.861588][ T9665] FAULT_INJECTION: forcing a failure. [ 314.861588][ T9665] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 314.883142][ T9665] CPU: 0 UID: 0 PID: 9665 Comm: syz.3.860 Not tainted syzkaller #0 PREEMPT(full) [ 314.883173][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.883185][ T9665] Call Trace: [ 314.883194][ T9665] [ 314.883203][ T9665] dump_stack_lvl+0x189/0x250 [ 314.883244][ T9665] ? __pfx____ratelimit+0x10/0x10 [ 314.883276][ T9665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.883304][ T9665] ? __pfx__printk+0x10/0x10 [ 314.883335][ T9665] ? __might_fault+0xb0/0x130 [ 314.883379][ T9665] should_fail_ex+0x414/0x560 [ 314.883414][ T9665] _copy_from_user+0x2d/0xb0 [ 314.883440][ T9665] core_sys_select+0x4b7/0xa20 [ 314.883485][ T9665] ? __pfx_core_sys_select+0x10/0x10 [ 314.883512][ T9665] ? bpf_send_signal_common+0x3b4/0x540 [ 314.883574][ T9665] ? __pfx_set_user_sigmask+0x10/0x10 [ 314.883599][ T9665] ? bpf_trace_run2+0x322/0x4b0 [ 314.883635][ T9665] __se_sys_pselect6+0x27a/0x300 [ 314.883674][ T9665] ? __pfx___se_sys_pselect6+0x10/0x10 [ 314.883709][ T9665] ? rcu_is_watching+0x15/0xb0 [ 314.883732][ T9665] ? trace_sys_enter+0x25/0x100 [ 314.883764][ T9665] ? __x64_sys_pselect6+0x21/0xf0 [ 314.883800][ T9665] do_syscall_64+0xfa/0x3b0 [ 314.883831][ T9665] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.883862][ T9665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.883883][ T9665] ? clear_bhb_loop+0x60/0xb0 [ 314.883910][ T9665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.883931][ T9665] RIP: 0033:0x7faef498ebe9 [ 314.883951][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.883969][ T9665] RSP: 002b:00007faef5755038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 314.883990][ T9665] RAX: ffffffffffffffda RBX: 00007faef4bb5fa0 RCX: 00007faef498ebe9 [ 314.884006][ T9665] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 314.884019][ T9665] RBP: 00007faef5755090 R08: 0000000000000000 R09: 0000000000000000 [ 314.884032][ T9665] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 314.884045][ T9665] R13: 00007faef4bb6038 R14: 00007faef4bb5fa0 R15: 00007ffd68214718 [ 314.884080][ T9665] [ 315.098186][ T9666] netlink: 52 bytes leftover after parsing attributes in process `syz.0.859'. [ 315.199587][ T9673] sctp: [Deprecated]: syz.2.861 (pid 9673) Use of int in max_burst socket option deprecated. [ 315.199587][ T9673] Use struct sctp_assoc_value instead [ 315.357730][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 315.375925][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 315.388018][ T9685] netlink: 'syz.1.865': attribute type 83 has an invalid length. [ 315.410983][ T9688] netlink: 'syz.3.866': attribute type 33 has an invalid length. [ 315.430080][ T9690] netlink: 'syz.3.866': attribute type 33 has an invalid length. [ 315.981568][ T9711] FAULT_INJECTION: forcing a failure. [ 315.981568][ T9711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.002696][ T9711] CPU: 1 UID: 0 PID: 9711 Comm: syz.2.872 Not tainted syzkaller #0 PREEMPT(full) [ 316.002728][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.002741][ T9711] Call Trace: [ 316.002750][ T9711] [ 316.002760][ T9711] dump_stack_lvl+0x189/0x250 [ 316.002791][ T9711] ? __pfx____ratelimit+0x10/0x10 [ 316.002822][ T9711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.002848][ T9711] ? __pfx__printk+0x10/0x10 [ 316.002878][ T9711] ? __might_fault+0xb0/0x130 [ 316.002939][ T9711] should_fail_ex+0x414/0x560 [ 316.002974][ T9711] _copy_from_user+0x2d/0xb0 [ 316.003003][ T9711] core_sys_select+0x604/0xa20 [ 316.003046][ T9711] ? __pfx_core_sys_select+0x10/0x10 [ 316.003100][ T9711] ? __pfx_set_user_sigmask+0x10/0x10 [ 316.003135][ T9711] __se_sys_pselect6+0x27a/0x300 [ 316.003172][ T9711] ? __pfx___se_sys_pselect6+0x10/0x10 [ 316.003201][ T9711] ? __pfx_ksys_write+0x10/0x10 [ 316.003227][ T9711] ? rcu_is_watching+0x15/0xb0 [ 316.003253][ T9711] ? __x64_sys_pselect6+0x21/0xf0 [ 316.003286][ T9711] do_syscall_64+0xfa/0x3b0 [ 316.003315][ T9711] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.003344][ T9711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.003374][ T9711] ? clear_bhb_loop+0x60/0xb0 [ 316.003400][ T9711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.003420][ T9711] RIP: 0033:0x7fb3eb98ebe9 [ 316.003439][ T9711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.003456][ T9711] RSP: 002b:00007fb3ec75f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 316.003478][ T9711] RAX: ffffffffffffffda RBX: 00007fb3ebbb5fa0 RCX: 00007fb3eb98ebe9 [ 316.003493][ T9711] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 316.003506][ T9711] RBP: 00007fb3ec75f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.003518][ T9711] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 316.003531][ T9711] R13: 00007fb3ebbb6038 R14: 00007fb3ebbb5fa0 R15: 00007ffe45430b18 [ 316.003564][ T9711] [ 316.249057][ T9713] __nla_validate_parse: 4 callbacks suppressed [ 316.249081][ T9713] netlink: 164 bytes leftover after parsing attributes in process `syz.1.873'. [ 316.266621][ T9713] netlink: 164 bytes leftover after parsing attributes in process `syz.1.873'. [ 316.276315][ T9713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.873'. [ 316.351373][ T9718] netlink: 80 bytes leftover after parsing attributes in process `syz.4.874'. [ 316.363640][ T9713] tun0: tun_chr_ioctl cmd 1074025675 [ 316.381920][ T9713] tun0: persist enabled [ 316.394936][ T9713] tun0: tun_chr_ioctl cmd 1074025675 [ 316.400300][ T9713] tun0: persist disabled [ 316.437720][ T9713] netlink: 128 bytes leftover after parsing attributes in process `syz.1.873'. [ 316.657152][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 316.702892][ T9742] tipc: Enabled bearer , priority 0 [ 316.748350][ T9742] tipc: Disabling bearer [ 316.902261][ T9753] sctp: [Deprecated]: syz.0.886 (pid 9753) Use of int in max_burst socket option. [ 316.902261][ T9753] Use struct sctp_assoc_value instead [ 317.135068][ T9768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.891'. [ 317.267473][ T5946] IPVS: starting estimator thread 0... [ 317.322413][ T9757] FAULT_INJECTION: forcing a failure. [ 317.322413][ T9757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.336555][ T9757] CPU: 0 UID: 0 PID: 9757 Comm: syz.4.888 Not tainted syzkaller #0 PREEMPT(full) [ 317.336592][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.336609][ T9757] Call Trace: [ 317.336621][ T9757] [ 317.336634][ T9757] dump_stack_lvl+0x189/0x250 [ 317.336668][ T9757] ? __pfx____ratelimit+0x10/0x10 [ 317.336698][ T9757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.336723][ T9757] ? __pfx__printk+0x10/0x10 [ 317.336754][ T9757] ? __might_fault+0xb0/0x130 [ 317.336797][ T9757] should_fail_ex+0x414/0x560 [ 317.336831][ T9757] core_sys_select+0x724/0xa20 [ 317.336881][ T9757] ? __pfx_core_sys_select+0x10/0x10 [ 317.336939][ T9757] ? __pfx_set_user_sigmask+0x10/0x10 [ 317.336975][ T9757] __se_sys_pselect6+0x27a/0x300 [ 317.337013][ T9757] ? __pfx___se_sys_pselect6+0x10/0x10 [ 317.337052][ T9757] ? __pfx_ksys_write+0x10/0x10 [ 317.337078][ T9757] ? rcu_is_watching+0x15/0xb0 [ 317.337106][ T9757] ? __x64_sys_pselect6+0x21/0xf0 [ 317.337140][ T9757] do_syscall_64+0xfa/0x3b0 [ 317.337170][ T9757] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.337201][ T9757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.337222][ T9757] ? clear_bhb_loop+0x60/0xb0 [ 317.337249][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.337269][ T9757] RIP: 0033:0x7fe3f818ebe9 [ 317.337287][ T9757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.337306][ T9757] RSP: 002b:00007fe3f63ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 317.337328][ T9757] RAX: ffffffffffffffda RBX: 00007fe3f83b5fa0 RCX: 00007fe3f818ebe9 [ 317.337343][ T9757] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 317.337356][ T9757] RBP: 00007fe3f63ee090 R08: 0000000000000000 R09: 0000000000000000 [ 317.337369][ T9757] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 317.337382][ T9757] R13: 00007fe3f83b6038 R14: 00007fe3f83b5fa0 R15: 00007fffb558a368 [ 317.337416][ T9757] [ 317.548307][ T9787] syzkaller1: entered promiscuous mode [ 317.550241][ T9780] IPVS: using max 27 ests per chain, 64800 per kthread [ 317.555672][ T9787] syzkaller1: entered allmulticast mode [ 317.896516][ T9804] tipc: Enabled bearer , priority 0 [ 317.904231][ T9804] syzkaller0: entered promiscuous mode [ 317.909899][ T9804] syzkaller0: entered allmulticast mode [ 317.958689][ T9805] tipc: Resetting bearer [ 317.971789][ T9803] tipc: Resetting bearer [ 318.005982][ T9803] tipc: Disabling bearer [ 318.043331][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.904'. [ 318.232180][ T9816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 318.321590][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.908'. [ 318.359781][ T9826] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 318.485340][ T9829] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.531799][ T9829] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 318.599022][ T9836] veth1_macvtap: left promiscuous mode [ 318.810043][ T9848] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 318.837870][ T9849] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 318.899326][ T9854] wg1: left promiscuous mode [ 318.979452][ T9854] bond1: left promiscuous mode [ 318.995514][ T9854] geneve2: left promiscuous mode [ 319.032523][ T9854] bond4: left promiscuous mode [ 319.077092][ T9848] team0: Port device dummy0 added [ 319.087565][ T9849] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 319.102544][ T9849] team0: Failed to send options change via netlink (err -105) [ 319.110994][ T9819] FAULT_INJECTION: forcing a failure. [ 319.110994][ T9819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.118342][ T9849] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 319.126879][ T9819] CPU: 0 UID: 0 PID: 9819 Comm: syz.1.907 Not tainted syzkaller #0 PREEMPT(full) [ 319.126913][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.126928][ T9819] Call Trace: [ 319.126938][ T9819] [ 319.126948][ T9819] dump_stack_lvl+0x189/0x250 [ 319.126984][ T9819] ? __pfx____ratelimit+0x10/0x10 [ 319.127017][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.127047][ T9819] ? __pfx__printk+0x10/0x10 [ 319.127081][ T9819] ? __might_fault+0xb0/0x130 [ 319.127129][ T9819] should_fail_ex+0x414/0x560 [ 319.127167][ T9819] set_fd_set+0x3a/0xa0 [ 319.127202][ T9819] core_sys_select+0x8d5/0xa20 [ 319.127251][ T9819] ? __pfx_core_sys_select+0x10/0x10 [ 319.127318][ T9819] ? __pfx_set_user_sigmask+0x10/0x10 [ 319.127356][ T9819] __se_sys_pselect6+0x27a/0x300 [ 319.127399][ T9819] ? __pfx___se_sys_pselect6+0x10/0x10 [ 319.127434][ T9819] ? __pfx_ksys_write+0x10/0x10 [ 319.127463][ T9819] ? rcu_is_watching+0x15/0xb0 [ 319.127493][ T9819] ? __x64_sys_pselect6+0x21/0xf0 [ 319.127531][ T9819] do_syscall_64+0xfa/0x3b0 [ 319.127566][ T9819] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.127599][ T9819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.127623][ T9819] ? clear_bhb_loop+0x60/0xb0 [ 319.127652][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.127674][ T9819] RIP: 0033:0x7fcdb1f8ebe9 [ 319.127697][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.127717][ T9819] RSP: 002b:00007fcdb2d34038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 319.127742][ T9819] RAX: ffffffffffffffda RBX: 00007fcdb21b5fa0 RCX: 00007fcdb1f8ebe9 [ 319.127760][ T9819] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 319.127774][ T9819] RBP: 00007fcdb2d34090 R08: 0000000000000000 R09: 0000000000000000 [ 319.127789][ T9819] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 319.127803][ T9819] R13: 00007fcdb21b6038 R14: 00007fcdb21b5fa0 R15: 00007ffd3aa1b1e8 [ 319.127848][ T9819] [ 319.338555][ T9849] team0: Port device dummy0 removed [ 319.348630][ T9849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 319.358071][ T9864] netem: change failed [ 319.526387][ T9873] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 319.824366][ T9896] netlink: zone id is out of range [ 319.852132][ T9896] netlink: zone id is out of range [ 319.860801][ T9896] netlink: zone id is out of range [ 319.868259][ T9896] netlink: zone id is out of range [ 319.874454][ T9896] netlink: zone id is out of range [ 319.880977][ T9896] netlink: zone id is out of range [ 319.887170][ T9896] netlink: zone id is out of range [ 319.898661][ T9896] netlink: zone id is out of range [ 319.905272][ T9896] netlink: zone id is out of range [ 319.945918][ T9896] netlink: zone id is out of range [ 320.171656][ T9907] netlink: 'syz.3.933': attribute type 5 has an invalid length. [ 320.480810][ T9923] tipc: Enabled bearer , priority 10 [ 320.690046][ T7856] [ 320.692433][ T7856] ============================================ [ 320.698591][ T7856] WARNING: possible recursive locking detected [ 320.704773][ T7856] syzkaller #0 Not tainted [ 320.709189][ T7856] -------------------------------------------- [ 320.715352][ T7856] kworker/u8:15/7856 is trying to acquire lock: [ 320.721589][ T7856] ffffe8ffffd5dcc8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 320.730829][ T7856] [ 320.730829][ T7856] but task is already holding lock: [ 320.738200][ T7856] ffffe8ffffc75e28 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 320.747437][ T7856] [ 320.747437][ T7856] other info that might help us debug this: [ 320.755496][ T7856] Possible unsafe locking scenario: [ 320.755496][ T7856] [ 320.762955][ T7856] CPU0 [ 320.766230][ T7856] ---- [ 320.769503][ T7856] lock(&pd_list->lock); [ 320.773834][ T7856] lock(&pd_list->lock); [ 320.778168][ T7856] [ 320.778168][ T7856] *** DEADLOCK *** [ 320.778168][ T7856] [ 320.786424][ T7856] May be due to missing lock nesting notation [ 320.786424][ T7856] [ 320.794834][ T7856] 3 locks held by kworker/u8:15/7856: [ 320.800295][ T7856] #0: ffff8880203f9948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 320.812238][ T7856] #1: ffffc90003bffbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 320.824079][ T7856] #2: ffffe8ffffc75e28 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 320.833859][ T7856] [ 320.833859][ T7856] stack backtrace: [ 320.839766][ T7856] CPU: 1 UID: 0 PID: 7856 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 320.839786][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.839796][ T7856] Workqueue: pencrypt_parallel padata_parallel_worker [ 320.839821][ T7856] Call Trace: [ 320.839829][ T7856] [ 320.839837][ T7856] dump_stack_lvl+0x189/0x250 [ 320.839858][ T7856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.839875][ T7856] ? __pfx__printk+0x10/0x10 [ 320.839897][ T7856] ? print_lock_name+0xde/0x100 [ 320.839918][ T7856] print_deadlock_bug+0x28b/0x2a0 [ 320.839935][ T7856] validate_chain+0x1a3f/0x2140 [ 320.839953][ T7856] ? __queue_work+0x102/0xfb0 [ 320.839968][ T7856] ? look_up_lock_class+0x74/0x170 [ 320.839990][ T7856] ? register_lock_class+0x51/0x320 [ 320.840010][ T7856] ? __queue_work+0xc56/0xfb0 [ 320.840027][ T7856] __lock_acquire+0xab9/0xd20 [ 320.840051][ T7856] ? padata_do_serial+0x73e/0xb80 [ 320.840069][ T7856] lock_acquire+0x120/0x360 [ 320.840090][ T7856] ? padata_do_serial+0x73e/0xb80 [ 320.840111][ T7856] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.840131][ T7856] _raw_spin_lock+0x2e/0x40 [ 320.840149][ T7856] ? padata_do_serial+0x73e/0xb80 [ 320.840168][ T7856] padata_do_serial+0x73e/0xb80 [ 320.840192][ T7856] ? padata_parallel_worker+0x44/0x1d0 [ 320.840212][ T7856] padata_parallel_worker+0x72/0x1d0 [ 320.840231][ T7856] ? process_scheduled_works+0x9ef/0x17b0 [ 320.840246][ T7856] process_scheduled_works+0xae1/0x17b0 [ 320.840270][ T7856] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.840290][ T7856] worker_thread+0x8a0/0xda0 [ 320.840314][ T7856] kthread+0x711/0x8a0 [ 320.840333][ T7856] ? __pfx_worker_thread+0x10/0x10 [ 320.840347][ T7856] ? __pfx_kthread+0x10/0x10 [ 320.840365][ T7856] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.840384][ T7856] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.840403][ T7856] ? __pfx_kthread+0x10/0x10 [ 320.840421][ T7856] ret_from_fork+0x3f9/0x770 [ 320.840437][ T7856] ? __pfx_ret_from_fork+0x10/0x10 [ 320.840454][ T7856] ? __switch_to_asm+0x39/0x70 [ 320.840473][ T7856] ? __switch_to_asm+0x33/0x70 [ 320.840491][ T7856] ? __pfx_kthread+0x10/0x10 [ 320.840509][ T7856] ret_from_fork_asm+0x1a/0x30 [ 320.840539][ T7856] [ 321.383948][ T73] vlan2: left promiscuous mode [ 321.473265][ T7296] tipc: Node number set to 2285663201