last executing test programs: 4.067949866s ago: executing program 0 (id=1653): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1cf389bc51651d9178a79fbde8c2eba93e94d9c67b67ccd67f4222b82330b603080ad18d967c714d46bd9295d582f150b018c41c50ba13bb182a3eb0523639aac45b6a33523a6e55c57d0b1328", @ANYBLOB="391ee5b65fe50a95972c00eb554ac38d4032aab6238543e2cf0fcd20618357a57fc744989f699b6f73426968770fffada2e17929ca8b95782d074a2f71d4924b", @ANYRESDEC, @ANYBLOB, @ANYBLOB="384cb95abd3cbce14a5c82ed0f98d87a2cecef3b02b245631fabd77e422d8d15b13eb91b43", @ANYRESDEC, @ANYRESOCT=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000500)="202d818bc328b2", &(0x7f00000005c0)=""/186}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2e03a59c, 0x20}, 0xc) r5 = accept$inet6(r4, 0x0, &(0x7f0000000040)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa9, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4f23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.472644019s ago: executing program 1 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) 3.363245778s ago: executing program 4 (id=1658): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) readv(r1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$netrom(r0, &(0x7f00000001c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) close(0x3) 3.282015338s ago: executing program 2 (id=1659): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e21, 0x0, @loopback, 0x200}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x200, {0x0, 0x0, 0x0, 0x0, 0x1300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x47, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_PEER_NOTIF_DELAY={0x0, 0x1c, 0x9}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, @any, 0xfffd}, 0xe) 3.123218279s ago: executing program 1 (id=1660): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x16080, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="4100030001001f", 0x7) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) sendmmsg$inet(r5, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x130, 0x7203, 0x148, 0x130, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 3.059848271s ago: executing program 4 (id=1661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800"], 0x5c}}, 0x0) 2.894120555s ago: executing program 2 (id=1662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040), 0x4) shutdown(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0xb8, 0x7, 0xd2, 0x9}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xee19f629a186b729) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendto$inet6(r0, &(0x7f00000002c0)="b8", 0x1, 0x200048d1, &(0x7f0000000040)={0xa, 0x4e23, 0xd, @loopback, 0xffffffff}, 0x1c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x2}, 0x8) 2.663912572s ago: executing program 1 (id=1664): socket(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.429047554s ago: executing program 0 (id=1665): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2.384176708s ago: executing program 4 (id=1666): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2.309375995s ago: executing program 2 (id=1667): r0 = epoll_create1(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x400) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4, r1}, 0x7) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000340)={0x20000002}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd0}, 0x1, 0x0, 0x0, 0x24040015}, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x800}, 0x48010) 2.263650223s ago: executing program 0 (id=1669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b40800000000e40073114100000000008510000002000000b7000000000000009500c200000000009500001200000000da2377e27b6447feeea301d037b820c95ee6f391b81e2818dacd55b1d71ed5e3d52211381c5acb21d35385e7faf0b47c5b070e8877aaee17c68a43caec79279df72b5a494f9a"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 2.13526599s ago: executing program 2 (id=1671): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) readv(r1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$netrom(r0, &(0x7f00000001c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) close(0x3) 2.030258854s ago: executing program 0 (id=1672): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x9, 0x1008, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xd, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000440)="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", &(0x7f0000000300)=""/156}, 0x20) close(0x3) 1.981244936s ago: executing program 2 (id=1673): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @private=0xa010105}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x33}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860612702c"], 0xffdd) 1.850317896s ago: executing program 2 (id=1674): r0 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0xc004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x68060200) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x104, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cab170e97230", @multicast1, @remote, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0x0, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.849933882s ago: executing program 3 (id=1675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) shutdown(r0, 0x1) 1.60603203s ago: executing program 1 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800"], 0x5c}}, 0x0) 1.485538248s ago: executing program 3 (id=1677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.414182957s ago: executing program 1 (id=1678): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x9, 0x1}, {0xfff3, 0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x44}}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.292693528s ago: executing program 3 (id=1679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.154701132s ago: executing program 0 (id=1680): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.104463978s ago: executing program 3 (id=1681): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001340)='~', 0x0}, 0x20) 986.070739ms ago: executing program 0 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @long}, 0x8) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 925.355776ms ago: executing program 3 (id=1683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) readv(r1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) close(0x3) 762.436774ms ago: executing program 1 (id=1684): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x5b, 0x80000, 0x3fffc) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) unshare(0xc000000) socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0xa, 0x7, 0x619347a8, 0xfffffffffffffffc, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRESHEX], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) 740.175197ms ago: executing program 3 (id=1685): r0 = socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 718.023776ms ago: executing program 4 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000300)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r3, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xffffffffffffffcb, 0x30, 0x871a15abc695fa3d}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000084) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$fou(0x0, r2) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x92aaf3d77c105be4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$nl_route_sched(r5, 0xfffffffffffffffd, 0x2040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 439.22532ms ago: executing program 4 (id=1687): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e21, 0x0, @loopback, 0x200}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x200, {0x0, 0x0, 0x0, 0x0, 0x1300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x47, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_PEER_NOTIF_DELAY={0x0, 0x1c, 0x9}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, @any, 0xfffd}, 0xe) 0s ago: executing program 4 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): [ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.249376][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 143.267593][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.276838][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.288799][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.297457][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.309572][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.318270][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.327688][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.335703][ T5828] ldm_validate_partition_table(): Disk read failed. [ 143.342459][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.351753][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.364373][ T7181] lo speed is unknown, defaulting to 1000 [ 143.374833][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.404364][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.433713][ T5828] Dev nbd0: unable to read RDB block 0 [ 143.450087][ T5828] nbd0: unable to read partition table [ 143.474496][ T5828] ldm_validate_partition_table(): Disk read failed. [ 143.494274][ T5828] Dev nbd0: unable to read RDB block 0 [ 143.523018][ T5828] nbd0: unable to read partition table [ 143.586538][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 143.612762][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 143.679449][ T7194] geneve2: entered allmulticast mode [ 143.734829][ T7191] lo speed is unknown, defaulting to 1000 [ 144.013432][ T7201] syzkaller0: entered promiscuous mode [ 144.022265][ T7201] syzkaller0: entered allmulticast mode [ 144.230887][ T7213] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 144.496966][ T30] audit: type=1800 audit(1747153708.991:2): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.323" name="memory.events" dev="tmpfs" ino=278 res=0 errno=0 [ 146.450637][ T7213] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 146.965732][ T7294] tipc: Enabled bearer , priority 0 [ 147.022995][ T7291] syzkaller0: entered promiscuous mode [ 147.040190][ T7291] syzkaller0: entered allmulticast mode [ 147.061198][ T7295] bridge3: entered promiscuous mode [ 147.071348][ T7285] tipc: Resetting bearer [ 147.095830][ T7284] tipc: Resetting bearer [ 147.120795][ T7284] tipc: Disabling bearer [ 147.217101][ T7306] netlink: 788 bytes leftover after parsing attributes in process `syz.3.341'. [ 147.296787][ T7312] netlink: 'syz.1.342': attribute type 16 has an invalid length. [ 147.305557][ T7300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.315686][ T7312] netlink: 'syz.1.342': attribute type 17 has an invalid length. [ 147.324889][ T7300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.337127][ T7300] bond0 (unregistering): Released all slaves [ 147.416029][ T7312] net_ratelimit: 11 callbacks suppressed [ 147.416039][ T7312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.737402][ T7324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 147.822113][ T7329] syzkaller0: entered allmulticast mode [ 147.895812][ T7329] syzkaller0: entered promiscuous mode [ 147.901332][ T7329] syzkaller0: left allmulticast mode [ 147.980809][ T7329] syzkaller0: left promiscuous mode [ 148.230510][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 148.477788][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 148.533725][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 148.560454][ T7346] team0 (unregistering): Port device team_slave_0 removed [ 148.564363][ T7364] No such timeout policy "syz0" [ 148.594577][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 148.597555][ T7346] team0 (unregistering): Port device team_slave_1 removed [ 149.158632][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 149.459721][ T7394] syzkaller0: entered promiscuous mode [ 149.479419][ T7394] syzkaller0: entered allmulticast mode [ 149.508043][ T7401] openvswitch: netlink: Key type 5136 is out of range max 32 [ 149.843112][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 151.214969][ T7431] sit0: entered promiscuous mode [ 151.226706][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'. [ 151.249029][ T7431] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 151.262115][ T7431] netlink: 1 bytes leftover after parsing attributes in process `syz.1.380'. [ 151.357879][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 151.374933][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 151.673861][ T7443] syzkaller0: entered allmulticast mode [ 153.425523][ T7453] lo speed is unknown, defaulting to 1000 [ 153.433076][ T7469] bridge1: entered allmulticast mode [ 153.555043][ T7493] netlink: 'syz.1.396': attribute type 39 has an invalid length. [ 153.872577][ T7508] bridge_slave_0: left allmulticast mode [ 153.894298][ T7508] bridge_slave_0: left promiscuous mode [ 153.913039][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.940942][ T7508] bond0: (slave bond_slave_0): Releasing backup interface [ 154.019901][ T7508] bond0: (slave bond_slave_1): Releasing backup interface [ 154.066640][ T7508] team0: Port device team_slave_0 removed [ 154.081948][ T7508] team0: Port device team_slave_1 removed [ 154.088784][ T7508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.103473][ T7508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.123781][ T7517] netlink: 'syz.1.404': attribute type 4 has an invalid length. [ 154.127105][ T36] erspan0: left promiscuous mode [ 154.572852][ T7527] lo speed is unknown, defaulting to 1000 [ 155.031662][ T7547] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.062863][ T7547] smc: net device bond0 erased user defined pnetid SYZ0 [ 155.153088][ T7545] lo speed is unknown, defaulting to 1000 [ 155.595072][ T7557] __nla_validate_parse: 1 callbacks suppressed [ 155.595089][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.412'. [ 155.658851][ T7567] IPVS: length: 78 != 8 [ 155.665503][ T7557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.412'. [ 155.715755][ T7569] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.123695][ T7579] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 156.369547][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 156.603847][ T7591] netlink: del zone limit has 4 unknown bytes [ 156.668589][ T7594] lo speed is unknown, defaulting to 1000 [ 157.043028][ T7608] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 157.676143][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 157.691804][ T7628] xt_SECMARK: invalid mode: 0 [ 157.902327][ T7636] netlink: 68 bytes leftover after parsing attributes in process `syz.4.440'. [ 158.017109][ T7639] bond0: entered promiscuous mode [ 158.154843][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 158.189275][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 158.244696][ T5882] IPVS: starting estimator thread 0... [ 158.280636][ T7647] geneve2: entered allmulticast mode [ 158.367717][ T7655] IPVS: using max 32 ests per chain, 76800 per kthread [ 159.291336][ T7691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.451'. [ 159.460031][ T7695] vlan1: entered promiscuous mode [ 159.465517][ T7695] vlan0: entered promiscuous mode [ 159.470724][ T7695] gretap0: entered promiscuous mode [ 160.086774][ T7712] syzkaller0: create flow: hash 4016980938 index 0 [ 161.540484][ T7711] syzkaller0 (unregistered): delete flow: hash 4016980938 index 0 [ 161.679350][ T7756] Bluetooth: MGMT ver 1.23 [ 162.125813][ T5139] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 162.509965][ T7765] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 162.517408][ T7759] tipc: Started in network mode [ 162.534192][ T7759] tipc: Node identity 2299fa457719, cluster identity 4711 [ 162.543269][ T7759] tipc: Enabled bearer , priority 0 [ 162.574071][ T7765] dvmrp0: entered allmulticast mode [ 162.580396][ T7759] syzkaller0: entered promiscuous mode [ 162.599909][ T7759] syzkaller0: entered allmulticast mode [ 162.691893][ T7759] tipc: Resetting bearer [ 162.714784][ T7759] tipc: Disabling bearer [ 162.920533][ T7780] syzkaller0: entered promiscuous mode [ 162.928437][ T7780] syzkaller0: entered allmulticast mode [ 163.201365][ T7791] smc: net device bond0 applied user defined pnetid SYZ2 [ 163.217491][ T7791] !: renamed from dummy0 [ 163.456558][ T5882] IPVS: starting estimator thread 0... [ 163.617552][ T7797] IPVS: using max 32 ests per chain, 76800 per kthread [ 163.698631][ T7801] bridge2: entered allmulticast mode [ 163.729392][ T7804] tipc: Enabled bearer , priority 0 [ 163.857825][ T7808] syzkaller0: entered promiscuous mode [ 163.874290][ T7808] syzkaller0: entered allmulticast mode [ 163.941462][ T7804] tipc: Resetting bearer [ 164.000604][ T7802] tipc: Resetting bearer [ 164.031113][ T7802] tipc: Disabling bearer [ 164.234082][ T7832] vlan2: entered promiscuous mode [ 164.510690][ T7841] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 164.544712][ T7841] gretap0: left allmulticast mode [ 164.550331][ T7841] gretap0: left promiscuous mode [ 164.555995][ T7841] bridge0: port 3(gretap0) entered disabled state [ 164.572460][ T7841] bridge_slave_0: left allmulticast mode [ 164.579944][ T7841] bridge_slave_0: left promiscuous mode [ 164.591729][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.612749][ T7841] bridge_slave_1: left allmulticast mode [ 164.621613][ T7841] bridge_slave_1: left promiscuous mode [ 164.628178][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.645163][ T7841] bond0: (slave bond_slave_0): Releasing backup interface [ 164.680230][ T7841] bond0: (slave bond_slave_1): Releasing backup interface [ 164.738661][ T7841] team0: Port device team_slave_0 removed [ 164.762015][ T7841] team0: Port device team_slave_1 removed [ 164.782081][ T7841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.800761][ T7841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.811601][ T7841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.825779][ T7841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.098780][ T7855] netlink: 'syz.3.502': attribute type 30 has an invalid length. [ 165.157623][ T7855] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.166613][ T7855] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.175312][ T7855] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.184263][ T7855] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.213657][ T7858] IPv6: NLM_F_REPLACE set, but no existing node found! [ 165.250661][ T7855] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.260347][ T7855] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.271045][ T7855] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.280640][ T7855] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.418517][ T7855] syz.3.502 (7855) used greatest stack depth: 19880 bytes left [ 165.977053][ T7882] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.511'. [ 166.537422][ T7900] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 167.919352][ T7917] vti0: entered promiscuous mode [ 167.973275][ T7925] netlink: 'syz.1.525': attribute type 39 has an invalid length. [ 168.281401][ T7930] syzkaller1: entered promiscuous mode [ 168.322053][ T7930] syzkaller1: entered allmulticast mode [ 168.354695][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 168.444544][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 168.481653][ T7940] tipc: Enabled bearer , priority 0 [ 168.490225][ T7940] syzkaller0: entered promiscuous mode [ 168.496690][ T7940] syzkaller0: entered allmulticast mode [ 168.522450][ T7940] tipc: Resetting bearer [ 168.543944][ T7938] netlink: 'syz.0.527': attribute type 12 has an invalid length. [ 168.569514][ T7939] tipc: Resetting bearer [ 168.594415][ T7939] tipc: Disabling bearer [ 169.989770][ T7950] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 170.043090][ T7951] vlan3: entered promiscuous mode [ 170.135875][ T7959] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.534'. [ 170.514388][ T7970] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.091324][ T7989] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 171.459233][ T7992] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.549'. [ 171.595747][ T8003] vlan2: entered promiscuous mode [ 171.600835][ T8003] bond0: entered promiscuous mode [ 171.943868][ T8018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.058526][ T8033] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 172.141521][ T8018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.219488][ T8018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.346263][ T8018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.860114][ T8047] rdma_op ffff88805db9c1f0 conn xmit_rdma 0000000000000000 [ 172.892455][ T8018] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.950258][ T8018] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.978822][ T8018] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.022406][ T8018] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.268992][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 173.317385][ T8057] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.567'. [ 173.780931][ T8071] bond_slave_0: entered promiscuous mode [ 173.786720][ T8071] bond_slave_1: entered promiscuous mode [ 173.792736][ T8071] vlan1: entered promiscuous mode [ 173.797859][ T8071] bond0: entered promiscuous mode [ 174.031248][ T8080] tipc: Enabled bearer , priority 0 [ 174.058829][ T8080] syzkaller0: entered promiscuous mode [ 174.075499][ T8080] syzkaller0: entered allmulticast mode [ 174.091712][ T8080] tipc: Resetting bearer [ 174.118522][ T8079] tipc: Resetting bearer [ 174.150415][ T8079] tipc: Disabling bearer [ 174.180240][ T8088] netlink: 240 bytes leftover after parsing attributes in process `syz.4.579'. [ 174.867192][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 176.330933][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 176.585787][ T8118] netlink: 'syz.2.593': attribute type 7 has an invalid length. [ 176.707910][ T8118] : entered promiscuous mode [ 176.937254][ T8139] netem: incorrect ge model size [ 176.942588][ T8139] netem: change failed [ 178.492474][ T8178] syzkaller0: entered promiscuous mode [ 178.504658][ T8178] syzkaller0: entered allmulticast mode [ 178.528337][ T5139] Bluetooth: hci4: command 0x0405 tx timeout [ 178.796762][ T8190] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 179.851305][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 179.919147][ T8190] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 179.961301][ T8200] bridge4: entered allmulticast mode [ 180.216635][ T8210] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 180.231054][ T8210] netlink: 224 bytes leftover after parsing attributes in process `syz.3.622'. [ 180.422925][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 181.274290][ T8237] syz.0.632: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 181.336126][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.0.632 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 181.336156][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.336173][ T8237] Call Trace: [ 181.336185][ T8237] [ 181.336195][ T8237] dump_stack_lvl+0x189/0x250 [ 181.336235][ T8237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.336266][ T8237] ? __pfx__printk+0x10/0x10 [ 181.336287][ T8237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.336309][ T8237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.336332][ T8237] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 181.336355][ T8237] warn_alloc+0x214/0x310 [ 181.336385][ T8237] ? bpf_trace_run2+0x186/0x4b0 [ 181.336410][ T8237] ? __pfx_warn_alloc+0x10/0x10 [ 181.336438][ T8237] ? kasan_save_track+0x4f/0x80 [ 181.336460][ T8237] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 181.336482][ T8237] ? xskq_create+0x56/0x170 [ 181.336501][ T8237] ? __x64_sys_setsockopt+0x18b/0x220 [ 181.336528][ T8237] ? do_syscall_64+0xf6/0x210 [ 181.336547][ T8237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.336579][ T8237] __vmalloc_node_range_noprof+0x125/0x12c0 [ 181.336644][ T8237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.336671][ T8237] ? xskq_create+0x56/0x170 [ 181.336692][ T8237] ? __kasan_kmalloc+0x93/0xb0 [ 181.336722][ T8237] vmalloc_user_noprof+0x74/0x80 [ 181.336750][ T8237] ? xskq_create+0xbf/0x170 [ 181.336767][ T8237] xskq_create+0xbf/0x170 [ 181.336796][ T8237] xsk_init_queue+0xb0/0x110 [ 181.336830][ T8237] xsk_setsockopt+0x43f/0x710 [ 181.336863][ T8237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.336906][ T8237] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 181.336928][ T8237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.336960][ T8237] do_sock_setsockopt+0x257/0x3e0 [ 181.336990][ T8237] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 181.337014][ T8237] ? __fget_files+0x2a/0x420 [ 181.337044][ T8237] ? __fget_files+0x3a0/0x420 [ 181.337068][ T8237] ? __fget_files+0x2a/0x420 [ 181.337103][ T8237] __x64_sys_setsockopt+0x18b/0x220 [ 181.337135][ T8237] do_syscall_64+0xf6/0x210 [ 181.337156][ T8237] ? clear_bhb_loop+0x45/0xa0 [ 181.337180][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.337199][ T8237] RIP: 0033:0x7f44ac38e969 [ 181.337226][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.337243][ T8237] RSP: 002b:00007f44ad2c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.337265][ T8237] RAX: ffffffffffffffda RBX: 00007f44ac5b5fa0 RCX: 00007f44ac38e969 [ 181.337279][ T8237] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 181.337290][ T8237] RBP: 00007f44ac410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 181.337302][ T8237] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.337314][ T8237] R13: 0000000000000000 R14: 00007f44ac5b5fa0 R15: 00007ffdd297b128 [ 181.337346][ T8237] [ 181.337359][ T8237] Mem-Info: [ 181.736663][ T8237] active_anon:7659 inactive_anon:0 isolated_anon:0 [ 181.736663][ T8237] active_file:1287 inactive_file:39885 isolated_file:0 [ 181.736663][ T8237] unevictable:768 dirty:305 writeback:25 [ 181.736663][ T8237] slab_reclaimable:11388 slab_unreclaimable:101380 [ 181.736663][ T8237] mapped:30358 shmem:1375 pagetables:768 [ 181.736663][ T8237] sec_pagetables:0 bounce:0 [ 181.736663][ T8237] kernel_misc_reclaimable:0 [ 181.736663][ T8237] free:1339619 free_pcp:859 free_cma:0 [ 181.859383][ T8237] Node 0 active_anon:30996kB inactive_anon:0kB active_file:5148kB inactive_file:159332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121524kB dirty:724kB writeback:40kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11528kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.930195][ T8237] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.985557][ T8237] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.068859][ T8237] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 182.074714][ T8237] Node 0 DMA32 free:1429124kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:31788kB inactive_anon:0kB active_file:5148kB inactive_file:159232kB unevictable:1536kB writepending:764kB present:3129332kB managed:2564048kB mlocked:0kB bounce:0kB free_pcp:1384kB local_pcp:248kB free_cma:0kB [ 182.117064][ T8237] lowmem_reserve[]: 0 0 0 0 0 [ 182.122027][ T8237] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.183395][ T8237] lowmem_reserve[]: 0 0 0 0 0 [ 182.188798][ T8237] Node 1 Normal free:3915828kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.224395][ T8237] lowmem_reserve[]: 0 0 0 0 0 [ 182.232815][ T8237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.250124][ T8237] Node 0 DMA32: 2*4kB (UM) 47*8kB (UE) 155*16kB (UME) 298*32kB (UME) 307*64kB (UME) 125*128kB (UME) 65*256kB (UM) 36*512kB (UM) 19*1024kB (UM) 11*2048kB (UME) 318*4096kB (UM) = 1427632kB [ 182.313807][ T8237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.330006][ T8237] Node 1 Normal: 225*4kB (UE) 62*8kB (UME) 40*16kB (UME) 178*32kB (UME) 104*64kB (UME) 28*128kB (UME) 10*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3915828kB [ 182.358429][ T8237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.369837][ T8237] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 182.382691][ T8237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.394832][ T8237] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 182.450709][ T8237] 42562 total pagecache pages [ 182.465664][ T8237] 0 pages in swap cache [ 182.480428][ T8237] Free swap = 124996kB [ 182.495016][ T8237] Total swap = 124996kB [ 182.499730][ T8237] 2097051 pages RAM [ 182.503567][ T8237] 0 pages HighMem/MovableOnly [ 182.524354][ T8237] 424381 pages reserved [ 182.539686][ T8237] 0 pages cma reserved [ 183.239473][ T8270] tipc: Enabled bearer , priority 0 [ 183.373299][ T8270] syzkaller0: entered promiscuous mode [ 183.382107][ T8270] syzkaller0: entered allmulticast mode [ 183.401678][ T8270] tipc: Resetting bearer [ 183.442799][ T8269] tipc: Resetting bearer [ 183.501833][ T8275] netlink: 156 bytes leftover after parsing attributes in process `syz.3.644'. [ 184.088158][ T8284] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 184.097136][ T8284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.648'. [ 184.296010][ T5912] tipc: Node number set to 1434516037 [ 184.596535][ T8290] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 185.120120][ T8269] tipc: Disabling bearer [ 185.136253][ T8285] hsr0: entered allmulticast mode [ 185.154775][ T8285] hsr_slave_0: entered allmulticast mode [ 185.161150][ T8285] hsr_slave_1: entered allmulticast mode [ 185.251659][ T8290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.378790][ T8291] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 185.441787][ T8292] vlan2: entered allmulticast mode [ 185.462651][ T8292] veth1: entered allmulticast mode [ 185.502681][ T8292] veth1: entered promiscuous mode [ 185.517299][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 185.527082][ T8292] veth1: left promiscuous mode [ 185.534562][ T8292] bond2: (slave vlan2): making interface the new active one [ 185.543865][ T8292] veth1: entered promiscuous mode [ 185.549839][ T8292] vlan2: entered promiscuous mode [ 185.555843][ T8292] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 185.579347][ T8307] vlan3: entered promiscuous mode [ 185.584500][ T8307] syz_tun: entered promiscuous mode [ 185.770964][ T8316] syz_tun: entered allmulticast mode [ 185.860670][ T8315] syz_tun: left allmulticast mode [ 186.037478][ T8326] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.260180][ T8330] lo speed is unknown, defaulting to 1000 [ 186.273681][ T8330] lo speed is unknown, defaulting to 1000 [ 186.302925][ T8330] lo speed is unknown, defaulting to 1000 [ 186.361746][ T8330] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.432041][ T8330] lo speed is unknown, defaulting to 1000 [ 186.461879][ T8330] lo speed is unknown, defaulting to 1000 [ 186.474878][ T8330] lo speed is unknown, defaulting to 1000 [ 186.490047][ T8330] lo speed is unknown, defaulting to 1000 [ 186.503032][ T8330] lo speed is unknown, defaulting to 1000 [ 186.661850][ T8347] netlink: 156 bytes leftover after parsing attributes in process `syz.2.667'. [ 186.784663][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 187.223713][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 187.347818][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 187.352748][ T8380] bridge5: entered allmulticast mode [ 187.357799][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 187.371604][ T8381] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 187.379498][ T8381] netlink: 10 bytes leftover after parsing attributes in process `syz.3.693'. [ 187.393388][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 187.416330][ T8381] nbd: socks must be embedded in a SOCK_ITEM attr [ 187.435720][ T8381] block nbd1: shutting down sockets [ 187.503861][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 187.694349][ T8388] bpq0: entered promiscuous mode [ 187.700516][ T8388] bpq0: entered allmulticast mode [ 187.846842][ T8396] bridge0: port 1(gretap0) entered blocking state [ 187.853765][ T8396] bridge0: port 1(gretap0) entered disabled state [ 187.860776][ T8396] gretap0: entered allmulticast mode [ 187.872540][ T8396] gretap0: entered promiscuous mode [ 187.958427][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 187.985485][ T8401] netlink: 'syz.0.688': attribute type 3 has an invalid length. [ 190.091377][ T8443] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 190.102693][ T8444] tipc: Started in network mode [ 190.107806][ T8444] tipc: Node identity 32cb251c2b8c, cluster identity 4711 [ 190.115439][ T8444] tipc: Enabled bearer , priority 0 [ 190.189594][ T8443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.201743][ T8444] syzkaller0: entered promiscuous mode [ 190.207392][ T8444] syzkaller0: entered allmulticast mode [ 190.231805][ T8446] bond2: (slave ip6gretap1): making interface the new active one [ 190.266583][ T8446] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 190.278743][ T8444] tipc: Resetting bearer [ 190.309290][ T8442] tipc: Resetting bearer [ 190.382542][ T8442] tipc: Disabling bearer [ 190.702448][ T8454] lo speed is unknown, defaulting to 1000 [ 192.686151][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 193.847247][ T8470] lo speed is unknown, defaulting to 1000 [ 193.855656][ T8472] geneve2: entered promiscuous mode [ 194.046783][ T8502] bridge2: entered allmulticast mode [ 194.210633][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.292510][ T8510] erspan0: left allmulticast mode [ 194.312406][ T8510] sit0: left promiscuous mode [ 194.337848][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.346749][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.476975][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.494455][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.619612][ T8510] veth3: left promiscuous mode [ 194.628427][ T8510] bridge1: left allmulticast mode [ 194.635264][ T8510] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.645230][ T8510] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.655438][ T8510] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.665216][ T8510] geneve2: left allmulticast mode [ 194.678759][ T8510] bridge2: left allmulticast mode [ 195.126027][ T8531] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 195.202550][ T8531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.353648][ T8533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.373671][ T8533] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.386387][ T8533] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 195.448010][ T8531] veth3: entered promiscuous mode [ 195.457383][ T8531] bond3: (slave veth3): Enslaving as an active interface with a down link [ 195.507229][ T8542] erspan0: entered allmulticast mode [ 195.540343][ T8542] bond3: (slave erspan0): making interface the new active one [ 195.564593][ T8542] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 195.600514][ T8535] lo speed is unknown, defaulting to 1000 [ 195.930299][ T8554] __nla_validate_parse: 3 callbacks suppressed [ 195.930319][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.741'. [ 195.939260][ T8553] lo speed is unknown, defaulting to 1000 [ 195.963343][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 196.039848][ T8554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.061543][ T8554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.070666][ T8554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.080077][ T8554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.089074][ T8554] geneve2: entered allmulticast mode [ 196.340743][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 196.713234][ T8574] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.813637][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 196.922955][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 196.966879][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.013782][ T8581] macsec1: entered allmulticast mode [ 197.032371][ T8581] dummy0: entered allmulticast mode [ 197.090988][ T8581] dummy0: left allmulticast mode [ 197.164442][ T8574] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.205023][ T8583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.750'. [ 197.255521][ T8583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.750'. [ 197.278980][ T8586] bpq0: left promiscuous mode [ 197.299508][ T8586] bpq0: left allmulticast mode [ 197.316415][ T5995] vlan2: left promiscuous mode [ 197.346623][ T8574] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.503865][ T8574] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.588841][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 197.640682][ T8595] syzkaller0: entered allmulticast mode [ 197.923508][ T8594] team0 (unregistering): Port device team_slave_0 removed [ 197.933820][ T8594] team0 (unregistering): Port device team_slave_1 removed [ 197.982577][ T8599] syzkaller0: entered promiscuous mode [ 197.988477][ T8599] syzkaller0: left allmulticast mode [ 198.041058][ T8602] syzkaller0: left promiscuous mode [ 198.090306][ T8574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.168546][ T8574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.299732][ T8574] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.389130][ T8611] bridge3: entered promiscuous mode [ 198.428596][ T8616] tipc: Enabled bearer , priority 0 [ 198.457389][ T8574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.470562][ T8616] syzkaller0: entered promiscuous mode [ 198.483283][ T8616] syzkaller0: entered allmulticast mode [ 198.524318][ T8616] tipc: Resetting bearer [ 198.564821][ T8615] tipc: Resetting bearer [ 198.626040][ T8615] tipc: Disabling bearer [ 198.850527][ T8626] lo speed is unknown, defaulting to 1000 [ 198.890678][ T8620] lo speed is unknown, defaulting to 1000 [ 199.862247][ T8644] netlink: 'syz.4.767': attribute type 39 has an invalid length. [ 199.999111][ T30] audit: type=1800 audit(1747153764.501:3): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.763" name="memory.events" dev="tmpfs" ino=813 res=0 errno=0 [ 201.548785][ T8672] lo speed is unknown, defaulting to 1000 [ 202.380698][ T8687] netlink: 'syz.3.780': attribute type 4 has an invalid length. [ 202.640433][ T8691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.783'. [ 204.153716][ T8732] lo speed is unknown, defaulting to 1000 [ 204.902305][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.812'. [ 204.903083][ T8760] lo speed is unknown, defaulting to 1000 [ 204.962034][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 205.525010][ T8777] netlink: 'syz.1.815': attribute type 39 has an invalid length. [ 205.867827][ T5989] team0: Port device team_slave_0 removed [ 206.362957][ T8800] IPv6: NLM_F_REPLACE set, but no existing node found! [ 206.398635][ T8801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.503586][ T8801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.601848][ T8801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.744447][ T8801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.970797][ T8801] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.007428][ T8801] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.040027][ T8801] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.114064][ T8801] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.483546][ T8828] rdma_op ffff88807fa661f0 conn xmit_rdma 0000000000000000 [ 207.607602][ T8832] syzkaller1: entered promiscuous mode [ 207.613189][ T8832] syzkaller1: entered allmulticast mode [ 207.642630][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 207.682409][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 207.729242][ T8832] netlink: 'syz.3.835': attribute type 12 has an invalid length. [ 207.967963][ T8841] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 208.020413][ T8841] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.044453][ T8842] batman_adv: batadv0: Adding interface: dummy0 [ 208.050966][ T8842] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.082086][ T8842] batman_adv: batadv0: Interface activated: dummy0 [ 208.123149][ T8841] batadv0: mtu less than device minimum [ 208.143895][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.155986][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.168053][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.180056][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.192045][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.204037][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.216061][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.228077][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.240074][ T8841] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.301055][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 208.530570][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 208.860316][ T8861] team0: Mode changed to "activebackup" [ 208.909403][ T8861] tipc: Enabled bearer , priority 0 [ 208.990906][ T8867] lo speed is unknown, defaulting to 1000 [ 209.268206][ T8873] tun0: tun_chr_ioctl cmd 2147767520 [ 209.277074][ T8875] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 209.640820][ T8883] lo speed is unknown, defaulting to 1000 [ 210.035663][ T9] tipc: Node number set to 2957007256 [ 210.475791][ T8891] syzkaller1: entered promiscuous mode [ 210.481706][ T8891] syzkaller1: entered allmulticast mode [ 210.685893][ T8901] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 210.764287][ T8901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.783905][ T8904] syz.4.862: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 210.831710][ T8905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.839390][ T8905] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 210.861299][ T8905] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 210.869019][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.4.862 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 210.869060][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.869079][ T8904] Call Trace: [ 210.869087][ T8904] [ 210.869096][ T8904] dump_stack_lvl+0x189/0x250 [ 210.869132][ T8904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.869160][ T8904] ? __pfx__printk+0x10/0x10 [ 210.869181][ T8904] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.869201][ T8904] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.869222][ T8904] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 210.869245][ T8904] warn_alloc+0x214/0x310 [ 210.869292][ T8904] ? __pfx___schedule+0x10/0x10 [ 210.869327][ T8904] ? __pfx_warn_alloc+0x10/0x10 [ 210.869365][ T8904] ? kasan_save_track+0x4f/0x80 [ 210.869387][ T8904] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 210.869410][ T8904] ? xskq_create+0x56/0x170 [ 210.869429][ T8904] ? __x64_sys_setsockopt+0x18b/0x220 [ 210.869454][ T8904] ? do_syscall_64+0xf6/0x210 [ 210.869474][ T8904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.869507][ T8904] __vmalloc_node_range_noprof+0x125/0x12c0 [ 210.869570][ T8904] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 210.869602][ T8904] ? __kasan_kmalloc+0x93/0xb0 [ 210.869632][ T8904] vmalloc_user_noprof+0x74/0x80 [ 210.869660][ T8904] ? xskq_create+0xbf/0x170 [ 210.869676][ T8904] xskq_create+0xbf/0x170 [ 210.869699][ T8904] xsk_init_queue+0xb0/0x110 [ 210.869733][ T8904] xsk_setsockopt+0x43f/0x710 [ 210.869767][ T8904] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.869810][ T8904] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 210.869832][ T8904] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.869864][ T8904] do_sock_setsockopt+0x257/0x3e0 [ 210.869894][ T8904] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 210.869918][ T8904] ? __fget_files+0x2a/0x420 [ 210.869949][ T8904] ? __fget_files+0x3a0/0x420 [ 210.869971][ T8904] ? __fget_files+0x2a/0x420 [ 210.870003][ T8904] __x64_sys_setsockopt+0x18b/0x220 [ 210.870036][ T8904] do_syscall_64+0xf6/0x210 [ 210.870058][ T8904] ? clear_bhb_loop+0x45/0xa0 [ 210.870094][ T8904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.870113][ T8904] RIP: 0033:0x7f07d978e969 [ 210.870130][ T8904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.870145][ T8904] RSP: 002b:00007f07da542038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.870164][ T8904] RAX: ffffffffffffffda RBX: 00007f07d99b5fa0 RCX: 00007f07d978e969 [ 210.870177][ T8904] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 210.870207][ T8904] RBP: 00007f07d9810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 210.870218][ T8904] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.870230][ T8904] R13: 0000000000000000 R14: 00007f07d99b5fa0 R15: 00007ffffe23ddb8 [ 210.870260][ T8904] [ 210.870269][ T8904] Mem-Info: [ 211.164956][ T8904] active_anon:9942 inactive_anon:0 isolated_anon:0 [ 211.164956][ T8904] active_file:1287 inactive_file:39897 isolated_file:0 [ 211.164956][ T8904] unevictable:3789 dirty:388 writeback:0 [ 211.164956][ T8904] slab_reclaimable:11369 slab_unreclaimable:108457 [ 211.164956][ T8904] mapped:31370 shmem:1376 pagetables:777 [ 211.164956][ T8904] sec_pagetables:0 bounce:0 [ 211.164956][ T8904] kernel_misc_reclaimable:0 [ 211.164956][ T8904] free:1326259 free_pcp:2096 free_cma:0 [ 211.244503][ T8901] ip6erspan0: entered promiscuous mode [ 211.266938][ T8904] Node 0 active_anon:48568kB inactive_anon:0kB active_file:5148kB inactive_file:159380kB unevictable:5420kB isolated(anon):0kB isolated(file):0kB mapped:125480kB dirty:1552kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11484kB pagetables:3008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 211.309602][ T8901] bond3: (slave ip6erspan0): making interface the new active one [ 211.337763][ T8901] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 211.365609][ T8904] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 211.435481][ T8904] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.504268][ T8910] lo speed is unknown, defaulting to 1000 [ 211.514161][ T8904] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 211.520405][ T8904] Node 0 DMA32 free:1373456kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:30760kB inactive_anon:0kB active_file:5148kB inactive_file:159280kB unevictable:2420kB writepending:1552kB present:3129332kB managed:2564048kB mlocked:912kB bounce:0kB free_pcp:28808kB local_pcp:7288kB free_cma:0kB [ 211.606984][ T8904] lowmem_reserve[]: 0 0 0 0 0 [ 211.611818][ T8904] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.642294][ T8920] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 211.654656][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 211.661086][ T8920] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 211.671321][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.672309][ T5831] Bluetooth: hci3: command 0x0401 tx timeout [ 211.742803][ T8904] lowmem_reserve[]: 0 0 0 0 0 [ 211.749338][ T8904] Node 1 Normal free:3915820kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.780267][ T8904] lowmem_reserve[]: 0 0 0 0 0 [ 211.785083][ T8904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.798490][ T8904] Node 0 DMA32: 1*4kB (U) 50*8kB (UME) 161*16kB (UME) 288*32kB (UE) 220*64kB (UME) 5*128kB (E) 1*256kB (M) 13*512kB (U) 21*1024kB (U) 7*2048kB (UME) 318*4096kB (UM) = 1372196kB [ 211.816808][ T8904] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 211.828759][ T8904] Node 1 Normal: 223*4kB (UE) 62*8kB (UME) 40*16kB (UME) 178*32kB (UME) 104*64kB (UME) 28*128kB (UME) 10*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3915820kB [ 211.847867][ T8904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.864938][ T8904] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.879659][ T8904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.890138][ T8904] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.905454][ T8904] 44236 total pagecache pages [ 211.910177][ T8904] 0 pages in swap cache [ 211.914556][ T8904] Free swap = 124996kB [ 211.923554][ T8904] Total swap = 124996kB [ 211.929224][ T8904] 2097051 pages RAM [ 211.933078][ T8904] 0 pages HighMem/MovableOnly [ 211.942237][ T8904] 424381 pages reserved [ 211.946560][ T8904] 0 pages cma reserved [ 211.984361][ T8929] tipc: Enabled bearer , priority 0 [ 212.015929][ T8929] tipc: Resetting bearer [ 212.075207][ T8925] lo speed is unknown, defaulting to 1000 [ 213.016941][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 213.184578][ T8947] bond0: (slave bridge0): Releasing backup interface [ 213.249415][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 213.450451][ T8954] lo speed is unknown, defaulting to 1000 [ 213.727892][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 213.804383][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 213.815831][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.826265][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 213.836623][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.858421][ T8961] dummy0: entered promiscuous mode [ 213.864278][ T8961] macsec1: entered allmulticast mode [ 213.870108][ T8961] dummy0: entered allmulticast mode [ 213.878192][ T8961] dummy0: left allmulticast mode [ 213.883622][ T8961] dummy0: left promiscuous mode [ 213.923028][ T8958] lo speed is unknown, defaulting to 1000 [ 214.340037][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.878'. [ 214.367293][ T8954] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 214.375188][ T8954] netlink: 'syz.1.878': attribute type 2 has an invalid length. [ 214.383255][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 215.132311][ T8989] vlan4: entered promiscuous mode [ 215.364921][ T8997] tipc: Failed to remove unknown binding: 66,1,1/1434516037:1600526850/1600526852 [ 215.409375][ T8997] tipc: Failed to remove unknown binding: 66,1,1/1434516037:1600526850/1600526852 [ 215.478702][ T8997] tipc: Failed to remove unknown binding: 66,1,1/1434516037:1600526850/1600526852 [ 215.543595][ T9002] bridge3: entered allmulticast mode [ 215.603404][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 215.674891][ T9008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.896'. [ 216.701659][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 216.954909][ T9042] lo speed is unknown, defaulting to 1000 [ 217.101925][ T9049] lo speed is unknown, defaulting to 1000 [ 217.111992][ T9049] lo speed is unknown, defaulting to 1000 [ 217.120040][ T9049] lo speed is unknown, defaulting to 1000 [ 217.527088][ T6955] lo speed is unknown, defaulting to 1000 [ 217.535468][ T9049] infiniband syz0: set active [ 217.540453][ T9049] infiniband syz0: added lo [ 217.593298][ T9049] RDS/IB: syz0: added [ 217.597968][ T9049] smc: adding ib device syz0 with port count 1 [ 217.604368][ T9049] smc: ib device syz0 port 1 has pnetid [ 217.610840][ T6955] lo speed is unknown, defaulting to 1000 [ 217.619500][ T9049] lo speed is unknown, defaulting to 1000 [ 217.965622][ T5139] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 218.081872][ T9064] netlink: 'syz.1.913': attribute type 39 has an invalid length. [ 218.116235][ T9049] lo speed is unknown, defaulting to 1000 [ 218.273281][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 218.418515][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 218.451615][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.928'. [ 218.469112][ T5912] lo speed is unknown, defaulting to 1000 [ 218.841625][ T5828] udevd[5828]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 218.888642][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 218.994136][ T9049] lo speed is unknown, defaulting to 1000 [ 218.999942][ T9091] gretap0: left allmulticast mode [ 219.000041][ T9091] gretap0: left promiscuous mode [ 219.000270][ T9091] bridge0: port 1(gretap0) entered disabled state [ 219.599165][ T9049] lo speed is unknown, defaulting to 1000 [ 219.994701][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.932'. [ 220.040539][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 220.128617][ T9049] lo speed is unknown, defaulting to 1000 [ 220.355102][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 220.391419][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 220.415506][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.435496][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 220.455446][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.477038][ T9114] dummy0: entered promiscuous mode [ 220.489077][ T9114] dummy0: left promiscuous mode [ 220.773623][ T9125] bridge0: port 3(gretap0) entered blocking state [ 220.787873][ T9125] bridge0: port 3(gretap0) entered disabled state [ 220.794812][ T9125] gretap0: entered allmulticast mode [ 220.802487][ T9125] gretap0: entered promiscuous mode [ 220.808920][ T9125] bridge0: port 3(gretap0) entered blocking state [ 220.815550][ T9125] bridge0: port 3(gretap0) entered forwarding state [ 220.844844][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 220.858041][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 220.907729][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 220.942038][ T9131] netlink: 'syz.3.937': attribute type 3 has an invalid length. [ 221.103262][ T9135] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 221.125711][ T9135] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 221.133343][ T9135] tipc: Resetting bearer [ 221.378647][ T9141] bridge4: entered allmulticast mode [ 223.880221][ T9195] __nla_validate_parse: 3 callbacks suppressed [ 223.880241][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 224.482787][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 224.505441][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.538706][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 224.569103][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.616474][ T9195] dummy0: entered promiscuous mode [ 224.621716][ T9195] macsec2: entered allmulticast mode [ 224.635357][ T9195] dummy0: entered allmulticast mode [ 224.652981][ T9195] dummy0: left allmulticast mode [ 224.705828][ T9195] dummy0: left promiscuous mode [ 225.030668][ T9217] net_ratelimit: 10 callbacks suppressed [ 225.030688][ T9217] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.140250][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 225.622549][ T9226] lo speed is unknown, defaulting to 1000 [ 225.705810][ T9226] lo speed is unknown, defaulting to 1000 [ 225.899729][ T9237] netlink: 4980 bytes leftover after parsing attributes in process `syz.1.964'. [ 225.927648][ T9239] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 226.013876][ T9239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.166971][ T9242] bond1: (slave ip6gretap1): making interface the new active one [ 226.184548][ T9242] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 226.858673][ T9266] sock: sock_timestamping_bind_phc: sock not bind to device [ 226.871035][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 226.893750][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 226.935706][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.965465][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 226.975234][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.016884][ T9265] macsec1: entered allmulticast mode [ 227.023041][ T9265] dummy0: entered allmulticast mode [ 227.031447][ T9265] dummy0: left allmulticast mode [ 227.487762][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'. [ 227.497891][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'. [ 227.532868][ T9281] netlink: 80 bytes leftover after parsing attributes in process `syz.4.978'. [ 227.640752][ T9279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.665706][ T9279] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.723194][ T9279] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.814134][ T9279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.847827][ T9279] geneve2: entered allmulticast mode [ 227.931456][ T9273] lo speed is unknown, defaulting to 1000 [ 227.974159][ T9273] lo speed is unknown, defaulting to 1000 [ 228.511797][ T9292] bridge0: port 3(gretap0) entered disabled state [ 228.547961][ T9292] erspan0: left allmulticast mode [ 228.780258][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.787765][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.834844][ T9292] batman_adv: batadv0: Interface deactivated: dummy0 [ 229.190573][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.256173][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.320807][ T9292] hsr0: left allmulticast mode [ 229.327032][ T9292] hsr_slave_0: left allmulticast mode [ 229.332631][ T9292] hsr_slave_1: left allmulticast mode [ 229.521341][ T9292] macsec1: left promiscuous mode [ 229.530466][ T9292] bridge1: left allmulticast mode [ 229.544706][ T9292] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.573345][ T9292] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.593256][ T9292] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.630407][ T9292] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.665840][ T9292] geneve2: left allmulticast mode [ 229.696851][ T9292] bridge2: left allmulticast mode [ 229.706895][ T9292] veth3: left promiscuous mode [ 229.721271][ T9292] bridge3: left promiscuous mode [ 229.738901][ T9292] bridge4: left allmulticast mode [ 229.896740][ T9305] lo speed is unknown, defaulting to 1000 [ 229.905217][ T9305] lo speed is unknown, defaulting to 1000 [ 230.018432][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.090798][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.155809][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.567774][ T9322] trusted_key: syz.2.990 sent an empty control message without MSG_MORE. [ 230.584793][ T9322] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.990'. [ 230.594533][ T9322] netlink: zone id is out of range [ 230.600457][ T9322] netlink: zone id is out of range [ 230.605884][ T9322] netlink: zone id is out of range [ 230.611037][ T9322] netlink: zone id is out of range [ 230.616543][ T9322] netlink: zone id is out of range [ 230.621690][ T9322] netlink: zone id is out of range [ 230.647307][ T9322] netlink: zone id is out of range [ 230.663875][ T9322] netlink: zone id is out of range [ 230.669203][ T9322] netlink: zone id is out of range [ 230.674505][ T9322] netlink: zone id is out of range [ 231.140238][ T9336] sctp: [Deprecated]: syz.0.1005 (pid 9336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.140238][ T9336] Use struct sctp_sack_info instead [ 231.143598][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 231.178804][ T9332] netlink: 'syz.0.1005': attribute type 1 has an invalid length. [ 231.211775][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 231.230179][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.242622][ T9335] macsec1: entered allmulticast mode [ 231.252767][ T9335] !: entered allmulticast mode [ 231.266172][ T9335] !: left allmulticast mode [ 231.468791][ T9332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.604552][ T9336] bond1: (slave gretap1): making interface the new active one [ 231.623704][ T9336] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.649294][ T9355] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌUvy¸ÚØ¢…D£øUDŒw˜}z' [ 231.700642][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.3.1000 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 231.700675][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.700689][ T9355] Call Trace: [ 231.700698][ T9355] [ 231.700707][ T9355] dump_stack_lvl+0x189/0x250 [ 231.700745][ T9355] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.700767][ T9355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.700796][ T9355] ? __pfx__printk+0x10/0x10 [ 231.700821][ T9355] ? kernfs_path_from_node+0x2b/0x260 [ 231.700855][ T9355] ? kernfs_path_from_node+0x216/0x260 [ 231.700887][ T9355] sysfs_warn_dup+0x8e/0xa0 [ 231.700915][ T9355] sysfs_do_create_link_sd+0xc0/0x110 [ 231.700946][ T9355] device_add_class_symlinks+0x1cf/0x240 [ 231.700976][ T9355] device_add+0x475/0xb50 [ 231.701005][ T9355] wiphy_register+0x199a/0x26b0 [ 231.701051][ T9355] ? __pfx_wiphy_register+0x10/0x10 [ 231.701075][ T9355] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 231.701111][ T9355] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 231.701144][ T9355] ieee80211_register_hw+0x334b/0x4060 [ 231.701191][ T9355] ? ieee80211_register_hw+0x14d1/0x4060 [ 231.701234][ T9355] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 231.701270][ T9355] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.701309][ T9355] ? __hrtimer_setup+0x187/0x210 [ 231.701338][ T9355] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 231.701367][ T9355] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 231.701446][ T9355] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 231.701478][ T9355] ? trace_kmalloc+0x1f/0xd0 [ 231.701500][ T9355] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 231.701527][ T9355] ? kstrndup+0xbf/0x160 [ 231.701560][ T9355] hwsim_new_radio_nl+0xea4/0x1b10 [ 231.701585][ T9355] ? __pfx___nla_validate_parse+0x10/0x10 [ 231.701639][ T9355] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 231.701666][ T9355] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 231.701696][ T9355] ? __nla_parse+0x40/0x60 [ 231.701724][ T9355] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 231.701764][ T9355] genl_family_rcv_msg_doit+0x212/0x300 [ 231.701793][ T9355] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 231.701827][ T9355] ? bpf_lsm_capable+0x9/0x20 [ 231.701854][ T9355] ? security_capable+0x7e/0x2e0 [ 231.701882][ T9355] genl_rcv_msg+0x60e/0x790 [ 231.701908][ T9355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.701926][ T9355] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 231.701962][ T9355] netlink_rcv_skb+0x219/0x490 [ 231.701989][ T9355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.702009][ T9355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.702062][ T9355] ? down_read+0x1ad/0x2e0 [ 231.702087][ T9355] genl_rcv+0x28/0x40 [ 231.702114][ T9355] netlink_unicast+0x758/0x8d0 [ 231.702150][ T9355] netlink_sendmsg+0x805/0xb30 [ 231.702187][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.702217][ T9355] ? aa_sock_msg_perm+0x94/0x160 [ 231.702241][ T9355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.702262][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.702288][ T9355] __sock_sendmsg+0x219/0x270 [ 231.702313][ T9355] ____sys_sendmsg+0x505/0x830 [ 231.702348][ T9355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.702387][ T9355] ? import_iovec+0x74/0xa0 [ 231.702424][ T9355] ___sys_sendmsg+0x21f/0x2a0 [ 231.702455][ T9355] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.702527][ T9355] ? __fget_files+0x2a/0x420 [ 231.702552][ T9355] ? __fget_files+0x3a0/0x420 [ 231.702591][ T9355] __x64_sys_sendmsg+0x19b/0x260 [ 231.702642][ T9355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.702693][ T9355] ? do_syscall_64+0xba/0x210 [ 231.702719][ T9355] do_syscall_64+0xf6/0x210 [ 231.702741][ T9355] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.702761][ T9355] ? clear_bhb_loop+0x45/0xa0 [ 231.702786][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.702805][ T9355] RIP: 0033:0x7f970678e969 [ 231.702824][ T9355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.702841][ T9355] RSP: 002b:00007f970753c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.702864][ T9355] RAX: ffffffffffffffda RBX: 00007f97069b5fa0 RCX: 00007f970678e969 [ 231.702879][ T9355] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 231.702892][ T9355] RBP: 00007f9706810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 231.702904][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.702916][ T9355] R13: 0000000000000000 R14: 00007f97069b5fa0 R15: 00007ffc0e498cf8 [ 231.702950][ T9355] [ 232.290373][ T9368] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 232.320132][ T9368] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1002'. [ 232.440147][ T9369] lo speed is unknown, defaulting to 1000 [ 232.564936][ T9369] lo speed is unknown, defaulting to 1000 [ 233.490674][ T9375] siw: device registration error -23 [ 233.696300][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 233.821636][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 233.835263][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.874223][ T9403] macsec2: entered allmulticast mode [ 233.882078][ T9403] dummy0: entered allmulticast mode [ 233.919475][ T9408] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 233.928864][ T9403] dummy0: left allmulticast mode [ 234.060017][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 234.169616][ T9408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.238855][ T9411] ip6erspan0: entered promiscuous mode [ 234.319327][ T9411] bond2: (slave ip6erspan0): making interface the new active one [ 234.363101][ T9411] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 234.365783][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 234.718038][ T9415] lo speed is unknown, defaulting to 1000 [ 234.858319][ T9415] lo speed is unknown, defaulting to 1000 [ 235.045775][ T9434] netlink: 'syz.2.1023': attribute type 7 has an invalid length. [ 235.649477][ T9441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.662489][ T9441] bond_slave_0: left promiscuous mode [ 235.683079][ T9441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.697567][ T9441] bond_slave_1: left promiscuous mode [ 235.710821][ T9441] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 235.723997][ T9441] bond0 (unregistering): Released all slaves [ 235.932732][ T9448] lo speed is unknown, defaulting to 1000 [ 236.074212][ T9448] lo speed is unknown, defaulting to 1000 [ 236.166205][ T9464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 236.628576][ T9458] lo speed is unknown, defaulting to 1000 [ 236.705176][ T9458] lo speed is unknown, defaulting to 1000 [ 237.619843][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 238.041993][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 238.137380][ T9503] sctp: [Deprecated]: syz.0.1040 (pid 9503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.137380][ T9503] Use struct sctp_sack_info instead [ 238.188521][ T30] audit: type=1804 audit(1747153802.691:4): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1042" name="memory.events" dev="tmpfs" ino=1072 res=1 errno=0 [ 238.285620][ T30] audit: type=1800 audit(1747153802.691:5): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1042" name="memory.events" dev="tmpfs" ino=1072 res=0 errno=0 [ 238.378466][ T9500] syz.4.1041 (9500) used greatest stack depth: 17512 bytes left [ 238.462137][ T9507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1044'. [ 238.879342][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 239.093060][ T9508] batman_adv: batadv0: Interface deactivated: dummy0 [ 239.744749][ T9508] hsr0: left promiscuous mode [ 239.860629][ T9508] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.871147][ T9508] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.880051][ T9508] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.891530][ T9508] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.946804][ T5884] lo speed is unknown, defaulting to 1000 [ 239.952590][ T5884] syz0: Port: 1 Link DOWN [ 239.956397][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1046'. [ 239.977228][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1046'. [ 240.155792][ T6934] lo speed is unknown, defaulting to 1000 [ 240.162897][ T9523] lo speed is unknown, defaulting to 1000 [ 240.233459][ T9523] lo speed is unknown, defaulting to 1000 [ 240.402173][ T9543] bond_slave_0: entered allmulticast mode [ 240.505147][ T9547] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1054'. [ 241.036125][ T9559] xt_CT: No such helper "snmp" [ 241.494240][ T9565] tipc: Resetting bearer [ 241.529716][ T9565] bond1: (slave ip6gretap1): Releasing active interface [ 241.576842][ T9556] net_ratelimit: 4054 callbacks suppressed [ 241.576865][ T9556] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.665447][ T9556] tipc: Enabled bearer , priority 10 [ 241.715821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.802589][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 241.855658][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.874393][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.984349][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 241.995569][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.054145][ T9581] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1061'. [ 242.135535][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.275536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.372719][ T9595] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 242.415451][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.472033][ T9602] sit0: entered promiscuous mode [ 242.489522][ T9602] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 242.555742][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.688840][ T9605] lo speed is unknown, defaulting to 1000 [ 242.701411][ T6949] tipc: Node number set to 424092956 [ 242.714864][ T9605] lo speed is unknown, defaulting to 1000 [ 242.824899][ T9611] __nla_validate_parse: 1 callbacks suppressed [ 242.824920][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 242.840639][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.010638][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.105705][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.939219][ T9648] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.299005][ T9660] lo speed is unknown, defaulting to 1000 [ 244.325097][ T9660] lo speed is unknown, defaulting to 1000 [ 244.428899][ T30] audit: type=1107 audit(1747153808.931:6): pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 245.099157][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.115675][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.138482][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.237052][ T9664] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.364476][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.394986][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.425600][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.530547][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.550376][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.571168][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 245.756287][ T9672] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 246.007834][ T9696] sock: sock_timestamping_bind_phc: sock not bind to device [ 246.039235][ T9699] warn_alloc: 2 callbacks suppressed [ 246.039255][ T9699] syz.3.1106: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.105125][ T9699] CPU: 0 UID: 0 PID: 9699 Comm: syz.3.1106 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 246.105164][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.105189][ T9699] Call Trace: [ 246.105198][ T9699] [ 246.105208][ T9699] dump_stack_lvl+0x189/0x250 [ 246.105248][ T9699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.105279][ T9699] ? __pfx__printk+0x10/0x10 [ 246.105299][ T9699] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.105320][ T9699] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.105343][ T9699] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.105366][ T9699] warn_alloc+0x214/0x310 [ 246.105396][ T9699] ? __pfx___schedule+0x10/0x10 [ 246.105431][ T9699] ? __pfx_warn_alloc+0x10/0x10 [ 246.105459][ T9699] ? kasan_save_track+0x4f/0x80 [ 246.105482][ T9699] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 246.105507][ T9699] ? xskq_create+0x56/0x170 [ 246.105535][ T9699] ? __x64_sys_setsockopt+0x18b/0x220 [ 246.105562][ T9699] ? do_syscall_64+0xf6/0x210 [ 246.105581][ T9699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.105615][ T9699] __vmalloc_node_range_noprof+0x125/0x12c0 [ 246.105679][ T9699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.105707][ T9699] ? xskq_create+0x56/0x170 [ 246.105728][ T9699] ? __kasan_kmalloc+0x93/0xb0 [ 246.105759][ T9699] vmalloc_user_noprof+0x74/0x80 [ 246.105788][ T9699] ? xskq_create+0xbf/0x170 [ 246.105806][ T9699] xskq_create+0xbf/0x170 [ 246.105828][ T9699] xsk_init_queue+0xb0/0x110 [ 246.105863][ T9699] xsk_setsockopt+0x43f/0x710 [ 246.105897][ T9699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.105941][ T9699] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 246.105964][ T9699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.105996][ T9699] do_sock_setsockopt+0x257/0x3e0 [ 246.106027][ T9699] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 246.106052][ T9699] ? __fget_files+0x2a/0x420 [ 246.106083][ T9699] ? __fget_files+0x3a0/0x420 [ 246.106109][ T9699] ? __fget_files+0x2a/0x420 [ 246.106145][ T9699] __x64_sys_setsockopt+0x18b/0x220 [ 246.106180][ T9699] do_syscall_64+0xf6/0x210 [ 246.106202][ T9699] ? clear_bhb_loop+0x45/0xa0 [ 246.106228][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.106248][ T9699] RIP: 0033:0x7f970678e969 [ 246.106266][ T9699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.106284][ T9699] RSP: 002b:00007f970753c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 246.106306][ T9699] RAX: ffffffffffffffda RBX: 00007f97069b5fa0 RCX: 00007f970678e969 [ 246.106322][ T9699] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 246.106334][ T9699] RBP: 00007f9706810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 246.106346][ T9699] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.106359][ T9699] R13: 0000000000000000 R14: 00007f97069b5fa0 R15: 00007ffc0e498cf8 [ 246.106393][ T9699] [ 246.445672][ T9699] Mem-Info: [ 246.448852][ T9699] active_anon:9426 inactive_anon:0 isolated_anon:0 [ 246.448852][ T9699] active_file:1287 inactive_file:39914 isolated_file:0 [ 246.448852][ T9699] unevictable:768 dirty:339 writeback:0 [ 246.448852][ T9699] slab_reclaimable:11159 slab_unreclaimable:103572 [ 246.448852][ T9699] mapped:30297 shmem:4404 pagetables:906 [ 246.448852][ T9699] sec_pagetables:0 bounce:0 [ 246.448852][ T9699] kernel_misc_reclaimable:0 [ 246.448852][ T9699] free:1323845 free_pcp:13676 free_cma:0 [ 246.521869][ T9699] Node 0 active_anon:29504kB inactive_anon:0kB active_file:5148kB inactive_file:159448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121188kB dirty:1352kB writeback:0kB shmem:7780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.668584][ T9699] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.756880][ T9699] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.784392][ C1] net_ratelimit: 5 callbacks suppressed [ 246.784413][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.797883][ T9699] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 246.803719][ T9699] Node 0 DMA32 free:1389936kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:37200kB inactive_anon:0kB active_file:5148kB inactive_file:159360kB unevictable:1536kB writepending:1396kB present:3129332kB managed:2564048kB mlocked:0kB bounce:0kB free_pcp:28980kB local_pcp:688kB free_cma:0kB [ 246.842715][ T9699] lowmem_reserve[]: 0 0 0 0 0 [ 246.849296][ T9699] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.925258][ T9699] lowmem_reserve[]: 0 0 0 0 0 [ 246.931366][ T9699] Node 1 Normal free:3915824kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 246.973685][ T9699] lowmem_reserve[]: 0 0 0 0 0 [ 246.978790][ T9699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.006935][ T9699] Node 0 DMA32: 532*4kB (UME) 495*8kB (UME) 377*16kB (UME) 559*32kB (UME) 252*64kB (UME) 104*128kB (UME) 53*256kB (UM) 47*512kB (UM) 31*1024kB (UM) 10*2048kB (UME) 310*4096kB (UM) = 1419064kB [ 247.042212][ T9711] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 247.050551][ T9699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.069984][ T9699] Node 1 Normal: 222*4kB (UE) 63*8kB [ 247.073702][ T9706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.088238][ T9699] (UME) 40*16kB (UME) 178*32kB (UME) 104*64kB (UME) 28*128kB (UME) 10*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3915824kB [ 247.108655][ T9699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.113030][ T9706] bond_slave_0: left promiscuous mode [ 247.118433][ T9699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.138032][ T9699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.148588][ T9706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.160176][ T9699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.170694][ T9699] 45455 total pagecache pages [ 247.176419][ T9706] bond_slave_1: left promiscuous mode [ 247.179425][ T9699] 0 pages in swap cache [ 247.187047][ T9699] Free swap = 124996kB [ 247.190893][ T9706] bond0 (unregistering): Released all slaves [ 247.191380][ T9699] Total swap = 124996kB [ 247.204977][ T9699] 2097051 pages RAM [ 247.209835][ T9699] 0 pages HighMem/MovableOnly [ 247.214613][ T9699] 424381 pages reserved [ 247.219226][ T9699] 0 pages cma reserved [ 247.299650][ T9711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.433288][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'. [ 247.547447][ T9723] lo speed is unknown, defaulting to 1000 [ 247.558740][ T9723] lo speed is unknown, defaulting to 1000 [ 247.805578][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.335682][ T9723] hsr0 speed is unknown, defaulting to 1000 [ 248.408658][ T9735] netlink: 'syz.1.1116': attribute type 7 has an invalid length. [ 248.491148][ T9735] : entered promiscuous mode [ 248.563149][ T9739] lo speed is unknown, defaulting to 1000 [ 248.600985][ T9741] batman_adv: batadv0: Adding interface: macvlan2 [ 248.647366][ T9741] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.745752][ T9741] batman_adv: batadv0: Interface activated: macvlan2 [ 248.764935][ T9739] lo speed is unknown, defaulting to 1000 [ 248.845719][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.984938][ T9757] netlink: 'syz.4.1122': attribute type 7 has an invalid length. [ 249.000038][ T9745] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.229861][ T9752] bond0 (unregistering): Released all slaves [ 249.264259][ T9747] lo speed is unknown, defaulting to 1000 [ 249.389103][ T9747] lo speed is unknown, defaulting to 1000 [ 249.402289][ T9739] hsr0 speed is unknown, defaulting to 1000 [ 249.553931][ T9762] wireguard0: entered promiscuous mode [ 249.885492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.049022][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1127'. [ 250.058374][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 250.070374][ T9774] bridge0: port 3(syz_tun) entered blocking state [ 250.077308][ T9774] bridge0: port 3(syz_tun) entered disabled state [ 250.084187][ T9774] syz_tun: entered allmulticast mode [ 250.092865][ T9774] syz_tun: entered promiscuous mode [ 250.347652][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 250.427468][ T9747] hsr0 speed is unknown, defaulting to 1000 [ 250.434738][ T9764] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 250.726471][ T9790] netlink: 'syz.3.1131': attribute type 7 has an invalid length. [ 250.869624][ T9790] : entered promiscuous mode [ 250.925589][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.132480][ T6949] IPVS: starting estimator thread 0... [ 251.218152][ T9795] lo speed is unknown, defaulting to 1000 [ 251.335535][ T9801] IPVS: using max 38 ests per chain, 91200 per kthread [ 251.360340][ T9795] lo speed is unknown, defaulting to 1000 [ 251.616136][ T9806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 251.814853][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 251.861261][ T9817] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1138'. [ 251.965534][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.261980][ T9795] hsr0 speed is unknown, defaulting to 1000 [ 252.522316][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 252.696601][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 253.005527][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.045565][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.790646][ T9866] team0: Port device team_slave_1 removed [ 254.835819][ T9866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.029357][ T9870] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1152'. [ 255.085608][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.483976][ T9866] bond1: (slave ip6gretap1): Releasing active interface [ 255.501682][ T9869] vlan1: entered promiscuous mode [ 255.651105][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.813266][ T9887] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 255.879986][ T9892] sock: sock_timestamping_bind_phc: sock not bind to device [ 255.920429][ T9893] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 255.941516][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.986042][ T9894] bond0: (slave ip6gretap1): making interface the new active one [ 256.023725][ T9894] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 256.089621][ T9897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.125628][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.181526][ T9899] lo speed is unknown, defaulting to 1000 [ 256.200951][ T9899] lo speed is unknown, defaulting to 1000 [ 256.442665][ T9914] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.670641][ T9906] bond0 (unregistering): Released all slaves [ 256.734889][ T9899] hsr0 speed is unknown, defaulting to 1000 [ 256.756017][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 256.779168][ T9918] openvswitch: netlink: Missing key (keys=40, expected=80) [ 257.022472][ T9927] vlan3: entered promiscuous mode [ 257.165653][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.353395][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 258.007430][ T9955] sock: sock_timestamping_bind_phc: sock not bind to device [ 258.206598][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.373478][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.446861][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.527605][ T9965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.972940][ T9971] vlan3: entered promiscuous mode [ 258.982960][ T9971] syz_tun: entered promiscuous mode [ 259.245549][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.467061][ T9981] bond1: (slave erspan0): Releasing active interface [ 259.507584][ T9981] syz_tun: left allmulticast mode [ 259.512916][ T9981] bridge0: port 3(syz_tun) entered disabled state [ 259.550643][ T9981] bridge_slave_0: left allmulticast mode [ 259.576923][ T9981] bridge_slave_0: left promiscuous mode [ 259.582885][ T9981] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.611715][ T9981] bridge_slave_1: left allmulticast mode [ 259.620322][ T9981] bridge_slave_1: left promiscuous mode [ 259.626809][ T9981] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.642061][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.656686][ T9981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.669350][ T9981] bond1: (slave veth3): Releasing active interface [ 259.680927][ T9981] bond2: (slave ip6erspan0): Releasing active interface [ 259.694933][ T9981] bond0: (slave ip6gretap1): Releasing active interface [ 259.969382][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1194'. [ 260.285402][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.292796][T10005] sock: sock_timestamping_bind_phc: sock not bind to device [ 260.387773][ T30] audit: type=1107 audit(1747153824.891:7): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 260.397121][T10009] siw: device registration error -23 [ 260.932301][T10018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 261.230353][T10028] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 261.239331][T10028] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 261.325515][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.772152][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 261.941834][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 261.971031][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 262.365512][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.368785][ T9227] udevd[9227]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 262.628925][T10076] sock: sock_timestamping_bind_phc: sock not bind to device [ 262.961357][T10081] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 262.974448][T10081] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 263.247234][T10090] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 263.315087][T10090] lo speed is unknown, defaulting to 1000 [ 263.349829][T10090] lo speed is unknown, defaulting to 1000 [ 263.405433][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.722399][T10090] hsr0 speed is unknown, defaulting to 1000 [ 264.110752][T10114] syzkaller1: entered promiscuous mode [ 264.120906][T10119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1236'. [ 264.124171][T10114] syzkaller1: entered allmulticast mode [ 264.137498][T10116] xt_CT: No such helper "pptp" [ 264.312671][T10119] bond2: entered promiscuous mode [ 264.319237][T10119] bond2: entered allmulticast mode [ 264.445436][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.518459][T10128] smc: net device bond0 erased user defined pnetid SYZ2 [ 264.532785][T10126] lo speed is unknown, defaulting to 1000 [ 264.572908][T10130] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 264.788279][T10130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.812143][T10126] lo speed is unknown, defaulting to 1000 [ 264.932805][T10133] tipc: Resetting bearer [ 265.228467][T10133] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.268805][T10133] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.296128][T10133] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.370287][T10133] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.485414][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.573295][T10134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.605924][T10134] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 265.625114][T10134] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 265.719677][T10145] sock: sock_timestamping_bind_phc: sock not bind to device [ 265.751311][T10136] ip6erspan0: entered promiscuous mode [ 265.767651][T10136] bond0: (slave ip6erspan0): making interface the new active one [ 265.782898][T10136] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 265.799571][T10130] vlan3: entered allmulticast mode [ 265.804763][T10130] bond0: entered allmulticast mode [ 265.825418][T10130] ip6erspan0: entered allmulticast mode [ 265.838000][T10130] bond0: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 265.918428][T10126] hsr0 speed is unknown, defaulting to 1000 [ 266.525388][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.640880][T10163] netlink: 412 bytes leftover after parsing attributes in process `syz.1.1247'. [ 266.650735][T10157] vlan3: entered promiscuous mode [ 266.655818][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 266.675658][T10157] vlan3: entered allmulticast mode [ 266.735409][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 266.856848][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 267.167519][T10184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'. [ 267.323413][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 267.464862][T10191] netlink: 'syz.4.1252': attribute type 10 has an invalid length. [ 267.489601][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1252'. [ 267.536375][T10191] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 267.565557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.863219][T10209] vlan1: entered promiscuous mode [ 267.895406][T10209] bridge0: entered promiscuous mode [ 267.916003][T10210] sock: sock_timestamping_bind_phc: sock not bind to device [ 268.230227][T10219] tipc: Failed to remove unknown binding: 66,1,1/424092956:2743472701/2743472703 [ 268.257446][T10218] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1264'. [ 268.287625][T10219] tipc: Failed to remove unknown binding: 66,1,1/424092956:2743472701/2743472703 [ 268.299148][T10219] tipc: Failed to remove unknown binding: 66,1,1/424092956:2743472701/2743472703 [ 268.301429][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 268.553750][T10229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1267'. [ 268.578372][T10227] xt_CT: No such helper "pptp" [ 268.605393][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.626558][T10229] bond0: entered promiscuous mode [ 268.631778][T10229] bond0: entered allmulticast mode [ 268.993111][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 269.074670][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'. [ 269.145536][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 269.637573][T10249] lo speed is unknown, defaulting to 1000 [ 269.645405][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.664977][T10249] lo speed is unknown, defaulting to 1000 [ 270.054382][T10261] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 270.151703][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.317931][T10264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.339745][T10264] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 270.354474][T10264] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 270.444681][T10267] ip6erspan0: entered promiscuous mode [ 270.461396][T10267] bond0: (slave ip6erspan0): making interface the new active one [ 270.484733][T10267] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 270.564240][T10261] vlan4: entered allmulticast mode [ 270.571183][T10261] bond0: entered allmulticast mode [ 270.582785][T10261] ip6erspan0: entered allmulticast mode [ 270.593796][T10261] bond0: (slave vlan4): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 270.685407][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.735425][T10249] hsr0 speed is unknown, defaulting to 1000 [ 270.744106][T10253] siw: device registration error -23 [ 271.101440][T10283] sock: sock_timestamping_bind_phc: sock not bind to device [ 271.725397][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.972570][T10294] lo speed is unknown, defaulting to 1000 [ 272.021294][T10294] lo speed is unknown, defaulting to 1000 [ 272.048078][T10290] xt_CT: No such helper "pptp" [ 272.398693][T10308] __nla_validate_parse: 1 callbacks suppressed [ 272.398781][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 272.632526][T10313] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 272.689630][T10313] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.765563][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.023623][T10315] bond5: (slave veth3): Enslaving as an active interface with a down link [ 273.106137][T10313] bond2: (slave veth0_to_bond): Releasing active interface [ 273.115629][T10313] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.213016][T10324] netlink: 'syz.4.1296': attribute type 39 has an invalid length. [ 273.219462][T10313] vlan2: entered promiscuous mode [ 273.293003][T10313] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 273.472431][T10294] hsr0 speed is unknown, defaulting to 1000 [ 273.805577][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.952011][T10333] xt_CT: No such helper "pptp" [ 274.204524][T10346] vlan5: entered promiscuous mode [ 274.240398][T10346] ip6gretap0: entered promiscuous mode [ 274.315506][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 274.324445][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 274.394254][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 274.433336][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 274.489834][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 274.761897][T10358] netlink: 'syz.1.1306': attribute type 10 has an invalid length. [ 274.845530][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.872405][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1306'. [ 274.904285][T10358] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 275.628466][T10374] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 275.729708][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1311'. [ 275.885488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.968921][T10377] xt_CT: No such helper "pptp" [ 276.589814][T10384] lo speed is unknown, defaulting to 1000 [ 276.636533][T10384] lo speed is unknown, defaulting to 1000 [ 276.724621][T10390] vlan6: entered promiscuous mode [ 276.732454][T10390] vlan5: entered promiscuous mode [ 276.775523][T10390] gretap0: entered promiscuous mode [ 276.925492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.039659][T10396] lo speed is unknown, defaulting to 1000 [ 277.491515][T10406] batadv0: entered allmulticast mode [ 277.509354][T10384] hsr0 speed is unknown, defaulting to 1000 [ 277.509405][T10396] lo speed is unknown, defaulting to 1000 [ 277.737299][T10409] vlan1: entered promiscuous mode [ 277.763835][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 277.769412][T10409] vlan1: entered allmulticast mode [ 277.805498][T10409] hsr_slave_1: entered allmulticast mode [ 277.965541][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.304812][T10416] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 278.315140][T10396] hsr0 speed is unknown, defaulting to 1000 [ 278.640966][T10423] netlink: 'syz.3.1327': attribute type 1 has an invalid length. [ 278.787652][T10424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.834595][T10426] bond0: entered promiscuous mode [ 278.855128][T10426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 278.872380][T10426] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 278.906273][ T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.005386][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.013020][ T36] bond4: (slave macvlan2): link status up again after 0 ms [ 279.044257][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 279.074057][ T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.175613][ T5997] bond4: (slave macvlan2): failed to get link speed/duplex [ 279.295871][ T36] bond4: (slave macvlan2): failed to get link speed/duplex [ 279.417150][ T5991] bond4: (slave macvlan2): failed to get link speed/duplex [ 279.538602][ T5991] bond4: (slave macvlan2): failed to get link speed/duplex [ 279.561179][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 279.600463][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 279.649919][T10442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 279.687510][T10438] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1333'. [ 279.689751][T10442] dummy0: entered promiscuous mode [ 279.713418][T10442] dummy0: left promiscuous mode [ 279.773466][T10445] vlan4: entered promiscuous mode [ 279.779355][T10445] vlan4: entered allmulticast mode [ 279.784696][T10445] hsr_slave_1: entered allmulticast mode [ 279.868916][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 280.136497][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 280.331002][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 281.180098][T10472] lo speed is unknown, defaulting to 1000 [ 281.212551][T10472] lo speed is unknown, defaulting to 1000 [ 281.332439][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 281.526800][T10479] gretap0: left allmulticast mode [ 281.545415][T10479] gretap0: left promiscuous mode [ 281.559806][T10479] bridge0: port 3(gretap0) entered disabled state [ 281.620687][T10479] bridge_slave_1: left allmulticast mode [ 281.632247][T10479] bridge_slave_1: left promiscuous mode [ 281.659667][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.682230][T10479] bridge_slave_0: left allmulticast mode [ 281.689029][T10479] bridge_slave_0: left promiscuous mode [ 281.695000][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.950896][T10472] hsr0 speed is unknown, defaulting to 1000 [ 282.132510][T10487] netlink: 'syz.3.1345': attribute type 2 has an invalid length. [ 282.180692][T10487] bond3: (slave erspan0): Releasing active interface [ 282.203242][T10487] batman_adv: batadv0: Removing interface: dummy0 [ 282.251321][T10487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.311248][T10487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.351920][T10487] bond1: (slave vcan1): Releasing backup interface [ 282.370566][T10487] bond1: (slave vcan2): making interface the new active one [ 282.425619][T10487] bond1: (slave vcan2): Releasing backup interface [ 282.436641][T10487] bond2: (slave ip6gretap1): Releasing active interface [ 282.452919][T10487] bond3: (slave veth3): Releasing active interface [ 282.463438][T10487] bond0: (slave ip6erspan0): Releasing active interface [ 282.471797][T10487] ip6erspan0: left allmulticast mode [ 282.500356][T10487] bond4: (slave macvlan2): Removing an active aggregator [ 282.516595][T10487] bond4: (slave macvlan2): Releasing backup interface [ 282.553019][T10487] bond0: left promiscuous mode [ 283.165720][ C1] net_ratelimit: 12 callbacks suppressed [ 283.165744][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.762290][T10511] lo speed is unknown, defaulting to 1000 [ 283.770169][T10511] lo speed is unknown, defaulting to 1000 [ 283.849238][T10513] tipc: Started in network mode [ 283.864571][T10513] tipc: Node identity 7, cluster identity 4711 [ 283.874693][T10513] tipc: Node number set to 7 [ 283.999088][T10511] hsr0 speed is unknown, defaulting to 1000 [ 284.205406][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.955697][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 285.245382][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.727624][T10540] xt_CT: No such helper "pptp" [ 286.285411][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.321917][T10538] Cannot find set identified by id 0 to match [ 286.551217][T10546] bond0 (unregistering): Released all slaves [ 286.798202][T10552] vlan3: entered promiscuous mode [ 286.844509][T10552] vlan3: entered allmulticast mode [ 286.850556][T10557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'. [ 286.856020][T10552] hsr_slave_1: entered allmulticast mode [ 286.865821][T10557] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 286.873577][T10557] netlink: 'syz.1.1367': attribute type 8 has an invalid length. [ 286.925515][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 287.008814][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 287.325412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.800785][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 288.365392][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.671834][T10581] xt_CT: No such helper "pptp" [ 288.923516][T10596] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 288.935605][T10596] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1381'. [ 289.025167][T10601] netlink: 'syz.2.1383': attribute type 17 has an invalid length. [ 289.166990][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 289.180931][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 289.286923][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 289.405491][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.582810][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 289.658488][T10625] vlan1: entered promiscuous mode [ 289.705482][T10625] dummy0: entered promiscuous mode [ 289.751170][T10624] xt_CT: No such helper "pptp" [ 289.885124][T10628] bond2: entered promiscuous mode [ 289.904388][T10628] bond2: entered allmulticast mode [ 290.242005][T10647] bridge0: entered promiscuous mode [ 290.280228][T10635] lo speed is unknown, defaulting to 1000 [ 290.286888][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.309287][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.355251][T10635] lo speed is unknown, defaulting to 1000 [ 290.445655][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.537810][T10636] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.555519][T10636] tipc: Enabled bearer , priority 10 [ 290.675723][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.863097][T10658] lo speed is unknown, defaulting to 1000 [ 290.894672][T10661] __nla_validate_parse: 1 callbacks suppressed [ 290.894696][T10661] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1397'. [ 290.945403][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.176471][T10665] netlink: zone id is out of range [ 291.181658][T10665] netlink: zone id is out of range [ 291.187098][T10665] netlink: zone id is out of range [ 291.200350][T10665] netlink: zone id is out of range [ 291.342964][T10658] lo speed is unknown, defaulting to 1000 [ 291.343349][T10635] hsr0 speed is unknown, defaulting to 1000 [ 291.393517][T10672] sctp: [Deprecated]: syz.2.1400 (pid 10672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.393517][T10672] Use struct sctp_sack_info instead [ 291.416596][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 291.889165][T10658] hsr0 speed is unknown, defaulting to 1000 [ 291.921361][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1403'. [ 291.957496][T10683] xt_CT: No such helper "pptp" [ 292.052662][T10685] bond3: entered promiscuous mode [ 292.075979][T10685] bond3: entered allmulticast mode [ 292.495578][T10697] netlink: 'syz.3.1406': attribute type 29 has an invalid length. [ 292.508552][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 292.763675][T10701] lo speed is unknown, defaulting to 1000 [ 292.799024][T10701] lo speed is unknown, defaulting to 1000 [ 292.880196][T10710] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.959418][T10712] syz.4.1411 (10712) used obsolete PPPIOCDETACH ioctl [ 292.990717][T10712] x_tables: ip_tables: ah match: only valid for protocol 51 [ 293.189678][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 293.365628][T10701] hsr0 speed is unknown, defaulting to 1000 [ 293.565366][ C1] net_ratelimit: 289 callbacks suppressed [ 293.565385][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.717657][T10731] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.737075][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 294.533796][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 294.605395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.716768][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 295.200598][T10755] xt_CT: No such helper "pptp" [ 295.345014][T10760] lo speed is unknown, defaulting to 1000 [ 295.428126][T10760] lo speed is unknown, defaulting to 1000 [ 295.522670][T10772] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.645431][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.747440][T10775] xt_CT: No such helper "pptp" [ 295.914344][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 296.065991][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 296.191714][T10782] lo speed is unknown, defaulting to 1000 [ 296.201772][T10760] hsr0 speed is unknown, defaulting to 1000 [ 296.202633][T10782] lo speed is unknown, defaulting to 1000 [ 296.402383][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 296.623698][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 296.685483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.422068][T10782] hsr0 speed is unknown, defaulting to 1000 [ 297.725463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.043496][T10817] xt_CT: No such helper "pptp" [ 298.552750][T10830] sock: sock_timestamping_bind_phc: sock not bind to device [ 298.755104][T10837] syzkaller0: entered promiscuous mode [ 298.761374][T10837] syzkaller0: entered allmulticast mode [ 298.767171][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.963917][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 299.183013][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 299.639777][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 299.753349][T10865] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 299.791315][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1459'. [ 299.811765][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.820971][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 300.133423][T10876] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1460'. [ 300.847335][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.885467][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.148056][T10891] xt_CT: No such helper "pptp" [ 302.731601][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1470'. [ 302.837341][T10913] xt_CT: No such helper "pptp" [ 302.908334][T10920] bond6: entered promiscuous mode [ 302.925359][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.925791][T10920] bond6: entered allmulticast mode [ 303.574842][T10931] xt_ecn: cannot match TCP bits for non-tcp packets [ 303.627092][T10933] block nbd0: backend image doesn't match with [ 303.837620][T10937] macsec1: entered promiscuous mode [ 303.842917][T10937] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 303.875613][T10937] macsec1: entered allmulticast mode [ 303.928421][T10937] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 303.965413][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.999137][T10942] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 304.045192][T10942] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 304.082101][T10942] tipc: Resetting bearer [ 304.298108][T10957] sock: sock_timestamping_bind_phc: sock not bind to device [ 304.525760][T10968] netlink: 'syz.2.1489': attribute type 7 has an invalid length. [ 305.005479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.477181][T10991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.883420][T11006] netlink: 'syz.1.1503': attribute type 4 has an invalid length. [ 306.045363][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.083132][T11011] xt_CT: No such helper "pptp" [ 306.097169][T11011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1505'. [ 306.165224][T11011] bond3: entered promiscuous mode [ 306.181378][T11011] bond3: entered allmulticast mode [ 306.335650][T11022] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1508'. [ 306.362994][T11018] syz.4.1507 uses old SIOCAX25GETINFO [ 306.882903][T11038] lo speed is unknown, defaulting to 1000 [ 306.918059][T11038] lo speed is unknown, defaulting to 1000 [ 307.085488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.510471][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 307.542595][T11058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1517'. [ 307.556734][T11032] tipc: Enabling of bearer rejected, already enabled [ 307.680702][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1518'. [ 307.737732][T11060] xt_CT: No such helper "pptp" [ 307.804253][T11062] bond4: entered promiscuous mode [ 307.870049][T11062] bond4: entered allmulticast mode [ 307.922502][T11067] Cannot find map_set index 0 as target [ 307.954744][T11067] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 307.973106][T11067] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 308.044533][T11038] hsr0 speed is unknown, defaulting to 1000 [ 308.125506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.161484][T11090] netlink: 'syz.2.1527': attribute type 5 has an invalid length. [ 309.169470][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.227233][T11097] lo speed is unknown, defaulting to 1000 [ 309.235055][T11097] lo speed is unknown, defaulting to 1000 [ 309.436335][T11100] netlink: 'syz.2.1530': attribute type 10 has an invalid length. [ 309.450724][T11097] hsr0 speed is unknown, defaulting to 1000 [ 309.472691][T11100] openvswitch: netlink: Flow key attr not present in new flow. [ 309.615753][T11101] sctp: [Deprecated]: syz.2.1530 (pid 11101) Use of int in max_burst socket option deprecated. [ 309.615753][T11101] Use struct sctp_assoc_value instead [ 309.943958][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1531'. [ 310.020307][T11105] xt_CT: No such helper "pptp" [ 310.201972][T11109] bond0: entered promiscuous mode [ 310.205394][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.239774][T11109] bond0: entered allmulticast mode [ 310.616326][T11126] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 310.735054][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1537'. [ 310.774567][T11125] xt_CT: No such helper "pptp" [ 310.833334][T11128] bond5: entered promiscuous mode [ 310.838638][T11128] bond5: entered allmulticast mode [ 311.098322][T11136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1539'. [ 311.245520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.349108][T11135] netlink: 'syz.3.1539': attribute type 15 has an invalid length. [ 311.692850][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 311.734258][T11150] block nbd4: not configured, cannot reconfigure [ 311.824269][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1546'. [ 311.932675][T11152] xt_CT: No such helper "pptp" [ 312.051525][T11154] bond3: entered promiscuous mode [ 312.071724][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'. [ 312.079633][T11154] bond3: entered allmulticast mode [ 312.263582][T11168] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1549'. [ 312.285357][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.371225][T11168] bond6: entered promiscuous mode [ 312.408808][T11166] xt_CT: No such helper "pptp" [ 312.439046][T11168] bond6: entered allmulticast mode [ 312.460775][T11174] netlink: 'syz.4.1551': attribute type 4 has an invalid length. [ 312.531370][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 313.218977][T11196] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 313.325372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.362041][T11196] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1556'. [ 314.365512][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 314.680526][T11209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1562'. [ 314.843505][T11212] lo speed is unknown, defaulting to 1000 [ 314.889002][T11212] lo speed is unknown, defaulting to 1000 [ 315.038691][T11215] lo speed is unknown, defaulting to 1000 [ 315.405395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.351892][T11212] hsr0 speed is unknown, defaulting to 1000 [ 316.364093][T11215] lo speed is unknown, defaulting to 1000 [ 316.445380][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.091094][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.485355][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 318.525359][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 318.602688][T11215] hsr0 speed is unknown, defaulting to 1000 [ 318.769872][T11270] siw: device registration error -23 [ 318.940872][T11276] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 319.069904][T11278] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 319.435601][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 319.444567][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 319.543799][T11284] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 319.565463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.588705][T11284] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1582'. [ 320.040665][T11301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1586'. [ 320.135583][T11301] bond5: entered promiscuous mode [ 320.153051][T11301] bond5: entered allmulticast mode [ 320.195404][T11296] xt_CT: No such helper "pptp" [ 320.605366][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.727824][T11311] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1590'. [ 321.073654][T11320] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 321.345446][T11327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 321.434435][T11334] tipc: Resetting bearer [ 321.458852][T11332] xt_CT: No such helper "pptp" [ 321.479085][T11336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1599'. [ 321.588549][T11336] bond7: entered promiscuous mode [ 321.593618][T11336] bond7: entered allmulticast mode [ 321.645356][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.869288][T11349] dvmrp1: entered allmulticast mode [ 321.908793][T11349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1603'. [ 322.181004][T11356] lo speed is unknown, defaulting to 1000 [ 322.208879][T11356] lo speed is unknown, defaulting to 1000 [ 322.403002][T11365] lo speed is unknown, defaulting to 1000 [ 322.697019][T11374] macsec1: entered promiscuous mode [ 322.716775][T11374] dummy0: entered promiscuous mode [ 322.734100][T11374] macsec1: entered allmulticast mode [ 322.749695][T11374] dummy0: entered allmulticast mode [ 322.773791][T11374] dummy0: left allmulticast mode [ 322.779244][T11374] dummy0: left promiscuous mode [ 322.864423][T11376] vlan0: entered promiscuous mode [ 322.880966][T11376] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 322.899757][T11376] vlan0: entered allmulticast mode [ 322.908700][T11359] SET target dimension over the limit! [ 322.915086][T11376] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 322.936650][T11365] lo speed is unknown, defaulting to 1000 [ 322.936731][T11356] hsr0 speed is unknown, defaulting to 1000 [ 323.204678][T11384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1613'. [ 323.208384][T11381] xt_CT: No such helper "pptp" [ 323.279992][T11384] bond8: entered promiscuous mode [ 323.285477][T11384] bond8: entered allmulticast mode [ 323.469912][T11391] xt_CT: No such helper "pptp" [ 323.498437][T11391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1616'. [ 323.649938][T11391] bond9: entered promiscuous mode [ 323.655015][T11391] bond9: entered allmulticast mode [ 323.680708][T11387] lo speed is unknown, defaulting to 1000 [ 323.725505][T11365] hsr0 speed is unknown, defaulting to 1000 [ 323.808545][T11387] lo speed is unknown, defaulting to 1000 [ 324.242603][T11408] lo speed is unknown, defaulting to 1000 [ 324.329317][T11419] sock: sock_timestamping_bind_phc: sock not bind to device [ 324.379386][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 324.623896][T11387] hsr0 speed is unknown, defaulting to 1000 [ 324.623907][T11408] lo speed is unknown, defaulting to 1000 [ 325.176042][T11433] batadv_slave_0: entered promiscuous mode [ 325.209280][T11408] hsr0 speed is unknown, defaulting to 1000 [ 325.218307][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 325.345223][T11432] batadv_slave_0: left promiscuous mode [ 325.858496][T11453] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 325.866392][T11453] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1634'. [ 325.904147][T11449] xt_CT: No such helper "pptp" [ 325.934893][T11449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1635'. [ 326.024991][T11449] bond6: entered promiscuous mode [ 326.044971][T11449] bond6: entered allmulticast mode [ 326.299350][T11465] sock: sock_timestamping_bind_phc: sock not bind to device [ 326.572796][T11469] netlink: 'syz.1.1641': attribute type 12 has an invalid length. [ 327.046217][T11486] lo speed is unknown, defaulting to 1000 [ 327.132652][T11486] lo speed is unknown, defaulting to 1000 [ 327.267109][T11491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1646'. [ 327.339306][T11489] xt_CT: No such helper "pptp" [ 327.422945][T11491] bond7: entered promiscuous mode [ 327.429527][T11491] bond7: entered allmulticast mode [ 327.555356][T11486] hsr0 speed is unknown, defaulting to 1000 [ 327.892492][T11508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1649'. [ 327.952689][T11506] xt_CT: No such helper "pptp" [ 328.044554][T11508] bond4: entered promiscuous mode [ 328.145407][T11508] bond4: entered allmulticast mode [ 328.825880][T11523] bridge0: port 1(vlan4) entered blocking state [ 328.858166][T11523] bridge0: port 1(vlan4) entered disabled state [ 328.879359][T11523] vlan4: entered allmulticast mode [ 329.227907][T11542] xt_CT: No such helper "pptp" [ 329.290506][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1659'. [ 329.380662][T11542] bond7: entered promiscuous mode [ 329.386512][T11542] bond7: entered allmulticast mode [ 329.418493][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1661'. [ 329.796205][T11560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1663'. [ 329.844134][T11556] xt_CT: No such helper "pptp" [ 329.964541][T11560] bond10: entered promiscuous mode [ 329.981974][T11560] bond10: entered allmulticast mode [ 330.040205][T11567] lo speed is unknown, defaulting to 1000 [ 330.061102][T11567] lo speed is unknown, defaulting to 1000 [ 330.451644][T11583] lo: entered allmulticast mode [ 330.470435][T11582] lo: left allmulticast mode [ 330.708920][T11587] lo speed is unknown, defaulting to 1000 [ 330.792705][T11588] lo speed is unknown, defaulting to 1000 [ 330.839267][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1676'. [ 330.857007][T11567] hsr0 speed is unknown, defaulting to 1000 [ 330.864098][T11587] lo speed is unknown, defaulting to 1000 [ 331.751161][T11588] lo speed is unknown, defaulting to 1000 [ 331.757993][T11587] hsr0 speed is unknown, defaulting to 1000 [ 331.854665][T11613] lo speed is unknown, defaulting to 1000 [ 332.067080][T11627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1687'. [ 332.132966][T11625] xt_CT: No such helper "pptp" [ 332.223888][T11627] bond8: entered promiscuous mode [ 332.249861][T11627] bond8: entered allmulticast mode [ 332.445643][ C1] ================================================================== [ 332.453776][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 332.461712][ C1] Read of size 2 at addr ffff88806dafac2a by task syz.1.1684/11618 [ 332.469631][ C1] [ 332.471990][ C1] CPU: 1 UID: 0 PID: 11618 Comm: syz.1.1684 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 332.472018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.472036][ C1] Call Trace: [ 332.472049][ C1] [ 332.472057][ C1] dump_stack_lvl+0x189/0x250 [ 332.472091][ C1] ? __virt_addr_valid+0x18c/0x540 [ 332.472118][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.472149][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.472178][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.472207][ C1] ? lock_release+0x4b/0x3e0 [ 332.472238][ C1] ? __virt_addr_valid+0x18c/0x540 [ 332.472263][ C1] ? __virt_addr_valid+0x469/0x540 [ 332.472290][ C1] print_report+0xb4/0x290 [ 332.472315][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 332.472336][ C1] kasan_report+0x118/0x150 [ 332.472364][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 332.472390][ C1] rose_timer_expiry+0x471/0x4b0 [ 332.472415][ C1] call_timer_fn+0x17b/0x5f0 [ 332.472442][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.472464][ C1] ? call_timer_fn+0xbe/0x5f0 [ 332.472489][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 332.472521][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.472550][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.472568][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.472592][ C1] __run_timer_base+0x61a/0x860 [ 332.472630][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 332.472667][ C1] ? lapic_next_event+0x11/0x20 [ 332.472689][ C1] ? clockevents_program_event+0x24d/0x360 [ 332.472718][ C1] run_timer_softirq+0xb7/0x180 [ 332.472743][ C1] handle_softirqs+0x283/0x870 [ 332.472763][ C1] ? do_softirq+0xec/0x180 [ 332.472783][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 332.472804][ C1] ? aead_recvmsg+0x1592/0x1620 [ 332.472830][ C1] do_softirq+0xec/0x180 [ 332.472847][ C1] [ 332.472854][ C1] [ 332.472862][ C1] ? __pfx_do_softirq+0x10/0x10 [ 332.472887][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 332.472908][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 332.472937][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 332.472956][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 332.472977][ C1] ? aead_recvmsg+0x1592/0x1620 [ 332.473001][ C1] aead_recvmsg+0x1592/0x1620 [ 332.473027][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.473060][ C1] ? bpf_trace_printk+0x126/0x190 [ 332.473091][ C1] ? __pfx_bpf_trace_printk+0x10/0x10 [ 332.473128][ C1] ? __pfx_aead_recvmsg+0x10/0x10 [ 332.473156][ C1] ? __lock_acquire+0xaac/0xd20 [ 332.473190][ C1] ? __lock_acquire+0xaac/0xd20 [ 332.473222][ C1] ? aa_label_sk_perm+0x413/0x560 [ 332.473249][ C1] ? look_up_lock_class+0x74/0x170 [ 332.473267][ C1] ? look_up_lock_class+0x74/0x170 [ 332.473292][ C1] ? __lock_acquire+0xaac/0xd20 [ 332.473324][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 332.473341][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.473361][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 332.473379][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 332.473399][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 332.473422][ C1] ? aead_check_key+0x18a/0x200 [ 332.473445][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 332.473469][ C1] ? aead_check_key+0x18a/0x200 [ 332.473491][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 332.473515][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 332.473539][ C1] sock_recvmsg_nosec+0x183/0x1c0 [ 332.473563][ C1] ____sys_recvmsg+0x3aa/0x460 [ 332.473596][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 332.473637][ C1] ? import_iovec+0x74/0xa0 [ 332.473667][ C1] ___sys_recvmsg+0x1b5/0x510 [ 332.473698][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 332.473742][ C1] ? __might_fault+0xb0/0x130 [ 332.473770][ C1] do_recvmmsg+0x307/0x760 [ 332.473815][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 332.473846][ C1] ? __pfx_do_futex+0x10/0x10 [ 332.473874][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 332.473901][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.473928][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 332.473958][ C1] ? do_syscall_64+0xba/0x210 [ 332.473979][ C1] do_syscall_64+0xf6/0x210 [ 332.473998][ C1] ? clear_bhb_loop+0x45/0xa0 [ 332.474019][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.474037][ C1] RIP: 0033:0x7faf5418e969 [ 332.474054][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.474071][ C1] RSP: 002b:00007faf55088038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 332.474092][ C1] RAX: ffffffffffffffda RBX: 00007faf543b6080 RCX: 00007faf5418e969 [ 332.474106][ C1] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000006 [ 332.474119][ C1] RBP: 00007faf54210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 332.474131][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.474142][ C1] R13: 0000000000000000 R14: 00007faf543b6080 R15: 00007ffea2915548 [ 332.474163][ C1] [ 332.474170][ C1] [ 332.956878][ C1] Allocated by task 10953: [ 332.961289][ C1] kasan_save_track+0x3e/0x80 [ 332.965987][ C1] __kasan_kmalloc+0x93/0xb0 [ 332.970577][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 332.975951][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 332.981156][ C1] __genradix_prealloc+0x44/0x90 [ 332.986100][ C1] sctp_stream_init+0x14b/0x440 [ 332.990952][ C1] sctp_association_new+0x10dd/0x25f0 [ 332.996333][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 333.001623][ C1] sctp_sendmsg+0x155c/0x2810 [ 333.006316][ C1] __sock_sendmsg+0x19c/0x270 [ 333.010991][ C1] __sys_sendto+0x3bd/0x520 [ 333.015495][ C1] __x64_sys_sendto+0xde/0x100 [ 333.020281][ C1] do_syscall_64+0xf6/0x210 [ 333.024788][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.030679][ C1] [ 333.032999][ C1] Freed by task 10953: [ 333.037070][ C1] kasan_save_track+0x3e/0x80 [ 333.041745][ C1] kasan_save_free_info+0x46/0x50 [ 333.046794][ C1] __kasan_slab_free+0x62/0x70 [ 333.051576][ C1] kfree+0x193/0x440 [ 333.055495][ C1] genradix_free_recurse+0x5d/0xa0 [ 333.060624][ C1] genradix_free_recurse+0x5d/0xa0 [ 333.065762][ C1] sctp_stream_free+0xd5/0x110 [ 333.070531][ C1] sctp_association_free+0x26d/0x7f0 [ 333.075827][ C1] sctp_do_sm+0x3eba/0x5a20 [ 333.080331][ C1] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 333.085652][ C1] sctp_close+0x409/0x900 [ 333.089987][ C1] inet_release+0x184/0x210 [ 333.094496][ C1] sock_close+0xc0/0x240 [ 333.098738][ C1] __fput+0x449/0xa70 [ 333.102725][ C1] task_work_run+0x1d1/0x260 [ 333.107350][ C1] get_signal+0x11c5/0x1310 [ 333.111866][ C1] arch_do_signal_or_restart+0x95/0x780 [ 333.117435][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 333.122981][ C1] do_syscall_64+0x103/0x210 [ 333.127593][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.133491][ C1] [ 333.135813][ C1] The buggy address belongs to the object at ffff88806dafac00 [ 333.135813][ C1] which belongs to the cache kmalloc-512 of size 512 [ 333.149868][ C1] The buggy address is located 42 bytes inside of [ 333.149868][ C1] freed 512-byte region [ffff88806dafac00, ffff88806dafae00) [ 333.163578][ C1] [ 333.165903][ C1] The buggy address belongs to the physical page: [ 333.172321][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806daf8800 pfn:0x6daf8 [ 333.182387][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.190881][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 333.199380][ C1] page_type: f5(slab) [ 333.203380][ C1] raw: 00fff00000000240 ffff88801a041c80 ffffea000044ba10 ffffea0000cd7d10 [ 333.211968][ C1] raw: ffff88806daf8800 0000000000100003 00000000f5000000 0000000000000000 [ 333.220562][ C1] head: 00fff00000000240 ffff88801a041c80 ffffea000044ba10 ffffea0000cd7d10 [ 333.229233][ C1] head: ffff88806daf8800 0000000000100003 00000000f5000000 0000000000000000 [ 333.237905][ C1] head: 00fff00000000002 ffffea0001b6be01 00000000ffffffff 00000000ffffffff [ 333.246569][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 333.255231][ C1] page dumped because: kasan: bad access detected [ 333.261651][ C1] page_owner tracks the page as allocated [ 333.267364][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 90749850096, free_ts 90664477034 [ 333.288723][ C1] post_alloc_hook+0x1d8/0x230 [ 333.293508][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 333.299073][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 333.304887][ C1] alloc_pages_mpol+0x232/0x4a0 [ 333.309744][ C1] allocate_slab+0x8a/0x3b0 [ 333.314244][ C1] ___slab_alloc+0xbfc/0x1480 [ 333.318940][ C1] __kmalloc_noprof+0x305/0x4f0 [ 333.323796][ C1] fib6_info_alloc+0x30/0xf0 [ 333.328392][ C1] ip6_route_info_create+0x147/0xa70 [ 333.333692][ C1] addrconf_f6i_alloc+0x1c7/0x420 [ 333.338726][ C1] ipv6_add_addr+0x56e/0x1090 [ 333.343406][ C1] inet6_addr_add+0x387/0xc00 [ 333.348083][ C1] inet6_rtm_newaddr+0x93d/0xd20 [ 333.353028][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 333.357988][ C1] netlink_rcv_skb+0x219/0x490 [ 333.362756][ C1] netlink_unicast+0x758/0x8d0 [ 333.367524][ C1] page last free pid 5838 tgid 5838 stack trace: [ 333.373849][ C1] __free_frozen_pages+0xb14/0xce0 [ 333.378972][ C1] __put_partials+0x161/0x1c0 [ 333.383653][ C1] put_cpu_partial+0x17c/0x250 [ 333.388413][ C1] __slab_free+0x2f7/0x400 [ 333.392827][ C1] qlist_free_all+0x9a/0x140 [ 333.397433][ C1] kasan_quarantine_reduce+0x148/0x160 [ 333.402893][ C1] __kasan_slab_alloc+0x22/0x80 [ 333.407751][ C1] __kmalloc_cache_noprof+0x1be/0x3d0 [ 333.413131][ C1] netdevice_event+0x3a1/0x8a0 [ 333.417905][ C1] notifier_call_chain+0x1b3/0x3e0 [ 333.423015][ C1] netif_set_mac_address+0x37c/0x4c0 [ 333.428307][ C1] do_setlink+0x908/0x40d0 [ 333.432735][ C1] rtnl_newlink+0x160b/0x1c70 [ 333.437417][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 333.442358][ C1] netlink_rcv_skb+0x219/0x490 [ 333.447130][ C1] netlink_unicast+0x758/0x8d0 [ 333.451897][ C1] [ 333.454228][ C1] Memory state around the buggy address: [ 333.459855][ C1] ffff88806dafab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.467913][ C1] ffff88806dafab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.475978][ C1] >ffff88806dafac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.484035][ C1] ^ [ 333.489400][ C1] ffff88806dafac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.497461][ C1] ffff88806dafad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.505520][ C1] ================================================================== [ 333.513733][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 333.520954][ C1] CPU: 1 UID: 0 PID: 11618 Comm: syz.1.1684 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 333.533050][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.543140][ C1] Call Trace: [ 333.546449][ C1] [ 333.549337][ C1] dump_stack_lvl+0x99/0x250 [ 333.553991][ C1] ? __asan_memcpy+0x40/0x70 [ 333.558609][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.563821][ C1] ? __pfx__printk+0x10/0x10 [ 333.568438][ C1] panic+0x2db/0x790 [ 333.572381][ C1] ? __pfx_panic+0x10/0x10 [ 333.576858][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 333.582796][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 333.588733][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.595102][ C1] ? print_memory_metadata+0x314/0x400 [ 333.600606][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 333.605761][ C1] check_panic_on_warn+0x89/0xb0 [ 333.610730][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 333.615849][ C1] end_report+0x78/0x160 [ 333.620100][ C1] kasan_report+0x129/0x150 [ 333.624622][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 333.629748][ C1] rose_timer_expiry+0x471/0x4b0 [ 333.634697][ C1] call_timer_fn+0x17b/0x5f0 [ 333.639300][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 333.644776][ C1] ? call_timer_fn+0xbe/0x5f0 [ 333.649485][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 333.654610][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.659828][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.665052][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 333.670520][ C1] __run_timer_base+0x61a/0x860 [ 333.675388][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 333.680804][ C1] ? lapic_next_event+0x11/0x20 [ 333.685682][ C1] ? clockevents_program_event+0x24d/0x360 [ 333.691500][ C1] run_timer_softirq+0xb7/0x180 [ 333.696360][ C1] handle_softirqs+0x283/0x870 [ 333.701129][ C1] ? do_softirq+0xec/0x180 [ 333.705547][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 333.710833][ C1] ? aead_recvmsg+0x1592/0x1620 [ 333.715690][ C1] do_softirq+0xec/0x180 [ 333.719934][ C1] [ 333.722863][ C1] [ 333.725798][ C1] ? __pfx_do_softirq+0x10/0x10 [ 333.730654][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 333.736029][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 333.741321][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 333.746521][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.752242][ C1] ? aead_recvmsg+0x1592/0x1620 [ 333.757104][ C1] aead_recvmsg+0x1592/0x1620 [ 333.761786][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.766568][ C1] ? bpf_trace_printk+0x126/0x190 [ 333.771605][ C1] ? __pfx_bpf_trace_printk+0x10/0x10 [ 333.777000][ C1] ? __pfx_aead_recvmsg+0x10/0x10 [ 333.782036][ C1] ? __lock_acquire+0xaac/0xd20 [ 333.786902][ C1] ? __lock_acquire+0xaac/0xd20 [ 333.791761][ C1] ? aa_label_sk_perm+0x413/0x560 [ 333.796791][ C1] ? look_up_lock_class+0x74/0x170 [ 333.801903][ C1] ? look_up_lock_class+0x74/0x170 [ 333.807025][ C1] ? __lock_acquire+0xaac/0xd20 [ 333.811887][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.817273][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.822477][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.827851][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.833588][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 333.839152][ C1] ? aead_check_key+0x18a/0x200 [ 333.844017][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 333.849582][ C1] ? aead_check_key+0x18a/0x200 [ 333.854446][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 333.860002][ C1] ? __pfx_aead_recvmsg_nokey+0x10/0x10 [ 333.865557][ C1] sock_recvmsg_nosec+0x183/0x1c0 [ 333.870588][ C1] ____sys_recvmsg+0x3aa/0x460 [ 333.875371][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 333.880673][ C1] ? import_iovec+0x74/0xa0 [ 333.885184][ C1] ___sys_recvmsg+0x1b5/0x510 [ 333.889876][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 333.895094][ C1] ? __might_fault+0xb0/0x130 [ 333.899797][ C1] do_recvmmsg+0x307/0x760 [ 333.904226][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 333.909186][ C1] ? __pfx_do_futex+0x10/0x10 [ 333.913876][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 333.918928][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.923701][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 333.929260][ C1] ? do_syscall_64+0xba/0x210 [ 333.933938][ C1] do_syscall_64+0xf6/0x210 [ 333.938443][ C1] ? clear_bhb_loop+0x45/0xa0 [ 333.943125][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.949020][ C1] RIP: 0033:0x7faf5418e969 [ 333.953437][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.973044][ C1] RSP: 002b:00007faf55088038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 333.981467][ C1] RAX: ffffffffffffffda RBX: 00007faf543b6080 RCX: 00007faf5418e969 [ 333.989442][ C1] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000006 [ 333.997414][ C1] RBP: 00007faf54210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 334.005411][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.013398][ C1] R13: 0000000000000000 R14: 00007faf543b6080 R15: 00007ffea2915548 [ 334.021395][ C1] [ 334.024777][ C1] Kernel Offset: disabled [ 334.029107][ C1] Rebooting in 86400 seconds..