last executing test programs: 7.434831624s ago: executing program 3 (id=1777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe4, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xb1, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000067deebc621f3911b00bf852c8986626691b01b2d44e4ce2d712d282dda2c2d23debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @binary="cfe7336f91"}]}]}, 0xe4}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000000000080003"], 0x88}}, 0x4008000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0xfe}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}}, 0x0) 6.831318379s ago: executing program 3 (id=1781): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40100001000010000000000000000000000000000000000000000000000000020010000ddd194dffc006f5300000002000000000000000000000f2604d80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414130000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000a0b0000000000000000000000000000000000008001000000000000000000000000000000000000090000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000029bd7000000000005d001400636d6163286165732900"/297], 0x1b4}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x4000054) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) 6.46755503s ago: executing program 3 (id=1789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="050f152f", 0x4}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02331170", 0x4}], 0x1}}], 0x2, 0x24000045) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r1, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000001600)=""/170, 0xaa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001500)=""/125, 0x7d}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) 6.19395821s ago: executing program 3 (id=1795): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x42, r1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="0200000006000000004000001b58a3b6f147d253d0251011a15d8c8c7bd53a0b98f344ea9b1f9e0c070721d4989407f5427d46ff4a8c4b65af14d8b89f931b063c7ab4b7e6ecb8b82b12719593a50bdc9e49c2e6c9e850fa128d933fde5fc165e046874ef0e11e4951da4114791747043837f545ef2f8c8a44a3acdd732b342cea409dc51581f3b7b8352536c18c08b147a2c71758d1b5d75a2d7f2ea37e4413f6d0854a875f451f70888b8b54f2813102707693a001e5b25c48a135c324d8", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 6.011346193s ago: executing program 3 (id=1797): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) unshare(0x6a040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf252500000005002b000100000005002a000100000005002e21070000000c002cf00200aaaaaaaaaaaa05002b000000000006000400a2aa00003b5cad19efd9bda9e983c778ab24f339dfde405316b5dff9770ac3fa5b7506db5be0a9f3007999300c710225f052bb3f46fd3d59b6e993d44965284be6abf31f9d77f9da4b0ff9177fd5a0060024c2f56e14f310985244394b22aacdd0eab798e70b3935ef2abc69ec7e1191d147bf75d0"], 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf252500000005002b000100000005002a000100000005002e21070000000c002cf00200aaaaaaaaaaaa05002b000000000006000400a2aa00003b5cad19efd9bda9e983c778ab24f339dfde405316b5dff9770ac3fa5b7506db5be0a9f3007999300c710225f052bb3f46fd3d59b6e993d44965284be6abf31f9d77f9da4b0ff9177fd5a0060024c2f56e14f310985244394b22aacdd0eab798e70b3935ef2abc69ec7e1191d147bf75d0"], 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bd25}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bd25}, 0x14}}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r7, r1, 0x0, r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) r9 = epoll_create1(0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00<\x00'/28], 0x48) ppoll(&(0x7f0000000000)=[{r9, 0x2003}, {r9, 0xf401}, {}], 0x3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000480)={0x68000005}) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10}, {0x18, 0x110, 0xa, "8a"}], 0x28, 0xe000}, 0x5}], 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000700)='tunl0\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xef}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfb95}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008800) 5.963534806s ago: executing program 3 (id=1799): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40100001000010000000000000000000000000000000000000000000000000020010000ddd194dffc006f5300000002000000000000000000000f2604d80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/297], 0x1b4}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x4000054) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000030000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) 3.312000126s ago: executing program 1 (id=1826): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='mm_page_free\x00', r0}, 0x18) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f00005da000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0xffffd000) (async, rerun: 32) r7 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x0, 0x9, 0xfffffffd}, 0x10) (async) write(r9, &(0x7f00000000c0)="1800000016005f0214fffffffffffff807000000010000", 0x17) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) (rerun: 64) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 2.843333024s ago: executing program 1 (id=1829): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @remote, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x28}}, 0x0) 2.571075964s ago: executing program 0 (id=1832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x300, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.447871841s ago: executing program 0 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r8, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x14) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x48, r9, 0x7, 0x70bd21, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x48}}, 0x0) 2.347051917s ago: executing program 2 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280)="01c0f30df5d05704d9340f", 0x8, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8008726ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff0dd9d3f6961f68080000b7030000080000008500000006000000950000000022bc6d2e60a1f348f8ead822ef3aab9e09740f64faf71f612cbd8811da4ffb8b542165a6947de3c61d79da0e0d7e3aa715a7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x55}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x48000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {0x15}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x22002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'TIPC\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)="36cde944c0263dc41e05e5aefe2a8fb47d99f116dc5d37236b5383be9c18655ccb", 0x21}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4109}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000844) 2.256765473s ago: executing program 0 (id=1836): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0)=0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.140721503s ago: executing program 2 (id=1838): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) (async) setsockopt(r2, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r2, 0x10d, 0xd, &(0x7f0000000600), &(0x7f0000000280)=0x4) (async) getsockopt$inet_int(r2, 0x10d, 0xd, &(0x7f0000000600), &(0x7f0000000280)=0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="d6182304a76b9b856a2d42a7e983a5cdcfe48abc4a4fd6edc922ddc6d3392f75188742ca7e5363cd507e95395c71718a17aa26327c12d6831be739b6e24e6e47603e6e6dc5759876ed54cbbdf051b8fd2d2fca82c51490d67630915825f8a5887754eb6327ed6ffc3791c283bcac1e8814", @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="a0000000c1994a765cecfe13f8bc449de3a1aaa696ffd4bb69b0bb3645e4009251e0d678ab31286f81a84e18f6dc5447d3b3620e14c46df9ce8d959ec78802a420fff4cd882cc5214ee8a843a41322a8aa0de326ef37a3251ca40fd044bd4bf388b03b2f75beb942e0fbab8d1500d2c719b0fd338fe0b666bbd83c338df723242cded0cf689dcec7a71cdac3be29fa8eaeeb83d6afc4d346baa39dfe7ac8b64b85b99bcf92cda1044fea61621db1280096a1f3ed5cb0c051335075695c781a3d64ce89917d987a5aea014f67a50cf6153b1cf09793cfb76f40b804", @ANYRES16=r8, @ANYBLOB="00082cbd7000fedbdf250300000008000200030000004c000480050003000600000005000300050000000500030000000000050003000500000005000300020000000500030007000000050003000500000005000300010000000500030000000000200008801c000780080005005693df5b080006003c0000000800050059809a4c080001000300000008000200020000000800010002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f00000000000000000000000000000d6470a5ade6b8c48714fb05dab2826f9c6de180a8"], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000007c0)={&(0x7f0000000240), 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="0007bd01", @ANYRES16=0x0, @ANYRESOCT=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4044811) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.849827089s ago: executing program 1 (id=1839): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000feff00feffffff0000000000040002005c0001000058"], 0xac}}, 0x0) 1.716142398s ago: executing program 1 (id=1840): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "0000000000000000000000001100"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1.712849169s ago: executing program 1 (id=1841): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7f) accept(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e000000270000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) 1.657920482s ago: executing program 1 (id=1842): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x20000c00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffc", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e000100776972656775617264000000040002", @ANYRES32], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001300000829bd7000fcdbdf252903e0024e224e23fdffffffff0000000010000000280000f0ab0000060000000e", @ANYRES32, @ANYBLOB="04000000080000000900"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000e340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x83, 0x0, 0x1, 0x1, 0x10000, @value=r4}, 0x28) 1.161861232s ago: executing program 0 (id=1843): r0 = socket$kcm(0x10, 0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f88fac1ef5e2dbd00f7347df15001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044044) 1.087972757s ago: executing program 2 (id=1845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x524c}, {r0, 0x1010}], 0x2, &(0x7f0000000180)={r1, r2+60000000}, &(0x7f0000000200)={[0x3]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) 1.000966286s ago: executing program 0 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_PORT_SELF={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000600)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x2d, 0x2, 0x4, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7801, 0x8, 0xe79923d}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000005c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x51, @rand_addr=' \x01\x00', 0xf4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="736dcf35275944f7ee926bb2eaa6a29cfa0714145c1d4dbe206e067a6a126fa19a35e175103f84cccd9ac1006b771be4f63c1247fffedaec31e6c2e22e3101e89b667ef6a0b9bb8f5e524ab39dc2c48f54db49d9c4ca2d7766f56ff155cbd8e63d94b5f00c9e8b2370", 0x69}], 0x1, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x24}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0x1f0, 0x29, 0x37, {0x4, 0x3a, '\x00', [@generic={0x6, 0x9e, "dd1d094daf29274cb70f7514e66bdf66d233abaf21f69eaaf025b81bf2b769bf8964bf82fd133b4648e111c5c8a39b240f287378a51f7ac6dbe860132d4ad2d64481fae0268bbb27317f927d1d403dbc7b30b39ba8dd0b1af15edad03e3ee679b3d8e7f5ae536b70a518c2ab9da485c55bb666d0c0bcab6ad77100ce0d9754494f609559807e55cc424c186773433eb2f75eb8b60adac04e7a0615e84953"}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xce, 0xeb, "c7736a5216bcc410824a01dabf6defefb658b9086c4151af033c8168e0577e934908ccdfd13ec538518c652d206dd0965a57266a441a0415c59408f4cc6530357857c2939f0bf44d05b7891bd4794da3d3d28657fbbaf832acbc8fa4b52f9303701028385a90d65a518c0b39656d4cb88c3beaab46e149fadceb62686cf2e5006e7cdf5ec75a8da9063b3a18e4ae8c564d682a9da24011e6dc536b0b04e35837294aacfe65ae6d432b67559d9543904fd98406a8667ed0a1bce96d3891f069b5fee13a81b83c2f34d31cb3fd5f39ed0ad44fede2e7f7369f853e201c587d095eb4c55bfb44f8e8e1437065"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x4, [0x100, 0x3, 0x6, 0x0, 0x1800000000000, 0x5, 0x7fffffff]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r4}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x1, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffd}, @generic, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x101}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x3, [0xffffffffffffffff, 0x401, 0x4, 0xfff]}}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0xb0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x67, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xff}, @ra, @jumbo={0xc2, 0x4, 0xfff}]}}}], 0x360}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x1c, &(0x7f0000001d80)=[{&(0x7f00000004c0)="53c96c276d990940581b045b33d6b30952c22f804a0d258a8bdaf0379cb002651aea31585fae34b1b130a3274fd388c3e2c192d1575d7575a1b171b5e80e4d7d89af09c8e6720c87aca0800519ad97801adb70bd5f4fa5a9b609c181d5a67dce24b73cbec4f7d4dbb1dd0948ff8ef40fa25d45e121f0aa4ec394076b251cf4090eb717008715125497c603ee6cff3ca8d297981bfd168d5203f64701b1b0bdca5078076738fcfde0ad0a1e305d6dc1d1d89b9d7c4c009590dce39001f6a5dd306b36cd41e32c2743ae9cc5", 0xcb}, {&(0x7f0000000640)="8f9aa1b9910b72b1e6adf6c968a0c72c8ec0103ee801f1a0822b2d927a9429ad99a70d12380a8c5e866eacd103dc97c02ed784b1fdfcf4740d832e0f297a2361fb5bdc3bf3e617d10c85d13f6e8e346344e776da", 0x54}, {&(0x7f0000000ac0)="3f5ec654cff368e1ec4d0b16dd7569f39740f0971905efbbca15054eff160d97854124a21568d17fd3782b223eb150bb6a051709bdd27cf9b50f6bf9436b7576a889d095b02509a3e442d4b7734a0c2237e3cb2e4cc7afb054a01f481c8e38127b8d46fbe57421ec3d", 0x69}, {&(0x7f0000000b40)="7fdbf56d04cd65cfe65695b074cc7445bd708fc5ebd36367c83c49c950407196fe14c5e184d77f9868fd73c0ffc2658a7dd2e2e0b97b30bb5ca644890ece94d9efde848cdd36444061ceac7ae79ad0e5558c09f584a3f618a50e0d59ae24ce9e2dc9e69823e1481df69a49bfb7f5e56b055890399e6ac742c45a7028d7c2afa6e45aa86bfbf37676354a81aa8315ab1898c0c1e5cc91366833e6", 0x9a}, {&(0x7f0000000c00)="6a241cb27075569c840ffd78938b355880372b2e1443df41c73165338bb5fc9ec05d97c267bf8a10a3c64a5848bb35e09eccf48f661ee9c4ab5e320e190552adbe622d28c3b6829b3315ab86e8c1b9a6495cbee9cba9ba56e995fcd1731783391783e0daeee69587f12ff76d9a5d3039bbff1da348c16779", 0x78}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="0984b8bc36b4f8ac56f2e03a8bbcbcae2d80cbdd7a5a5de73385134bb692cae8f2271872d853e887b66632c1a986149028633cc3dc4f9b76f51f53af69999392a5eb0fe4448971f131526df85796426de3065527b02c3ce9b4183914", 0x5c}, {&(0x7f0000001d00)="98ce3b9a9909008421c7cf6fa614011f4e35668af0074cfeb4b6dea6c561848963df59053fa96c42a5298a46a0187705fd5e1911361e91836c2b2fd37998f0af9d8645975ed37304e4e659dd55aa24ca96effbede91ae664698bd76558787cf635", 0x61}], 0x8}}], 0x2, 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$tipc(r10, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000ff0000000700007d2478b7000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 860.332118ms ago: executing program 4 (id=1847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) unshare(0xe6050100) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080)=0x2, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@buf={0xea, &(0x7f00000005c0)="c2ee5b460b79a068f7494603601af2fe794e639956056e060ce9886ac315495e62b52c03f83e9165338135220d6a5acf385ffeadba6dadba61e88da097aba3755a2a57fe597e523d53bee54ed6d58aed7cb71218c36714ef3b89eb61585cef04c38300a41babbf2641249a7dc546a946c691ecb3baa29364504c0617033c9724dc3f08dad37094f0aba7ccb23afc0dca24013792d116d15798c23bb7c9e99d49c0ad9c6229c4def719b39ecc249753e4562bc60f2254ef0c951c808e65b7b6f1349f2552680a0dc133d3e43ea397883c55b49793694ee3aeb7d800"/234}) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e22, @empty}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x27, 0x0, &(0x7f00000002c0)="61dfb066c6677394ff0100000000000043aee3b6278051a7cb16648329887185caf6b60919471b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x12, 0xe5, 0x5, 0xd, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_ident={0x2, 0x0, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d3, 0x6, 0xd3, 0x8a, 0x3, 0xa0000000}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0xb092c3710fafcf3a}]}, 0x68}}, 0x44) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x4008, 0x3, 0x450, 0x0, 0x32, 0x148, 0x0, 0x148, 0x3b8, 0x240, 0x240, 0x3b8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x2c0, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x1, 0x200, 0x2, 0x9c95, 0xa, 0x83, 0x4a, 0x1, 0x78, 0x20}, {0x8}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x4, 0xcd388e7e35af0e92, 0x0, 0x2], 0x5, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x4, 0xe, 0xf], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0xf4, r6, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc2b9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6327}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x646}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffff8, @private2, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf0}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x890) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000000)={'veth1_to_team\x00', 0x401}) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x79, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000200)=0xffffffaa, 0x4) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, 0x0, 0x0) 776.695212ms ago: executing program 2 (id=1848): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0x9}, 0x8) (fail_nth: 2) 731.819275ms ago: executing program 4 (id=1849): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="93bffce623851797a8dc79018d7716840ffc6946a067f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb688db8aee2963a9a5c8b454270e3c084fd5232dd1e17566d440d9f479034f26806b25dcfc18c50ee6f365a1bd150cc423678f1ef69b0667c83d4ff77606fa2419a623de490ccf13b8e517b86ec867b9a8aef91ab13bfed96b1de8ac45fc2c5616665e00f6778bfbe71ac4b64342a98bb0234e03f78e546662f807b2ed652abdd0a45cc882ef7fcebba66cf3e75506d6c969632e0988518b9593346c9a6c8076751b053be0345b0d14a9f162a5dff0fb68c8e7df1a1bddbdb06c7183765a791437f5da3994750711f8797dc575fae592e1654adb2434b37b874ad1ac4aa6a50a384e601e3756b08ae220a4cf026ec168e60dc61f86eae68e5529a77ced1208dba91a88b7", 0x193}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e9", 0x7c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1de", 0xc2}, {0x0}, {&(0x7f00000003c0)="9059c5aee5fca0529f3f9109a29885942349a08c6be8241fb905", 0x1a}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 698.19416ms ago: executing program 0 (id=1850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100004d3b941cf7062e416e65746465e4ce6b8d3f567e659ccbc6742d26cfc60000000000480500000000000000000c8014000100070000007d0b000004000000000000001400010055560050af0116d6e2ceeb0a64ddf39100940b0000000100008100000014000a00080000"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='xen_mmu_alloc_ptpage\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x1) 409.509159ms ago: executing program 2 (id=1851): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 401.304174ms ago: executing program 4 (id=1852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000300000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) 292.826594ms ago: executing program 2 (id=1853): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0}, 0xfffffe90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000017010000c60000187a22ec104b065cf506de8cdc08a6d0fddc0d72778aece33162e224760128908354ebe677afaf0fba4d209101c48a04692828bd124430ce0542ec901330cfd17ecda3ea1ff3d715545d42da58b55978fbbd3cf28bf72800000000000000170100000200000014000008d240a5aaf782aa7e74e12faa551a3e8899099e1542f8ed4490000000000000000000"], 0xa0, 0x200040d4}], 0x1, 0x20008852) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="1000000000000000000000000000000000000000b3b1406424bedb3d2c29deea23e16cde6fffa63f4a32ce7065effc3c48f0da65239ab3e26c8eba614688e2ef58f51a4fa48c1aa49614b30863907326130fc6cb8fe3eed80dc84548598e180e58d9f858fb5ea2a4c5acc98c38af634f779ded382c09d17e00"/136, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001580)=ANY=[], 0x0, 0x45, 0x0, 0x1, 0x80000001, 0x0, @void, @value}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="0efffffc", @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r8) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 219.623547ms ago: executing program 4 (id=1854): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000880efc98a37ccb2f872ab8f78f15aae900000000000020ea00008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000beed8ca0"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002cc224592eee973a433b0b627c3e76c359264bf3ece4b78f2ed7b2190c39d86bf47f2653a21b147e95d0920f07d80dc24e703e5716e105f127a8518eb8c8b141e4b0ac4b8788f5c76623a27f3738df2fb41bad8112a08cae7301b143e5dc0cf2dc97f8aa9e2f35a66546ae82b1cc70939041ca0c1a2a3f5abfd97c477833eb815d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002e60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xffff08e6, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r11, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180068cabb92071e"], 0x18}}, 0x0) 126.212445ms ago: executing program 4 (id=1855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 4 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003003f0000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) kernel console output (not intermixed with test programs): ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.832396][ T7228] RSP: 002b:00007f6c40aa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.832418][ T7228] RAX: ffffffffffffffda RBX: 00007f6c3fda5fa0 RCX: 00007f6c3fb8d169 [ 145.832433][ T7228] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 145.832446][ T7228] RBP: 00007f6c40aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 145.832459][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.832471][ T7228] R13: 0000000000000000 R14: 00007f6c3fda5fa0 R15: 00007ffcd341fd08 [ 145.832505][ T7228] [ 146.113905][ T47] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 146.135306][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.388'. [ 146.154915][ T7234] syzkaller1: entered promiscuous mode [ 146.160662][ T7234] syzkaller1: entered allmulticast mode [ 146.445092][ T7250] netlink: 128 bytes leftover after parsing attributes in process `syz.0.391'. [ 146.460294][ T7247] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 146.896070][ T7273] netlink: 'syz.3.401': attribute type 14 has an invalid length. [ 146.933190][ T7273] netlink: 'syz.3.401': attribute type 12 has an invalid length. [ 147.957584][ T7308] Cannot find add_set index 0 as target [ 148.090464][ T7312] netlink: 'syz.3.415': attribute type 14 has an invalid length. [ 148.098407][ T7312] netlink: 'syz.3.415': attribute type 12 has an invalid length. [ 148.748106][ T7338] netlink: 'syz.0.420': attribute type 27 has an invalid length. [ 148.802733][ T7334] netlink: 'syz.1.418': attribute type 5 has an invalid length. [ 149.237818][ T7338] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.248480][ T7338] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.259395][ T7338] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.268605][ T7338] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.348177][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.363537][ T7341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.451929][ T7341] syz.0.420 (7341) used greatest stack depth: 19064 bytes left [ 149.784388][ T7371] __nla_validate_parse: 15 callbacks suppressed [ 149.784409][ T7371] netlink: 128 bytes leftover after parsing attributes in process `syz.1.430'. [ 149.833248][ T7373] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 150.024313][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.435'. [ 150.767020][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 150.783606][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 150.792938][ T7425] FAULT_INJECTION: forcing a failure. [ 150.792938][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 150.808899][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.0.449 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 150.808926][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.808935][ T7425] Call Trace: [ 150.808941][ T7425] [ 150.808947][ T7425] dump_stack_lvl+0x241/0x360 [ 150.808977][ T7425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.808998][ T7425] ? __pfx__printk+0x10/0x10 [ 150.809028][ T7425] ? __pfx___might_resched+0x10/0x10 [ 150.809061][ T7425] should_fail_ex+0x424/0x570 [ 150.809090][ T7425] should_failslab+0xac/0x100 [ 150.809122][ T7425] __kvmalloc_node_noprof+0x170/0x5a0 [ 150.809148][ T7425] ? rhashtable_init_noprof+0x534/0xa60 [ 150.809173][ T7425] rhashtable_init_noprof+0x534/0xa60 [ 150.809198][ T7425] tcf_proto_create+0x262/0x370 [ 150.809218][ T7425] tc_new_tfilter+0x15e8/0x1a90 [ 150.809252][ T7425] ? __pfx_tc_new_tfilter+0x10/0x10 [ 150.809277][ T7425] ? __lock_acquire+0xad5/0xd80 [ 150.809308][ T7425] ? __pfx_tc_new_tfilter+0x10/0x10 [ 150.809323][ T7425] rtnetlink_rcv_msg+0x80f/0xd70 [ 150.809343][ T7425] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 150.809368][ T7425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.809394][ T7425] ? ref_tracker_free+0x63e/0x7e0 [ 150.809416][ T7425] netlink_rcv_skb+0x208/0x480 [ 150.809439][ T7425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.809461][ T7425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.809495][ T7425] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.809519][ T7425] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.809542][ T7425] netlink_unicast+0x7f8/0x9a0 [ 150.809567][ T7425] ? __pfx_netlink_unicast+0x10/0x10 [ 150.809588][ T7425] ? skb_put+0x114/0x1f0 [ 150.809606][ T7425] netlink_sendmsg+0x8c3/0xcd0 [ 150.809637][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.809663][ T7425] ? aa_sock_msg_perm+0x91/0x160 [ 150.809688][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.809708][ T7425] __sock_sendmsg+0x221/0x270 [ 150.809730][ T7425] ____sys_sendmsg+0x523/0x860 [ 150.809753][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.809781][ T7425] __sys_sendmmsg+0x3a0/0x7b0 [ 150.809809][ T7425] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.809852][ T7425] ? rcu_read_lock_any_held+0xbb/0x160 [ 150.809878][ T7425] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.809901][ T7425] ? vfs_write+0xb29/0xd10 [ 150.809926][ T7425] ? ksys_write+0x24e/0x2d0 [ 150.809945][ T7425] ? __mutex_unlock_slowpath+0x229/0x800 [ 150.809987][ T7425] ? ksys_write+0x275/0x2d0 [ 150.810013][ T7425] __x64_sys_sendmmsg+0xa0/0xb0 [ 150.810030][ T7425] do_syscall_64+0xf3/0x230 [ 150.810049][ T7425] ? clear_bhb_loop+0x45/0xa0 [ 150.810067][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.810081][ T7425] RIP: 0033:0x7f612f98d169 [ 150.810094][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.810106][ T7425] RSP: 002b:00007f61307f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.810123][ T7425] RAX: ffffffffffffffda RBX: 00007f612fba5fa0 RCX: 00007f612f98d169 [ 150.810135][ T7425] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 150.810151][ T7425] RBP: 00007f61307f2090 R08: 0000000000000000 R09: 0000000000000000 [ 150.810164][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.810176][ T7425] R13: 0000000000000000 R14: 00007f612fba5fa0 R15: 00007ffc9379dc98 [ 150.810205][ T7425] [ 151.272735][ T7430] bridge0: port 1(vlan2) entered blocking state [ 151.304063][ T7430] bridge0: port 1(vlan2) entered disabled state [ 151.359137][ T7430] vlan2: entered allmulticast mode [ 151.420565][ T7430] macvlan1: entered allmulticast mode [ 151.450049][ T7430] veth1_vlan: entered allmulticast mode [ 151.494425][ T7430] vlan2: entered promiscuous mode [ 151.521623][ T7430] macvlan1: entered promiscuous mode [ 151.756484][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.455'. [ 152.067861][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 152.077601][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 152.095268][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 152.272452][ T7465] ieee802154 phy0 wpan0: encryption failed: -90 [ 152.688497][ T5846] block nbd2: Receive control failed (result -107) [ 152.716313][ T7457] nbd2: detected capacity change from 0 to 256 [ 152.808723][ T7469] FAULT_INJECTION: forcing a failure. [ 152.808723][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 152.845475][ T7469] CPU: 1 UID: 0 PID: 7469 Comm: syz.3.461 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 152.845508][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.845521][ T7469] Call Trace: [ 152.845529][ T7469] [ 152.845538][ T7469] dump_stack_lvl+0x241/0x360 [ 152.845577][ T7469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.845608][ T7469] ? __pfx__printk+0x10/0x10 [ 152.845643][ T7469] ? __pfx___might_resched+0x10/0x10 [ 152.845683][ T7469] should_fail_ex+0x424/0x570 [ 152.845711][ T7469] should_failslab+0xac/0x100 [ 152.845743][ T7469] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 152.845774][ T7469] ? __alloc_skb+0x1c2/0x480 [ 152.845799][ T7469] __alloc_skb+0x1c2/0x480 [ 152.845825][ T7469] ? __pfx___alloc_skb+0x10/0x10 [ 152.845857][ T7469] netlink_sendmsg+0x638/0xcd0 [ 152.845904][ T7469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.845940][ T7469] ? aa_sock_msg_perm+0x91/0x160 [ 152.845977][ T7469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.846005][ T7469] __sock_sendmsg+0x221/0x270 [ 152.846038][ T7469] ____sys_sendmsg+0x523/0x860 [ 152.846071][ T7469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.846094][ T7469] ? __fget_files+0x2a/0x420 [ 152.846115][ T7469] ? __fget_files+0x2a/0x420 [ 152.846144][ T7469] __sys_sendmsg+0x271/0x360 [ 152.846171][ T7469] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.846252][ T7469] ? do_syscall_64+0xb6/0x230 [ 152.846285][ T7469] do_syscall_64+0xf3/0x230 [ 152.846312][ T7469] ? clear_bhb_loop+0x45/0xa0 [ 152.846338][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.846358][ T7469] RIP: 0033:0x7fd01cf8d169 [ 152.846375][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.846392][ T7469] RSP: 002b:00007fd01dd4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.846413][ T7469] RAX: ffffffffffffffda RBX: 00007fd01d1a5fa0 RCX: 00007fd01cf8d169 [ 152.846428][ T7469] RDX: 0000000004004040 RSI: 0000200000000c00 RDI: 0000000000000004 [ 152.846441][ T7469] RBP: 00007fd01dd4b090 R08: 0000000000000000 R09: 0000000000000000 [ 152.846453][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.846465][ T7469] R13: 0000000000000000 R14: 00007fd01d1a5fa0 R15: 00007ffe986c2108 [ 152.846497][ T7469] [ 153.200146][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 153.214583][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 153.490774][ T7493] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 153.502876][ T7491] xt_CT: No such helper "pptp" [ 153.509351][ T7493] netlink: 'syz.1.465': attribute type 2 has an invalid length. [ 154.236488][ T7519] x_tables: duplicate underflow at hook 2 [ 154.273353][ T7519] netlink: 'syz.4.474': attribute type 29 has an invalid length. [ 154.401879][ T7522] gretap0: entered promiscuous mode [ 154.461859][ T7525] netlink: 'syz.4.474': attribute type 29 has an invalid length. [ 155.150252][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.523608][ T7551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.642084][ T7551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.798491][ T7551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.918370][ T7551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.125780][ T7580] __nla_validate_parse: 2 callbacks suppressed [ 156.125802][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 156.156371][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 156.305990][ T7551] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.384223][ T7551] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.459236][ T7551] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.485003][ T7593] netlink: 136 bytes leftover after parsing attributes in process `syz.3.497'. [ 156.518473][ T7593] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 156.559403][ T7551] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.854115][ T7604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.499'. [ 157.228822][ T7611] xt_CT: No such helper "pptp" [ 157.395481][ T7608] syzkaller1: entered promiscuous mode [ 157.401503][ T7608] syzkaller1: entered allmulticast mode [ 157.490990][ T7623] netlink: 'syz.1.504': attribute type 21 has an invalid length. [ 157.502346][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'. [ 157.786837][ T7632] netlink: 830 bytes leftover after parsing attributes in process `syz.0.507'. [ 157.934732][ T7635] netlink: 'syz.0.508': attribute type 3 has an invalid length. [ 158.098363][ T7650] netlink: 'syz.0.512': attribute type 4 has an invalid length. [ 158.110282][ T7650] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.512'. [ 158.125467][ T7650] netlink: zone id is out of range [ 158.136687][ T7653] netlink: 'syz.3.513': attribute type 8 has an invalid length. [ 158.146526][ T7652] netlink: 'syz.3.513': attribute type 8 has an invalid length. [ 158.467962][ T7667] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 158.499499][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 158.508563][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 159.323883][ T7700] FAULT_INJECTION: forcing a failure. [ 159.323883][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 159.350869][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.4.529 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 159.350901][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.350914][ T7700] Call Trace: [ 159.350922][ T7700] [ 159.350931][ T7700] dump_stack_lvl+0x241/0x360 [ 159.350970][ T7700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.351001][ T7700] ? __pfx__printk+0x10/0x10 [ 159.351036][ T7700] ? __pfx___might_resched+0x10/0x10 [ 159.351069][ T7700] should_fail_ex+0x424/0x570 [ 159.351097][ T7700] should_failslab+0xac/0x100 [ 159.351129][ T7700] __kmalloc_noprof+0xdf/0x4d0 [ 159.351157][ T7700] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 159.351181][ T7700] ? apparmor_capable+0x13b/0x1b0 [ 159.351208][ T7700] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 159.351242][ T7700] genl_rcv_msg+0x819/0xf00 [ 159.351276][ T7700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.351296][ T7700] ? stack_trace_save+0x11a/0x1d0 [ 159.351330][ T7700] ? __pfx_stack_trace_save+0x10/0x10 [ 159.351369][ T7700] ? stack_depot_save_flags+0x44/0x940 [ 159.351390][ T7700] ? stack_trace_snprint+0x71/0xf0 [ 159.351435][ T7700] ? __lock_acquire+0xad5/0xd80 [ 159.351459][ T7700] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 159.351497][ T7700] netlink_rcv_skb+0x208/0x480 [ 159.351529][ T7700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.351554][ T7700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.351610][ T7700] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.351648][ T7700] genl_rcv+0x28/0x40 [ 159.351668][ T7700] netlink_unicast+0x7f8/0x9a0 [ 159.351706][ T7700] ? __pfx_netlink_unicast+0x10/0x10 [ 159.351737][ T7700] ? skb_put+0x114/0x1f0 [ 159.351763][ T7700] netlink_sendmsg+0x8c3/0xcd0 [ 159.351809][ T7700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.351845][ T7700] ? aa_sock_msg_perm+0x91/0x160 [ 159.351881][ T7700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.351909][ T7700] __sock_sendmsg+0x221/0x270 [ 159.351941][ T7700] ____sys_sendmsg+0x523/0x860 [ 159.351974][ T7700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.351993][ T7700] ? __fget_files+0x2a/0x420 [ 159.352016][ T7700] ? __fget_files+0x2a/0x420 [ 159.352046][ T7700] __sys_sendmsg+0x271/0x360 [ 159.352074][ T7700] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.352161][ T7700] ? do_syscall_64+0xb6/0x230 [ 159.352209][ T7700] do_syscall_64+0xf3/0x230 [ 159.352237][ T7700] ? clear_bhb_loop+0x45/0xa0 [ 159.352262][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.352282][ T7700] RIP: 0033:0x7f8849d8d169 [ 159.352301][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.352317][ T7700] RSP: 002b:00007f8849bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.352339][ T7700] RAX: ffffffffffffffda RBX: 00007f8849fa5fa0 RCX: 00007f8849d8d169 [ 159.352354][ T7700] RDX: 0000000004004040 RSI: 0000200000000c00 RDI: 0000000000000004 [ 159.352372][ T7700] RBP: 00007f8849bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.352385][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.352396][ T7700] R13: 0000000000000000 R14: 00007f8849fa5fa0 R15: 00007ffdceddfca8 [ 159.352430][ T7700] [ 160.045188][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 160.074144][ T7722] pim6reg: entered allmulticast mode [ 160.135413][ T7722] pim6reg: left allmulticast mode [ 160.981552][ T7751] FAULT_INJECTION: forcing a failure. [ 160.981552][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 160.995005][ T7751] CPU: 0 UID: 0 PID: 7751 Comm: syz.0.543 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 160.995033][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.995045][ T7751] Call Trace: [ 160.995054][ T7751] [ 160.995062][ T7751] dump_stack_lvl+0x241/0x360 [ 160.995102][ T7751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.995133][ T7751] ? __pfx__printk+0x10/0x10 [ 160.995167][ T7751] ? __pfx___might_resched+0x10/0x10 [ 160.995199][ T7751] should_fail_ex+0x424/0x570 [ 160.995227][ T7751] should_failslab+0xac/0x100 [ 160.995258][ T7751] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 160.995289][ T7751] ? __alloc_skb+0x1c2/0x480 [ 160.995306][ T7751] ? stack_trace_save+0x11a/0x1d0 [ 160.995341][ T7751] __alloc_skb+0x1c2/0x480 [ 160.995367][ T7751] ? __pfx___alloc_skb+0x10/0x10 [ 160.995394][ T7751] ? netlink_ack_tlv_len+0x6e/0x200 [ 160.995427][ T7751] netlink_ack+0x147/0xa70 [ 160.995457][ T7751] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 160.995495][ T7751] netlink_rcv_skb+0x296/0x480 [ 160.995527][ T7751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.995553][ T7751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.995608][ T7751] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.995646][ T7751] genl_rcv+0x28/0x40 [ 160.995667][ T7751] netlink_unicast+0x7f8/0x9a0 [ 160.995704][ T7751] ? __pfx_netlink_unicast+0x10/0x10 [ 160.995734][ T7751] ? skb_put+0x114/0x1f0 [ 160.995759][ T7751] netlink_sendmsg+0x8c3/0xcd0 [ 160.995805][ T7751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.995841][ T7751] ? aa_sock_msg_perm+0x91/0x160 [ 160.995877][ T7751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.995906][ T7751] __sock_sendmsg+0x221/0x270 [ 160.995955][ T7751] ____sys_sendmsg+0x523/0x860 [ 160.995995][ T7751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.996015][ T7751] ? __fget_files+0x2a/0x420 [ 160.996038][ T7751] ? __fget_files+0x2a/0x420 [ 160.996068][ T7751] __sys_sendmsg+0x271/0x360 [ 160.996099][ T7751] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.996180][ T7751] ? do_syscall_64+0xb6/0x230 [ 160.996211][ T7751] do_syscall_64+0xf3/0x230 [ 160.996238][ T7751] ? clear_bhb_loop+0x45/0xa0 [ 160.996264][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.996284][ T7751] RIP: 0033:0x7f612f98d169 [ 160.996302][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.996319][ T7751] RSP: 002b:00007f61307f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.996341][ T7751] RAX: ffffffffffffffda RBX: 00007f612fba5fa0 RCX: 00007f612f98d169 [ 160.996356][ T7751] RDX: 0000000004004040 RSI: 0000200000000c00 RDI: 0000000000000004 [ 160.996370][ T7751] RBP: 00007f61307f2090 R08: 0000000000000000 R09: 0000000000000000 [ 160.996382][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.996394][ T7751] R13: 0000000000000000 R14: 00007f612fba5fa0 R15: 00007ffc9379dc98 [ 160.996427][ T7751] [ 161.733243][ T7764] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 161.783292][ T7764] __nla_validate_parse: 4 callbacks suppressed [ 161.783313][ T7764] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.546'. [ 161.930918][ T7772] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.024372][ T7763] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 163.080992][ T7799] smc: net device bond0 applied user defined pnetid SYZ0 [ 163.090350][ T7799] smc: net device bond0 erased user defined pnetid SYZ0 [ 163.102385][ T7802] netlink: 'syz.4.558': attribute type 7 has an invalid length. [ 163.114225][ T7802] netlink: 'syz.4.558': attribute type 7 has an invalid length. [ 163.153304][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 163.263018][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 163.285412][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 163.306448][ T7813] netlink: 128 bytes leftover after parsing attributes in process `syz.4.559'. [ 163.458629][ T7820] veth1_to_team: entered promiscuous mode [ 163.474453][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 163.486881][ T7822] netlink: 80 bytes leftover after parsing attributes in process `syz.1.563'. [ 163.511970][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 163.590332][ T7817] veth1_to_team: left promiscuous mode [ 163.842364][ T7840] FAULT_INJECTION: forcing a failure. [ 163.842364][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.876219][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.2.567 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 163.876264][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.876277][ T7840] Call Trace: [ 163.876285][ T7840] [ 163.876293][ T7840] dump_stack_lvl+0x241/0x360 [ 163.876333][ T7840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.876364][ T7840] ? __pfx__printk+0x10/0x10 [ 163.876406][ T7840] should_fail_ex+0x424/0x570 [ 163.876433][ T7840] _copy_from_user+0x2d/0xb0 [ 163.876464][ T7840] __sys_bpf+0x1c5/0x8b0 [ 163.876489][ T7840] ? __pfx___sys_bpf+0x10/0x10 [ 163.876524][ T7840] ? ksys_write+0x275/0x2d0 [ 163.876562][ T7840] __x64_sys_bpf+0x7c/0x90 [ 163.876596][ T7840] do_syscall_64+0xf3/0x230 [ 163.876623][ T7840] ? clear_bhb_loop+0x45/0xa0 [ 163.876649][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.876668][ T7840] RIP: 0033:0x7f907098d169 [ 163.876686][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.876702][ T7840] RSP: 002b:00007f907177a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.876726][ T7840] RAX: ffffffffffffffda RBX: 00007f9070ba5fa0 RCX: 00007f907098d169 [ 163.876741][ T7840] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 163.876754][ T7840] RBP: 00007f907177a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.876766][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.876777][ T7840] R13: 0000000000000001 R14: 00007f9070ba5fa0 R15: 00007ffc5df1f628 [ 163.876806][ T7840] [ 164.132972][ T7832] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 164.142402][ T7832] netlink: 'syz.0.564': attribute type 2 has an invalid length. [ 164.156909][ T7846] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 164.168090][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 164.187301][ T7846] : entered promiscuous mode [ 164.198540][ T7853] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 164.206317][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 165.043120][ T7892] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 165.118568][ T7890] x_tables: duplicate underflow at hook 2 [ 165.547089][ T7917] netlink: 'syz.2.590': attribute type 23 has an invalid length. [ 165.589676][ T7917] lo: left allmulticast mode [ 165.602748][ T7919] netlink: 'syz.4.591': attribute type 13 has an invalid length. [ 165.619264][ T7917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.702983][ T7919] erspan0: refused to change device tx_queue_len [ 165.712492][ T7919] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 165.958035][ T7931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 166.309430][ T7938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.505593][ T7938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.588872][ T7965] netem: incorrect ge model size [ 166.594728][ T7965] netem: change failed [ 166.622771][ T7938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.829794][ T7973] __nla_validate_parse: 20 callbacks suppressed [ 166.829815][ T7973] netlink: 248 bytes leftover after parsing attributes in process `syz.4.603'. [ 166.868937][ T7970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.905236][ T7938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.933530][ T7970] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.083487][ T7938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.096867][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 167.124527][ T7938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.133115][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 167.178349][ T7938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.269034][ T7938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.349049][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 167.377145][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 167.412861][ T7994] vlan1: entered allmulticast mode [ 167.419398][ T7994] bond0: entered allmulticast mode [ 167.449466][ T7994] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 167.462471][ T7994] bridge0: port 1(vlan1) entered blocking state [ 167.468477][ T7998] netlink: 80 bytes leftover after parsing attributes in process `syz.3.613'. [ 167.469179][ T7994] bridge0: port 1(vlan1) entered disabled state [ 167.488389][ T7994] vlan1: entered promiscuous mode [ 167.494357][ T7994] bond0: entered promiscuous mode [ 167.501721][ T7994] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 167.511382][ T7994] bridge0: port 1(vlan1) entered blocking state [ 167.518139][ T7994] bridge0: port 1(vlan1) entered forwarding state [ 167.636691][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 167.670951][ T8006] validate_nla: 2 callbacks suppressed [ 167.670971][ T8006] netlink: 'syz.3.615': attribute type 72 has an invalid length. [ 167.705982][ T8009] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 167.728552][ T8006] netlink: 36 bytes leftover after parsing attributes in process `syz.3.615'. [ 167.828406][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 167.840002][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 167.986054][ T8030] bridge_slave_0: entered promiscuous mode [ 168.078920][ T8028] syzkaller1: entered promiscuous mode [ 168.094516][ T8028] syzkaller1: entered allmulticast mode [ 168.225513][ T8030] bridge_slave_0: left promiscuous mode [ 168.823312][ T8067] netlink: 'syz.1.632': attribute type 9 has an invalid length. [ 168.831177][ T8067] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 169.040601][ T8073] netlink: 'syz.0.631': attribute type 5 has an invalid length. [ 169.921870][ T8112] geneve2: entered allmulticast mode [ 170.059724][ T976] IPVS: starting estimator thread 0... [ 170.159105][ T8121] IPVS: using max 28 ests per chain, 67200 per kthread [ 170.377344][ T8131] netlink: 'syz.4.643': attribute type 2 has an invalid length. [ 170.482736][ T8138] vlan2: entered allmulticast mode [ 170.491549][ T8138] bridge0: entered allmulticast mode [ 170.498553][ T8138] bridge0: port 1(vlan2) entered blocking state [ 170.504983][ T8138] bridge0: port 1(vlan2) entered disabled state [ 171.123999][ T8166] No such timeout policy "syz0" [ 171.153108][ T8167] vxcan3: entered allmulticast mode [ 171.687021][ T1013] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 172.894994][ T8214] TCP: TCP_TX_DELAY enabled [ 173.013355][ T8217] veth2: entered promiscuous mode [ 173.134562][ T8217] veth2: entered allmulticast mode [ 173.385095][ T8219] bond0: (slave wlan1): Releasing backup interface [ 173.511651][ T8219] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 173.530500][ T8230] xt_hashlimit: max too large, truncated to 1048576 [ 173.537931][ T8219] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 173.588964][ T8219] vlan1: left promiscuous mode [ 173.595076][ T8219] bond0: left promiscuous mode [ 173.611228][ T8219] bridge0: port 1(vlan1) entered disabled state [ 173.649403][ T8222] __nla_validate_parse: 20 callbacks suppressed [ 173.649425][ T8222] netlink: 10 bytes leftover after parsing attributes in process `syz.2.674'. [ 173.696425][ T5890] s9z1: Port: 1 Link DOWN [ 173.731467][ T8236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.678'. [ 173.971267][ T8249] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.997654][ T8251] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 174.021388][ T8245] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 174.474119][ T8263] team0: Mode "aŸñî3ebackup" not found [ 174.682200][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.686'. [ 174.928390][ T8278] sctp: [Deprecated]: syz.1.688 (pid 8278) Use of int in maxseg socket option. [ 174.928390][ T8278] Use struct sctp_assoc_value instead [ 175.047722][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 175.225139][ T8286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.691'. [ 175.333506][ T8295] FAULT_INJECTION: forcing a failure. [ 175.333506][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 175.363015][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.4.693 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 175.363051][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.363063][ T8295] Call Trace: [ 175.363071][ T8295] [ 175.363079][ T8295] dump_stack_lvl+0x241/0x360 [ 175.363118][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.363148][ T8295] ? __pfx__printk+0x10/0x10 [ 175.363181][ T8295] ? __pfx___might_resched+0x10/0x10 [ 175.363216][ T8295] should_fail_ex+0x424/0x570 [ 175.363244][ T8295] should_failslab+0xac/0x100 [ 175.363274][ T8295] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 175.363306][ T8295] ? __alloc_skb+0x1c2/0x480 [ 175.363329][ T8295] __alloc_skb+0x1c2/0x480 [ 175.363355][ T8295] ? __pfx___alloc_skb+0x10/0x10 [ 175.363378][ T8295] ? netlink_autobind+0xd6/0x2f0 [ 175.363395][ T8295] ? netlink_autobind+0x2b0/0x2f0 [ 175.363420][ T8295] netlink_sendmsg+0x638/0xcd0 [ 175.363466][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.363502][ T8295] ? aa_sock_msg_perm+0x91/0x160 [ 175.363539][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.363568][ T8295] __sock_sendmsg+0x221/0x270 [ 175.363599][ T8295] ____sys_sendmsg+0x523/0x860 [ 175.363631][ T8295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.363651][ T8295] ? __fget_files+0x2a/0x420 [ 175.363674][ T8295] ? __fget_files+0x2a/0x420 [ 175.363704][ T8295] __sys_sendmsg+0x271/0x360 [ 175.363733][ T8295] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.363816][ T8295] ? do_syscall_64+0xb6/0x230 [ 175.363847][ T8295] do_syscall_64+0xf3/0x230 [ 175.363875][ T8295] ? clear_bhb_loop+0x45/0xa0 [ 175.363899][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.363920][ T8295] RIP: 0033:0x7f8849d8d169 [ 175.363938][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.363954][ T8295] RSP: 002b:00007f8849bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.363977][ T8295] RAX: ffffffffffffffda RBX: 00007f8849fa5fa0 RCX: 00007f8849d8d169 [ 175.363992][ T8295] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 175.364011][ T8295] RBP: 00007f8849bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.364024][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.364036][ T8295] R13: 0000000000000000 R14: 00007f8849fa5fa0 R15: 00007ffdceddfca8 [ 175.364069][ T8295] [ 175.609346][ T8297] netlink: 'syz.0.692': attribute type 21 has an invalid length. [ 175.617278][ T8297] netlink: 'syz.0.692': attribute type 15 has an invalid length. [ 175.625045][ T8297] netlink: 156 bytes leftover after parsing attributes in process `syz.0.692'. [ 175.634163][ T8297] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.642097][ T8297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.647081][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 175.649671][ T8297] IPv6: NLM_F_CREATE should be set when creating new route [ 175.665833][ T8297] IPv6: NLM_F_CREATE should be set when creating new route [ 175.673143][ T8297] IPv6: NLM_F_CREATE should be set when creating new route [ 175.743686][ T8295] syzkaller1: entered promiscuous mode [ 175.749661][ T8295] syzkaller1: entered allmulticast mode [ 175.791365][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 176.084115][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.097322][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.105484][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.116004][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.127468][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.135486][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.149585][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.165781][ T8314] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 176.754677][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 177.332797][ T8353] lo speed is unknown, defaulting to 1000 [ 177.357818][ T8353] lo speed is unknown, defaulting to 1000 [ 177.413035][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.710'. [ 177.424071][ T8356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.710'. [ 177.586236][ T8353] lo speed is unknown, defaulting to 1000 [ 177.617770][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 177.639355][ T8353] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.675310][ T8360] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.727699][ T8353] lo speed is unknown, defaulting to 1000 [ 177.743363][ T8353] lo speed is unknown, defaulting to 1000 [ 177.761230][ T8353] lo speed is unknown, defaulting to 1000 [ 177.798379][ T8353] lo speed is unknown, defaulting to 1000 [ 177.819633][ T8353] lo speed is unknown, defaulting to 1000 [ 178.324398][ T8387] lo speed is unknown, defaulting to 1000 [ 178.459443][ T8400] pim6reg: entered allmulticast mode [ 178.472694][ T8401] pim6reg: left allmulticast mode [ 178.662858][ T8403] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 179.271953][ T8438] __nla_validate_parse: 5 callbacks suppressed [ 179.271976][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.737'. [ 179.401518][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 179.412046][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 179.424720][ T8446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.740'. [ 179.926932][ T8456] syzkaller1: entered promiscuous mode [ 179.952598][ T8456] syzkaller1: entered allmulticast mode [ 180.087778][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 180.145067][ T8437] dccp_close: ABORT with 32 bytes unread [ 180.357837][ T8468] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 180.556730][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 180.565961][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 180.607133][ T8480] bond0: (slave macvlan0): Releasing backup interface [ 180.653775][ T8480] bond2: (slave ip6gretap1): Releasing backup interface [ 181.075181][ T8499] erspan1: entered promiscuous mode [ 181.099826][ T8499] erspan1: entered allmulticast mode [ 181.141408][ T8502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.754'. [ 181.170143][ T8499] netlink: 112 bytes leftover after parsing attributes in process `syz.2.752'. [ 181.257226][ T8507] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 181.703912][ T8527] x_tables: duplicate underflow at hook 1 [ 182.040887][ T8536] syzkaller1: entered promiscuous mode [ 182.049695][ T8536] syzkaller1: entered allmulticast mode [ 182.096828][ T8537] lo speed is unknown, defaulting to 1000 [ 182.141671][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 182.205858][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 182.438068][ T8553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 182.582987][ T8559] pim6reg: entered allmulticast mode [ 182.749695][ T8567] xt_TCPMSS: Only works on TCP SYN packets [ 182.751404][ T8568] xt_TCPMSS: Only works on TCP SYN packets [ 182.842131][ T8567] validate_nla: 27 callbacks suppressed [ 182.842150][ T8567] netlink: 'syz.1.769': attribute type 3 has an invalid length. [ 182.842216][ T8564] lo speed is unknown, defaulting to 1000 [ 182.873229][ T8567] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 183.068102][ T8578] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 183.162764][ T8578] : entered promiscuous mode [ 183.367998][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 183.850751][ T8611] batman_adv: batadv0: Adding interface: macvlan0 [ 183.886449][ T8611] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.936387][ T8611] batman_adv: batadv0: Interface activated: macvlan0 [ 184.492204][ T8637] FAULT_INJECTION: forcing a failure. [ 184.492204][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 184.526599][ T8637] CPU: 0 UID: 0 PID: 8637 Comm: syz.0.787 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 184.526630][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.526643][ T8637] Call Trace: [ 184.526651][ T8637] [ 184.526659][ T8637] dump_stack_lvl+0x241/0x360 [ 184.526698][ T8637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.526729][ T8637] ? __pfx__printk+0x10/0x10 [ 184.526764][ T8637] ? __pfx___might_resched+0x10/0x10 [ 184.526797][ T8637] should_fail_ex+0x424/0x570 [ 184.526825][ T8637] should_failslab+0xac/0x100 [ 184.526857][ T8637] __kmalloc_cache_noprof+0x73/0x370 [ 184.526885][ T8637] ? rtm_new_nexthop+0x2e97/0x89d0 [ 184.526911][ T8637] rtm_new_nexthop+0x2e97/0x89d0 [ 184.526942][ T8637] ? __netlink_deliver_tap+0x561/0x7f0 [ 184.526973][ T8637] ? netlink_unicast+0x7c6/0x9a0 [ 184.526999][ T8637] ? __sock_sendmsg+0x221/0x270 [ 184.527024][ T8637] ? ____sys_sendmsg+0x523/0x860 [ 184.527044][ T8637] ? do_syscall_64+0xf3/0x230 [ 184.527069][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.527092][ T8637] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 184.527147][ T8637] ? kasan_quarantine_put+0xdc/0x230 [ 184.527169][ T8637] ? lockdep_hardirqs_on+0x9d/0x150 [ 184.527198][ T8637] ? nlmon_xmit+0xaf/0x100 [ 184.527246][ T8637] ? __local_bh_enable_ip+0x168/0x200 [ 184.527265][ T8637] ? lockdep_hardirqs_on+0x9d/0x150 [ 184.527311][ T8637] ? __lock_acquire+0xad5/0xd80 [ 184.527357][ T8637] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 184.527379][ T8637] rtnetlink_rcv_msg+0x80f/0xd70 [ 184.527408][ T8637] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 184.527443][ T8637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.527482][ T8637] ? ref_tracker_free+0x63e/0x7e0 [ 184.527514][ T8637] netlink_rcv_skb+0x208/0x480 [ 184.527546][ T8637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.527582][ T8637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.527634][ T8637] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.527668][ T8637] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.527701][ T8637] netlink_unicast+0x7f8/0x9a0 [ 184.527739][ T8637] ? __pfx_netlink_unicast+0x10/0x10 [ 184.527769][ T8637] ? skb_put+0x114/0x1f0 [ 184.527795][ T8637] netlink_sendmsg+0x8c3/0xcd0 [ 184.527841][ T8637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.527877][ T8637] ? aa_sock_msg_perm+0x91/0x160 [ 184.527914][ T8637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.527943][ T8637] __sock_sendmsg+0x221/0x270 [ 184.527976][ T8637] ____sys_sendmsg+0x523/0x860 [ 184.528008][ T8637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.528028][ T8637] ? __fget_files+0x2a/0x420 [ 184.528051][ T8637] ? __fget_files+0x2a/0x420 [ 184.528081][ T8637] __sys_sendmsg+0x271/0x360 [ 184.528110][ T8637] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.528193][ T8637] ? do_syscall_64+0xb6/0x230 [ 184.528231][ T8637] do_syscall_64+0xf3/0x230 [ 184.528259][ T8637] ? clear_bhb_loop+0x45/0xa0 [ 184.528284][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.528304][ T8637] RIP: 0033:0x7f612f98d169 [ 184.528322][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.528338][ T8637] RSP: 002b:00007f61307f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.528359][ T8637] RAX: ffffffffffffffda RBX: 00007f612fba5fa0 RCX: 00007f612f98d169 [ 184.528374][ T8637] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 184.528386][ T8637] RBP: 00007f61307f2090 R08: 0000000000000000 R09: 0000000000000000 [ 184.528399][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.528410][ T8637] R13: 0000000000000000 R14: 00007f612fba5fa0 R15: 00007ffc9379dc98 [ 184.528443][ T8637] [ 185.073552][ T8639] syzkaller1: entered promiscuous mode [ 185.082129][ T8639] syzkaller1: entered allmulticast mode [ 185.100125][ T8642] __nla_validate_parse: 5 callbacks suppressed [ 185.100146][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 185.303530][ T8641] lo speed is unknown, defaulting to 1000 [ 185.328393][ T8653] netlink: 104 bytes leftover after parsing attributes in process `syz.3.791'. [ 185.352206][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 185.361357][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 185.612256][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 185.674565][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 185.696779][ T8662] netlink: 'syz.0.794': attribute type 13 has an invalid length. [ 185.704766][ T8662] netlink: 'syz.0.794': attribute type 12 has an invalid length. [ 185.938623][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 186.006538][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 186.035867][ T8678] bpq0: entered allmulticast mode [ 186.158183][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 186.167632][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 186.249860][ T8686] veth0_vlan: left promiscuous mode [ 186.301315][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 186.363681][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 186.913988][ T8701] lo speed is unknown, defaulting to 1000 [ 187.143997][ T8709] lo speed is unknown, defaulting to 1000 [ 187.461559][ T8732] netlink: 'syz.2.816': attribute type 12 has an invalid length. [ 187.952066][ T8750] netlink: 'syz.2.822': attribute type 11 has an invalid length. [ 188.203058][ T8765] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 188.354795][ T8759] bond0 (unregistering): Released all slaves [ 188.415527][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 188.884144][ T8791] --map-set only usable from mangle table [ 188.993341][ T8796] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 189.002743][ T8796] tipc: Enabled bearer , priority 10 [ 189.029138][ T36] tipc: Subscription rejected, illegal request [ 189.495017][ T8812] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.504543][ T8812] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.513825][ T8812] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.522735][ T8812] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.540064][ T8812] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.549694][ T8812] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.559361][ T8812] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.568375][ T8812] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.682787][ T8819] lo speed is unknown, defaulting to 1000 [ 189.703481][ T8820] lo speed is unknown, defaulting to 1000 [ 189.830167][ T8831] bridge: RTM_NEWNEIGH with invalid ether address [ 189.880469][ T8836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 189.891975][ T8836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 189.901546][ T8836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 189.921229][ T8836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 189.998852][ T8836] tipc: Started in network mode [ 190.003849][ T8836] tipc: Node identity 080211000001, cluster identity 4711 [ 190.012812][ T8836] tipc: Enabled bearer , priority 0 [ 190.218382][ T8848] lo speed is unknown, defaulting to 1000 [ 190.356366][ T8852] __nla_validate_parse: 14 callbacks suppressed [ 190.356387][ T8852] netlink: 124 bytes leftover after parsing attributes in process `syz.4.851'. [ 190.558713][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 190.582881][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 190.593276][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'. [ 190.631633][ T8863] lo speed is unknown, defaulting to 1000 [ 190.790455][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 191.071434][ T8874] IPv6: NLM_F_REPLACE set, but no existing node found! [ 191.140154][ T10] tipc: Node number set to 134418688 [ 191.281103][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 191.290548][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 191.303216][ T8881] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 191.331200][ T8881] netlink: 10 bytes leftover after parsing attributes in process `syz.4.858'. [ 191.408053][ T8881] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.423497][ T8881] block nbd3: shutting down sockets [ 191.497878][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 191.628958][ T8892] openvswitch: netlink: Flow key attribute not present in set flow. [ 191.692058][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 191.858087][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 192.114791][ T8914] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 192.251976][ T8922] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 192.309703][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025205800: rx timeout, send abort [ 192.454894][ T8933] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 4, id = 0 [ 192.702965][ T8946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 192.819088][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025205800: abort rx timeout. Force session deactivation [ 193.619665][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 193.930776][ T8970] bond3: entered promiscuous mode [ 193.940680][ T8970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.217762][ T8977] x_tables: duplicate underflow at hook 2 [ 194.251092][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258349][ T8977] netlink: 'syz.0.888': attribute type 29 has an invalid length. [ 194.266166][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.301739][ T8977] netlink: 'syz.0.888': attribute type 29 has an invalid length. [ 194.355624][ T8976] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 194.443142][ T8979] lo speed is unknown, defaulting to 1000 [ 194.449524][ T8976] veth1_macvtap: entered allmulticast mode [ 194.462029][ T8976] veth1_macvtap: left promiscuous mode [ 194.482699][ T8976] team0: Device veth1_macvtap failed to register rx_handler [ 195.179194][ T8996] syzkaller1: entered promiscuous mode [ 195.184744][ T8996] syzkaller1: entered allmulticast mode [ 195.525510][ T9012] lo speed is unknown, defaulting to 1000 [ 196.017474][ T9024] __nla_validate_parse: 10 callbacks suppressed [ 196.017497][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 196.308529][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 196.376598][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.907'. [ 196.752269][ T9046] bond0: (slave wlan1): Releasing backup interface [ 196.849236][ T9046] vlan2: left allmulticast mode [ 196.858716][ T9046] macvlan1: left allmulticast mode [ 196.880101][ T9046] veth1_vlan: left allmulticast mode [ 196.900563][ T9046] vlan2: left promiscuous mode [ 196.915643][ T9046] macvlan1: left promiscuous mode [ 196.936951][ T9046] bridge0: port 1(vlan2) entered disabled state [ 196.995585][ T9044] lo speed is unknown, defaulting to 1000 [ 197.047575][ T9062] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 197.166491][ T9060] veth3: entered promiscuous mode [ 197.451965][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 197.795834][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.912'. [ 198.012651][ T9087] lo speed is unknown, defaulting to 1000 [ 198.510957][ T9089] netlink: 312 bytes leftover after parsing attributes in process `syz.0.924'. [ 198.665238][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 198.925017][ T9104] siw: device registration error -23 [ 199.367283][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 199.711843][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 199.931699][ T9149] batman_adv: batadv0: Interface deactivated: macvlan0 [ 199.944803][ T9149] batman_adv: batadv0: Removing interface: macvlan0 [ 199.964226][ T10] lo speed is unknown, defaulting to 1000 [ 200.095474][ T9163] sctp: [Deprecated]: syz.1.946 (pid 9163) Use of int in max_burst socket option. [ 200.095474][ T9163] Use struct sctp_assoc_value instead [ 200.130817][ T9150] netlink: 'syz.4.941': attribute type 2 has an invalid length. [ 200.206900][ T9163] netlink: 'syz.1.946': attribute type 11 has an invalid length. [ 200.218589][ T9163] netlink: 224 bytes leftover after parsing attributes in process `syz.1.946'. [ 200.267368][ T9171] netlink: 'syz.4.949': attribute type 16 has an invalid length. [ 200.275674][ T9171] netlink: 'syz.4.949': attribute type 3 has an invalid length. [ 200.308491][ T9171] netlink: 132 bytes leftover after parsing attributes in process `syz.4.949'. [ 200.363733][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 200.952018][ T9211] netlink: 'syz.1.962': attribute type 11 has an invalid length. [ 201.022592][ T9207] tipc: Enabling of bearer rejected, failed to enable media [ 201.223890][ T9216] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.252303][ T9223] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 201.266483][ T9223] __nla_validate_parse: 2 callbacks suppressed [ 201.266503][ T9223] netlink: 224 bytes leftover after parsing attributes in process `syz.2.964'. [ 201.319752][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.965'. [ 201.487840][ T9216] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.646021][ T9246] netlink: 232 bytes leftover after parsing attributes in process `syz.3.972'. [ 201.646021][ T9244] netlink: 232 bytes leftover after parsing attributes in process `syz.3.972'. [ 201.690473][ T9248] netlink: 332 bytes leftover after parsing attributes in process `syz.2.973'. [ 201.787795][ T9254] tipc: Failed to remove unknown binding: 66,1,1/0:189277907/189277909 [ 201.798552][ T9216] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.823721][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 201.837674][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 201.898840][ T9254] tipc: Failed to remove unknown binding: 66,1,1/0:189277907/189277909 [ 201.912645][ T9254] tipc: Failed to remove unknown binding: 66,1,1/0:189277907/189277909 [ 201.927793][ T9216] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.113980][ T9216] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.124053][ T9265] tipc: Enabling of bearer rejected, failed to enable media [ 202.168574][ T9216] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.234514][ T9216] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.289723][ T9216] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.550193][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.981'. [ 202.784883][ T9288] syzkaller1: entered promiscuous mode [ 202.799419][ T9288] syzkaller1: entered allmulticast mode [ 203.142416][ T9297] lo speed is unknown, defaulting to 1000 [ 203.209517][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 203.771237][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.992'. [ 203.948380][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.996'. [ 204.295647][ T9352] netlink: 'syz.3.1002': attribute type 5 has an invalid length. [ 204.303751][ T9352] netlink: 'syz.3.1002': attribute type 5 has an invalid length. [ 204.313031][ T9354] raw_sendmsg: syz.2.1003 forgot to set AF_INET. Fix it! [ 204.321123][ T9354] syzkaller1: entered promiscuous mode [ 204.327349][ T9354] syzkaller1: entered allmulticast mode [ 204.506061][ T9359] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 204.721883][ T9365] netlink: 'syz.0.1008': attribute type 17 has an invalid length. [ 204.815492][ T9372] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 204.824123][ T9372] batman_adv: batadv0: Removing interface: ip6gretap1 [ 205.071314][ T9384] veth0_to_bridge: entered promiscuous mode [ 205.102888][ T9382] veth0_to_bridge: left promiscuous mode [ 205.134743][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 206.613387][ T9450] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.622131][ T9450] __nla_validate_parse: 71 callbacks suppressed [ 206.622153][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 206.636310][ T9447] lo speed is unknown, defaulting to 1000 [ 206.702516][ T9455] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.954947][ T9458] syzkaller1: entered promiscuous mode [ 206.962447][ T9458] syzkaller1: entered allmulticast mode [ 207.238587][ T9476] netlink: 'syz.2.1041': attribute type 4 has an invalid length. [ 207.450244][ T9483] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1045'. [ 208.088405][ T5846] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 208.144849][ T9510] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 208.231503][ T9515] pim6reg: entered allmulticast mode [ 208.245044][ T9513] syzkaller1: entered promiscuous mode [ 208.261673][ T9513] syzkaller1: entered allmulticast mode [ 208.280032][ T9515] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 208.302086][ T9515] gretap1: entered promiscuous mode [ 208.411457][ T9519] syz.4.1059: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 208.490886][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.4.1059 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 208.490921][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.490934][ T9519] Call Trace: [ 208.490942][ T9519] [ 208.490951][ T9519] dump_stack_lvl+0x241/0x360 [ 208.490992][ T9519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.491023][ T9519] ? __pfx__printk+0x10/0x10 [ 208.491053][ T9519] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 208.491087][ T9519] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 208.491118][ T9519] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 208.491152][ T9519] warn_alloc+0x27c/0x410 [ 208.491180][ T9519] ? __pfx_warn_alloc+0x10/0x10 [ 208.491216][ T9519] ? xskq_create+0xb6/0x170 [ 208.491240][ T9519] ? __get_vm_area_node+0x1c8/0x2d0 [ 208.491270][ T9519] ? __get_vm_area_node+0x25c/0x2d0 [ 208.491310][ T9519] __vmalloc_node_range_noprof+0x634/0x1390 [ 208.491365][ T9519] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 208.491391][ T9519] ? __kasan_kmalloc+0x9d/0xb0 [ 208.491423][ T9519] vmalloc_user_noprof+0x74/0x80 [ 208.491443][ T9519] ? xskq_create+0xb6/0x170 [ 208.491464][ T9519] xskq_create+0xb6/0x170 [ 208.491490][ T9519] xsk_init_queue+0xa1/0x100 [ 208.491516][ T9519] xsk_setsockopt+0x4f9/0x840 [ 208.491542][ T9519] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.491564][ T9519] ? __pfx_aa_sk_perm+0x10/0x10 [ 208.491596][ T9519] ? aa_sock_opt_perm+0x79/0x120 [ 208.491632][ T9519] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.491653][ T9519] do_sock_setsockopt+0x3b1/0x710 [ 208.491683][ T9519] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 208.491702][ T9519] ? __fget_files+0x2a/0x420 [ 208.491727][ T9519] ? __fget_files+0x39d/0x420 [ 208.491744][ T9519] ? __fget_files+0x2a/0x420 [ 208.491773][ T9519] __x64_sys_setsockopt+0x1ee/0x280 [ 208.491803][ T9519] do_syscall_64+0xf3/0x230 [ 208.491830][ T9519] ? clear_bhb_loop+0x45/0xa0 [ 208.491856][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.491876][ T9519] RIP: 0033:0x7f8849d8d169 [ 208.491918][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.491937][ T9519] RSP: 002b:00007f8849bd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.491960][ T9519] RAX: ffffffffffffffda RBX: 00007f8849fa6080 RCX: 00007f8849d8d169 [ 208.491975][ T9519] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 208.491987][ T9519] RBP: 00007f8849e0e990 R08: 0000000000000004 R09: 0000000000000000 [ 208.492000][ T9519] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 208.492013][ T9519] R13: 0000000000000000 R14: 00007f8849fa6080 R15: 00007ffdceddfca8 [ 208.492046][ T9519] [ 208.492055][ T9519] Mem-Info: [ 208.792330][ T9519] active_anon:4500 inactive_anon:0 isolated_anon:0 [ 208.792330][ T9519] active_file:1783 inactive_file:38352 isolated_file:0 [ 208.792330][ T9519] unevictable:768 dirty:327 writeback:0 [ 208.792330][ T9519] slab_reclaimable:10533 slab_unreclaimable:100414 [ 208.792330][ T9519] mapped:28790 shmem:1440 pagetables:769 [ 208.792330][ T9519] sec_pagetables:0 bounce:0 [ 208.792330][ T9519] kernel_misc_reclaimable:0 [ 208.792330][ T9519] free:1336707 free_pcp:363 free_cma:0 [ 208.844863][ T9519] Node 0 active_anon:18000kB inactive_anon:0kB active_file:7132kB inactive_file:153332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115160kB dirty:1308kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10784kB pagetables:2976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.920197][ T9519] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.966739][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 208.996348][ T9519] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.091930][ T9538] xt_bpf: check failed: parse error [ 209.152285][ T9519] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 209.166645][ T9519] Node 0 DMA32 free:1418044kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:17836kB inactive_anon:0kB active_file:7132kB inactive_file:153232kB unevictable:1536kB writepending:1364kB present:3129332kB managed:2547224kB mlocked:0kB bounce:0kB free_pcp:3812kB local_pcp:2048kB free_cma:0kB [ 209.285813][ T9519] lowmem_reserve[]: 0 0 0 0 0 [ 209.293921][ T9519] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.339216][ T9519] lowmem_reserve[]: 0 0 0 0 0 [ 209.355850][ T9519] Node 1 Normal free:3910376kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.387327][ T9519] lowmem_reserve[]: 0 0 0 0 0 [ 209.401335][ T9519] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.462642][ T9519] Node 0 DMA32: 77*4kB (UME) 485*8kB (UME) 404*16kB (UM) 1229*32kB (UME) 1009*64kB (UME) 250*128kB (UME) 48*256kB (UME) 8*512kB (M) 9*1024kB (ME) 2*2048kB (M) 303*4096kB (UM) = 1417340kB [ 209.514327][ T9519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 209.551919][ T9519] Node 1 Normal: 246*4kB (UE) 60*8kB (UME) 41*16kB (UME) 205*32kB (UME) 98*64kB (UME) 25*128kB (UME) 10*256kB (UM) 11*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910376kB [ 209.619053][ T9519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.626275][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 209.751764][ T9519] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.800120][ T9519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.828563][ T9519] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.866667][ T9519] 41575 total pagecache pages [ 209.904700][ T9519] 0 pages in swap cache [ 209.929496][ T9519] Free swap = 124996kB [ 209.933714][ T9519] Total swap = 124996kB [ 209.967996][ T9519] 2097051 pages RAM [ 209.976199][ T9519] 0 pages HighMem/MovableOnly [ 209.999484][ T9519] 428587 pages reserved [ 210.003693][ T9519] 0 pages cma reserved [ 210.287784][ T9582] dccp_v6_rcv: dropped packet with invalid checksum [ 210.494384][ T9589] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 210.511717][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1083'. [ 210.578191][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 210.903283][ T9608] SET target dimension over the limit! [ 210.909836][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 211.127988][ T9619] tipc: Started in network mode [ 211.132937][ T9619] tipc: Node identity ac14140f, cluster identity 4711 [ 211.164632][ T9619] tipc: New replicast peer: 255.255.255.255 [ 211.191196][ T9619] tipc: Enabled bearer , priority 10 [ 211.250486][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'. [ 211.319620][ T9619] vxcan3: entered allmulticast mode [ 211.520213][ T9636] dummy0: entered promiscuous mode [ 211.686350][ T9564] Bluetooth: hci1: command 0x0406 tx timeout [ 211.692519][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.693104][ T55] Bluetooth: hci0: command 0x0401 tx timeout [ 211.699228][ T9564] Bluetooth: hci2: command 0x0406 tx timeout [ 212.005015][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1100'. [ 212.046484][ T9652] can: request_module (can-proto-0) failed. [ 212.053198][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1100'. [ 212.113269][ T9652] pim6reg1: entered promiscuous mode [ 212.146990][ T9652] pim6reg1: entered allmulticast mode [ 212.306877][ T976] tipc: Node number set to 2886997007 [ 212.378968][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1106'. [ 212.495109][ T9673] wg2: entered promiscuous mode [ 212.506298][ T9673] wg2: entered allmulticast mode [ 212.605170][ T24] lo speed is unknown, defaulting to 1000 [ 212.621936][ T24] syz1: Port: 1 Link DOWN [ 212.739685][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 212.754591][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'. [ 212.775475][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 212.793599][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'. [ 212.900994][ T9688] pim6reg1: entered promiscuous mode [ 212.914571][ T9688] pim6reg1: entered allmulticast mode [ 212.969020][ T9690] wg2: entered promiscuous mode [ 212.974109][ T9690] wg2: entered allmulticast mode [ 213.301324][ T9704] lo speed is unknown, defaulting to 1000 [ 214.090912][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 214.823998][ T9746] pim6reg1: entered promiscuous mode [ 214.835315][ T9746] pim6reg1: entered allmulticast mode [ 214.922288][ T9751] lo speed is unknown, defaulting to 1000 [ 215.360761][ T9759] syzkaller0: entered promiscuous mode [ 215.370435][ T9759] syzkaller0: entered allmulticast mode [ 215.948076][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 215.964650][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 216.647466][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 217.532351][ T9822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1162'. [ 218.205517][ T9822] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.235463][ T9822] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.256218][ T9822] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.274421][ T9822] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 218.555092][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1166'. [ 218.569043][ T9831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1166'. [ 218.582050][ T9831] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1166'. [ 218.595339][ T9832] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1166'. [ 218.990763][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.053169][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 219.122965][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 219.136578][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 219.183740][ T9867] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1176'. [ 219.422001][ T9874] lo speed is unknown, defaulting to 1000 [ 219.772283][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 219.853658][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 220.134274][ T9899] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 221.593774][ T9950] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 221.603381][ T9950] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 221.685925][ T9952] lo speed is unknown, defaulting to 1000 [ 221.768298][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 222.132482][ T9952] Unsupported ieee802154 address type: 0 [ 222.186487][ T9965] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 222.451032][ T9970] netlink: 'syz.3.1205': attribute type 4 has an invalid length. [ 222.459609][ T9970] netlink: 'syz.3.1205': attribute type 17 has an invalid length. [ 222.784483][ T9989] __nla_validate_parse: 6 callbacks suppressed [ 222.784507][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 222.807018][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 222.823518][ T9991] bridge: RTM_NEWNEIGH with invalid ether address [ 223.196047][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 223.218384][T10002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1218'. [ 223.247094][T10005] netlink: 'syz.0.1219': attribute type 21 has an invalid length. [ 223.260816][T10005] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1219'. [ 223.273033][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 223.563415][T10013] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 223.617146][ T9990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 223.625541][ T9990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 223.708616][T10027] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 224.753608][ T30] audit: type=1800 audit(1744395203.518:4): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1239" name=363535343120766C656E3D310A0920747970655F69643D32206F66667365743D352073697A653D3130204E6F74206120564152206B696E64206D656D6265720A dev="tmpfs" ino=1215 res=0 errno=0 [ 225.045116][T10090] netlink: 'syz.3.1244': attribute type 10 has an invalid length. [ 225.045318][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 225.092093][T10090] team0: Port device dummy0 added [ 225.176675][T10090] team0: Port device dummy0 removed [ 225.213447][T10092] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.345674][T10097] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 225.368565][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'. [ 225.389862][T10097] nbd: couldn't find device at index 0 [ 225.611069][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 225.783977][T10131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1256'. [ 225.807600][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 225.860268][ T5849] block nbd3: Receive control failed (result -107) [ 225.886392][T10132] nbd3: detected capacity change from 0 to 256 [ 226.160460][T10151] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 226.220868][T10151] syzkaller0: entered promiscuous mode [ 226.229629][T10151] syzkaller0: entered allmulticast mode [ 226.285140][T10156] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 226.299878][T10156] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 226.511058][T10167] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 226.873254][T10187] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 226.892585][T10187] team0: Device veth1_macvtap failed to register rx_handler [ 226.916421][T10187] netlink: 'syz.1.1275': attribute type 11 has an invalid length. [ 227.537689][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.470953][T10193] lo speed is unknown, defaulting to 1000 [ 228.647680][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 228.654110][T10206] __nla_validate_parse: 5 callbacks suppressed [ 228.654130][T10206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1281'. [ 228.697583][T10206] nbd: must specify an index to disconnect [ 230.138811][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1290'. [ 230.152552][T10233] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 230.273552][T10233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.415574][T10235] bond1: (slave veth7): Enslaving as an active interface with a down link [ 230.507177][T10233] bond1: (slave veth9): Enslaving as an active interface with a down link [ 230.566885][T10253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1295'. [ 230.577516][T10253] nbd: must specify an index to disconnect [ 230.590828][T10238] bond1: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 230.730357][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.801747][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.833121][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1297'. [ 230.849418][T10241] lo speed is unknown, defaulting to 1000 [ 230.890368][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 230.952855][T10259] bond0: (slave veth3): Enslaving as an active interface with an up link [ 230.999901][T10246] IPVS: Error joining to the multicast group [ 231.034481][T10257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.310432][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 231.370149][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 231.391710][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 231.545366][T10286] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1303'. [ 232.363752][T10334] bond0: (slave dummy0): Releasing backup interface [ 232.398854][T10334] bond0: (slave veth3): Releasing backup interface [ 232.412138][T10339] netlink: 'syz.0.1317': attribute type 4 has an invalid length. [ 232.457154][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b68ac00: rx timeout, send abort [ 232.464304][T10335] netlink: 'syz.0.1317': attribute type 4 has an invalid length. [ 232.957242][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880332c8000: rx timeout, send abort [ 232.965586][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b68ac00: abort rx timeout. Force session deactivation [ 232.966378][T10356] lo speed is unknown, defaulting to 1000 [ 233.014445][T10357] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 233.289634][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 233.465556][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880332c8000: abort rx timeout. Force session deactivation [ 233.491157][T10380] vlan3: entered promiscuous mode [ 233.527340][T10380] bridge0: entered promiscuous mode [ 233.580768][T10380] vlan3: entered allmulticast mode [ 233.954934][T10402] lo speed is unknown, defaulting to 1000 [ 234.185000][T10410] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 234.263482][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.341724][T10414] bond0: (slave veth9): Enslaving as an active interface with a down link [ 234.762361][T10432] syzkaller1: entered promiscuous mode [ 234.771902][T10432] syzkaller1: entered allmulticast mode [ 234.784581][T10435] netlink: 'syz.2.1350': attribute type 3 has an invalid length. [ 234.806771][T10436] syzkaller1: entered promiscuous mode [ 234.812296][T10436] syzkaller1: entered allmulticast mode [ 234.892380][T10439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.914737][T10442] IPVS: set_ctl: invalid protocol: 56 33.0.1.0:0 [ 235.288847][T10454] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1355'. [ 235.298153][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 235.307699][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'. [ 235.354592][T10452] xt_hashlimit: size too large, truncated to 1048576 [ 235.369385][T10452] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 235.413348][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 235.422712][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 235.578608][T10458] vlan2: entered promiscuous mode [ 235.583831][T10458] team0: entered promiscuous mode [ 235.589689][T10458] team0: Device vlan2 is already an upper device of the team interface [ 235.741887][T10464] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.1359'. [ 235.754716][T10464] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.1359'. [ 235.832105][T10470] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1362'. [ 236.267976][T10494] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 236.400799][T10504] netlink: 'syz.4.1370': attribute type 2 has an invalid length. [ 236.437294][T10504] k›*·]‘: entered promiscuous mode [ 236.473870][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 236.487320][ T2983] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 236.770773][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'. [ 236.876973][T10529] ip6gre1: entered promiscuous mode [ 237.045427][T10529] netlink: 'syz.1.1381': attribute type 29 has an invalid length. [ 237.250681][T10544] bond0: (slave veth9): Releasing active interface [ 237.337647][T10550] syzkaller1: entered allmulticast mode [ 237.691430][T10529] syz.1.1381 (10529) used greatest stack depth: 19016 bytes left [ 237.823511][T10570] xt_hashlimit: size too large, truncated to 1048576 [ 237.926821][T10576] smc: net device veth1_to_team applied user defined pnetid SYZ2 [ 237.946811][T10576] smc: net device veth1_to_team erased user defined pnetid SYZ2 [ 238.076641][T10582] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 238.119245][T10582] team0: Device ipvlan1 failed to register rx_handler [ 238.142477][T10584] macsec0: entered promiscuous mode [ 238.152781][T10584] macsec0: entered allmulticast mode [ 238.174423][T10585] veth1_macvtap: entered promiscuous mode [ 238.182232][T10585] macsec0: left promiscuous mode [ 238.187770][T10585] veth1_macvtap: left promiscuous mode [ 238.193521][T10585] macsec0: left allmulticast mode [ 238.386786][T10594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.050292][ T3019] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 239.625044][T10647] pim6reg: entered allmulticast mode [ 239.631807][T10651] pim6reg: left allmulticast mode [ 239.754909][T10660] bond1: (slave veth7): Releasing active interface [ 239.800228][T10660] bond1: (slave veth7): the permanent HWaddr of slave - 06:3e:ef:8d:a3:11 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 239.861146][T10660] bond1: (slave veth9): Releasing active interface [ 240.037527][T10672] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 240.448213][T10700] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 240.901236][T10713] lo speed is unknown, defaulting to 1000 [ 241.122384][T10734] syzkaller1: entered promiscuous mode [ 241.136443][T10734] syzkaller1: entered allmulticast mode [ 241.210775][T10740] netlink: 'syz.0.1438': attribute type 1 has an invalid length. [ 241.225798][T10740] __nla_validate_parse: 8 callbacks suppressed [ 241.225819][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'. [ 241.945068][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 241.960456][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 242.147554][T10779] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 242.180552][T10779] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 242.248428][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 242.824681][T10763] syz.0.1447: vmalloc error: size 592318464, failed to allocated page array size 1156872, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 242.898446][T10763] CPU: 0 UID: 0 PID: 10763 Comm: syz.0.1447 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 242.898480][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.898493][T10763] Call Trace: [ 242.898501][T10763] [ 242.898510][T10763] dump_stack_lvl+0x241/0x360 [ 242.898550][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.898580][T10763] ? __pfx__printk+0x10/0x10 [ 242.898609][T10763] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 242.898642][T10763] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 242.898671][T10763] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 242.898705][T10763] warn_alloc+0x27c/0x410 [ 242.898739][T10763] ? __pfx_warn_alloc+0x10/0x10 [ 242.898769][T10763] ? ip_set_sockfn_get+0x1bf/0xe60 [ 242.898790][T10763] ? __get_vm_area_node+0x1c8/0x2d0 [ 242.898820][T10763] ? __get_vm_area_node+0x25c/0x2d0 [ 242.898858][T10763] __vmalloc_node_range_noprof+0x634/0x1390 [ 242.898913][T10763] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.898942][T10763] ? bpf_lsm_capable+0x9/0x10 [ 242.898968][T10763] ? ip_set_sockfn_get+0x1bf/0xe60 [ 242.898990][T10763] vmalloc_noprof+0x79/0x90 [ 242.899009][T10763] ? ip_set_sockfn_get+0x1bf/0xe60 [ 242.899030][T10763] ip_set_sockfn_get+0x1bf/0xe60 [ 242.899053][T10763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.899086][T10763] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 242.899121][T10763] nf_getsockopt+0x299/0x2c0 [ 242.899160][T10763] ip_getsockopt+0x226/0x2e0 [ 242.899191][T10763] ? __pfx_ip_getsockopt+0x10/0x10 [ 242.899216][T10763] ? __lock_acquire+0xa50/0xd80 [ 242.899251][T10763] dccp_getsockopt+0x155/0x1920 [ 242.899290][T10763] ? __pfx_dccp_getsockopt+0x10/0x10 [ 242.899321][T10763] ? sock_common_getsockopt+0x2e/0xb0 [ 242.899349][T10763] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 242.899381][T10763] do_sock_getsockopt+0x391/0x740 [ 242.899410][T10763] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 242.899428][T10763] ? __fget_files+0x2a/0x420 [ 242.899449][T10763] ? __fget_files+0x39d/0x420 [ 242.899467][T10763] ? __fget_files+0x2a/0x420 [ 242.899495][T10763] __x64_sys_getsockopt+0x2a3/0x370 [ 242.899525][T10763] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 242.899555][T10763] ? do_syscall_64+0xb6/0x230 [ 242.899586][T10763] do_syscall_64+0xf3/0x230 [ 242.899612][T10763] ? clear_bhb_loop+0x45/0xa0 [ 242.899637][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.899657][T10763] RIP: 0033:0x7f612f98d169 [ 242.899676][T10763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.899694][T10763] RSP: 002b:00007f61307d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 242.899716][T10763] RAX: ffffffffffffffda RBX: 00007f612fba6080 RCX: 00007f612f98d169 [ 242.899731][T10763] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000009 [ 242.899743][T10763] RBP: 00007f612fa0e990 R08: 0000200000000100 R09: 0000000000000000 [ 242.899757][T10763] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.899769][T10763] R13: 0000000000000000 R14: 00007f612fba6080 R15: 00007ffc9379dc98 [ 242.899802][T10763] [ 242.899810][T10763] Mem-Info: [ 242.962816][T10808] xt_l2tp: invalid flags combination: c [ 242.998513][T10763] active_anon:4015 inactive_anon:0 isolated_anon:0 [ 242.998513][T10763] active_file:1800 inactive_file:38368 isolated_file:0 [ 242.998513][T10763] unevictable:768 dirty:283 writeback:0 [ 242.998513][T10763] slab_reclaimable:10491 slab_unreclaimable:101552 [ 242.998513][T10763] mapped:28810 shmem:1440 pagetables:757 [ 242.998513][T10763] sec_pagetables:0 bounce:0 [ 242.998513][T10763] kernel_misc_reclaimable:0 [ 242.998513][T10763] free:1319094 free_pcp:973 free_cma:0 [ 243.271335][T10763] Node 0 active_anon:16160kB inactive_anon:0kB active_file:7200kB inactive_file:153396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115240kB dirty:1132kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10912kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.307641][T10817] FAULT_INJECTION: forcing a failure. [ 243.307641][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 243.321025][T10817] CPU: 0 UID: 0 PID: 10817 Comm: syz.3.1462 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 243.321056][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.321070][T10817] Call Trace: [ 243.321079][T10817] [ 243.321087][T10817] dump_stack_lvl+0x241/0x360 [ 243.321125][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.321151][T10817] ? __pfx__printk+0x10/0x10 [ 243.321179][T10817] ? __pfx___might_resched+0x10/0x10 [ 243.321204][T10817] should_fail_ex+0x424/0x570 [ 243.321227][T10817] should_failslab+0xac/0x100 [ 243.321267][T10817] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 243.321292][T10817] ? __alloc_skb+0x1c2/0x480 [ 243.321307][T10817] ? tipc_nl_compat_doit+0x275/0x610 [ 243.321329][T10817] __alloc_skb+0x1c2/0x480 [ 243.321344][T10817] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 243.321365][T10817] ? __pfx___alloc_skb+0x10/0x10 [ 243.321387][T10817] ? bpf_lsm_capable+0x9/0x10 [ 243.321411][T10817] tipc_get_err_tlv+0x33/0xe0 [ 243.321431][T10817] tipc_nl_compat_recv+0xf03/0x1590 [ 243.321455][T10817] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 243.321471][T10817] ? genl_get_cmd+0x612/0xce0 [ 243.321492][T10817] ? __pfx___mutex_lock+0x10/0x10 [ 243.321514][T10817] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 243.321536][T10817] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 243.321553][T10817] ? __pfx_genl_get_cmd+0x10/0x10 [ 243.321576][T10817] ? __local_bh_enable_ip+0x168/0x200 [ 243.321592][T10817] ? lockdep_hardirqs_on+0x9d/0x150 [ 243.321620][T10817] genl_rcv_msg+0xb38/0xf00 [ 243.321648][T10817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.321665][T10817] ? __dev_queue_xmit+0x1780/0x3f60 [ 243.321683][T10817] ? kasan_save_track+0x3f/0x80 [ 243.321700][T10817] ? __kasan_slab_alloc+0x66/0x80 [ 243.321726][T10817] ? do_syscall_64+0xf3/0x230 [ 243.321763][T10817] ? __lock_acquire+0xad5/0xd80 [ 243.321783][T10817] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 243.321814][T10817] netlink_rcv_skb+0x208/0x480 [ 243.321841][T10817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.321861][T10817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.321905][T10817] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.321936][T10817] genl_rcv+0x28/0x40 [ 243.321952][T10817] netlink_unicast+0x7f8/0x9a0 [ 243.321984][T10817] ? __pfx_netlink_unicast+0x10/0x10 [ 243.322084][T10817] ? skb_put+0x114/0x1f0 [ 243.322106][T10817] netlink_sendmsg+0x8c3/0xcd0 [ 243.322146][T10817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.322175][T10817] ? aa_sock_msg_perm+0x91/0x160 [ 243.322213][T10817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.322237][T10817] __sock_sendmsg+0x221/0x270 [ 243.322263][T10817] ____sys_sendmsg+0x523/0x860 [ 243.322290][T10817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.322305][T10817] ? __fget_files+0x2a/0x420 [ 243.322324][T10817] ? __fget_files+0x2a/0x420 [ 243.322348][T10817] __sys_sendmsg+0x271/0x360 [ 243.322371][T10817] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.322438][T10817] ? do_syscall_64+0xb6/0x230 [ 243.322463][T10817] do_syscall_64+0xf3/0x230 [ 243.322485][T10817] ? clear_bhb_loop+0x45/0xa0 [ 243.322506][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.322524][T10817] RIP: 0033:0x7fd01cf8d169 [ 243.322540][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.322555][T10817] RSP: 002b:00007fd01dd4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.322573][T10817] RAX: ffffffffffffffda RBX: 00007fd01d1a5fa0 RCX: 00007fd01cf8d169 [ 243.322586][T10817] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 243.322597][T10817] RBP: 00007fd01dd4b090 R08: 0000000000000000 R09: 0000000000000000 [ 243.322607][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.322617][T10817] R13: 0000000000000000 R14: 00007fd01d1a5fa0 R15: 00007ffe986c2108 [ 243.322644][T10817] [ 243.406964][T10763] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.764823][T10763] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.802187][T10763] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 243.820737][T10763] Node 0 DMA32 free:1338048kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:16052kB inactive_anon:0kB active_file:7200kB inactive_file:153296kB unevictable:1536kB writepending:1132kB present:3129332kB managed:2547224kB mlocked:0kB bounce:0kB free_pcp:12640kB local_pcp:2032kB free_cma:0kB [ 243.859449][T10763] lowmem_reserve[]: 0 0 0 0 0 [ 243.864365][T10763] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.907790][T10763] lowmem_reserve[]: 0 0 0 0 0 [ 243.927812][T10763] Node 1 Normal free:3910416kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.971115][T10763] lowmem_reserve[]: 0 0 0 0 0 [ 243.976510][T10763] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.990254][T10763] Node 0 DMA32: 2*4kB (UE) 272*8kB (UME) 232*16kB (UME) 149*32kB (ME) 285*64kB (UME) 327*128kB (UM) 69*256kB (UM) 13*512kB (UME) 8*1024kB (UM) 2*2048kB (U) 300*4096kB (UM) = 1336168kB [ 244.010711][T10763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.063888][T10763] Node 1 Normal: 246*4kB (UE) 61*8kB (UME) 41*16kB (UME) 206*32kB (UME) 98*64kB (UME) 25*128kB (UME) 10*256kB (UM) 11*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910416kB [ 244.086032][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 244.099971][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 244.109422][T10763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.121887][T10763] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.133118][T10763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.143838][T10763] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.144369][T10839] lo speed is unknown, defaulting to 1000 [ 244.154173][T10763] 41608 total pagecache pages [ 244.165130][T10763] 0 pages in swap cache [ 244.176648][T10763] Free swap = 124996kB [ 244.181015][T10763] Total swap = 124996kB [ 244.181652][ T8098] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 244.185353][T10763] 2097051 pages RAM [ 244.197557][T10763] 0 pages HighMem/MovableOnly [ 244.202392][T10763] 428587 pages reserved [ 244.209771][T10763] 0 pages cma reserved [ 244.520247][T10845] lo speed is unknown, defaulting to 1000 [ 244.697510][T10849] bond0: (slave wlan1): Releasing backup interface [ 245.730924][T10892] FAULT_INJECTION: forcing a failure. [ 245.730924][T10892] name failslab, interval 1, probability 0, space 0, times 0 [ 245.745054][T10892] CPU: 1 UID: 0 PID: 10892 Comm: syz.0.1487 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 245.745084][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.745107][T10892] Call Trace: [ 245.745116][T10892] [ 245.745124][T10892] dump_stack_lvl+0x241/0x360 [ 245.745163][T10892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.745194][T10892] ? __pfx__printk+0x10/0x10 [ 245.745218][T10892] ? do_syscall_64+0xf3/0x230 [ 245.745255][T10892] ? ref_tracker_alloc+0x316/0x4c0 [ 245.745281][T10892] should_fail_ex+0x424/0x570 [ 245.745309][T10892] should_failslab+0xac/0x100 [ 245.745338][T10892] kmem_cache_alloc_noprof+0x78/0x390 [ 245.745365][T10892] ? skb_clone+0x20c/0x390 [ 245.745394][T10892] skb_clone+0x20c/0x390 [ 245.745425][T10892] __netlink_deliver_tap+0x3c4/0x7f0 [ 245.745468][T10892] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.745496][T10892] netlink_deliver_tap+0x19d/0x1b0 [ 245.745527][T10892] netlink_sendskb+0x68/0x140 [ 245.745554][T10892] netlink_unicast+0x39f/0x9a0 [ 245.745591][T10892] ? __pfx_netlink_unicast+0x10/0x10 [ 245.745621][T10892] ? tipc_nl_compat_recv+0x1013/0x1590 [ 245.745650][T10892] tipc_nl_compat_recv+0x10dc/0x1590 [ 245.745677][T10892] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 245.745697][T10892] ? genl_get_cmd+0x612/0xce0 [ 245.745722][T10892] ? __pfx___mutex_lock+0x10/0x10 [ 245.745747][T10892] ? __pfx_tipc_nl_node_set_link+0x10/0x10 [ 245.745774][T10892] ? __pfx_tipc_nl_compat_link_set+0x10/0x10 [ 245.745794][T10892] ? __pfx_genl_get_cmd+0x10/0x10 [ 245.745823][T10892] ? __local_bh_enable_ip+0x168/0x200 [ 245.745842][T10892] ? lockdep_hardirqs_on+0x9d/0x150 [ 245.745877][T10892] genl_rcv_msg+0xb38/0xf00 [ 245.745912][T10892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.745931][T10892] ? __dev_queue_xmit+0x1780/0x3f60 [ 245.745952][T10892] ? kasan_save_track+0x3f/0x80 [ 245.745989][T10892] ? __kasan_slab_alloc+0x66/0x80 [ 245.746025][T10892] ? do_syscall_64+0xf3/0x230 [ 245.746070][T10892] ? __lock_acquire+0xad5/0xd80 [ 245.746094][T10892] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 245.746133][T10892] netlink_rcv_skb+0x208/0x480 [ 245.746164][T10892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.746190][T10892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.746246][T10892] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.746285][T10892] genl_rcv+0x28/0x40 [ 245.746306][T10892] netlink_unicast+0x7f8/0x9a0 [ 245.746345][T10892] ? __pfx_netlink_unicast+0x10/0x10 [ 245.746375][T10892] ? skb_put+0x114/0x1f0 [ 245.746400][T10892] netlink_sendmsg+0x8c3/0xcd0 [ 245.746445][T10892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.746482][T10892] ? aa_sock_msg_perm+0x91/0x160 [ 245.746517][T10892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.746545][T10892] __sock_sendmsg+0x221/0x270 [ 245.746576][T10892] ____sys_sendmsg+0x523/0x860 [ 245.746608][T10892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.746628][T10892] ? __fget_files+0x2a/0x420 [ 245.746651][T10892] ? __fget_files+0x2a/0x420 [ 245.746682][T10892] __sys_sendmsg+0x271/0x360 [ 245.746711][T10892] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.746798][T10892] ? do_syscall_64+0xb6/0x230 [ 245.746829][T10892] do_syscall_64+0xf3/0x230 [ 245.746855][T10892] ? clear_bhb_loop+0x45/0xa0 [ 245.746881][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.746910][T10892] RIP: 0033:0x7f612f98d169 [ 245.746929][T10892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.746947][T10892] RSP: 002b:00007f61307f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.746969][T10892] RAX: ffffffffffffffda RBX: 00007f612fba5fa0 RCX: 00007f612f98d169 [ 245.746984][T10892] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 245.746998][T10892] RBP: 00007f61307f2090 R08: 0000000000000000 R09: 0000000000000000 [ 245.747010][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.747028][T10892] R13: 0000000000000000 R14: 00007f612fba5fa0 R15: 00007ffc9379dc98 [ 245.747063][T10892] [ 245.839690][T10884] lo speed is unknown, defaulting to 1000 [ 246.018585][T10894] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1488'. [ 246.191323][T10890] lo speed is unknown, defaulting to 1000 [ 246.221587][T10896] lo: left allmulticast mode [ 246.308140][T10899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.570503][T10896] wg2: left promiscuous mode [ 246.575172][T10896] wg2: left allmulticast mode [ 246.666954][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 246.713647][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 246.738758][T10896] macvlan0: left promiscuous mode [ 246.885848][T10896] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.926418][T10896] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.936352][T10896] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.960886][T10896] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.989565][T10896] geneve2: left allmulticast mode [ 247.015571][T10896] bond3: left promiscuous mode [ 247.034294][T10896] veth3: left promiscuous mode [ 247.049004][T10896] vlan3: left promiscuous mode [ 247.054595][T10896] bridge0: left promiscuous mode [ 247.061505][T10896] vlan3: left allmulticast mode [ 247.069439][T10896] syz.4.1489 (10896) used greatest stack depth: 18920 bytes left [ 248.292706][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 248.659861][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 248.669813][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 248.894433][T10985] lo speed is unknown, defaulting to 1000 [ 249.282629][T11011] FAULT_INJECTION: forcing a failure. [ 249.282629][T11011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.298387][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.2.1523 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 249.298421][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.298435][T11011] Call Trace: [ 249.298443][T11011] [ 249.298452][T11011] dump_stack_lvl+0x241/0x360 [ 249.298491][T11011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.298522][T11011] ? __pfx__printk+0x10/0x10 [ 249.298566][T11011] should_fail_ex+0x424/0x570 [ 249.298594][T11011] _copy_from_user+0x2d/0xb0 [ 249.298626][T11011] copy_msghdr_from_user+0xb3/0x580 [ 249.298661][T11011] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 249.298687][T11011] ? __fget_files+0x2a/0x420 [ 249.298719][T11011] ? __fget_files+0x2a/0x420 [ 249.298749][T11011] __sys_sendmmsg+0x361/0x7b0 [ 249.298786][T11011] ? __pfx___sys_sendmmsg+0x10/0x10 [ 249.298848][T11011] ? rcu_read_lock_any_held+0xbb/0x160 [ 249.298879][T11011] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 249.298912][T11011] ? vfs_write+0xb29/0xd10 [ 249.298948][T11011] ? ksys_write+0x24e/0x2d0 [ 249.298975][T11011] ? __mutex_unlock_slowpath+0x229/0x800 [ 249.299037][T11011] ? ksys_write+0x275/0x2d0 [ 249.299075][T11011] __x64_sys_sendmmsg+0xa0/0xb0 [ 249.299100][T11011] do_syscall_64+0xf3/0x230 [ 249.299127][T11011] ? clear_bhb_loop+0x45/0xa0 [ 249.299153][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.299174][T11011] RIP: 0033:0x7f907098d169 [ 249.299192][T11011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.299210][T11011] RSP: 002b:00007f907177a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.299231][T11011] RAX: ffffffffffffffda RBX: 00007f9070ba5fa0 RCX: 00007f907098d169 [ 249.299247][T11011] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 000000000000000b [ 249.299260][T11011] RBP: 00007f907177a090 R08: 0000000000000000 R09: 0000000000000000 [ 249.299273][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.299285][T11011] R13: 0000000000000000 R14: 00007f9070ba5fa0 R15: 00007ffc5df1f628 [ 249.299318][T11011] [ 249.547056][T11014] FAULT_INJECTION: forcing a failure. [ 249.547056][T11014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.602613][T11014] CPU: 1 UID: 0 PID: 11014 Comm: syz.4.1526 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 249.602645][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.602658][T11014] Call Trace: [ 249.602666][T11014] [ 249.602676][T11014] dump_stack_lvl+0x241/0x360 [ 249.602713][T11014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.602754][T11014] ? __pfx__printk+0x10/0x10 [ 249.602796][T11014] should_fail_ex+0x424/0x570 [ 249.602822][T11014] _copy_from_user+0x2d/0xb0 [ 249.602854][T11014] kstrtouint_from_user+0xce/0x1a0 [ 249.602884][T11014] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 249.602912][T11014] ? __lock_acquire+0xad5/0xd80 [ 249.602946][T11014] proc_fail_nth_write+0xac/0x2d0 [ 249.602969][T11014] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 249.602997][T11014] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 249.603026][T11014] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 249.603048][T11014] vfs_write+0x2bc/0xd10 [ 249.603078][T11014] ? fdget_pos+0x247/0x310 [ 249.603101][T11014] ? __pfx_vfs_write+0x10/0x10 [ 249.603128][T11014] ? __fget_files+0x2a/0x420 [ 249.603149][T11014] ? __fget_files+0x39d/0x420 [ 249.603166][T11014] ? __fget_files+0x2a/0x420 [ 249.603195][T11014] ksys_write+0x19d/0x2d0 [ 249.603222][T11014] ? __pfx_ksys_write+0x10/0x10 [ 249.603254][T11014] ? do_syscall_64+0xb6/0x230 [ 249.603284][T11014] do_syscall_64+0xf3/0x230 [ 249.603310][T11014] ? clear_bhb_loop+0x45/0xa0 [ 249.603335][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.603355][T11014] RIP: 0033:0x7f8849d8bc1f [ 249.603373][T11014] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 249.603390][T11014] RSP: 002b:00007f8849bf7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 249.603411][T11014] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8849d8bc1f [ 249.603425][T11014] RDX: 0000000000000001 RSI: 00007f8849bf70a0 RDI: 0000000000000004 [ 249.603438][T11014] RBP: 00007f8849bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.603451][T11014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 249.603464][T11014] R13: 0000000000000000 R14: 00007f8849fa5fa0 R15: 00007ffdceddfca8 [ 249.603496][T11014] [ 250.200156][T11037] lo speed is unknown, defaulting to 1000 [ 250.329414][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 250.361863][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 250.390174][T11044] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1535'. [ 250.511113][T11052] FAULT_INJECTION: forcing a failure. [ 250.511113][T11052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.525487][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.4.1537 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 250.525519][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.525532][T11052] Call Trace: [ 250.525540][T11052] [ 250.525549][T11052] dump_stack_lvl+0x241/0x360 [ 250.525589][T11052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.525619][T11052] ? __pfx__printk+0x10/0x10 [ 250.525661][T11052] should_fail_ex+0x424/0x570 [ 250.525689][T11052] _copy_to_user+0x31/0xb0 [ 250.525722][T11052] simple_read_from_buffer+0xc4/0x170 [ 250.525757][T11052] proc_fail_nth_read+0x1ef/0x260 [ 250.525783][T11052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.525809][T11052] ? rw_verify_area+0x246/0x630 [ 250.525831][T11052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.525855][T11052] vfs_read+0x21f/0xb90 [ 250.525884][T11052] ? __pfx___mutex_lock+0x10/0x10 [ 250.525912][T11052] ? __pfx_vfs_read+0x10/0x10 [ 250.525939][T11052] ? __fget_files+0x2a/0x420 [ 250.525960][T11052] ? __fget_files+0x39d/0x420 [ 250.525977][T11052] ? __fget_files+0x2a/0x420 [ 250.526007][T11052] ksys_read+0x19d/0x2d0 [ 250.526033][T11052] ? __pfx_ksys_read+0x10/0x10 [ 250.526067][T11052] ? do_syscall_64+0xb6/0x230 [ 250.526098][T11052] do_syscall_64+0xf3/0x230 [ 250.526123][T11052] ? clear_bhb_loop+0x45/0xa0 [ 250.526149][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.526168][T11052] RIP: 0033:0x7f8849d8bb7c [ 250.526187][T11052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.526205][T11052] RSP: 002b:00007f8849bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.526228][T11052] RAX: ffffffffffffffda RBX: 00007f8849fa5fa0 RCX: 00007f8849d8bb7c [ 250.526243][T11052] RDX: 000000000000000f RSI: 00007f8849bf70a0 RDI: 000000000000000c [ 250.526256][T11052] RBP: 00007f8849bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.526269][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.526281][T11052] R13: 0000000000000000 R14: 00007f8849fa5fa0 R15: 00007ffdceddfca8 [ 250.526315][T11052] [ 250.774590][T11054] lo speed is unknown, defaulting to 1000 [ 251.050883][T11066] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 251.227430][T11067] tap0: tun_chr_ioctl cmd 1074025677 [ 251.233047][T11067] tap0: linktype set to 6 [ 251.365092][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1545'. [ 251.432765][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 251.703662][T11096] syzkaller1: entered promiscuous mode [ 251.710457][T11096] syzkaller1: entered allmulticast mode [ 252.215742][T11101] lo speed is unknown, defaulting to 1000 [ 252.295291][T11105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1553'. [ 252.663449][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 252.961030][T11137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.217066][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 253.235395][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 253.256033][T11143] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1568'. [ 253.702750][T11168] ip6tnl2: entered promiscuous mode [ 253.711382][T11168] ip6tnl2: entered allmulticast mode [ 253.756900][T11168] bridge2: entered promiscuous mode [ 254.144122][T11191] netlink: 'syz.0.1576': attribute type 27 has an invalid length. [ 254.229051][T11193] syzkaller1: entered promiscuous mode [ 254.242813][T11193] syzkaller1: entered allmulticast mode [ 254.679197][T11206] netlink: 'syz.3.1585': attribute type 4 has an invalid length. [ 255.522686][T11243] netlink: 'syz.4.1597': attribute type 1 has an invalid length. [ 255.607121][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 255.613484][T11243] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 255.634866][T11243] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 255.648641][T11243] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 255.659178][T11243] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 255.691806][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.694453][T11243] bond4: (slave geneve3): making interface the new active one [ 255.710326][T11243] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 256.117193][T11265] netlink: 'syz.3.1605': attribute type 8 has an invalid length. [ 256.125071][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 256.334852][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 256.446453][T11267] netlink: 'syz.0.1603': attribute type 5 has an invalid length. [ 256.942508][T11294] SET target dimension over the limit! [ 256.991597][T11297] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1618'. [ 257.009673][T11297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.291157][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 257.500392][T11318] netlink: 'syz.1.1625': attribute type 4 has an invalid length. [ 257.521892][ T5922] lo speed is unknown, defaulting to 1000 [ 257.528722][ T5922] syz1: Port: 1 Link ACTIVE [ 258.285828][T11367] tls_set_device_offload_rx: netdev not found [ 258.369052][T11372] ip6gre1: entered promiscuous mode [ 258.595304][T11386] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 258.623704][T11386] netlink: 'syz.1.1646': attribute type 2 has an invalid length. [ 259.434119][T11434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.976873][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1670'. [ 260.056532][T11460] tun0: tun_chr_ioctl cmd 2147767520 [ 260.223764][T11468] netlink: 'syz.3.1671': attribute type 10 has an invalid length. [ 260.334215][T11468] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 260.400684][T11480] sock: sock_timestamping_bind_phc: sock not bind to device [ 260.468927][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 260.485238][T11468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1671'. [ 261.026021][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 261.035161][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 261.651434][T11539] bond0: (slave wlan1): Releasing backup interface [ 261.801238][T11543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1695'. [ 262.083452][T11553] syzkaller1: entered promiscuous mode [ 262.092536][T11553] syzkaller1: entered allmulticast mode [ 262.392147][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 262.434823][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1704'. [ 262.457011][T11571] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1704'. [ 262.681584][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 262.692592][T11582] IPv6: sit2: Disabled Multicast RS [ 264.124156][T11605] veth3: left promiscuous mode [ 264.132827][T11605] erspan1: left promiscuous mode [ 264.141953][T11605] erspan1: left allmulticast mode [ 264.184146][T11605] gretap1: left promiscuous mode [ 264.192816][T11605] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.203873][T11605] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.213609][T11605] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.222368][T11605] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.239822][T11605] ip6tnl2: left promiscuous mode [ 264.247626][T11605] ip6tnl2: left allmulticast mode [ 264.259506][T11605] bridge2: left promiscuous mode [ 264.535075][T11653] syzkaller1: entered promiscuous mode [ 264.542077][T11653] syzkaller1: entered allmulticast mode [ 265.522142][T11690] lo speed is unknown, defaulting to 1000 [ 265.645787][T11706] __nla_validate_parse: 2 callbacks suppressed [ 265.645812][T11706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1742'. [ 265.888875][T11714] sctp: [Deprecated]: syz.1.1746 (pid 11714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.888875][T11714] Use struct sctp_sack_info instead [ 266.080769][T11720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.110142][T11720] team0: Port device bond2 added [ 266.211066][T11727] team0: Port device bond2 removed [ 266.476237][T11734] sctp: [Deprecated]: syz.3.1752 (pid 11734) Use of int in max_burst socket option. [ 266.476237][T11734] Use struct sctp_assoc_value instead [ 266.653797][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 266.689440][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 266.696129][ T5849] Bluetooth: hci4: link tx timeout [ 266.703837][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.716607][ T5152] Bluetooth: hci4: link tx timeout [ 266.721774][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.742896][ T5152] Bluetooth: hci4: link tx timeout [ 266.749541][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.757471][ T5152] Bluetooth: hci4: link tx timeout [ 266.762613][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.840923][T11750] xt_ecn: cannot match TCP bits for non-tcp packets [ 267.209845][T11765] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 267.343962][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1765'. [ 267.681628][T11787] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1771'. [ 267.729543][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 267.763188][T11787] gre0: entered allmulticast mode [ 267.785506][T11787] netlink: 'syz.1.1771': attribute type 8 has an invalid length. [ 267.845342][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 267.966545][T11801] netlink: 'syz.1.1775': attribute type 27 has an invalid length. [ 267.984957][T11801] gre0: left allmulticast mode [ 267.991035][T11801] gretap0: left promiscuous mode [ 268.215459][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 268.267837][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 268.279433][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 268.414423][T11801] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.427643][T11801] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.440091][T11801] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.450614][T11801] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.465443][T11801] ip6gre1: left promiscuous mode [ 268.505215][T10907] lo speed is unknown, defaulting to 1000 [ 268.515278][T10907] syz1: Port: 1 Link DOWN [ 268.562648][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.584195][T11803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.614833][ T24] lo speed is unknown, defaulting to 1000 [ 268.621258][ T24] syz1: Port: 1 Link ACTIVE [ 268.806202][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 269.284711][T11852] syzkaller1: entered promiscuous mode [ 269.303626][T11852] syzkaller1: entered allmulticast mode [ 269.400220][T11848] syz.3.1789 (11848) used greatest stack depth: 18176 bytes left [ 270.425673][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.434676][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.448614][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.456803][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.464579][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.582922][T11896] lo speed is unknown, defaulting to 1000 [ 270.902990][T11896] chnl_net:caif_netlink_parms(): no params data found [ 270.969371][T11901] xt_hashlimit: size too large, truncated to 1048576 [ 271.063567][T11909] __nla_validate_parse: 3 callbacks suppressed [ 271.063590][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 271.500981][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.516708][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.536831][T11896] bridge_slave_0: entered allmulticast mode [ 271.552925][T11896] bridge_slave_0: entered promiscuous mode [ 271.575217][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.603433][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.625120][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 271.625387][T11896] bridge_slave_1: entered allmulticast mode [ 271.676526][T11896] bridge_slave_1: entered promiscuous mode [ 271.771124][T11896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.808427][T11896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.845211][T11936] netlink: 'syz.4.1818': attribute type 58 has an invalid length. [ 271.857256][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1818'. [ 271.905348][T11896] team0: Port device team_slave_0 added [ 271.920641][T11896] team0: Port device team_slave_1 added [ 271.964438][T11942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1821'. [ 272.008489][T11945] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1821'. [ 272.024241][T11896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.046789][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.103590][T11896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.142004][T11896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.161197][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.200716][T11896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.346796][T11896] hsr_slave_0: entered promiscuous mode [ 272.355686][T11896] hsr_slave_1: entered promiscuous mode [ 272.395247][T11896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.423585][T11896] Cannot create hsr debugfs directory [ 272.486399][ T5849] Bluetooth: hci2: command tx timeout [ 272.666942][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.800134][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.844994][T11973] sch_fq: defrate 2048 ignored. [ 272.859355][T11974] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 272.925383][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.032882][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.338242][T11995] nbd: must specify at least one socket [ 273.382403][T11997] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 273.462129][T12002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 274.034044][ T12] bond0 (unregistering): Released all slaves [ 274.155736][ T12] bond1 (unregistering): Released all slaves [ 274.286864][ T12] bond2 (unregistering): Released all slaves [ 274.314747][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 274.438167][ T12] : left promiscuous mode [ 274.568700][ T5849] Bluetooth: hci2: command tx timeout [ 274.589398][ T12] tipc: Disabling bearer [ 274.602736][ T12] tipc: Disabling bearer [ 274.614908][T12017] lo speed is unknown, defaulting to 1000 [ 274.621771][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'. [ 274.631097][ T12] tipc: Left network mode [ 274.634198][T12029] bridge0: entered promiscuous mode [ 274.893180][T12035] FAULT_INJECTION: forcing a failure. [ 274.893180][T12035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.902081][T12034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.919720][T12035] CPU: 1 UID: 0 PID: 12035 Comm: syz.2.1848 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 274.919750][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.919763][T12035] Call Trace: [ 274.919771][T12035] [ 274.919780][T12035] dump_stack_lvl+0x241/0x360 [ 274.919821][T12035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.919852][T12035] ? __pfx__printk+0x10/0x10 [ 274.919896][T12035] should_fail_ex+0x424/0x570 [ 274.919924][T12035] _copy_from_user+0x2d/0xb0 [ 274.919956][T12035] sctp_setsockopt+0xc9/0x11e0 [ 274.919981][T12035] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 274.920011][T12035] do_sock_setsockopt+0x3b1/0x710 [ 274.920040][T12035] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 274.920059][T12035] ? __fget_files+0x2a/0x420 [ 274.920084][T12035] ? __fget_files+0x39d/0x420 [ 274.920101][T12035] ? __fget_files+0x2a/0x420 [ 274.920130][T12035] __x64_sys_setsockopt+0x1ee/0x280 [ 274.920160][T12035] do_syscall_64+0xf3/0x230 [ 274.920188][T12035] ? clear_bhb_loop+0x45/0xa0 [ 274.920213][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.920233][T12035] RIP: 0033:0x7f907098d169 [ 274.920251][T12035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.920268][T12035] RSP: 002b:00007f907177a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 274.920291][T12035] RAX: ffffffffffffffda RBX: 00007f9070ba5fa0 RCX: 00007f907098d169 [ 274.920307][T12035] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 274.920319][T12035] RBP: 00007f907177a090 R08: 0000000000000008 R09: 0000000000000000 [ 274.920331][T12035] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 274.920344][T12035] R13: 0000000000000000 R14: 00007f9070ba5fa0 R15: 00007ffc5df1f628 [ 274.920384][T12035] [ 274.972797][T11896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.291222][T11896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.303207][T12038] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 275.334819][T12038] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1850'. [ 275.358048][T11896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.381062][T12045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1853'. [ 275.404751][ T12] hsr_slave_0: left promiscuous mode [ 275.420957][ T12] hsr_slave_1: left promiscuous mode [ 275.461242][ T12] veth1_macvtap: left promiscuous mode [ 275.472874][ T12] veth0_macvtap: left promiscuous mode [ 275.481888][ T12] veth1_vlan: left promiscuous mode [ 275.487617][ T12] veth0_vlan: left promiscuous mode [ 275.628397][ T12] [ 275.630769][ T12] ====================================================== [ 275.637853][ T12] WARNING: possible circular locking dependency detected [ 275.644881][ T12] 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 Not tainted [ 275.652014][ T12] ------------------------------------------------------ [ 275.659069][ T12] kworker/u8:0/12 is trying to acquire lock: [ 275.665131][ T12] ffff88805fd48e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 275.675348][ T12] [ 275.675348][ T12] but task is already holding lock: [ 275.682718][ T12] ffff88803586ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 275.694313][ T12] [ 275.694313][ T12] which lock already depends on the new lock. [ 275.694313][ T12] [ 275.704713][ T12] [ 275.704713][ T12] the existing dependency chain (in reverse order) is: [ 275.713724][ T12] [ 275.713724][ T12] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 275.722169][ T12] lock_acquire+0x116/0x2f0 [ 275.727200][ T12] __mutex_lock+0x1a5/0x10c0 [ 275.732326][ T12] dev_set_mtu+0x11c/0x270 [ 275.737273][ T12] team_add_slave+0x83b/0x28b0 [ 275.742561][ T12] do_set_master+0x579/0x730 [ 275.747669][ T12] do_setlink+0xf76/0x4390 [ 275.752607][ T12] rtnl_newlink+0x17e2/0x1fe0 [ 275.757809][ T12] rtnetlink_rcv_msg+0x80f/0xd70 [ 275.763272][ T12] netlink_rcv_skb+0x208/0x480 [ 275.768603][ T12] netlink_unicast+0x7f8/0x9a0 [ 275.773891][ T12] netlink_sendmsg+0x8c3/0xcd0 [ 275.779182][ T12] __sock_sendmsg+0x221/0x270 [ 275.784400][ T12] ____sys_sendmsg+0x523/0x860 [ 275.789770][ T12] __sys_sendmsg+0x271/0x360 [ 275.794882][ T12] do_syscall_64+0xf3/0x230 [ 275.799912][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.806501][ T12] [ 275.806501][ T12] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 275.814681][ T12] validate_chain+0xa69/0x24e0 [ 275.819979][ T12] __lock_acquire+0xad5/0xd80 [ 275.825178][ T12] lock_acquire+0x116/0x2f0 [ 275.830206][ T12] __mutex_lock+0x1a5/0x10c0 [ 275.835331][ T12] team_vlan_rx_kill_vid+0x36/0xe0 [ 275.841057][ T12] vlan_vid_del+0x483/0x770 [ 275.846088][ T12] vlan_device_event+0x23c/0x1e00 [ 275.851636][ T12] notifier_call_chain+0x1a5/0x3f0 [ 275.857272][ T12] dev_close_many+0x33e/0x4c0 [ 275.862480][ T12] unregister_netdevice_many_notify+0x628/0x2510 [ 275.869335][ T12] default_device_exit_batch+0x7ff/0x880 [ 275.875525][ T12] cleanup_net+0x8af/0xd60 [ 275.880475][ T12] process_scheduled_works+0xac3/0x18e0 [ 275.886544][ T12] worker_thread+0x870/0xd50 [ 275.891657][ T12] kthread+0x7b7/0x940 [ 275.896261][ T12] ret_from_fork+0x4b/0x80 [ 275.901207][ T12] ret_from_fork_asm+0x1a/0x30 [ 275.906586][ T12] [ 275.906586][ T12] other info that might help us debug this: [ 275.906586][ T12] [ 275.916808][ T12] Possible unsafe locking scenario: [ 275.916808][ T12] [ 275.924250][ T12] CPU0 CPU1 [ 275.929611][ T12] ---- ---- [ 275.934972][ T12] lock(&dev_instance_lock_key#3); [ 275.940184][ T12] lock(team->team_lock_key#2); [ 275.947664][ T12] lock(&dev_instance_lock_key#3); [ 275.955825][ T12] lock(team->team_lock_key#2); [ 275.960777][ T12] [ 275.960777][ T12] *** DEADLOCK *** [ 275.960777][ T12] [ 275.968925][ T12] 5 locks held by kworker/u8:0/12: [ 275.974029][ T12] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 275.984929][ T12] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 275.995477][ T12] #2: ffffffff900f0910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 276.004896][ T12] #3: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 276.014941][ T12] #4: ffff88803586ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 276.026967][ T12] [ 276.026967][ T12] stack backtrace: [ 276.032854][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 276.032877][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.032889][ T12] Workqueue: netns cleanup_net [ 276.032915][ T12] Call Trace: [ 276.032923][ T12] [ 276.032931][ T12] dump_stack_lvl+0x241/0x360 [ 276.032958][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.032982][ T12] ? __pfx__printk+0x10/0x10 [ 276.033006][ T12] ? print_lock+0x171/0x1a0 [ 276.033028][ T12] print_circular_bug+0x2e1/0x300 [ 276.033052][ T12] check_noncircular+0x142/0x160 [ 276.033077][ T12] validate_chain+0xa69/0x24e0 [ 276.033110][ T12] __lock_acquire+0xad5/0xd80 [ 276.033131][ T12] lock_acquire+0x116/0x2f0 [ 276.033147][ T12] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 276.033169][ T12] __mutex_lock+0x1a5/0x10c0 [ 276.033190][ T12] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 276.033215][ T12] ? __cancel_work+0x24c/0x390 [ 276.033238][ T12] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 276.033253][ T12] ? __cancel_work+0x2f0/0x390 [ 276.033273][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 276.033294][ T12] ? __pfx___cancel_work+0x10/0x10 [ 276.033317][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.033346][ T12] team_vlan_rx_kill_vid+0x36/0xe0 [ 276.033364][ T12] vlan_vid_del+0x483/0x770 [ 276.033384][ T12] vlan_device_event+0x23c/0x1e00 [ 276.033403][ T12] ? br_device_event+0x28f/0xae0 [ 276.033426][ T12] ? __pfx_phonet_device_notify+0x10/0x10 [ 276.033444][ T12] ? __pfx_vlan_device_event+0x10/0x10 [ 276.033461][ T12] ? __pfx_br_device_event+0x10/0x10 [ 276.033483][ T12] ? raw_notifier+0x9d/0x740 [ 276.033505][ T12] ? isotp_notifier+0xa4/0x6b0 [ 276.033522][ T12] ? cgw_notifier+0xd8/0x3b0 [ 276.033536][ T12] ? packet_notifier+0x76/0xa30 [ 276.033561][ T12] notifier_call_chain+0x1a5/0x3f0 [ 276.033585][ T12] dev_close_many+0x33e/0x4c0 [ 276.033610][ T12] ? __pfx_dev_close_many+0x10/0x10 [ 276.033638][ T12] unregister_netdevice_many_notify+0x628/0x2510 [ 276.033663][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 276.033683][ T12] ? __local_bh_enable_ip+0x168/0x200 [ 276.033700][ T12] ? batadv_tt_local_remove+0x119/0x230 [ 276.033718][ T12] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 276.033733][ T12] ? batadv_tt_local_remove+0x119/0x230 [ 276.033751][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 276.033777][ T12] ? unregister_netdevice_queue+0x2c4/0x400 [ 276.033800][ T12] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 276.033826][ T12] default_device_exit_batch+0x7ff/0x880 [ 276.033856][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 276.033881][ T12] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 276.033906][ T12] ? cfg802154_pernet_exit+0xc3/0xe0 [ 276.033921][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 276.033948][ T12] cleanup_net+0x8af/0xd60 [ 276.033975][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 276.034005][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 276.034023][ T12] process_scheduled_works+0xac3/0x18e0 [ 276.034055][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.034078][ T12] ? assign_work+0x367/0x3d0 [ 276.034098][ T12] worker_thread+0x870/0xd50 [ 276.034124][ T12] ? __kthread_parkme+0x1a8/0x200 [ 276.034145][ T12] ? __pfx_worker_thread+0x10/0x10 [ 276.034165][ T12] kthread+0x7b7/0x940 [ 276.034188][ T12] ? __pfx_worker_thread+0x10/0x10 [ 276.034213][ T12] ? __pfx_kthread+0x10/0x10 [ 276.034235][ T12] ? __pfx_kthread+0x10/0x10 [ 276.034257][ T12] ? __pfx_kthread+0x10/0x10 [ 276.034279][ T12] ? __pfx_kthread+0x10/0x10 [ 276.034301][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.034318][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 276.034337][ T12] ? __pfx_kthread+0x10/0x10 [ 276.034360][ T12] ret_from_fork+0x4b/0x80 [ 276.034376][ T12] ? __pfx_kthread+0x10/0x10 [ 276.034399][ T12] ret_from_fork_asm+0x1a/0x30 [ 276.034421][ T12] [ 276.646298][ T5849] Bluetooth: hci2: command tx timeout [ 276.990526][T11896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.121086][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.151330][T11896] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.165675][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.172866][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.189632][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.196895][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.357035][T11896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.391994][T11896] veth0_vlan: entered promiscuous mode [ 277.401438][T11896] veth1_vlan: entered promiscuous mode [ 277.424879][T11896] veth0_macvtap: entered promiscuous mode [ 277.433736][T11896] veth1_macvtap: entered promiscuous mode [ 277.449223][T11896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.462175][T11896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.473646][T11896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.483129][T11896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.493040][T11896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.502201][T11896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.528876][T11896] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 277.550944][ T8098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.552543][T11896] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 277.567946][ T8098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.590194][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.598538][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50