last executing test programs: 3.417593294s ago: executing program 2 (id=2173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004240)=@delchain={0x1f98, 0x65, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0x8}, {0xb, 0x3}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x1128, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_POLICE={0x60, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x5, 0x2, 0x9, {0xb, 0x2, 0x4, 0x7, 0x800, 0x7}, {0x1, 0x1, 0x391, 0x89}, 0x101, 0x9, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x0, 0x5, 0x8, 0x82f, 0xe, 0x3, 0x4, 0x3, 0x4, 0x4, 0x3, 0x7ca4, 0x63, 0x0, 0x3, 0x8, 0xf8d, 0xfcf, 0x7, 0x3ff, 0xc, 0x648, 0x7e, 0x1, 0x400, 0xa99, 0x9, 0x1, 0x3, 0xffff, 0x800, 0x3, 0x3, 0x4, 0xbec, 0x2, 0x9, 0x6, 0x54, 0x3, 0x1, 0x0, 0x4, 0xfffffffe, 0x3, 0xffffffff, 0x3, 0x7, 0xd0, 0x6, 0xfffffffb, 0x0, 0x5, 0x1ff, 0x7, 0x1, 0x6, 0x6, 0x5f, 0x9, 0xffffff7f, 0x8000, 0x90, 0xffffffff, 0x2bc7, 0x1, 0x800, 0xffff, 0x0, 0x3, 0x49bb, 0xb9e4, 0x80000000, 0x71dc, 0x1, 0x5, 0x0, 0x5, 0x3, 0x83d, 0x79ee, 0xa000, 0x9, 0x3, 0x5, 0x6, 0x7, 0x6, 0xfffffff3, 0x4, 0x9, 0x8000, 0x2, 0x2, 0x3f, 0x8, 0x80, 0x8, 0xb, 0x4, 0x3, 0x4, 0x4d6, 0x7, 0x0, 0xa3a7, 0xc78d, 0xffff0000, 0x1, 0x6, 0x7, 0x4, 0x1, 0x1000, 0x4, 0x2, 0x5, 0x2, 0x10001, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x200, 0x34, 0x2500000, 0x2, 0x0, 0x7, 0xf2, 0x80000000, 0x2, 0x8, 0x401, 0xf8f3, 0xfffffffc, 0xfffffffb, 0x8d3, 0x5, 0x5, 0x1, 0xffff0000, 0xe07, 0x3, 0x401, 0x7e, 0x3, 0x3ff, 0x101, 0x9, 0x9, 0x4d, 0x7, 0x2, 0x3ff, 0xfffffffd, 0x2, 0x5, 0x1, 0x5, 0x3839, 0x80, 0x41, 0x890, 0x1, 0x9, 0xa783, 0x9, 0x80000000, 0x3, 0x81, 0x8, 0x80000000, 0x1, 0x0, 0x0, 0x6, 0x6, 0x2b9d, 0xe, 0x7fffffff, 0x3, 0x100, 0xdb7, 0x8, 0x7, 0x8, 0x401, 0x6, 0x4, 0xfffffffa, 0x22, 0x8, 0x0, 0x100, 0x5a, 0x1, 0x2f, 0x4, 0x3, 0x0, 0xfffffffa, 0x7, 0x3, 0xffffff14, 0x7, 0xb3, 0x40, 0xfff, 0x2, 0x8000, 0x429, 0xc07, 0x8, 0x10000, 0x0, 0x0, 0x8, 0x7, 0x9, 0x40, 0xffff, 0x1, 0x8, 0x8858, 0x5, 0x1, 0x0, 0x85, 0xd969, 0x80, 0x3, 0x11, 0x9, 0xfff, 0x6, 0x10001, 0x9, 0x80000000, 0x40, 0x4, 0x9, 0x8, 0x1ff, 0xd12, 0x80, 0x40, 0x0, 0x3, 0xff, 0x7569, 0xae2, 0x6f1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x10}}, @TCA_FW_POLICE={0xc74, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0xc, 0x40, 0x6, 0x9fb, 0xffff8001, 0xd, 0xed, 0x2, 0xf, 0xd, 0x1, 0x7600000, 0x5, 0x0, 0x6, 0xc, 0x2, 0x3, 0x4, 0x0, 0x1, 0x4, 0x1, 0x8, 0x2, 0x100, 0x200, 0x1000, 0x100, 0x3, 0x7fff, 0x1000005, 0x7, 0x0, 0xffff, 0xe, 0xfff, 0xd, 0x0, 0xf, 0xb, 0x3, 0x91d, 0xfffffffd, 0x8, 0x3, 0x1, 0x5, 0x4, 0xffff, 0x4, 0xe9eb, 0x7, 0x0, 0x57, 0x658, 0x5, 0x1, 0xfffffffc, 0x6, 0x552, 0x45, 0x3, 0x8, 0x2, 0x1000, 0x6, 0x70c8f1ad, 0x7, 0x0, 0x3, 0xded5, 0x5, 0x5, 0x8, 0x10000, 0x1, 0x2, 0xab, 0x7fffffff, 0x5b0, 0x3, 0x7, 0x0, 0xfff, 0x200, 0x1, 0x6, 0xb6, 0x3, 0x200, 0xf310, 0x10000, 0x9, 0x0, 0x4, 0xa0, 0x3, 0x7, 0xf, 0x9, 0x3, 0x4, 0x5, 0x7, 0x7, 0x1, 0x6, 0x2, 0x4, 0x10001, 0x6, 0x0, 0xffffffff, 0x100, 0x6db05279, 0x2, 0x1, 0x8, 0x2, 0xa000, 0x73, 0x4, 0xd966, 0x1af3, 0x9, 0x1, 0x40, 0x7, 0x3, 0x0, 0x3, 0x10001, 0x5, 0x0, 0x5, 0x986e, 0x4, 0x1, 0x7, 0x3, 0x5, 0x504, 0x1ff, 0x1, 0xffffffe4, 0x2, 0x5, 0xeeee, 0x6, 0x6, 0x9, 0x1ff, 0x6, 0x0, 0x6, 0x5, 0xc, 0x0, 0x5, 0x5758, 0x14000000, 0x1, 0x2db, 0x2, 0x3, 0x7, 0x9, 0x400, 0xffffff81, 0x5, 0x7, 0x7ed6, 0x80, 0xbe, 0x1, 0x435, 0x7fff, 0x2, 0x4, 0x1, 0x8, 0x9, 0xffffff00, 0x7, 0x81e1, 0x6, 0xd, 0x9, 0x1, 0x2, 0x6, 0x2, 0x1, 0x2, 0xfffffffa, 0xe, 0x10, 0x2, 0x3, 0x2, 0x0, 0x5, 0x7, 0x0, 0x660c88de, 0xc, 0xe5, 0x6, 0x7f, 0x8, 0x81, 0x2, 0x0, 0x1, 0x8, 0x4, 0x7dcb, 0x2, 0x7, 0x3, 0x0, 0x8, 0x8, 0x8, 0x5, 0xe01f, 0x100, 0xb, 0x5, 0x8000, 0x8, 0x7, 0x9, 0x3ff, 0x0, 0x9, 0x400, 0x6, 0x100, 0x8d, 0x9, 0x1, 0x5, 0x80, 0xa4, 0x9, 0x5, 0x400, 0x1, 0x1, 0xc469, 0x20, 0xffffffff, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0xfffffffa, 0x9, 0x3, {0x9, 0x1, 0x491, 0x2, 0x3, 0x4}, {0x22, 0x1, 0x9, 0x6706, 0x8000, 0x5}, 0x7, 0x6, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x9, 0xffff, 0x7, 0x8000, 0xfffff302, 0x7, 0x4, 0x8000, 0x123, 0x1, 0x1, 0x8001, 0x9, 0xffffffff, 0x6, 0x205, 0x7fffffff, 0x7, 0xfffffffa, 0x1a, 0x1, 0x6, 0x400, 0xfffffff9, 0x4, 0x6, 0x8, 0x200000, 0x7fffffff, 0x109, 0x2, 0x0, 0x1, 0x1, 0x9, 0x4, 0x6, 0x1, 0xb, 0x9, 0x4b, 0x400, 0x5, 0xf, 0x1, 0x5, 0x80000001, 0x5, 0x85d3, 0x8, 0x2, 0x4, 0x7, 0xffff, 0x6, 0x40, 0xfffffffb, 0x1, 0x7, 0xe6, 0x55, 0x80000, 0x1000, 0x5, 0xbb6b, 0x3, 0x5, 0x7fff, 0x27, 0xfffffffe, 0x1d7, 0xfffffffb, 0x4, 0x2, 0xfffff606, 0x40000000, 0x4, 0x5, 0x9, 0x1, 0x1, 0x6, 0x4, 0xe6c, 0x400, 0x4, 0xaaa1, 0x7, 0xd5, 0x792, 0xffffffff, 0xa, 0xbfa, 0x9, 0x1, 0x5, 0x1ff, 0x2e, 0x8, 0x33f, 0x40, 0x72a9a57f, 0x3, 0x2e7, 0x2, 0x8001, 0xb260, 0x12, 0xffff, 0x6, 0xffffffff, 0x1000, 0x3ff80000, 0x7, 0x8, 0x4, 0x677, 0x8, 0xffffffff, 0x7, 0x3, 0x40, 0x0, 0x2, 0x9, 0x4, 0x1, 0x3, 0x0, 0x2, 0x3, 0x52d0, 0xfffffffc, 0x30, 0x8, 0xa3, 0xf, 0xb11, 0xffff, 0x98cb, 0x4, 0x5b, 0x80, 0x1, 0x8, 0xfffffff9, 0x8001, 0xfffffff8, 0x1, 0x3, 0x41a6, 0x400, 0x8000, 0x9, 0x0, 0x0, 0x9, 0x3, 0x9, 0x9, 0xfffffff9, 0x101, 0xff, 0x1, 0xfffffe00, 0x4, 0x9, 0x1000, 0x400, 0x200, 0x4, 0xb, 0x6, 0xa, 0x2, 0x1000, 0xfff, 0x2, 0x0, 0x100, 0xea, 0xf4, 0x5, 0x2, 0x0, 0x4, 0x1a2, 0x2, 0x7, 0xfffffff7, 0x5, 0x1, 0x2, 0x88b, 0x8, 0x5, 0x3b, 0x1ff, 0x80000001, 0xd2af, 0x6, 0x5, 0xfffffffd, 0x8001, 0x7, 0x3, 0xacb4, 0xffffff7f, 0x8, 0xffffffff, 0x8, 0x8, 0x5, 0x1bcb, 0x8, 0x8000, 0x1, 0xe2, 0x955, 0x6, 0x9, 0xd39d, 0x6d3b, 0x1, 0x7, 0x1, 0xc5a, 0x7e, 0xf, 0x8, 0x4, 0x7fffffff, 0x9, 0x8, 0x7fffffff, 0x1, 0x9, 0x80, 0x6, 0x2, 0x400, 0x1, 0x3, 0x1, 0xfffffffc, 0x40, 0x2, 0x6e3, 0x10001, 0xfffffffb, 0x1, 0xfffffc00, 0x283b, 0x7, 0xb2d]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10000, 0x8, 0x3, 0x5, 0x0, 0x7, 0x5, 0xb, 0x7, 0x6, 0x8, 0x8fca, 0x1, 0x4, 0x3, 0x80000000, 0x9, 0x2, 0x3, 0x9382, 0x7, 0x4, 0x800, 0x84, 0xc1, 0x2, 0x6, 0x4, 0x2, 0x80000000, 0x1000, 0x7f36, 0xafcf, 0x9, 0x8, 0x8, 0xb, 0x3, 0x54, 0x3, 0x1, 0x5, 0x44b0, 0x2, 0x0, 0x1e, 0x9759, 0x3ff, 0x100, 0xba9d, 0x8, 0x0, 0x210dac5d, 0x9, 0xfffffff4, 0x0, 0x1, 0x81, 0x223, 0x5, 0x8000, 0x80000001, 0x5, 0x800, 0x9, 0xbcd, 0x81, 0x1, 0x6, 0xa, 0x101, 0xf, 0x47b9, 0x1, 0xff, 0x1, 0x101, 0x2, 0x2, 0x3, 0xffffffff, 0x5, 0x7, 0x2, 0x258, 0x7fff, 0xe, 0x8ad, 0x8001, 0x7, 0x8d3e, 0x1, 0x38, 0xfff, 0xf, 0xffffa71c, 0x7, 0xffffffff, 0x8, 0x8001, 0x9, 0x8000, 0x6, 0x80000000, 0x3, 0x773f3c27, 0x9, 0x1, 0xe70, 0xa4, 0x3, 0xeeb, 0x10001, 0x6255, 0x6, 0x3, 0x4, 0x10, 0x8000000, 0xd, 0xb, 0x28a, 0x9, 0x7ff, 0x1000, 0xfffffffd, 0x3, 0x9, 0x2, 0x2, 0x1, 0x3, 0x7, 0x9, 0x3, 0x10000, 0x9419, 0x4, 0xfffffff9, 0x7, 0x7, 0x0, 0x6, 0x0, 0x6, 0x4, 0x592, 0x1, 0x80000000, 0x9546, 0x8, 0xaa, 0xc, 0x4, 0x8, 0x3ff, 0xcc8, 0x2, 0x3, 0x7, 0x9, 0x3, 0x9, 0xf3, 0xf, 0x80000, 0x4, 0xf, 0x5, 0x6, 0x5, 0xffffffff, 0x6, 0x8001, 0xfffffffd, 0xfffffe01, 0x4, 0xa, 0x4, 0x81, 0x400, 0x8, 0x6, 0x9, 0x10001, 0x853c, 0x7ff, 0x3ff, 0x6, 0x3, 0x8, 0x8, 0x7f, 0xd87, 0x3, 0x0, 0xff, 0x80000001, 0x6, 0xe95, 0x7fff, 0x38, 0xd, 0x1, 0x2f, 0x800, 0xe4, 0x76, 0x6, 0x100, 0x6, 0x5, 0x6, 0x0, 0x6, 0xf2, 0x5f6c, 0x7815, 0xff, 0x401, 0x9, 0x1, 0x8, 0x9, 0x200, 0x6, 0xc, 0xb, 0x5, 0x3, 0xb, 0x9, 0x9, 0x7, 0xb39, 0xd0, 0xda27, 0x7, 0x9, 0x8, 0x3, 0x9, 0x4, 0x4ec, 0x6, 0x0, 0x6, 0xf90, 0x2fe, 0x41, 0x1, 0x100000, 0x4, 0x0, 0x8]}]}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xb8, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_OPTS={0x74, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe4c}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1a}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x978}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff000000, 0xffffff00]}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}, @filter_kind_options=@f_flow={{0x9}, {0xd4c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xffffff59}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xa}}, @TCA_FLOW_POLICE={0x434, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x5, 0xff, 0x1, 0x2, 0x0, 0x64fc6d4f, 0x10001, 0x7, 0x1c0, 0x2, 0x2, 0xefd, 0x2, 0x7, 0x5, 0x81, 0x6, 0x4, 0x5, 0x4, 0x1, 0x1000, 0x1, 0x9, 0x5, 0xfffff4f0, 0x63, 0x3, 0x3, 0x4, 0x100, 0x7f, 0xfff, 0x0, 0x57f8, 0x6, 0x81, 0x4, 0x9c, 0xfffffff8, 0x8000, 0x3, 0x5, 0x80000001, 0x0, 0x0, 0x7, 0x5, 0xe, 0x618, 0x0, 0x401, 0x4, 0x0, 0x7ff, 0x2, 0x3, 0x8001, 0x5, 0x3, 0x9, 0x4ae68758, 0x3, 0x1ff, 0x8001, 0x0, 0x3, 0x0, 0x8, 0x2, 0x2, 0x0, 0x63f2cd57, 0x10000, 0x3, 0xff, 0x6, 0x56ed, 0x6, 0x10001, 0x58b6892e, 0x5, 0xed3c, 0x9, 0xd, 0x8001, 0x81, 0xf, 0xd, 0x1, 0xaae, 0x9, 0xa, 0x9, 0x7, 0xa5, 0x40, 0x7, 0x200, 0x7, 0x9, 0x3, 0x7ff, 0x5, 0x8, 0x0, 0x6, 0x1, 0x7, 0x9, 0x2, 0x66f539a8, 0x2b03, 0x8, 0x5, 0xe03, 0x7fffffff, 0xd8, 0x3ff, 0x3, 0x3, 0x7, 0x9cf, 0x3, 0x7, 0x6, 0x4, 0x8, 0x400, 0x8, 0x71, 0x9, 0x3, 0x5, 0xf, 0x40, 0x80000001, 0x2, 0x3, 0x8809, 0x8, 0x9, 0x4, 0x9, 0x8111, 0x3, 0x1, 0x5146dd15, 0xfffff7ac, 0x1, 0x9, 0x8, 0x0, 0x5, 0x8, 0x4, 0x1, 0x7b, 0x1, 0x6, 0x3, 0x2, 0xd, 0xa, 0x4bf, 0x40, 0x9, 0x4, 0x714, 0x100, 0x7, 0xf8, 0xe2b, 0x6ff, 0x3, 0x6, 0x76a, 0x7, 0x4, 0x0, 0x7fff, 0x3, 0x8, 0xfff, 0x8001, 0x6, 0x4, 0x8000, 0x0, 0x4, 0x7, 0x10001, 0xaa, 0x8, 0x9, 0x0, 0x9, 0x2, 0x7, 0x9, 0x1ff, 0x7, 0x8000, 0x8, 0x80000000, 0x4, 0x100, 0x1, 0x1, 0x6, 0x9, 0xf, 0xffff7fff, 0xfffffff8, 0x400, 0x3, 0x0, 0x7, 0x5, 0x1000, 0x7ff, 0x950, 0x5, 0x1, 0x2, 0x6, 0x321, 0x5, 0x5, 0x10000, 0x3, 0x9, 0x5, 0xfffffff7, 0x804, 0x7fff, 0x4, 0x456, 0x6, 0x6, 0xad, 0xbf, 0x1, 0x7, 0x4, 0x7, 0xe67, 0x4, 0x6, 0x80, 0x1, 0x2, 0x40, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_FLOW_POLICE={0x41c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xaba, 0xfffffffe, 0x5b7, 0x7, 0x8, 0x2, 0x2, 0x9, 0x1, 0x7, 0x4, 0x4, 0x5, 0xcf, 0x9, 0x1ff, 0x1, 0xf, 0x40, 0x100000, 0x5, 0x9d, 0x8000, 0x2000000, 0x7ff, 0x8, 0x80000000, 0x2, 0x1, 0x8001, 0x4, 0x3, 0x1, 0x5, 0x8, 0x401, 0x7d45, 0x1, 0x0, 0x3, 0x8360, 0x6, 0xfffffffc, 0x7, 0x0, 0x9, 0xfc03, 0x8, 0x10001, 0xffffffff, 0x4, 0x1, 0x1, 0x1, 0x401, 0x5, 0xf, 0x1, 0x8, 0x8, 0x4, 0x1, 0x3, 0x8, 0x4, 0xf, 0x5, 0x9, 0x1, 0x3ff, 0x6, 0x80000000, 0x2, 0x1ff, 0x2, 0x6, 0x9, 0x2, 0x5, 0xfffffffc, 0x7fffffff, 0x2, 0xfffffffe, 0x1, 0x972, 0x7, 0x2, 0x3, 0x4, 0x1, 0xffffffc0, 0x2, 0x8, 0x1, 0x30c5, 0x2255, 0x2, 0x7, 0x8, 0x1, 0x18, 0x7, 0x200, 0x6, 0x6, 0x20000000, 0x7fff, 0x7, 0x2, 0x7af, 0x8, 0x10, 0x6, 0x82, 0x7, 0xd081, 0x5, 0x9, 0x7, 0xd3, 0x8, 0x0, 0xf1, 0x5, 0x9, 0x7, 0xd0fd, 0x3, 0xfffffff8, 0x9, 0x1, 0xb02, 0xfffffffc, 0x8, 0xdf, 0x5, 0xfffffffb, 0x7ff, 0x200, 0x48, 0x8, 0x1, 0x9, 0x0, 0xfffffffc, 0x9, 0x6, 0x55cd, 0x2, 0xbadf, 0x3, 0x1, 0x4, 0x100, 0x6, 0x6, 0x2, 0x4f8bcf0c, 0x2, 0xff, 0x5, 0x7, 0x40, 0x70, 0x4, 0x82, 0x4, 0x3, 0xc91, 0x9, 0x7, 0xfff, 0x9, 0x5b5, 0x80000000, 0x9, 0x4, 0x7, 0x800, 0xfffffff3, 0x7, 0x5, 0x0, 0x3ff, 0x0, 0x4, 0xa9cc, 0x2, 0xe, 0x4, 0x2, 0x1ff, 0x9e3, 0x92, 0x9, 0x3, 0x5, 0x200, 0x3, 0x401, 0x8, 0x0, 0x6, 0x9, 0xaae, 0x0, 0x4, 0xfff, 0x7, 0xf610, 0x4, 0x7, 0x4, 0x9, 0x3efb, 0x7, 0x1, 0xffffffff, 0x3, 0xe8dc, 0x401, 0x7f, 0x3, 0x200, 0x16ac, 0xffffffff, 0x8, 0x8, 0x9, 0x40, 0x4, 0x0, 0x7, 0x6, 0x7, 0x2, 0x8, 0x4, 0x3, 0x8, 0xe05, 0x4, 0x6, 0x1c0f, 0x1, 0x1000, 0xf, 0x0, 0x3, 0x1, 0x5, 0x8000, 0x5, 0x4, 0x81]}]}, @TCA_FLOW_POLICE={0x4d8, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2e, 0xa, 0xfffffffb, 0x2, 0x7, 0x73f7, 0x7, 0x5d, 0x6, 0x4, 0x2, 0x3, 0x4, 0xfffffffa, 0x5, 0x80, 0x3, 0x4500, 0x0, 0x1, 0x2, 0x4, 0x2, 0x9, 0x10, 0x1e9cca1a, 0x7fff, 0x7, 0x10000, 0x3, 0xe4c2, 0x4, 0x40, 0x0, 0x3, 0x7, 0x4, 0x8, 0xfffffff8, 0x800, 0x5, 0x5ac4, 0xffff, 0xe, 0xfa6, 0x5, 0x2, 0x8, 0x3, 0xfffffffe, 0x5, 0x93b, 0x7, 0x3, 0x7, 0x80000000, 0x7, 0xfffffffb, 0x8, 0x81, 0x6, 0x4, 0x1, 0x8, 0x2, 0x0, 0x8, 0x0, 0x5, 0x4, 0x298, 0xe, 0x8, 0xe62a, 0x10, 0x5, 0x6, 0x8, 0x6, 0x1, 0xe, 0x10000, 0x400, 0x1ff, 0x1e, 0x7, 0x0, 0x7, 0x4d2c, 0xff, 0xfff, 0xc, 0xd8c2, 0x9, 0x6, 0x400, 0x7, 0x10, 0x2, 0x101, 0x0, 0x100, 0x1, 0xa, 0x41a41e60, 0x1, 0x6, 0x1, 0x2, 0x3, 0x17, 0x7, 0x6, 0xfffffffe, 0x4, 0x7, 0x8, 0x5, 0x3, 0x5, 0x40, 0x400, 0x8, 0x9, 0x2, 0x0, 0x2c2, 0xd88, 0x7, 0x4, 0x0, 0x8, 0x8, 0x80000000, 0x3ff, 0x809, 0x0, 0x4, 0x3, 0x2, 0x5, 0x1, 0x7, 0x1, 0xa1cf, 0x4, 0x400, 0xfd, 0x5, 0x8, 0xfffffbff, 0xffffabcf, 0x20, 0xb, 0x1, 0x4, 0x80, 0xc6, 0x210, 0x4, 0x0, 0x2, 0x6, 0x100, 0x5, 0x3ff, 0x6, 0x7, 0x600000, 0x5, 0xd75, 0x9, 0x4, 0x2, 0x4, 0x1ff, 0x200, 0x9, 0xfffffffd, 0x401, 0x3ff, 0x2, 0x9, 0x7ff, 0x3, 0x90f, 0xb163, 0x1, 0xffff0, 0x1c00000, 0x664c6839, 0x7, 0xb0, 0xc, 0xa, 0xaea, 0x2, 0xffffe7ee, 0xf8, 0x1, 0x0, 0x3, 0x1, 0xb280, 0x3, 0x0, 0x1, 0xbac, 0x9, 0x7, 0x1, 0x8, 0x177b9849, 0x1, 0xff, 0x6, 0xd, 0x9, 0xfffffffe, 0x8, 0x7ff, 0xcc, 0x4, 0x6, 0x4, 0x9, 0x3, 0x9, 0x10001, 0x6, 0x6, 0xfffffff1, 0x2, 0x7fff, 0x8, 0x7f, 0x3, 0x80, 0xed5b, 0x2, 0x3927, 0x5, 0x66, 0x8, 0x10001, 0x8, 0x7b7, 0x0, 0x2, 0x0, 0x80000000, 0xb, 0x1c03, 0x1, 0x6, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xe43f, 0x0, 0x7454, {0x2, 0x1, 0x9, 0x1, 0x8, 0xffffffff}, {0x6, 0x0, 0x8, 0x8001, 0x7, 0x7c}, 0x4, 0x5, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x9, 0x16b3c6a0, 0x2, {0xc0, 0x1, 0x1, 0x2, 0xc, 0x8}, {0x80, 0x0, 0xd, 0xb2, 0x9ae1, 0xfe}, 0x80000001, 0x0, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x7, 0x9, {0x2, 0x1, 0x5, 0x400, 0x3}, {0x4, 0x2, 0xb, 0x3, 0x800, 0x19}, 0x67ab817d, 0x5, 0x8}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5dae}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x80, 0xc}}, @TCA_RATE={0x6, 0x5, {0xed, 0x5}}]}, 0x1f98}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.283375506s ago: executing program 3 (id=2174): unshare(0x8040480) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c084016) (async) sendto$inet(r1, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae", 0x1b0, 0x805, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0, 0x12}], 0x4}, 0x2}], 0x2, 0x22, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8841}}], 0x1, 0x4000040) 3.241100223s ago: executing program 2 (id=2177): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={@remote, @mcast2, @mcast1, 0x1, 0x8a, 0x9, 0x100, 0x4, 0xa34c71bf67fe310d, r2}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200028bd7000fddbdf251b0000000c000600000000000000000008000300", @ANYRES32=r8, @ANYBLOB="10002e800c0004000202aaaaaaaaaaaa10002e800c0004000203aaaaaaaaaaaa08000300", @ANYRES32=0x0, @ANYBLOB="10002e800c0004000202aaaaaaaa0000007326cf1233e4af68387dbd87e2b07c5f275993931c7295c34231c18b6558ec5537a2e10240f1b5e024a315eb3c4785dca0a71a98e7f86a6b3e6e9ad9b36669ce7f199d255adb47aa54373d237c58f7fd"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40094) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0}}], 0x1, 0x4880) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) connect$can_bcm(r11, &(0x7f0000001ff0)={0x1d, r12}, 0x10) (async) sendmsg$can_raw(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40"], 0xdc}}, 0x4000000) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf251e00000008000300", @ANYRES32=0x0, @ANYBLOB="08030000", @ANYRES32=0x0, @ANYBLOB="1c002f800c0002000200aaaaaaaaaaaa0c000380080004008d00000008000300", @ANYRES32=r9, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000891}, 0x200040d4) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 2.81560386s ago: executing program 2 (id=2181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100253d7000ffdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000c000300060000000400040008000600", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4004009}, 0x40000) 2.59104599s ago: executing program 2 (id=2186): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile={0xb, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x5f, 0x0, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000440)=""/62, 0x2e, 0x3e, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, r3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) (async) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000040), 0x2) (async) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000040), 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.558262921s ago: executing program 1 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x2000000, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, &(0x7f00000001c0)="65cf0aff", 0x0, 0x4, 0x0, 0x400}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x2000000, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, &(0x7f00000001c0)="65cf0aff", 0x0, 0x4, 0x0, 0x400}, 0x50) (async) 2.419644513s ago: executing program 2 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x11, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) 2.405304496s ago: executing program 3 (id=2191): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@ld, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x7000000}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x25}, 0x94) r1 = socket(0x22, 0x2, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40488c2}, 0x40818) 2.359155639s ago: executing program 1 (id=2192): r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13c, 0x13c, 0x4, [@struct={0x10, 0x7, 0x0, 0x4, 0x1, 0x7, [{0xe, 0x3, 0x5}, {0x0, 0x1, 0x81}, {0x10, 0x3, 0x9}, {0x1, 0x3, 0x80}, {0xc, 0x4, 0x81}, {0xb}, {0x3, 0x3, 0x9}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0x2, 0x2}, {0xf, 0x3}, {0x9, 0x1}, {0x1, 0x5}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @struct={0x2, 0x7, 0x0, 0x4, 0x1, 0x5, [{0x10, 0x3, 0x10}, {0x0, 0x0, 0xfffffffc}, {0x9, 0x4, 0xf39e}, {0x2, 0x0, 0x9c0}, {0xa, 0x4, 0xeb1}, {0xa, 0x5, 0x7}, {0xd, 0x1, 0x9}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @fwd={0x5}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/152, 0x158, 0x98, 0x0, 0x3}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000370402000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83040500000000004c0012800e00010069703667726574617000000038000280060002000200000006000f00050000000600bf0e81fe1145abea0700ff0200000000000000000000000000010700000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) 2.312251983s ago: executing program 4 (id=2193): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x9) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r12) sendmsg$NFC_CMD_ENABLE_SE(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, r13, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000240)={r11}, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="e92bcfae2aabd62b769b1e1cf28e165165dfccd73efe7c33217c84b382a7d569c69f60f2ff367264ed34d7e4749a67034173c255e87a6e0beaa466dbccccceedf4b4fb0d596eb46b9eb2e13cd5f16d0d948dfc706e18ab7717e3349d3e91b2dcee0c", 0x62}, {&(0x7f0000000240)="0628c42faafb80b7c5feea5d6981359aff3d720360a8b53cda411880fa76bdf4d1bece027c19847a0df149124915b6072c13b25b9093cd526a8c0df5f1f7d195860aea7cdbaf6e184ae48202a88be5da0158a064776a3a9a2d49f918e8d4101fe941c915e1402f5d2d4a9be11dd77cd1061a355cded7006ed18c884fc4b9625c51d0d78cc2e69b42d0dd0dc124e657c65d921cff98e419855e48affdf963eae2d23bd1ee7bbd59e7a1cfbd3270e6b3a9804608483fd8ff2be1e84ecbcc12932c9d02c70b1130dc3a44462ceb012b", 0xce}, {&(0x7f0000000380)="056aff50b64accbe0d4a31b2899bbae573107dfa1a7556ff80df27855cde39b5208084968b89ae3ba7c0dad807b38cd77dcf68b396fa53dbc09a626eae99de4a456e4afb9e2a53066cb543f961ba39c184a9d86bb074af7a422ae877fd7cf7ec2780d7245e6bd6209488b9e5fac974482cd4f3dc176d642f896b1a7683a38b1074a3ea6d7e6f3fb129e7166654c5576bd6", 0x91}], 0x3, &(0x7f0000000440)=[@ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x3, 0x6a}, @cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "e2ce"}]}, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x38}}, {@multicast2, 0x7}, {@loopback}, {@empty, 0xfffff001}]}]}}}], 0x48}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r14, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xff}]}}]}, 0x48}}, 0x0) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r15, 0x6, 0x21, 0x0, &(0x7f0000000100)) 2.294763295s ago: executing program 2 (id=2194): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) socket(0x10, 0x2, 0x0) unshare(0x28000600) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) unshare(0x3c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005002900050000000500000401000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x20, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r3, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 2.241818882s ago: executing program 3 (id=2195): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x80) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x280, 0x7, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x80, 0x7, 0x1, 0x0, "bbabb2dc0b47f40945f4c9b5e1da4a1363332fe58f6a3daf2235b31f5882c98c70d21df0a9e5752b1393f568e2ecac37081058c0f17c1ad769de3d5ce4b99f42ee0beaa0b4d7509485df354f3e787f4450c37fa08d7cc35cb0475d5a39fb752ffdc116d1809144ab2710cf51411a68ab44df92058b569bfb6432c633"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x21}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x20040800}, 0x3400c895) 2.164300054s ago: executing program 1 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 2.103608854s ago: executing program 4 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) unshare(0x22020400) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0xb5, &(0x7f0000000000)=0x40000, 0x4) r2 = socket(0x1e, 0x1, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x705b, 0x8, 0x8, 0x3, 0x3}) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x2202}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0400000000000000200112800b0001006272696467650000100002800c002e000300000003000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2.037336044s ago: executing program 3 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240401006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008230000080007000000c000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000000007c61eb9cd9b74ef"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1.913098518s ago: executing program 1 (id=2200): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, 0x3, 0x1}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000014) write$tun(0xffffffffffffffff, 0x0, 0x3e) socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r5, 0x84, 0x6, &(0x7f00000003c0)="020003000980ffff9d58e75e1dd72724018a09b43e120220c5a3bdefe4ca47711d46b8bc0c248d460745ea32836f11194d8c10a82f4424e3158446ecbf77eb5bb837959b0ececa5e2322f08cd0d546fe4d3e183af94dccc44a2a5e5672c8bffb2a46f27aab939148f06f4530e93350a73aa3b1b695238e85783f6ad2242663e43109e4a5cd609fee5ab5c651ec9491a20dff4004947d1e2cd7e5303b3f8c6170321ae41eb0b8ba54cdc15c74a2125ce8453a57a9ef1fd927e547", 0xba) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000040001901feffffff00000000017c00000c004280080009008f3492280c00098006000600800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r10, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) (async) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1.905706641s ago: executing program 4 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) connect$ax25(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) 1.696143297s ago: executing program 1 (id=2203): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) accept(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}, 0x2404c140) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000040)=@udp=r8, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1.620304675s ago: executing program 4 (id=2204): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000006c0)={{}, "ffc404ae3ec8a8c9ac054efa5086b1632448eb6b446b50e2162cce0f188569922cc620a201180f566e609024264727dfd27da50d5ca04a1de98ce6794ac5a79b005634c7521285f0e3b5707b7e392c003e6387ead20916979521a84042f8d174bc081fede9069844ffa2527c52d801771a395034b9d851495b158c78414170de450c8dfc1ccaa97abf1ae422ed7578b29c6bdf597a55bb3356ffea3d409c6c7dbe5aff95bfd8b81259ad5e74035cfde87c9984b3223fa2f0d301ae3a140ea293e128ac5e3bf069a5de3983605b10216cec685eb31d25f7f68a93ed967e5ec3687bfedb81ecca682a1d6f0f070a2400ccb0a9c51035c00b2df50af0451a22a4414bb8b74e3b08b9b8f50f22c1235e812b5ca3022bc38708f2f9f09d23eb8f50871fd52cd7021ffdc2e47f297e94fb5d760278871fae2cd62aa2d02c8f2dd710a4c4fd408cc4a2ef0455ac071681844f3e72ad8c17d377bcfb119fcd27b5eb390679f5f5b856746ddba8533d8a3c659b40ff3855c3d7642a2e6a4bd6b4f00f952be12eea451589ae2dfce3bd84b4370e365bce56dc532cb5a7c1ac28553163366a2cc8a0e7de88ef42d80d041bab6988219c13efe6259e9a7cbc21ba1a1ead7cad7dbd3b7d29884b5b1a14606a4562712af5895453d3ff880ee5982dfd8d581f00cbd59ad245acd3f2480b5e6403913671faefc2034d0ac3e2498bc82b095c07bb186cbfffa703aa7b15f951ba986a0d014da20ef800626b83fea7be5ee99f6aaf5cfa5a8a2a29574a5aef6b508f9c23320f33eb00c933df5777ea1b335bb1062dc1b22088976c2ca04a3fe7b54f53928f51b3824cec172b681800b38fece6384e03775ccbe07c4168005f9a1ead664f5d4e64613923a757830876625510a5f7c80620db57dbe6bb988efa70fdfb17ef68a8863c46e65fa698bae35d084a5bd30f8d9096a9efd91c985d3228a78e5e6375cdb4b373f0f41f8464814e47147cdd4529bb00d9edbee2991f0f9d0df3202596e7cdf2f4567bd2a771a68da1acb641b7368386711d7d794728c9ba1a73050bbc6bab2f142800df2af233499e01700ff5cbf98581dc051c1c8fa700cb88064484549c20e23f49f37e7cc33366c93afeee29f90049e8690849bc8208196f0b0c5718bbad78af2220e1dd4886e9ae53059f31eab5d7cb325efcc786f126585b7eb7d686c25648a29a22ab3b8401d8f394dd470801be55a5d021783ac1d6ed6d1294f105a21f52e86e3b599e8385adfeee6e337b3b6359206a3c0332f4f7516d1cfa408d3f8a83b1115e69ba899dd40bbcb466e91300e8d564fc44c1f9de8c999a45bd1aa86921abd42e382a59dd92c864dc6bc36c09e75dd0c8d7a10b8aacafbcdd7e7f7fd73e17ec4ce5f6c38d1d894b06c4d113087d05a9ce8b2e2a41d9bbec9d868c60da9dd3243bf4501eec7eaa7037840c920d9d1742b737f64ef5078991ac08bbe0ab1f7682d93d4ac21e7904b4c1428f1a4a6a8ba50e92dd2e79c83b64f4787d4dd4487077ede2ea8096728f0bd82cb28df324831468ed3bac897be5c4ff8ef3ee02e28e14a8888fb2fa826017962396866a59f31eaf1bfcf61d6be5f4e28056000120c129cec83699ab76581c6f8f4c90cd49aa33c92bc5ee1222d131fda21e7b05973878e1261f6650a8579adeac6115d7f6af525b9d5070d8f1679a0d67e936ff18133e7dfcf851e5c5c4e89dbd1ae589e56214d58dd2480743e226b341ccfd90b13ee1d83e3af71c30a477c3fd59d75abef9b07b4755f3bea50cf2f48d0117f967249d63b1e837759cacca7a2d1d364fb3ba6b826d1cf7ad4be2203dec377f8202bd9ba739863d6372e5cfbb680994ce690210a1e8db58b53f9e9a9b8f348471c53c3216b41f7fda2f0af29b77feef6b51c2b89fb79c04f49c7d4b77835cc7b6f304ad069c37daadf98bdb90f91375ca08feaba450885b3a01c7e46c334378c5b34d719a734e63bf5869d41edb80a0e96a290ae650d14f09b783af342a3cc53fef698b1111b1af9d65287062e857f64637f6353f681745beac260e71656fb75e7991d1fd96225148cc8645e21669a78ba5e934b7b7becf3e52d859d9a2603a3872549d6e731058f5053250592e7c2f56b11b7be40a333148894d9eb7513de35a0ccf571935d0f3c8ca62c158dda00200cfcc20e124abc7c30f37f28894d68657fb87e8a3acc7fa8a76b0bf8b01584166e0d28573484510e9122fc34d3be7e0d2e6564ef697ab69753f8ba55f6ca23c01766e0bbd45df6158951ca77828d7d88c3e76fdadf0d689839e0cb5d083156a64cd36bce5fdeb2ce2378b38e44cdabe94418bd8e8ee12a7d53fb58826fc4e8de350595c0478a1c72cfabd5e4d9c2954e95ae216ecd0d168c299c35bdce7b82feac304d2794dbd3b2a832a28fe56d75ad8d44c9ebecf1a12c81ec3bd3207ebd911519840ecfa8c3fbc2ec168c538176bc84ccfb7fded516a45976f47e826332d83e2a51dc83362227bc63630f377aa81c78f29fca1037184d9a0242b4a186714da0a5e2bf569a5a9e52f64702942149f1a130d491dda76908d87f7d4afa27a5f6cba105d7676f5ce3e6c9c640057fee9f2a5c1abc4ad4061418d89f2c1a712429ecc96d2954c8b6a0e82317f3261849ba42613d1bda67c54fe056096d5955e278c47a9f86bcae883d465bf4aa10802986c2169ddf56b3b4e9ec80746a0ede0a82897522cc0c346c8e774da50175b80c05320836f1024f77cf736ed58d54c8b94a6ab1381cd89d5c5043fe43adf38ae6e23ee710b6eb0276b35b65eba2112cba162d77ff0ee472b55138f032ff17680b18d5ec332b33b5d4c972603df4445d900d6f157b508cf3d5a21c946a47125eb721dec6eb62f7ae2ff88a33699184a6ef0b9bdc56965b9492f3000af9690bacfc58e6bdc5cc217bbee756b74478692e9a0450348c401dca9b5e365e1d17710dcb2d1c1577ed086cfead470bdf5937c87559a0e20a6b5f7de89eb8e2c4143fe8a6c4f6e23b0076640533471438a5dd263846a7147f5f6696d406335f8e82bac1cb522142f4da532c473fa84244a4bfa4a69793ea7dc263b7c2561cd8b548288cdb38e7fe649c46c2dbc07721939bdba988136c22c41b5f085501213de6680ad2517d21da8c072a312586410f4b5bef4a2123c59ab56085add0aa3c1ee4306fcd060e3eeaf68df01ef0094c9182a2b40046402e6bbc8aa550389475585517b6d9ac25ab8084485d937fff3e425238b2a54d53622bfe704edb60d83b2cb35efefa446c4065b833980cb114ef4bde19d7c94e11726acc9574e57781d36d339809dfeb2ed14bb46b25246ef4c52adc9f7aa3d5f9477df20b232a94ab10ba0b06d3dfe4ee5c40bc1aa277cb72a10b9765aab136577ae9a181aad0f258399e16ccc71727d9878ba65cf6cf9fbc75b09a88aa50c896f3271a5c39a0102e096e924a14ae33d0e3be96b8a669cbdb3eac04cfb94cb6c7f25517c964fd73b3f39f14b9b42553da84a94eae73244835572aab4fcdfd4b15f7c16148a5a27e7bd235b96bec18d0e34a637a0c244a97cd2aa078f30e7a4f9f7351a702c26c9d6746e1a3085ab0058848656cbeca2d1fac034ad5a9d0602416d6d3ad6ce5b9f3c3fd81f045b399977c4a82d2e982c59ebc4e26ded47bb91071d44f64acb64d5dfa05223ae581e2e2140db595f04b49aef9f2015177f599ed4a444cac416efad68b893f61feee21d5b4c022e0e9b943131eee8a4b8fbdb2db80baa2e707af356acb8d9a64a312a70a1d0530a5c30d59c8591f8e168ffb611b881e13cbc417822dd60a92c80b86657de4ac7b1412c9385d5729d8c7ca1289f7e4b2fe19f6368f0884bdf2c044b86011adba3d559e2d6a30cad83c34f1efec7c0aeef408b535572a8b94e5bd5601994f7c58ecabb464fce216ce16da790082b074ddb835ddc3f690a4a5eff8a18fe9b3379dd7fdedc59e2d1488ea8d7ea1e2d371ab1c70cbb72f2e30d9f9a2e08c31ed45e162eac7ae0b4034c338ddef9fe4cd6d16ffe36887536fcadb22573e9181b74f5cdacd64bba646aa9b87c4fef5c823008fba304b4073ee244247191851a1bf88cac89509e4defa14dddb6814943b8537d0bea32fb51a2b5e4ba1e94a8a022f2be662e67f04604a5a075ba44c6c50b88c87c1c61aa874db9bc64326105fd68ffcd3d27ef0e88676e300e73232bf6c6ec552ae86373d6de37e1134ef9b99f76844356f18cc6df201a98055686af5eec78c875bbef07f2fc26a68ef08fc1907c5f3869540ff74d503a03c2f6e67b6da2042a37348e564851aeb855060ef174453a4236470dc478fc1cf50aaafb1ee36b1a58cb59152eb495210b3ada431a405bd582ae9baf3e00f64856b853970ddd747d51742ab907a1c87127a8ca4ba0860d807c0910c17a31f209a7b442555b8e1213aa103dd9fc1590d9d9c3e802fbefb406b65fc690a68602ff16f17e0f97875b8966c78257ab3d892e796de112bbe2bb7cfbaa39825e553d669751a8664f3aa84036b5b0f9cbc626a5f8c4241262f4e64b6321dc21164576ecd9d27cb1baa4d20c4397013ddfbcf12002262d6206485112ef833884f8a507cc2085cc4ad5e757812f71c76c7f1d8bd8f33e5087b01f00bcccd3d1ecc5a4778d1e87f6ef45d348fd40752595881a2ab1e33043ae4dd34bedccdb786021dc1ec44c44d1a73790f2906924d5aa75b40148fb210ef5811ffd46bd2e243cecd1c042a4ce89f842e1000ac5c239ee04b0a9af96b28eb4b0a2d43a0c1b307108d5c33453944f5a54cb8e5a5c0067ec00e33c3c67a73e5a53f6c28bf029ef1a32dfe7d867829bd3202926cfb87e6b8203986a109eb12087d2b65cb99f9473fc385f41d662074bda1107b98debfae1c2f89452ea19bcc5927e6bae9e0de38bfcb33030cf5d7414136fe425ef46062591295527bb104b6301cbd69c5eb9cde79f8bce5d3ffdb9a876a5be9ccf1ed9b634d69a5aec873e1a74eaf8d916e85dd9b7b384c32c4eae83164cbba8c839e8347c74125d33f251e8fcedaed2153b6864341ef0885abf56546ea413bfa117b53eec36ff13ffd79b3e8b47ad1535e75ab09c8996cf994e51a7be546d98c6bc791e2c2ee8f766d1955e4a88be41387319d2313c55eaad728c980a2252a7fe7240a987b95a847c8a5aa340cf9905d090a30d2b64fd00314711a25d3dbe111a564a3e1dcec800f21241c5b5137cffa87d532da982f9e1c0c8f2482d644633ad2eca4e7b9e00d1687e2c53eb611e873596fbbc5bf4ea9ef99f5c112121917e59ae4abd8711430a0a9346770f0323ebdc4e0c96cc172b543ead8f5afb88265f03263c2493dd15fcd6acdfcb6359613b987a575b14891301f23d2fa469ae923810cb9956a57ed929bbf172c1e50b33060bea160a4bc2ebff37056e02a3a0bfbb16ad3ca643f00f108a81edb85ab6f626ae24503937923ecc3385a3e514729f2f44a7aec62fb9146ec2d89ed958de542a64998e66e3d0a57616edc884a41ed0bc81ae99af5a4b6606cdddb53be5dd6d4073daeaa1cb63d71fd0c05c01dbd1c12a6ef4664d83e06546fc525507247c3b05cf497b862aee8e0ba5c09c3908971386c46bb74231592ca9787356a7f9d038813fc95f3b5651623525fdce87a7b7ef79e435fde7bd3f302705a1deb66517e31c6e829d65f066f81c728c2e1997392af2a35ab98f9964813bf3f0cd162cb1e4e0fe989a395df31eeb5edef8badd6b12ee26925b1a54a9dcfe1bae03c223d45d3045f3579509d5"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.542045012s ago: executing program 0 (id=2205): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x89fd, &(0x7f0000000100)={'xfrm0\x00', @ifru_names='team_slave_1\x00'}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x5, 0x6, 0x9}) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000e60000000000000000000000000000000000000000000000000000000000000000000000df00feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.25211929s ago: executing program 0 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000000000000060001012a000600ee7a6c45dfc220ad0a98bf9420608f566ac9d6593cbed332af8ec14c88cb862d396308cbb7dce16686a40d37fd5444bf0e979b24fc38df4e7952de3b9e5da7429b8f72cee5734f8db9b77797494aea55600dfc14b2d8eca7d486f27e4abc5f9060"], 0x18, 0x200008c0}, 0x6008045) 1.133938949s ago: executing program 0 (id=2207): r0 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r5, 0x211, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0x0) (async, rerun: 64) mmap(&(0x7f00004a1000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r3, 0x631ea000) (rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) (rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r9}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002ec0)={0x0}, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002f40)=0x0) (async) r14 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001e80)="11a5e84cd6cc1bea6a6484a0891f750ff89f7fb4f0bee5d32613b38b196bc2a9046ec7009c1d57400a68acfbfaf7b816f00938580a26d0e3b4aba3518acc620706baace4e0af87d3c9ea698dd025fcf20de697", 0x53}, {&(0x7f0000001f40)="a8342790", 0x4}, {&(0x7f0000001f80)="a79f6680ecf017513b1d927d587916c4ebe3ac2227da62504461f3914cde8899bfa2fd03f3046b69760db566a1653771ce69550ce1f559981e36ff4a0fb377a45951926fc59ab9900a311f03105181159d2a60e8f150e90f54c74c93d8ca59dc0424c90eb824b0408924a30aad19d935c18c08af5c4292dfb2d1ae6684467a394f51a9103253ea2c990fa7199e06ca7b6bce944bf427c77f55", 0x99}, {0x0}], 0x4, 0x0, 0x0, 0x4044018}}, {{&(0x7f0000002b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="1f6b00e421d903c21006747364f3bff8d2db4194eb6727539f6ab10c6ddb81e193e7bc899c28014969e12a2b1d037dd20284fa54aa4fa1e5236cdaff1a91186769c0b185dd11fdeec7b2840ec93e0890477566cdf9639e9b6e529c7c1874fc744c3b17d2297d2506503b2eee329dba81756604980773fd2a42b58712169e012c5faa9a24af11a6fd67da3003b2b95fe2475922cd64123196c0855893313b371001d7dd75c7eba7b4753a3fd03065c977987221", 0xb3}], 0x1, 0x0, 0x0, 0x4044884}}, {{&(0x7f0000002cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40), 0x0, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x10}}], 0xd0, 0x404c040}}], 0x4, 0x800) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x2084, 0xb, 0x4, 0x0, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x5}, [@nested={0x2018, 0x10c, 0x0, 0x1, [@typed={0x4, 0x132}, @nested={0x4, 0x25}, @generic="e8e9888e96bcdf8c2935fe098fe6f07682fb427ae1cf11d127e2162f2596c61b90ff6f2e39556710688ae70dfcd973f14937f00e78e23430ae0ce0a5c4d3b9c9524da770f2b8497dc36bba1ddbd0ac0d17ec7381cf0b601fad37a619b4e5b4fbee01fa29361fff469cb89e45a279f7ccc182a395c51c756f529351c35f6116059475813ec92e41a65b0f12682472951181bb8758dc157eef6ddf4cf13696b73af197fc268388e4d358d2b486b46ef213f35e2e56f0530ee88198ac37a8b89c507df7dd54f972c301db639ccea44af3b89c18ce0ca7e433d1d3d5398d367793e96b2099e81d4af0b9efde9df2d1af6342a9f58eadff804fc078d037b4b8b390e72a92d35147a84820b35ae56c2993c1214b84322afd04894a1c6e95e68341db47ec6ef1f6a151e515f5bbbdb6d336a040bca884dd7906dbea4342fd22b2026b1e7e2ba85ae3099ef18601c42929efb10c602c8b595c915cce65b36654c81dbe94c1ec04b891f89ea43a7dc2628cb16b2903e310ae06001a9de6eeba966b11ea193a10ce71e3ba058e47ddcd97b3e4b88f9b79b684b6befe1c2f851c92857810d8844b3b0ea0fbd1c5183f52ccd029f6c2972cf227a084f711da9223141dfcdeffda6537625cf7f473d4e10b29c217a5d864b4481a72aa75e9ecaa2dfe384e849d1429cfe3792ba78c4e03645e94305cb55f5cf7ff30c6d54ac543f0fce3fcf77f813aa5a4957e37bc75b0870d24291c4006467654b071de92e1c75ecca3e4bb90a73f7622d2d1cc41ef9701e5aed35086561d81b55289aa8f6a2e7e8bd49393accf0e2e554c8d1ac7ea1bf79340cb9db484caef7e04e7cdaf6096d96c230f689af6e8ba21153b1d860463bdf53bb89441900466e688a3cac68651ade7f852ccfb2872114a036e118328cefcb76fde0334502a1e475418ebb49a2782916b6cae0bdd42e9a83cff3bc287e9a2f763328527c5f8cd0b1a011a7efcbe5906b28425e4c492562847a0cb94c979d8c58e15c99f817efbfc7ed266470626a46a8ad91d394de6f31249b350d0f8ff135271cd6006599c81abf9f71a146c9af49af54b6a4d4c5c827b8715992e1c7acaa56bd510eadeaf9096f8a366b85521e72fc6c17a9938e49b6fc77373b9f67e950316969d58a8764b1e0706a39f162825385d42bdbba7ef069e0042439a6e0720503b37d53da15ebb2ed69b4d929721cfb046d1b2c746581b37274d08800a450202ffe531b31f2913b8269f863af4994a4037160081af81fa07386db9bf824407801e999388a4ac508a51de5855c525f0aeb9dbfc815ff9850250f30971b65f50ab811d780e37689c463999cea175ee3e6b1521c64614cab15e03b9a555fcbe20e5b71dad29c7d4405d29613eb183841043d7792f03af50f0deb78460ae24d3be574f4368b8b3036aa9d147d08056159298ca82a6e55195ab22a7cabc3253be67c4c4eb0e027a3f8423007f2674c1408fe8a249d5eb501511ed8eec163b9a604aa9476b99df4e81ff0e1a3c5c5f64247dcd519b34b1817759c449ae92f1a37a87b968b9f81d189fee3764d58d09de5f04044c32b75677470350ac0d58c3421e2ff4da6312b80ebdaccca805dfea476811a6e7ba75d9f2964be58af2e075d1f67ff814889d569f30374c91e3fd23ed00cfdb13b2466396d2029d186ba64370bdb830795790804b4f788aea1da26a078fcb74bbe9b76ff6f28ab282571fd20432e37924a962574b7bb03902cd802ba6a9a519388419d69cd81e43cb3be5667f803b7f21daad802ece9745f6a339fbd5a7652ac4fd4f46fb9daba7a90d09576af90df5ca4fa96cde1ea0c523c249b9f1acc41a49eacfd294d168cbc3cb13f0ed99061dfe6ce856694b1290bff5341d623ecbd58365a4e6c5419348c16a0d555e7776ee9bb2a18d4e032352bc64c2ff8c97157c04d30745799a1a754cfe04aa83a8056fda5d1d960507defbf413c6aee4294ef5b554fc4a9da92c743f1bbfd668dc6b283c84121e503eb453ec2d91f79ef62edc3bd1444446a5ce378fd57d6c2b0e500a13e8efe7c15200d93866fd3d65406dff022b1ed7d867869fd7f29eacaf0a92cb59ed9cd79809abb0510891146c4e731b8f242b12d84583e9a6bb8d026fad29c3b3cb0cbe83ec636f222491aa8b6f2ef55b1d5c0d79b3d0e8380014ef5a2653e6473d0b87ae98e3e54177ae7f46a86422179196be368f7da47ec917457811927c38f61396a6d52e922d017d9774fddddd962d6f98a65a29ca1520a359f120961a19eb1d57ea30eb659092eb646bf01040704298f223f926cb1c799716bdf35cd96712d58284fdbe1af47372c6ea1290a7b9af486dac17f46ce80b4f600f2fd395604e334acb9cb846b19c7b23fae5aabdc371369496a903fe017e1f357125af979633ee5ce335dc330c1dde5bcb2f129d3ccb3f662fc4a3ade691293f5c9434486214e42c9485332fa5b7dce515c1b07985cfc78f6de4ef35a2327e620beb4788a32d7aca430f9215cca4df7a023e893d76f92ea39086897bdac868016844a0a84ceb9ea85cf13dba06db6a1c7f269b0ed0ffac0279384a653c6149b2b2292188cc79e9e13ae7c87f72fef5beef1d2aca0051cdaf6fc419f9cd1267fc17af7dfeb844ad9e663e9f206d4e1c7900574b5a17683219f496d894729aea555d78e6db901aae7610c3bf4a8e653288c3820ea5c436e46a53ecc981e608646060f0308f13a205b1b9bfa8b4621c29b19eda0556fa0535f98c5fe57ab1bff2da9b70d3467065ff8498bafcbf63c47daccc86a1b46a9e7868f7feaa293111c76204d09fecfa5a61456d0ec097c1ad400e69aa89e99c5e5f82d6c0fa734a648d45c181eaedfd98ed17cd2237db6234291c593ac78259e771c16f114621ea49100a8853499c2665e1f0f5915fc2e2d806cd42d643a2d46bc27710e39015aca487192611f1f5fc6dd6440c24e89b6ece75b5012544b1acf88cc226bdd06f3aff01646b18e1dd960d10519cd2343b1e5ebdf36c46a4d91c145127513626d820813e77a0543e929723efe0b1d87b190c201930fec19bfd6d26d8e5068d683e13a6abaa9a55ff469cd7cc8b3f827ef68263a0d85e3dcec7bd833aac0ce389bdd506761ad235f51e42185d1f2978c4750c9d235dcbabb144880957227ebf851938fbda3ba0296008c63f21fd66b5199f9da4d7b2759578599b42c70e5c627aa8a3100d4f3e3c40ea38d0a92b1e8f07ac10c688882a6b3fae5f332d84c1d020395a82699a4108d15eb6484355f64c45533ec9a5db3a9bf1866765cb10b5983f45540b176261761ea5b7b99857fd441236cc89899ddbd78a77c4c3fd4429fb5a8bceec3181a048aee8de27c2cfd1b8d39d13197a04a3f45658d7c5b1a0d7264e0e03866025370deff1c5bbbdae188ff12cb38a9ebd9d3b630e9243256918fb3eb87a56d3cc59204a6877560813cdcf0cda3d09649ac8c42000986a873c50587b4c08ea60b888dc3c860b6b22a0eaac04f60cf18077721d8f0c87743251b6010d360ff6f380d6b186415e377f68e53e09147f6b839dbdaecf243faba975e92f36ffa8020438a2a5248cfba1f481cd0416ddc5ccc2ac2a43923bef6ec9368b0409b96b03a023f9feb2af135eb8c63ebd9084fdd82e3621e3bc3bfc2fb13a53a1767665062ba9acda88ebe0c9aa391e753001f29419800deb60bb04163b6f18f7b75d9b5ace4a1ec5c5870fb2dbcb6661d7bcc0f7088abb68cb07cf50e932e118dabde724240357ed917cbdb8b5a63236e930e70a53a3fc7aafc35c8832cd91a9a49dd03ba4c5ce8e305f7c6988318e0197ac87f00cd4f29ed1f76003182ed19d3e47da3e6ecfb3aaa2b60da8bb240e84939aabc5ddccfe2db5599b5d9273d7118424784a6820cbb0b027307654e32a311b19572926f14272aef368371c86f64e7c1dba2a161df3bdf46bfc0c36e9f76825b96349da6375706ce110354e006556c2ece33ce795e11f62d5534c8ef3ae4f7a15578e616ccfaa433ab86b803785c4d6c97fd813ce6081ec837b1d2c17f06d40141b3db8a13e2533242ea7d8079c991ed31100e458bd4dd5998cae425afe1fa3c82323e2f9b65d7424bb3d369c9c879a323f2a924a938dc6825013a6df7f266c19878c005e9e4873f8e289c86b3f727c3d3cfe6db5191b20677df4df2f11a4df71275ad87f9d5905f52379adb22de88c6598b871ad1da087b01f23d2eae7a43a5261544212c409027a7cbf49924a5d9397200ceb14d9ed1e7b14580baa03c83d37af1608065c2ebe426b56df6ddf68ea95702af580118ddb2549704ae9550328ba261ec5dfe213bd8cd68348864172b52ea4c301633fb2f7784c32d639ac694dcedd64b359b3712ce949859e44f5bb868a0b4a0f371d55eca17138d366758fd855350376d17d2fa62c2e25921546276ce91620755b4663b22ec52329a50bb377e49fd4ac0e9b4f88c50756e4cd5e07d90fcbc447dcf8680d8782740375592c0c980a6e61b42e50c8c3b1014ef980f59dd11fb336ac38273453c28cc3e7e170736fd2567f7aa07ad6257eb864f727c9017bcbf6a4f74562e115a7fe44141305a54d5da0432d15e9a756010855b402c162227785579aff5586c03232657cc8338e7aa274afe78f89b17b0346269d54a8660e7353dcd7948d8e3aabf4886e6e771471867cfee71fe3843b29629f1b87944a02f995ee788a85cacb3491a8570bd50d60f3818fff91f50b92d5dea6ad4a318dc61946847f0963995c609d69c87510d5deb3323b52aacc4954d98ebec9b4f2ad93804b20698e719ba238650e8a7e6ce1cf32f183ebcbb344c26414238efccd9f5b20876a8e2efe24dc119549931cd81d309d2c3017873ba3c6f203ab893a30f58b701d3cc1351ad443e1dd193e67c109b80ed75475d26b4b63fb9a935f810044856fb6ae3cc8761363d3c0136217cb92259eaeef5b55b9879c53de9ae09cad37e477f0ebd6badc6bf869a7e7d4da6fdae9ae77e4f6e3724e6849fb9da5ee4571ca790f29c903b0f12e70e376374233198d684cd379309a82b1b459a6b556fbddac29f7291c87a694a35efc4c86c0c2e6ac573ca7b2828dff468a7d23f2b49e6d2d6ddf9669edaf701febe189aa7588693ddd214ce1adc8a604b3400b49305fa54508a9b24ddf85f293c5237813ccdcacd4b2452b037d4bfe712680ec4ffc339a85933454c29dc32b91f53a4dd0f8499c7dbfd4e01d005ae86e62b0d93e4ea362297aac644e6d73dd15fec669201813852a8ee6efb9f1dc46036874f35f66d4ab20d884329bd8849a118624409f13f8e4e45a1cc54a8c503b1bb9b88d716af1da5de9e68be8c463410a105754f40ca8454152d8a4192783a01cfab8a167ca7740fa9de5231c1e18c511f40ce27e1662b44320f989c943d9d66fe6d4da9e0143aee5830d4319dc11b02aaff86dbabbfb483a4d6d253e052ffc95abb4b04f4822e45d31afd6a608084d3279eff9ec2642190fa11cc726f39e2b7366117edd52db97dc90b9f8e16e3c0252f93bae7ac045d12bc10791d13163c01bf5643f00a717dfa669a0beb58948163302ced7f82509948e072333e5b7a956006f9ce898028610b5c34453e98099b7480ccc794f4f2481165bb6ff0e1ab6c8b6a3bd901d13c6a60676af507d2b8c7e7f6877fe71cc47a3de115c6ffe4e1d47ff25aab33c6db253056bc4aaf348b12d4db0024baa4a8721788a19fd12246829340dbce08e240233b65f8f99da34fbc681f913f70829d4304fd1f15bf688697bc1ac886c64", @typed={0x8, 0xea, 0x0, 0x0, @uid}, @generic="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", @nested={0x4, 0x7e}]}, @typed={0x8, 0x119, 0x0, 0x0, @uid=r13}, @generic="5e0fa0e647021f518ba7584a16e0e1462d0a157fc515ef210e6ad1ce844b8dd09123377040794ab66dfe3608fe7b5fa7cfbd08429686dc2ec38a60f99cdd314eddf83276de", @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x2084}, 0x1, 0x0, 0x0, 0x2000c004}, 0x24000011) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000006c0), 0x1, r10}, 0x38) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r15, 0xb4807000) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 785.928671ms ago: executing program 0 (id=2208): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 712.23948ms ago: executing program 1 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3, 0x1000000}, 0x20) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000140)={0x6, 'nicvf0\x00', {0x7fff}, 0x7ff}) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32) bind$tipc(r7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @empty}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 702.399824ms ago: executing program 4 (id=2210): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) r7 = socket$unix(0x1, 0x5, 0x0) ioctl(r1, 0x1, &(0x7f0000000440)="9786839de214dc22b2915cef5864d78b1be8d733219ecc9a7a03cacc3f0d59c3b3d7ce3e5ad985ee301459b6cb5b12ec875b35d7399b14431538073b62157b28d467c72729524019882e73624b") ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x4, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x0, 0xfff, 0x3, 0xfffffffd, 0x6, 0x9, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0x7f, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x80000001, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0xfbf, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0xf0c, 0x9, 0xb4, 0x94d, 0x9, 0x0, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa256, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffd, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x1000000, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xfffffffffffffeb3, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) close(r9) socket(0x2, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000500), &(0x7f0000000180)=0x68) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x3fffffffffffd14, 0x0) socket$nl_route(0x10, 0x3, 0x0) 675.126995ms ago: executing program 0 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r1, 0x0, &(0x7f0000000040), 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r2, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 479.446891ms ago: executing program 0 (id=2212): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x5, 0x4, 0x2, 0x40780, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r5, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x18, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x80000025a5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRES8=r5, @ANYRESHEX=r5], 0x50) 301.507235ms ago: executing program 3 (id=2213): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0xf7, 0x98f2, 0xe0}) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x40000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0xf7, 0x98f2, 0xe0}) (async) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x40000) (async) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) (async) 48.917588ms ago: executing program 3 (id=2214): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x5, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) unshare(0x62040200) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r9, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) 0s ago: executing program 4 (id=2215): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc9, 0x0, 0x0, 0x0, 0x81}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{0x1, 0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x2967, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x21, 0x1, 0x400, 0xfff, 0x100, 0x1, 0x8000, '\x00', 0x0, r0, 0x3, 0x1, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0xa, 0x2, 0x53, 0xfffff2d1, 0xa0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000001300)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x17, 0x1, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000540)='syzkaller\x00', 0xfffffffb, 0x90, &(0x7f0000000780)=""/144, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x5, r0, 0x8, &(0x7f0000000840)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x2, 0x6, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, r5, r6, r7], &(0x7f00000013c0)=[{0x4, 0x2, 0x6, 0x4}]}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x24000004) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, 0x1407, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="c3aa00fe5000000071101a00000000009500009f0000000000d6999abf4dac55b0f77ce607d59b2a4c4c42fab4b521388d7b5493ff0371587a05898741b813c3f4c8560ed04c2d8d4aa48d87f4767cb43a74f13b232f214a91340f44fd288ff267b41684bd9e2bccf286b4d29a28a4a4fd38f955aeca4d5add3a6951a8ac8c21789b069731f3b8b6ac491f5c8ff0cf9ffeae5e9799bb52"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.4.398'. [ 119.300497][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.399'. [ 119.320254][ T7503] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 119.340501][ T7503] nbd: error processing sock list [ 119.500480][ T7513] netlink: 'syz.2.402': attribute type 96 has an invalid length. [ 119.520518][ T7514] netlink: 'syz.2.402': attribute type 142 has an invalid length. [ 119.634560][ T7522] netlink: 45 bytes leftover after parsing attributes in process `syz.4.404'. [ 119.729799][ T7530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.403'. [ 119.807003][ T7533] bridge0: entered promiscuous mode [ 120.271707][ T7560] syz.3.416: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.288796][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) [ 120.288825][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.288837][ T7560] Call Trace: [ 120.288845][ T7560] [ 120.288853][ T7560] dump_stack_lvl+0x189/0x250 [ 120.288880][ T7560] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 120.288914][ T7560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.288936][ T7560] ? __pfx__printk+0x10/0x10 [ 120.288961][ T7560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.288991][ T7560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.289028][ T7560] warn_alloc+0x214/0x310 [ 120.289054][ T7560] ? stack_depot_save_flags+0x40/0x850 [ 120.289084][ T7560] ? __pfx_warn_alloc+0x10/0x10 [ 120.289112][ T7560] ? kasan_save_track+0x3e/0x80 [ 120.289133][ T7560] ? __kasan_kmalloc+0x93/0xb0 [ 120.289159][ T7560] ? xsk_setsockopt+0x4dc/0x8d0 [ 120.289178][ T7560] ? do_sock_setsockopt+0x17c/0x1b0 [ 120.289204][ T7560] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 120.289229][ T7560] ? do_syscall_64+0xfa/0xf80 [ 120.289257][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.289285][ T7560] __vmalloc_node_range_noprof+0x125/0x12d0 [ 120.289343][ T7560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.289371][ T7560] ? __kasan_kmalloc+0x93/0xb0 [ 120.289415][ T7560] vmalloc_user_noprof+0xad/0xf0 [ 120.289441][ T7560] ? xskq_create+0xbf/0x170 [ 120.289465][ T7560] xskq_create+0xbf/0x170 [ 120.289491][ T7560] xsk_init_queue+0xb0/0x110 [ 120.289516][ T7560] xsk_setsockopt+0x4dc/0x8d0 [ 120.289540][ T7560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.289565][ T7560] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.289598][ T7560] ? aa_sock_opt_perm+0xff/0x1a0 [ 120.289621][ T7560] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 120.289646][ T7560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.289667][ T7560] do_sock_setsockopt+0x17c/0x1b0 [ 120.289701][ T7560] __x64_sys_setsockopt+0x13f/0x1b0 [ 120.289736][ T7560] do_syscall_64+0xfa/0xf80 [ 120.289763][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.289781][ T7560] ? clear_bhb_loop+0x60/0xb0 [ 120.289806][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.289824][ T7560] RIP: 0033:0x7f682278f749 [ 120.289843][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.289859][ T7560] RSP: 002b:00007f682357c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.289880][ T7560] RAX: ffffffffffffffda RBX: 00007f68229e5fa0 RCX: 00007f682278f749 [ 120.289894][ T7560] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 120.289905][ T7560] RBP: 00007f6822813f91 R08: 0000000000000004 R09: 0000000000000000 [ 120.289917][ T7560] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.289928][ T7560] R13: 00007f68229e6038 R14: 00007f68229e5fa0 R15: 00007ffe9952a8b8 [ 120.289963][ T7560] [ 120.576281][ T7560] Mem-Info: [ 120.579792][ T7560] active_anon:4634 inactive_anon:0 isolated_anon:0 [ 120.579792][ T7560] active_file:2947 inactive_file:39898 isolated_file:0 [ 120.579792][ T7560] unevictable:770 dirty:76 writeback:0 [ 120.579792][ T7560] slab_reclaimable:11539 slab_unreclaimable:94373 [ 120.579792][ T7560] mapped:28924 shmem:1357 pagetables:890 [ 120.579792][ T7560] sec_pagetables:0 bounce:0 [ 120.579792][ T7560] kernel_misc_reclaimable:0 [ 120.579792][ T7560] free:1325735 free_pcp:22439 free_cma:0 [ 120.627129][ T7560] Node 0 active_anon:18504kB inactive_anon:0kB active_file:11788kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115648kB dirty:296kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12028kB pagetables:3336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.636095][ T7567] tipc: Enabled bearer , priority 0 [ 120.659617][ T7560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.696521][ T7560] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.727614][ T7560] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 120.733629][ T7560] Node 0 DMA32 free:1404568kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18508kB inactive_anon:0kB active_file:11788kB inactive_file:159396kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:63140kB local_pcp:26224kB free_cma:0kB [ 120.745008][ T7561] syzkaller0: entered promiscuous mode [ 120.767111][ T7560] lowmem_reserve[]: 0 0 0 0 0 [ 120.777441][ T7560] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.807451][ T7560] lowmem_reserve[]: 0 0 0 0 0 [ 120.812435][ T7560] Node 1 Normal free:3890872kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18880kB local_pcp:8224kB free_cma:0kB [ 120.845104][ T7560] lowmem_reserve[]: 0 0 0 0 0 [ 120.849992][ T7560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.863633][ T7560] Node 0 DMA32: 1696*4kB (UME) 261*8kB (UME) 72*16kB (UM) 335*32kB (UME) 86*64kB (UME) 31*128kB (UME) 25*256kB (UM) 14*512kB (UME) 15*1024kB (UM) 11*2048kB (UME) 323*4096kB (UM) = 1404680kB [ 120.883501][ T7560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 120.895150][ T7560] Node 1 Normal: 182*4kB (UME) 56*8kB (UME) 30*16kB (UME) 86*32kB (UME) 32*64kB (UME) 3*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890872kB [ 120.913701][ T7560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.916443][ T7561] syzkaller0: entered allmulticast mode [ 120.923584][ T7560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.939641][ T7560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.949227][ T7560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.959489][ T7560] 44197 total pagecache pages [ 120.964198][ T7560] 0 pages in swap cache [ 120.968375][ T7560] Free swap = 124996kB [ 120.973370][ T7560] Total swap = 124996kB [ 120.977561][ T7560] 2097051 pages RAM [ 120.981813][ T7560] 0 pages HighMem/MovableOnly [ 120.986517][ T7560] 424280 pages reserved [ 120.990845][ T7560] 0 pages cma reserved [ 121.073457][ T7559] tipc: Resetting bearer [ 121.101030][ T7559] tipc: Disabling bearer [ 121.120469][ T7581] syz_tun: entered allmulticast mode [ 121.161174][ T7581] syz_tun: left allmulticast mode [ 121.253002][ T7593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.424'. [ 121.468269][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.428'. [ 121.509391][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.428'. [ 121.526876][ T7609] netlink: 160 bytes leftover after parsing attributes in process `syz.2.429'. [ 121.544424][ T7610] nft_compat: unsupported protocol 0 [ 121.791524][ T7626] __nla_validate_parse: 1 callbacks suppressed [ 121.791545][ T7626] netlink: 72 bytes leftover after parsing attributes in process `syz.0.432'. [ 121.857140][ T7632] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 121.866248][ T7632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.432'. [ 121.885101][ T7634] netlink: 3048 bytes leftover after parsing attributes in process `syz.2.434'. [ 121.999964][ T7638] netlink: 76 bytes leftover after parsing attributes in process `syz.0.435'. [ 122.084396][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 122.095977][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 122.118813][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 122.153925][ T7650] xfrm1: entered allmulticast mode [ 122.164752][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 122.174101][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 122.193227][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 122.234484][ T7599] delete_channel: no stack [ 122.310614][ T7658] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 122.385138][ T7661] syzkaller0: entered promiscuous mode [ 122.398367][ T7661] syzkaller0: entered allmulticast mode [ 122.971911][ T7701] xt_bpf: check failed: parse error [ 123.064521][ T7701] netlink: 'syz.2.454': attribute type 11 has an invalid length. [ 123.398569][ T7723] netlink: 'syz.2.457': attribute type 2 has an invalid length. [ 123.413020][ T7726] netlink: 'syz.3.459': attribute type 29 has an invalid length. [ 123.696601][ T7733] bond2: option arp_validate: invalid value (18446744073491447809) [ 123.707485][ T7733] bond2 (unregistering): Released all slaves [ 123.713140][ T7748] netlink: 'syz.4.463': attribute type 3 has an invalid length. [ 123.806247][ T7755] tipc: Enabled bearer , priority 0 [ 123.846191][ T1085] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.864107][ T1085] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.879194][ T7731] tipc: Disabling bearer [ 124.401148][ T5894] IPVS: starting estimator thread 0... [ 124.439038][ T7777] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 124.520524][ T7778] IPVS: using max 29 ests per chain, 69600 per kthread [ 124.655628][ T7787] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 124.965784][ T7801] tipc: Enabled bearer , priority 0 [ 124.998836][ T7801] syzkaller0: entered promiscuous mode [ 125.028195][ T7801] syzkaller0: entered allmulticast mode [ 125.196662][ T7802] tipc: Resetting bearer [ 125.285580][ T7802] tipc: Disabling bearer [ 125.483709][ T7838] syzkaller0: entered promiscuous mode [ 125.489846][ T7838] syzkaller0: entered allmulticast mode [ 125.985333][ T7867] syzkaller1: entered promiscuous mode [ 125.991724][ T7867] syzkaller1: entered allmulticast mode [ 126.263322][ T7877] syzkaller0: entered promiscuous mode [ 126.268807][ T7877] syzkaller0: entered allmulticast mode [ 126.396057][ T7883] macsec1: entered promiscuous mode [ 126.401857][ T7883] macsec1: entered allmulticast mode [ 127.240895][ T7920] syzkaller0: entered promiscuous mode [ 127.250868][ T7920] syzkaller0: entered allmulticast mode [ 127.347313][ T7920] tipc: Started in network mode [ 127.353112][ T7920] tipc: Node identity 964351f3a64a, cluster identity 4711 [ 127.373538][ T7920] tipc: Enabled bearer , priority 0 [ 127.421543][ T7919] tipc: Resetting bearer [ 127.492103][ T7919] tipc: Disabling bearer [ 127.546524][ T7936] __nla_validate_parse: 18 callbacks suppressed [ 127.546544][ T7936] netlink: 64 bytes leftover after parsing attributes in process `syz.0.509'. [ 127.795295][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 127.862354][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.911663][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.514'. [ 127.922428][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.514'. [ 127.960895][ T7949] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 128.177031][ T7963] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.520'. [ 128.353070][ T7972] netlink: 'syz.3.522': attribute type 3 has an invalid length. [ 128.387579][ T7972] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 128.416322][ T7972] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 128.477576][ T7978] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.524'. [ 128.652344][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 128.692009][ T7961] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.519'. [ 129.199777][ T8012] team0: entered promiscuous mode [ 129.215187][ T8012] team0: entered allmulticast mode [ 129.243300][ T8012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'. [ 129.271070][ T8012] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 129.622375][ T8032] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 129.677656][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 130.221371][ T8060] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 130.276075][ T8060] !: entered promiscuous mode [ 130.326864][ T8060] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 130.369312][ T8068] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 130.525414][ T8084] netlink: 'syz.1.553': attribute type 8 has an invalid length. [ 130.551767][ T8076] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.579866][ T8076] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 130.752381][ T8092] netlink: 'syz.2.556': attribute type 5 has an invalid length. [ 131.632932][ T8139] tc_dump_action: action bad kind [ 131.693980][ T8135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.735155][ T8144] macvtap1: entered promiscuous mode [ 131.782850][ T8144] vlan0: entered promiscuous mode [ 131.797072][ T8145] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20001 [ 131.815002][ T8144] vlan0: left promiscuous mode [ 132.401779][ T8166] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 132.435219][ T8166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.444110][ T8167] bond1: entered promiscuous mode [ 132.450598][ T8167] bond1: entered allmulticast mode [ 132.565154][ T8170] bond1 (unregistering): Released all slaves [ 132.631699][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.638096][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.881310][ T8183] __nla_validate_parse: 5 callbacks suppressed [ 132.881337][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 133.468996][ T8199] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 133.488226][ T8199] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 133.713287][ T8216] syzkaller0: left promiscuous mode [ 133.725776][ T8216] syzkaller0: left allmulticast mode [ 133.734906][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 133.811451][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.837280][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.590'. [ 133.857600][ T8216] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 133.907785][ T8226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.983831][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 134.048552][ T8233] bridge_slave_0: left allmulticast mode [ 134.068212][ T8233] bridge_slave_0: left promiscuous mode [ 134.074811][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.205082][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'. [ 134.219435][ T8241] netlink: 1864 bytes leftover after parsing attributes in process `syz.3.596'. [ 134.249523][ T8241] openvswitch: netlink: Flow key attr not present in new flow. [ 134.271294][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 134.772856][ T8271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.600'. [ 134.806552][ T8271] sctp: [Deprecated]: syz.0.600 (pid 8271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.806552][ T8271] Use struct sctp_sack_info instead [ 134.815891][ T8275] netlink: 'syz.3.602': attribute type 32 has an invalid length. [ 135.663033][ T8324] xt_hashlimit: size too large, truncated to 1048576 [ 135.760634][ T8315] nbd: nbd1 already in use [ 135.778770][ T8315] block nbd1: NBD_DISCONNECT [ 135.802305][ T8315] block nbd1: Send disconnect failed -32 [ 135.803860][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 135.828978][ T8315] block nbd1: shutting down sockets [ 135.964632][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 136.180343][ T8350] 8021q: VLANs not supported on nlmon0 [ 136.224755][ T8336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.288645][ T8353] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 136.601389][ T8373] xt_hashlimit: max too large, truncated to 1048576 [ 136.729313][ T8376] IPVS: set_ctl: invalid protocol: 169 172.30.0.5:20003 [ 137.040092][ T8393] netlink: 'syz.4.633': attribute type 6 has an invalid length. [ 137.439220][ T8411] syzkaller0: entered promiscuous mode [ 137.444845][ T8411] syzkaller0: entered allmulticast mode [ 137.499927][ T8411] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 137.536048][ T8416] syzkaller0: entered promiscuous mode [ 137.553567][ T8416] syzkaller0: entered allmulticast mode [ 137.903087][ T8436] x_tables: unsorted underflow at hook 1 [ 137.910210][ T8436] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 137.938063][ T8437] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 137.950220][ T6503] IPVS: starting estimator thread 0... [ 138.063851][ T8439] IPVS: using max 25 ests per chain, 60000 per kthread [ 138.743304][ T8451] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.855475][ T8456] netlink: 'syz.2.648': attribute type 2 has an invalid length. [ 138.877416][ T8451] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.047208][ T8456] : entered promiscuous mode [ 139.051057][ T8470] xt_hashlimit: size too large, truncated to 1048576 [ 139.233893][ T8476] __nla_validate_parse: 7 callbacks suppressed [ 139.233914][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 139.254435][ T8470] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.326235][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 139.355184][ T8476] [†’Ì: entered promiscuous mode [ 139.361629][ T8472] syzkaller1: entered promiscuous mode [ 139.376340][ T8472] syzkaller1: entered allmulticast mode [ 139.388324][ T8482] netlink: 64 bytes leftover after parsing attributes in process `syz.0.656'. [ 139.607848][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 139.734855][ T8496] netlink: 68 bytes leftover after parsing attributes in process `syz.1.659'. [ 139.766969][ T8492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.470686][ T8530] tipc: Started in network mode [ 140.479182][ T8530] tipc: Node identity ba01f72e1e46, cluster identity 4711 [ 140.499698][ T8530] tipc: Enabled bearer , priority 0 [ 140.511900][ T8532] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 140.537079][ T8530] syzkaller0: entered promiscuous mode [ 140.545632][ T8532] netlink: 248 bytes leftover after parsing attributes in process `syz.0.667'. [ 140.554863][ T8530] syzkaller0: entered allmulticast mode [ 140.751845][ T8532] sock: sock_timestamping_bind_phc: sock not bind to device [ 140.798510][ T8529] tipc: Resetting bearer [ 140.847850][ T8529] tipc: Disabling bearer [ 140.905113][ T8543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.671'. [ 140.919339][ T8543] openvswitch: netlink: Flow actions attr not present in new flow. [ 141.296631][ T8552] syzkaller0: entered promiscuous mode [ 141.309385][ T8552] syzkaller0: entered allmulticast mode [ 141.405074][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 141.490446][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 141.514526][ T8559] hsr_slave_0: left promiscuous mode [ 141.533228][ T8559] hsr_slave_1: left promiscuous mode [ 141.705866][ T8568] netlink: 52 bytes leftover after parsing attributes in process `syz.4.679'. [ 142.123145][ T8586] pim6reg1: entered promiscuous mode [ 142.169393][ T8586] pim6reg1: entered allmulticast mode [ 142.265236][ T8577] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.308137][ T8595] macsec1: entered allmulticast mode [ 142.314699][ T8595] macsec0: entered allmulticast mode [ 142.507507][ T8610] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 142.719531][ T8627] netlink: 'syz.2.694': attribute type 3 has an invalid length. [ 143.097390][ T8639] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 144.100208][ T8687] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 144.149954][ T25] block nbd4: Possible stuck request ffff888024f25080: control (read@0,1024B). Runtime 60 seconds [ 144.161295][ T25] block nbd4: Possible stuck request ffff888024f25240: control (read@1024,1024B). Runtime 60 seconds [ 144.172316][ T25] block nbd4: Possible stuck request ffff888024f25400: control (read@2048,1024B). Runtime 60 seconds [ 144.183549][ T25] block nbd4: Possible stuck request ffff888024f255c0: control (read@3072,1024B). Runtime 60 seconds [ 144.551173][ T8712] pim6reg: entered allmulticast mode [ 144.646103][ T8703] pim6reg: left allmulticast mode [ 144.727092][ T8718] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 144.890426][ T8730] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 144.968422][ T8733] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 144.987633][ T8734] netlink: 'syz.3.725': attribute type 4 has an invalid length. [ 144.995650][ T8734] __nla_validate_parse: 7 callbacks suppressed [ 144.995668][ T8734] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.725'. [ 145.022278][ T8738] netlink: 80 bytes leftover after parsing attributes in process `syz.2.727'. [ 145.031650][ T8738] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 145.534627][ T8763] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 145.583710][ T8763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.010695][ T8793] tipc: Failed to remove unknown binding: 66,1,1/0:2839203196/2839203198 [ 146.021537][ T8793] tipc: Failed to remove unknown binding: 66,1,1/0:2839203196/2839203198 [ 146.031002][ T8793] tipc: Failed to remove unknown binding: 66,1,1/0:2839203196/2839203198 [ 146.120645][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 146.369220][ T8800] team0 (unregistering): Port device team_slave_0 removed [ 146.382140][ T8800] team0 (unregistering): Port device team_slave_1 removed [ 146.657498][ T8825] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 146.953755][ T8832] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 147.067801][ T8838] netlink: 'syz.1.753': attribute type 8 has an invalid length. [ 147.164973][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.246397][ T8845] syzkaller0: entered promiscuous mode [ 147.259045][ T8845] syzkaller0: entered allmulticast mode [ 147.582495][ T8869] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.591979][ T8868] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.931841][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 148.001098][ T8889] FAULT_INJECTION: forcing a failure. [ 148.001098][ T8889] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.019823][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) [ 148.019850][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.019860][ T8889] Call Trace: [ 148.019867][ T8889] [ 148.019875][ T8889] dump_stack_lvl+0x189/0x250 [ 148.019902][ T8889] ? __pfx____ratelimit+0x10/0x10 [ 148.019926][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.019946][ T8889] ? __pfx__printk+0x10/0x10 [ 148.019973][ T8889] ? fs_reclaim_acquire+0x7d/0x100 [ 148.020008][ T8889] should_fail_ex+0x414/0x560 [ 148.020035][ T8889] prepare_alloc_pages+0x213/0x610 [ 148.020069][ T8889] __alloc_frozen_pages_noprof+0x123/0x370 [ 148.020101][ T8889] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.020144][ T8889] ? policy_nodemask+0x27c/0x720 [ 148.020175][ T8889] alloc_pages_mpol+0x232/0x4a0 [ 148.020208][ T8889] alloc_pages_noprof+0xa9/0x190 [ 148.020236][ T8889] tls_strp_read_copy+0x340/0x9a0 [ 148.020270][ T8889] ? __pfx_tls_strp_read_copy+0x10/0x10 [ 148.020302][ T8889] ? __asan_memcpy+0x40/0x70 [ 148.020325][ T8889] ? skb_copy_header+0x2e/0x2c0 [ 148.020354][ T8889] tls_strp_check_rcv+0x9f2/0xe30 [ 148.020391][ T8889] ? __pfx_tls_strp_check_rcv+0x10/0x10 [ 148.020427][ T8889] ? __local_bh_enable_ip+0x12d/0x1c0 [ 148.020446][ T8889] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 148.020466][ T8889] ? tls_setsockopt+0x1349/0x1600 [ 148.020495][ T8889] ? update_sk_prot+0x18c/0x2f0 [ 148.020524][ T8889] tls_setsockopt+0x13da/0x1600 [ 148.020562][ T8889] ? __pfx_tls_setsockopt+0x10/0x10 [ 148.020586][ T8889] ? aa_sk_perm+0x7ee/0x920 [ 148.020626][ T8889] ? aa_sock_opt_perm+0xff/0x1a0 [ 148.020646][ T8889] ? sock_common_setsockopt+0x36/0xc0 [ 148.020668][ T8889] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 148.020694][ T8889] do_sock_setsockopt+0x17c/0x1b0 [ 148.020726][ T8889] __x64_sys_setsockopt+0x13f/0x1b0 [ 148.020760][ T8889] do_syscall_64+0xfa/0xf80 [ 148.020785][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.020803][ T8889] ? clear_bhb_loop+0x60/0xb0 [ 148.020827][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.020842][ T8889] RIP: 0033:0x7fa18438f749 [ 148.020861][ T8889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.020876][ T8889] RSP: 002b:00007fa1852b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.020898][ T8889] RAX: ffffffffffffffda RBX: 00007fa1845e5fa0 RCX: 00007fa18438f749 [ 148.020911][ T8889] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 148.020922][ T8889] RBP: 00007fa1852b5090 R08: 0000000000000028 R09: 0000000000000000 [ 148.020933][ T8889] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 148.020944][ T8889] R13: 00007fa1845e6038 R14: 00007fa1845e5fa0 R15: 00007ffcd6002c58 [ 148.020978][ T8889] [ 148.700594][ T8911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'. [ 148.726806][ T8911] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 149.197610][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 149.359027][ T8936] FAULT_INJECTION: forcing a failure. [ 149.359027][ T8936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.373301][ T8936] CPU: 0 UID: 0 PID: 8936 Comm: syz.4.778 Not tainted syzkaller #0 PREEMPT(full) [ 149.373329][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.373340][ T8936] Call Trace: [ 149.373347][ T8936] [ 149.373355][ T8936] dump_stack_lvl+0x189/0x250 [ 149.373379][ T8936] ? __pfx____ratelimit+0x10/0x10 [ 149.373413][ T8936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.373432][ T8936] ? __pfx__printk+0x10/0x10 [ 149.373459][ T8936] ? fs_reclaim_acquire+0x7d/0x100 [ 149.373493][ T8936] should_fail_ex+0x414/0x560 [ 149.373520][ T8936] prepare_alloc_pages+0x213/0x610 [ 149.373556][ T8936] __alloc_frozen_pages_noprof+0x123/0x370 [ 149.373588][ T8936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.373625][ T8936] ? policy_nodemask+0x27c/0x720 [ 149.373658][ T8936] alloc_pages_mpol+0x232/0x4a0 [ 149.373692][ T8936] alloc_pages_noprof+0xa9/0x190 [ 149.373721][ T8936] tls_strp_read_copy+0x340/0x9a0 [ 149.373758][ T8936] ? __pfx_tls_strp_read_copy+0x10/0x10 [ 149.373790][ T8936] ? __asan_memcpy+0x40/0x70 [ 149.373813][ T8936] ? skb_copy_header+0x2e/0x2c0 [ 149.373843][ T8936] tls_strp_check_rcv+0x9f2/0xe30 [ 149.373881][ T8936] ? __pfx_tls_strp_check_rcv+0x10/0x10 [ 149.373908][ T8936] ? __local_bh_enable_ip+0x12d/0x1c0 [ 149.373927][ T8936] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 149.373948][ T8936] ? tls_setsockopt+0x1349/0x1600 [ 149.373976][ T8936] ? update_sk_prot+0x18c/0x2f0 [ 149.374006][ T8936] tls_setsockopt+0x13da/0x1600 [ 149.374045][ T8936] ? __pfx_tls_setsockopt+0x10/0x10 [ 149.374069][ T8936] ? aa_sk_perm+0x7ee/0x920 [ 149.374111][ T8936] ? aa_sock_opt_perm+0xff/0x1a0 [ 149.374132][ T8936] ? sock_common_setsockopt+0x36/0xc0 [ 149.374154][ T8936] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.374179][ T8936] do_sock_setsockopt+0x17c/0x1b0 [ 149.374212][ T8936] __x64_sys_setsockopt+0x13f/0x1b0 [ 149.374245][ T8936] do_syscall_64+0xfa/0xf80 [ 149.374271][ T8936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.374289][ T8936] ? clear_bhb_loop+0x60/0xb0 [ 149.374313][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.374331][ T8936] RIP: 0033:0x7f146438f749 [ 149.374350][ T8936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.374365][ T8936] RSP: 002b:00007f146523b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.374386][ T8936] RAX: ffffffffffffffda RBX: 00007f14645e5fa0 RCX: 00007f146438f749 [ 149.374408][ T8936] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 149.374420][ T8936] RBP: 00007f146523b090 R08: 0000000000000028 R09: 0000000000000000 [ 149.374431][ T8936] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 149.374442][ T8936] R13: 00007f14645e6038 R14: 00007f14645e5fa0 R15: 00007ffc8e1a65a8 [ 149.374478][ T8936] [ 149.440749][ T8938] netlink: 'syz.1.779': attribute type 2 has an invalid length. [ 149.685766][ T8950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.880778][ T8958] netlink: 'syz.4.783': attribute type 39 has an invalid length. [ 150.208939][ T8974] SET target dimension over the limit! [ 150.348705][ T8982] netlink: 'syz.0.795': attribute type 4 has an invalid length. [ 150.414108][ T8986] netlink: 'syz.3.794': attribute type 12 has an invalid length. [ 150.439127][ T8986] syzkaller1: entered promiscuous mode [ 150.459498][ T8986] syzkaller1: entered allmulticast mode [ 150.483906][ T8991] netlink: 240 bytes leftover after parsing attributes in process `syz.2.796'. [ 150.508998][ T8987] netlink: 229 bytes leftover after parsing attributes in process `syz.4.793'. [ 150.733979][ T9004] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.782583][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 150.822610][ T9014] lo speed is unknown, defaulting to 1000 [ 150.830423][ T9014] lo speed is unknown, defaulting to 1000 [ 150.844360][ T9014] lo speed is unknown, defaulting to 1000 [ 150.868456][ T9004] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.908143][ T9014] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.960806][ T9004] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.995485][ T9014] lo speed is unknown, defaulting to 1000 [ 151.015458][ T9014] lo speed is unknown, defaulting to 1000 [ 151.026987][ T9014] lo speed is unknown, defaulting to 1000 [ 151.037058][ T9004] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.058340][ T9014] lo speed is unknown, defaulting to 1000 [ 151.067302][ T9014] lo speed is unknown, defaulting to 1000 [ 151.233166][ T9025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.806'. [ 151.252382][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.268219][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.315222][ T5089] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.351594][ T5089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.369877][ T9025] tipc: Enabling of bearer rejected, already enabled [ 151.514828][ T9033] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 151.529134][ T9033] pim6reg1: linktype set to 805 [ 151.546015][ T9037] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 151.560695][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 151.571820][ T9036] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 151.589962][ T9036] pim6reg1: linktype set to 805 [ 151.633761][ T9031] netlink: 84 bytes leftover after parsing attributes in process `syz.4.808'. [ 151.643663][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 151.764747][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 151.821454][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 152.220681][ T9067] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 152.375932][ T9073] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 152.519848][ T9073] bond3: entered promiscuous mode [ 152.557166][ T9073] bond3: entered allmulticast mode [ 152.596571][ T9073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.653790][ T9087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.823'. [ 152.813886][ T9093] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 152.894765][ T9093] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.970149][ T9099] bond4: (slave gretap2): making interface the new active one [ 152.996671][ T9099] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 153.247513][ T9109] netlink: 'syz.3.829': attribute type 7 has an invalid length. [ 153.923998][ T9134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.106961][ T9134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.210072][ T9147] netlink: 'syz.3.843': attribute type 12 has an invalid length. [ 154.302307][ T9134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.488050][ T9156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.507202][ T9134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.682862][ T3437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.746864][ T3437] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.794789][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.839184][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.861157][ T9167] tipc: Enabling of bearer rejected, already enabled [ 154.920629][ T9167] tipc: Resetting bearer [ 155.325018][ T9195] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 155.500627][ T9202] __nla_validate_parse: 8 callbacks suppressed [ 155.500648][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.859'. [ 155.628838][ T9211] netlink: 'syz.0.861': attribute type 5 has an invalid length. [ 155.638090][ T9211] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.861'. [ 155.691910][ T9213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.862'. [ 155.708282][ T9213] netlink: 43 bytes leftover after parsing attributes in process `syz.4.862'. [ 155.721808][ T9213] netlink: 'syz.4.862': attribute type 6 has an invalid length. [ 155.754730][ T9213] netlink: 43 bytes leftover after parsing attributes in process `syz.4.862'. [ 156.155269][ T9241] Cannot find del_set index 2 as target [ 156.184368][ T9241] netlink: 'syz.4.868': attribute type 9 has an invalid length. [ 156.686492][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 156.719479][ T9265] netlink: 64 bytes leftover after parsing attributes in process `syz.4.876'. [ 156.820454][ T9279] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 156.833927][ T9279] netlink: 224 bytes leftover after parsing attributes in process `syz.2.875'. [ 156.844127][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 157.127097][ T9290] nbd: must specify a size in bytes for the device [ 157.207812][ T9299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.884'. [ 157.313571][ T9301] lo speed is unknown, defaulting to 1000 [ 157.541839][ T9312] lo speed is unknown, defaulting to 1000 [ 158.264607][ T9351] openvswitch: netlink: Duplicate key (type 21). [ 158.600199][ T9369] batadv1: entered allmulticast mode [ 158.607292][ T9369] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.641543][ T9369] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 158.694371][ T9370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.804574][ T9376] bond0: option miimon: invalid value (18446744072730617911) [ 158.821022][ T9376] bond0: option miimon: allowed values 0 - 2147483647 [ 159.174006][ T9392] netlink: 'syz.2.910': attribute type 32 has an invalid length. [ 159.283878][ T9395] No such timeout policy "syz0" [ 159.315649][ T9399] netlink: 'syz.2.912': attribute type 13 has an invalid length. [ 159.378007][ T9404] SET target dimension over the limit! [ 159.578587][ T9399] tipc: Resetting bearer [ 159.623307][ T9401] netlink: 'syz.1.914': attribute type 29 has an invalid length. [ 159.638909][ T3437] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.658535][ T3437] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.668224][ T3437] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.677509][ T3437] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.688579][ T9406] netlink: 'syz.1.914': attribute type 29 has an invalid length. [ 159.744313][ T3437] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.763340][ T3437] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.981226][ T9424] lo speed is unknown, defaulting to 1000 [ 159.996692][ T9425] lo speed is unknown, defaulting to 1000 [ 160.149505][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 160.452821][ T9464] geneve2: entered promiscuous mode [ 160.534367][ T9466] syzkaller0: entered promiscuous mode [ 160.540132][ T9466] syzkaller0: entered allmulticast mode [ 160.690576][ T9476] netlink: 'syz.2.931': attribute type 142 has an invalid length. [ 161.095116][ T9492] tc_dump_action: action bad kind [ 161.406178][ T9517] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 161.446035][ T9510] __nla_validate_parse: 12 callbacks suppressed [ 161.446077][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 161.467198][ T9510] netlink: 'syz.1.942': attribute type 7 has an invalid length. [ 161.475654][ T9510] netlink: 'syz.1.942': attribute type 8 has an invalid length. [ 161.483830][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 161.572734][ T9522] bridge0: left promiscuous mode [ 161.588228][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.596421][ T9522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 161.629948][ T5846] lo speed is unknown, defaulting to 1000 [ 161.637306][ T5846] syz2: Port: 1 Link ACTIVE [ 161.694963][ T9528] bond2 (unregistering): Released all slaves [ 161.840347][ T9535] netlink: 'syz.2.949': attribute type 12 has an invalid length. [ 161.852693][ T9535] netlink: 'syz.2.949': attribute type 12 has an invalid length. [ 161.898849][ T9539] macsec2: entered promiscuous mode [ 161.919514][ T9539] hsr0: entered promiscuous mode [ 161.930447][ T9539] hsr0: left promiscuous mode [ 161.948255][ T9548] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 162.007347][ T9548] bond4: entered promiscuous mode [ 162.014669][ T9548] bond4: entered allmulticast mode [ 162.025885][ T9548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.074187][ T9550] erspan1: entered allmulticast mode [ 162.105882][ T9550] bond4: (slave erspan1): making interface the new active one [ 162.114883][ T9550] erspan1: entered promiscuous mode [ 162.123054][ T9550] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 162.467286][ T9589] netlink: 312 bytes leftover after parsing attributes in process `syz.1.964'. [ 162.487599][ T9587] bridge1: entered promiscuous mode [ 162.501996][ T9587] bridge1: entered allmulticast mode [ 162.659645][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 163.062806][ T9593] pimreg3: entered allmulticast mode [ 163.120991][ T9613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.128655][ T9613] IPv6: NLM_F_CREATE should be set when creating new route [ 163.135946][ T9613] IPv6: NLM_F_CREATE should be set when creating new route [ 163.250663][ T9617] netlink: 300 bytes leftover after parsing attributes in process `syz.1.969'. [ 163.473860][ T9630] macvtap2: entered promiscuous mode [ 163.479230][ T9630] macvtap2: entered allmulticast mode [ 163.775938][ T9644] lo speed is unknown, defaulting to 1000 [ 164.221101][ T9661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.114936][ T9690] lo speed is unknown, defaulting to 1000 [ 165.274715][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 165.667636][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 165.891611][ T9723] lo speed is unknown, defaulting to 1000 [ 165.925067][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.996'. [ 166.216885][ T9757] lo: entered allmulticast mode [ 166.241800][ T9744] pimreg: entered allmulticast mode [ 166.362968][ T9743] lo: left allmulticast mode [ 166.367985][ T9743] pimreg: left allmulticast mode [ 166.474823][ T9765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1005'. [ 166.576859][ T9775] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.595279][ T9778] syzkaller1: entered promiscuous mode [ 166.625113][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1008'. [ 166.635121][ T9778] syzkaller1: entered allmulticast mode [ 166.636743][ T9777] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1009'. [ 166.660141][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1008'. [ 166.701856][ T9779] validate_nla: 1 callbacks suppressed [ 166.701875][ T9779] netlink: 'syz.4.1008': attribute type 27 has an invalid length. [ 166.752930][ T9783] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1011'. [ 166.775692][ T9783] .70·: renamed from hsr0 (while UP) [ 166.786512][ T9783] .70·: entered allmulticast mode [ 166.791709][ T9783] hsr_slave_0: entered allmulticast mode [ 166.797687][ T9783] hsr_slave_1: entered allmulticast mode [ 166.805582][ T9783] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 166.850808][ T9784] wg1 speed is unknown, defaulting to 1000 [ 166.858038][ T9784] wg1 speed is unknown, defaulting to 1000 [ 166.872424][ T9775] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.924038][ T9791] xt_TCPMSS: Only works on TCP SYN packets [ 166.930508][ T9784] wg1 speed is unknown, defaulting to 1000 [ 166.975865][ T9775] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.008864][ T9784] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 167.044740][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 167.058033][ T9775] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.085523][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 167.142321][ T9784] wg1 speed is unknown, defaulting to 1000 [ 167.195140][ T9784] wg1 speed is unknown, defaulting to 1000 [ 167.218352][ T9784] wg1 speed is unknown, defaulting to 1000 [ 167.218372][ T5089] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.244810][ T9799] xt_CT: No such helper "netbios-ns" [ 167.254587][ T9784] wg1 speed is unknown, defaulting to 1000 [ 167.269388][ T9798] lo speed is unknown, defaulting to 1000 [ 167.288232][ T9784] wg1 speed is unknown, defaulting to 1000 [ 167.288249][ T5089] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.303755][ T9784] wg1 speed is unknown, defaulting to 1000 [ 167.329155][ T9796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.395830][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.466272][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.655526][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 167.903890][ T9824] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 168.183084][ T9859] netlink: 'syz.3.1032': attribute type 13 has an invalid length. [ 168.211545][ T9859] netlink: 'syz.3.1032': attribute type 17 has an invalid length. [ 168.296528][ T9864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 168.455647][ T9874] bridge0: port 1(dummy0) entered blocking state [ 168.471461][ T9874] bridge0: port 1(dummy0) entered forwarding state [ 168.538701][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.568406][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.599823][ T9874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.237787][ T9915] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 169.296829][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 169.324153][ T9915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.331082][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 169.406772][ T9915] erspan0: entered allmulticast mode [ 169.440904][ T9915] bond4: (slave erspan0): making interface the new active one [ 169.451117][ T9915] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 169.522299][ T9938] netem: change failed [ 169.556884][ T9938] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 169.569218][ T9934] lo speed is unknown, defaulting to 1000 [ 169.580645][ T9934] wg1 speed is unknown, defaulting to 1000 [ 169.588153][ T9938] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 170.222121][ T9977] netlink: 'syz.2.1057': attribute type 30 has an invalid length. [ 170.379650][ T9977] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 170.391881][ T9977] bond5 (unregistering): Released all slaves [ 170.574408][ T9994] netlink: 'syz.3.1061': attribute type 16 has an invalid length. [ 170.582799][ T9994] netlink: 'syz.3.1061': attribute type 3 has an invalid length. [ 171.432922][T10018] tipc: Resetting bearer [ 171.489935][ T5894] lo speed is unknown, defaulting to 1000 [ 171.496590][ T5894] syz2: Port: 1 Link DOWN [ 171.619905][T10042] nbd: error processing sock list [ 171.689526][T10048] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.721430][T10048] smc: net device bond0 erased user defined pnetid SYZ0 [ 171.768690][T10058] __nla_validate_parse: 8 callbacks suppressed [ 171.768711][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 171.788615][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 171.808264][T10058] validate_nla: 2 callbacks suppressed [ 171.808284][T10058] netlink: 'syz.3.1080': attribute type 14 has an invalid length. [ 171.934586][T10065] netlink: 'syz.2.1083': attribute type 6 has an invalid length. [ 171.946198][T10065] xt_hashlimit: max too large, truncated to 1048576 [ 171.989577][T10065] ieee802154 phy1 wpan1: encryption failed: -22 [ 172.030032][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 172.261765][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1086'. [ 172.300487][T10075] vlan5: entered promiscuous mode [ 172.305588][T10075] bond0: entered promiscuous mode [ 172.329503][T10075] bond_slave_0: entered promiscuous mode [ 172.360914][T10075] bond_slave_1: entered promiscuous mode [ 172.366886][T10075] dummy0: entered promiscuous mode [ 172.629780][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 172.647547][T10105] netlink: 'syz.3.1093': attribute type 2 has an invalid length. [ 172.695220][T10105] lo speed is unknown, defaulting to 1000 [ 172.821435][T10117] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 172.887350][T10105] wg1 speed is unknown, defaulting to 1000 [ 173.030917][T10129] netlink: zone id is out of range [ 173.047671][T10129] netlink: zone id is out of range [ 173.068122][T10129] netlink: zone id is out of range [ 173.084117][T10129] netlink: zone id is out of range [ 173.115106][T10129] netlink: zone id is out of range [ 173.120489][T10129] netlink: zone id is out of range [ 173.125856][T10129] netlink: zone id is out of range [ 173.131156][T10129] netlink: zone id is out of range [ 173.136448][T10129] netlink: zone id is out of range [ 173.141899][T10129] netlink: zone id is out of range [ 173.413992][T10144] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1102'. [ 173.453380][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'. [ 173.718134][T10154] netlink: 'syz.1.1109': attribute type 27 has an invalid length. [ 174.075551][T10182] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1117'. [ 174.206146][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'. [ 174.219967][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 174.227711][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 174.235630][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 174.243033][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 174.246209][T10193] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1119'. [ 174.259970][ T25] block nbd4: Dead connection, failed to find a fallback [ 174.692941][ T30] audit: type=1804 audit(1765625431.213:2): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1126" name="/newroot/221/cgroup.controllers" dev="tmpfs" ino=1148 res=1 errno=0 [ 174.717734][T10224] netlink: 'syz.0.1127': attribute type 7 has an invalid length. [ 174.772939][ T30] audit: type=1800 audit(1765625431.213:3): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1126" name="cgroup.controllers" dev="tmpfs" ino=1148 res=0 errno=0 [ 174.935262][T10235] lo speed is unknown, defaulting to 1000 [ 174.957766][T10235] wg1 speed is unknown, defaulting to 1000 [ 175.009495][T10239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 175.017654][T10239] team0: Device ipvlan2 is already an upper device of the team interface [ 175.402324][T10259] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 175.418619][T10259] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 175.436324][T10260] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 175.466418][T10260] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 175.528706][T10266] netlink: 'syz.2.1136': attribute type 1 has an invalid length. [ 175.700779][T10266] bond5: entered promiscuous mode [ 175.706838][T10266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.765136][T10280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.773245][T10280] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 175.784450][T10280] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 175.802757][T10280] bond5: (slave wireguard0): making interface the new active one [ 175.828199][T10280] wireguard0: entered promiscuous mode [ 175.836110][T10280] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 175.870368][T10275] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 175.886818][T10275] bond5: (slave wireguard1): Enslaving as a backup interface with an up link [ 175.964772][T10260] lo speed is unknown, defaulting to 1000 [ 175.983924][T10260] wg1 speed is unknown, defaulting to 1000 [ 175.984137][T10268] lo speed is unknown, defaulting to 1000 [ 176.048798][T10292] lo speed is unknown, defaulting to 1000 [ 176.059067][T10268] wg1 speed is unknown, defaulting to 1000 [ 176.083964][T10292] wg1 speed is unknown, defaulting to 1000 [ 176.569033][T10324] tipc: Enabled bearer , priority 10 [ 177.212384][T10350] __nla_validate_parse: 7 callbacks suppressed [ 177.212405][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 177.416290][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 177.489076][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'. [ 177.527773][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 177.540952][T10360] validate_nla: 2 callbacks suppressed [ 177.540972][T10360] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 177.567341][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 177.641011][T10365] sctp: [Deprecated]: syz.2.1160 (pid 10365) Use of int in maxseg socket option. [ 177.641011][T10365] Use struct sctp_assoc_value instead [ 177.726716][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 177.757421][T10367] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1162'. [ 177.769330][T10367] nbd: couldn't find a device at index 0 [ 177.780263][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 177.880813][T10374] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 178.799097][T10421] lo speed is unknown, defaulting to 1000 [ 178.807562][T10421] wg1 speed is unknown, defaulting to 1000 [ 178.893438][T10423] lec:lec_atm_close: lec0: Shut down! [ 178.906885][T10425] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 179.106105][T10432] net_ratelimit: 35 callbacks suppressed [ 179.106126][T10432] netlink: zone id is out of range [ 179.117557][T10432] netlink: zone id is out of range [ 179.123198][T10432] netlink: zone id is out of range [ 179.128926][T10432] netlink: zone id is out of range [ 179.134724][T10432] netlink: zone id is out of range [ 179.142021][T10432] netlink: zone id is out of range [ 179.148000][T10432] netlink: zone id is out of range [ 179.154539][T10432] netlink: zone id is out of range [ 179.162336][T10432] netlink: zone id is out of range [ 179.173285][T10432] netlink: zone id is out of range [ 179.537326][T10438] syzkaller1: entered promiscuous mode [ 179.559996][T10438] syzkaller1: entered allmulticast mode [ 179.613112][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 179.721284][T10450] dummy0: entered promiscuous mode [ 179.737578][T10450] dummy0: left promiscuous mode [ 179.850963][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1185'. [ 179.896218][T10455] lo speed is unknown, defaulting to 1000 [ 180.007821][T10455] wg1 speed is unknown, defaulting to 1000 [ 180.872819][T10508] netlink: 'syz.0.1194': attribute type 10 has an invalid length. [ 180.912722][T10509] lo speed is unknown, defaulting to 1000 [ 180.921909][T10509] wg1 speed is unknown, defaulting to 1000 [ 181.005265][T10510] tipc: Enabled bearer , priority 0 [ 181.041712][T10510] syzkaller0: entered promiscuous mode [ 181.058001][T10510] syzkaller0: entered allmulticast mode [ 181.208103][T10510] tipc: Resetting bearer [ 181.346748][T10507] tipc: Resetting bearer [ 181.456226][T10507] tipc: Disabling bearer [ 182.116735][T10571] netlink: 'syz.3.1210': attribute type 2 has an invalid length. [ 182.339195][T10580] __nla_validate_parse: 4 callbacks suppressed [ 182.339214][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 182.361065][T10579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 182.363035][T10559] batadv0: entered promiscuous mode [ 182.376144][T10559] macvtap2: entered promiscuous mode [ 182.384933][T10559] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 182.584443][T10592] netlink: 'syz.1.1216': attribute type 6 has an invalid length. [ 182.616588][T10592] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1216'. [ 182.626219][T10592] nbd: couldn't find a device at index 0 [ 182.746780][ T6502] IPVS: starting estimator thread 0... [ 182.783445][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 182.784107][T10603] bond0: (slave bond_slave_0): Releasing backup interface [ 182.839536][T10605] IPVS: using max 25 ests per chain, 60000 per kthread [ 182.870941][T10603] bond0: (slave bond_slave_1): Releasing backup interface [ 182.911150][T10603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.918624][T10603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.943489][T10603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.951945][T10603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.993997][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 183.068265][T10613] ip6tnl1: entered allmulticast mode [ 183.096875][T10612] syzkaller0: entered promiscuous mode [ 183.126497][T10612] syzkaller0: entered allmulticast mode [ 183.215286][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 183.548218][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 183.564552][T10655] netlink: 'syz.2.1230': attribute type 12 has an invalid length. [ 183.586374][T10655] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1230'. [ 183.619792][T10658] tipc: Enabled bearer , priority 0 [ 183.656275][T10644] tipc: Resetting bearer [ 183.750776][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 183.954190][T10663] syzkaller0: entered promiscuous mode [ 183.971105][T10663] syzkaller0: entered allmulticast mode [ 184.201171][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 184.262536][T10691] nbd: nbd4 already in use [ 185.930024][ T5894] tipc: Node number set to 3652415808 [ 185.973970][T10716] ip6gretap2: entered promiscuous mode [ 185.993681][T10716] ip6gretap2: entered allmulticast mode [ 186.121318][T10727] netlink: 'syz.2.1248': attribute type 49 has an invalid length. [ 187.250464][T10774] lo speed is unknown, defaulting to 1000 [ 187.277711][T10774] wg1 speed is unknown, defaulting to 1000 [ 187.433921][T10782] veth0: entered promiscuous mode [ 187.452608][T10782] __nla_validate_parse: 2 callbacks suppressed [ 187.452623][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 187.763998][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 187.883670][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 187.966783][T10803] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1268'. [ 188.133976][T10812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1272'. [ 188.167298][T10812] tipc: Enabled bearer , priority 0 [ 188.277403][T10812] syzkaller0: entered promiscuous mode [ 188.293700][T10812] syzkaller0: entered allmulticast mode [ 188.311188][T10812] tipc: Resetting bearer [ 188.317353][T10819] tipc: Enabling of bearer rejected, already enabled [ 188.416794][T10811] tipc: Resetting bearer [ 188.479836][T10837] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1276'. [ 188.583188][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 188.596059][T10839] netlink: 'syz.4.1277': attribute type 13 has an invalid length. [ 188.605019][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 188.742054][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 189.880306][T10811] tipc: Disabling bearer [ 189.900202][T10851] sit0: entered promiscuous mode [ 189.913115][T10851] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 189.939738][T10851] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1277'. [ 190.113839][ T5894] tipc: Node number set to 2380574855 [ 190.120929][ T61] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.159555][ T61] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.178059][ T61] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.206115][ T61] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.255883][T10930] netlink: 'syz.3.1304': attribute type 11 has an invalid length. [ 191.325346][T10932] lo speed is unknown, defaulting to 1000 [ 191.353180][T10932] wg1 speed is unknown, defaulting to 1000 [ 191.913050][T10959] lo speed is unknown, defaulting to 1000 [ 191.930355][T10959] wg1 speed is unknown, defaulting to 1000 [ 192.432974][T10972] ip6gretap0: entered promiscuous mode [ 192.441496][T10972] erspan0: entered promiscuous mode [ 192.447076][T10972] erspan0: left promiscuous mode [ 192.452852][T10972] ip6gretap0: left promiscuous mode [ 192.655961][T10978] __nla_validate_parse: 6 callbacks suppressed [ 192.655983][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 192.695029][T10978] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1321'. [ 192.722210][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 192.884100][T10985] pim6reg1: entered allmulticast mode [ 193.187425][T10997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1328'. [ 193.197859][T10997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1328'. [ 193.356100][T11006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1330'. [ 193.366461][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 193.375634][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 193.418157][T11012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1330'. [ 193.468754][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 193.943837][T11032] xt_hashlimit: size too large, truncated to 1048576 [ 194.073394][ T1304] net_ratelimit: 44 callbacks suppressed [ 194.073415][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.088305][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.493935][T11047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.635779][T11054] syzkaller0: entered promiscuous mode [ 194.663287][T11054] syzkaller0: entered allmulticast mode [ 195.097772][T11076] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 195.127535][T11075] lo speed is unknown, defaulting to 1000 [ 195.158591][T11075] wg1 speed is unknown, defaulting to 1000 [ 195.301583][T11090] openvswitch: netlink: Missing valid actions attribute. [ 195.323467][T11090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.696738][T11099] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 195.719730][T11104] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 195.818851][T11104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.959821][T11119] pimreg3: entered allmulticast mode [ 196.064882][T11122] syzkaller0: entered promiscuous mode [ 196.080310][T11122] syzkaller0: entered allmulticast mode [ 196.097440][T11122] tipc: Resetting bearer [ 196.131979][T11122] tipc: Enabling of bearer rejected, already enabled [ 196.142757][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 196.142805][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 196.148808][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 196.164759][T11124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.205246][T11121] tipc: Resetting bearer [ 196.454370][T11144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.739978][T11161] lo speed is unknown, defaulting to 1000 [ 196.758868][T11161] wg1 speed is unknown, defaulting to 1000 [ 196.764580][T11164] lo speed is unknown, defaulting to 1000 [ 196.803550][T11164] wg1 speed is unknown, defaulting to 1000 [ 197.053048][ T1159] tipc: Resetting bearer [ 197.095264][T11175] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 197.684562][T11214] openvswitch: netlink: Message has 8 unknown bytes. [ 197.709427][T11214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.953719][T11220] lo speed is unknown, defaulting to 1000 [ 198.006918][T11220] wg1 speed is unknown, defaulting to 1000 [ 198.170307][T11240] __nla_validate_parse: 39 callbacks suppressed [ 198.170328][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 198.220987][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 198.386579][T11253] openvswitch: netlink: Message has 28 unknown bytes. [ 198.656730][T11257] bond6: option arp_validate: invalid value (18446744073491447809) [ 198.672671][T11257] bond6 (unregistering): Released all slaves [ 198.755818][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 198.913054][T11281] netlink: 'syz.3.1402': attribute type 8 has an invalid length. [ 198.990157][T11284] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 199.035061][T11285] netlink: 'syz.4.1403': attribute type 12 has an invalid length. [ 199.140129][T11285] netlink: 'syz.4.1403': attribute type 4 has an invalid length. [ 199.191781][T11289] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 199.218053][T11289] netlink: 16114 bytes leftover after parsing attributes in process `syz.2.1407'. [ 199.244557][T11291] erspan0: left allmulticast mode [ 199.260018][T11291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.321737][T11291] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1405'. [ 199.578376][T11303] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1410'. [ 199.616871][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 199.666731][T11308] IPVS: length: 186 != 73752 [ 199.697909][T11311] netlink: 584 bytes leftover after parsing attributes in process `syz.2.1410'. [ 200.021146][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 200.146579][T11339] bridge7: entered allmulticast mode [ 200.522707][T11355] SET target dimension over the limit! [ 200.633618][T11356] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 200.792456][T11352] wg1: entered promiscuous mode [ 200.797590][T11352] wg1: entered allmulticast mode [ 200.971870][T11369] SET target dimension over the limit! [ 201.008116][T11372] openvswitch: netlink: IPv4 tunnel dst address is zero [ 201.009410][T11371] openvswitch: netlink: IPv4 tunnel dst address is zero [ 201.161472][T11378] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1423'. [ 201.352362][T11388] netlink: 'syz.4.1426': attribute type 8 has an invalid length. [ 201.523376][T11378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.532750][T11378] bond_slave_0: left promiscuous mode [ 201.551811][T11378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.564540][T11378] bond_slave_1: left promiscuous mode [ 201.593700][T11378] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 201.603589][T11378] dummy0: left promiscuous mode [ 201.616342][T11378] bond0 (unregistering): Released all slaves [ 201.758253][T11386] lo speed is unknown, defaulting to 1000 [ 201.782014][T11386] wg1 speed is unknown, defaulting to 1000 [ 202.562439][T11415] netlink: 'syz.1.1431': attribute type 2 has an invalid length. [ 202.575993][T11416] netlink: 'syz.1.1431': attribute type 2 has an invalid length. [ 202.648964][T11426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.664044][T11426] netlink: 'syz.4.1432': attribute type 2 has an invalid length. [ 202.673256][T11427] No such timeout policy "syz0" [ 202.720143][T11425] netlink: 'syz.2.1434': attribute type 5 has an invalid length. [ 202.846024][T11433] lo speed is unknown, defaulting to 1000 [ 202.886835][T11435] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 202.940939][T11433] wg1 speed is unknown, defaulting to 1000 [ 202.995019][T11437] tipc: Enabling of bearer rejected, already enabled [ 203.036744][T11437] SET target dimension over the limit! [ 203.249072][T11444] netlink: 'syz.2.1439': attribute type 1 has an invalid length. [ 203.310062][T11444] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.397739][T11448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.410289][T11448] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 203.425969][T11448] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 203.456634][T11453] netlink: 'syz.3.1441': attribute type 2 has an invalid length. [ 203.625096][T11457] syzkaller0: entered promiscuous mode [ 203.639393][T11457] syzkaller0: entered allmulticast mode [ 203.665983][T11453] : entered promiscuous mode [ 203.839966][T11471] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 203.892188][T11469] lo speed is unknown, defaulting to 1000 [ 203.960279][T11469] wg1 speed is unknown, defaulting to 1000 [ 203.982154][T11481] batman_adv: batadv0: Adding interface: ip6gretap1 [ 203.997531][T11481] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.028947][T11481] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 204.128938][T11490] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 204.232408][T11484] bridge0: entered promiscuous mode [ 204.238392][T11484] macsec2: entered promiscuous mode [ 204.245788][T11484] bridge0: port 3(macsec2) entered blocking state [ 204.254560][T11484] bridge0: port 3(macsec2) entered disabled state [ 204.270514][T11484] macsec2: entered allmulticast mode [ 204.276640][T11484] bridge0: entered allmulticast mode [ 204.298180][T11484] macsec2: left allmulticast mode [ 204.330534][T11484] bridge0: left allmulticast mode [ 204.362745][T11484] bridge0: left promiscuous mode [ 204.377335][T11476] __nla_validate_parse: 36 callbacks suppressed [ 204.377355][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'. [ 204.436089][T11501] bridge_slave_0: left allmulticast mode [ 204.442093][T11501] bridge_slave_0: left promiscuous mode [ 204.448222][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.499613][T11501] bridge_slave_1: left allmulticast mode [ 204.505883][T11501] bridge_slave_1: left promiscuous mode [ 204.512995][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.555352][T11501] team0: Port device team_slave_0 removed [ 204.602119][T11501] team0: Port device team_slave_1 removed [ 204.622460][T11501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.376056][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adf9000: rx timeout, send abort [ 205.417197][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 205.422081][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1460'. [ 205.437872][T11533] netlink: 'syz.3.1459': attribute type 7 has an invalid length. [ 205.449635][T11533] netlink: 'syz.3.1459': attribute type 8 has an invalid length. [ 205.460042][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1459'. [ 205.488027][T11528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1460'. [ 205.639312][T11543] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1464'. [ 205.674962][T11546] netlink: 'syz.1.1465': attribute type 11 has an invalid length. [ 205.797382][ T5894] IPVS: starting estimator thread 0... [ 205.806304][T11555] validate_nla: 2 callbacks suppressed [ 205.806307][T11556] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 205.806324][T11555] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 205.847933][T11561] netlink: 'syz.1.1469': attribute type 1 has an invalid length. [ 205.884337][T11561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.885677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806adf9000: abort rx timeout. Force session deactivation [ 205.891475][T11557] IPVS: using max 32 ests per chain, 76800 per kthread [ 205.943945][T11556] bond0: (slave gretap2): making interface the new active one [ 205.958089][T11556] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 205.990672][T11567] bridge0: port 1(dummy0) entered disabled state [ 205.998163][T11567] dummy0: left allmulticast mode [ 206.029351][T11567] dummy0: left promiscuous mode [ 206.034542][T11567] bridge0: port 1(dummy0) entered disabled state [ 206.047634][T11572] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 206.072216][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'. [ 206.104504][T11567] bond5: (slave dummy0): making interface the new active one [ 206.153083][T11572] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 206.173086][T11567] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 206.322597][T11588] netlink: 'syz.2.1474': attribute type 12 has an invalid length. [ 206.343509][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 206.367852][T11585] netlink: 'syz.2.1474': attribute type 12 has an invalid length. [ 206.381796][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 206.391543][T11585] netlink: 'syz.2.1474': attribute type 12 has an invalid length. [ 206.470130][T11596] tipc: Enabled bearer , priority 0 [ 206.667950][T11596] syzkaller0: entered promiscuous mode [ 206.674840][T11596] syzkaller0: entered allmulticast mode [ 206.731139][T11596] tipc: Resetting bearer [ 206.792205][T11596] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 206.856649][T11604] syzkaller0: entered promiscuous mode [ 206.863676][T11604] syzkaller0: entered allmulticast mode [ 206.890675][T11611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.906216][T11594] tipc: Resetting bearer [ 206.913757][T11611] xt_connbytes: Forcing CT accounting to be enabled [ 206.932251][T11594] tipc: Disabling bearer [ 206.981445][T11616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1482'. [ 206.986449][T11611] xt_hashlimit: invalid rate [ 206.998231][T11611] x_tables: duplicate underflow at hook 2 [ 207.080069][T11613] ip6erspan0: entered promiscuous mode [ 207.736919][T11651] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.670251][T11642] tipc: Enabled bearer , priority 0 [ 208.677906][T11644] syzkaller0: entered promiscuous mode [ 208.684156][T11644] syzkaller0: entered allmulticast mode [ 208.726054][T11638] lo speed is unknown, defaulting to 1000 [ 208.764162][T11638] wg1 speed is unknown, defaulting to 1000 [ 208.772501][T11644] tipc: Resetting bearer [ 208.815033][T11644] tipc: Disabling bearer [ 209.030267][T11674] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 209.264935][T11689] bond5: (slave ip_vti0): Device is not bonding slave [ 209.282283][T11689] bond5: option active_slave: invalid value (ip_vti0) [ 209.291977][T11689] bond5 (unregistering): Released all slaves [ 209.503860][T11701] x_tables: duplicate underflow at hook 2 [ 209.553007][ T30] audit: type=1800 audit(1765625466.083:4): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1499" name="memory.events" dev="tmpfs" ino=1480 res=0 errno=0 [ 209.603132][T11711] __nla_validate_parse: 3 callbacks suppressed [ 209.603152][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 209.707226][T11714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1506'. [ 209.723354][T11714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1506'. [ 209.829718][T11718] netlink: 'syz.0.1509': attribute type 39 has an invalid length. [ 209.841331][T11720] netlink: 'syz.0.1509': attribute type 39 has an invalid length. [ 209.983869][T11731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1508'. [ 210.036837][T11736] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1510'. [ 210.088093][T11736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.571028][T11758] x_tables: unsorted entry at hook 1 [ 210.655205][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1521'. [ 210.664706][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 210.678710][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1521'. [ 210.688498][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 210.763069][T11769] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 210.789309][T11769] !: entered promiscuous mode [ 210.797213][T11769] !: left promiscuous mode [ 210.861214][T11771] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1523'. [ 210.887262][T11771] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 210.903769][T11771] openvswitch: netlink: Message has 75 unknown bytes. [ 211.507072][T11798] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 211.933183][T11813] validate_nla: 1 callbacks suppressed [ 211.933207][T11813] netlink: 'syz.0.1530': attribute type 3 has an invalid length. [ 211.992981][T11789] netlink: 'syz.0.1530': attribute type 5 has an invalid length. [ 212.008736][T11817] netlink: 'syz.1.1536': attribute type 29 has an invalid length. [ 212.027797][T11814] netlink: 'syz.4.1528': attribute type 4 has an invalid length. [ 212.028199][ T5996] syz1: Port: 1 Link DOWN [ 212.464670][T11838] x_tables: duplicate underflow at hook 4 [ 212.506562][T11838] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.623517][T11838] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.722817][T11838] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.780476][T11838] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.897965][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.953298][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.982976][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.027023][T11857] tipc: Resetting bearer [ 213.034711][ T5089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.045409][T11859] tipc: Enabling of bearer rejected, already enabled [ 213.155895][T11861] tipc: Resetting bearer [ 213.275618][T11872] netlink: 'syz.3.1553': attribute type 3 has an invalid length. [ 213.770530][T11903] tipc: Enabled bearer , priority 0 [ 213.788596][T11903] syzkaller0: entered promiscuous mode [ 213.800443][T11903] syzkaller0: entered allmulticast mode [ 213.816935][T11903] tipc: Resetting bearer [ 213.835054][T11901] tipc: Resetting bearer [ 213.862127][T11901] tipc: Disabling bearer [ 213.964288][T11906] netlink: 'syz.3.1563': attribute type 1 has an invalid length. [ 214.074670][ T5089] tipc: Resetting bearer [ 214.356954][T11945] netlink: 'syz.2.1572': attribute type 10 has an invalid length. [ 214.737944][T11960] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 214.752186][T11960] bond6 (unregistering): Released all slaves [ 214.789733][T11962] __nla_validate_parse: 7 callbacks suppressed [ 214.789794][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 215.065724][T11974] tipc: Enabling of bearer rejected, already enabled [ 215.367052][T11995] vlan0: entered promiscuous mode [ 215.478591][T11989] lo speed is unknown, defaulting to 1000 [ 215.530016][T11989] wg1 speed is unknown, defaulting to 1000 [ 215.563986][T12006] tipc: Resetting bearer [ 215.597251][T12006] tipc: Enabling of bearer rejected, already enabled [ 215.736066][T12005] tipc: Resetting bearer [ 216.103564][ T77] tipc: Resetting bearer [ 216.160639][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 216.202630][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1592'. [ 216.222107][T12018] syz.0.1592 uses old SIOCAX25GETINFO [ 216.688180][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 216.753923][T12061] IPv6: sit2: Disabled Multicast RS [ 216.819961][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1604'. [ 216.825912][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 216.839572][T12063] netlink: 'syz.3.1604': attribute type 2 has an invalid length. [ 216.847124][T12067] netlink: 'syz.1.1605': attribute type 2 has an invalid length. [ 216.928567][T12067] lo speed is unknown, defaulting to 1000 [ 216.952315][T12067] wg1 speed is unknown, defaulting to 1000 [ 217.233229][T12088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1609'. [ 217.257686][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 217.560756][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 217.569951][T12097] netlink: 'syz.0.1613': attribute type 2 has an invalid length. [ 217.577805][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'. [ 217.592312][T12090] bond7: option arp_validate: invalid value (18446744073491447809) [ 217.604035][T12090] bond7 (unregistering): Released all slaves [ 217.625778][T12097] netlink: 'syz.0.1613': attribute type 58 has an invalid length. [ 218.095025][T12122] netlink: 'syz.4.1622': attribute type 2 has an invalid length. [ 218.312410][T12122] lo speed is unknown, defaulting to 1000 [ 218.333861][T12133] lo speed is unknown, defaulting to 1000 [ 218.335271][T12122] wg1 speed is unknown, defaulting to 1000 [ 218.363422][T12133] wg1 speed is unknown, defaulting to 1000 [ 218.433325][T12140] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 218.446373][T12138] Bluetooth: MGMT ver 1.23 [ 218.851997][T12153] bridge_slave_1: entered promiscuous mode [ 218.992154][T12154] lo speed is unknown, defaulting to 1000 [ 219.010637][T12154] wg1 speed is unknown, defaulting to 1000 [ 219.827443][T12194] __nla_validate_parse: 7 callbacks suppressed [ 219.827464][T12194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1637'. [ 219.885103][T12197] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1638'. [ 220.172120][ T5840] Bluetooth: hci4: link tx timeout [ 220.178365][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.459533][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 220.468065][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 220.677199][T12233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.064859][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 221.156529][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 221.418715][T12273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1651'. [ 221.890399][T12293] lo speed is unknown, defaulting to 1000 [ 221.941451][T12297] lo speed is unknown, defaulting to 1000 [ 221.958515][T12293] wg1 speed is unknown, defaulting to 1000 [ 222.015153][T12297] wg1 speed is unknown, defaulting to 1000 [ 222.222608][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 222.301243][T12315] xt_hashlimit: overflow, try lower: 0/0 [ 222.356653][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 222.377685][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 222.495882][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 222.529870][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 222.580641][T12327] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1665'. [ 223.185606][T12352] sctp: [Deprecated]: syz.2.1670 (pid 12352) Use of int in maxseg socket option. [ 223.185606][T12352] Use struct sctp_assoc_value instead [ 223.403986][T12373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.431635][T12374] tipc: Enabled bearer , priority 0 [ 223.445960][T12374] syzkaller0: entered promiscuous mode [ 223.463698][T12374] syzkaller0: entered allmulticast mode [ 223.488823][T12372] tipc: Enabled bearer , priority 0 [ 223.530406][T12372] syzkaller0: entered promiscuous mode [ 223.546142][T12372] syzkaller0: entered allmulticast mode [ 223.568201][T12374] tipc: Resetting bearer [ 223.576109][T12376] tipc: Enabled bearer , priority 0 [ 223.587779][T12371] tipc: Resetting bearer [ 223.623980][T12371] tipc: Disabling bearer [ 223.635931][T12369] tipc: Resetting bearer [ 223.667463][T12369] tipc: Disabling bearer [ 223.686431][T12376] syzkaller0: entered promiscuous mode [ 223.692225][T12376] syzkaller0: entered allmulticast mode [ 223.774468][T12386] tipc: Resetting bearer [ 223.804100][T12388] tipc: Enabled bearer , priority 0 [ 223.813091][T12375] tipc: Resetting bearer [ 223.843027][T12375] tipc: Disabling bearer [ 223.855223][T12388] syzkaller0: entered promiscuous mode [ 223.861255][T12388] syzkaller0: entered allmulticast mode [ 223.943789][T12390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.956426][T12387] tipc: Resetting bearer [ 224.026889][T12387] tipc: Disabling bearer [ 224.323790][T12409] team1: entered promiscuous mode [ 224.330520][T12409] team1: entered allmulticast mode [ 224.336396][T12409] 8021q: adding VLAN 0 to HW filter on device team1 [ 224.358311][T12414] team2: entered promiscuous mode [ 224.364076][T12414] team2: entered allmulticast mode [ 224.369660][T12414] 8021q: adding VLAN 0 to HW filter on device team2 [ 224.476814][T12416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.484149][T12416] IPv6: NLM_F_CREATE should be set when creating new route [ 224.491449][T12416] IPv6: NLM_F_CREATE should be set when creating new route [ 224.508325][T12416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.604747][T12421] syzkaller0: entered promiscuous mode [ 224.638559][T12421] syzkaller0: entered allmulticast mode [ 224.785419][T12428] netlink: 'syz.4.1690': attribute type 4 has an invalid length. [ 224.796495][T12428] netem: change failed [ 225.356687][T12460] netlink: 'syz.3.1700': attribute type 13 has an invalid length. [ 225.381194][T12460] netlink: 'syz.3.1700': attribute type 17 has an invalid length. [ 225.398792][T12463] __nla_validate_parse: 8 callbacks suppressed [ 225.398813][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 225.459143][T12466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1703'. [ 225.470387][T12460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.502107][T12466] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 225.536496][T12460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.542916][T12459] lo speed is unknown, defaulting to 1000 [ 225.555824][T12459] wg1 speed is unknown, defaulting to 1000 [ 225.580707][T12472] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 225.588579][T12472] netlink: 'syz.1.1705': attribute type 2 has an invalid length. [ 225.604695][T12474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1704'. [ 225.610897][T12475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1704'. [ 225.632522][T12476] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 225.643814][T12476] netlink: 'syz.1.1705': attribute type 2 has an invalid length. [ 225.690065][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1702'. [ 225.927648][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 225.971650][T12495] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 225.997472][T12495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1709'. [ 226.262301][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 226.410908][T12508] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1713'. [ 226.608743][T12520] æÿîÿ: entered promiscuous mode [ 226.656006][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 226.712200][T12524] ipvlan2: entered promiscuous mode [ 226.739338][T12524] ipvlan2: entered allmulticast mode [ 226.745583][T12524] geneve1: entered allmulticast mode [ 226.900072][T12537] ¾x9ÿ: renamed from bridge_slave_0 [ 227.173450][T12545] xt_hashlimit: size too large, truncated to 1048576 [ 227.438042][T12557] lo speed is unknown, defaulting to 1000 [ 227.447700][T12557] wg1 speed is unknown, defaulting to 1000 [ 227.522830][T12561] lo speed is unknown, defaulting to 1000 [ 227.544106][T12561] wg1 speed is unknown, defaulting to 1000 [ 227.964455][T12573] lo speed is unknown, defaulting to 1000 [ 227.992594][T12573] wg1 speed is unknown, defaulting to 1000 [ 228.859084][T12620] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 229.096263][T12632] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 229.129081][T12633] lo speed is unknown, defaulting to 1000 [ 229.139795][T12633] wg1 speed is unknown, defaulting to 1000 [ 229.407671][T12653] team_slave_0: entered promiscuous mode [ 229.413755][T12653] team_slave_1: entered promiscuous mode [ 229.421753][T12653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.595441][T12665] 0: reclassify loop, rule prio 0, protocol 800 [ 230.322683][T12692] tipc: Enabled bearer , priority 0 [ 230.440081][T12691] tipc: Disabling bearer [ 230.829484][T12719] tipc: Enabled bearer , priority 0 [ 230.840390][T12719] syzkaller0: entered promiscuous mode [ 230.845911][T12719] syzkaller0: entered allmulticast mode [ 230.874376][T12719] tipc: Resetting bearer [ 230.933648][T12716] tipc: Resetting bearer [ 230.986168][T12716] tipc: Disabling bearer [ 231.045324][T12730] __nla_validate_parse: 11 callbacks suppressed [ 231.045345][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 231.636011][T12757] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 231.706593][T12757] bond6: entered promiscuous mode [ 231.712789][T12757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.824939][T12760] bond6: (slave veth11): making interface the new active one [ 231.832964][T12760] veth11: entered promiscuous mode [ 231.840680][T12760] bond6: (slave veth11): Enslaving as an active interface with an up link [ 232.142877][T12784] trusted_key: syz.4.1786 sent an empty control message without MSG_MORE. [ 232.276296][T12788] netlink: 'syz.0.1788': attribute type 3 has an invalid length. [ 232.425661][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 232.457115][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 232.479084][T12769] netlink: 'syz.2.1783': attribute type 12 has an invalid length. [ 232.494026][T12769] netlink: 'syz.2.1783': attribute type 11 has an invalid length. [ 232.516425][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1792'. [ 232.584619][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 232.592183][T12805] nbd: must specify an index to disconnect [ 232.621148][T12805] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1793'. [ 232.754345][T12811] bond0: (slave sit0): Error: Device type is different from other slaves [ 232.790323][T12817] bond0: (slave sit0): Error: Device type is different from other slaves [ 232.917110][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 232.951693][T12827] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1799'. [ 233.362917][T12858] syzkaller1: entered promiscuous mode [ 233.380711][T12858] syzkaller1: entered allmulticast mode [ 233.396033][T12854] tipc: Enabled bearer , priority 0 [ 233.457485][T12851] syzkaller0: entered promiscuous mode [ 233.507824][T12851] syzkaller0: entered allmulticast mode [ 233.538494][T12869] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1807'. [ 233.638325][T12851] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 233.724941][T12854] tipc: Resetting bearer [ 233.746432][T12847] lo speed is unknown, defaulting to 1000 [ 233.756854][T12850] tipc: Resetting bearer [ 233.835418][T12850] tipc: Disabling bearer [ 233.863023][T12847] wg1 speed is unknown, defaulting to 1000 [ 234.692511][T12911] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 234.819837][T12911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.090627][T12924] tipc: Resetting bearer [ 235.112284][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 235.123596][T12924] tipc: Enabling of bearer rejected, already enabled [ 235.167665][ T5846] IPVS: starting estimator thread 0... [ 235.174928][T12930] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 235.208341][T12923] tipc: Resetting bearer [ 235.261624][T12927] macvlan3: entered promiscuous mode [ 235.266974][T12927] macvlan3: entered allmulticast mode [ 235.283493][T12931] IPVS: using max 24 ests per chain, 57600 per kthread [ 235.321399][T12927] bond5: (slave macvlan3): Opening slave failed [ 235.415055][T12936] Cannot find del_set index 4 as target [ 235.712481][ T5056] tipc: Resetting bearer [ 235.757725][T12959] netlink: 'syz.4.1828': attribute type 3 has an invalid length. [ 235.993971][T12968] tipc: Enabled bearer , priority 0 [ 236.095159][T12968] tipc: Disabling bearer [ 236.150850][T12975] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 236.426633][T12990] lo speed is unknown, defaulting to 1000 [ 236.487789][T12992] __nla_validate_parse: 3 callbacks suppressed [ 236.487812][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 236.510521][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 236.521854][T12990] wg1 speed is unknown, defaulting to 1000 [ 236.529681][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 236.569516][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1839'. [ 236.598903][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1839'. [ 236.658462][T13007] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 236.723972][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 236.794524][T13005] bond6: option tlb_dynamic_lb: invalid value (5) [ 236.817580][T13005] bond6 (unregistering): Released all slaves [ 237.025254][T13011] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.077834][T13012] veth7: entered promiscuous mode [ 237.087797][T13012] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 237.338893][T13027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.860768][T13042] ipt_rpfilter: unknown options [ 237.891404][T13043] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 237.893150][T13044] No such timeout policy "syz1" [ 238.067836][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 238.166818][T13056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1856'. [ 238.561634][T13072] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.627818][T13072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.645646][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1861'. [ 238.702343][T13077] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1861'. [ 238.715136][T13077] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 238.876078][T13072] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.948228][T13072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.071191][T13072] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.082458][T13072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.182684][T13072] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.198649][T13072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.393082][ T1159] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.405701][ T1159] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.447938][T13097] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 239.464110][ T1159] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.478947][ T1159] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.554859][T13097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 239.605432][T13098] bond8: (slave dummy0): making interface the new active one [ 239.622276][T13098] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 239.635859][ T1159] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.650539][ T1159] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.675796][ T1159] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.684885][ T1159] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.954424][T13114] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.094916][T13114] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.149918][T13136] syzkaller0: left promiscuous mode [ 240.155422][T13136] syzkaller0: left allmulticast mode [ 240.195609][T13114] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.252332][T13114] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.309756][T13139] tipc: Enabling of bearer rejected, already enabled [ 240.450959][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.504607][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.567063][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.635474][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.063969][T13160] pim6reg: entered allmulticast mode [ 241.163919][T13160] pim6reg: left allmulticast mode [ 241.361297][T13172] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 241.587710][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.608053][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.630115][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.639147][T13182] __nla_validate_parse: 8 callbacks suppressed [ 241.639168][T13182] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1889'. [ 241.649091][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.671073][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.681335][T13182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.739941][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.750908][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.767098][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.786858][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.811234][ T5894] hid-generic 0005:0B57:0401.0002: unknown main item tag 0x0 [ 241.828295][ T5894] hid-generic 0005:0B57:0401.0002: unexpected long global item [ 241.861732][ T5894] hid-generic 0005:0B57:0401.0002: probe with driver hid-generic failed with error -22 [ 241.947140][T13190] lo speed is unknown, defaulting to 1000 [ 242.123320][T13190] wg1 speed is unknown, defaulting to 1000 [ 242.386151][T13209] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 242.563753][T13211] lo speed is unknown, defaulting to 1000 [ 242.618221][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 242.630225][T13211] wg1 speed is unknown, defaulting to 1000 [ 242.735429][T13221] bond9: entered allmulticast mode [ 242.743343][T13221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.863216][T13231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1902'. [ 243.042130][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 243.084286][T13245] netlink: 'syz.4.1904': attribute type 6 has an invalid length. [ 243.456081][T13258] lo speed is unknown, defaulting to 1000 [ 243.465035][T13258] wg1 speed is unknown, defaulting to 1000 [ 243.769020][T13269] xfrm1: entered allmulticast mode [ 245.131459][T13292] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 245.137824][T13292] syzkaller1: linktype set to 768 [ 245.175684][T13291] lo speed is unknown, defaulting to 1000 [ 245.235569][T13291] wg1 speed is unknown, defaulting to 1000 [ 245.374491][T13301] vlan3: entered promiscuous mode [ 245.390287][T13301] vlan3: entered allmulticast mode [ 245.524435][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 245.598639][T13309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1923'. [ 245.638124][T13309] nbd: couldn't find a device at index 0 [ 245.660801][T13301] lo speed is unknown, defaulting to 1000 [ 245.679840][T13301] wg1 speed is unknown, defaulting to 1000 [ 246.282504][T13331] lo speed is unknown, defaulting to 1000 [ 246.311182][T13331] wg1 speed is unknown, defaulting to 1000 [ 246.502347][T13347] netlink: 'syz.1.1932': attribute type 6 has an invalid length. [ 246.512585][T13347] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1932'. [ 247.162353][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1936'. [ 247.374632][T13409] netlink: 'syz.1.1944': attribute type 20 has an invalid length. [ 247.842508][T13372] batadv_slave_1: left promiscuous mode [ 248.147823][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1950'. [ 248.166484][T13372] veth1_macvtap: left allmulticast mode [ 248.343118][T13372] tipc: Resetting bearer [ 248.349087][T13372] syzkaller0: left promiscuous mode [ 248.381856][T13372] ip6erspan0: left promiscuous mode [ 248.394487][T13372] bond6: left promiscuous mode [ 248.400623][T13372] veth11: left promiscuous mode [ 248.496643][ T1159] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.517273][ T1159] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.553046][ T1159] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.567507][ T1159] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.609957][ T1159] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.618373][ T1159] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.633140][ T1159] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.652783][ T1159] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.683191][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 248.795302][T13454] team3: entered promiscuous mode [ 248.800899][T13454] team3: entered allmulticast mode [ 248.807751][T13454] 8021q: adding VLAN 0 to HW filter on device team3 [ 248.822977][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'. [ 248.944658][T13464] IPVS: set_ctl: invalid protocol: 12 172.30.0.1:20000 [ 248.945003][T13461] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 248.990540][T13461] macvlan2: entered promiscuous mode [ 248.995906][T13461] macvlan2: entered allmulticast mode [ 249.002597][T13461] bond10: entered promiscuous mode [ 249.007784][T13461] bridge9: entered promiscuous mode [ 249.017242][T13461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.034903][T13470] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1957'. [ 249.056276][T13461] bond10: left promiscuous mode [ 249.064671][T13470] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1957'. [ 249.071715][T13461] bridge9: left promiscuous mode [ 249.167879][T13471] IPVS: Scheduler module ip_vs_ not found [ 249.348840][T13478] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 249.367923][T13478] bond6 (unregistering): Released all slaves [ 249.399512][T13487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1962'. [ 249.584264][T13507] bridge10: entered allmulticast mode [ 249.600248][T13507] netlink: 'syz.3.1967': attribute type 10 has an invalid length. [ 249.614632][T13507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1967'. [ 249.650407][T13507] dummy0: entered promiscuous mode [ 249.681339][T13507] bond8: (slave dummy0): Releasing active interface [ 249.736980][T13507] bridge0: port 1(dummy0) entered blocking state [ 249.748076][T13507] bridge0: port 1(dummy0) entered disabled state [ 249.755791][T13507] dummy0: entered allmulticast mode [ 249.863407][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 249.907369][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 250.213100][T13540] netlink: 'syz.2.1976': attribute type 4 has an invalid length. [ 250.251170][T13540] netlink: 'syz.2.1976': attribute type 4 has an invalid length. [ 250.297276][T13543] veth1_to_bond: entered allmulticast mode [ 250.388360][T13543] bond0: (slave bond_slave_1): Releasing backup interface [ 250.444045][T13543] veth1_to_bond (unregistering): left allmulticast mode [ 250.483587][ T6502] lo speed is unknown, defaulting to 1000 [ 250.496647][ T6502] syz2: Port: 1 Link ACTIVE [ 250.605634][T13554] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 250.658892][T13554] 8021q: adding VLAN 0 to HW filter on device bond11 [ 250.687733][T13556] bond11: entered promiscuous mode [ 250.709990][T13556] bond11: entered allmulticast mode [ 250.721733][T13554] dummy0: left allmulticast mode [ 250.726717][T13554] dummy0: left promiscuous mode [ 250.735768][T13554] bridge0: port 1(dummy0) entered disabled state [ 250.753869][T13554] bond11: (slave dummy0): making interface the new active one [ 250.763027][T13554] dummy0: entered promiscuous mode [ 250.768857][T13554] dummy0: entered allmulticast mode [ 250.778443][T13554] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 251.114598][T13556] bond11 (unregistering): (slave dummy0): Releasing active interface [ 251.123746][T13556] dummy0: left promiscuous mode [ 251.128872][T13556] dummy0: left allmulticast mode [ 251.144895][T13556] bond11 (unregistering): Released all slaves [ 251.861075][T13609] tc_dump_action: action bad kind [ 252.163576][T13632] lo speed is unknown, defaulting to 1000 [ 252.173644][T13632] wg1 speed is unknown, defaulting to 1000 [ 252.226883][T13636] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 252.290216][T13636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.344686][T13641] ipvlan2: entered allmulticast mode [ 252.350290][T13641] bond6: entered allmulticast mode [ 252.361552][T13640] ipvlan3: entered allmulticast mode [ 252.458903][T13651] __nla_validate_parse: 10 callbacks suppressed [ 252.458920][T13651] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2004'. [ 252.506928][T13654] netlink: 'syz.0.2005': attribute type 13 has an invalid length. [ 252.516454][T13654] netlink: 'syz.0.2005': attribute type 17 has an invalid length. [ 252.594594][ T6504] wg1 speed is unknown, defaulting to 1000 [ 253.078334][T13672] netlink: 'syz.3.2010': attribute type 21 has an invalid length. [ 253.139054][T13672] netlink: 'syz.3.2010': attribute type 6 has an invalid length. [ 253.190374][T13672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2010'. [ 316.573147][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 316.591697][T13697] bond11: (slave vcan1): The slave device specified does not support setting the MAC address [ 316.606489][T13697] bond11: (slave vcan1): Error -95 calling set_mac_address [ 316.646115][T13699] bond11: (slave vcan1): The slave device specified does not support setting the MAC address [ 316.658655][T13699] bond11: (slave vcan1): Error -95 calling set_mac_address [ 316.712332][T13701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.292697][T13735] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.2030'. [ 317.557827][T13746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2033'. [ 317.932487][T13755] lo speed is unknown, defaulting to 1000 [ 317.947661][T13758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2038'. [ 317.962785][T13755] wg1 speed is unknown, defaulting to 1000 [ 318.586151][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.617476][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.699639][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 319.090124][T13812] netlink: 'syz.1.2052': attribute type 2 has an invalid length. [ 319.111709][T13812] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 319.134840][T13814] netlink: 'syz.3.2053': attribute type 4 has an invalid length. [ 319.193780][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 319.203737][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2054'. [ 319.251986][ T1308] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.288727][ T1308] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.318839][ T1308] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.335431][ T1308] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.366064][T13821] netlink: 'syz.3.2056': attribute type 3 has an invalid length. [ 319.407328][T13821] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2056'. [ 319.503416][T13827] delete_channel: no stack [ 319.623986][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 319.664027][T13832] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2058'. [ 320.021982][T13855] Cannot find add_set index 1 as target [ 320.040758][T13859] IPVS: Error connecting to the multicast addr [ 320.295919][T13871] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 320.373150][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2072'. [ 320.400335][T13877] syzkaller1: entered promiscuous mode [ 320.405912][T13877] syzkaller1: entered allmulticast mode [ 320.580557][T13889] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 321.561734][T13923] lo speed is unknown, defaulting to 1000 [ 321.590104][T13923] wg1 speed is unknown, defaulting to 1000 [ 322.313604][T13939] netlink: 'syz.3.2086': attribute type 13 has an invalid length. [ 322.321475][T13933] bond12: option arp_validate: invalid value (18446744073491447809) [ 322.340541][T13933] bond12 (unregistering): Released all slaves [ 322.506760][T13937] syzkaller0: entered promiscuous mode [ 322.520682][T13937] syzkaller0: entered allmulticast mode [ 322.882618][T13949] syzkaller0: entered promiscuous mode [ 322.947988][T13949] tipc: Resetting bearer [ 323.115427][T13962] __nla_validate_parse: 1 callbacks suppressed [ 323.115457][T13962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2093'. [ 323.133417][T13962] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2093'. [ 323.153013][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.328728][T13972] tipc: Resetting bearer [ 323.338193][T13969] netlink: 'syz.1.2096': attribute type 4 has an invalid length. [ 323.385104][T13972] tipc: Enabling of bearer rejected, already enabled [ 323.399931][T13969] netlink: 'syz.1.2096': attribute type 4 has an invalid length. [ 323.412238][T13970] tipc: Resetting bearer [ 323.588901][T13975] tipc: Resetting bearer [ 323.701673][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 323.726618][T13983] openvswitch: netlink: Flow key attr not present in new flow. [ 323.833571][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 323.911381][T13990] : entered promiscuous mode [ 323.957371][T13994] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 323.998036][T11333] tipc: Resetting bearer [ 324.080548][T13994] bond4: entered promiscuous mode [ 324.086185][T13994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.091699][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 324.117907][T13990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.125698][T13990] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 324.137972][T13990] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 324.150616][T13990] bond4: (slave gre3): Opening slave failed [ 324.375554][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2105'. [ 324.563936][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 324.616308][T14024] netlink: 'syz.0.2109': attribute type 3 has an invalid length. [ 324.634349][T14024] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2109'. [ 324.732768][T14030] IPVS: stopping backup sync thread 12620 ... [ 324.776586][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 324.823132][T14032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2111'. [ 324.887597][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.916485][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.925779][ T5996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.021976][T14033] lo speed is unknown, defaulting to 1000 [ 325.029675][ T5996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.070636][T14033] wg1 speed is unknown, defaulting to 1000 [ 325.078248][T14039] lo speed is unknown, defaulting to 1000 [ 325.103086][T14039] wg1 speed is unknown, defaulting to 1000 [ 325.139644][ T5996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.382282][T14061] xt_connbytes: Forcing CT accounting to be enabled [ 325.413904][T14060] macvlan1: entered promiscuous mode [ 325.422395][T14060] macvlan1: left promiscuous mode [ 325.984378][T14089] batadv2: entered promiscuous mode [ 325.993720][T14089] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 326.022169][T14089] netlink: 'syz.2.2126': attribute type 4 has an invalid length. [ 326.302309][T14104] netlink: 'syz.2.2128': attribute type 13 has an invalid length. [ 326.571569][ T30] audit: type=1800 audit(1765625583.103:5): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2131" name="memory.events" dev="tmpfs" ino=2149 res=0 errno=0 [ 327.138593][T14138] netlink: 'syz.3.2137': attribute type 7 has an invalid length. [ 327.206358][ T1159] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.227438][T14138] netlink: 'syz.3.2137': attribute type 7 has an invalid length. [ 327.267688][ T1159] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.277162][T14146] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 327.288309][ T1159] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.320449][T14147] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 327.328937][ T1159] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.352376][T14148] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 327.422232][T14146] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.444571][T14140] tipc: Enabled bearer , priority 0 [ 327.462514][T14140] syzkaller0: entered promiscuous mode [ 327.468841][T14140] syzkaller0: entered allmulticast mode [ 327.565542][T14140] tipc: Resetting bearer [ 327.598612][T14139] tipc: Resetting bearer [ 327.675178][T14139] tipc: Disabling bearer [ 327.748983][T14169] netlink: 'syz.3.2145': attribute type 33 has an invalid length. [ 327.779149][T14169] `: renamed from team0 [ 328.064793][T14179] lo speed is unknown, defaulting to 1000 [ 328.159983][T14179] wg1 speed is unknown, defaulting to 1000 [ 328.327861][T14183] lo speed is unknown, defaulting to 1000 [ 328.412010][T14183] wg1 speed is unknown, defaulting to 1000 [ 328.730592][T14211] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 328.871009][T14213] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 328.884177][T14213] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 328.903075][T14218] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 328.949769][T14215] bond12: (slave bridge11): Enslaving as an active interface with a down link [ 328.975643][T14216] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20003 [ 329.019509][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.026588][T14222] __nla_validate_parse: 17 callbacks suppressed [ 329.026609][T14222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2157'. [ 329.201416][T14228] tipc: Enabled bearer , priority 0 [ 329.236484][T14230] tipc: Resetting bearer [ 329.255026][T14224] tipc: Disabling bearer [ 329.288303][T14230] tipc: Enabling of bearer rejected, already enabled [ 329.414923][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 329.415289][T14229] tipc: Resetting bearer [ 329.448394][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 329.655214][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2167'. [ 329.663901][T14257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2166'. [ 329.726681][T14257] netlink: 'syz.3.2166': attribute type 2 has an invalid length. [ 329.744193][T14257] netlink: 'syz.3.2166': attribute type 9 has an invalid length. [ 329.755609][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 329.794009][T14257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2166'. [ 329.821421][T14265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2167'. [ 329.878940][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2167'. [ 330.084632][T14274] tipc: Enabling of bearer rejected, already enabled [ 330.130095][T14274] syzkaller0: entered promiscuous mode [ 330.137487][T14274] syzkaller0: entered allmulticast mode [ 330.303188][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 330.333761][T14283] batadv0: entered promiscuous mode [ 330.345020][T14283] macvtap1: entered promiscuous mode [ 330.352193][T14283] macvtap1: entered allmulticast mode [ 330.359105][T14283] batadv0: entered allmulticast mode [ 330.369135][T14283] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 330.398029][ T4057] tipc: Resetting bearer [ 330.466367][T14294] netlink: 'syz.1.2179': attribute type 21 has an invalid length. [ 330.466976][T14303] netlink: 'syz.1.2179': attribute type 21 has an invalid length. [ 330.578465][T14297] syzkaller1: entered promiscuous mode [ 330.593335][T14297] syzkaller1: entered allmulticast mode [ 330.638690][T14307] team0: Device is already in use. [ 330.700181][T14310] netlink: 'syz.2.2181': attribute type 3 has an invalid length. [ 330.752239][T14310] netlink: 'syz.2.2181': attribute type 3 has an invalid length. [ 330.796203][T14318] netlink: 'syz.1.2184': attribute type 4 has an invalid length. [ 331.492943][T14356] syzkaller1: entered promiscuous mode [ 331.499846][T14356] syzkaller1: entered allmulticast mode [ 331.805620][T14369] lo speed is unknown, defaulting to 1000 [ 331.817883][T14374] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 331.864589][T14369] wg1 speed is unknown, defaulting to 1000 [ 332.157358][T14386] lo speed is unknown, defaulting to 1000 [ 332.193295][T14386] wg1 speed is unknown, defaulting to 1000 [ 332.719367][T14369] netlink: 'syz.3.2199': attribute type 6 has an invalid length. [ 333.156639][T14416] netlink: 'syz.0.2212': attribute type 3 has an invalid length. [ 333.215562][T14401] bond6 (unregistering): Released all slaves [ 333.580135][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 333.610247][ T31] Not tainted syzkaller #0 [ 333.616156][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.627361][ T31] task:kworker/1:0H state:D stack:25320 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 333.668690][T14428] lo speed is unknown, defaulting to 1000 [ 333.677748][T14428] wg1 speed is unknown, defaulting to 1000 [ 333.709304][ T31] Workqueue: kblockd blk_mq_requeue_work [ 333.716059][ T31] Call Trace: [ 333.781805][ T31] [ 333.785158][ T31] __schedule+0x14bc/0x5000 [ 333.795821][ T31] ? do_raw_spin_lock+0x121/0x290 [ 333.802491][ T31] ? __pfx___schedule+0x10/0x10 [ 333.807948][ T31] ? schedule+0x91/0x360 [ 333.813452][ T31] schedule+0x165/0x360 [ 333.818784][ T31] schedule_timeout+0x12b/0x270 [ 333.827763][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 333.834841][ T31] ? __pfx_process_timeout+0x10/0x10 [ 333.841528][ T31] ? prepare_to_wait_event+0x437/0x480 [ 333.848226][ T31] nbd_queue_rq+0x662/0xf10 [ 333.853733][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 333.860976][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 333.867709][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 333.874797][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 333.881625][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 333.888293][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 333.895818][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 333.904075][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 333.912272][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 333.918632][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 333.925974][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 333.932512][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 333.938418][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 333.944210][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 333.950945][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.956594][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 333.962685][ T31] blk_mq_requeue_work+0x717/0x760 [ 333.968224][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 333.975359][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.982214][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 333.988466][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 333.995507][ T31] process_scheduled_works+0xad1/0x1770 [ 334.002252][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.011296][ T31] worker_thread+0x8a0/0xda0 [ 334.016580][ T31] kthread+0x711/0x8a0 [ 334.022753][ T31] ? __pfx_worker_thread+0x10/0x10 [ 334.028671][ T31] ? __pfx_kthread+0x10/0x10 [ 334.037629][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.043655][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 334.049954][ T31] ? __pfx_kthread+0x10/0x10 [ 334.054863][ T31] ret_from_fork+0x599/0xb30 [ 334.060847][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.066280][ T31] ? __switch_to_asm+0x39/0x70 [ 334.072731][ T31] ? __switch_to_asm+0x33/0x70 [ 334.077723][ T31] ? __pfx_kthread+0x10/0x10 [ 334.083309][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.088399][ T31] [ 334.092612][ T31] [ 334.092612][ T31] Showing all locks held in the system: [ 334.112806][ T31] 1 lock held by pool_workqueue_/3: [ 334.118934][ T31] #0: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 334.147492][ T31] 4 locks held by kworker/1:0H/25: [ 334.153617][ T31] #0: ffff88801b2e8d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 334.167168][ T31] #1: ffffc900001f7b80 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 334.181864][ T31] #2: ffff888143722818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 334.192712][ T31] #3: ffff888024f25738 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 334.203360][ T31] 1 lock held by khungtaskd/31: [ 334.208409][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 334.220288][ T31] 2 locks held by kworker/u8:9/2941: [ 334.225823][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 334.237178][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 334.247271][ T31] 2 locks held by kworker/u8:14/4057: [ 334.253206][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 334.266443][ T31] #1: ffffc9000cae7b80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 334.280076][ T31] 2 locks held by getty/5591: [ 334.285109][ T31] #0: ffff888033b5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 334.296353][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 334.308048][ T31] 1 lock held by udevd/5850: [ 334.313502][ T31] #0: ffff888024d3d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 334.324484][ T31] 4 locks held by kworker/u8:17/11333: [ 334.331292][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 334.343729][ T31] #1: ffffc90004d97b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 334.357149][ T31] #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 334.368615][ T31] #3: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 334.380587][ T31] 1 lock held by syz.2.2194/14345: [ 334.387684][ T31] 4 locks held by syz.3.2214/14423: [ 334.398410][ T31] 2 locks held by syz.4.2215/14424: [ 334.406699][ T31] #0: ffffffff8f2f55c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 334.417589][ T31] #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 334.431323][ T31] [ 334.434901][ T31] ============================================= [ 334.434901][ T31] [ 334.447121][ T31] NMI backtrace for cpu 1 [ 334.447155][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.447175][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.447186][ T31] Call Trace: [ 334.447193][ T31] [ 334.447200][ T31] dump_stack_lvl+0x189/0x250 [ 334.447229][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.447249][ T31] ? __pfx__printk+0x10/0x10 [ 334.447287][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 334.447309][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 334.447330][ T31] ? __pfx__printk+0x10/0x10 [ 334.447359][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.447387][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 334.447408][ T31] watchdog+0xf3c/0xf80 [ 334.447436][ T31] ? watchdog+0x1e2/0xf80 [ 334.447464][ T31] kthread+0x711/0x8a0 [ 334.447488][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.447509][ T31] ? __pfx_kthread+0x10/0x10 [ 334.447532][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.447553][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 334.447573][ T31] ? __pfx_kthread+0x10/0x10 [ 334.447596][ T31] ret_from_fork+0x599/0xb30 [ 334.447625][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.447662][ T31] ? __switch_to_asm+0x39/0x70 [ 334.447682][ T31] ? __switch_to_asm+0x33/0x70 [ 334.447701][ T31] ? __pfx_kthread+0x10/0x10 [ 334.447723][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.447762][ T31] [ 334.447769][ T31] Sending NMI from CPU 1 to CPUs 0: [ 334.637026][ C0] NMI backtrace for cpu 0 [ 334.637048][ C0] CPU: 0 UID: 0 PID: 14345 Comm: syz.2.2194 Not tainted syzkaller #0 PREEMPT(full) [ 334.637067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.637076][ C0] RIP: 0010:check_preemption_disabled+0x59/0x120 [ 334.637104][ C0] Code: 8b 0d fb 91 2d 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 f0 76 92 41 [ 334.637117][ C0] RSP: 0018:ffffc9000bf36eb0 EFLAGS: 00000046 [ 334.637133][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000000 [ 334.637151][ C0] RDX: ffffc9000bf37001 RSI: ffffffff8d780950 RDI: ffffffff8bbfc660 [ 334.637162][ C0] RBP: dffffc0000000000 R08: ffffc9000bf37bc0 R09: 0000000000000000 [ 334.637172][ C0] R10: ffffc9000bf37078 R11: fffff520017e6e11 R12: ffffc9000bf37bd0 [ 334.637183][ C0] R13: ffffffff8173ef25 R14: ffffffff8df41cc0 R15: ffff88807bdfdb80 [ 334.637194][ C0] FS: 00007f8e6bfd06c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 334.637206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.637217][ C0] CR2: 000055555f92e5c8 CR3: 0000000050328000 CR4: 00000000003526f0 [ 334.637232][ C0] Call Trace: [ 334.637239][ C0] [ 334.637247][ C0] lock_release+0xb3/0x3b0 [ 334.637262][ C0] ? deref_stack_reg+0x19f/0x230 [ 334.637281][ C0] ? unwind_next_frame+0xa5/0x2390 [ 334.637295][ C0] unwind_next_frame+0x19a9/0x2390 [ 334.637313][ C0] ? unwind_next_frame+0xa5/0x2390 [ 334.637328][ C0] ? __vmalloc_node_range_noprof+0x30c/0x12d0 [ 334.637349][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.637370][ C0] arch_stack_walk+0x11c/0x150 [ 334.637388][ C0] ? bpf_map_area_alloc+0x12d/0x180 [ 334.637409][ C0] stack_trace_save+0x9c/0xe0 [ 334.637429][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 334.637452][ C0] save_stack+0xf5/0x1f0 [ 334.637476][ C0] ? __pfx_save_stack+0x10/0x10 [ 334.637492][ C0] ? post_alloc_hook+0x234/0x290 [ 334.637508][ C0] ? get_page_from_freelist+0x2365/0x2440 [ 334.637527][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 334.637546][ C0] ? alloc_pages_bulk_noprof+0x560/0x710 [ 334.637564][ C0] ? kasan_populate_vmalloc+0xd1/0x270 [ 334.637580][ C0] ? alloc_vmap_area+0xd4e/0x1470 [ 334.637595][ C0] ? __get_vm_area_node+0x1f8/0x300 [ 334.637610][ C0] ? __vmalloc_node_range_noprof+0x30c/0x12d0 [ 334.637631][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 334.637651][ C0] __set_page_owner+0x8d/0x4c0 [ 334.637669][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 334.637691][ C0] post_alloc_hook+0x234/0x290 [ 334.637710][ C0] get_page_from_freelist+0x2365/0x2440 [ 334.637729][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 334.637762][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 334.637783][ C0] ? prepare_alloc_pages+0x213/0x610 [ 334.637805][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 334.637827][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.637846][ C0] ? __apply_to_page_range+0x124b/0x13d0 [ 334.637869][ C0] alloc_pages_bulk_noprof+0x560/0x710 [ 334.637889][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 334.637908][ C0] kasan_populate_vmalloc+0xd1/0x270 [ 334.637929][ C0] alloc_vmap_area+0xd4e/0x1470 [ 334.637953][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 334.637968][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 334.637988][ C0] ? __get_vm_area_node+0x13f/0x300 [ 334.638005][ C0] ? htab_map_alloc+0x39e/0xc40 [ 334.638024][ C0] __get_vm_area_node+0x1f8/0x300 [ 334.638044][ C0] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 334.638062][ C0] ? htab_map_alloc+0x39e/0xc40 [ 334.638092][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 334.638116][ C0] bpf_map_area_alloc+0x12d/0x180 [ 334.638134][ C0] ? htab_map_alloc+0x39e/0xc40 [ 334.638161][ C0] htab_map_alloc+0x39e/0xc40 [ 334.638184][ C0] map_create+0xafd/0x16a0 [ 334.638202][ C0] ? security_bpf+0x7e/0x300 [ 334.638223][ C0] __sys_bpf+0x5f0/0x860 [ 334.638240][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 334.638266][ C0] ? rcu_is_watching+0x15/0xb0 [ 334.638287][ C0] __x64_sys_bpf+0x7c/0x90 [ 334.638302][ C0] do_syscall_64+0xfa/0xf80 [ 334.638321][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.638336][ C0] ? clear_bhb_loop+0x60/0xb0 [ 334.638352][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.638366][ C0] RIP: 0033:0x7f8e6b18f749 [ 334.638379][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.638391][ C0] RSP: 002b:00007f8e6bfd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.638407][ C0] RAX: ffffffffffffffda RBX: 00007f8e6b3e5fa0 RCX: 00007f8e6b18f749 [ 334.638418][ C0] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000 [ 334.638427][ C0] RBP: 00007f8e6b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.638436][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.638445][ C0] R13: 00007f8e6b3e6038 R14: 00007f8e6b3e5fa0 R15: 00007ffd50d28598 [ 334.638464][ C0] [ 337.420712][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!