last executing test programs: 5.841357788s ago: executing program 2 (id=893): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000280)) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbfe, {0x80}}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4040000) (async) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4040000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r7, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x800) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r7, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000031401002abd70bb97dbe000ffdbdf250900020073797a3000000000080000000000000000000000000000000008000000000000000000003af0340d62d3d8871e2388e13a4055679409176c9aaca090e4bd1eb93068fde6e9ac38552b890d9417648098000dbb8ad6bd153540b03882e8d01227cbf81ec4fe13b6dc2e3251d722b0134bc95db9be8ef319aa46bf05b8193dfbcbcda52e79c959de81cf3334ad5f4a76c0ff819e01aba9f2204d868787fea41016ccf5066a80e2618f"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) 4.183566333s ago: executing program 0 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000", 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) (async) close(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) (async) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) (async) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r8, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x36, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e00000000000096f3e30307ae846a11fef93204856ea2f1fefaec", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r8) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="1d0000000420000000000000", @ANYRES32, @ANYBLOB="ea3491abcb24793141e8883e863fc7ac2ce89582d52c757d8c6dbde4056c9db2ac2a08a8254833b3e9f197e0856bd12c05cc09c63116d77bb5549501a134e27fbe88e8b9c7ad1682375ef61a96c632174b1061604d4780cd2101006eacd036533a0817f75d9887", @ANYRES64=r10], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="1d0000000420000000000000", @ANYRES32, @ANYBLOB="ea3491abcb24793141e8883e863fc7ac2ce89582d52c757d8c6dbde4056c9db2ac2a08a8254833b3e9f197e0856bd12c05cc09c63116d77bb5549501a134e27fbe88e8b9c7ad1682375ef61a96c632174b1061604d4780cd2101006eacd036533a0817f75d9887", @ANYRES64=r10], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r8, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000a80)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r8, 0xffffffffffffffff, 0x13, 0x30, 0xffffffffffffffff, @void, @void, @void, @value=r11, r10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='\v\x00\x00\x00\" \x00\x00', @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r10], 0x20) getsockopt$inet_int(r2, 0x10d, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) 4.048460641s ago: executing program 2 (id=896): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000004c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000880)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000036c0)=[{{&(0x7f0000000c80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x40000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='+jm\a\x00'], 0x5) syz_emit_ethernet(0x22, &(0x7f0000000340)={@remote, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x2}, 0x4, 0x0, 0x0, 0x0, "dbbb66db34a27ebd"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x355, 0x512, 0xa82, 0xf4b]}) 3.690667822s ago: executing program 0 (id=900): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20048000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000060000000c00000000000000", @ANYRES32, @ANYBLOB="00007300fcff7f000013f607fa0000f3ff000000058efafe3888fac89c50e2cdc5fa3849876ad33a0bbb0907e4cbf22d135b90d499031fa5bdbeaec55ef2cd76e0b0604070a471d8b1e60b6b3d32fbbf0febc8e2f6c89e843fedf4d2e62edd98d791ec29484daba25c6e61ecc400f4a0da20ff7e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1700000000000000040000000301000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80600087, r8}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.572009031s ago: executing program 2 (id=901): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x81, 0x4000105, 0xd1, 0x5, 0x9]}, &(0x7f0000000400)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000010000000000000000000"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) 3.34491261s ago: executing program 0 (id=902): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000100)) read(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) accept4$llc(r2, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff0000", @ANYRES32=r4, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e0001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4054895) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x7, &(0x7f0000000500)=@framed={{}, [@ringbuf_query]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000400)=""/77, &(0x7f0000000380)=0x4d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="c9ffffff", @ANYRES16=r0, @ANYBLOB="1709000026c656d7ac422e8a06cc2845aeeb5d000000000000010000c7080000000000080000000900000000000000080069705f76746930000000000000000000060402fc000fe00008001800ffffffff14002000ff0200000000000000"], 0x58}}, 0x0) r7 = socket(0x11, 0x2, 0x0) setsockopt(r7, 0x107, 0x1, &(0x7f00000001c0), 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3.282641667s ago: executing program 3 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x80400) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r6}, 0x10) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000100)={@local, @loopback, r6}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r6, 0x29, 0x3, 0x8, 0xfffffffd, 0x1e, @mcast2, @local, 0x8, 0x7800, 0x40, 0x5}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x120, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x1) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40002020, 0x0) 2.49983386s ago: executing program 4 (id=907): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000a80)={&(0x7f0000000400)=@in6={0xa, 0x4e23, 0x2, @mcast2, 0x2}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000440)="a3", 0x1}], 0x1, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0x5f5c, 0x3, 0x3, 0x9}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}], 0x38, 0x20040011}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555e0c23c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fddb"]}]}, 0x114}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 2.363491198s ago: executing program 3 (id=909): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x8, 0x0, &(0x7f0000000e80)) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x6c}}, {0x28}}}}, 0x408) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r8, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) listen(r1, 0x0) 2.194703305s ago: executing program 0 (id=910): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3}}, 0x10) (async) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r0}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c0000002201000228bd7000ffdbdf251600000008004200", @ANYRES32=0xee01, @ANYBLOB="4fe4e6f158bc153c283b460a3e136312f471a379af30db7cf1196d790d0de73e2d207252a4e2aabbe186b14c1a6568917c72866addcb02658fb6896e6dca7f0a1f030e58ed28ffe01c0159cb3da9be85e8e762b06fe142a28dcbed2f5585d99185594a06833a893901c207f091704fa1b778647cfd1973ddf7c2cc41bfee8898dc3633b6c7c1bcb7c7e55c2df436ed50e0b19001f64edf4bda042e4b75bf89bd56eb01bba377d9d74bf24243b0a7d786c0851339b5423ead8da76ebea4cffc11bdfc129a68d4c5bc196e637c10e54c125c98d667046610a92e3da5b4ea0efe7ddf0ae7080e922fc0c182ccc2a024c6e375"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c0000002201000228bd7000ffdbdf251600000008004200", @ANYRES32=0xee01, @ANYBLOB="4fe4e6f158bc153c283b460a3e136312f471a379af30db7cf1196d790d0de73e2d207252a4e2aabbe186b14c1a6568917c72866addcb02658fb6896e6dca7f0a1f030e58ed28ffe01c0159cb3da9be85e8e762b06fe142a28dcbed2f5585d99185594a06833a893901c207f091704fa1b778647cfd1973ddf7c2cc41bfee8898dc3633b6c7c1bcb7c7e55c2df436ed50e0b19001f64edf4bda042e4b75bf89bd56eb01bba377d9d74bf24243b0a7d786c0851339b5423ead8da76ebea4cffc11bdfc129a68d4c5bc196e637c10e54c125c98d667046610a92e3da5b4ea0efe7ddf0ae7080e922fc0c182ccc2a024c6e375"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000020900010073797a30000000006b7ca7ee06d33341140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000020900010073797a30000000006b7ca7ee06d33341140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000300)="076aadc7b03e300cad576743cd16c00f4b5d32cf84c581cacf813ea8b690e78bdd4c481d72d7f415b0c523939c2f6804bb866c23114815d51193d7d9506bf4a14d8b6d595911841ed89b55ce462b4e370f98df2bdab8b70f55df99624fd976e01475b26704084d13cbba2bb01e8e7daaaa457295b0f06475bcd9739e7279fc194c67479e1ee6b28b5d40539cb536b23e15c7e439b0083e588cf573b8bad5d16d903dd8014b1a08fc3d92e9f2f8da0b6b", &(0x7f00000003c0)=""/78}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=r6, @ANYBLOB="00000000020000001400128000000100766c616e0000000000000280000005008100000000000480000001000900000003000000010001000000000001000300000008004040ffd551351b7be81042f942", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='ext4_discard_preallocations\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='ext4_discard_preallocations\x00', r7}, 0x18) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = epoll_create(0x7) epoll_create1(0x0) close(r9) (async) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000ed4f000000060a0b040000000000000000020000001c000480180001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a32000000000500074005000000140000001100010000000000000000000a00000a"], 0x7d}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.03313233s ago: executing program 3 (id=911): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r8, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000800e0000006823fcf77330b909b8c758b3b54f7233a8f679e51849601c3e36a482935a33628af59ab354ec760c71105425fd22f48332907938067aca2f17004aa690fd40ec5350f3"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="f3f7c286115b7372532ed55bf8c532e15184be5bc8052939f5e41bd7b0fde2725b2a32939b7f3655bf77ce5f851c2f6496386675863111556e671c53e80fe2c0d4f65ddeb731cf9991ed3a226078f436eb7709ef97e0d6652004defd3162cab226aa7a01ae3b043042447b0000000000"], 0x3c}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x81, 0x7, 0x5, 0x8000, r1, 0x6, '\x00', r9, r10, 0x0, 0x4, 0xc0000000, 0x0, @value=r10, @void, @void, @value}, 0x50) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x6, 0xbe, &(0x7f000000cf3d)=""/190, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000d00000100008c020000feffffff063902000f000100852000000300000095000000000200"/56], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r12}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2.030563863s ago: executing program 1 (id=912): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x344, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x138, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1478}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a076f06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2060}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf916}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6452}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76c5}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ccb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67b16593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2ec}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb60f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4899}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc03a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7ea58e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25e2f2e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6062d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x144a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358ee75d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe536}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b9d5358}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fcf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76a50d8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x791912eb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x364d5ec3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c0, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b1713a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5795295f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5033}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d23}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32dc8fa3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cf0}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e6c6335}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58349b1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdac2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb59f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25cbf3e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x215b7d64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b288c26}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79654825}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe0d141d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa820}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fb9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b686ae8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34e6aa1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x571fa403}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x601cd859}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ef471d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x549e2c63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x757f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a04}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bbd183f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x173b1fa4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75591f60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fa5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ae8a9f8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x257b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aa553fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fd3c566}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39650516}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x309f3337}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e0d8eeb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x344}, 0x1, 0x0, 0x0, 0x40010}, 0x10) syz_emit_ethernet(0x5eb, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c866839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb2a4f86f75a43"}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b049, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r8, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044010) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) listen(r10, 0x7f) 2.025587744s ago: executing program 4 (id=913): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, 0x0, 0x0, 0x8081) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x2, @private=0xa010102}}, 0x0, 0x0, 0x3f8, 0x0, 0x36}, 0x9c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000001300)={0x1, 0x4ba}) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x30}}], 0x1, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff9e48fc26ffffffff05", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1=0xe0000300}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000300)="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", &(0x7f0000000080)=""/88, &(0x7f0000000100)="ed8fa90586c09490c960fc484db380348c71df9004815ddb7ecc1a6b5da49e", &(0x7f0000000200)="e62783754f5446759d", 0x4, r1}, 0x38) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0x5, 0x4) close(r0) 1.762941796s ago: executing program 2 (id=914): unshare(0x24020400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004441) ppoll(&(0x7f0000000180)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 1.609470174s ago: executing program 0 (id=915): unshare(0x22020400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) unshare(0x20020000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) sendto$inet6(r3, &(0x7f0000000080)="b3", 0x1, 0x0, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0xb) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0xd, 0x12, r1, 0xfffff000) 1.608882406s ago: executing program 2 (id=916): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0xe}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xb}, 0x8) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x3ff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="e600"/20, @ANYRES32=0x0, @ANYBLOB="0500000001000000040080830000000040000000000000000087000000"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440100001000010000000000000020007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414390000000000000000000000000000000032000000e0000002000000000000000000000000000000000000000000000000000000000000200000000000030000000000000006000000000000000400000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000200000000000000df000000000000000000000000000000063500000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="040000ce0a2fb7972ff098d41d00"], 0x144}}, 0x4000) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x90}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4) 1.486833001s ago: executing program 1 (id=917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 1.195248918s ago: executing program 1 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000d80)="170000000200020000ffbe8ce7e1768814002b001303000afdff02a257fc5ad90900bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f4d31d3ec9404dee8bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a634cd36276a3afff51c7e40154", 0xb8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c0001000100"], 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="08003d3c00030000000500380001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 1.162253734s ago: executing program 3 (id=919): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x376c, 0x3, 0xb2f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'geneve0\x00', 0x200}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000040000000000000000000000a6000200020000000500020b24943958000000000055000000000000006500feff08000000950000000000000095854afdf73ce50edb57822f6b8c62efb5a2572be75af9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.054996567s ago: executing program 4 (id=920): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)="aba4abeb365e0a47e94d2c92b8eef13fd3e4795dd36b917d3e3e46d8aeafb5e0cf074f528a979b58426b128e334c2a176b066c22dfbe0f82804e38e5b15b6124660b431c44f924c3ef7f92800f4d087eee5d779ddb1bebd5daaf414fa9d3a8c136", 0x61) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0xffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00992ba7b55448f89714ea1458298bbb00008214000000000000000000e9fff7ffad84997b640000000000231f4ce4657f6e39222a166d6cbe449ab9df527bdd77"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="1874f620702858e04d15066f080000000000000000000000000000850800000500000085000000bb000000a700000000000000180000e9ffffff0000950000fa8ef005084d8db79e924e5d00"/88], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r5, 0x2, 0x1, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r6, 0x53, 0xd, 0x9}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e40)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="4f5d2b881d2493004d2904c788d0dae2d878eca1a999f8d30000000000000084f14565755c8a380a912794e525d2adf2152d0954befc11165c70cda7ed0a408d649ff15d88f18f46e6000000000000000000276b00000000006f45449b5a32b37f770b3b162a31e0e0697be60ffcdb507d2e705991d07e19307d22fe8691230813842c718c247da6205e0848d0055b3dd08caa001235e6b19abbfa8be12a3934563897e6b10db54f3e08590c5200d4913eb470c0aead7c2c7b3e5e04d4dcfa7ca4fc99bce377e4261d94b5f97d007ea10000", @ANYRES32=r6, @ANYBLOB="2313e88bd97742ab6f248617c781cc9366b0a00100835ce57997502c6bd7ef0a7388cd344f1eb594043bc80cadb22cc22825b72a89d5ff7b846d2aa542d3204cf64e6c61f1f44c55e74aba0f000000476de884cc6fa899fe7e", @ANYRES32=r2, @ANYRES64=r3], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 844.874943ms ago: executing program 4 (id=921): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x8, 0x0, &(0x7f0000000e80)) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x3f0}}, {0x28}}}}, 0x408) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r8, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) listen(r1, 0x0) 788.827302ms ago: executing program 3 (id=922): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f00000009c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x201, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c084}, 0x2004c080) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000100cd0000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000079100000000000006200000100cd0000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x89a0, &(0x7f0000000040)='.') (async) ioctl$sock_bt_hci(r6, 0x89a0, &(0x7f0000000040)='.') bind$llc(r2, &(0x7f0000000180)={0x1a, 0x100, 0x4, 0x10, 0xfe, 0x3, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d0, 0x230, 0x98, 0x230, 0x198, 0x98, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x6], 0x0, 0x6}}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04b10b08353efa3641776f513ae56fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87000000000000000525"}, 0xd8) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x800, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x26, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x800, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x26, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x83, &(0x7f0000000140)={r10}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x83, &(0x7f0000000140)={r10}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r10, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, &(0x7f00000000c0)=0x84) 686.411876ms ago: executing program 1 (id=923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 388.797683ms ago: executing program 4 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32], 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 329.019113ms ago: executing program 0 (id=925): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000124000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x1d259000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 275.705433ms ago: executing program 1 (id=926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002380), r3) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000140)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048855}, 0x8010) 249.098719ms ago: executing program 3 (id=927): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x20040600) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r3, 0x0, 0x0}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x18f, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x1, 0x6, 0x181, 0x66, 0x0, 0x7, 0x6, 0x0, @loopback, @rand_addr=0x64010102, {[@ssrr={0x89, 0xf, 0xa2, [@multicast2, @rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0x13, 0xec, [@multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}]}, @cipso={0x86, 0x18, 0x1, [{0x1, 0x12, "a4d367a193e620dff708f34daf2fcc19"}]}, @end]}}, {{0x4e20, 0x4e20, r6, 0x41424344, 0x0, 0x0, 0x19, 0xc2, 0xdd, 0x0, 0xfb2, {[@fastopen={0x22, 0xe, "d1ef6e89bd006c4a0ed424ec"}, @timestamp={0x8, 0xa, 0x9, 0x8000}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xe, 0xf989, "d3c0fe6e86af958b7c59"}, @md5sig={0x13, 0x12, "729a2dc5f4dc6d25d80939fe74e24506"}, @exp_fastopen={0xfe, 0x9, 0xf989, "e6a0d3842a"}, @window={0x3, 0x3, 0x8}, @exp_smc={0xfe, 0x6}]}}, {"409e62506a63d1bbbd4b4921b54828427c2492e0ee156c351a4094df4230180e84edb4bf30865e665fbe38adc6623b3da9889b2e326848f623d807b24866e59cbb3d59db84d059716c1df47298b5921d80122c0187b713f9569d36ce9b8f0ff0db43aacb7ff29fba0623ab24c452450ae236e07514dbdc0b2f896453da4e48a7d63e77d360b186392fa13267aff11488f449006bc59f1ae6ef4655e5b164459b98fe556af29a6e91d1c691ef08613135b3837f078b3b200bab063ccd7165eecba6e9b7f8f7a42edef6112b70ce"}}}}}}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='L', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x41, 0xfffffffe, 0xffffffff}}], 0x20, 0x48841}, 0x4850) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000008dff"}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0) 58.901028ms ago: executing program 4 (id=928): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0xf0) 3.720079ms ago: executing program 1 (id=929): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'vlan0\x00', {0x1}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)={[0x81]}, 0x8}) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) 0s ago: executing program 2 (id=930): socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x3, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x3e, 0x100, 0x70bd27, 0x25dfdbfe, {0x11}, [@generic="89cebdb9cca887c731b77f63c5052718bbf76c374defaa4eb2f315743eb74c867005591e31879db46d67"]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x4004810) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x6, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 73.835325][ T5824] cgroup: Unknown subsys name 'net' [ 73.964018][ T5824] cgroup: Unknown subsys name 'cpuset' [ 73.974025][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.595684][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.686312][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.694927][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.702917][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.716645][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.727605][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.740815][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.749044][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.784074][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.799479][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.813378][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.821392][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.828839][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.916281][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.925856][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.934799][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.943617][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.950861][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.958976][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.967240][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.968257][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.983382][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.991359][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.998761][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.006119][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.041525][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.050153][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.060676][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.069147][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.077784][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.085560][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.274654][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 80.487933][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.495693][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.505180][ T5834] bridge_slave_0: entered allmulticast mode [ 80.512430][ T5834] bridge_slave_0: entered promiscuous mode [ 80.524221][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.531983][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.539945][ T5834] bridge_slave_1: entered allmulticast mode [ 80.547515][ T5834] bridge_slave_1: entered promiscuous mode [ 80.611355][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 80.681820][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.693011][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 80.738173][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.815697][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 80.829735][ T5834] team0: Port device team_slave_0 added [ 80.836432][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 80.877142][ T5834] team0: Port device team_slave_1 added [ 80.917285][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.925057][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.933451][ T5839] bridge_slave_0: entered allmulticast mode [ 80.942023][ T5839] bridge_slave_0: entered promiscuous mode [ 80.999360][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.006949][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.015548][ T5847] bridge_slave_0: entered allmulticast mode [ 81.023741][ T5847] bridge_slave_0: entered promiscuous mode [ 81.032121][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.039740][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.047468][ T5839] bridge_slave_1: entered allmulticast mode [ 81.055584][ T5839] bridge_slave_1: entered promiscuous mode [ 81.063823][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.071667][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.098829][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.123818][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.131374][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.138657][ T5847] bridge_slave_1: entered allmulticast mode [ 81.146697][ T5847] bridge_slave_1: entered promiscuous mode [ 81.162852][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.169870][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.196985][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.254636][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.301854][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.309636][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.317501][ T5849] bridge_slave_0: entered allmulticast mode [ 81.325250][ T5849] bridge_slave_0: entered promiscuous mode [ 81.334159][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.341555][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.348761][ T5849] bridge_slave_1: entered allmulticast mode [ 81.356288][ T5849] bridge_slave_1: entered promiscuous mode [ 81.376392][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.407764][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.420883][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.444303][ T5834] hsr_slave_0: entered promiscuous mode [ 81.455676][ T5834] hsr_slave_1: entered promiscuous mode [ 81.484658][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.492591][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.500477][ T5845] bridge_slave_0: entered allmulticast mode [ 81.507383][ T5845] bridge_slave_0: entered promiscuous mode [ 81.537747][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.562046][ T5839] team0: Port device team_slave_0 added [ 81.568637][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.578369][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.587117][ T5845] bridge_slave_1: entered allmulticast mode [ 81.596877][ T5845] bridge_slave_1: entered promiscuous mode [ 81.617741][ T5847] team0: Port device team_slave_0 added [ 81.626193][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.646405][ T5839] team0: Port device team_slave_1 added [ 81.675113][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.697488][ T5847] team0: Port device team_slave_1 added [ 81.732054][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.768189][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.776106][ T54] Bluetooth: hci0: command tx timeout [ 81.776161][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.809039][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.823596][ T5849] team0: Port device team_slave_0 added [ 81.830816][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.837913][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.865582][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.872152][ T54] Bluetooth: hci1: command tx timeout [ 81.896161][ T5845] team0: Port device team_slave_0 added [ 81.916595][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.924101][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.951591][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.969617][ T5849] team0: Port device team_slave_1 added [ 81.978710][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.986158][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.012912][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.029793][ T5845] team0: Port device team_slave_1 added [ 82.090167][ T54] Bluetooth: hci3: command tx timeout [ 82.090177][ T5840] Bluetooth: hci2: command tx timeout [ 82.109885][ T5839] hsr_slave_0: entered promiscuous mode [ 82.117353][ T5839] hsr_slave_1: entered promiscuous mode [ 82.124122][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.132635][ T5839] Cannot create hsr debugfs directory [ 82.162926][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.169926][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.196789][ T54] Bluetooth: hci4: command tx timeout [ 82.202471][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.204818][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.222115][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.249260][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.282168][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.289187][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.316662][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.347647][ T5847] hsr_slave_0: entered promiscuous mode [ 82.355073][ T5847] hsr_slave_1: entered promiscuous mode [ 82.361599][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.369908][ T5847] Cannot create hsr debugfs directory [ 82.378942][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.386298][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.413694][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.525363][ T5849] hsr_slave_0: entered promiscuous mode [ 82.532722][ T5849] hsr_slave_1: entered promiscuous mode [ 82.539047][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.547476][ T5849] Cannot create hsr debugfs directory [ 82.596511][ T5845] hsr_slave_0: entered promiscuous mode [ 82.603702][ T5845] hsr_slave_1: entered promiscuous mode [ 82.609912][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.618381][ T5845] Cannot create hsr debugfs directory [ 82.828993][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.841077][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.851598][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.877745][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.979802][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.014183][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.024726][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.036847][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.094627][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.118371][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.159754][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.171075][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.226939][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.259856][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.277983][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.289900][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.353834][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.366787][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.377986][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.400827][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.408038][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.468621][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.519121][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.526740][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.564103][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.571903][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.616349][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.688780][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.738960][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.759383][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.766795][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.807895][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.829042][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.851054][ T54] Bluetooth: hci0: command tx timeout [ 83.859356][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.867053][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.916660][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.924582][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.936124][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.941239][ T54] Bluetooth: hci1: command tx timeout [ 83.943634][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.991443][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.016995][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.049966][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.112187][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.149953][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.157563][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.169499][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.172080][ T54] Bluetooth: hci2: command tx timeout [ 84.176771][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.191899][ T54] Bluetooth: hci3: command tx timeout [ 84.203305][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.210904][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.229280][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.236815][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.250338][ T54] Bluetooth: hci4: command tx timeout [ 84.403256][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.474248][ T5834] veth0_vlan: entered promiscuous mode [ 84.548075][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.573632][ T5834] veth1_vlan: entered promiscuous mode [ 84.627787][ T5839] veth0_vlan: entered promiscuous mode [ 84.655290][ T5839] veth1_vlan: entered promiscuous mode [ 84.750002][ T5834] veth0_macvtap: entered promiscuous mode [ 84.803040][ T5839] veth0_macvtap: entered promiscuous mode [ 84.813492][ T5834] veth1_macvtap: entered promiscuous mode [ 84.823556][ T5849] veth0_vlan: entered promiscuous mode [ 84.848100][ T5849] veth1_vlan: entered promiscuous mode [ 84.857860][ T5839] veth1_macvtap: entered promiscuous mode [ 84.894262][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.909470][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.921570][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.933205][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.946408][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.962944][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.976587][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.987642][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.998345][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007925][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.027214][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.038054][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.049986][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.062906][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.073460][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.083143][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.093050][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.111035][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.125415][ T5849] veth0_macvtap: entered promiscuous mode [ 85.163925][ T5849] veth1_macvtap: entered promiscuous mode [ 85.268842][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.285663][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.300496][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.313145][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.332247][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.375465][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.398390][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.409177][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.426734][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.439527][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.482694][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.491914][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.502106][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.511453][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.543404][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.550406][ T5847] veth0_vlan: entered promiscuous mode [ 85.557691][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.581616][ T5847] veth1_vlan: entered promiscuous mode [ 85.607947][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.618743][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.665471][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.675625][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.696162][ T5845] veth0_vlan: entered promiscuous mode [ 85.743982][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.754846][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.788150][ T5845] veth1_vlan: entered promiscuous mode [ 85.804488][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.808520][ T5847] veth0_macvtap: entered promiscuous mode [ 85.831078][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.861416][ T5847] veth1_macvtap: entered promiscuous mode [ 85.896640][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.923306][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.924586][ T5845] veth0_macvtap: entered promiscuous mode [ 85.941249][ T54] Bluetooth: hci0: command tx timeout [ 85.952545][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.959695][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.972247][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.982340][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.993368][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.003557][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.014947][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.023021][ T54] Bluetooth: hci1: command tx timeout [ 86.028711][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.042029][ T5845] veth1_macvtap: entered promiscuous mode [ 86.083026][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.103101][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.119444][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.140984][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.153031][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.164470][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.177330][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.195646][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.217361][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.229914][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.241871][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.252145][ T54] Bluetooth: hci3: command tx timeout [ 86.257723][ T5840] Bluetooth: hci2: command tx timeout [ 86.264518][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.275755][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.286473][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.297815][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.309531][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.340657][ T5840] Bluetooth: hci4: command tx timeout [ 86.379661][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.438872][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.493759][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.523431][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.548138][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.579350][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.597683][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.611521][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.624028][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.666110][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.707008][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724563][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.745889][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.768108][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837268][ T5926] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.855864][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.868865][ T5926] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6'. [ 86.880546][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.886861][ T5926] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 86.895373][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.912010][ T5926] Zero length message leads to an empty skb [ 86.920591][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.570807][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.608252][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.808998][ T5936] syzkaller0: entered promiscuous mode [ 87.816071][ T5936] syzkaller0: entered allmulticast mode [ 88.016140][ T5840] Bluetooth: hci0: command tx timeout [ 88.026390][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.041444][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.100831][ T5840] Bluetooth: hci1: command tx timeout [ 88.156889][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.209887][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.338789][ T5840] Bluetooth: hci2: command tx timeout [ 88.340739][ T54] Bluetooth: hci3: command tx timeout [ 88.412858][ T54] Bluetooth: hci4: command tx timeout [ 89.681733][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.691436][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.733930][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.935407][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.071401][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.237154][ T5956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.295816][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.325625][ T5957] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.412781][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.521075][ T5956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.586476][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.661225][ T5967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.721864][ T5956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.782484][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.839258][ T5948] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886189][ T5956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.906369][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'. [ 90.929988][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.959146][ T5948] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.987683][ T5967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.024116][ T5964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.075790][ T5948] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.127792][ T5948] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.166840][ T5967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.268227][ T5967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.309395][ T5972] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.348963][ T5961] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.369082][ T5956] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.399952][ T5956] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.423673][ T5961] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.439189][ T5972] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.481810][ T5961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.617264][ T5956] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.672351][ T5961] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.698400][ T5972] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.727459][ T5956] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.845295][ T5967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.868256][ T5972] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.926136][ T5982] x_tables: unsorted underflow at hook 3 [ 91.958305][ T5967] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971106][ T5836] IPVS: starting estimator thread 0... [ 92.001811][ T5980] batadv0: entered promiscuous mode [ 92.007696][ T5980] macvtap1: entered allmulticast mode [ 92.025070][ T5980] batadv0: entered allmulticast mode [ 92.046072][ T5980] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 92.047046][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 92.081164][ T5983] IPVS: using max 21 ests per chain, 50400 per kthread [ 92.136510][ T5967] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.143329][ T5982] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 92.205451][ T5967] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.345315][ T51] cfg80211: failed to load regulatory.db [ 92.373644][ T5991] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 92.430310][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21'. [ 92.475639][ T5991] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 92.484675][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 92.506012][ T5995] sctp: [Deprecated]: syz.0.23 (pid 5995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.506012][ T5995] Use struct sctp_sack_info instead [ 92.565419][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 92.579574][ C0] vcan0: j1939_session_tx_dat: 0xffff88805e258000: queue data error: -100 [ 92.643223][ T6001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21'. [ 92.654798][ T6002] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 92.668781][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 92.695933][ T6001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21'. [ 92.719747][ T6005] netlink: 96 bytes leftover after parsing attributes in process `syz.4.24'. [ 92.918407][ T6011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.27'. [ 92.928589][ T6011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.27'. [ 92.967554][ T6011] bond0: entered promiscuous mode [ 92.987198][ T6011] bond_slave_0: entered promiscuous mode [ 92.996192][ T6011] bond_slave_1: entered promiscuous mode [ 93.295108][ T6022] x_tables: unsorted underflow at hook 3 [ 93.318942][ T9] IPVS: starting estimator thread 0... [ 93.388676][ T6022] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 93.420188][ T6025] IPVS: using max 22 ests per chain, 52800 per kthread [ 93.700899][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.677968][ T6065] bond0: entered promiscuous mode [ 94.707931][ T6065] bond_slave_0: entered promiscuous mode [ 94.736296][ T6065] bond_slave_1: entered promiscuous mode [ 94.804174][ T5972] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.859067][ T6071] bond0: entered promiscuous mode [ 94.883032][ T6071] bond_slave_0: entered promiscuous mode [ 94.888957][ T6071] bond_slave_1: entered promiscuous mode [ 94.931616][ T6072] FAULT_INJECTION: forcing a failure. [ 94.931616][ T6072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.936431][ T5972] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.990339][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.0.43 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 94.990369][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.990386][ T6072] Call Trace: [ 94.990393][ T6072] [ 94.990402][ T6072] dump_stack_lvl+0x241/0x360 [ 94.990443][ T6072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.990466][ T6072] ? __pfx__printk+0x10/0x10 [ 94.990488][ T6072] ? __pfx_lock_release+0x10/0x10 [ 94.990519][ T6072] ? vfs_write+0x7fa/0xd10 [ 94.990543][ T6072] should_fail_ex+0x40a/0x550 [ 94.990576][ T6072] _copy_from_user+0x2d/0xb0 [ 94.990602][ T6072] move_addr_to_kernel+0x82/0x150 [ 94.990625][ T6072] __sys_connect+0xb6/0x2d0 [ 94.990649][ T6072] ? __fget_files+0x2a/0x410 [ 94.990676][ T6072] ? __pfx___sys_connect+0x10/0x10 [ 94.990713][ T6072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.990745][ T6072] ? do_syscall_64+0x100/0x230 [ 94.990776][ T6072] __x64_sys_connect+0x7a/0x90 [ 94.990803][ T6072] do_syscall_64+0xf3/0x230 [ 94.990828][ T6072] ? clear_bhb_loop+0x35/0x90 [ 94.990879][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.990907][ T6072] RIP: 0033:0x7f2bbcf8cde9 [ 94.990935][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.990952][ T6072] RSP: 002b:00007f2bbde8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 94.990974][ T6072] RAX: ffffffffffffffda RBX: 00007f2bbd1a6080 RCX: 00007f2bbcf8cde9 [ 94.990989][ T6072] RDX: 000000000000001e RSI: 00004000000000c0 RDI: 0000000000000004 [ 94.991002][ T6072] RBP: 00007f2bbde8c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.991014][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.991026][ T6072] R13: 0000000000000000 R14: 00007f2bbd1a6080 R15: 00007ffde5cdfee8 [ 94.991055][ T6072] [ 95.034503][ T5972] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.067193][ T6076] x_tables: unsorted underflow at hook 3 [ 95.222658][ T5972] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.245353][ T942] IPVS: starting estimator thread 0... [ 95.360981][ T6079] IPVS: using max 18 ests per chain, 43200 per kthread [ 95.722485][ T6098] bridge_slave_0: left allmulticast mode [ 95.728392][ T6098] bridge_slave_0: left promiscuous mode [ 95.780778][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.839634][ T6098] bridge_slave_1: left allmulticast mode [ 95.857150][ T6098] bridge_slave_1: left promiscuous mode [ 95.877771][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.923090][ T6098] bond0: (slave bond_slave_0): Releasing backup interface [ 95.967131][ T6098] bond_slave_0: left promiscuous mode [ 95.998730][ T6098] bond0: (slave bond_slave_1): Releasing backup interface [ 96.031242][ T6098] bond_slave_1: left promiscuous mode [ 96.092092][ T6098] team0: Port device team_slave_0 removed [ 96.131805][ T6098] team0: Port device team_slave_1 removed [ 96.152210][ T6098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.178875][ T6098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.190979][ T6114] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 96.202030][ T6098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.222054][ T6098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.475940][ T6124] bond0: entered promiscuous mode [ 96.528251][ T6124] bond_slave_0: entered promiscuous mode [ 96.550903][ T6126] FAULT_INJECTION: forcing a failure. [ 96.550903][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.580828][ T6124] bond_slave_1: entered promiscuous mode [ 96.616728][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.2.57 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 96.616755][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.616768][ T6126] Call Trace: [ 96.616775][ T6126] [ 96.616784][ T6126] dump_stack_lvl+0x241/0x360 [ 96.616814][ T6126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.616834][ T6126] ? __pfx__printk+0x10/0x10 [ 96.616856][ T6126] ? snprintf+0xda/0x120 [ 96.616894][ T6126] should_fail_ex+0x40a/0x550 [ 96.616924][ T6126] _copy_to_user+0x31/0xb0 [ 96.616948][ T6126] simple_read_from_buffer+0xca/0x150 [ 96.616974][ T6126] proc_fail_nth_read+0x1e9/0x250 [ 96.617001][ T6126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.617028][ T6126] ? rw_verify_area+0x243/0x630 [ 96.617057][ T6126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.617082][ T6126] vfs_read+0x1f8/0xb40 [ 96.617101][ T6126] ? fdget_pos+0x254/0x320 [ 96.617127][ T6126] ? __pfx___mutex_lock+0x10/0x10 [ 96.617151][ T6126] ? __pfx_vfs_read+0x10/0x10 [ 96.617173][ T6126] ? __fget_files+0x2a/0x410 [ 96.617200][ T6126] ? __fget_files+0x395/0x410 [ 96.617224][ T6126] ? __fget_files+0x2a/0x410 [ 96.617259][ T6126] ksys_read+0x18f/0x2b0 [ 96.617282][ T6126] ? __pfx_ksys_read+0x10/0x10 [ 96.617302][ T6126] ? do_syscall_64+0x100/0x230 [ 96.617332][ T6126] ? do_syscall_64+0xb6/0x230 [ 96.617361][ T6126] do_syscall_64+0xf3/0x230 [ 96.617388][ T6126] ? clear_bhb_loop+0x35/0x90 [ 96.617422][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.617451][ T6126] RIP: 0033:0x7f848398b7fc [ 96.617471][ T6126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.617488][ T6126] RSP: 002b:00007f84817d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.617510][ T6126] RAX: ffffffffffffffda RBX: 00007f8483ba6080 RCX: 00007f848398b7fc [ 96.617525][ T6126] RDX: 000000000000000f RSI: 00007f84817d50a0 RDI: 0000000000000006 [ 96.617538][ T6126] RBP: 00007f84817d5090 R08: 0000000000000000 R09: 0000000000000000 [ 96.617551][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.617563][ T6126] R13: 0000000000000000 R14: 00007f8483ba6080 R15: 00007fffcab0dc38 [ 96.617595][ T6126] [ 96.930189][ T6137] x_tables: unsorted underflow at hook 3 [ 96.939823][ T5882] IPVS: starting estimator thread 0... [ 97.092488][ T6137] __nla_validate_parse: 17 callbacks suppressed [ 97.092510][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 97.115820][ T6138] IPVS: using max 18 ests per chain, 43200 per kthread [ 97.181914][ T6137] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 97.485177][ T6154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'. [ 97.517356][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 97.530961][ T6156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'. [ 97.606740][ T6160] bond0: left promiscuous mode [ 97.637493][ T6160] bond_slave_0: left promiscuous mode [ 97.686339][ T6160] bond_slave_1: left promiscuous mode [ 97.695135][ T6160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.714679][ T6160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.771640][ T6160] syz.1.65 (6160) used greatest stack depth: 19248 bytes left [ 98.292541][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.74'. [ 98.316105][ T6191] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 98.937572][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 98.947926][ T6211] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 98.968744][ T6211] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 99.039871][ T6216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.80'. [ 99.067037][ T6216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.80'. [ 99.674132][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 99.726455][ T6233] veth0_macvtap: mtu less than device minimum [ 99.757885][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 99.846467][ T6233] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 99.885139][ T6233] syz_tun: entered promiscuous mode [ 99.919028][ T6233] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.965099][ T6238] ip6gre1: entered promiscuous mode [ 100.692897][ T6265] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 101.490512][ T6280] bridge0: entered promiscuous mode [ 101.508285][ T6280] bridge0: port 3(macsec1) entered blocking state [ 101.530534][ T6280] bridge0: port 3(macsec1) entered disabled state [ 101.537784][ T6280] macsec1: entered allmulticast mode [ 101.595822][ T6280] bridge0: entered allmulticast mode [ 101.641623][ T6280] macsec1: left allmulticast mode [ 101.646734][ T6280] bridge0: left allmulticast mode [ 101.688291][ T6280] bridge0: left promiscuous mode [ 102.064900][ T6288] block nbd4: not configured, cannot reconfigure [ 102.637448][ T6299] __nla_validate_parse: 3 callbacks suppressed [ 102.637472][ T6299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.107'. [ 102.654736][ T6299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.107'. [ 103.895696][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 104.607929][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 104.986536][ T6339] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 105.913077][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 106.011980][ T6375] bond1: entered promiscuous mode [ 106.057369][ T6375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.392310][ T6388] batman_adv: batadv0: Adding interface: gretap1 [ 106.399104][ T6388] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.462660][ T6388] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 106.642032][ T6393] syz.3.132 uses old SIOCAX25GETINFO [ 107.026946][ T6406] Bluetooth: MGMT ver 1.23 [ 107.325034][ T6426] syz.0.141 uses obsolete (PF_INET,SOCK_PACKET) [ 107.563519][ T6431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.652371][ T6437] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 107.709252][ T6431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.927612][ T6431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.059829][ T6431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.107195][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 108.132403][ T6456] netlink: 96 bytes leftover after parsing attributes in process `syz.0.150'. [ 108.239601][ T6431] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.299245][ T6431] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.327468][ T6431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.345773][ T6431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.958097][ T6476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 108.997391][ T6476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 109.059556][ T6480] nbd: must specify a size in bytes for the device [ 109.128892][ T6482] netlink: 'syz.4.161': attribute type 4 has an invalid length. [ 109.170242][ T6482] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.161'. [ 109.836699][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.854034][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.873123][ T6517] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.966944][ T6523] netlink: 56 bytes leftover after parsing attributes in process `syz.2.169'. [ 110.019347][ T6524] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 110.029560][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'. [ 110.076096][ T6524] netlink: 'syz.2.169': attribute type 3 has an invalid length. [ 110.132907][ T6524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.169'. [ 110.263600][ T6531] syzkaller1: entered promiscuous mode [ 110.289527][ T6531] syzkaller1: entered allmulticast mode [ 110.895417][ T6558] TCP: TCP_TX_DELAY enabled [ 111.552830][ T6592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.694234][ T6592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.946078][ T6592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.002546][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.307092][ T6608] bridge_slave_1 (unregistering): left allmulticast mode [ 112.317936][ T6608] bridge_slave_1 (unregistering): left promiscuous mode [ 112.345713][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.473783][ T6592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.576788][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.677349][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.729202][ T6592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.796792][ T6592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.834625][ T6592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.852097][ T6592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.883753][ T6641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.337575][ T6659] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 113.370750][ T6659] bond2: entered promiscuous mode [ 113.377030][ T6659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.408205][ T6659] __nla_validate_parse: 9 callbacks suppressed [ 113.408228][ T6659] netlink: 3 bytes leftover after parsing attributes in process `syz.4.208'. [ 113.464784][ T6659] batadv1: entered promiscuous mode [ 113.470554][ T6659] batadv1: entered allmulticast mode [ 113.479269][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 113.489930][ T6659] bond2: (slave batadv1): making interface the new active one [ 113.499640][ T6659] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 113.682396][ T6665] netlink: 48 bytes leftover after parsing attributes in process `syz.4.208'. [ 113.983483][ T6682] IPVS: length: 112 != 8 [ 114.061405][ T6682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.213'. [ 114.112473][ T6682] netlink: 'syz.2.213': attribute type 11 has an invalid length. [ 114.142374][ T6682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.213'. [ 114.196662][ T6688] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 114.222662][ T6688] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 114.267018][ T6688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.213'. [ 114.961650][ T6714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.978344][ T6715] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.091639][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 115.283992][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 115.530839][ T6737] netlink: 14 bytes leftover after parsing attributes in process `syz.4.233'. [ 115.914333][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.1.238'. [ 115.978880][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.1.238'. [ 116.063287][ T6756] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 116.588896][ T6772] bridge1: entered promiscuous mode [ 116.610940][ T6772] bridge1: entered allmulticast mode [ 116.743139][ T6778] netlink: 'syz.4.246': attribute type 11 has an invalid length. [ 117.016666][ T6786] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.139380][ T6797] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 117.151623][ T6796] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.160947][ T6796] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.169323][ T6796] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.178104][ T6796] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.381915][ T6796] bridge_slave_0: left allmulticast mode [ 117.425964][ T6796] bridge_slave_0: left promiscuous mode [ 117.432376][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.604568][ T6809] bond0: (slave syz_tun): Releasing backup interface [ 117.618249][ T6809] bridge_slave_0: left allmulticast mode [ 117.625454][ T6809] bridge_slave_0: left promiscuous mode [ 117.631962][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.648461][ T6809] bridge_slave_1: left allmulticast mode [ 117.659597][ T6809] bridge_slave_1: left promiscuous mode [ 117.667757][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.698862][ T6809] bond0: (slave bond_slave_0): Releasing backup interface [ 117.747810][ T6809] bond_slave_0: left promiscuous mode [ 117.768331][ T6809] bond0: (slave bond_slave_1): Releasing backup interface [ 117.791661][ T6809] bond_slave_1: left promiscuous mode [ 117.863910][ T6809] team0: Port device team_slave_0 removed [ 117.899090][ T6809] team0: Port device team_slave_1 removed [ 117.916215][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.962841][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.006125][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.015443][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.264430][ T6828] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 118.292491][ T6813] team0: Mode changed to "loadbalance" [ 118.310303][ T6826] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 118.387548][ T6823] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 119.513765][ T6844] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.529450][ T6844] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.539776][ T6844] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.549044][ T6844] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.637966][ T6844] syz.0.265 (6844) used greatest stack depth: 18768 bytes left [ 120.052607][ T6883] __nla_validate_parse: 11 callbacks suppressed [ 120.052630][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 120.164544][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 120.349160][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 120.751449][ T6916] batadv_slave_1: entered promiscuous mode [ 120.855439][ T6921] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.890592][ T6921] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.976008][ T6921] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.011564][ T6921] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.058654][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.077289][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.212504][ T6921] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.242449][ T6921] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.357796][ T6921] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.372224][ T6941] xt_hashlimit: max too large, truncated to 1048576 [ 121.401361][ T6921] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.423989][ T6942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.289'. [ 121.457591][ T6910] batadv_slave_1: left promiscuous mode [ 121.661864][ T6921] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.698636][ T6921] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.808782][ T6921] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.854855][ T6921] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.906912][ T6921] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.940593][ T6921] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.981860][ T6921] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.020916][ T6921] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.051337][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'. [ 122.139437][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.296'. [ 122.151134][ T6969] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 122.189503][ T6968] netlink: 'syz.2.296': attribute type 7 has an invalid length. [ 122.235288][ T6968] netlink: 'syz.2.296': attribute type 8 has an invalid length. [ 122.265509][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 122.548482][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.299'. [ 122.692754][ T6982] bpq0: entered promiscuous mode [ 123.331916][ T6993] sctp: [Deprecated]: syz.2.303 (pid 6993) Use of int in maxseg socket option. [ 123.331916][ T6993] Use struct sctp_assoc_value instead [ 123.851243][ T7011] netlink: 'syz.0.310': attribute type 4 has an invalid length. [ 123.883893][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 124.501906][ T7039] netlink: set zone limit has 8 unknown bytes [ 124.651737][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 125.648083][ T7085] __nla_validate_parse: 1 callbacks suppressed [ 125.648106][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 126.648204][ T7111] Unsupported ieee802154 address type: 0 [ 127.520864][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.344'. [ 127.535398][ T7133] netlink: 'syz.3.347': attribute type 2 has an invalid length. [ 127.588204][ T7130] tipc: Started in network mode [ 127.591361][ T7133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.347'. [ 127.593925][ T7130] tipc: Node identity 2aa1a193bb75, cluster identity 4711 [ 127.620478][ T7130] tipc: Enabled bearer , priority 0 [ 127.768534][ T7130] syzkaller0: entered promiscuous mode [ 127.825300][ T7130] syzkaller0: entered allmulticast mode [ 127.860843][ T7130] tipc: Resetting bearer [ 128.287739][ T3483] tipc: Resetting bearer [ 128.318581][ T7152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.326510][ T7152] IPv6: NLM_F_CREATE should be set when creating new route [ 128.334716][ T7152] IPv6: NLM_F_CREATE should be set when creating new route [ 128.409667][ T7130] tipc: Resetting bearer [ 128.545357][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 128.626698][ T7170] openvswitch: netlink: IP tunnel dst address not specified [ 128.702609][ T5885] tipc: Node number set to 2446631315 [ 129.247612][ T7192] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 129.258010][ T7191] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 129.316435][ T7193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.361'. [ 130.751509][ T7130] tipc: Disabling bearer [ 130.784700][ T7192] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.786001][ T7191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 131.013990][ T7199] netlink: 'syz.1.363': attribute type 11 has an invalid length. [ 131.142013][ T7208] netlink: 'syz.1.363': attribute type 27 has an invalid length. [ 131.272723][ T7212] netlink: 'syz.3.367': attribute type 5 has an invalid length. [ 131.310546][ T7210] netlink: 'syz.3.367': attribute type 5 has an invalid length. [ 131.412416][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 131.433706][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.441806][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.618285][ T7199] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.679417][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.707858][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.737454][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.779649][ T7224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 132.097818][ T7240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 132.143989][ T7245] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 132.158668][ T7246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 132.392161][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 132.495115][ T7250] netlink: 44 bytes leftover after parsing attributes in process `syz.1.378'. [ 132.978889][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 133.295332][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.815089][ T7294] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 134.069109][ T7297] bond0: entered promiscuous mode [ 134.120184][ T7297] bond_slave_0: entered promiscuous mode [ 134.126516][ T7297] bond_slave_1: entered promiscuous mode [ 134.472915][ T7308] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 135.145394][ T7333] team0 (unregistering): Port device team_slave_0 removed [ 135.164459][ T7333] team0 (unregistering): Failed to send options change via netlink (err -105) [ 135.176805][ T7333] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 135.198200][ T7333] team0 (unregistering): Port device team_slave_1 removed [ 135.275365][ T7340] netlink: 'syz.0.400': attribute type 6 has an invalid length. [ 136.596083][ T7384] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 137.002544][ T7389] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 137.142527][ T7400] __nla_validate_parse: 9 callbacks suppressed [ 137.142548][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 137.182087][ T7394] pim6reg: entered allmulticast mode [ 137.193295][ T7396] netlink: 'syz.2.417': attribute type 2 has an invalid length. [ 137.217653][ T7396] netlink: 1 bytes leftover after parsing attributes in process `syz.2.417'. [ 137.239176][ T7398] pim6reg: left allmulticast mode [ 137.292020][ T7404] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 137.582097][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'. [ 137.894497][ T7418] Illegal XDP return value 3051169263 on prog (id 137) dev N/A, expect packet loss! [ 138.083808][ T7396] ip6gre1: entered promiscuous mode [ 139.022549][ T7460] xt_hashlimit: size too large, truncated to 1048576 [ 139.105531][ T7463] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 139.116261][ T7463] macsec1: entered promiscuous mode [ 139.190194][ T7463] macsec1: entered allmulticast mode [ 139.226113][ T7463] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 139.244798][ T7466] netlink: 'syz.0.439': attribute type 29 has an invalid length. [ 139.318765][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'. [ 139.439542][ T7472] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 139.458013][ T7465] netlink: 'syz.0.439': attribute type 29 has an invalid length. [ 139.792188][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 140.322215][ T7510] FAULT_INJECTION: forcing a failure. [ 140.322215][ T7510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.371406][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.1.448 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 140.371438][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.371451][ T7510] Call Trace: [ 140.371458][ T7510] [ 140.371467][ T7510] dump_stack_lvl+0x241/0x360 [ 140.371500][ T7510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.371523][ T7510] ? __pfx__printk+0x10/0x10 [ 140.371545][ T7510] ? __pfx_lock_release+0x10/0x10 [ 140.371579][ T7510] should_fail_ex+0x40a/0x550 [ 140.371613][ T7510] _copy_from_user+0x2d/0xb0 [ 140.371639][ T7510] move_addr_to_kernel+0x82/0x150 [ 140.371662][ T7510] copy_msghdr_from_user+0x43e/0x680 [ 140.371692][ T7510] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 140.371713][ T7510] ? __fget_files+0x2a/0x410 [ 140.371779][ T7510] ? __fget_files+0x2a/0x410 [ 140.371817][ T7510] __sys_sendmsg+0x209/0x350 [ 140.371852][ T7510] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.371894][ T7510] ? do_sys_openat2+0x17a/0x1d0 [ 140.371948][ T7510] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.371981][ T7510] ? do_syscall_64+0x100/0x230 [ 140.372011][ T7510] ? do_syscall_64+0xb6/0x230 [ 140.372039][ T7510] do_syscall_64+0xf3/0x230 [ 140.372064][ T7510] ? clear_bhb_loop+0x35/0x90 [ 140.372096][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.372124][ T7510] RIP: 0033:0x7f622198cde9 [ 140.372143][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.372160][ T7510] RSP: 002b:00007f621f7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.372182][ T7510] RAX: ffffffffffffffda RBX: 00007f6221ba6080 RCX: 00007f622198cde9 [ 140.372197][ T7510] RDX: 00000000000000ee RSI: 00004000000001c0 RDI: 0000000000000004 [ 140.372210][ T7510] RBP: 00007f621f7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 140.372223][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.372234][ T7510] R13: 0000000000000000 R14: 00007f6221ba6080 R15: 00007ffef0faafe8 [ 140.372265][ T7510] [ 140.810220][ T7519] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 141.045225][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 141.102007][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.146273][ T7533] vlan2: entered promiscuous mode [ 141.153663][ T7533] bond1: entered promiscuous mode [ 141.179664][ T7541] netlink: 'syz.1.454': attribute type 8 has an invalid length. [ 141.229596][ T7533] vlan2: entered allmulticast mode [ 141.246057][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 141.248256][ T7533] bond1: entered allmulticast mode [ 141.292315][ T7533] bond1: left allmulticast mode [ 141.311291][ T7533] bond1: left promiscuous mode [ 141.357598][ T7545] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 141.381216][ T7545] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 141.390996][ T7545] netlink: 188 bytes leftover after parsing attributes in process `syz.4.457'. [ 141.709671][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 141.820253][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 141.828016][ T7561] bridge0: port 1(batadv2) entered blocking state [ 141.892303][ T7561] bridge0: port 1(batadv2) entered disabled state [ 141.925922][ T7561] batadv2: entered allmulticast mode [ 141.945078][ T7561] batadv2: entered promiscuous mode [ 141.970580][ T7561] bridge0: port 1(batadv2) entered blocking state [ 141.979285][ T7561] bridge0: port 1(batadv2) entered forwarding state [ 142.098840][ T7577] FAULT_INJECTION: forcing a failure. [ 142.098840][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.115230][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 142.127062][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.0.464 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 142.127091][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.127103][ T7577] Call Trace: [ 142.127111][ T7577] [ 142.127120][ T7577] dump_stack_lvl+0x241/0x360 [ 142.127152][ T7577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.127176][ T7577] ? __pfx__printk+0x10/0x10 [ 142.127203][ T7577] ? snprintf+0xda/0x120 [ 142.127239][ T7577] should_fail_ex+0x40a/0x550 [ 142.127273][ T7577] _copy_to_user+0x31/0xb0 [ 142.127301][ T7577] simple_read_from_buffer+0xca/0x150 [ 142.127332][ T7577] proc_fail_nth_read+0x1e9/0x250 [ 142.127364][ T7577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.127396][ T7577] ? rw_verify_area+0x243/0x630 [ 142.127439][ T7577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.127469][ T7577] vfs_read+0x1f8/0xb40 [ 142.127490][ T7577] ? fdget_pos+0x254/0x320 [ 142.127520][ T7577] ? __pfx___mutex_lock+0x10/0x10 [ 142.127547][ T7577] ? __pfx_vfs_read+0x10/0x10 [ 142.127564][ T7577] ? do_sys_openat2+0x17a/0x1d0 [ 142.127597][ T7577] ? __fget_files+0x2a/0x410 [ 142.127628][ T7577] ? __fget_files+0x395/0x410 [ 142.127655][ T7577] ? __fget_files+0x2a/0x410 [ 142.127694][ T7577] ksys_read+0x18f/0x2b0 [ 142.127717][ T7577] ? __pfx_ksys_read+0x10/0x10 [ 142.127739][ T7577] ? do_syscall_64+0x100/0x230 [ 142.127768][ T7577] ? do_syscall_64+0xb6/0x230 [ 142.127797][ T7577] do_syscall_64+0xf3/0x230 [ 142.127822][ T7577] ? clear_bhb_loop+0x35/0x90 [ 142.127856][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.127884][ T7577] RIP: 0033:0x7f2bbcf8b7fc [ 142.127903][ T7577] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.127919][ T7577] RSP: 002b:00007f2bbdead030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.127941][ T7577] RAX: ffffffffffffffda RBX: 00007f2bbd1a5fa0 RCX: 00007f2bbcf8b7fc [ 142.127956][ T7577] RDX: 000000000000000f RSI: 00007f2bbdead0a0 RDI: 0000000000000005 [ 142.127969][ T7577] RBP: 00007f2bbdead090 R08: 0000000000000000 R09: 0000000000000000 [ 142.127981][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.127994][ T7577] R13: 0000000000000000 R14: 00007f2bbd1a5fa0 R15: 00007ffde5cdfee8 [ 142.128025][ T7577] [ 142.392099][ T62] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 142.401841][ T62] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 142.843235][ T7602] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 142.932306][ T7601] netlink: 'syz.2.470': attribute type 32 has an invalid length. [ 142.957666][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 143.018101][ T7601] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 143.142453][ T7613] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 143.241014][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.471'. [ 143.413401][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 143.626064][ T7640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.482'. [ 143.641368][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 144.202078][ T7662] netlink: 'syz.0.487': attribute type 4 has an invalid length. [ 144.478840][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 144.515460][ T7674] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 144.531832][ T7687] netlink: 80 bytes leftover after parsing attributes in process `syz.2.492'. [ 144.553770][ T7675] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 144.626586][ T7687] nr0: entered promiscuous mode [ 144.684862][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'. [ 145.019966][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 145.067171][ T7699] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.428429][ T7708] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 146.170518][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 147.059279][ T7764] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 147.143951][ T7780] sctp: [Deprecated]: syz.2.509 (pid 7780) Use of int in max_burst socket option deprecated. [ 147.143951][ T7780] Use struct sctp_assoc_value instead [ 147.324013][ T7785] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.409487][ T7790] netlink: 72 bytes leftover after parsing attributes in process `syz.3.511'. [ 147.947250][ T7808] delete_channel: no stack [ 148.155623][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 148.250141][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 148.727064][ T7837] netlink: 'syz.4.520': attribute type 2 has an invalid length. [ 148.780203][ T7837] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.520'. [ 148.921785][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 149.073180][ T7850] netlink: 'syz.4.523': attribute type 13 has an invalid length. [ 149.091342][ T7850] macvtap0: entered promiscuous mode [ 149.153641][ T7850] macvtap0: refused to change device tx_queue_len [ 149.686140][ T7842] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 149.981573][ T7878] tipc: Started in network mode [ 150.010665][ T7878] tipc: Node identity ac14140f, cluster identity 4711 [ 150.054408][ T7878] tipc: New replicast peer: 255.255.255.255 [ 150.089060][ T7878] tipc: Enabled bearer , priority 10 [ 150.150792][ T7886] netlink: 'syz.1.534': attribute type 5 has an invalid length. [ 150.183530][ T7885] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 150.226359][ T7891] netlink: 3 bytes leftover after parsing attributes in process `syz.3.535'. [ 150.565519][ T7901] IPVS: length: 118 != 24600 [ 150.620501][ T7904] bpq0: left promiscuous mode [ 150.900435][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 151.015892][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 151.076601][ T7917] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 151.125529][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 151.211166][ T9] tipc: Node number set to 2886997007 [ 151.324983][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.476400][ T7935] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 151.660921][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 152.214379][ T7963] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 152.241695][ T7963] batman_adv: batadv0: Adding interface: wlan0 [ 152.247247][ T7961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 152.264639][ T7963] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.298947][ T7963] batman_adv: batadv0: Interface activated: wlan0 [ 152.739229][ T7975] netlink: 6 bytes leftover after parsing attributes in process `syz.1.561'. [ 153.215651][ T8011] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 153.308525][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 153.357030][ T8015] netlink: 80 bytes leftover after parsing attributes in process `syz.4.571'. [ 153.533856][ T8022] netlink: 'syz.4.573': attribute type 6 has an invalid length. [ 153.804239][ T8025] netlink: 'syz.3.574': attribute type 6 has an invalid length. [ 154.415825][ T8051] netlink: 'syz.2.581': attribute type 11 has an invalid length. [ 154.508719][ T8055] netlink: 'syz.4.583': attribute type 4 has an invalid length. [ 154.540415][ T8054] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 154.569086][ T8055] No such timeout policy "syz0" [ 154.877499][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 155.550706][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 156.140726][ T8115] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 156.460466][ T8132] netlink: 'syz.1.607': attribute type 62 has an invalid length. [ 156.651692][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 156.830608][ T8147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.611'. [ 156.931016][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 156.957252][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 157.114222][ T8159] bridge0: port 3(ipvlan2) entered blocking state [ 157.140806][ T8159] bridge0: port 3(ipvlan2) entered disabled state [ 157.148016][ T8159] ipvlan2: entered allmulticast mode [ 157.182746][ T8159] bridge0: entered allmulticast mode [ 157.216909][ T8159] ipvlan2: left allmulticast mode [ 157.243078][ T8159] bridge0: left allmulticast mode [ 157.362454][ T8167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'. [ 157.386870][ T8165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'. [ 157.529492][ T8172] netlink: 'syz.1.621': attribute type 9 has an invalid length. [ 157.550197][ T8172] netlink: 'syz.1.621': attribute type 7 has an invalid length. [ 157.557934][ T8172] netlink: 'syz.1.621': attribute type 8 has an invalid length. [ 158.113497][ T8193] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 158.266793][ T8195] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.321953][ T8195] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.431562][ T8202] netlink: 104 bytes leftover after parsing attributes in process `syz.3.630'. [ 158.722313][ T8215] IPVS: Unknown mcast interface: syzkaller1 [ 158.746376][ T8217] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 159.496775][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'. [ 159.560226][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 159.609405][ T8249] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 159.754204][ T8253] dvmrp0: entered allmulticast mode [ 159.809243][ T8257] tun0: tun_chr_ioctl cmd 1074025677 [ 159.815429][ T8257] tun0: linktype set to 776 [ 194.732399][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.933103][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 201.933579][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 207.052846][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 207.059037][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 240.153380][ T8299] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 240.200326][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.530941][ T8323] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 240.555127][ T8323] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 240.565243][ T8323] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 240.598549][ T8323] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 240.620558][ T8323] netlink: 'syz.2.664': attribute type 29 has an invalid length. [ 240.707230][ T8331] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 240.715370][ T8329] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 240.819677][ T8333] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 240.837226][ T9] IPVS: starting estimator thread 0... [ 240.857418][ T8338] netlink: 76 bytes leftover after parsing attributes in process `syz.3.663'. [ 240.877849][ T8331] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 240.878777][ T8329] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 240.961690][ T8337] IPVS: using max 21 ests per chain, 50400 per kthread [ 241.091175][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 241.112149][ T8348] netlink: 32 bytes leftover after parsing attributes in process `syz.4.669'. [ 241.423165][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 241.926398][ T8380] netlink: 'syz.2.679': attribute type 12 has an invalid length. [ 241.972211][ T8384] gretap1: entered promiscuous mode [ 241.995863][ T8388] openvswitch: netlink: Flow key attr not present in new flow. [ 242.265433][ T8384] bond0 (unregistering): Released all slaves [ 242.848866][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.783898][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.697'. [ 243.835671][ T8451] syzkaller1: entered promiscuous mode [ 243.842949][ T8451] syzkaller1: entered allmulticast mode [ 243.889488][ T8456] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 243.909211][ T8449] bridge0: port 1(batadv2) entered disabled state [ 243.922799][ T8449] bond0: left promiscuous mode [ 244.116144][ T8449] macvtap0: left promiscuous mode [ 244.164171][ T8449] bond1: left promiscuous mode [ 244.174965][ T8449] bond2: left promiscuous mode [ 244.183656][ T8449] batadv1: left promiscuous mode [ 244.188661][ T8449] batadv1: left allmulticast mode [ 244.199761][ T8449] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.210606][ T8449] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.219464][ T8449] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.228504][ T8449] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.341578][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.404953][ T8461] bond0: (slave gretap2): making interface the new active one [ 244.465568][ T8461] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 245.002702][ T8496] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 245.027328][ T8496] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.706'. [ 245.809734][ T8527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.714'. [ 246.144675][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 246.170552][ T8543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.718'. [ 246.482158][ T8543] netem: change failed [ 246.511415][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 246.527766][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 246.541956][ T8543] netlink: 'syz.2.718': attribute type 2 has an invalid length. [ 246.989643][ T8578] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 247.276903][ T8592] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.285239][ T8592] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.293710][ T8592] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.302069][ T8592] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.405534][ T8592] vxlan0: entered promiscuous mode [ 247.421874][ T8592] vxlan0: entered allmulticast mode [ 247.479147][ T8592] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.488258][ T8592] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.496994][ T8592] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.505798][ T8592] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.546678][ T8600] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.000465][ T8621] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 248.105678][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 248.541549][ T8648] netlink: 34 bytes leftover after parsing attributes in process `syz.3.743'. [ 248.594103][ T8655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.743'. [ 248.931200][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 249.048157][ T8680] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.747'. [ 249.093276][ T8680] netlink: zone id is out of range [ 249.117929][ T8680] netlink: zone id is out of range [ 249.159935][ T8680] netlink: zone id is out of range [ 249.175481][ T8680] netlink: zone id is out of range [ 249.267033][ T8680] netlink: zone id is out of range [ 249.290280][ T8680] netlink: zone id is out of range [ 249.300324][ T8680] netlink: zone id is out of range [ 249.349627][ T8680] netlink: zone id is out of range [ 249.380486][ T8680] netlink: zone id is out of range [ 249.544287][ T8692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.580863][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 250.067987][ T8703] vlan2: entered allmulticast mode [ 250.362212][ T8722] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.373449][ T8722] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.630684][ T8734] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 250.933288][ T5840] Bluetooth: hci4: link tx timeout [ 250.938806][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 250.948836][ T5840] Bluetooth: hci4: link tx timeout [ 250.955057][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.971559][ T5840] Bluetooth: hci4: link tx timeout [ 250.977004][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 250.985337][ T5840] Bluetooth: hci4: link tx timeout [ 250.992534][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 252.971378][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 253.014460][ T8722] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.024598][ T8722] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.169208][ T8752] __nla_validate_parse: 5 callbacks suppressed [ 253.169235][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.767'. [ 253.189400][ T8722] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.223331][ T8722] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.348357][ T8722] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.361330][ T8722] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.486821][ T8722] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.504990][ T8722] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.534600][ T8722] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.537277][ T8767] netlink: 'syz.1.771': attribute type 46 has an invalid length. [ 253.549129][ T8722] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.552608][ T8767] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.771'. [ 253.584053][ T8767] nbd: device at index 1 is going down [ 253.598713][ T8722] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.630657][ T8722] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.653662][ T8722] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.693884][ T8722] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.742662][ T8775] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 253.795933][ T8775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.838061][ T8778] bond2: (slave ip6gretap1): making interface the new active one [ 253.868871][ T8778] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.880888][ T8778] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.889164][ T8778] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.922486][ T7992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.987660][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.235620][ T8791] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 254.349204][ T8791] bond1: entered promiscuous mode [ 254.355155][ T8791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.527105][ T8791] bond2: entered promiscuous mode [ 254.541105][ T8791] bond2: entered allmulticast mode [ 254.638072][ T8791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.652735][ T8791] bond1: (slave bond2): making interface the new active one [ 254.674991][ T8791] bond1: (slave bond2): Enslaving as an active interface with an up link [ 254.722136][ T7991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.775007][ T8810] netlink: 'syz.0.781': attribute type 11 has an invalid length. [ 254.788185][ T8810] netlink: 140 bytes leftover after parsing attributes in process `syz.0.781'. [ 254.826812][ T8791] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 108 [ 254.843294][ T8810] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 254.970484][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.006775][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.052980][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 255.277405][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.786'. [ 255.359195][ T8823] netlink: 'syz.3.787': attribute type 3 has an invalid length. [ 255.421359][ T8823] netlink: 'syz.3.787': attribute type 3 has an invalid length. [ 255.747744][ T8845] sctp: [Deprecated]: syz.1.794 (pid 8845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.747744][ T8845] Use struct sctp_sack_info instead [ 255.782765][ T7995] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.810996][ T7995] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.130455][ T7991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.172951][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.258019][ T8856] netlink: 14 bytes leftover after parsing attributes in process `syz.2.797'. [ 257.284941][ T8897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.800'. [ 257.295890][ T8898] sctp: [Deprecated]: syz.3.807 (pid 8898) Use of int in max_burst socket option. [ 257.295890][ T8898] Use struct sctp_assoc_value instead [ 257.547857][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 257.581067][ T8909] bridge_slave_1: left allmulticast mode [ 257.586965][ T8909] bridge_slave_1: left promiscuous mode [ 257.594390][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.607357][ T8909] bridge_slave_0: left allmulticast mode [ 257.628976][ T8909] bridge_slave_0: left promiscuous mode [ 257.642852][ T8915] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 257.651710][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.865469][ T8915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.907664][ T8917] bond3: (slave ip6gretap1): making interface the new active one [ 257.925276][ T8917] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 258.833456][ T8927] bond0: left promiscuous mode [ 258.838956][ T8927] bond_slave_0: left promiscuous mode [ 258.845193][ T8927] bond_slave_1: left promiscuous mode [ 258.960824][ T7993] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 258.960846][ T7993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.281375][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.325560][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.530379][ T7991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.770167][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.820058][ T8927] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.828742][ T8927] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.837670][ T8927] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.850573][ T8927] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.017499][ T7993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.040577][ T7993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.101777][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.183287][ T8957] netlink: 'syz.1.818': attribute type 30 has an invalid length. [ 260.257629][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 260.294524][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.817'. [ 260.361650][ T8956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.376308][ T8966] netlink: 'syz.4.819': attribute type 1 has an invalid length. [ 260.492299][ T8972] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 260.522502][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 260.624873][ T8980] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 260.671323][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.730623][ T8948] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.848226][ T8987] trusted_key: syz.1.823 sent an empty control message without MSG_MORE. [ 260.901365][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 261.310594][ T7993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.400936][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 261.782857][ T9018] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 261.830234][ T7995] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.984204][ T9032] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.834'. [ 262.020904][ T9032] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.834'. [ 263.257611][ T9089] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 263.293918][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 263.328646][ T9089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.451356][ T9095] bond4: (slave ip6gretap1): making interface the new active one [ 263.514156][ T9095] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 263.951011][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 263.961568][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 264.120642][ T3483] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 264.120663][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.491243][ T8949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.562296][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.731301][ T9168] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 264.751642][ T7991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.806599][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.931223][ T9168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.948375][ T9176] bond2: (slave ip6gretap1): making interface the new active one [ 264.958887][ T9176] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.971274][ T9176] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.979487][ T9176] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 265.026833][ T9112] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.062545][ T7991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.255222][ T9186] syz_tun: left promiscuous mode [ 265.290168][ T5146] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 265.296757][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 265.331728][ T7991] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.413322][ T9186] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 265.440375][ T9186] ip6gre1: left promiscuous mode [ 265.459838][ T9186] gretap1: left promiscuous mode [ 265.589226][ T9196] __nla_validate_parse: 3 callbacks suppressed [ 265.589258][ T9196] netlink: 80 bytes leftover after parsing attributes in process `syz.3.875'. [ 265.740267][ T9209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.875'. [ 265.991610][ T9211] delete_channel: no stack [ 266.058441][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'. [ 266.111417][ T9223] syzkaller0: entered allmulticast mode [ 266.349204][ T9234] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 266.437177][ T9234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.051084][ T9273] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 267.399560][ T9251] syz.0.885: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.425000][ T9251] CPU: 0 UID: 0 PID: 9251 Comm: syz.0.885 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 267.425024][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.425034][ T9251] Call Trace: [ 267.425039][ T9251] [ 267.425048][ T9251] dump_stack_lvl+0x241/0x360 [ 267.425082][ T9251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.425099][ T9251] ? __pfx__printk+0x10/0x10 [ 267.425117][ T9251] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 267.425139][ T9251] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 267.425161][ T9251] warn_alloc+0x278/0x410 [ 267.425180][ T9251] ? __pfx_warn_alloc+0x10/0x10 [ 267.425200][ T9251] ? xp_create_and_assign_umem+0x17b/0xc50 [ 267.425258][ T9251] ? __get_vm_area_node+0x1c8/0x2d0 [ 267.425281][ T9251] ? __get_vm_area_node+0x25c/0x2d0 [ 267.425309][ T9251] __vmalloc_node_range_noprof+0x62f/0x1380 [ 267.425335][ T9251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.425382][ T9251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.425419][ T9251] ? rcu_is_watching+0x15/0xb0 [ 267.425443][ T9251] ? trace_kmalloc+0x1f/0xd0 [ 267.425469][ T9251] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 267.425497][ T9251] ? __kvmalloc_node_noprof+0x72/0x190 [ 267.425533][ T9251] __kvmalloc_node_noprof+0x142/0x190 [ 267.425566][ T9251] ? xp_create_and_assign_umem+0x17b/0xc50 [ 267.425593][ T9251] xp_create_and_assign_umem+0x17b/0xc50 [ 267.425630][ T9251] ? dev_get_by_index+0x23/0x2d0 [ 267.425658][ T9251] xsk_bind+0x388/0xfe0 [ 267.425687][ T9251] __sys_bind+0x1e4/0x290 [ 267.425707][ T9251] ? __pfx___sys_bind+0x10/0x10 [ 267.425734][ T9251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.425758][ T9251] ? exc_page_fault+0x590/0x8b0 [ 267.425779][ T9251] __x64_sys_bind+0x7a/0x90 [ 267.425798][ T9251] do_syscall_64+0xf3/0x230 [ 267.425817][ T9251] ? clear_bhb_loop+0x35/0x90 [ 267.425842][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.425863][ T9251] RIP: 0033:0x7f2bbcf8cde9 [ 267.425884][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.425896][ T9251] RSP: 002b:00007f2bbde4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 267.425912][ T9251] RAX: ffffffffffffffda RBX: 00007f2bbd1a6240 RCX: 00007f2bbcf8cde9 [ 267.425924][ T9251] RDX: 0000000000000010 RSI: 0000400000000100 RDI: 0000000000000003 [ 267.425933][ T9251] RBP: 00007f2bbd00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.425943][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.425960][ T9251] R13: 0000000000000001 R14: 00007f2bbd1a6240 R15: 00007ffde5cdfee8 [ 267.425993][ T9251] [ 267.426002][ T9251] Mem-Info: [ 267.708482][ T9251] active_anon:6136 inactive_anon:0 isolated_anon:0 [ 267.708482][ T9251] active_file:1545 inactive_file:38364 isolated_file:0 [ 267.708482][ T9251] unevictable:768 dirty:295 writeback:0 [ 267.708482][ T9251] slab_reclaimable:10300 slab_unreclaimable:102379 [ 267.708482][ T9251] mapped:37144 shmem:1413 pagetables:892 [ 267.708482][ T9251] sec_pagetables:0 bounce:0 [ 267.708482][ T9251] kernel_misc_reclaimable:0 [ 267.708482][ T9251] free:1311838 free_pcp:7258 free_cma:0 [ 267.754564][ T9251] Node 0 active_anon:24544kB inactive_anon:0kB active_file:6180kB inactive_file:153384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148576kB dirty:1180kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12416kB pagetables:3568kB sec_pagetables:0kB all_unreclaimable? no [ 267.788021][ T9251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 267.820043][ T9251] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.848682][ T9251] lowmem_reserve[]: 0 2490 2490 0 0 [ 267.854764][ T9251] Node 0 DMA32 free:1324940kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:24504kB inactive_anon:0kB active_file:6180kB inactive_file:153080kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:29144kB local_pcp:1192kB free_cma:0kB [ 267.886755][ T9251] lowmem_reserve[]: 0 0 0 0 0 [ 267.892477][ T9251] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 267.921297][ T9251] lowmem_reserve[]: 0 0 0 0 0 [ 267.926240][ T9251] Node 1 Normal free:3907048kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.956461][ T9251] lowmem_reserve[]: 0 0 0 0 0 [ 267.961446][ T9251] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.975038][ T9251] Node 0 DMA32: 3*4kB (UME) 114*8kB (ME) 135*16kB (ME) 126*32kB (UME) 77*64kB (UME) 33*128kB (UME) 12*256kB (M) 8*512kB (UM) 9*1024kB (UM) 5*2048kB (ME) 313*4096kB (M) = 1324940kB [ 267.994135][ T9251] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 268.007366][ T9251] Node 1 Normal: 196*4kB (UME) 49*8kB (UME) 39*16kB (UME) 198*32kB (UME) 97*64kB (UME) 22*128kB (UME) 15*256kB (UME) 8*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3907080kB [ 268.027227][ T9251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.037754][ T9251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.047733][ T9251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.058197][ T9251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.068400][ T9251] 41322 total pagecache pages [ 268.073208][ T9251] 0 pages in swap cache [ 268.077482][ T9251] Free swap = 124996kB [ 268.082099][ T9251] Total swap = 124996kB [ 268.086307][ T9251] 2097051 pages RAM [ 268.090444][ T9251] 0 pages HighMem/MovableOnly [ 268.095394][ T9251] 427863 pages reserved [ 268.100599][ T9251] 0 pages cma reserved [ 268.135399][ T9260] bond0: (slave bond_slave_0): Releasing backup interface [ 268.160047][ T9260] bond_slave_0: left promiscuous mode [ 268.187449][ T9260] bond0: (slave bond_slave_1): Releasing backup interface [ 268.196237][ T9260] bond_slave_1: left promiscuous mode [ 268.262080][ T9260] team0: Port device team_slave_0 removed [ 268.287976][ T9260] team0: Port device team_slave_1 removed [ 268.298568][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.315582][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.326300][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.334684][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.352382][ T9260] batman_adv: batadv0: Interface deactivated: wlan0 [ 268.359407][ T9260] batman_adv: batadv0: Removing interface: wlan0 [ 268.374482][ T9260] batman_adv: batadv0: Removing interface: gretap1 [ 268.385501][ T9260] bond1: (slave bond2): Releasing backup interface [ 268.423913][ T9260] bond3: (slave ip6gretap1): Releasing active interface [ 268.476765][ T9264] team0: Mode changed to "loadbalance" [ 268.494013][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 268.524204][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'. [ 268.546334][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'. [ 268.566056][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.891'. [ 269.011570][ T9303] netlink: 48 bytes leftover after parsing attributes in process `syz.3.897'. [ 269.054143][ T9303] xt_TCPMSS: Only works on TCP SYN packets [ 269.100688][ T9303] sit0: entered promiscuous mode [ 269.109225][ T9303] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 269.152470][ T9303] netlink: 1 bytes leftover after parsing attributes in process `syz.3.897'. [ 269.222624][ T3483] ip6_tnl_xmit_ctl: 21 callbacks suppressed [ 269.222647][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.334604][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 269.670391][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.755645][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.796483][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.845337][ T9317] net_ratelimit: 289 callbacks suppressed [ 269.845350][ T9317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.930270][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.978986][ T9339] dvmrp0: left allmulticast mode [ 269.991548][ T7983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.250154][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.411459][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.470179][ T9359] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 270.511538][ T9359] netlink: 'syz.4.907': attribute type 3 has an invalid length. [ 270.523340][ T9359] NCSI netlink: No device for ifindex 0 [ 270.675478][ T9374] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 270.707130][ T9376] __nla_validate_parse: 2 callbacks suppressed [ 270.707150][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 270.724322][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 270.736293][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 270.761463][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 270.788519][ T9378] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 270.807219][ T9370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.910'. [ 270.860688][ T7983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.949816][ T9374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.141865][ T3483] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.520558][ T7992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.751349][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 272.000660][ T7992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.122813][ T9410] netlink: 277 bytes leftover after parsing attributes in process `syz.1.923'. [ 272.210402][ T9410] netlink: 277 bytes leftover after parsing attributes in process `syz.1.923'. [ 272.251570][ T9415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 272.296756][ T9415] Cannot find set identified by id 0 to match Connection to 10.128.10.21 closed by remote host. [ 273.777743][ T9426] ================================================================== [ 273.786047][ T9426] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 273.793638][ T9426] Write of size 8 at addr ffff88805bd5a5a0 by task syz.0.925/9426 [ 273.801558][ T9426] [ 273.804092][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.0.925 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 273.804109][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 273.804119][ T9426] Call Trace: [ 273.804127][ T9426] [ 273.804135][ T9426] dump_stack_lvl+0x241/0x360 [ 273.804156][ T9426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.804172][ T9426] ? __pfx__printk+0x10/0x10 [ 273.804186][ T9426] ? _printk+0xd5/0x120 [ 273.804199][ T9426] ? __virt_addr_valid+0x183/0x530 [ 273.804223][ T9426] ? __virt_addr_valid+0x183/0x530 [ 273.804247][ T9426] print_report+0x169/0x550 [ 273.804265][ T9426] ? __virt_addr_valid+0x183/0x530 [ 273.804287][ T9426] ? __virt_addr_valid+0x183/0x530 [ 273.804309][ T9426] ? __virt_addr_valid+0x45f/0x530 [ 273.804331][ T9426] ? __phys_addr+0xba/0x170 [ 273.804354][ T9426] ? sco_conn_put+0xad/0x210 [ 273.804369][ T9426] kasan_report+0x143/0x180 [ 273.804387][ T9426] ? sco_conn_put+0xad/0x210 [ 273.804404][ T9426] sco_conn_put+0xad/0x210 [ 273.804418][ T9426] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 273.804434][ T9426] hci_conn_hash_flush+0x1be/0x350 [ 273.804458][ T9426] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 273.804503][ T9426] ? drain_workqueue+0x2d3/0x3a0 [ 273.804528][ T9426] ? hci_discovery_set_state+0x57/0x180 [ 273.804549][ T9426] hci_dev_close_sync+0xa8b/0x1260 [ 273.804569][ T9426] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 273.804586][ T9426] ? rcu_is_watching+0x15/0xb0 [ 273.804605][ T9426] hci_unregister_dev+0x20b/0x510 [ 273.804620][ T9426] vhci_release+0x80/0xd0 [ 273.804637][ T9426] ? __pfx_vhci_release+0x10/0x10 [ 273.804654][ T9426] __fput+0x3e9/0x9f0 [ 273.804679][ T9426] task_work_run+0x24f/0x310 [ 273.804696][ T9426] ? __pfx_task_work_run+0x10/0x10 [ 273.804710][ T9426] ? do_exit+0xa25/0x28e0 [ 273.804731][ T9426] ? do_exit+0xa25/0x28e0 [ 273.804752][ T9426] do_exit+0xa2a/0x28e0 [ 273.804776][ T9426] ? __pfx_do_exit+0x10/0x10 [ 273.804796][ T9426] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.804816][ T9426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.804839][ T9426] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.804860][ T9426] ? _raw_spin_lock_irq+0xdf/0x120 [ 273.804876][ T9426] do_group_exit+0x207/0x2c0 [ 273.804897][ T9426] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.804910][ T9426] ? lockdep_hardirqs_on+0x99/0x150 [ 273.804928][ T9426] get_signal+0x168c/0x1720 [ 273.804949][ T9426] ? __pfx_get_signal+0x10/0x10 [ 273.804964][ T9426] ? __pfx___mm_populate+0x10/0x10 [ 273.804990][ T9426] arch_do_signal_or_restart+0x96/0x860 [ 273.805010][ T9426] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 273.805028][ T9426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.805054][ T9426] ? syscall_exit_to_user_mode+0xa3/0x340 [ 273.805072][ T9426] syscall_exit_to_user_mode+0xce/0x340 [ 273.805091][ T9426] do_syscall_64+0x100/0x230 [ 273.805110][ T9426] ? clear_bhb_loop+0x35/0x90 [ 273.805132][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.805153][ T9426] RIP: 0033:0x7f2bbcf8cde9 [ 273.805165][ T9426] Code: Unable to access opcode bytes at 0x7f2bbcf8cdbf. [ 273.805172][ T9426] RSP: 002b:00007f2bbdead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 273.805188][ T9426] RAX: 0000400000001000 RBX: 00007f2bbd1a5fa0 RCX: 00007f2bbcf8cde9 [ 273.805199][ T9426] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000400000001000 [ 273.805209][ T9426] RBP: 00007f2bbd00e2a0 R08: ffffffffffffffff R09: 000000002a1cf000 [ 273.805219][ T9426] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 273.805228][ T9426] R13: 0000000000000001 R14: 00007f2bbd1a5fa0 R15: 00007ffde5cdfee8 [ 273.805244][ T9426] [ 273.805249][ T9426] [ 274.166536][ T9426] Allocated by task 9260: [ 274.170897][ T9426] kasan_save_track+0x3f/0x80 [ 274.175590][ T9426] __kasan_kmalloc+0x98/0xb0 [ 274.180202][ T9426] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 274.187095][ T9426] kmalloc_reserve+0x111/0x2a0 [ 274.192064][ T9426] pskb_expand_head+0x1ee/0x1440 [ 274.197209][ T9426] netlink_trim+0x1d6/0x2e0 [ 274.201770][ T9426] netlink_broadcast_filtered+0x76/0x12a0 [ 274.207621][ T9426] nlmsg_notify+0xfb/0x1c0 [ 274.212174][ T9426] rtnetlink_event+0x21d/0x260 [ 274.217054][ T9426] notifier_call_chain+0x1a5/0x3f0 [ 274.222589][ T9426] netdev_change_features+0xbb/0x100 [ 274.228170][ T9426] team_del_slave+0x152/0x1d0 [ 274.232970][ T9426] do_setlink+0xf06/0x4300 [ 274.237531][ T9426] rtnl_newlink+0x156d/0x1d30 [ 274.242530][ T9426] rtnetlink_rcv_msg+0x791/0xcf0 [ 274.247570][ T9426] netlink_rcv_skb+0x206/0x480 [ 274.252533][ T9426] netlink_unicast+0x7f6/0x990 [ 274.257389][ T9426] netlink_sendmsg+0x8de/0xcb0 [ 274.262257][ T9426] __sock_sendmsg+0x221/0x270 [ 274.267021][ T9426] ____sys_sendmsg+0x53a/0x860 [ 274.272044][ T9426] __sys_sendmsg+0x269/0x350 [ 274.276835][ T9426] do_syscall_64+0xf3/0x230 [ 274.281411][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.287547][ T9426] [ 274.289880][ T9426] Freed by task 9260: [ 274.293944][ T9426] kasan_save_track+0x3f/0x80 [ 274.298716][ T9426] kasan_save_free_info+0x40/0x50 [ 274.304269][ T9426] __kasan_slab_free+0x59/0x70 [ 274.309119][ T9426] kfree+0x196/0x430 [ 274.313039][ T9426] skb_release_data+0x6a0/0x8a0 [ 274.318084][ T9426] consume_skb+0x9f/0xf0 [ 274.322364][ T9426] netlink_broadcast_filtered+0x116d/0x12a0 [ 274.328533][ T9426] nlmsg_notify+0xfb/0x1c0 [ 274.332982][ T9426] rtnetlink_event+0x21d/0x260 [ 274.337859][ T9426] notifier_call_chain+0x1a5/0x3f0 [ 274.343009][ T9426] netdev_change_features+0xbb/0x100 [ 274.348310][ T9426] team_del_slave+0x152/0x1d0 [ 274.353028][ T9426] do_setlink+0xf06/0x4300 [ 274.357711][ T9426] rtnl_newlink+0x156d/0x1d30 [ 274.363023][ T9426] rtnetlink_rcv_msg+0x791/0xcf0 [ 274.368083][ T9426] netlink_rcv_skb+0x206/0x480 [ 274.372881][ T9426] netlink_unicast+0x7f6/0x990 [ 274.377709][ T9426] netlink_sendmsg+0x8de/0xcb0 [ 274.382587][ T9426] __sock_sendmsg+0x221/0x270 [ 274.387405][ T9426] ____sys_sendmsg+0x53a/0x860 [ 274.392778][ T9426] __sys_sendmsg+0x269/0x350 [ 274.397376][ T9426] do_syscall_64+0xf3/0x230 [ 274.401940][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.407867][ T9426] [ 274.410194][ T9426] The buggy address belongs to the object at ffff88805bd5a000 [ 274.410194][ T9426] which belongs to the cache kmalloc-2k of size 2048 [ 274.425009][ T9426] The buggy address is located 1440 bytes inside of [ 274.425009][ T9426] freed 2048-byte region [ffff88805bd5a000, ffff88805bd5a800) [ 274.439008][ T9426] [ 274.441496][ T9426] The buggy address belongs to the physical page: [ 274.448269][ T9426] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bd5d000 pfn:0x5bd58 [ 274.458636][ T9426] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 274.467142][ T9426] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 274.475764][ T9426] page_type: f5(slab) [ 274.480043][ T9426] raw: 00fff00000000240 ffff88801b042000 ffffea0001fa2810 ffffea00017cd010 [ 274.489112][ T9426] raw: ffff88805bd5d000 0000000000080003 00000000f5000000 0000000000000000 [ 274.497808][ T9426] head: 00fff00000000240 ffff88801b042000 ffffea0001fa2810 ffffea00017cd010 [ 274.506668][ T9426] head: ffff88805bd5d000 0000000000080003 00000000f5000000 0000000000000000 [ 274.515607][ T9426] head: 00fff00000000003 ffffea00016f5601 ffffffffffffffff 0000000000000000 [ 274.524656][ T9426] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 274.533539][ T9426] page dumped because: kasan: bad access detected [ 274.540065][ T9426] page_owner tracks the page as allocated [ 274.545868][ T9426] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5197, tgid 5197 (klogd), ts 85510313316, free_ts 28212590062 [ 274.566984][ T9426] post_alloc_hook+0x1f4/0x240 [ 274.571859][ T9426] get_page_from_freelist+0x365c/0x37a0 [ 274.577410][ T9426] __alloc_frozen_pages_noprof+0x292/0x710 [ 274.583412][ T9426] alloc_pages_mpol+0x311/0x660 [ 274.588474][ T9426] allocate_slab+0x8f/0x3a0 [ 274.593196][ T9426] ___slab_alloc+0xc27/0x14a0 [ 274.598241][ T9426] __slab_alloc+0x58/0xa0 [ 274.602861][ T9426] __kmalloc_cache_noprof+0x27b/0x390 [ 274.608456][ T9426] syslog_print+0x110/0x630 [ 274.612969][ T9426] do_syslog+0x3c2/0x820 [ 274.617390][ T9426] __x64_sys_syslog+0x7c/0x90 [ 274.622228][ T9426] do_syscall_64+0xf3/0x230 [ 274.626739][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.633004][ T9426] page last free pid 1 tgid 1 stack trace: [ 274.639104][ T9426] free_frozen_pages+0xe0d/0x10e0 [ 274.644345][ T9426] free_contig_range+0x14c/0x430 [ 274.649379][ T9426] destroy_args+0x94/0x4b0 [ 274.654044][ T9426] debug_vm_pgtable+0x551/0x590 [ 274.658927][ T9426] do_one_initcall+0x248/0x930 [ 274.663708][ T9426] do_initcall_level+0x157/0x210 [ 274.669023][ T9426] do_initcalls+0x71/0xd0 [ 274.673381][ T9426] kernel_init_freeable+0x435/0x5d0 [ 274.678698][ T9426] kernel_init+0x1d/0x2b0 [ 274.683056][ T9426] ret_from_fork+0x4b/0x80 [ 274.687602][ T9426] ret_from_fork_asm+0x1a/0x30 [ 274.692480][ T9426] [ 274.694923][ T9426] Memory state around the buggy address: [ 274.700554][ T9426] ffff88805bd5a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.708891][ T9426] ffff88805bd5a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.717233][ T9426] >ffff88805bd5a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.725345][ T9426] ^ [ 274.730535][ T9426] ffff88805bd5a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.738907][ T9426] ffff88805bd5a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.747083][ T9426] ================================================================== [ 274.757860][ T9426] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 274.765369][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.0.925 Not tainted 6.14.0-rc2-syzkaller-00602-g22af030f01f9 #0 [ 274.776437][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 274.786696][ T9426] Call Trace: [ 274.790092][ T9426] [ 274.793138][ T9426] dump_stack_lvl+0x241/0x360 [ 274.797856][ T9426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.803267][ T9426] ? __pfx__printk+0x10/0x10 [ 274.807942][ T9426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.814245][ T9426] ? vscnprintf+0x5d/0x90 [ 274.818624][ T9426] panic+0x349/0x880 [ 274.822610][ T9426] ? check_panic_on_warn+0x21/0xb0 [ 274.827767][ T9426] ? __pfx_panic+0x10/0x10 [ 274.832304][ T9426] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 274.838397][ T9426] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.844848][ T9426] check_panic_on_warn+0x86/0xb0 [ 274.849893][ T9426] ? sco_conn_put+0xad/0x210 [ 274.854675][ T9426] end_report+0x77/0x160 [ 274.858925][ T9426] kasan_report+0x154/0x180 [ 274.863510][ T9426] ? sco_conn_put+0xad/0x210 [ 274.868224][ T9426] sco_conn_put+0xad/0x210 [ 274.872661][ T9426] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 274.878341][ T9426] hci_conn_hash_flush+0x1be/0x350 [ 274.883665][ T9426] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 274.889618][ T9426] ? drain_workqueue+0x2d3/0x3a0 [ 274.894860][ T9426] ? hci_discovery_set_state+0x57/0x180 [ 274.900596][ T9426] hci_dev_close_sync+0xa8b/0x1260 [ 274.905723][ T9426] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 274.911410][ T9426] ? rcu_is_watching+0x15/0xb0 [ 274.916365][ T9426] hci_unregister_dev+0x20b/0x510 [ 274.921502][ T9426] vhci_release+0x80/0xd0 [ 274.926464][ T9426] ? __pfx_vhci_release+0x10/0x10 [ 274.931591][ T9426] __fput+0x3e9/0x9f0 [ 274.935597][ T9426] task_work_run+0x24f/0x310 [ 274.940195][ T9426] ? __pfx_task_work_run+0x10/0x10 [ 274.945438][ T9426] ? do_exit+0xa25/0x28e0 [ 274.949786][ T9426] ? do_exit+0xa25/0x28e0 [ 274.954345][ T9426] do_exit+0xa2a/0x28e0 [ 274.958612][ T9426] ? __pfx_do_exit+0x10/0x10 [ 274.963232][ T9426] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.968792][ T9426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.974877][ T9426] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.981489][ T9426] ? _raw_spin_lock_irq+0xdf/0x120 [ 274.986617][ T9426] do_group_exit+0x207/0x2c0 [ 274.991222][ T9426] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.996514][ T9426] ? lockdep_hardirqs_on+0x99/0x150 [ 275.001844][ T9426] get_signal+0x168c/0x1720 [ 275.006487][ T9426] ? __pfx_get_signal+0x10/0x10 [ 275.011362][ T9426] ? __pfx___mm_populate+0x10/0x10 [ 275.016849][ T9426] arch_do_signal_or_restart+0x96/0x860 [ 275.022624][ T9426] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 275.028887][ T9426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.035064][ T9426] ? syscall_exit_to_user_mode+0xa3/0x340 [ 275.040895][ T9426] syscall_exit_to_user_mode+0xce/0x340 [ 275.046656][ T9426] do_syscall_64+0x100/0x230 [ 275.051289][ T9426] ? clear_bhb_loop+0x35/0x90 [ 275.056604][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.062787][ T9426] RIP: 0033:0x7f2bbcf8cde9 [ 275.067444][ T9426] Code: Unable to access opcode bytes at 0x7f2bbcf8cdbf. [ 275.074468][ T9426] RSP: 002b:00007f2bbdead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.083085][ T9426] RAX: 0000400000001000 RBX: 00007f2bbd1a5fa0 RCX: 00007f2bbcf8cde9 [ 275.091256][ T9426] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000400000001000 [ 275.099253][ T9426] RBP: 00007f2bbd00e2a0 R08: ffffffffffffffff R09: 000000002a1cf000 [ 275.107342][ T9426] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 275.115330][ T9426] R13: 0000000000000001 R14: 00007f2bbd1a5fa0 R15: 00007ffde5cdfee8 [ 275.123409][ T9426] [ 275.126890][ T9426] Kernel Offset: disabled [ 275.131229][ T9426] Rebooting in 86400 seconds..