last executing test programs: 3.333225768s ago: executing program 0 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x703d2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.115890276s ago: executing program 0 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0003000000000000000000070000000100000093f47a82e72867045de7f98738c66443650bca5de6c90538bf4ad03d56641e3f9a2df3efe966b8554772b472dda35da4afb2f7d02fc9c6659cc54a9095a1669f84668dca535236ea85a1100818eb226aab140b29116aa1bf070000004ecf7fa958d6040d1f2a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) 2.598449973s ago: executing program 0 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xa) socket$netlink(0x10, 0x3, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x1c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040805) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x21}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000010a0108000000ffffff7f00000000070c0004400000000000000005d6000600f639f6babeecf75ceef12b6b7c5f90de8fc4ff4b8156125a72daba1cbe68319100521a78c452f543bd5272130d78dcaef3596ef017645b62dd9ad84266943da969abcba07e1cc49f28872c2ff83e87453f69967556ecb165faf39f463b79b8e3e89a7e63094d2af3ffb6b8e80d52c4e5970b56fd6e3a8852f1c8a93f56d14ce1dc05c6c3cbf7077080649d1fe1da7e99b87c7a4d1832db26b4a8aa08a4b517d16e25b078cba22f996f4b5be85f0eca15f4c859feec13a99853e6e1582ca3e56f0f47d8bc8a90d32c4ecdc93900deecdc1b08000008000240000000010900010073797a30000000000c00044000000000000000040900010073797a3100000000"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r7, 0x80047441, 0xf0ff1f00000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x409}, 0x22) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 2.374924724s ago: executing program 0 (id=496): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)=""/81, 0x51}], 0x1, &(0x7f0000000440)=""/86, 0x56}, 0x6f14}, {{&(0x7f00000004c0), 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/135, 0x87}, {&(0x7f0000000a40)=""/196, 0xc4}], 0x5, &(0x7f0000000900)=""/179, 0xb3}, 0x1}], 0x2, 0x40000000, &(0x7f0000000bc0)={r2, r3+60000000}) 1.889077797s ago: executing program 3 (id=502): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x453, 0x1, 0x70bd2d, 0x25dfdbfe, "21902fd5ff9080e5935ecba33da0d60486570cd4a1428d7e7e", ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040840) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="001000000000000002004e240a0101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e23ac14143700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1012e120000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/393], 0x190) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x4, 0x1e, 0x1ff}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x4, 0x1e, 0x1ff}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080004000300000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.78271067s ago: executing program 1 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1, @private0, 0x7}, @in6={0xa, 0x0, 0x0, @private0, 0xfffffffd}], 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'team0\x00', 0x800}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="340000003d0007010000000000000000017c00000400fc800c0001802e4e0000000a0000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000003400128009000100626f6e6400000000240002800500010004000000080018"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 1.769558217s ago: executing program 2 (id=505): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x33}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='netfs_rreq_ref\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002046dc137000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x8001, 0x1, 0x6, 0x4, {{0xd, 0x4, 0x2, 0x39, 0x34, 0x67, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, {[@timestamp={0x44, 0x20, 0xea, 0x0, 0x4, [0x4, 0x7, 0x1, 0x2, 0xf4, 0xe, 0x2]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r5, 0x25, 0x10, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000400)=@ctrl_frame=@ba={{}, {0xb}, @device_b, @device_b, @compressed={{}, {0xb, 0x4}, "349208645fdacdf2"}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000009b000000850000005400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.693017226s ago: executing program 3 (id=506): r0 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={0x0, 0xffffffffffffffff, 0x1000000}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x6, 0x4, 0x63b, r3, 0xa81f, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0xb}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @generic={0x2, 0x7, 0xb, 0x9, 0xc5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0xc254, 0x2a, &(0x7f0000000240)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x2, 0x6}, 0x10, 0x91a, r2, 0x1, &(0x7f00000004c0)=[r7, r3, r0, r0, r3, r3, r3, r4, r3, r3], &(0x7f0000000500)=[{0x2, 0x2, 0x1ff, 0xa}], 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.637626311s ago: executing program 3 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000000a03000000000000000000070000007e0006008782355a5e0f35b550c6876b1c59acd72024a315faad400755f8b4ef75209958feae8a8140eef83045283567ada189ac6836610ae4a63c96836c7d976ec3e7351723fa995778faea0c905611c143c33737eb500c4a9e4a139d629a8f3a272d36bedd932c460e46aa8877e945223bee0f7e7465221a880556f43300002c0000000b0a05000000000000000000070000000900010073797a30000000000c001040000000000000000114000000100001000000000000000000008400"], 0xe8}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xffffffffffffffe8, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x80c5) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000000002de0e116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$llc(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x40}, 0x1, 0x0, 0x0, 0x44840}, 0x40014) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.485305185s ago: executing program 1 (id=509): socket$netlink(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0xfffffffe, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000f9030b001b060b0008000000000000f9a445a39f3b8e8b6e4c010180c200000031e1d775d951e6c69a6f5c0778"], 0x24) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x4000014) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x29, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) close(0xffffffffffffffff) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0xfffffffe, 0xffffffff, 0x23}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.365175597s ago: executing program 4 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000a410001fff000000000000000000000000f4b783c78a00a5cc112483b552da4d1c085fb24a585603807003180bb67eb8a2cf6e1163", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getpid() (async) getpid() 1.357500494s ago: executing program 4 (id=511): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x98a, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0xa, &(0x7f00000003c0)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdc}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @tail_call]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r4}, 0x38) accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000500001b7ff8d01014f660fb4d0825a007c75849b21448486e9666fe6599c3b5ea04fd61b682cadfcf066bfdf412dd18bad9d4af2f8bfe22da038f5659edcde868fe8a5ef51c4ab55a4f37d87b0482e247e0f7c0ca2179fe2b36c497669714752d344f060aedda17a302fe79e4837a71189858ba2e4dd1014866da829418ffdbf32fa0d5727ab2f016a5ef1fdd4e124d65b36b1e0c97e5fc87c5b8b57e3f5f6d7dd5eaffbff7f9371aac9a67fb43761e49345ccfab0be13c80acc4bde46b2d1baf11080ec7e60e1440f", @ANYRES32=0x0, @ANYBLOB="8cff01800c0004800800020013000000"], 0x28}}, 0x4000000) 1.355649296s ago: executing program 0 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) socket$netlink(0x10, 0x3, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000000700000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032cbd70f698dbdf250000000014000200776731000000000000000000bb000000"], 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 1.350252393s ago: executing program 3 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x10}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0) 1.240988185s ago: executing program 4 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYRES16=r4], 0x38}}, 0x0) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(@\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf255500000008000300", @ANYRES32=r11, @ANYBLOB="0c009900010100000d000000"], 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) r12 = gettid() r13 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e40)={r13, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7f, 0x10}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x74}}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r13}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r14}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x25}}]}, 0x68}}, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.240668818s ago: executing program 3 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x51c0}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x58}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x493858245ac63fb0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001540)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/195, 0xc3}, 0x8dd}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/170, 0xaa}, {&(0x7f00000013c0)=""/140, 0x8c}, {&(0x7f0000001480)=""/128, 0x80}], 0x3, &(0x7f0000001b00)=""/4096, 0x1000}, 0x10001}], 0x2, 0x0, &(0x7f0000001600)={r3, r4+60000000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x805) close(0x3) 1.237840118s ago: executing program 1 (id=516): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, 0x0) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xb4, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@local]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "916af0f55560756c35981e9bb17b5d164b513ac5076cec8e627d1f11d4d2e0bb", "554be330d4c210f12d543f5c857e93a92c13894238af9d8dc4c51dd19e310066a58b96f1cc6bef08fe017c9a8cecefca", "9e2bfa55586b2b8667a5de151bc6966746a9d51a9b0c9d23df2a5305", {"ea35ee4f68295bbe625b292ccbc4b0cd", "74cbd05d2b4b910854d5ec2c9274d312"}}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a00000000000000050000"], 0x4c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60) sendmmsg(r2, &(0x7f0000000100), 0x0, 0xfc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="2c000180"], 0x44}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x10006}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e1f, 0x9, @loopback, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) r8 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.164344764s ago: executing program 2 (id=517): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000003, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="7ab4145760558f7e28699ff728f3e6a00247947aec5ce1879dd2433d3aa63dd3"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="00d9228f75f8925bc141154dea31459e1560dbba2e85beb74abb01070000000000000008ab6fc7f6adfd751ee11a7aaac68ea2564962fe6f9be3f4d44d05c3401a61089a19d0c55900000000", 0x4c}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x19}, 0xff03}], 0x2, 0x8000) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) socket(0x10, 0x803, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) 1.126973488s ago: executing program 0 (id=518): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r4 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) write(r0, &(0x7f00000002c0), 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000240)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)="a25f2b67fca6909b5143b15e6d56eff157105c6773eafdeff0f64fd8282d2711257593c3ef2615bb8b743ed599493f1d6e6001ee07a16213bf16beb69826422241f33fc1ee35dd7eaecc6f94d732736528be9d90cc597601dbe9b8b50082cac4349e14003b08f3c0270b5aa8b2f3544e05d6ac1133a323819b6d1a933d5c7e7327f26ca0498464bf2c78ba22df704b6b5bec8411d19eb97afc26b704cdc7f999270b1d7653868277bf19ba64d3c8211c4c8b909d055cb5ed2141ed330b32906680cb8deceb15f09b883116c0c80c84f576e0c205cfdc3ca8bb0af07ef8a73a821bfeab1f95bc8e4b7a214d1fd1", 0xed}], 0x1}, 0x80) (async) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000240)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)="a25f2b67fca6909b5143b15e6d56eff157105c6773eafdeff0f64fd8282d2711257593c3ef2615bb8b743ed599493f1d6e6001ee07a16213bf16beb69826422241f33fc1ee35dd7eaecc6f94d732736528be9d90cc597601dbe9b8b50082cac4349e14003b08f3c0270b5aa8b2f3544e05d6ac1133a323819b6d1a933d5c7e7327f26ca0498464bf2c78ba22df704b6b5bec8411d19eb97afc26b704cdc7f999270b1d7653868277bf19ba64d3c8211c4c8b909d055cb5ed2141ed330b32906680cb8deceb15f09b883116c0c80c84f576e0c205cfdc3ca8bb0af07ef8a73a821bfeab1f95bc8e4b7a214d1fd1", 0xed}], 0x1}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {0x0}], 0x7}, 0x80000002}], 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r10, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 988.116487ms ago: executing program 2 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d2d28732c5fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x4000}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc58ac4fb559ff17e}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80000001, 0xe69, 0xff, 0x8100}}]}]}]}, @IFLA_GROUP={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x44844) 832.486608ms ago: executing program 2 (id=520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001080)}], 0x1}}], 0x1, 0x20000000) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6", 0x76}, {&(0x7f0000001400)="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", 0x7a6}], 0x2}}], 0x1, 0x11) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000300)) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x94, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @local, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000bc00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r7}, 0x94) 831.663456ms ago: executing program 1 (id=521): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r2 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff}}) 740.311439ms ago: executing program 3 (id=522): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)=""/81, 0x51}], 0x1, &(0x7f0000000440)=""/86, 0x56}, 0x6f14}, {{&(0x7f00000004c0), 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/135, 0x87}, {&(0x7f0000000a40)=""/196, 0xc4}], 0x5, &(0x7f0000000900)=""/179, 0xb3}, 0x1}], 0x2, 0x40000000, &(0x7f0000000bc0)={r2, r3+60000000}) 641.351552ms ago: executing program 2 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 641.010223ms ago: executing program 4 (id=524): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0xf84, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x8000}], 0x1, &(0x7f0000000380), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0) 615.579723ms ago: executing program 1 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x80000000}, 0x1c) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x107c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x104c, 0x2, [@TCA_BASIC_EMATCHES={0x1040, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1034, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1030, 0x3, 0x0, 0x0, {{0x6b, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x9}}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6, 0xfe, 0x0, 0x6}]}) write$ppp(r5, &(0x7f0000000480)="334908f89d", 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x80000000}, 0x1c) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x107c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x104c, 0x2, [@TCA_BASIC_EMATCHES={0x1040, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1034, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1030, 0x3, 0x0, 0x0, {{0x6b, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x9}}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x7ffd) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6, 0xfe, 0x0, 0x6}]}) (async) write$ppp(r5, &(0x7f0000000480)="334908f89d", 0x5) (async) 576.240738ms ago: executing program 2 (id=526): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = accept4$inet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) accept4$inet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 157.164009ms ago: executing program 4 (id=527): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8800) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x103) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) 78.024346ms ago: executing program 4 (id=528): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x1, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe43}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffe6f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf7a}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6c}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c890}, 0x800) connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 0s ago: executing program 1 (id=529): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0xb, 0xffeb}, {0x4, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 65.614927][ T5811] cgroup: Unknown subsys name 'net' [ 65.764028][ T5811] cgroup: Unknown subsys name 'cpuset' [ 65.772633][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.150329][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.428742][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.441151][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455267][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.481426][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.484785][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.489680][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.496708][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.504126][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.518379][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.519086][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.526949][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.540459][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.548852][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.556975][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.565786][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.573293][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.576019][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.582172][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.588658][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.596108][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.603556][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.617085][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.620894][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.631522][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.640771][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.648734][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.657293][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.184963][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.326185][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.422706][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.533941][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.542877][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.550469][ T5824] bridge_slave_0: entered allmulticast mode [ 72.559280][ T5824] bridge_slave_0: entered promiscuous mode [ 72.597621][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.604917][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.612746][ T5824] bridge_slave_1: entered allmulticast mode [ 72.619743][ T5824] bridge_slave_1: entered promiscuous mode [ 72.668738][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.692336][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.732585][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.739728][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.747354][ T5823] bridge_slave_0: entered allmulticast mode [ 72.754419][ T5823] bridge_slave_0: entered promiscuous mode [ 72.782898][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.803233][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.810384][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.817727][ T5823] bridge_slave_1: entered allmulticast mode [ 72.825433][ T5823] bridge_slave_1: entered promiscuous mode [ 72.865863][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.873382][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.880662][ T5835] bridge_slave_0: entered allmulticast mode [ 72.887782][ T5835] bridge_slave_0: entered promiscuous mode [ 72.896954][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.935836][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.945712][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.952957][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.960104][ T5835] bridge_slave_1: entered allmulticast mode [ 72.967252][ T5835] bridge_slave_1: entered promiscuous mode [ 72.997582][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.061974][ T5824] team0: Port device team_slave_0 added [ 73.096414][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.108868][ T5824] team0: Port device team_slave_1 added [ 73.139631][ T5823] team0: Port device team_slave_0 added [ 73.151945][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.172497][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.179686][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.187206][ T5829] bridge_slave_0: entered allmulticast mode [ 73.194299][ T5829] bridge_slave_0: entered promiscuous mode [ 73.214742][ T5823] team0: Port device team_slave_1 added [ 73.242644][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.250314][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.257766][ T5829] bridge_slave_1: entered allmulticast mode [ 73.265269][ T5829] bridge_slave_1: entered promiscuous mode [ 73.272674][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.279803][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.287481][ T5832] bridge_slave_0: entered allmulticast mode [ 73.294624][ T5832] bridge_slave_0: entered promiscuous mode [ 73.325406][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.332670][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.358645][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.382748][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.389888][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.397387][ T5832] bridge_slave_1: entered allmulticast mode [ 73.404467][ T5832] bridge_slave_1: entered promiscuous mode [ 73.424513][ T5835] team0: Port device team_slave_0 added [ 73.431553][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.438513][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.464832][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.476764][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.483830][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.510072][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.545008][ T5835] team0: Port device team_slave_1 added [ 73.551800][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.558753][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.584796][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.606785][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.651959][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.661704][ T5825] Bluetooth: hci4: command tx timeout [ 73.661904][ T5825] Bluetooth: hci0: command tx timeout [ 73.685341][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.741166][ T5825] Bluetooth: hci1: command tx timeout [ 73.741175][ T5831] Bluetooth: hci3: command tx timeout [ 73.750872][ T5831] Bluetooth: hci2: command tx timeout [ 73.760833][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.772091][ T5829] team0: Port device team_slave_0 added [ 73.778611][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.785806][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.812668][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.840626][ T5824] hsr_slave_0: entered promiscuous mode [ 73.847052][ T5824] hsr_slave_1: entered promiscuous mode [ 73.866992][ T5829] team0: Port device team_slave_1 added [ 73.873994][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.881131][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.907169][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.935136][ T5823] hsr_slave_0: entered promiscuous mode [ 73.942284][ T5823] hsr_slave_1: entered promiscuous mode [ 73.948550][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 73.954422][ T5823] Cannot create hsr debugfs directory [ 73.989538][ T5832] team0: Port device team_slave_0 added [ 74.057339][ T5832] team0: Port device team_slave_1 added [ 74.075703][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.082755][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.108693][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.127790][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.134834][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.161191][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.177474][ T5835] hsr_slave_0: entered promiscuous mode [ 74.183889][ T5835] hsr_slave_1: entered promiscuous mode [ 74.189900][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 74.195920][ T5835] Cannot create hsr debugfs directory [ 74.262103][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.269066][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.295911][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.343053][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.350023][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.376198][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.446407][ T5829] hsr_slave_0: entered promiscuous mode [ 74.452916][ T5829] hsr_slave_1: entered promiscuous mode [ 74.459121][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 74.464960][ T5829] Cannot create hsr debugfs directory [ 74.577215][ T5832] hsr_slave_0: entered promiscuous mode [ 74.584762][ T5832] hsr_slave_1: entered promiscuous mode [ 74.591107][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 74.596857][ T5832] Cannot create hsr debugfs directory [ 74.904525][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.933529][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.966333][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.990311][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.044528][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.058649][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.070075][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.082491][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.153221][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.172631][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.204615][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.225808][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.293714][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.307876][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.332250][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.345233][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.449860][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.471564][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.487627][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.500269][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.511505][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.556574][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.606872][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.614197][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.628501][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.635681][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.659313][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.678059][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.719241][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.738804][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.740748][ T5831] Bluetooth: hci4: command tx timeout [ 75.746233][ T5825] Bluetooth: hci0: command tx timeout [ 75.780602][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.787845][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.804862][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.812005][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.820702][ T5825] Bluetooth: hci2: command tx timeout [ 75.821073][ T5831] Bluetooth: hci3: command tx timeout [ 75.831111][ T5825] Bluetooth: hci1: command tx timeout [ 75.848350][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.855503][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.902352][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.909533][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.926045][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.034963][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.125945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.133150][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.180437][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.189825][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.197011][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.251893][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.269261][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.327082][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.368700][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.375997][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.453416][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.460614][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.553362][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.728705][ T5835] veth0_vlan: entered promiscuous mode [ 76.801414][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.818224][ T5835] veth1_vlan: entered promiscuous mode [ 76.950813][ T5835] veth0_macvtap: entered promiscuous mode [ 76.984446][ T5823] veth0_vlan: entered promiscuous mode [ 77.003462][ T5835] veth1_macvtap: entered promiscuous mode [ 77.011378][ T5824] veth0_vlan: entered promiscuous mode [ 77.024500][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.060386][ T5824] veth1_vlan: entered promiscuous mode [ 77.077756][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.087367][ T5823] veth1_vlan: entered promiscuous mode [ 77.098137][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.153908][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.163925][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.196311][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.206010][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.227884][ T5824] veth0_macvtap: entered promiscuous mode [ 77.259174][ T5824] veth1_macvtap: entered promiscuous mode [ 77.274256][ T5829] veth0_vlan: entered promiscuous mode [ 77.296948][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.339733][ T5823] veth0_macvtap: entered promiscuous mode [ 77.353820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.360257][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.373543][ T5829] veth1_vlan: entered promiscuous mode [ 77.385196][ T5823] veth1_macvtap: entered promiscuous mode [ 77.388740][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.409887][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.460241][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.476315][ T5832] veth0_vlan: entered promiscuous mode [ 77.482713][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.490393][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.531429][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.546031][ T5832] veth1_vlan: entered promiscuous mode [ 77.559372][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.568924][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.587345][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.589981][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.615428][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.653088][ T1018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.665047][ T1018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.716204][ T5829] veth0_macvtap: entered promiscuous mode [ 77.732329][ T1018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.742272][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.768683][ T5829] veth1_macvtap: entered promiscuous mode [ 77.786121][ T5944] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 77.821491][ T5825] Bluetooth: hci4: command tx timeout [ 77.821745][ T5831] Bluetooth: hci0: command tx timeout [ 77.832765][ T5832] veth0_macvtap: entered promiscuous mode [ 77.871218][ T5832] veth1_macvtap: entered promiscuous mode [ 77.886013][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.903006][ T5831] Bluetooth: hci3: command tx timeout [ 77.903533][ T5825] Bluetooth: hci1: command tx timeout [ 77.908440][ T5831] Bluetooth: hci2: command tx timeout [ 77.929646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.954420][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.980152][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.005600][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.068707][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.082422][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.090299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.116171][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.125769][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.155866][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.166304][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192851][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.205549][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.225966][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.235333][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270927][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.279689][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.353228][ T5951] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.551954][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.567615][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.587912][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.598186][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.786449][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.811559][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.009107][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.043152][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.135426][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 79.200829][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.208688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.614614][ T5971] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 79.634315][ T5971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.799349][ T5971] : renamed from bond0 (while UP) [ 79.900999][ T5831] Bluetooth: hci0: command tx timeout [ 79.906667][ T5825] Bluetooth: hci4: command tx timeout [ 79.981027][ T5831] Bluetooth: hci2: command tx timeout [ 79.991457][ T5831] Bluetooth: hci1: command tx timeout [ 79.997560][ T5825] Bluetooth: hci3: command tx timeout [ 80.097383][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.137177][ T5982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.725708][ T5989] Zero length message leads to an empty skb [ 80.853731][ T5991] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.987671][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.078557][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 81.458970][ T6017] netlink: 'syz.3.19': attribute type 8 has an invalid length. [ 81.745170][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.830343][ T6030] tipc: Started in network mode [ 81.836129][ T6030] tipc: Node identity 7e10a857b8c3, cluster identity 4711 [ 81.867513][ T6030] tipc: Enabled bearer , priority 0 [ 81.929426][ T6030] syzkaller0: entered promiscuous mode [ 81.940585][ T6030] syzkaller0: entered allmulticast mode [ 81.962428][ T6037] IPv6: addrconf: prefix option has invalid lifetime [ 81.993503][ T6030] tipc: Resetting bearer [ 82.056674][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.068162][ T6029] tipc: Resetting bearer [ 82.149785][ T6029] tipc: Disabling bearer [ 82.208200][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.253199][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.316160][ T6036] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.372257][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 82.450654][ T6036] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 82.694747][ T6053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.27'. [ 82.711764][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.719913][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.753921][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 82.831196][ T6054] tipc: Enabled bearer , priority 0 [ 82.852220][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.884174][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.912548][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.920459][ T6036] wg1 speed is unknown, defaulting to 1000 [ 82.957983][ T6054] tipc: Disabling bearer [ 82.975209][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.991264][ T6062] netlink: 'syz.0.30': attribute type 23 has an invalid length. [ 83.377606][ T6091] __nla_validate_parse: 1 callbacks suppressed [ 83.377623][ T6091] netlink: 88 bytes leftover after parsing attributes in process `syz.0.38'. [ 83.507516][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 83.541184][ T6100] No such timeout policy "syz1" [ 83.569138][ T6100] openvswitch: netlink: nsh attr 0 has unexpected len 324 expected 0 [ 83.588427][ T6100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.613249][ T6103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.624345][ T6104] netlink: 'syz.4.37': attribute type 10 has an invalid length. [ 83.635861][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.657443][ T6104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.673736][ T6104] Bluetooth: MGMT ver 1.23 [ 83.760156][ T6109] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 83.845826][ T6114] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 83.855742][ T6115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 83.878987][ T6113] gretap1: entered promiscuous mode [ 83.913888][ T6109] netlink: 'syz.1.43': attribute type 10 has an invalid length. [ 83.929644][ T6116] ip6tnl1: entered promiscuous mode [ 83.939510][ T6116] ip6tnl1: entered allmulticast mode [ 83.946901][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 83.947848][ T6116] team0: Device ip6tnl1 is of different type [ 83.986752][ T6109] veth1_vlan: entered allmulticast mode [ 83.999579][ T6109] team0: Device veth1_vlan failed to register rx_handler [ 84.028643][ T6110] wg1 speed is unknown, defaulting to 1000 [ 84.089493][ T6116] veth0_macvtap: left promiscuous mode [ 84.220438][ T6134] vlan2: entered allmulticast mode [ 84.225928][ T6134] dummy0: entered allmulticast mode [ 84.368635][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.4.54'. [ 84.611396][ T6149] team0: Port device team_slave_0 removed [ 85.000697][ T6169] wg1 speed is unknown, defaulting to 1000 [ 85.053011][ T6173] netlink: 264 bytes leftover after parsing attributes in process `syz.2.60'. [ 85.126563][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.134834][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.169337][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.176564][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.184663][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.191949][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.214397][ T6175] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.228512][ T6177] netlink: 'syz.1.62': attribute type 10 has an invalid length. [ 85.289079][ T6177] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.330826][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'. [ 85.388120][ T6175] IPVS: Error connecting to the multicast addr [ 85.425051][ T6175] syzkaller0: entered promiscuous mode [ 85.435414][ T6175] syzkaller0: entered allmulticast mode [ 85.526966][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 85.538685][ T6202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.68'. [ 86.483217][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.491090][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.594065][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.609774][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.743114][ T6244] wg1 speed is unknown, defaulting to 1000 [ 86.750248][ T6237] hsr_slave_0: left promiscuous mode [ 86.757774][ T6237] hsr_slave_1: left promiscuous mode [ 86.787210][ T9] cfg80211: failed to load regulatory.db [ 86.807389][ T6081] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.866228][ T6081] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.875946][ T6081] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.903959][ T6081] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.999352][ T6269] pimreg: tun_chr_ioctl cmd 1074025677 [ 87.005662][ T6269] pimreg: linktype set to 780 [ 87.047728][ T6269] pimreg: tun_chr_ioctl cmd 35111 [ 87.071180][ T6274] pimreg: tun_chr_ioctl cmd 1074025677 [ 87.078190][ T6274] pimreg: linktype set to 780 [ 87.083324][ T6269] pimreg: tun_chr_ioctl cmd 1074025673 [ 87.089028][ T6272] syzkaller1: entered promiscuous mode [ 87.094683][ T6272] syzkaller1: entered allmulticast mode [ 87.109768][ T6275] pimreg: tun_chr_ioctl cmd 35111 [ 87.179598][ T6279] trusted_key: syz.2.87 sent an empty control message without MSG_MORE. [ 87.241729][ T6286] netlink: 'syz.2.89': attribute type 8 has an invalid length. [ 87.355044][ T6285] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 88.100195][ T6331] netlink: 'syz.2.103': attribute type 12 has an invalid length. [ 88.480774][ T6360] __nla_validate_parse: 17 callbacks suppressed [ 88.480792][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 88.812979][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 88.827002][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 88.885409][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 88.936088][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 89.045522][ T6392] netlink: 'syz.1.120': attribute type 32 has an invalid length. [ 89.057229][ T6392] netlink: 'syz.1.120': attribute type 32 has an invalid length. [ 89.719974][ T6401] wg1 speed is unknown, defaulting to 1000 [ 89.747018][ T6402] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 90.017749][ T6398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 90.119234][ T6405] bond0 (unregistering): Released all slaves [ 91.236088][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.125'. [ 92.264834][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 92.299784][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 92.433312][ T6434] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 92.458746][ T6426] dummy0: entered promiscuous mode [ 92.468786][ T6434] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 92.475209][ T6426] dummy0: left promiscuous mode [ 92.483488][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 92.516858][ T6435] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 92.688667][ T6435] team0: Failed to send options change via netlink (err -105) [ 92.714442][ T6435] team0: Port device dummy0 added [ 92.747985][ T6430] wg1 speed is unknown, defaulting to 1000 [ 93.363911][ T6450] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 93.571576][ T6452] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 93.630971][ T6457] __nla_validate_parse: 1 callbacks suppressed [ 93.630991][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 93.642032][ T6452] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 93.697091][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 93.717177][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 94.033143][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 94.088986][ T6467] bridge2: entered allmulticast mode [ 94.105010][ T6472] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 94.131548][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 94.476287][ T6497] wg1 speed is unknown, defaulting to 1000 [ 94.791482][ T6504] macsec1: entered promiscuous mode [ 94.807144][ T6504] macsec1: entered allmulticast mode [ 95.025533][ T6507] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 95.101057][ T6507] bond2: entered promiscuous mode [ 95.107016][ T6507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.192788][ T6509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.200343][ T6509] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 95.299124][ T6509] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 95.345692][ T6509] bond2: (slave gre1): making interface the new active one [ 95.413213][ T6509] gre1: entered promiscuous mode [ 95.452678][ T6509] bond2: (slave gre1): Enslaving as an active interface with an up link [ 95.515305][ T6513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.150'. [ 95.674094][ T6513] wg1 speed is unknown, defaulting to 1000 [ 96.650856][ T6528] tipc: Started in network mode [ 96.655785][ T6528] tipc: Node identity 3a5509f8404f, cluster identity 4711 [ 96.680954][ T6528] tipc: Enabled bearer , priority 0 [ 96.708448][ T6530] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.774745][ T6528] tipc: Disabling bearer [ 96.867101][ T6368] Set syz1 is full, maxelem 65536 reached [ 96.885259][ T6537] bridge_slave_0: left allmulticast mode [ 96.891050][ T6537] bridge_slave_0: left promiscuous mode [ 96.906247][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.952298][ T6537] bridge_slave_1: left allmulticast mode [ 96.957987][ T6537] bridge_slave_1: left promiscuous mode [ 96.963949][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.996369][ T6537] : (slave bond_slave_0): Releasing backup interface [ 97.014003][ T6537] : (slave bond_slave_1): Releasing backup interface [ 97.040053][ T6537] team0: Port device team_slave_0 removed [ 97.058397][ T6537] team0: Port device team_slave_1 removed [ 97.075178][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.105874][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.418507][ T6561] netlink: 'syz.0.163': attribute type 4 has an invalid length. [ 97.954919][ T6591] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 98.191103][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 98.307771][ T6605] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 98.355880][ T6605] netlink: 172 bytes leftover after parsing attributes in process `syz.1.173'. [ 98.646168][ T6626] netlink: 'syz.2.177': attribute type 13 has an invalid length. [ 98.676427][ T6626] netlink: 'syz.2.177': attribute type 17 has an invalid length. [ 98.873123][ T6640] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 98.894398][ T6640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.180'. [ 98.966992][ T6626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.082111][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 99.100383][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 99.109645][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 99.134018][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 99.163331][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.163559][ T6656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.190827][ T6658] netlink: 232 bytes leftover after parsing attributes in process `syz.3.183'. [ 99.247361][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.274879][ T6644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.287434][ T6644] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 99.295950][ T6635] wg1 speed is unknown, defaulting to 1000 [ 99.356814][ T6644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.410600][ T6644] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 99.468708][ T6644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.485260][ T6644] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 99.526591][ T6671] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 99.539551][ T6674] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 99.547611][ T6671] netlink: 'syz.3.186': attribute type 2 has an invalid length. [ 99.562875][ T6644] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.573925][ T6644] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 99.656079][ T6674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.702136][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.711306][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.720085][ T6685] netlink: 58 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.747264][ T6674] veth3: entered promiscuous mode [ 99.945780][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 101.500164][ T6754] sctp: [Deprecated]: syz.2.205 (pid 6754) Use of int in max_burst socket option deprecated. [ 101.500164][ T6754] Use struct sctp_assoc_value instead [ 101.634989][ T6732] atomic_op ffff8880770ed198 conn xmit_atomic 0000000000000000 [ 101.783778][ T6764] netlink: 'syz.1.209': attribute type 13 has an invalid length. [ 102.116540][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.124345][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.435076][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.470854][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.863323][ T6087] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.872285][ T5891] wg1 speed is unknown, defaulting to 1000 [ 102.910746][ T5891] syz0: Port: 1 Link DOWN [ 102.915841][ T6087] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.955179][ T6087] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.987908][ T6087] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.024205][ T6805] netlink: 'syz.4.214': attribute type 6 has an invalid length. [ 103.076998][ T6807] Bluetooth: hci0: unsupported parameter 512 [ 103.097515][ T6807] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 103.122683][ T6811] warning: `syz.3.215' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.158253][ T6805] netlink: 'syz.4.214': attribute type 12 has an invalid length. [ 103.545861][ T6834] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 103.589137][ T6832] wg1 speed is unknown, defaulting to 1000 [ 103.984899][ T6839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.404106][ T6851] __nla_validate_parse: 11 callbacks suppressed [ 104.404132][ T6851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.224'. [ 104.456809][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 104.467593][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 104.888408][ T6863] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 105.023199][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 105.082711][ T6867] wg1 speed is unknown, defaulting to 1000 [ 105.679976][ T6888] wg1 speed is unknown, defaulting to 1000 [ 105.718516][ T6891] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 105.952203][ T6903] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 106.687162][ T43] IPVS: starting estimator thread 0... [ 106.697642][ T6931] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 106.729658][ T6933] wg1 speed is unknown, defaulting to 1000 [ 106.810751][ T6934] IPVS: using max 32 ests per chain, 76800 per kthread [ 107.069040][ T6951] ipvlan2: entered allmulticast mode [ 107.075757][ T6951] veth0_vlan: entered allmulticast mode [ 107.098613][ T6952] ipvlan2: entered allmulticast mode [ 107.355933][ T6957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.252'. [ 107.545661][ T6967] Driver unsupported XDP return value 0 on prog (id 105) dev N/A, expect packet loss! [ 107.726669][ T6979] netlink: 'syz.1.255': attribute type 13 has an invalid length. [ 107.734646][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 107.787957][ T6980] wg1 speed is unknown, defaulting to 1000 [ 107.895373][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 108.042001][ T6993] netlink: 'syz.2.261': attribute type 12 has an invalid length. [ 108.292385][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 108.633899][ T7022] syzkaller0: entered promiscuous mode [ 108.639424][ T7022] syzkaller0: entered allmulticast mode [ 108.920759][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 109.103448][ T7050] bond2 (unregistering): Released all slaves [ 109.242189][ T7059] lo: entered allmulticast mode [ 109.252246][ T30] audit: type=1800 audit(1760770850.386:2): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.277" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=318 res=0 errno=0 [ 109.366620][ T7068] syz_tun: entered allmulticast mode [ 109.533558][ T7071] team0 (unregistering): Port device team_slave_0 removed [ 109.554927][ T7071] team0 (unregistering): Port device team_slave_1 removed [ 109.558896][ T7073] netlink: 240 bytes leftover after parsing attributes in process `syz.1.276'. [ 109.661403][ T7075] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 109.669216][ T7075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.281'. [ 109.949882][ T7098] C: renamed from lo (while UP) [ 109.978191][ T7098] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 110.060778][ T7103] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 110.089537][ T7108] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 110.098549][ T7108] netlink: 228 bytes leftover after parsing attributes in process `syz.3.289'. [ 110.107497][ T7103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.112600][ T7105] syzkaller0: Caught tx_queue_len zero misconfig [ 110.114805][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 110.132721][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 110.141793][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 110.152811][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 110.155093][ T7108] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 110.208275][ T7068] syz_tun: left allmulticast mode [ 110.554077][ T7114] wg1 speed is unknown, defaulting to 1000 [ 110.657704][ T7113] wg1 speed is unknown, defaulting to 1000 [ 110.672251][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 110.729387][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.297'. [ 110.756145][ T7138] netlink: 112 bytes leftover after parsing attributes in process `syz.3.299'. [ 110.776357][ T6087] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.851061][ T6087] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.879150][ T6087] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.906718][ T7146] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 110.914969][ T7146] netlink: 'syz.0.300': attribute type 2 has an invalid length. [ 110.995658][ T7154] x_tables: duplicate underflow at hook 1 [ 111.069103][ T6087] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.644591][ T7197] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 111.693025][ T7197] netlink: zone id is out of range [ 111.698603][ T7197] netlink: zone id is out of range [ 111.720900][ T7197] netlink: zone id is out of range [ 111.727591][ T7197] netlink: zone id is out of range [ 111.742338][ T7197] netlink: zone id is out of range [ 111.747495][ T7197] netlink: zone id is out of range [ 111.749052][ T7201] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 111.760617][ T7197] netlink: zone id is out of range [ 111.767592][ T7197] netlink: zone id is out of range [ 111.774003][ T7197] netlink: zone id is out of range [ 111.779214][ T7197] netlink: zone id is out of range [ 111.820169][ T7201] bond3 (unregistering): Released all slaves [ 112.172148][ T7222] wg1 speed is unknown, defaulting to 1000 [ 112.212032][ T7232] netlink: 'syz.0.322': attribute type 23 has an invalid length. [ 112.310124][ T7236] ipvlan2: entered promiscuous mode [ 112.396644][ T7234] wg1 speed is unknown, defaulting to 1000 [ 112.564218][ T7239] netlink: 'syz.0.325': attribute type 9 has an invalid length. [ 112.599741][ T7240] wg1 speed is unknown, defaulting to 1000 [ 113.284359][ T7278] netlink: 'syz.3.335': attribute type 2 has an invalid length. [ 113.351681][ T7278] nicvf0: entered promiscuous mode [ 113.364377][ T1018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 113.374987][ T1018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 113.484768][ T1018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 113.495991][ T1018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 113.659363][ T7291] hsr0: entered promiscuous mode [ 113.679013][ T7288] hsr0: left promiscuous mode [ 113.897987][ T7309] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 113.937201][ T7309] bond4 (unregistering): Released all slaves [ 114.053856][ T7316] wg1 speed is unknown, defaulting to 1000 [ 114.068725][ T7328] nbd: socks must be embedded in a SOCK_ITEM attr [ 114.581076][ T7361] FAULT_INJECTION: forcing a failure. [ 114.581076][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.614270][ T7361] CPU: 1 UID: 0 PID: 7361 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(full) [ 114.614296][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.614312][ T7361] Call Trace: [ 114.614319][ T7361] [ 114.614328][ T7361] dump_stack_lvl+0x189/0x250 [ 114.614352][ T7361] ? __pfx____ratelimit+0x10/0x10 [ 114.614378][ T7361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.614395][ T7361] ? __pfx__printk+0x10/0x10 [ 114.614414][ T7361] ? __might_fault+0xb0/0x130 [ 114.614443][ T7361] should_fail_ex+0x414/0x560 [ 114.614473][ T7361] _copy_from_user+0x2d/0xb0 [ 114.614496][ T7361] ___sys_recvmsg+0x12e/0x510 [ 114.614521][ T7361] ? __pfx____sys_recvmsg+0x10/0x10 [ 114.614563][ T7361] ? __fget_files+0x3a0/0x420 [ 114.614591][ T7361] do_recvmmsg+0x307/0x770 [ 114.614612][ T7361] ? __pfx_do_recvmmsg+0x10/0x10 [ 114.614640][ T7361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.614676][ T7361] __x64_sys_recvmmsg+0x190/0x240 [ 114.614693][ T7361] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 114.614708][ T7361] ? do_syscall_64+0xbe/0xfa0 [ 114.614722][ T7361] do_syscall_64+0xfa/0xfa0 [ 114.614734][ T7361] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.614747][ T7361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.614763][ T7361] ? clear_bhb_loop+0x60/0xb0 [ 114.614783][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.614799][ T7361] RIP: 0033:0x7f0aa2f8efc9 [ 114.614815][ T7361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.614829][ T7361] RSP: 002b:00007f0aa3efe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 114.614848][ T7361] RAX: ffffffffffffffda RBX: 00007f0aa31e5fa0 RCX: 00007f0aa2f8efc9 [ 114.614861][ T7361] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 114.614871][ T7361] RBP: 00007f0aa3efe090 R08: 0000000000000000 R09: 0000000000000000 [ 114.614881][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.614890][ T7361] R13: 00007f0aa31e6038 R14: 00007f0aa31e5fa0 R15: 00007ffcb0a7b4c8 [ 114.614918][ T7361] [ 114.750565][ T7367] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 114.818612][ T7369] __nla_validate_parse: 18 callbacks suppressed [ 114.818629][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 114.859090][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 115.221223][ T7388] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 115.250613][ T30] audit: type=1800 audit(1760770856.376:3): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.365" name=CB dev="tmpfs" ino=376 res=0 errno=0 [ 115.420133][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 115.729016][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 115.748818][ T7425] netlink: 64 bytes leftover after parsing attributes in process `syz.0.376'. [ 115.758168][ T7425] block nbd0: not configured, cannot reconfigure [ 115.771942][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 115.924689][ T7437] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 115.960447][ T7439] netlink: 'syz.3.381': attribute type 41 has an invalid length. [ 116.113625][ T7452] tipc: Enabling of bearer rejected, failed to enable media [ 116.181376][ T7446] syzkaller0: entered promiscuous mode [ 116.186900][ T7446] syzkaller0: entered allmulticast mode [ 117.016471][ T7468] netlink: 48 bytes leftover after parsing attributes in process `syz.4.390'. [ 117.113345][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'. [ 117.230982][ T7479] nicvf0: entered promiscuous mode [ 117.281409][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 117.453103][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 117.605008][ T7505] veth3: left promiscuous mode [ 117.610229][ T7505] ipvlan2: left promiscuous mode [ 117.712799][ T7516] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 117.978555][ T7530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.009979][ T7533] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 118.018488][ T7533] dummy0: entered promiscuous mode [ 118.038110][ T7533] team0: Port device dummy0 removed [ 118.049789][ T7533] bridge0: port 3(dummy0) entered blocking state [ 118.077659][ T7533] bridge0: port 3(dummy0) entered disabled state [ 118.085688][ T7533] dummy0: entered allmulticast mode [ 118.607487][ T7563] : (slave gretap1): Enslaving as an active interface with an up link [ 118.622344][ T7572] syz_tun: entered allmulticast mode [ 118.740283][ T7576] pim6reg: entered allmulticast mode [ 118.806537][ T7580] wg1 speed is unknown, defaulting to 1000 [ 118.968880][ T7583] wg1 speed is unknown, defaulting to 1000 [ 119.467180][ T7572] syz_tun: left allmulticast mode [ 119.557548][ T7622] bond1: ARP target 9.0.0.0 is already present [ 119.565457][ T7622] bond1: option arp_ip_target: invalid value (9) [ 119.574192][ T7622] bond1 (unregistering): Released all slaves [ 119.697803][ T7628] wg1 speed is unknown, defaulting to 1000 [ 119.753395][ T7637] netlink: 'syz.0.444': attribute type 16 has an invalid length. [ 120.012935][ T7645] Bluetooth: MGMT ver 1.23 [ 120.123635][ T7653] __nla_validate_parse: 12 callbacks suppressed [ 120.123653][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 120.438492][ T7658] syz_tun: entered allmulticast mode [ 120.898136][ T7670] wg1 speed is unknown, defaulting to 1000 [ 120.946534][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.455'. [ 120.955708][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.455'. [ 121.152510][ T7687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.458'. [ 121.176142][ T7657] syz_tun: left allmulticast mode [ 121.312668][ T7691] vlan2: entered allmulticast mode [ 121.317886][ T7691] bond0: entered allmulticast mode [ 121.323460][ T7691] bond_slave_0: entered allmulticast mode [ 121.329288][ T7691] bond_slave_1: entered allmulticast mode [ 121.345538][ T7693] netlink: 96 bytes leftover after parsing attributes in process `syz.3.460'. [ 121.503735][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 121.605743][ T7710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.466'. [ 121.642407][ T7710] netlink: 43 bytes leftover after parsing attributes in process `syz.2.466'. [ 121.655220][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 121.667818][ T7706] wg1 speed is unknown, defaulting to 1000 [ 121.670439][ T7710] netlink: 'syz.2.466': attribute type 6 has an invalid length. [ 121.684358][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 121.693372][ T7710] netlink: 'syz.2.466': attribute type 5 has an invalid length. [ 121.864966][ T7728] syz_tun: entered allmulticast mode [ 122.274609][ T7748] : entered promiscuous mode [ 122.398893][ T7757] tipc: Started in network mode [ 122.414201][ T7757] tipc: Node identity ba93d950ad06, cluster identity 4711 [ 122.423888][ T5927] IPVS: starting estimator thread 0... [ 122.425822][ T7757] tipc: Enabled bearer , priority 0 [ 122.437108][ T7758] tipc: Enabling of bearer rejected, already enabled [ 122.461626][ T7764] net_ratelimit: 14 callbacks suppressed [ 122.461642][ T7764] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 122.463818][ T7757] syzkaller0: entered promiscuous mode [ 122.474821][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 122.487622][ T7757] syzkaller0: entered allmulticast mode [ 122.527789][ T7757] tipc: Resetting bearer [ 122.540664][ T7765] IPVS: using max 34 ests per chain, 81600 per kthread [ 122.548584][ T7756] tipc: Resetting bearer [ 122.568016][ T7756] tipc: Disabling bearer [ 122.640221][ T7770] tipc: Started in network mode [ 122.645383][ T7770] tipc: Node identity 4, cluster identity 4711 [ 122.652520][ T7770] tipc: Node number set to 4 [ 122.659617][ T7728] syz_tun: left allmulticast mode [ 122.708557][ T7772] wg1 speed is unknown, defaulting to 1000 [ 123.540705][ T7822] syz_tun: entered allmulticast mode [ 123.656224][ T7827] dvmrp0: entered allmulticast mode [ 123.672711][ T7827] syzkaller1: entered promiscuous mode [ 123.678683][ T7827] syzkaller1: entered allmulticast mode [ 123.704608][ T7832] 8021q: VLANs not supported on vcan0 [ 123.780441][ T7832] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.846881][ T7840] netlink: 'syz.3.502': attribute type 30 has an invalid length. [ 123.856776][ T7839] netlink: 'syz.3.502': attribute type 30 has an invalid length. [ 123.886189][ T7839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.989461][ T7845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.092419][ T7851] .N: entered promiscuous mode [ 124.102619][ T7851] netlink: 'syz.1.504': attribute type 24 has an invalid length. [ 124.217716][ T7819] syz_tun: left allmulticast mode [ 124.247877][ T7861] tipc: Enabled bearer , priority 0 [ 124.255758][ T7861] syzkaller0: entered promiscuous mode [ 124.264908][ T7861] syzkaller0: entered allmulticast mode [ 124.308560][ T7859] tipc: Resetting bearer [ 124.349733][ T7859] tipc: Disabling bearer [ 124.555728][ T7874] syzkaller0: entered promiscuous mode [ 124.576611][ T7874] syzkaller0: entered allmulticast mode [ 124.641386][ T7872] dummy0: entered allmulticast mode [ 124.742621][ T7880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.764051][ T7880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.790183][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.798558][ T7888] batadv_slave_0: entered promiscuous mode [ 124.808568][ T7888] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 124.892557][ T7880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.911805][ T7880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.937234][ T7871] dummy0: left allmulticast mode [ 125.009794][ T7880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.022239][ T7880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.067330][ T7899] syz_tun: entered allmulticast mode [ 125.174748][ T7880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.188780][ T7906] __nla_validate_parse: 10 callbacks suppressed [ 125.188800][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 125.204141][ T7880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.282398][ T7906] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 125.307620][ T7908] wg1 speed is unknown, defaulting to 1000 [ 125.584403][ T1018] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.607095][ T1018] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.649087][ T1018] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.659167][ T1018] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.691331][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.699840][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.736533][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.748712][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.766097][ T7881] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.776456][ T7881] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.796913][ T36] ================================================================== [ 125.805072][ T36] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 125.812629][ T36] Read of size 8 at addr ffff888032abd2b0 by task kworker/u8:2/36 [ 125.820445][ T36] [ 125.822870][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 125.822889][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.822899][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 125.822925][ T36] Call Trace: [ 125.822931][ T36] [ 125.822937][ T36] dump_stack_lvl+0x189/0x250 [ 125.822954][ T36] ? __kasan_check_byte+0x12/0x40 [ 125.822971][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.822985][ T36] ? lock_release+0x4b/0x3e0 [ 125.823003][ T36] ? __virt_addr_valid+0x4a5/0x5c0 [ 125.823017][ T36] print_report+0xca/0x240 [ 125.823033][ T36] ? __mutex_lock+0x147/0x1350 [ 125.823046][ T36] kasan_report+0x118/0x150 [ 125.823061][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 125.823081][ T36] ? __mutex_lock+0x147/0x1350 [ 125.823110][ T36] __mutex_lock+0x147/0x1350 [ 125.823125][ T36] ? __mutex_lock+0x5bb/0x1350 [ 125.823140][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 125.823160][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 125.823181][ T36] ? __lock_acquire+0xab9/0xd20 [ 125.823201][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 125.823223][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 125.823242][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 125.823260][ T36] process_scheduled_works+0xae1/0x17b0 [ 125.823285][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.823308][ T36] worker_thread+0x8a0/0xda0 [ 125.823333][ T36] kthread+0x711/0x8a0 [ 125.823347][ T36] ? __pfx_worker_thread+0x10/0x10 [ 125.823364][ T36] ? __pfx_kthread+0x10/0x10 [ 125.823377][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.823395][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.823406][ T36] ? __pfx_kthread+0x10/0x10 [ 125.823419][ T36] ret_from_fork+0x4bc/0x870 [ 125.823439][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 125.823457][ T36] ? __switch_to_asm+0x39/0x70 [ 125.823472][ T36] ? __switch_to_asm+0x33/0x70 [ 125.823485][ T36] ? __pfx_kthread+0x10/0x10 [ 125.823498][ T36] ret_from_fork_asm+0x1a/0x30 [ 125.823519][ T36] [ 125.823524][ T36] [ 126.025742][ T36] Allocated by task 7880: [ 126.030048][ T36] kasan_save_track+0x3e/0x80 [ 126.034713][ T36] __kasan_kmalloc+0x93/0xb0 [ 126.039285][ T36] __kmalloc_noprof+0x411/0x7f0 [ 126.044117][ T36] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 126.050259][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.055355][ T36] register_netdevice+0x1608/0x1ae0 [ 126.060534][ T36] nsim_create+0xae8/0xf10 [ 126.064934][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 126.070032][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 126.075129][ T36] nsim_dev_reload_up+0x451/0x780 [ 126.080141][ T36] devlink_reload+0x4ec/0x8d0 [ 126.084807][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 126.090169][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 126.095697][ T36] genl_rcv_msg+0x60e/0x790 [ 126.100189][ T36] netlink_rcv_skb+0x208/0x470 [ 126.104939][ T36] genl_rcv+0x28/0x40 [ 126.108904][ T36] netlink_unicast+0x82f/0x9e0 [ 126.113650][ T36] netlink_sendmsg+0x805/0xb30 [ 126.118400][ T36] __sock_sendmsg+0x21c/0x270 [ 126.123062][ T36] ____sys_sendmsg+0x505/0x830 [ 126.127807][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 126.132462][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 126.137392][ T36] do_syscall_64+0xfa/0xfa0 [ 126.141892][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.147771][ T36] [ 126.150078][ T36] Freed by task 7881: [ 126.154058][ T36] kasan_save_track+0x3e/0x80 [ 126.158724][ T36] __kasan_save_free_info+0x46/0x50 [ 126.163908][ T36] __kasan_slab_free+0x5c/0x80 [ 126.168761][ T36] kfree+0x19a/0x6d0 [ 126.172666][ T36] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 126.178902][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.184003][ T36] unregister_netdevice_many_notify+0x1860/0x2390 [ 126.190406][ T36] unregister_netdevice_queue+0x33c/0x380 [ 126.196105][ T36] nsim_destroy+0x1dd/0x670 [ 126.200605][ T36] __nsim_dev_port_del+0x14d/0x1b0 [ 126.205721][ T36] nsim_dev_reload_destroy+0x288/0x490 [ 126.211169][ T36] nsim_dev_reload_down+0x8a/0xc0 [ 126.216189][ T36] devlink_reload+0x1b6/0x8d0 [ 126.220851][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 126.226209][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 126.231738][ T36] genl_rcv_msg+0x60e/0x790 [ 126.236226][ T36] netlink_rcv_skb+0x208/0x470 [ 126.240984][ T36] genl_rcv+0x28/0x40 [ 126.244949][ T36] netlink_unicast+0x82f/0x9e0 [ 126.249702][ T36] netlink_sendmsg+0x805/0xb30 [ 126.254452][ T36] __sock_sendmsg+0x21c/0x270 [ 126.259113][ T36] ____sys_sendmsg+0x505/0x830 [ 126.263856][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 126.268521][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 126.273443][ T36] do_syscall_64+0xfa/0xfa0 [ 126.277929][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.283804][ T36] [ 126.286116][ T36] Last potentially related work creation: [ 126.291811][ T36] kasan_save_stack+0x3e/0x60 [ 126.296472][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 126.301660][ T36] insert_work+0x3d/0x330 [ 126.305988][ T36] __queue_work+0xbaf/0xfb0 [ 126.310478][ T36] queue_work_on+0x181/0x270 [ 126.315059][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 126.320678][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 126.326121][ T36] geneve_offload_rx_ports+0xd7/0x160 [ 126.331473][ T36] geneve_netdevice_event+0x6a/0x80 [ 126.336648][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.341744][ T36] call_netdevice_notifiers+0x88/0xc0 [ 126.347098][ T36] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 126.353242][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.358348][ T36] register_netdevice+0x1608/0x1ae0 [ 126.363614][ T36] nsim_create+0xae8/0xf10 [ 126.368018][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 126.373115][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 126.378217][ T36] nsim_dev_reload_up+0x451/0x780 [ 126.383262][ T36] devlink_reload+0x4ec/0x8d0 [ 126.387928][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 126.393287][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 126.398830][ T36] genl_rcv_msg+0x60e/0x790 [ 126.403368][ T36] netlink_rcv_skb+0x208/0x470 [ 126.408123][ T36] genl_rcv+0x28/0x40 [ 126.412096][ T36] netlink_unicast+0x82f/0x9e0 [ 126.416875][ T36] netlink_sendmsg+0x805/0xb30 [ 126.421657][ T36] __sock_sendmsg+0x21c/0x270 [ 126.426331][ T36] ____sys_sendmsg+0x505/0x830 [ 126.431081][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 126.435738][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 126.440658][ T36] do_syscall_64+0xfa/0xfa0 [ 126.445172][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.451045][ T36] [ 126.453352][ T36] Second to last potentially related work creation: [ 126.459912][ T36] kasan_save_stack+0x3e/0x60 [ 126.464572][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 126.469759][ T36] insert_work+0x3d/0x330 [ 126.474090][ T36] __queue_work+0xcd2/0xfb0 [ 126.478580][ T36] queue_work_on+0x181/0x270 [ 126.483155][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 126.488788][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 126.494404][ T36] vxlan_offload_rx_ports+0x139/0x200 [ 126.499764][ T36] vxlan_netdevice_event+0x111/0x470 [ 126.505031][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.510255][ T36] call_netdevice_notifiers+0x88/0xc0 [ 126.515615][ T36] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 126.521759][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.526859][ T36] register_netdevice+0x1608/0x1ae0 [ 126.532038][ T36] nsim_create+0xae8/0xf10 [ 126.536440][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 126.541529][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 126.546622][ T36] nsim_dev_reload_up+0x451/0x780 [ 126.551634][ T36] devlink_reload+0x4ec/0x8d0 [ 126.556302][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 126.561745][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 126.567279][ T36] genl_rcv_msg+0x60e/0x790 [ 126.571771][ T36] netlink_rcv_skb+0x208/0x470 [ 126.576531][ T36] genl_rcv+0x28/0x40 [ 126.580494][ T36] netlink_unicast+0x82f/0x9e0 [ 126.585266][ T36] netlink_sendmsg+0x805/0xb30 [ 126.590017][ T36] __sock_sendmsg+0x21c/0x270 [ 126.594681][ T36] ____sys_sendmsg+0x505/0x830 [ 126.599426][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 126.604170][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 126.609088][ T36] do_syscall_64+0xfa/0xfa0 [ 126.613572][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.619544][ T36] [ 126.621850][ T36] The buggy address belongs to the object at ffff888032abd200 [ 126.621850][ T36] which belongs to the cache kmalloc-256 of size 256 [ 126.635885][ T36] The buggy address is located 176 bytes inside of [ 126.635885][ T36] freed 256-byte region [ffff888032abd200, ffff888032abd300) [ 126.649667][ T36] [ 126.651976][ T36] The buggy address belongs to the physical page: [ 126.658384][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32abc [ 126.667134][ T36] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 126.675614][ T36] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 126.683588][ T36] page_type: f5(slab) [ 126.687553][ T36] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 126.696120][ T36] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 126.704686][ T36] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 126.713341][ T36] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 126.722008][ T36] head: 00fff00000000001 ffffea0000caaf01 00000000ffffffff 00000000ffffffff [ 126.730667][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 126.739318][ T36] page dumped because: kasan: bad access detected [ 126.745721][ T36] page_owner tracks the page as allocated [ 126.751427][ T36] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 75687440817, free_ts 75648729547 [ 126.772785][ T36] post_alloc_hook+0x240/0x2a0 [ 126.777716][ T36] get_page_from_freelist+0x2365/0x2440 [ 126.783265][ T36] __alloc_frozen_pages_noprof+0x181/0x370 [ 126.789078][ T36] alloc_pages_mpol+0x232/0x4a0 [ 126.793926][ T36] allocate_slab+0x96/0x3a0 [ 126.798426][ T36] ___slab_alloc+0xe94/0x18a0 [ 126.803178][ T36] __slab_alloc+0x65/0x100 [ 126.807582][ T36] __kmalloc_noprof+0x471/0x7f0 [ 126.812413][ T36] fib_create_info+0x172d/0x3210 [ 126.817343][ T36] fib_table_insert+0xc6/0x1b50 [ 126.822190][ T36] fib_magic+0x2c4/0x390 [ 126.826417][ T36] fib_add_ifaddr+0x38d/0x5f0 [ 126.831082][ T36] fib_netdev_event+0x382/0x490 [ 126.835924][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.841028][ T36] __dev_notify_flags+0x18d/0x2e0 [ 126.846130][ T36] netif_change_flags+0xe8/0x1a0 [ 126.851066][ T36] page last free pid 5823 tgid 5823 stack trace: [ 126.857637][ T36] __free_frozen_pages+0xbc4/0xd30 [ 126.862734][ T36] __put_partials+0x146/0x170 [ 126.867400][ T36] put_cpu_partial+0x1f2/0x2e0 [ 126.872153][ T36] __slab_free+0x2b9/0x390 [ 126.876555][ T36] qlist_free_all+0x97/0x140 [ 126.881137][ T36] kasan_quarantine_reduce+0x148/0x160 [ 126.886604][ T36] __kasan_slab_alloc+0x22/0x80 [ 126.891439][ T36] __kmalloc_cache_noprof+0x36f/0x6f0 [ 126.896793][ T36] netdevice_event+0x3a1/0x8a0 [ 126.901545][ T36] notifier_call_chain+0x1b6/0x3e0 [ 126.906644][ T36] netif_set_mac_address+0x37c/0x4c0 [ 126.911927][ T36] do_setlink+0x88c/0x41c0 [ 126.916346][ T36] rtnl_newlink+0x1619/0x1c80 [ 126.921031][ T36] rtnetlink_rcv_msg+0x7cf/0xb70 [ 126.925959][ T36] netlink_rcv_skb+0x208/0x470 [ 126.930717][ T36] netlink_unicast+0x82f/0x9e0 [ 126.935557][ T36] [ 126.937861][ T36] Memory state around the buggy address: [ 126.943473][ T36] ffff888032abd180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.951516][ T36] ffff888032abd200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.959560][ T36] >ffff888032abd280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.967599][ T36] ^ [ 126.973229][ T36] ffff888032abd300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.981274][ T36] ffff888032abd380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.989369][ T36] ================================================================== [ 127.013373][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.020611][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 127.029921][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.039992][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 127.047283][ T36] Call Trace: [ 127.050551][ T36] [ 127.053467][ T36] dump_stack_lvl+0x99/0x250 [ 127.058057][ T36] ? __asan_memcpy+0x40/0x70 [ 127.062631][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.067816][ T36] ? __pfx__printk+0x10/0x10 [ 127.072398][ T36] vpanic+0x237/0x6d0 [ 127.076373][ T36] ? __pfx_vpanic+0x10/0x10 [ 127.080864][ T36] ? preempt_schedule+0xae/0xc0 [ 127.085700][ T36] ? __pfx_preempt_schedule+0x10/0x10 [ 127.091055][ T36] panic+0xb9/0xc0 [ 127.094763][ T36] ? __pfx_panic+0x10/0x10 [ 127.099167][ T36] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 127.105054][ T36] ? __mutex_lock+0x147/0x1350 [ 127.109800][ T36] check_panic_on_warn+0x89/0xb0 [ 127.114721][ T36] ? __mutex_lock+0x147/0x1350 [ 127.119470][ T36] end_report+0x78/0x160 [ 127.123700][ T36] kasan_report+0x129/0x150 [ 127.128189][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 127.134083][ T36] ? __mutex_lock+0x147/0x1350 [ 127.138881][ T36] __mutex_lock+0x147/0x1350 [ 127.143480][ T36] ? __mutex_lock+0x5bb/0x1350 [ 127.148248][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 127.154484][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 127.159495][ T36] ? __lock_acquire+0xab9/0xd20 [ 127.164341][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 127.170416][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 127.176130][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 127.181843][ T36] process_scheduled_works+0xae1/0x17b0 [ 127.187387][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.193373][ T36] worker_thread+0x8a0/0xda0 [ 127.197961][ T36] kthread+0x711/0x8a0 [ 127.202101][ T36] ? __pfx_worker_thread+0x10/0x10 [ 127.207241][ T36] ? __pfx_kthread+0x10/0x10 [ 127.211817][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.217012][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.222283][ T36] ? __pfx_kthread+0x10/0x10 [ 127.226888][ T36] ret_from_fork+0x4bc/0x870 [ 127.231471][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 127.236580][ T36] ? __switch_to_asm+0x39/0x70 [ 127.241330][ T36] ? __switch_to_asm+0x33/0x70 [ 127.246081][ T36] ? __pfx_kthread+0x10/0x10 [ 127.250660][ T36] ret_from_fork_asm+0x1a/0x30 [ 127.255675][ T36] [ 127.258957][ T36] Kernel Offset: disabled [ 127.263283][ T36] Rebooting in 86400 seconds..