last executing test programs: 13.520005944s ago: executing program 3 (id=2816): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r7, &(0x7f0000000180)}, 0x20) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x22020400) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x92, 0x407, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x5, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x75a5, 0x0, 0x9, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x1, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) (async) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 13.212492093s ago: executing program 3 (id=2818): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005b40)=ANY=[@ANYBLOB="580000000206030000000000000000000000000705000100070000000900020073797a31000000000c0007800800134021f142c40500050002000000050004000100000011000300686173683a69702c706f727400000000c7e85774baf858afeefeaa00b774bc2a3ef69e856407f52f58cafe14198d203ccff7ee5478f2c805a56757f7168a153b1a187e"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000005900)={0x0, 0x9d, "f9c88fd8cd487713fc66d1ae54819114094f390645be198cc4591946baf088c0391b6bb961f5645dacfc9a9439797033f922b1fcb4f6b085c1339d3f3afb937badf2045d1125299edde921be8d6a559a257ebd982f0e98a07dad269460c64af6b3d53416a11afab3aa92b2f1a624e9065cc8267ee24217ff8499df16e24a9e1d0dccab9fa93270228ca872657b0444f1d03c43773d620803035907499f"}, &(0x7f0000005a00)=0xa5) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @local, 'geneve0\x00'}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)}, {&(0x7f0000002840)="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", 0x970}], 0x2}}, {{&(0x7f0000001440)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x2, 0x4, 0x4, {0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000014c0)="a189914f298dfc5a0da220fe321e2f093f462a4ebaeef2180f89dd3991485acd96b5396e65c76de7f007b05e98125acf381ec91ac8569de2a81c2724e13a6e4d66b7061bf54cc89b7b47f7be53804fe34d1c1b39000af1b0057d6c1c480aa84f2e8c297981fd99978679af11b72546bbf7c49bf9a555964d879a", 0x7a}, {&(0x7f0000001580)}], 0x2}}, {{&(0x7f0000001640)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x2}}, 0x80, &(0x7f0000004900)=[{&(0x7f00000016c0)}, {&(0x7f0000001700)}, {0xffffffffffffffff}, {&(0x7f0000003840)="66861b5abe5a1c25047663dc29b8b91f9120e66ace628fc1fc5995182e7d78b10de9de489455e731ce9f72ff4b8b82db58a85602c8e9188ca832d6e152aeb1c334b0f855a6de70040640425419c3c29d037fb35e0ca4d79aacb9529faa24320c30d1e892c8c5923e0a5957aa0f96ace602bea027b019852d17a331a2492eb96980bbe52c5045a52f2c31c629a5ab8bc3eaccecc98a72cf0205dff72b7c7c6f2bfef4056c75e7d833e38d2a64890550d6dfda0d5964399815da7ffdd2c5f15afb5233cb90af7f15b9cd38d5bef628d75badb41e9b71ff22063045a65b4cda4c731bdf205a2aece5355b98b886d4d01132e52186601e6066a3f488677986ae0fd5ddcabfe441db185fc1f69d82bca158ad8ec382a08e6c11cc76718d01173777e34001540fce9beb3b883097036c700a7e739da08b3b62349b8832dc09c3b5d1c3cd5208daabbbc6de26b5cbaa3921823570e6504562c63891a1b66d629cf69187bc0b9c50a6c13e671664025f1a747918063620ac696e542bbfc4016cf8b92972bf828b875a23439bbe6f18205245678fbf0f568db0adc22df8c60bcff2ef4ad70819099ab071b8bb771d13665e359485402cc757247135f331ee53c9bc040d81310f9fe315a2c0b428f7df527550e27457ed33e8a8e2523addd6df4d2b8a0964014cf0d67d81edf3747d8791821d0baac44ee6a36bf0e881580ec226c450e0b321746af7a296583c849f29779813b3dce9675e4aad330dd4ed882e72d9c96ac0af0efa80b9a2eb51f565a11f42e202287771b2bff76a5ffc7b5ef3b1ef5899334038c25b9b48093568617d3fa23f1535f2e1f5678048865eda4d8e903083c6e9bc8c410fa07eec3c080593971b551522a7a2766bb236823bc1ac7d31dc92258701e57fb402519f22cb32c34cf87b95811a1584547172afebcd95506ace03089c40b765fd6c20b1c96d3a1b2493b58c4d56bc77153f880c6474c9bcbd8a9141c45629bf8f1db6b03f4c8998625f68eb0f3fd2364ffc9bd0d8575a9a29802eba63303c19832e4d117f6ca40085f8b64ef330ed157b484d84f2d26ca9040df2480a9fcaba5b8b4323cb0f83724c2b1427bf8d2fcece313bab33bc8271ef69f20f060fb5f70dc9c3ecdb0cc246249bb0241774cea96c80dca81b979bc1edf98e561d0798cbdcacdc9fba9433e5c781018a7e54c699e1bb01ecfebecfdb03edb214f200b2c5374299a8475577cf4a32893054ac3e2ccf7bb24b62ae9607aace92385624fcb244079d710b6b59afeaa1e7119925a270ba1737ec2855a73b8602c93f63d423f02f0f3750d6a19940898c5038798391fdc8c3a4b25280db9db71b243d4858f20d1dd67df022c97729d73104a948fb76d628fe71e170034ef6911c88daaa92ca5a90723f378f47707aec6ee8be797287caca30f17b0a467773f374428d570d3a88c6ec0108fc0fe5d20739a17788366622dfccc03655b9624d2e50399559ce2c12e371f1f0d42b9cd4e7404b6767f4439d9ff01cfecab1ec1071afa515266364a427ed6dcf1d991f2c440a05391a6ced3c37cc945ef8c95759a91862b4abf3bfbd3b77143e719ee8477317a18ffe5a5efc736a4f6e95cf83eaa9139c49e062a7bfe672670440c84fb54a8dd0bab0c7d6bba9af669aed6a5e0a9f423a1b51d1e7fd0c03216c548ad2e7dec617ff3244ca8a717895962a242f2a710d5239f505c4a19d47afe1ba581372b80c3146e5ebce5ebf5359b9b2cf46a8066a578bab2d7a2bd8799e94aca2c79bee0cb10af5c0161fcb02222b052497da48ef7784ff31d78437eae1bbe844619c07a80090e414844fc84ef9657dc5cca35d997a66cdb2f6f53f957d0083de52c4ad963c48d42b047c0f7f41c9472ec5c55515faae98a40dc6cced029b6a6fb1710827fe99451479e0ed747260a18943233a36530fd8e52749c77af05f6d7b3ba385bd402142dac18eef772248faf410d8b06627a89eb3526cc636572a7b5816a8865a38b4beae0c1340c21b839bdc893dafd8e3eec24993b368864f212e204f268ca0cdb970176ac8b90def202b2465d6d490da0affe40901cc0a20ddeba2f3795cfb3ea6e63332941c4f92128f505fbe414b45876be19d13655dc564240b7f3049ed7bf0b04e9e34420f66c6e954de4e9db84c14df18b1462e0353f8cc9e6521669928f107902ea047dc9d343bc4e118b72be649e9d721a226453f1b2ef4efa4d56142c26144881ef4b177ed04d2d5e3e13571e7db9f8595ee4fb6d110b8a8b1343dd474201f6fd7f7bd680ce1e2e2a4e54bb556a67f9c3fcdee7d6e70875b4a5cdbaddb463e07061687b14519d0c86af4be5299ef6eeda5ffe067f67396c8f718fccd8f9ce251f25ce33522dc676887572b6f5e1823523301ad92381dba08ce48b411fe5ab085ca7ffce447ea867af83eee5578ac2fd5a63fcd4c61be136cd8ee761fd9645ee17c6c1c79b6ad6e8d9d8df9451e098df319068453d2dadf05a94b1205f64e429d47c3ccf7b3cf83151e728409cdc2984baa38647cbb51bc3bbc14b4b77e58a9a322bfc49a7e1cfbc8d72fb8d31df7cc31cbe7f7bd578d4f379a25e872cc35b735e1f680fef1eb759df50e2ceceef0db6f60989245248fcb6dc3f0924067a8f2be5198117abbf5a892f1a1acc1d4a5f8a4a6c2d8785151427fe94de6db996a2bcf658ec654fb343d2ab9e4d7427b8d3c34479b938734246c957500310727c4f4ebfc2541aaaf25385c1d0d13aa6633aaa81ee05f7e9f918ed971af56c4b573920340a8730d33c160dd42049bc4eae381f94c446f5c52c3262900b67e0f97536ebec41e62164655cfeb1d3f161ebe8db7cba8b3c347f40ec31713f7c6ae03cd16a033db2107efae641db5822f00c840e2f506cd12ed26d31ea9a1bf3f3e79e42c6005b82884a7e0b692104cefbfb76362ab6f2ddfa28521107525d26d5fb9512a604e1b79094da7ed0d78e56b70ddaed2cb9a3ebce523fd6aa5e6e38a1d9d3c8e10b270ff592f796d190b7b3da720805939ed55eb09475a5bcaf88bc99dc965d498ec82600db416335b37153430c4718bcdf6aacee283ef23e1ff1a269aa3bf165b28f812818c06f94f76ab7218e3c64a89d94cdb12bb67ceea905ae287ca86a282a0db496b60827433bfbc64ac6b3410d1d02e25e17ebb1dab391eb2770a28eb870fd4f5b575228c901ebf0817ff064113bda5855989dd1ec704190da5baa0dfa9288be8e5235c764b6f3f6625c726204aa1e16d5925a9b7326569942e5b78c5ac7502b25ad8ad4e16e89015b8eaa9bad3a0d3048943bb4d8f80866cc9241544df188ca6954ff4aead031e178b6946444367d36f4ce42dad97598aeb62bf1f4c198f66366fb4a61289176bec57df3588384817ecbaaaebb5292ec033bb00ca237cf8b2ef6926432332fab15ee6959597a080e340b79a034dcd81208701657ca66cc376a9c0cdf88c18ef2c07158a7f2f77f4bb3e37105774bc4008ecd9c1d5859c22ebc6970864fabf8c3d1cb62dc32a494579549bbda2015e81a598fe169604756096832016bbe5d68f11612d05465d3223a25c2ad9e1b702914fc630dcf3f13e39ff50357ec23a3bd418c373d86549fd8a870a8876b235e7fac5041b98592960f215efa11b8586fa36012e7e12dc7112f1e55e041effd74fcc669fac0c59677ff103e94bdf13a66ace96a52a56dbe1ec92dbd39ba3130bc2a5c9cd1a597fe7781f89db5efa484a6219898bb3a2a11552e7a2545d43d250b44857a9663c0c968df0709b949b617dc5761e7fea1e627693aad854758b36b8480467111738bff6e5bbf9ed8e5e8711c5b3ed9065af384841ab805ccdbd379d73fc7949a451198fe2e7f3146db07e7180387daf0d591b0e73f20df40ef2642ff24a55dbe51b015c16cca58608b1f0fe3873b5d65d6fa263fa1f2e780610399ce5f0b6ab04ed1ba2852a3623e831d3312dae0368a9f7277dcb8a15120b9d4dadca96b69f8ef97be7e9d8d3f36a0aebe5f5a45f727050a82afa8e17f76d5c3830c019e87838a7fd6480e7e79bd427ab8ff50ed57e9eb34d6d2525775c7229fddaab83dc3c5fcb358509787bc1f7f81a5e7b020bee944179c989598ce20007b17ab0ccaeb7e62c684e8b5499fd2d0a92e938445d10940ff6df3660f5fadf4fe8f0fe4ce2e7a30063418e1f516ea36939e4bc671cf37a5e7c025db82b45d1bb0c1e6b509f4f4f84fb52d7a7e2ef1074cfc1b5dfe8d028dad951d8f9d4aebf5965a8a0406c39afd77d970625e2771b51159629a4a83c707bb2a1dcfa0c5c210cfebe8058fab73cda160f2771c9ee46ff9d528c12f8cb35841c929641696d3440a59072369bdd297f7cc49fb651ac1a6f970c3908b26dcd5224c52c622d6eb00c0b49669b3c5d8906551d8b9012380d28420ec0d17a167e7f04308723431174b6dfad2145d5065b92a58ba62475addb356339aec3474f15c514320f90820338a92e015840062787ed6ad9bb9e482efe858eacb1b1fa2dc9c39d7a4070b39e1b2ce2e1b69fe40a1ced7776d13a4940d9f2f652bf95f10d3d7fe150d469f3ec12b675fc898634364cfa45f521e693894019066e38f4db53f2f19a4d397afc3f32e3c484090d894e0c347066424995684920d72b1fbec05757124d1141df795802520a5d9b90b6c0742f71985dd6e79bbba91ec4726de85f66752357bba7cd96ab7e9c114e065b9d1c4e14ff7a8955d71db3b126c8efe6a837458df0b7adab5f9e7e9e89578ee39888ceae3a91d2e9351fa00b43bc1c719acd2b6a4f3db909184947c528ff767d7f0399218a5bbe472c4348e80d5b25ad7ffd820f7016bb37814a28e22ecf6563d64990acfd0be383ec0d238f23a5b7b276782f186468d396b68b36b64fc59a2a32d4c7271d61270b88c5c7bcd7f08c1d83bd6a5b9c9b4996bc69d7cca1d69bd151d87304eac84f2beae52c14f0fe9574c977c5c4ce4faec99391f294b63ae6abc17f5a3f25a2d377294ac5cdfdc9671d1d5e0314a7c7374475b83111d67702a66457ba53dc30934d1dc13c37c6c5b783301ef132cf51881bb856c7c8891411bd38e461c7fbff9d97de0b7b3f52f137d68477f6a0edf94e381530835b52663529957fb5dc94159924c6b0b415c72e00cb53133b708b349e2e0b421e5f8b9cb7d3ad74e43b92c106a84f17e699523af741b203202cb7cbc42b7b6ce8d85a43f602d7fe7a47af27676851f0e1351b3682d230286d56d960385133f9196cf5bee2153b7dcd4ca3f57a0ca4dfce4576213fb0a8b2d9f7af41a539803ea574dd1cc592781562f601c110f672f1cc107a651debe716eca5147b4a536394132d6d3105bdfbb6e29f806d98ddc719209e4668351475841cd47f96567193552da6849cad713a0bd579e6e110781d67af84d16b680fe4e3390a284524805fd33738c04cfaeed02b64e754b5e4125cd25d36017ef064af297eaf0175fbddcac1cf0048607a86e3b8e85ce3368fb7813607ae7a11278c80a8cdc61e738ff12719bb12b058e4c0408285d3cd621b39eab460e2d1f984173a22973bf73a8f9d53cdb4f8e85896955e01171fa641219b492e1e0ea14a2a9f3a1c8c6afe5cd2c607d08f6b8caa191b5bffd7a8e7ab4a6e71d4045d29122f7ce367e71d895dfe9355eba5f644ed9ebeb442d363526d88d17cc826b2d002ca4590fb25d30cbdf891409bd3fadfe0c8f43578c2eab1f7fe3760872336d324e47b362bcf470753044e68fed06f63e19368e83cac3a36a7a1de365a11049610b9312fa56672", 0x1000}, {&(0x7f0000001740)="cce2f433505b6c3db9e757e824d377710e658be8283656c1c36695ef3336027f78a34e671471e82ab1e30968a452d5ec24288f8fccc9af7e98e4e7cd90241a7a0470b347dd257cb78be43bfca9f6b1c0acb3635082d768dc15df31b55424557dd490b17deaf7e2b6bcfb9cea923a94d16da8cf0c07e91f2f", 0x78}, {&(0x7f00000017c0)="a10419f57937cccd8a7075d673bf1feff9208098819977bbe657998d766c2e966f62dc85d955b08f3390f9e0e6ddf1c7a37adf90054eaa3b85f7313c2f51c1d46e8b2f1699033e65a081f6c704a2430a42d4fa73", 0x54}, {&(0x7f0000004840)="21d1ef3162b2f91ca2ce9b4be94932307af419f5b53920f90477723d8260a82d36434691a2913b1ac1335b7bdbe0221ddbcfee215ca33246929b68342526ebbeaf04aeb6795824cfd4fdfd9f1ecad4a378b955593b14bd7a49356fa0cedf4792c4ecae7ca6fc9f36ffdde83aa8467f7a553613687721b8a3ba60b3713493986b1f37", 0x82}], 0x7}}, {{&(0x7f0000004980)=@in6={0xa, 0x4e22, 0xe9d, @mcast1, 0x7}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a00)="ede87e68e74766e67a4bec0835729c2f78cf556763a512d3f5b1843ba8adfb6dd47b04819c62f368ecb518930f8aa8b233cd97b07e4eb6efb46a3dc4f8bfc4091171058a7ef8200089029ab46e2e581b5f336e4fc8d28d52d9f415cd51b2e2325d7441cb20663ebecf754131cd3a2c1b128c5e9a4a7d0df8f34bb5469557ba0735d71d2b25321c87e02101d03b15b593d22d88343061457eed2586c903ad5cea438e9ff1eca133", 0xa7}, {&(0x7f0000004ac0)="a7252cb7678692aae48f7e6d8d9c92bfaef59e552b5cc6af8c793db74ae84a903cc3a41d484562344f8f100ee4dce23a148fdc867dda8c5acd2322a8505d0a2c75e3ea01758d9f709285864874f35842199c612997ab6813d2679095bd4230774f0b89820b", 0x65}, {&(0x7f0000004b40)='Y', 0x1}], 0x3, &(0x7f0000004bc0)=[{0x58, 0x10b, 0x800, "9904e5fb8afaa086d59fb6ac1daeb4b2a1813928462f6496acca54bb3d0c02b5a5ff8c932de8a4088e9342cd4f7687fb69e8403bf4bceb1c3d2f86dbd62827661c8e7e"}], 0x58}}, {{&(0x7f0000004d00)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x80, &(0x7f0000005380)=[{&(0x7f0000004e80)}, {&(0x7f0000004f00)="11ddf55466ca16cc9608b99dcce9e7e7496c68cafa815b48a1978d52705d52cf77dda4796b47aa089f4a808c929293c0f137aac6c7375a98b462bc3b34157704644c8e0e470fb26461c635cd854e604a2ff5cfb976fca971d037e20ca8dcb7ad7952827881c9f0a68e24e7f1931fa33c7b7c150c147b04e951b99c1a0745843eb76cf7ea5a16708ea69a19cd3c4ec9949181b27bbe8b565b6918d061d5f1aa04cd4288afc161ac09", 0xa8}, {&(0x7f0000005080)="9f21c9576dda36ee1ff11a51363471dff8dbc658bc23a859f51bd16b40b8cccd6e05d385302d90caba4588c68b1dbea48461a989f8631d1bf2a3016fa56c2fd75941bdb7cf2ab98463a7e7eca28da22db09b41a1a7501a02e6aa53744b1e7912d77700fd4f5e4725d7359057974dfbcb0f301fd1f0df0c", 0x77}, {&(0x7f0000005140)}, {0x0}, {&(0x7f0000005280)="715fb24e1be79c620764d2061f79dfcb053e08b416a7d05ac5339bc0ce24eff9ef5722627bd0d670036e91e6ca8970c7771942a4ce3a9eb74db2a0d6fb28237c65284d3dc010beca922c49e6063932979940e4041350abc663f751a6f0e9e6280b98d2fa480a952f306a1bb82e8f4b0c1facf2616653b92de43f20c43b5206bc9bfc4170fef6f8ed0704dc29e48b6f88403623555bdcddea64947891930633f1aa25d3f0979f495394654aabcbf347a3019501362714e6911859665792c5c9a9845cc7d6338f1a1a8cc7308e21c8a415fc26fc06595d0316a4512b07d5df3e384d35047742df46", 0xe7}], 0x6, &(0x7f0000005400)=[{0x18, 0x108, 0x7, "cff100b114a5"}, {0x48, 0x106, 0x0, "b2c2cf8905950700b7bbbb807356580a9bc1fa44a6e4adae984524ed484d9e4739b1602d0750695df6fba842b756261b56c7b6d3ebc9"}, {0x48, 0x10d, 0x5, "88fe55604a822f34508cf5e0c300306b55467d8b331a71c8a6508d890c6799411e34431fb01809ce5d602ce71430c363e4427d82"}, {0xe0, 0x107, 0x4, "880bd4f2d9a1973d901a658da4f6728198e515b2a56e158e4b57d543466f416837dc3bac1f65eefe23ba36e517257022814cf9639ab99a82350fe243f852404ad05d2d348a62ecb1d4f0d2c763c1d0cb49c11057d605a66f84ce16276d5b04db0818d892a5e0d4046c5f4f190cd69625426f3c0d5d7f0445583367990564653374d4f3ba811d320725edd9b8cfeed5d585207730ec432d720a78964ccddc92a31c7e52a331c49bdfde6eea0fa7631a75d6149f0bd87532bd086481a8dd21bcb036de597acf23268affee006b13"}, {0x48, 0x11, 0x1, "51a2a9131c9233e87717d83bb00cb026f4e896b79f40e4ab6fe369178e37b2b197e3923e24d74629b9fefd029b90302236ba5b"}, {0x18, 0x0, 0x2, "ea7d44ca4c"}, {0x28, 0x114, 0x0, "9cbfbc7e353dfe4ede423bb142726bdd8a80a6"}, {0xb8, 0x113, 0x31, "da5ebd88159edef494b049c6561b3b8e3e1595605f5b079ae42627259efbbb6b7d38028a0207d1932ef572a7622b260b2b7fcf60a7f31ba1d8cc4d5755ce26b6e55cd71efc111d612b3c6704ee0d47484dc129ed92efb4f6eadb2ee3248ed43e6e3547e9b7ce9902e009e5fbc474c520125d491502c20a576ab6575369cbf16e7c01af0815964e761dddfdeba2cbd354a238a52972292aae13be9fb25d5af09bc133085d"}], 0x2c8}}], 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c00000000000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005a40)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004811) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004cc0)=0x14) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x5) 11.636133752s ago: executing program 3 (id=2829): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x28}}, 0xc010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000214000000020a050000000000000000000000000020000000020a0108"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00"], 0x30}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x74, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0xffffffff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 11.430645877s ago: executing program 3 (id=2831): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000300000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket(0x1a, 0x804, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 11.364120386s ago: executing program 3 (id=2833): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x0, 0x2000}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0x36) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x40, 0x28, 0x10, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48cd}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=@newqdisc={0x88, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0x3, 0xffff}, {0x7, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe31}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xed, 0x0, 0x9, 0x3, 0x3, 0x1, 0xd0c0, 0x3, 0xa2ce}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x2, 0x5, 0x4, 0x7, 0x3]}, &(0x7f0000000040)=0x54) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r14 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r14, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0) (async) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) (async) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000300)=@isdn={0x22, 0x5, 0x7, 0x7, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="f7007d154190d254a9d03134d9cdb6bc41dcfa23516990b323cff4bab086c3afde05d78a5218a69cdf26a4871867eeb8dff613d2c4cb1dd9826444c54dc8354c96a8c4a0cf2186201ebc9d26aa0777926e30b710538bcfe5d205c082adbbbef86243f760fd007b75269f7fb5eff3c96a83934facb38831813a98de6ae5325d472ced42b5be37b05328232a40825bd95aabf7205d780beb33db2eae27d3bf6ed9f40a0b835e00ca15c3c34094eb509784343b1d91887fe50c0e55b394c1a9d38cdbbfc43bd081", 0xc6}, {&(0x7f0000000480)="5a811d52d71b94ad1ebd0fd5def3dbc31b1382269d658dce863538f3248edf590d8f313213bf5aa0cdf9a8e33d3ed3b228fcfefa5b913b1d8e211aff48888ac96d28a1a33655a344c53cecc42cca4c86c5b015b9161216d883f6b5190bd4853f50ea84e434480f1003784ce569219c15de02d8a17cb527", 0x77}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="40000000000000000901000003000000e84d1efa49d34fa52ec04fbc3cdafc74edb7305c94480ccde80b802186a33dd0c30a77c7ec92bb4c9220328e5c000000a0000000000000003a000000008000008526c5b86153056447805072199e4a0739a1be2062b4932fa70c069f2baaf704d8df4afc11e5d788b19dd7bba740633e411ba48cbd7e7087864f7faffd24ea3dcf801300c5090edeacf2219a74f6c60ddcade0a986abc31a295c40e9febb75d63a3b869a99a89262e701657db29db4399aed7f4053ff1d6ee612572232a2ee6068ea4f24ff98597f80c7b88ecc000000c8000000000000000c01000004000000b905642df533e70f503c4d226fa89eceb480ba1b0551bc670b98d3d10058639e39a6657acf882b8ed61ff1663489d08fcfec36a6c102c01da1c0e9b5f4501720faaf441e775f15df77826a20ee71b4c92aa9f80c57b799755e9b2f4f154054c39372e97c9e76e5d3f22fff5932e42df7c223c21dec509c05c067078a0a7eae1c3bb1de281412e9c0d128585d5c460cbc0ac2153dbeaf7f35c6eaabe50a7ebfa0958014e1cf1ba540deb367bb2341ad713af100000000000080000000000000000000000010000000ab3c6b26d9df630100008000000000ea08079c74d554604776c7600a156935c16d68003cdb0b7100109d7f4e5eb0bfd43f4fb4f31b4d75b4ba22d36c764002b9c1422c0c5c877dc99d907bf4f278c7838103cd4eb282ea0408c6032b006835f1cf3b33414f41513d45e0f60000000000", @ANYRES32=r13], 0x228}, 0x8001) 11.239532892s ago: executing program 3 (id=2835): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0000000000000800000009000000000000001d5ea1778295131cb9bed0403edc1537dd148fb60c271c4d6aa40cdbbb7fc14900e8f7a24b8cd6788b38f6105f1d9dc0c5ce1bbe4b0a4507d12776852bad49e30b864eba95e2a9666bf667efd8c738d7c97f98a14af5ba0cd21627f66c3995af90fbcb7186cae59c88922da07dced29977ebf24072c0fdb5d3f0b8dbb8a717930bce06246ca7009e30e19f04397cb2c8dccc6eb15090de12c6684d24e02ee9164a4a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r2}, 0x20) close(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000540)={0x2c, 0x10, r4, 0x29, r1}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x88, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x43, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 5.756069204s ago: executing program 4 (id=2881): epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000005000f"], 0x24}, 0x1, 0x0, 0x0, 0x888}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x0) unshare(0x400) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x5}}, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.547894381s ago: executing program 4 (id=2885): socket$kcm(0x2a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000440)=""/154, 0x9a}], 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) close(r4) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'fo\x00', 0x11, 0xa7e, 0x70}, 0x2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a0103000000000000"], 0x118}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x34, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[@ANYBLOB="3000000a0000000000000012000000140003006c6f00"/31], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9000004f8b7b00", @ANYRES32=0x0, @ANYRESOCT=r0], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400c4) 5.420049187s ago: executing program 1 (id=2889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x1f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r1, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0xd7a, &(0x7f00000009c0)={@broadcast, @link_local, @val={@val, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x6, 0x6, "e8db2b", 0xd3c, 0x21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@routing={0x33, 0x4, 0x0, 0xb, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x3a, 0xb, '\x00', [@generic={0x5, 0x4d, "bbf253e438c12c48dac61b3e209c23fe9cb75d4a2c05e165a7e0fcc4a27cf2ecc9906dab5b2619047c9aa34f459b76555b62659e2b20da16531327bc9d16a32c3a16a61d789d1f168317503d3b"}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, @srh={0x5e, 0xe, 0x4, 0x7, 0x6, 0x30, 0x8001, [@mcast1, @loopback, @private2, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00']}, @hopopts={0x8, 0x16a, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x80, 0x6}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x68, 0xb3d, "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"}, @enc_lim={0x4, 0x1, 0x4}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x9, 0x7, "de8867", 0x58, "44d561"}, "4523c6f18c016a7f54d2fa36f624513d10796aeb1be739a55d4a398ae1221f85f61e2afbc702c56d39277620777405741c431d9eb4aa4a5adb7114131ac93d6ffd88b70b5f33bf69859a2054d43a8468682123f05d33b3252d282c2e3dacf32f8ce19c27cdb3ac8e6350305c60b1f6935ec61f2c10c271ec6412988211740d64eb04c7e3241d4c125fc33b344cdcae8d903ae2cb252cd11cf2dad627b772119dadcc6061cec4ad2b95b92ebb4f7dac96f1bff31642af6d4740d725c7df994711d295c8e54b8d8cce4e03dcb3"}}}}}}}, 0x0) 5.307473693s ago: executing program 1 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="362b08580b972000000076000d0b004000000000000003000000000000000800010002fe76002ab4f41f1fbfb9a75e6906004804d3c1afd9c22d518b686a6c288cf87532ba032c83a0c3acb01c98a51095ee309595cd85223899533fd830d32257a5538b149be24cc2808d1524633c39ddaf94adcd3a6eff00fb27d161cc900f11537fe20cd1cfa6d4c5dd675bbf54ea8b2a57ff0236f90731da10bf1478dc9d24c3"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 4.250506386s ago: executing program 4 (id=2896): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="4400de53f5bd9b658eaf000010001fff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028008000800000000000500090000000000"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x4, 0x3ef4, 0x20000265}, 0x2c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r4, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x8) (async) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x8) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 3.048049324s ago: executing program 2 (id=2906): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e24, @rand_addr=0x3}], 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e24, @rand_addr=0x3}], 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) 2.889040824s ago: executing program 2 (id=2907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(0x4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000000000010000000c0002000200000000000000400007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6003}, @val={0x1, 0x0, 0x1, 0x7, 0x6, 0x6}, @eth={@empty, @random="fe6a57b24bec", @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x0, 0x0, 0x4c, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @empty, {[@cipso={0x86, 0x25, 0x1, [{0x2b18fa6e191bffea, 0xf, "9b9cb464ffb26612aebd68d968"}, {0x2, 0x10, "e7eb82d832431838da3c0b19882b"}]}]}}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}}}}}}}}, 0x68) 2.544156816s ago: executing program 0 (id=2909): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xe}, @typed={0x8, 0x98, 0x0, 0x0, @u32=0x6}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) unshare(0x400) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0b040000000000000000020000034800048028000180"], 0x9c}, 0x1, 0x0, 0x0, 0x24004050}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0119802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x158}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffdfffe}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x4000) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xc1, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbd3df250200d93d8bab04000104000000000000000000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x44000) 2.500300111s ago: executing program 2 (id=2910): r0 = socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000100100000b000800"], 0x20}, 0x0) 2.216358191s ago: executing program 0 (id=2911): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000a50000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.063932269s ago: executing program 2 (id=2912): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x2a, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r2, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002ac0)=""/4067, 0xfe3}, {&(0x7f0000000600)=""/86, 0x56}], 0x4}, 0x9}], 0x1, 0x40000000, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB="00000300000000000a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) 1.891770345s ago: executing program 0 (id=2913): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x10}, 0x1, r4}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 1.819902103s ago: executing program 1 (id=2914): setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x33, @rand_addr=0x64010102, 0x4e24, 0x2, 'sh\x00', 0x31, 0x1, 0x1d}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x33, @rand_addr=0x64010102, 0x4e24, 0x2, 'sh\x00', 0x31, 0x1, 0x1d}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) syz_emit_ethernet(0xaa, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x8, 0x9c, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @private=0xa010101, {[@noop, @noop, @cipso={0x86, 0x15, 0x1, [{0x5, 0xf, "a7c36a32a1552f5c408b690678"}]}, @end]}}, {{0x4e23, 0x4e23, 0x41424344, r3, 0x0, 0x0, 0xf, 0x4, 0x6, 0x0, 0xfffe, {[@exp_fastopen={0xfe, 0xb, 0xf989, "7f769eadfe0765"}, @fastopen={0x22, 0x2}, @generic={0x8, 0x6, "d7b6339f"}, @sack_perm={0x4, 0x2}, @generic={0x13, 0x9, "2dec6ebea9ecbf"}, @generic={0x8, 0x3, "a7"}, @exp_fastopen={0xfe, 0x5, 0xf989, 'R'}]}}, {"d4934eb0ad7daf2d9e32d0bc50ace9553acd6da8d74c1fff7536f33aa7b6eee35a4a01325da390a901415e63c2a324dc369bbdd1"}}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x594, 0xecf, 0xb98, 0x99b]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x29, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e20, 0x6ab9, @private0, 0x1000}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e20, 0x6ab9, @private0, 0x1000}}}, 0x84) syz_emit_ethernet(0x12f, &(0x7f0000000240)={@empty, @local, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0xc}, {0x81}], @ipv4=@tcp={{0x6, 0x4, 0x3, 0x1b, 0x111, 0x66, 0x0, 0x86, 0x6, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e22, r1, r3, 0x0, 0x0, 0xb, 0x10, 0x2, 0x0, 0x907, {[@generic={0x5, 0xe, "47cc57d96c1ac913bdf72bb1"}, @timestamp={0x8, 0xa, 0x7f}]}}, {"f002a185a1e542aadd653670e6e0ce2018f0071fbe51a0f3b416a90ee790d6396afb97c4e913379a50d20c82d89462d9db03eb37dc33803c11edb7e7b3cdd27279050d58ed8b4fa608f9417baabbd0f9bd1ea802c858f9b2d780f5a22d9625d6eeb3055e263c939b95cad49bb1a0df15f504ade71abc637db6a7c7824730d315590c8c3ee9afadeaf54a2e9ae2d94883ae1857ea1f2e569b012cffc495afeb99777eb846270a46fbae3c66331a6c8faef44ce448be298c106c4256891ffdc4bd0bb80401a12e018d4ef8de7a4e"}}}}}}}, &(0x7f0000000380)={0x1, 0x2, [0x61c, 0xc33, 0x378, 0x15c]}) (async) syz_emit_ethernet(0x12f, &(0x7f0000000240)={@empty, @local, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0xc}, {0x81}], @ipv4=@tcp={{0x6, 0x4, 0x3, 0x1b, 0x111, 0x66, 0x0, 0x86, 0x6, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e22, r1, r3, 0x0, 0x0, 0xb, 0x10, 0x2, 0x0, 0x907, {[@generic={0x5, 0xe, "47cc57d96c1ac913bdf72bb1"}, @timestamp={0x8, 0xa, 0x7f}]}}, {"f002a185a1e542aadd653670e6e0ce2018f0071fbe51a0f3b416a90ee790d6396afb97c4e913379a50d20c82d89462d9db03eb37dc33803c11edb7e7b3cdd27279050d58ed8b4fa608f9417baabbd0f9bd1ea802c858f9b2d780f5a22d9625d6eeb3055e263c939b95cad49bb1a0df15f504ade71abc637db6a7c7824730d315590c8c3ee9afadeaf54a2e9ae2d94883ae1857ea1f2e569b012cffc495afeb99777eb846270a46fbae3c66331a6c8faef44ce448be298c106c4256891ffdc4bd0bb80401a12e018d4ef8de7a4e"}}}}}}}, &(0x7f0000000380)={0x1, 0x2, [0x61c, 0xc33, 0x378, 0x15c]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0xf3a, 0x0) splice(r9, 0x0, r12, 0x0, 0x80, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r11) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r13, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.65156822s ago: executing program 4 (id=2915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) unshare(0x2c020400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r2, r1, 0x0, r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000edff2b000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c000280080002400000000a080003400000008a08000140000000090900010073797a30"], 0xec}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x6, 0x7, 0xffffffff, 0x8}, 0xffffffffffffff5f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1800001, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x600000c, 0x40010, 0xffffffffffffffff, 0x7f) 1.627179449s ago: executing program 0 (id=2916): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010625bd7000fbcbdf250a00000000f3ffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x4, 0x0, 0x32}, @in={0x2, 0x4e37, @dev={0xac, 0x14, 0x14, 0x37}}, @can, 0xbca, 0x0, 0x0, 0xb00, 0x2, 0x0, 0xe2ab, 0x5, 0x9}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) (async) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f6ff080004000006000008001b0000000000"], 0x30}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.619622565s ago: executing program 1 (id=2917): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r2, &(0x7f0000000000)="f4", 0x1, 0x14, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @private0, 0x10000}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000140), 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, 0x0, 0x0) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb702000008000000b70300000f200000a500feff0600000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x4, 0x6}, 0x8) 1.56776922s ago: executing program 4 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d", 0x2e}], 0x1, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x14) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0xfffff064, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 239.584836ms ago: executing program 0 (id=2919): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[]) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, 0x0, 0xd) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) 206.352849ms ago: executing program 4 (id=2920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000180), 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000010401010000000000000000000300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x74, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x11, 0x2, {0x1, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000003c0)={@empty}, &(0x7f0000000400)=0x14) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) socket$unix(0x1, 0x5, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) 185.801904ms ago: executing program 2 (id=2921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000100013040000000000000000ffffffff00000000000000000000010020010000000000000000000000000002fffd00034e2400090a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000002232000000ac14143c00000000000000000000000000000000000000000700000000000000ff030000000000000400000000000000ffffffffffffffff04000000000000000600000000000000000000000000000003000000000000000800000000000000cc0000000000000000000000000000000d200000000000000000000000000000000000000200000108000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x4804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 107.654912ms ago: executing program 1 (id=2922): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x2, {0x0, 0x7ff}}}}}}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x40}}, 0x28000000) 71.171645ms ago: executing program 1 (id=2923): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0xffffffff, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0x4}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r0, 0x0, 0x0, 0x0) 60.346953ms ago: executing program 0 (id=2924): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x20000400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES64=r2, @ANYBLOB="2f0c832da7815cad2a2b8dee7118cb2f8dee26c434e801da2b8d8ffe820691eeb3fca81b50a9e01e377da560734c671e5be9b7955f818b71951f4c973bb93bb5c4942bb663a06e8d398e09e86d8eeec4958dacbc546b8590bf2ffbffc9884324390a8ed8b13fc8ed5f1572756b6c96c937e501bd4f2393e8fd0eb9cb0c331da005f7d6e82495c73665de3ea7fa76b4026e745c5d13aea87dc4f404f664a32150becdbb6cd98710387fda42c62512033f9ab0e3b47b3af61af171a8d52e9df0297b5ac2084d6a8f1e0ecfd9e95ce3ea3b511843c9d7a8d68616c5576012701f", @ANYRES8=r1], 0x48}, 0x1, 0x0, 0x0, 0x20042804}, 0x2004c8c5) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @initdev}, &(0x7f0000000100)=0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="b2505b8717978bbddc0034d175a3b92b45b8250c6d7fc45ed49927015bdd12d21aaab51fb1dce37e66fbf130075d973ce2f0ed13d787a40b6e3fb309533b8cb48a4dd718f457c41159a9e5c18d0f96d435e85a775173185aa8f29b25b5a417b1943930d90618f1f07170529c8b21be2d1cd714cb47c3bdc29465f808bf67456c473c2b786b1ed6d4710ba949be761f86b9dca24963fec7eae021f1613f53bf121fe27333bd4b4a58aeb00f267d5bf8baf2789be2baa8a3ba0f71de9ccd710b09a04ef4a46ff501e5"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000040)=0x80000002, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) unshare(0x22020600) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48040) 0s ago: executing program 2 (id=2925): socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006d00673c24bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f892e5829106000008001000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="67feffff640400012dbd700efddbdf25d984c706000002066f000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0xba6ecd7dcc49e2a2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1a8d1d2faeede327}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x80000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="54df00000002060102000000000000000006000002050005000200000005000400000000000c000780080012400010000005000100070000000900020073797a30000000000d0003006861163d8644326d5ec20000"], 0x54}}, 0x8000) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0), 0x4) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x43, r2}) (async) socket(0xa, 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8880) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001300100025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3042000000000200fc3213757167e269dc08002000020000001400350069702f67726574e7e3009306b4746f45b8a55927aef2b7ad9a42f8e35388f0e5bfeebf6a9b2768463ec063c6af104f6c0ecef16526660ae752da9a8fe1f35329d72d549fafec2ea760bfded7d1ec2a3b1bd4c91a49c77df345b3d169bad4294f221509d9360b7ff6296b5aa2c81b42a1c6a5f60ef4"], 0x3c}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd39", 0x8) kernel console output (not intermixed with test programs): ss `syz.4.1090'. [ 315.172120][T10241] hsr_slave_0: left promiscuous mode [ 315.181390][T10241] hsr_slave_1: left promiscuous mode [ 315.260335][T10251] : renamed from bond_slave_0 [ 315.522671][T10255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1093'. [ 315.544297][T10255] --map-set only usable from mangle table [ 315.668909][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 316.511184][T10278] sctp: [Deprecated]: syz.2.1100 (pid 10278) Use of int in maxseg socket option. [ 316.511184][T10278] Use struct sctp_assoc_value instead [ 317.126561][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.799425][T10269] veth7: entered promiscuous mode [ 319.083925][T10326] netlink: 'syz.3.1108': attribute type 14 has an invalid length. [ 319.541976][T10342] __nla_validate_parse: 2 callbacks suppressed [ 319.541992][T10342] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1115'. [ 319.914664][T10358] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 319.926756][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1119'. [ 319.954810][T10370] netlink: 'syz.2.1123': attribute type 9 has an invalid length. [ 319.964258][T10370] netlink: 'syz.2.1123': attribute type 11 has an invalid length. [ 319.975643][T10370] netlink: 'syz.2.1123': attribute type 12 has an invalid length. [ 319.984529][T10370] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1123'. [ 319.994365][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 320.088004][T10373] netlink: 'syz.4.1124': attribute type 1 has an invalid length. [ 320.110077][T10376] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1126'. [ 320.127315][T10376] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.179685][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 320.358928][T10393] bond_slave_0: entered promiscuous mode [ 320.364951][T10393] bond_slave_1: entered promiscuous mode [ 320.370708][T10393] team_slave_0: entered promiscuous mode [ 320.377520][T10393] team_slave_1: entered promiscuous mode [ 320.390246][T10393] vlan1: entered promiscuous mode [ 320.395590][T10393] bond0: entered promiscuous mode [ 320.401527][T10393] team0: entered promiscuous mode [ 320.749140][T10410] netlink: 'syz.0.1135': attribute type 9 has an invalid length. [ 320.756880][T10410] netlink: 'syz.0.1135': attribute type 11 has an invalid length. [ 320.765181][T10410] netlink: 'syz.0.1135': attribute type 12 has an invalid length. [ 320.773550][T10410] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1135'. [ 320.783322][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 321.003355][T10384] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 321.173746][T10424] veth0: entered promiscuous mode [ 321.234300][T10424] batadv_slave_0: entered promiscuous mode [ 321.298946][T10420] batadv_slave_0: left promiscuous mode [ 321.304706][T10420] veth0: left promiscuous mode [ 321.864104][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 322.076909][T10461] bridge3: port 1(ip6gretap2) entered blocking state [ 322.100460][T10461] bridge3: port 1(ip6gretap2) entered disabled state [ 322.120184][T10461] ip6gretap2: entered allmulticast mode [ 322.136480][T10461] ip6gretap2: entered promiscuous mode [ 322.172132][T10469] bridge3: port 2(veth9) entered blocking state [ 322.183388][T10469] bridge3: port 2(veth9) entered disabled state [ 322.190911][T10469] veth9: entered allmulticast mode [ 322.200603][T10469] veth9: entered promiscuous mode [ 322.207129][T10469] bridge3: port 2(veth9) entered blocking state [ 322.213786][T10469] bridge3: port 2(veth9) entered forwarding state [ 322.241731][ T5839] Bluetooth: hci0: command 0x080f tx timeout [ 322.274964][T10473] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 322.615235][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'. [ 322.850738][T10491] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.053726][ T6893] bridge3: port 2(veth9) entered disabled state [ 323.298747][T10535] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 323.321679][T10535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.338052][T10535] team0: Port device bond0 added [ 323.452907][T10542] netlink: 'syz.4.1165': attribute type 10 has an invalid length. [ 323.531168][T10542] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 323.741418][T10558] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20004 [ 323.940859][T10565] tipc: Enabled bearer , priority 10 [ 323.956623][T10565] bridge6: entered allmulticast mode [ 324.671165][T10594] __nla_validate_parse: 5 callbacks suppressed [ 324.671182][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 324.899259][T10608] xt_connbytes: Forcing CT accounting to be enabled [ 325.057448][ T934] tipc: Node number set to 2175580011 [ 325.116900][T10622] validate_nla: 4 callbacks suppressed [ 325.116914][T10622] netlink: 'syz.4.1188': attribute type 2 has an invalid length. [ 325.438481][T10629] netlink: 9076 bytes leftover after parsing attributes in process `syz.4.1191'. [ 325.836555][T10641] syzkaller0: entered promiscuous mode [ 325.847685][T10641] syzkaller0: entered allmulticast mode [ 326.145114][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 326.295374][T10669] tipc: Enabled bearer , priority 0 [ 326.304196][T10669] syzkaller0: entered promiscuous mode [ 326.310154][T10669] syzkaller0: entered allmulticast mode [ 326.347527][T10673] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1199'. [ 326.406945][T10668] tipc: Resetting bearer [ 326.426792][T10668] tipc: Disabling bearer [ 326.454225][ T6890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.469503][ T6890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.521520][T10683] nbd: must specify at least one socket [ 327.030661][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 327.130388][T10703] bond0: option all_slaves_active: invalid value (7) [ 327.180045][ T6890] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 327.201316][ T6890] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 327.238349][ T6890] bond0: now running without any active interface! [ 327.356542][T10713] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 327.408430][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 327.756617][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1213'. [ 327.769245][T10708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.797555][T10717] C: renamed from team_slave_0 (while UP) [ 327.819525][T10717] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1213'. [ 328.081507][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1219'. [ 328.095005][T10750] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 328.637411][T10774] cgroup: fork rejected by pids controller in /syz4 [ 328.822767][T10887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 328.882517][T10890] bridge7: entered promiscuous mode [ 329.301178][T10896] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 329.463761][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.474450][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.482758][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.491864][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.499734][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.829412][T10916] tipc: Enabled bearer , priority 0 [ 329.869077][T10922] tipc: Enabled bearer , priority 0 [ 329.877875][T10919] syzkaller0: entered promiscuous mode [ 329.883735][T10919] syzkaller0: entered allmulticast mode [ 329.905869][T10921] tipc: Disabling bearer [ 329.938820][T10925] bond2: (slave veth5): Releasing active interface [ 329.953187][T10925] bond4: (slave gretap1): Releasing active interface [ 329.968163][T10925] bond7: (slave geneve2): Releasing active interface [ 329.989535][T10925] batman_adv: batadv0: Removing interface: gretap2 [ 329.998375][T10925] ip6gretap2: left allmulticast mode [ 330.003697][T10925] ip6gretap2: left promiscuous mode [ 330.009798][T10925] bridge3: port 1(ip6gretap2) entered disabled state [ 330.021968][T10925] veth9: left allmulticast mode [ 330.029415][T10925] veth9: left promiscuous mode [ 330.034453][T10925] bridge3: port 2(veth9) entered disabled state [ 330.056520][ T6901] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.074543][ T6901] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.085963][ T6901] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.119621][T10919] tipc: Resetting bearer [ 330.152728][ T6901] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 330.182073][T10903] chnl_net:caif_netlink_parms(): no params data found [ 330.228605][T10918] tipc: Resetting bearer [ 330.249205][T10918] tipc: Disabling bearer [ 330.304873][T10941] team0: Mode changed to "broadcast" [ 330.642638][T10953] __nla_validate_parse: 3 callbacks suppressed [ 330.642656][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1249'. [ 330.729433][T10960] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 330.754128][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.771633][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.802367][T10903] bridge_slave_0: entered allmulticast mode [ 330.818279][T10903] bridge_slave_0: entered promiscuous mode [ 330.833776][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.846958][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.857399][T10903] bridge_slave_1: entered allmulticast mode [ 330.866671][T10903] bridge_slave_1: entered promiscuous mode [ 330.889544][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 330.926361][T10968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 330.964756][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.984253][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.108758][T10903] team0: Port device team_slave_0 added [ 331.124621][T10903] team0: Port device team_slave_1 added [ 331.222901][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.235638][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.263155][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.275993][T10981] veth0: entered promiscuous mode [ 331.285190][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 331.297674][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.304835][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.331394][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.359999][T10981] veth0 (unregistering): left promiscuous mode [ 331.410319][T10983] tipc: Enabled bearer , priority 0 [ 331.421662][T10983] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1256'. [ 331.457150][T10903] hsr_slave_0: entered promiscuous mode [ 331.477920][T10903] hsr_slave_1: entered promiscuous mode [ 331.505130][T10983] tipc: Resetting bearer [ 331.522137][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1258'. [ 331.547978][T10982] tipc: Disabling bearer [ 331.597457][ T5840] Bluetooth: hci3: command tx timeout [ 331.629498][T10995] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 331.933193][T11010] tipc: Cannot configure node identity twice [ 331.972927][T11010] team0: Device gtp0 is up. Set it down before adding it as a team port [ 332.426457][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1268'. [ 332.552364][T10903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.579992][T10903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.600796][T10903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.624313][T10903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.753746][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.784968][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.815208][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.822426][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.837351][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.844501][ T6881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.113677][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.574505][T11089] x_tables: duplicate underflow at hook 3 [ 333.606558][T11086] bond4: entered promiscuous mode [ 333.606674][ T934] IPVS: starting estimator thread 0... [ 333.611691][T11086] bond4: entered allmulticast mode [ 333.612615][T11086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.683236][ T5840] Bluetooth: hci3: command tx timeout [ 333.707403][T11091] IPVS: using max 31 ests per chain, 74400 per kthread [ 333.731194][T10903] veth0_vlan: entered promiscuous mode [ 333.747775][T10903] veth1_vlan: entered promiscuous mode [ 333.822074][T11098] xt_connbytes: Forcing CT accounting to be enabled [ 333.834347][T11098] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1283'. [ 333.879180][T10903] veth0_macvtap: entered promiscuous mode [ 333.906572][T10903] veth1_macvtap: entered promiscuous mode [ 333.974465][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.036203][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.117516][ T6887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.128693][ T6887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.134385][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.152865][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 334.171967][ T6887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.203030][ T6887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.212856][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.496030][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.504099][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.568489][T11119] bond2 (unregistering): Released all slaves [ 334.671122][ T6901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.682391][ T6901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.780550][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1289'. [ 334.837456][T11134] nbd: must specify a size in bytes for the device [ 334.958995][T11160] netlink: 'syz.0.1291': attribute type 16 has an invalid length. [ 334.993027][T11160] netlink: 'syz.0.1291': attribute type 17 has an invalid length. [ 335.141852][T11160] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.149563][T11160] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.222628][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 335.244279][T11160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.281971][T11160] tipc: Resetting bearer [ 335.340780][T11175] netlink: 'syz.3.1295': attribute type 3 has an invalid length. [ 335.360837][ T6903] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.380892][ T6903] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.400396][ T6903] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.440161][T11175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.504911][ T6903] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.552089][T11191] netlink: 'syz.0.1300': attribute type 10 has an invalid length. [ 335.611213][T11194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.618518][T11194] IPv6: NLM_F_CREATE should be set when creating new route [ 335.625750][T11194] IPv6: NLM_F_CREATE should be set when creating new route [ 335.654386][T11191] syz_tun: entered promiscuous mode [ 335.661792][T11191] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 335.673277][T11197] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 335.760479][ T5840] Bluetooth: hci3: command tx timeout [ 336.138066][T11222] block nbd0: shutting down sockets [ 336.223398][T11230] tipc: Enabled bearer , priority 0 [ 336.242436][T11231] Bluetooth: MGMT ver 1.23 [ 336.248202][T11229] tipc: Resetting bearer [ 336.496583][T11228] tipc: Disabling bearer [ 336.695539][T11239] syzkaller1: entered promiscuous mode [ 336.723537][T11239] syzkaller1: entered allmulticast mode [ 337.169367][T11268] __nla_validate_parse: 3 callbacks suppressed [ 337.169383][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 337.377690][T11273] syzkaller0: entered promiscuous mode [ 337.383415][T11273] syzkaller0: entered allmulticast mode [ 337.533663][T11282] netlink: 'syz.3.1324': attribute type 39 has an invalid length. [ 337.612110][T11284] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1325'. [ 337.709992][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 337.837584][ T5840] Bluetooth: hci3: command tx timeout [ 338.774080][T11289] tipc: Started in network mode [ 338.779653][T11289] tipc: Node identity ac14140f, cluster identity 4711 [ 338.786918][T11289] tipc: New replicast peer: 255.255.255.255 [ 338.793817][T11289] tipc: Enabled bearer , priority 10 [ 338.875794][T11294] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 338.974509][T11303] netlink: 'syz.3.1331': attribute type 178 has an invalid length. [ 338.985250][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1331'. [ 338.992639][T11304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1331'. [ 339.091206][T11294] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 339.322717][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 339.590477][T11340] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1338'. [ 339.629225][T11338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.698747][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1336'. [ 339.735115][T11333] bond0: ARP target 170.170.170.170 is already present [ 339.748253][T11333] bond0: option arp_ip_target: invalid value (2863311530) [ 339.835695][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1336'. [ 339.907501][ T10] tipc: Node number set to 2886997007 [ 339.965026][T11354] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 340.082371][T11358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1343'. [ 340.376543][T11369] vlan0: entered promiscuous mode [ 340.846376][T11392] syzkaller1: entered promiscuous mode [ 340.852494][T11392] syzkaller1: entered allmulticast mode [ 341.409143][T11398] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.416845][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.569975][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.588223][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.783239][T11422] bond5: entered promiscuous mode [ 341.797877][T11422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.815276][ T6884] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.835835][ T6884] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.850076][T11428] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 341.914088][ T6884] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.934902][ T6884] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.183690][T11450] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 342.191836][T11450] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 342.342740][T11460] tipc: Enabled bearer , priority 0 [ 342.350319][T11462] __nla_validate_parse: 4 callbacks suppressed [ 342.350335][T11462] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1373'. [ 342.376434][T11463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1372'. [ 342.647783][T11481] openvswitch: netlink: Missing valid actions attribute. [ 342.654975][T11481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.789211][T11486] pim6reg1: entered promiscuous mode [ 342.794544][T11486] pim6reg1: entered allmulticast mode [ 342.854408][T11488] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1381'. [ 342.865320][T11488] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1381'. [ 342.923342][T11444] tipc: Resetting bearer [ 343.494398][T11512] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 344.723007][T11444] tipc: Disabling bearer [ 344.737067][T11492] netlink: 'syz.1.1383': attribute type 3 has an invalid length. [ 344.755610][T11505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.772181][ T9] tipc: Node number set to 1543179722 [ 344.799185][T11523] syzkaller0: entered promiscuous mode [ 344.814727][T11523] syzkaller0: entered allmulticast mode [ 344.951862][T11533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1391'. [ 345.296971][T11552] raw_sendmsg: syz.3.1397 forgot to set AF_INET. Fix it! [ 345.308698][T11557] vxlan0: entered promiscuous mode [ 345.313852][T11557] vxlan0: entered allmulticast mode [ 345.329140][ T6884] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.338014][ T6884] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.363575][ T6884] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.440106][ T6884] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.569278][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 345.635857][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 345.731530][T11578] netlink: zone id is out of range [ 345.738070][T11578] netlink: zone id is out of range [ 345.746537][T11578] netlink: zone id is out of range [ 345.754032][T11578] netlink: zone id is out of range [ 345.759765][T11578] netlink: zone id is out of range [ 345.765519][T11578] netlink: zone id is out of range [ 346.441555][T11584] netlink: 7994 bytes leftover after parsing attributes in process `syz.0.1406'. [ 346.471849][T11584] netlink: 7994 bytes leftover after parsing attributes in process `syz.0.1406'. [ 347.776860][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 347.828554][T11626] gretap3: entered allmulticast mode [ 348.032164][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 348.145834][T11643] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 348.180821][T11643] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 348.223271][T11643] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1423'. [ 348.635128][T11666] No such timeout policy "syz1" [ 348.891496][T11686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1431'. [ 349.310327][T11700] bond2: option fail_over_mac: invalid value (127) [ 349.329430][T11700] bond2 (unregistering): Released all slaves [ 349.495081][T11719] netlink: 'syz.3.1442': attribute type 3 has an invalid length. [ 349.514023][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1439'. [ 349.550839][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1439'. [ 349.604753][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 349.798625][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 350.014010][T11712] infiniband syz2: set down [ 350.020680][T11712] infiniband syz2: added ipvlan0 [ 350.425998][T11712] RDS/IB: syz2: added [ 350.464629][T11712] smc: adding ib device syz2 with port count 1 [ 350.477978][T11712] smc: ib device syz2 port 1 has no pnetid [ 350.659148][T11744] net_ratelimit: 48 callbacks suppressed [ 350.659167][T11744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.696463][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 350.884421][T11771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.010676][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 351.034794][T11777] netlink: 'syz.3.1454': attribute type 10 has an invalid length. [ 351.643966][T11803] 8021q: VLANs not supported on vxcan0 [ 351.953241][T11816] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 351.996895][T11816] bond2: entered promiscuous mode [ 352.004541][T11816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.997940][T11826] geneve4: entered promiscuous mode [ 353.014331][ T6884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.024473][ T6884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.038599][ T6884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.056490][ T6884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.114151][T11826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.147389][T11826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.183896][T11831] vetè0_virt_wif: renamed from lo (while UP) [ 353.209443][T11831] __nla_validate_parse: 5 callbacks suppressed [ 353.209460][T11831] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1468'. [ 353.325547][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 353.528413][T11799] siw: device registration error -23 [ 353.615407][T11826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.625856][T11826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.643176][T11848] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1474'. [ 353.743797][T11826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.761727][T11826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.831158][T11846] dvmrp0: entered allmulticast mode [ 353.890727][T11826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.911604][T11826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.127728][ T8666] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 354.199434][T11768] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.208186][T11768] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.227095][T11768] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.237040][T11768] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.262600][T11757] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.271930][T11757] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.320891][T11768] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.337087][T11768] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.406155][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 354.425237][T11892] bridge_slave_1: left allmulticast mode [ 354.449695][T11892] bridge_slave_1: left promiscuous mode [ 354.455617][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.470972][T11892] bridge_slave_0: left allmulticast mode [ 354.491985][T11892] bridge_slave_0: left promiscuous mode [ 354.521940][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.569734][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 354.656119][T11897] netlink: 'syz.1.1485': attribute type 29 has an invalid length. [ 354.664537][T11906] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1485'. [ 354.682161][T11901] vlan1: entered promiscuous mode [ 354.684369][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1485'. [ 354.707718][T11903] netlink: 'syz.1.1485': attribute type 29 has an invalid length. [ 354.979157][T11921] vxcan3: entered allmulticast mode [ 355.140337][T11924] openvswitch: netlink: Key type 198 is out of range max 32 [ 355.252768][T11935] tipc: New replicast peer: 255.255.255.255 [ 355.268128][T11935] tipc: Enabled bearer , priority 10 [ 355.459578][T11940] netlink: 'syz.3.1496': attribute type 7 has an invalid length. [ 355.631159][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 355.897342][T11960] team0: Port device bond0 removed [ 355.927852][T11960] bridge_slave_0: left allmulticast mode [ 355.933530][T11960] bridge_slave_0: left promiscuous mode [ 355.957534][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.178532][T11960] bridge_slave_1: left allmulticast mode [ 356.184475][T11960] bridge_slave_1: left promiscuous mode [ 356.192647][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.212205][T11960] bond0: (slave bond_slave_0): Releasing backup interface [ 356.226229][T11960] bond0: (slave bond_slave_1): Releasing backup interface [ 356.241687][T11960] team0: Port device team_slave_0 removed [ 356.251806][T11960] team0: Port device team_slave_1 removed [ 356.258131][T11960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.266234][T11960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.274870][T11960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.891789][T12017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1513'. [ 357.066454][T12026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.852123][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1525'. [ 357.930833][T12063] Set syz1 is full, maxelem 65536 reached [ 358.409301][T12069] openvswitch: netlink: Message has -2 unknown bytes. [ 358.423513][T12069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.684095][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1530'. [ 358.852290][T12094] syzkaller1: entered promiscuous mode [ 358.859445][T12094] syzkaller1: entered allmulticast mode [ 358.951732][T12099] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1536'. [ 358.963987][T12099] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1536'. [ 359.024610][T12103] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1538'. [ 359.127626][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 359.236832][T12119] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 359.256462][T12120] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1541'. [ 359.270890][T12119] xt_TCPMSS: Only works on TCP SYN packets [ 359.319535][T12120] netlink: 'syz.1.1541': attribute type 15 has an invalid length. [ 359.358971][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'. [ 359.370111][T12120] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 359.545506][T12138] netlink: 'syz.0.1547': attribute type 3 has an invalid length. [ 359.561619][T12139] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1549'. [ 359.580283][T12138] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 359.595248][T12138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1547'. [ 359.673393][T12138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1547'. [ 359.892838][T12165] netlink: 'syz.1.1556': attribute type 23 has an invalid length. [ 360.192086][T12187] tipc: Enabled bearer , priority 0 [ 360.200115][T12187] syzkaller0: entered promiscuous mode [ 360.205607][T12187] syzkaller0: entered allmulticast mode [ 360.232707][T12187] tipc: Resetting bearer [ 360.263587][T12186] tipc: Resetting bearer [ 360.340435][T12186] tipc: Disabling bearer [ 360.925584][T12231] netlink: 'syz.1.1574': attribute type 13 has an invalid length. [ 361.164195][T12238] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 361.655847][T12264] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 362.230178][T12292] syzkaller0: entered promiscuous mode [ 362.237330][T12292] syzkaller0: entered allmulticast mode [ 362.295781][T12296] bond0: entered promiscuous mode [ 362.301592][T12296] bond_slave_0: entered promiscuous mode [ 362.307688][T12296] bond_slave_1: entered promiscuous mode [ 362.315678][T12296] bond0: left promiscuous mode [ 362.321927][T12296] bond_slave_0: left promiscuous mode [ 362.327775][T12296] bond_slave_1: left promiscuous mode [ 363.167809][T12328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.447481][T12357] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 363.988867][T12386] __nla_validate_parse: 13 callbacks suppressed [ 363.988885][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 364.253748][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 364.427777][T12411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'. [ 364.560994][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1629'. [ 364.681689][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1630'. [ 364.780468][T12423] bond3: entered promiscuous mode [ 364.786032][T12423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.897801][T12423] bond3 (unregistering): Released all slaves [ 365.083628][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 365.104421][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 365.633538][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 365.658485][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 366.060082][T12461] 0: reclassify loop, rule prio 0, protocol 800 [ 366.285912][T12488] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 366.369618][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 366.386527][T12488] bond3: entered promiscuous mode [ 366.459359][T12488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.552312][T12493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.569332][T12493] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.588403][T12493] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 366.610647][T12493] bond3: (slave wireguard0): making interface the new active one [ 366.626319][T12493] wireguard0: entered promiscuous mode [ 366.633747][T12493] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 367.129615][T12541] netlink: 'syz.3.1657': attribute type 6 has an invalid length. [ 367.188803][T12542] netlink: 'syz.3.1657': attribute type 6 has an invalid length. [ 367.403850][T12561] siw: device registration error -23 [ 367.580362][T12571] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.895415][T12580] netlink: 'syz.1.1664': attribute type 3 has an invalid length. [ 367.917970][T12580] netlink: 'syz.1.1664': attribute type 3 has an invalid length. [ 368.067002][T12592] xt_limit: Overflow, try lower: 271964/0 [ 368.114518][T12594] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 369.668485][T12644] __nla_validate_parse: 8 callbacks suppressed [ 369.668505][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 369.794382][T12649] netlink: 'syz.0.1680': attribute type 6 has an invalid length. [ 369.828260][T12649] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.031782][T12661] netlink: 'syz.0.1682': attribute type 11 has an invalid length. [ 370.140856][T12670] netlink: 'syz.1.1684': attribute type 4 has an invalid length. [ 370.148814][T12670] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1684'. [ 371.181366][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 371.680119][T12710] : entered promiscuous mode [ 371.752541][T12715] : entered promiscuous mode [ 372.303523][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1698'. [ 372.363797][T12743] netlink: 'syz.0.1699': attribute type 19 has an invalid length. [ 372.407429][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 372.428276][T12743] netlink: 'syz.0.1699': attribute type 19 has an invalid length. [ 372.447524][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 372.593926][T12748] syzkaller0: entered promiscuous mode [ 372.609052][T12748] syzkaller0: entered allmulticast mode [ 372.764179][T12758] syzkaller0: entered promiscuous mode [ 372.782333][T12758] syzkaller0: entered allmulticast mode [ 372.801753][T12750] tipc: Enabling of bearer rejected, failed to enable media [ 373.249876][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1709'. [ 373.430134][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 373.704153][T12811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1714'. [ 373.806418][T12817] veth1_macvtap: left promiscuous mode [ 373.817316][T12817] macsec0: entered promiscuous mode [ 373.860414][T12819] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 373.890449][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 374.600219][T12855] xt_bpf: check failed: parse error [ 374.605951][T12846] tipc: Enabled bearer , priority 0 [ 374.632755][T12850] syzkaller0: entered promiscuous mode [ 374.638694][T12850] syzkaller0: entered allmulticast mode [ 374.652790][T12848] syzkaller0: entered promiscuous mode [ 374.658663][T12848] syzkaller0: entered allmulticast mode [ 374.699181][T12856] syz_tun: entered allmulticast mode [ 374.704813][T12838] tipc: Resetting bearer [ 374.721752][T12838] tipc: Disabling bearer [ 374.736739][T12855] vcan0: entered allmulticast mode [ 375.065172][T12854] syz_tun: left allmulticast mode [ 375.452028][T12863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.783039][T12888] __nla_validate_parse: 2 callbacks suppressed [ 375.783058][T12888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1734'. [ 375.996592][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 376.134746][T12911] --map-set only usable from mangle table [ 376.151662][T12911] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 376.418353][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 376.448558][T12928] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 376.484925][T12928] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 376.653544][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1745'. [ 376.665347][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 377.112589][T12947] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 377.122588][T12947] netlink: 'syz.3.1750': attribute type 2 has an invalid length. [ 377.130597][T12947] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 377.139318][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1750'. [ 377.279053][T12951] tap0: tun_chr_ioctl cmd 1074025692 [ 377.310304][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1753'. [ 377.352012][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 377.751267][T12970] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 377.802026][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 378.525210][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 378.567771][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.693375][T12994] IPv6: addrconf: prefix option has invalid lifetime [ 378.745133][T12996] netlink: 'syz.3.1761': attribute type 6 has an invalid length. [ 378.768131][T12996] netlink: 'syz.3.1761': attribute type 7 has an invalid length. [ 378.780761][T12996] netlink: 'syz.3.1761': attribute type 8 has an invalid length. [ 378.791502][T12996] netlink: 'syz.3.1761': attribute type 30 has an invalid length. [ 378.801022][T12996] Cannot find add_set index 0 as target [ 379.753250][T13023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 379.797689][T13016] netlink: 'syz.3.1767': attribute type 11 has an invalid length. [ 379.814939][T13016] netlink: 'syz.3.1767': attribute type 11 has an invalid length. [ 379.917735][T13016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.013131][T13066] syz.3.1780 (13066) used obsolete PPPIOCDETACH ioctl [ 381.572201][T13086] __nla_validate_parse: 10 callbacks suppressed [ 381.572219][T13086] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1786'. [ 381.716791][T13096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 381.746976][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1789'. [ 381.817104][ T5974] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 381.825449][ T5974] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 381.847740][ T8662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 381.953808][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 381.963124][T13105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.095754][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 382.317747][ T8662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 382.878539][ T8662] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 382.930477][T13147] tipc: Enabled bearer , priority 0 [ 383.006204][T13149] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 383.602009][T13165] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 383.695507][T13166] netlink: 'syz.1.1807': attribute type 83 has an invalid length. [ 384.160209][T13177] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 384.179753][T13176] lo: Caught tx_queue_len zero misconfig [ 384.330749][T13179] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1812'. [ 384.341743][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 384.362381][T13179] geneve2: entered promiscuous mode [ 384.367914][T13179] geneve2: entered allmulticast mode [ 384.413850][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 384.423440][T11159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 39920 - 0 [ 384.462569][T11159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 39920 - 0 [ 384.492852][T11159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 39920 - 0 [ 384.517435][T11159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 39920 - 0 [ 384.832963][T13189] netlink: 'syz.1.1816': attribute type 1 has an invalid length. [ 385.153067][T13195] can: request_module (can-proto-4) failed. [ 385.174902][T13195] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 385.183303][T13203] tipc: Enabled bearer , priority 0 [ 385.190580][T13203] syzkaller0: entered promiscuous mode [ 385.196066][T13203] syzkaller0: entered allmulticast mode [ 385.204651][T13201] tipc: Resetting bearer [ 385.241704][T13201] tipc: Disabling bearer [ 385.607350][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 385.667746][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 385.715774][T13231] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1826'. [ 385.985239][T13238] unsupported nlmsg_type 40 [ 386.671844][T13246] __nla_validate_parse: 1 callbacks suppressed [ 386.671863][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 386.719800][T13246] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1832'. [ 386.723043][T13249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1833'. [ 386.799913][T13249] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1833'. [ 386.905830][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 386.955879][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 387.676501][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 387.722521][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 387.761960][T13284] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 387.771934][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 388.082569][T13296] netlink: 'syz.3.1844': attribute type 7 has an invalid length. [ 388.591962][T13312] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1848'. [ 389.061931][T13321] Bluetooth: MGMT ver 1.23 [ 389.208425][ T30] audit: type=1800 audit(1766863642.548:3): pid=13317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1849" name="memory.events" dev="tmpfs" ino=2029 res=0 errno=0 [ 389.401427][T13329] netlink: 'syz.3.1852': attribute type 13 has an invalid length. [ 389.977060][T13329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.994875][T13329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.072756][T13329] tipc: Resetting bearer [ 390.136789][T13343] hsr_slave_1 (unregistering): left promiscuous mode [ 390.151593][T11159] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.151657][ T8666] syz0: Port: 1 Link DOWN [ 390.164857][T11159] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.179936][T11159] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.189986][T11159] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.211077][T11159] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.230123][T11159] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.248782][T11159] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.268321][T11159] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.690521][T13389] x_tables: ip_tables: osf match: only valid for protocol 6 [ 391.001197][T13406] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 391.073502][T13407] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 391.345506][T13422] syzkaller0: entered promiscuous mode [ 391.367436][T13422] syzkaller0: entered allmulticast mode [ 392.120574][T13448] __nla_validate_parse: 5 callbacks suppressed [ 392.120590][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'. [ 392.286473][T13458] x_tables: duplicate underflow at hook 1 [ 392.440455][T13469] syzkaller1: entered promiscuous mode [ 392.445957][T13469] syzkaller1: entered allmulticast mode [ 392.499609][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'. [ 392.553611][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1897'. [ 392.563933][T13478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1897'. [ 392.573066][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1897'. [ 392.585509][T13478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1897'. [ 392.711204][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 392.741838][T13486] bond11: option updelay: invalid value (18446744073709551615) [ 392.749927][T13486] bond11: option updelay: allowed values 0 - 2147483647 [ 392.759694][T13486] bond11 (unregistering): Released all slaves [ 392.898728][T13501] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 392.910575][T13501] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 393.018987][T13514] netlink: 'syz.2.1905': attribute type 3 has an invalid length. [ 393.082236][T13520] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 393.343930][T13527] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1910'. [ 393.359750][T13527] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1910'. [ 393.406641][T13534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1912'. [ 393.427672][T13534] netlink: 'syz.3.1912': attribute type 6 has an invalid length. [ 393.448576][T13534] netlink: 'syz.3.1912': attribute type 5 has an invalid length. [ 393.478364][T13534] netlink: 'syz.3.1912': attribute type 4 has an invalid length. [ 393.497549][T11763] nci: nci_rx_work: unknown MT 0x7 [ 393.498161][T13534] netlink: 'syz.3.1912': attribute type 4 has an invalid length. [ 393.561298][T13543] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 393.917939][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.314986][T13594] sctp: [Deprecated]: syz.0.1924 (pid 13594) Use of int in max_burst socket option. [ 394.314986][T13594] Use struct sctp_assoc_value instead [ 394.454020][T13596] validate_nla: 1 callbacks suppressed [ 394.454036][T13596] netlink: 'syz.3.1928': attribute type 12 has an invalid length. [ 394.956484][T13618] tipc: Disabling bearer [ 396.939945][T13701] netlink: 'syz.1.1954': attribute type 29 has an invalid length. [ 397.105175][T13708] IPv6: Can't replace route, no match found [ 397.739588][T13739] __nla_validate_parse: 13 callbacks suppressed [ 397.739605][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1963'. [ 397.954417][T13727] netlink: 'syz.0.1961': attribute type 3 has an invalid length. [ 397.971581][T13727] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 397.984091][T13727] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1961'. [ 398.090667][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 398.129234][T13741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 398.163185][T13741] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1964'. [ 398.474383][T13763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'. [ 398.704403][T13778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1976'. [ 398.714233][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 398.761487][T13779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1976'. [ 398.775675][T13781] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1978'. [ 398.873078][T13784] sctp: [Deprecated]: syz.4.1978 (pid 13784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.873078][T13784] Use struct sctp_sack_info instead [ 399.669463][T13800] netlink: 'syz.2.1982': attribute type 21 has an invalid length. [ 399.696037][T13798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.723703][T13798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.739544][T13798] bond1: (slave bond0): Enslaving as an active interface with an up link [ 400.045947][T13798] bond1 (unregistering): (slave bond0): Releasing backup interface [ 400.056605][T13798] bond1 (unregistering): Released all slaves [ 400.080788][T13813] netlink: 'syz.4.1981': attribute type 3 has an invalid length. [ 400.296799][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.325307][T13821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.662769][T13842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.709983][T13842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 400.996845][T13842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.046934][T13842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 401.300741][T13842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.331230][T13842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 401.458329][T13842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.474238][T13842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 401.867659][T11765] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.879294][T11765] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 39920 - 0 [ 401.922247][T11765] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.941887][T11765] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 39920 - 0 [ 401.996927][T11765] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.014692][T11765] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 39920 - 0 [ 402.045231][T11765] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.063012][T11765] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 39920 - 0 [ 402.441910][ T10] IPVS: starting estimator thread 0... [ 402.447979][T13884] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 402.462317][T13876] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 402.547471][T13885] IPVS: using max 29 ests per chain, 69600 per kthread [ 402.628525][T13897] netlink: 'syz.3.2005': attribute type 46 has an invalid length. [ 403.399129][T13916] tipc: Enabling of bearer rejected, failed to enable media [ 403.621347][T13927] __nla_validate_parse: 8 callbacks suppressed [ 403.621364][T13927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2011'. [ 403.864591][T13936] syz.1.2014: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 403.892985][T13936] CPU: 1 UID: 0 PID: 13936 Comm: syz.1.2014 Not tainted syzkaller #0 PREEMPT(full) [ 403.893012][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.893030][T13936] Call Trace: [ 403.893038][T13936] [ 403.893047][T13936] dump_stack_lvl+0x189/0x250 [ 403.893088][T13936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.893109][T13936] ? __pfx__printk+0x10/0x10 [ 403.893133][T13936] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.893154][T13936] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.893176][T13936] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 403.893198][T13936] warn_alloc+0x214/0x310 [ 403.893220][T13936] ? stack_trace_save+0x9c/0xe0 [ 403.893245][T13936] ? __pfx_warn_alloc+0x10/0x10 [ 403.893274][T13936] ? kasan_save_track+0x4f/0x80 [ 403.893291][T13936] ? kasan_save_track+0x3e/0x80 [ 403.893306][T13936] ? __kasan_kmalloc+0x93/0xb0 [ 403.893320][T13936] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 403.893334][T13936] ? xskq_create+0x56/0x170 [ 403.893356][T13936] ? xsk_setsockopt+0x4dc/0x8d0 [ 403.893374][T13936] ? do_sock_setsockopt+0x17c/0x1b0 [ 403.893390][T13936] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 403.893406][T13936] ? do_syscall_64+0xfa/0xf80 [ 403.893427][T13936] __vmalloc_node_range_noprof+0x134/0x16a0 [ 403.893476][T13936] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 403.893502][T13936] ? __kasan_kmalloc+0x93/0xb0 [ 403.893525][T13936] vmalloc_user_noprof+0xad/0xf0 [ 403.893544][T13936] ? xskq_create+0xbf/0x170 [ 403.893568][T13936] xskq_create+0xbf/0x170 [ 403.893595][T13936] xsk_init_queue+0xb0/0x110 [ 403.893623][T13936] xsk_setsockopt+0x4dc/0x8d0 [ 403.893649][T13936] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.893674][T13936] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.893695][T13936] ? aa_sock_opt_perm+0xff/0x1a0 [ 403.893717][T13936] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 403.893734][T13936] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.893759][T13936] do_sock_setsockopt+0x17c/0x1b0 [ 403.893784][T13936] __x64_sys_setsockopt+0x13f/0x1b0 [ 403.893810][T13936] do_syscall_64+0xfa/0xf80 [ 403.893830][T13936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.893848][T13936] ? clear_bhb_loop+0x60/0xb0 [ 403.893869][T13936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.893892][T13936] RIP: 0033:0x7fb6b518f749 [ 403.893910][T13936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.893927][T13936] RSP: 002b:00007fb6b5fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.893947][T13936] RAX: ffffffffffffffda RBX: 00007fb6b53e5fa0 RCX: 00007fb6b518f749 [ 403.893959][T13936] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 403.893969][T13936] RBP: 00007fb6b5213f91 R08: 0000000000000004 R09: 0000000000000000 [ 403.893980][T13936] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.893991][T13936] R13: 00007fb6b53e6038 R14: 00007fb6b53e5fa0 R15: 00007ffce7ddbc98 [ 403.894022][T13936] [ 403.894662][T13936] Mem-Info: [ 404.038114][T13940] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 404.209177][T13936] active_anon:4696 inactive_anon:0 isolated_anon:0 [ 404.209177][T13936] active_file:3334 inactive_file:39966 isolated_file:0 [ 404.209177][T13936] unevictable:768 dirty:113 writeback:0 [ 404.209177][T13936] slab_reclaimable:13175 slab_unreclaimable:177771 [ 404.209177][T13936] mapped:29201 shmem:1359 pagetables:1422 [ 404.209177][T13936] sec_pagetables:0 bounce:0 [ 404.209177][T13936] kernel_misc_reclaimable:0 [ 404.209177][T13936] free:1239026 free_pcp:15046 free_cma:0 [ 404.295596][T13936] Node 0 active_anon:18784kB inactive_anon:0kB active_file:13336kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116804kB dirty:448kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15656kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 404.329161][T13936] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 404.361011][T13936] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.395111][T13936] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 404.401761][T13936] Node 0 DMA32 free:1046732kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18784kB inactive_anon:0kB active_file:13336kB inactive_file:159664kB unevictable:1536kB writepending:448kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:43260kB local_pcp:20124kB free_cma:0kB [ 404.438457][T13936] lowmem_reserve[]: 0 0 1 1 1 [ 404.444049][T13936] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.476322][T13936] lowmem_reserve[]: 0 0 0 0 0 [ 404.482287][T13936] Node 1 Normal free:3894268kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16544kB local_pcp:10688kB free_cma:0kB [ 404.617429][T13936] lowmem_reserve[]: 0 0 0 0 0 [ 404.622201][T13936] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 404.658389][T13936] Node 0 DMA32: 3846*4kB (UME) 3293*8kB (UME) 1403*16kB (UM) 340*32kB (UME) 991*64kB (UME) 582*128kB (UME) 461*256kB (UME) 291*512kB (UME) 209*1024kB (UM) 57*2048kB (UME) 56*4096kB (M) = 1040112kB [ 404.704217][T13936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.717772][T13936] Node 1 Normal: 193*4kB (UME) 45*8kB (UME) 37*16kB (UME) 146*32kB (UME) 46*64kB (UME) 5*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3894268kB [ 404.740450][T13936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.750481][T13936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.762425][T13936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.772415][T13936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.786605][T13936] 44655 total pagecache pages [ 404.791816][T13936] 0 pages in swap cache [ 404.796036][T13936] Free swap = 124996kB [ 404.801383][T13936] Total swap = 124996kB [ 404.806581][T13936] 2097051 pages RAM [ 404.811477][T13936] 0 pages HighMem/MovableOnly [ 404.816217][T13936] 425122 pages reserved [ 404.820779][T13936] 0 pages cma reserved [ 405.304054][T13962] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.2021'. [ 405.485865][T13975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2024'. [ 405.551479][T13977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2025'. [ 405.610769][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 405.852751][T14000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2031'. [ 406.300709][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 406.496930][T14049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 406.556289][T14040] syzkaller1: entered promiscuous mode [ 406.580033][T14040] syzkaller1: entered allmulticast mode [ 406.989498][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2052'. [ 407.045164][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 407.692208][T11765] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.707277][T11765] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.716593][T11765] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.736812][T11765] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.784860][T14130] wireguard1: entered promiscuous mode [ 407.806012][T14130] wireguard1: entered allmulticast mode [ 407.836196][T14130] team0: Device wireguard1 is of different type [ 407.938359][T11765] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.952399][T11765] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.970492][T11765] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.991006][T11765] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.830481][T14176] __nla_validate_parse: 7 callbacks suppressed [ 408.830498][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2076'. [ 408.847381][T14176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2076'. [ 408.885798][T14183] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 409.090661][T14186] tipc: Enabling of bearer rejected, already enabled [ 409.107889][T14186] tipc: Resetting bearer [ 409.230683][T14189] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2080'. [ 409.363839][T14192] bond1: entered promiscuous mode [ 409.369473][T14192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.421864][T14192] syzkaller1: entered promiscuous mode [ 409.438766][T14192] syzkaller1: entered allmulticast mode [ 409.622174][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 409.714395][T14202] openvswitch: netlink: IP tunnel dst address not specified [ 409.840127][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2085'. [ 409.867990][T14202] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2084'. [ 409.917409][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.204406][T14228] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 410.512241][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 410.544073][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 411.673106][T14279] syzkaller0: entered promiscuous mode [ 411.678709][T14279] syzkaller0: entered allmulticast mode [ 411.846189][T14288] ¾x9ÿ: renamed from bridge_slave_0 [ 411.861115][T14291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2104'. [ 411.896300][T14289] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2108'. [ 412.857485][T14320] macsec2: entered promiscuous mode [ 412.863891][T14320] bridge0: port 1(macsec2) entered blocking state [ 412.881115][T14320] bridge0: port 1(macsec2) entered disabled state [ 412.894265][T14320] macsec2: entered allmulticast mode [ 412.905116][T14320] macsec2: left allmulticast mode [ 413.226734][T14342] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 413.277671][T14342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.909820][T14357] __nla_validate_parse: 9 callbacks suppressed [ 413.909837][T14357] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2124'. [ 413.932637][T14359] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.127894][T14366] tipc: Enabled bearer , priority 0 [ 414.161338][T14366] syzkaller0: entered promiscuous mode [ 414.172296][T14366] syzkaller0: entered allmulticast mode [ 414.231455][T14366] tipc: Resetting bearer [ 414.278917][T14375] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2132'. [ 414.290982][T14365] tipc: Resetting bearer [ 414.301416][T14375] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2132'. [ 414.324428][T14378] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2132'. [ 414.342185][T14378] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2132'. [ 414.354234][T14365] tipc: Disabling bearer [ 414.984435][T14414] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 415.010308][T14415] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 415.760028][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2140'. [ 415.904523][T14463] : left promiscuous mode [ 415.964233][T14467] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 415.976089][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'. [ 416.239683][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2148'. [ 416.429636][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 416.898035][T14517] tipc: Enabled bearer , priority 0 [ 416.915274][T14517] syzkaller0: entered promiscuous mode [ 416.928750][T14517] syzkaller0: entered allmulticast mode [ 417.010030][T14517] tipc: Resetting bearer [ 417.015819][T14520] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 417.018795][T14517] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2154'. [ 417.073078][T14526] netlink: 'syz.0.2159': attribute type 5 has an invalid length. [ 417.119522][T14514] tipc: Resetting bearer [ 417.153029][T14514] tipc: Disabling bearer [ 417.285997][T14526] geneve5: entered promiscuous mode [ 417.324078][T14526] geneve5: entered allmulticast mode [ 417.373883][T14531] geneve3: entered promiscuous mode [ 417.392585][T14531] geneve3: entered allmulticast mode [ 417.405619][T11763] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 417.415833][T11763] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 417.476106][T11763] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 417.497016][T11763] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 417.516118][T11763] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.545774][T11763] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.604803][T11763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.656452][T11763] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.025700][T14582] sctp: [Deprecated]: syz.1.2168 (pid 14582) Use of int in maxseg socket option. [ 418.025700][T14582] Use struct sctp_assoc_value instead [ 418.138006][T14582] netlink: 'syz.1.2168': attribute type 13 has an invalid length. [ 419.096407][T14605] geneve0: entered promiscuous mode [ 419.103414][T14605] geneve0: entered allmulticast mode [ 419.617688][T14627] __nla_validate_parse: 9 callbacks suppressed [ 419.617706][T14627] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2179'. [ 419.903190][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 420.064969][T14640] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2183'. [ 420.085332][T14640] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2183'. [ 420.431590][T14647] bond0: option min_links: invalid value (18446744071830523904) [ 420.446209][T14647] bond0: option min_links: allowed values 0 - 2147483647 [ 420.550553][T14651] IPv6: addrconf: prefix option has invalid lifetime [ 420.772802][T14656] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2187'. [ 421.594894][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'. [ 421.618949][T14684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2194'. [ 421.836280][T14692] IPVS: Error connecting to the multicast addr [ 422.175064][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2205'. [ 422.220136][T14718] syzkaller0: entered promiscuous mode [ 422.246356][T14718] syzkaller0: entered allmulticast mode [ 422.312860][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 422.393331][T14733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2210'. [ 422.717099][T14758] syzkaller1: entered promiscuous mode [ 422.739761][T14758] syzkaller1: entered allmulticast mode [ 422.952521][T14767] tipc: Enabling of bearer rejected, failed to enable media [ 423.792134][T14787] geneve2: entered promiscuous mode [ 423.847487][ T1008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 423.856758][ T1008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 423.874155][ T1008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 423.966526][ T1008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 424.644421][T14831] __nla_validate_parse: 5 callbacks suppressed [ 424.644438][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'. [ 424.660826][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 424.683268][T14831] macsec2: entered promiscuous mode [ 424.688765][T14831] hsr0: entered promiscuous mode [ 424.694057][T14831] macsec2: entered allmulticast mode [ 424.703155][T14831] hsr0: entered allmulticast mode [ 424.708427][T14831] hsr_slave_0: entered allmulticast mode [ 424.715055][T14831] hsr_slave_1: entered allmulticast mode [ 424.723721][T14831] hsr0: left allmulticast mode [ 424.739936][T14831] hsr_slave_0: left allmulticast mode [ 424.745414][T14831] hsr_slave_1: left allmulticast mode [ 424.750973][T14831] hsr0: left promiscuous mode [ 424.898332][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2240'. [ 424.986569][T14846] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2242'. [ 425.286724][T14874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2249'. [ 425.294558][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 425.341761][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 425.374824][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 425.392033][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 425.680038][T14889] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 425.801844][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2252'. [ 425.910197][T14897] x_tables: duplicate underflow at hook 1 [ 426.372363][T14922] netlink: 'syz.2.2257': attribute type 3 has an invalid length. [ 426.426941][T14922] x_tables: duplicate underflow at hook 1 [ 426.522934][T14926] netlink: 'syz.0.2260': attribute type 13 has an invalid length. [ 426.542862][T14926] netlink: 'syz.0.2260': attribute type 17 has an invalid length. [ 426.765073][T14926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.775415][T14926] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.890024][T14926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.002911][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.277534][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.440470][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.557442][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 507.736208][T14948] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 507.755725][T14948] __nla_validate_parse: 3 callbacks suppressed [ 507.755740][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 507.805916][T14948] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 507.849996][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 508.191442][T14980] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 508.191619][T14982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'. [ 508.205461][T14980] team0: Port device dummy0 added [ 508.215839][T14981] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 508.229929][T14981] team0: Port device dummy0 removed [ 508.250442][T14981] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 508.373523][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2279'. [ 508.383696][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 508.422883][T14990] netlink: 'syz.1.2277': attribute type 21 has an invalid length. [ 508.432026][T14990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2277'. [ 508.529043][T15004] xt_ecn: cannot match TCP bits for non-tcp packets [ 508.920861][T15023] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 509.185599][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2290'. [ 509.536982][T15059] tipc: Enabling of bearer rejected, already enabled [ 509.565347][T15059] veth0_to_batadv: entered promiscuous mode [ 509.575956][T15059] veth0_to_batadv: entered allmulticast mode [ 509.590958][T15059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2297'. [ 509.824114][T15073] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2303'. [ 509.859888][T15073] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 510.072564][T15083] veth8: entered allmulticast mode [ 510.267311][T15091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2302'. [ 510.267415][T15096] Cannot find del_set index 4 as target [ 510.336957][T15086] bond2: option arp_validate: invalid value (18446744073491447809) [ 510.368243][T15086] bond2 (unregistering): Released all slaves [ 510.502002][T15100] tipc: Enabling of bearer rejected, already enabled [ 510.904870][T15127] netlink: 'syz.0.2314': attribute type 12 has an invalid length. [ 511.303331][T15138] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 512.385351][T15186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 512.514233][T15186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 512.572530][T15203] dummy0: entered promiscuous mode [ 512.582936][T15201] dummy0: left promiscuous mode [ 512.642980][T15186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 512.694641][T15211] x_tables: duplicate underflow at hook 1 [ 512.695557][T15212] x_tables: duplicate underflow at hook 1 [ 512.716090][T15186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 512.825316][ T4526] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 512.860189][T15216] __nla_validate_parse: 10 callbacks suppressed [ 512.860207][T15216] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2336'. [ 512.880847][T15215] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2338'. [ 512.882423][ T4526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 512.945263][T15217] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 513.027063][ T6894] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 513.040402][T15217] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 513.074174][T11763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 513.093473][T15217] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 513.180346][T15217] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 513.252825][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'. [ 513.304853][ T6901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 513.329276][ T6901] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 513.341286][T15251] tipc: Enabling of bearer rejected, failed to enable media [ 513.384612][ T6901] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 513.470214][T11765] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 513.471520][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 513.538940][T15258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2346'. [ 513.757660][T15153] Bluetooth: hci3: command 0x0405 tx timeout [ 513.774502][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2349'. [ 513.784864][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2349'. [ 513.816801][T15272] netlink: 'syz.1.2349': attribute type 4 has an invalid length. [ 514.231195][T15303] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2361'. [ 514.245731][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 514.275400][T15302] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 514.287867][T15308] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2360'. [ 514.289485][T15309] syzkaller0: entered promiscuous mode [ 514.302692][T15309] syzkaller0: entered allmulticast mode [ 514.309914][T15308] .70·: renamed from hsr0 [ 514.327871][T15308] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.369839][T15308] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.398347][T15308] .70·: entered allmulticast mode [ 514.403383][T15308] hsr_slave_0: entered allmulticast mode [ 514.410098][T15308] hsr_slave_1: entered allmulticast mode [ 514.425573][T15308] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 514.533107][T15315] tipc: Enabled bearer , priority 0 [ 514.619449][T15315] syzkaller0: entered promiscuous mode [ 514.625314][T15315] syzkaller0: entered allmulticast mode [ 514.836321][T15332] netlink: 'syz.3.2368': attribute type 6 has an invalid length. [ 514.873101][T15333] team0: Device ip6tnl2 is of different type [ 514.909510][T15332] team0: Device ip6tnl2 is of different type [ 514.961674][T15314] tipc: Resetting bearer [ 515.040400][T15339] netlink: 'syz.0.2369': attribute type 1 has an invalid length. [ 516.533028][T15314] tipc: Disabling bearer [ 516.542118][T15339] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 517.016538][T15392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.035944][T15395] Cannot find set identified by id 0 to match [ 517.475328][T15424] pim6reg1: entered promiscuous mode [ 517.481579][T15424] pim6reg1: entered allmulticast mode [ 517.725793][T15420] delete_channel: no stack [ 517.946911][T15446] sctp: [Deprecated]: syz.3.2395 (pid 15446) Use of int in maxseg socket option. [ 517.946911][T15446] Use struct sctp_assoc_value instead [ 518.222951][T15469] __nla_validate_parse: 8 callbacks suppressed [ 518.222968][T15469] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2402'. [ 518.300282][T15476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2402'. [ 518.315896][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2403'. [ 518.600679][T15487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 518.706153][T15492] netlink: 'syz.2.2406': attribute type 30 has an invalid length. [ 518.714126][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2406'. [ 518.910658][T15502] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2409'. [ 519.188994][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2410'. [ 519.243445][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 519.800974][T15527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'. [ 519.831137][T15527] bond0: (slave rose0): Error: Device can not be enslaved while up [ 520.279707][T15551] netlink: 'syz.1.2420': attribute type 4 has an invalid length. [ 520.429396][T15553] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 520.457638][T15553] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2421'. [ 521.593895][T15595] tipc: Enabled bearer , priority 0 [ 521.711867][T15595] syzkaller0: entered promiscuous mode [ 521.724978][T15595] syzkaller0: entered allmulticast mode [ 521.743675][T15595] tipc: Resetting bearer [ 521.802472][T15594] tipc: Resetting bearer [ 522.372570][T15604] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 523.229033][T15594] tipc: Disabling bearer [ 523.255362][T15604] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 523.331229][ T795] tipc: Node number set to 3894283254 [ 523.457004][T15616] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.468904][T15616] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.469412][T15613] __nla_validate_parse: 1 callbacks suppressed [ 523.469427][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 523.495921][T15613] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2438'. [ 523.558976][T15616] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.607240][T15616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.662157][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2441'. [ 523.734409][T15616] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.747750][T15616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.893883][T15616] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.910284][T15638] netlink: 'syz.1.2447': attribute type 10 has an invalid length. [ 523.918587][T15616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.962017][T15644] netlink: 'syz.1.2447': attribute type 10 has an invalid length. [ 524.145828][ T4526] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.162944][ T4526] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.203448][ T4526] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.223024][ T4526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.246910][T11763] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.255342][T11763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.341122][ T6888] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.360160][ T6888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.422062][T15664] ieee802154 phy0 wpan0: encryption failed: -22 [ 524.480926][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'. [ 524.502093][T15668] gretap2: entered promiscuous mode [ 524.645793][T15684] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20002 [ 524.667737][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 525.125543][T15710] tipc: Enabled bearer , priority 0 [ 525.148264][T15710] syzkaller0: entered promiscuous mode [ 525.153775][T15710] syzkaller0: entered allmulticast mode [ 525.197126][T15710] tipc: Resetting bearer [ 525.210140][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 525.220030][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2469'. [ 525.220047][T15709] tipc: Resetting bearer [ 525.229107][T15712] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2469'. [ 525.256858][T15709] tipc: Disabling bearer [ 525.439049][T15723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.446352][T15723] IPv6: NLM_F_CREATE should be set when creating new route [ 525.453649][T15723] IPv6: NLM_F_CREATE should be set when creating new route [ 525.515588][T15729] netlink: 676 bytes leftover after parsing attributes in process `syz.3.2473'. [ 525.518869][T15723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.547858][T15729] netlink: 676 bytes leftover after parsing attributes in process `syz.3.2473'. [ 525.672508][T15738] tipc: Enabling of bearer rejected, already enabled [ 525.927545][T15747] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 526.487791][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 526.623369][T15775] netlink: 'syz.3.2485': attribute type 12 has an invalid length. [ 526.956836][T15790] ipt_ECN: cannot use operation on non-tcp rule [ 527.110064][T15797] delete_channel: no stack [ 527.129334][T15797] delete_channel: no stack [ 527.443124][T15833] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.506493][T15831] vlan3: entered promiscuous mode [ 527.527711][T15831] bond0: entered promiscuous mode [ 527.795024][T15852] netlink: 'syz.0.2508': attribute type 4 has an invalid length. [ 527.872918][T15856] netlink: 'syz.0.2510': attribute type 6 has an invalid length. [ 527.920689][T15856] wireguard1: entered promiscuous mode [ 527.931308][T15856] wireguard1: entered allmulticast mode [ 527.945126][T15856] team0: Device wireguard1 is of different type [ 528.009704][T15863] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 528.020344][T15864] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 528.186573][T15865] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 528.198283][T15865] bond12: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 528.214821][T15865] bond12: (slave vxcan1): making interface the new active one [ 528.223534][T15865] bond12: (slave vxcan1): Enslaving as an active interface with an up link [ 528.746831][T15895] __nla_validate_parse: 7 callbacks suppressed [ 528.746848][T15895] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2523'. [ 528.827816][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 528.899358][T15898] geneve6: entered promiscuous mode [ 528.909606][T15898] geneve6: entered allmulticast mode [ 528.929177][T11765] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 528.946434][T11765] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 528.966561][T11765] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 528.990249][T11765] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 528.992058][T15911] netlink: 'syz.1.2526': attribute type 5 has an invalid length. [ 529.027730][T15911] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2526'. [ 529.415793][T15925] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.456719][T15926] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.532939][T15922] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 529.599893][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 529.693481][T15922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.789272][T15923] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 529.800379][T15923] bond5: (slave batadv2): making interface the new active one [ 529.823260][T15923] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 530.563013][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'. [ 530.619466][T15969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2542'. [ 530.684672][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 530.700224][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 530.753137][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 530.801143][ T6894] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.827755][ T6894] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.836556][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 530.856695][ T6894] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.871105][ T6894] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.023571][T15976] syzkaller0: entered promiscuous mode [ 531.048402][T15976] syzkaller0: entered allmulticast mode [ 532.077496][T15153] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 532.914005][T16030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 533.086604][T11765] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 533.160271][T16062] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 533.259198][T16072] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 533.305314][T16072] 8021q: adding VLAN 0 to HW filter on device bond13 [ 533.314038][T16079] bond13: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 534.170237][T16104] tipc: Enabled bearer , priority 0 [ 534.194677][T16104] syzkaller0: entered promiscuous mode [ 534.210802][T16104] syzkaller0: entered allmulticast mode [ 534.252210][T16104] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 534.402570][T16120] __nla_validate_parse: 5 callbacks suppressed [ 534.402588][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 534.439157][T16109] tipc: Resetting bearer [ 534.502859][T16103] tipc: Resetting bearer [ 534.526251][T16103] tipc: Disabling bearer [ 534.540580][T16124] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 534.870866][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2584'. [ 534.888760][T16140] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 534.910909][T16144] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 534.925809][T16144] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 535.380483][T16165] netlink: 'syz.1.2590': attribute type 6 has an invalid length. [ 535.581111][T11763] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 535.624024][T16176] netlink: 'syz.4.2594': attribute type 3 has an invalid length. [ 535.647559][T11763] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 535.671868][T11763] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 535.775710][T11763] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 535.894529][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2598'. [ 536.071643][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 536.222820][T16201] netlink: 'syz.3.2602': attribute type 1 has an invalid length. [ 536.254725][T16201] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2602'. [ 536.433462][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'. [ 536.585307][T16216] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 536.730081][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 536.945673][T16235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2610'. [ 536.972873][T16228] netlink: 'syz.0.2609': attribute type 13 has an invalid length. [ 536.997285][T16228] netlink: 'syz.0.2609': attribute type 17 has an invalid length. [ 537.151172][T16238] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.2611'. [ 537.213436][T16241] bond6 (unregistering): Released all slaves [ 537.860446][T16270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2620'. [ 537.945289][T16272] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.958471][T16272] netlink: 'syz.4.2621': attribute type 1 has an invalid length. [ 537.969092][T16272] netlink: 'syz.4.2621': attribute type 2 has an invalid length. [ 538.042099][T16279] sctp: [Deprecated]: syz.2.2623 (pid 16279) Use of int in maxseg socket option. [ 538.042099][T16279] Use struct sctp_assoc_value instead [ 538.733248][T16286] syzkaller0: entered promiscuous mode [ 538.767960][T16286] syzkaller0: entered allmulticast mode [ 540.726250][T16335] bridge: RTM_NEWNEIGH with invalid ether address [ 540.769136][T16333] __nla_validate_parse: 2 callbacks suppressed [ 540.769153][T16333] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2637'. [ 540.802849][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 540.812019][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 540.831147][T16338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2635'. [ 541.501952][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.425472][T16381] validate_nla: 1 callbacks suppressed [ 542.425491][T16381] netlink: 'syz.3.2645': attribute type 8 has an invalid length. [ 542.650201][T16393] bridge0: port 1(macsec1) entered blocking state [ 542.656853][T16393] bridge0: port 1(macsec1) entered disabled state [ 542.679623][T16393] macsec1: entered allmulticast mode [ 542.695223][T16393] bridge0: entered allmulticast mode [ 542.716412][T16393] macsec1: left allmulticast mode [ 542.729462][T16393] bridge0: left allmulticast mode [ 542.875835][T16402] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 542.904046][T16411] gretap3: entered promiscuous mode [ 542.911120][T16411] batman_adv: batadv0: Adding interface: gretap3 [ 542.917649][T16411] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.967039][T16420] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2650'. [ 543.007332][T16411] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 543.100377][T16416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.107779][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 543.428118][T16435] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2658'. [ 543.451770][T16435] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 543.954172][T16443] netem: change failed [ 544.102831][T16450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2665'. [ 544.378452][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 544.408660][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 546.169522][T16528] __nla_validate_parse: 5 callbacks suppressed [ 546.169540][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.185788][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.195436][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.206181][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.215429][T16528] netlink: 'syz.0.2682': attribute type 6 has an invalid length. [ 546.223433][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.233037][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.244671][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.278187][T16531] netlink: 'syz.3.2683': attribute type 1 has an invalid length. [ 546.305539][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 546.307609][T16531] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2683'. [ 546.349236][T16529] netlink: 'syz.0.2682': attribute type 6 has an invalid length. [ 546.499263][T16542] syzkaller0: entered promiscuous mode [ 546.504780][T16542] syzkaller0: entered allmulticast mode [ 546.577016][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 546.781803][T16556] veth5: entered promiscuous mode [ 546.825372][T16561] gre0: entered promiscuous mode [ 546.976922][T16571] tipc: Enabled bearer , priority 0 [ 546.984996][T16571] syzkaller0: entered promiscuous mode [ 546.991203][T16571] syzkaller0: entered allmulticast mode [ 547.046832][T16571] tipc: Resetting bearer [ 547.057913][T16569] tipc: Resetting bearer [ 547.098678][T16569] tipc: Disabling bearer [ 547.808510][T16616] netlink: 'syz.2.2705': attribute type 12 has an invalid length. [ 547.824389][T16616] netlink: 'syz.2.2705': attribute type 4 has an invalid length. [ 548.205126][T16634] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 548.486463][T16647] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 548.564968][T16656] netlink: 'syz.4.2716': attribute type 12 has an invalid length. [ 548.743884][ T30] audit: type=1800 audit(1766863802.088:4): pid=16663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2720" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2972 res=0 errno=0 [ 548.795657][T16666] Cannot find set identified by id 0 to match [ 549.311359][T16674] 8021q: VLANs not supported on sit0 [ 549.517834][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 549.576666][T16691] SET target dimension over the limit! [ 549.598840][T16691] netlink: 'syz.4.2726': attribute type 10 has an invalid length. [ 549.611621][T16691] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.621048][T16691] bond0: (slave team0): Enslaving as an active interface with an up link [ 549.933663][T16720] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 550.084733][T16726] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 550.096655][T16726] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 550.230235][T16720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 550.782422][T16756] syzkaller0: entered promiscuous mode [ 550.797149][T16756] syzkaller0: entered allmulticast mode [ 551.261054][T16780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.316202][T16784] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 551.387799][T16792] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 551.425372][T16792] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.469048][T16792] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.477825][T16792] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 551.523047][T16792] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 551.630263][T16804] syzkaller0: entered promiscuous mode [ 551.635906][T16804] syzkaller0: entered allmulticast mode [ 551.783469][T16808] macvlan1: entered promiscuous mode [ 551.809122][T16808] macvlan1: left promiscuous mode [ 551.878777][T15153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.900998][T15153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.909964][T15153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.928801][T15153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.936472][T15153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.047807][T16820] __nla_validate_parse: 11 callbacks suppressed [ 552.047827][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2760'. [ 552.120808][T16821] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 552.617430][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'. [ 552.732375][T16814] chnl_net:caif_netlink_parms(): no params data found [ 552.969655][T16814] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.987658][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.994919][T16814] bridge_slave_0: entered allmulticast mode [ 553.010636][T16814] bridge_slave_0: entered promiscuous mode [ 553.062351][T16814] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.074479][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.089452][T16814] bridge_slave_1: entered allmulticast mode [ 553.109786][T16814] bridge_slave_1: entered promiscuous mode [ 553.300972][T16814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.373309][T16814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.519939][T16814] team0: Port device team_slave_0 added [ 553.584673][T16814] team0: Port device team_slave_1 added [ 553.605366][T16881] vxcan5: entered allmulticast mode [ 553.718479][T16880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2771'. [ 553.733910][T16880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2771'. [ 553.853250][T16883] vxcan5: entered allmulticast mode [ 553.997974][T15153] Bluetooth: hci5: command tx timeout [ 554.112973][T16814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.120331][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.154038][T16814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.181236][T16814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.189025][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.215900][T16814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.310749][T16814] hsr_slave_0: entered promiscuous mode [ 554.328728][T16814] hsr_slave_1: entered promiscuous mode [ 554.358834][T16814] debugfs: 'hsr0' already exists in 'hsr' [ 554.364649][T16814] Cannot create hsr debugfs directory [ 554.454656][T16895] netlink: 'syz.4.2775': attribute type 1 has an invalid length. [ 554.701203][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 554.730282][T16814] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.751119][T16814] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 554.799638][T16912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2780'. [ 554.817903][T16912] nbd: couldn't find a device at index 0 [ 554.841259][T16921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2781'. [ 554.854725][T16922] tipc: Enabling of bearer rejected, failed to enable media [ 554.899886][T16814] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.926780][T16814] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 554.972671][T16929] pimreg: entered allmulticast mode [ 554.978980][T16929] pimreg: left allmulticast mode [ 555.010357][T16814] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.025364][T16814] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 555.081832][T16814] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.101697][T16814] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 39920 - 0 [ 555.207027][T16939] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2787'. [ 555.217815][T16939] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2787'. [ 555.390202][T16814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.418842][T16948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 555.435944][T16948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.471798][T16814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.484035][T16814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.496730][T16814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.530737][T16948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 555.542897][T16948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.595064][T16948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 555.604872][T16948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.653724][T16948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 555.665176][T16948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 555.799323][T11765] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.813389][T11765] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 555.837864][T16814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.880899][T11765] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.897541][T11765] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 555.940862][T11765] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 555.961135][T11765] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 556.001878][T11765] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 556.074443][T11765] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 556.087989][T15153] Bluetooth: hci5: command tx timeout [ 556.099225][T16814] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.182718][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.189915][T11765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.386550][T11159] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.393758][T11159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.606486][T16995] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2799'. [ 556.808142][T17013] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 557.087531][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 557.121332][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 557.161539][T17022] gretap0: entered promiscuous mode [ 557.202751][T17022] gretap0: left promiscuous mode [ 557.352995][T16814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.524051][T16814] veth0_vlan: entered promiscuous mode [ 557.553719][T16814] veth1_vlan: entered promiscuous mode [ 557.744660][T16814] veth0_macvtap: entered promiscuous mode [ 557.780076][T16814] veth1_macvtap: entered promiscuous mode [ 557.840685][T16814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.901138][T16814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.955513][ T6886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.984548][ T6886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.020408][ T6886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.047424][ T6886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.158639][T15153] Bluetooth: hci5: command tx timeout [ 558.205686][T11159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.231288][T11159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.390207][T11762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.399738][T11762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.272427][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 559.289586][T17097] netlink: 'syz.4.2823': attribute type 5 has an invalid length. [ 559.307251][T17097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2823'. [ 559.389797][T17097] geneve4: entered promiscuous mode [ 559.401379][T17097] geneve4: entered allmulticast mode [ 559.528968][T11762] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 559.658647][T17105] tipc: Enabled bearer , priority 0 [ 559.675310][T11762] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 559.715644][T17104] syzkaller0: entered promiscuous mode [ 559.727301][T17104] syzkaller0: entered allmulticast mode [ 559.807486][T17104] tipc: Resetting bearer [ 559.899714][T17104] tipc: Disabling bearer [ 559.946060][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2829'. [ 560.015309][T17114] syzkaller0: entered promiscuous mode [ 560.033014][T17114] syzkaller0: entered allmulticast mode [ 560.119947][T17122] tipc: Enabled bearer , priority 0 [ 560.131273][T17119] tipc: Disabling bearer [ 560.240047][ T5840] Bluetooth: hci5: command tx timeout [ 560.291757][T17134] pim6reg: entered allmulticast mode [ 560.358075][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 560.437794][T17126] pim6reg: left allmulticast mode [ 560.671795][T15152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.681687][T15152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.691344][T15152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.700283][T15152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.712563][T15152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.944368][T17095] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 561.006717][T17095] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 561.160366][ T1008] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 561.195035][ T4526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 561.289628][ T6901] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 561.323090][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 561.419767][T17162] 8021q: adding VLAN 0 to HW filter on device bond14 [ 561.436074][ T4526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 561.579353][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 561.613331][T17176] netlink: 4748 bytes leftover after parsing attributes in process `syz.1.2843'. [ 561.623376][T17143] chnl_net:caif_netlink_parms(): no params data found [ 561.645842][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 561.942671][T17199] can: request_module (can-proto-3) failed. [ 562.094353][T17209] Cannot find add_set index 65532 as target [ 562.100185][T17143] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.117988][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.125645][T17143] bridge_slave_0: entered allmulticast mode [ 562.139102][T17143] bridge_slave_0: entered promiscuous mode [ 562.161993][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.178446][T17212] netlink: 'syz.1.2854': attribute type 2 has an invalid length. [ 562.179083][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.205488][T17143] bridge_slave_1: entered allmulticast mode [ 562.220380][T17143] bridge_slave_1: entered promiscuous mode [ 562.248763][T17212] !: entered promiscuous mode [ 562.319432][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 562.359862][T17143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.443947][T17143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.561696][T17223] __nla_validate_parse: 4 callbacks suppressed [ 562.561714][T17223] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2856'. [ 562.661249][T17143] team0: Port device team_slave_0 added [ 562.681530][T17143] team0: Port device team_slave_1 added [ 562.739536][T17226] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2858'. [ 562.812967][ T5840] Bluetooth: hci2: command tx timeout [ 562.883277][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.984700][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 563.008136][T17143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.015110][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.073776][T17143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.091240][T17143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.111070][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.138141][T17143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.258614][T17143] hsr_slave_0: entered promiscuous mode [ 563.265543][T17143] hsr_slave_1: entered promiscuous mode [ 563.272274][T17143] debugfs: 'hsr0' already exists in 'hsr' [ 563.279025][T17143] Cannot create hsr debugfs directory [ 563.525624][T17253] tipc: Enabled bearer , priority 0 [ 563.632000][T17253] syzkaller0: entered promiscuous mode [ 563.639822][T17253] syzkaller0: entered allmulticast mode [ 563.689471][T17261] netlink: 'syz.1.2867': attribute type 12 has an invalid length. [ 563.706586][T17268] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 563.715213][T17260] netlink: 'syz.1.2867': attribute type 12 has an invalid length. [ 564.023553][T17289] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 564.023832][T17290] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2872'. [ 564.032989][T17289] netlink: 'syz.4.2872': attribute type 2 has an invalid length. [ 564.204439][T17294] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2874'. [ 564.887361][ T5840] Bluetooth: hci2: command tx timeout [ 565.393113][T17254] tipc: Resetting bearer [ 565.414435][T17252] tipc: Resetting bearer [ 565.432789][T17252] tipc: Disabling bearer [ 565.482068][T17143] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.590769][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2876'. [ 565.638651][T17143] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.688516][T17311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 565.784870][T17143] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.825657][T17317] netlink: 'syz.2.2879': attribute type 10 has an invalid length. [ 565.862415][T17327] netlink: 'syz.1.2882': attribute type 1 has an invalid length. [ 565.869949][T17317] dummy0: entered promiscuous mode [ 565.875518][T17327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.878648][T17317] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 565.901600][T17321] netlink: 'syz.4.2881': attribute type 15 has an invalid length. [ 565.951229][T17143] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.087798][T17340] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2887'. [ 566.138854][T17340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 566.154780][T17340] ip6t_srh: unknown srh match flags 4000 [ 566.183656][T17342] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2885'. [ 566.207654][ T934] IPVS: starting estimator thread 0... [ 566.226913][T17342] netlink: 'syz.4.2885': attribute type 7 has an invalid length. [ 566.286136][T17349] 8021q: adding VLAN 0 to HW filter on device bond9 [ 566.293597][T17143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 566.307427][T17347] IPVS: using max 28 ests per chain, 67200 per kthread [ 566.376132][T17349] bond9: entered allmulticast mode [ 566.409445][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 566.419764][T17351] veth9: entered promiscuous mode [ 566.450512][T17351] bond9: (slave veth9): Enslaving as an active interface with a down link [ 566.477578][T17143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 566.532632][T17349] bridge_slave_1 (unregistering): left allmulticast mode [ 566.540272][T17349] bridge_slave_1 (unregistering): left promiscuous mode [ 566.549780][T17349] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.593460][T17143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 566.710770][T17143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 566.959021][ T5840] Bluetooth: hci2: command tx timeout [ 567.297154][T17143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.366688][T17143] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.378536][T17361] validate_nla: 2 callbacks suppressed [ 567.378556][T17361] netlink: 'syz.1.2891': attribute type 6 has an invalid length. [ 567.517041][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.524290][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.573649][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.580899][ T6886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.936429][T17403] netlink: 'syz.0.2900': attribute type 13 has an invalid length. [ 567.944531][T17403] netlink: 'syz.0.2900': attribute type 17 has an invalid length. [ 567.964747][T17403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.181270][T17414] openvswitch: netlink: IP tunnel dst address not specified [ 568.216613][T17413] netlink: 'syz.0.2902': attribute type 8 has an invalid length. [ 568.217885][T17143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.494744][T17143] veth0_vlan: entered promiscuous mode [ 568.522283][T17143] veth1_vlan: entered promiscuous mode [ 568.541920][T17427] netlink: 'syz.2.2906': attribute type 6 has an invalid length. [ 569.037589][ T5840] Bluetooth: hci2: command tx timeout [ 569.054146][T17443] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 569.128984][T17443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.164058][T17446] netlink: 'syz.2.2910': attribute type 13 has an invalid length. [ 569.200662][T17445] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2909'. [ 569.432867][T17143] veth0_macvtap: entered promiscuous mode [ 569.534776][T17450] syzkaller0: entered promiscuous mode [ 569.542987][T17450] syzkaller0: entered allmulticast mode [ 569.563133][T17143] veth1_macvtap: entered promiscuous mode [ 569.666605][T17453] syzkaller0: entered promiscuous mode [ 569.673643][T17453] syzkaller0: entered allmulticast mode [ 569.701912][T17143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.824254][T17143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.312508][T11159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.359160][T11159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.378953][T11159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.400356][T11159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.473931][T17489] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 571.635641][T11765] ------------[ cut here ]------------ [ 571.642294][T11765] WARNING: net/netfilter/core.c:329 at nf_hook_entry_head+0x23e/0x2c0, CPU#1: kworker/u8:62/11765 [ 571.653225][T11765] Modules linked in: [ 571.657648][T11765] CPU: 1 UID: 0 PID: 11765 Comm: kworker/u8:62 Not tainted syzkaller #0 PREEMPT(full) [ 571.667847][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.678068][T11765] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.682889][T11765] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0 [ 571.688821][T11765] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 6d 9c a6 f8 4d 39 37 74 36 e8 23 40 40 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 09 [ 571.709442][T11765] RSP: 0000:ffffc9001abdf748 EFLAGS: 00010293 [ 571.715545][T11765] RAX: ffffffff898171eb RBX: ffff8880948e8000 RCX: ffff88805400bd00 [ 571.724031][T11765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.732295][T11765] RBP: 0000000000000000 R08: ffff88805400bd00 R09: 0000000000000006 [ 571.740424][T11765] R10: 000000000000000a R11: 0000000000000000 R12: ffff888033baa5c0 [ 571.748925][T11765] R13: 0000000000000005 R14: ffff888033baa5c0 R15: ffff8880948e8108 [ 571.757417][T11765] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 571.766366][T11765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.773570][T11765] CR2: 00007ff2c467e008 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 571.774186][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.782218][T11765] Call Trace: [ 571.793287][T11765] [ 571.796220][T11765] __nf_unregister_net_hook+0x74/0x6f0 [ 571.801808][T11765] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 571.808709][T11765] __nft_release_hook+0x180/0x350 [ 571.813770][T11765] nf_tables_pre_exit_net+0xa7/0x110 [ 571.819180][T11765] ops_undo_list+0x187/0x990 [ 571.822200][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.823780][T11765] ? __pfx_ops_undo_list+0x10/0x10 [ 571.836169][T11765] ? do_raw_spin_unlock+0x122/0x240 [ 571.842771][T11765] cleanup_net+0x4d8/0x7a0 [ 571.847538][T11765] ? __pfx_cleanup_net+0x10/0x10 [ 571.852706][T11765] ? process_scheduled_works+0x9ef/0x1770 [ 571.858681][T11765] ? process_scheduled_works+0x9ef/0x1770 [ 571.864418][T11765] process_scheduled_works+0xad1/0x1770 [ 571.870577][T11765] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.877277][T11765] worker_thread+0x8a0/0xda0 [ 571.881912][T11765] ? __kthread_parkme+0x7b/0x200 [ 571.886950][T11765] kthread+0x711/0x8a0 [ 571.891078][T11765] ? __pfx_worker_thread+0x10/0x10 [ 571.896194][T11765] ? __pfx_kthread+0x10/0x10 [ 571.901328][T11765] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.906548][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 571.911852][T11765] ? __pfx_kthread+0x10/0x10 [ 571.916466][T11765] ret_from_fork+0x599/0xb30 [ 571.921243][T11765] ? __pfx_ret_from_fork+0x10/0x10 [ 571.926387][T11765] ? __switch_to_asm+0x39/0x70 [ 571.931737][T11765] ? __switch_to_asm+0x33/0x70 [ 571.936520][T11765] ? __pfx_kthread+0x10/0x10 [ 571.941196][T11765] ret_from_fork_asm+0x1a/0x30 [ 571.945994][T11765] [ 571.949051][T11765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 571.956333][T11765] CPU: 1 UID: 0 PID: 11765 Comm: kworker/u8:62 Not tainted syzkaller #0 PREEMPT(full) [ 571.965966][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.976031][T11765] Workqueue: netns cleanup_net [ 571.980813][T11765] Call Trace: [ 571.984086][T11765] [ 571.987004][T11765] dump_stack_lvl+0x99/0x250 [ 571.991587][T11765] ? __asan_memcpy+0x40/0x70 [ 571.996164][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.001353][T11765] ? __pfx__printk+0x10/0x10 [ 572.005948][T11765] vpanic+0x237/0x6d0 [ 572.009916][T11765] ? __pfx_vpanic+0x10/0x10 [ 572.014403][T11765] ? is_bpf_text_address+0x292/0x2b0 [ 572.019676][T11765] ? is_bpf_text_address+0x26/0x2b0 [ 572.024871][T11765] panic+0xb9/0xc0 [ 572.028580][T11765] ? __pfx_panic+0x10/0x10 [ 572.033023][T11765] ? ret_from_fork_asm+0x1a/0x30 [ 572.037956][T11765] __warn+0x317/0x4b0 [ 572.041921][T11765] ? nf_hook_entry_head+0x23e/0x2c0 [ 572.047109][T11765] ? nf_hook_entry_head+0x23e/0x2c0 [ 572.052293][T11765] __report_bug+0x288/0x500 [ 572.056784][T11765] ? nf_hook_entry_head+0x23e/0x2c0 [ 572.061981][T11765] ? __pfx___report_bug+0x10/0x10 [ 572.066994][T11765] ? nf_flow_offload_xdp_setup+0x68a/0x690 [ 572.072788][T11765] ? kfree+0x1c0/0x660 [ 572.076852][T11765] ? nf_flow_offload_xdp_setup+0x68a/0x690 [ 572.082653][T11765] ? nf_hook_entry_head+0x23e/0x2c0 [ 572.087839][T11765] report_bug+0x16a/0x220 [ 572.092157][T11765] ? nf_hook_entry_head+0x23e/0x2c0 [ 572.097342][T11765] ? nf_hook_entry_head+0x240/0x2c0 [ 572.102536][T11765] handle_bug+0x98/0x200 [ 572.106764][T11765] exc_invalid_op+0x1a/0x50 [ 572.111255][T11765] asm_exc_invalid_op+0x1a/0x20 [ 572.116094][T11765] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0 [ 572.121892][T11765] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 6d 9c a6 f8 4d 39 37 74 36 e8 23 40 40 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 09 [ 572.141484][T11765] RSP: 0000:ffffc9001abdf748 EFLAGS: 00010293 [ 572.147538][T11765] RAX: ffffffff898171eb RBX: ffff8880948e8000 RCX: ffff88805400bd00 [ 572.155492][T11765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.163445][T11765] RBP: 0000000000000000 R08: ffff88805400bd00 R09: 0000000000000006 [ 572.171403][T11765] R10: 000000000000000a R11: 0000000000000000 R12: ffff888033baa5c0 [ 572.179358][T11765] R13: 0000000000000005 R14: ffff888033baa5c0 R15: ffff8880948e8108 [ 572.187321][T11765] ? nf_hook_entry_head+0x1fb/0x2c0 [ 572.192515][T11765] ? nf_hook_entry_head+0x1fb/0x2c0 [ 572.197703][T11765] __nf_unregister_net_hook+0x74/0x6f0 [ 572.203158][T11765] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 572.209472][T11765] __nft_release_hook+0x180/0x350 [ 572.214495][T11765] nf_tables_pre_exit_net+0xa7/0x110 [ 572.219769][T11765] ops_undo_list+0x187/0x990 [ 572.224347][T11765] ? __pfx_ops_undo_list+0x10/0x10 [ 572.229443][T11765] ? do_raw_spin_unlock+0x122/0x240 [ 572.234632][T11765] cleanup_net+0x4d8/0x7a0 [ 572.239032][T11765] ? __pfx_cleanup_net+0x10/0x10 [ 572.243957][T11765] ? process_scheduled_works+0x9ef/0x1770 [ 572.249661][T11765] ? process_scheduled_works+0x9ef/0x1770 [ 572.255367][T11765] process_scheduled_works+0xad1/0x1770 [ 572.260916][T11765] ? __pfx_process_scheduled_works+0x10/0x10 [ 572.266893][T11765] worker_thread+0x8a0/0xda0 [ 572.271478][T11765] ? __kthread_parkme+0x7b/0x200 [ 572.276409][T11765] kthread+0x711/0x8a0 [ 572.280470][T11765] ? __pfx_worker_thread+0x10/0x10 [ 572.285567][T11765] ? __pfx_kthread+0x10/0x10 [ 572.290142][T11765] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.295328][T11765] ? lockdep_hardirqs_on+0x98/0x140 [ 572.300508][T11765] ? __pfx_kthread+0x10/0x10 [ 572.305087][T11765] ret_from_fork+0x599/0xb30 [ 572.309665][T11765] ? __pfx_ret_from_fork+0x10/0x10 [ 572.314766][T11765] ? __switch_to_asm+0x39/0x70 [ 572.319514][T11765] ? __switch_to_asm+0x33/0x70 [ 572.324262][T11765] ? __pfx_kthread+0x10/0x10 [ 572.328839][T11765] ret_from_fork_asm+0x1a/0x30 [ 572.333602][T11765] [ 572.336960][T11765] Kernel Offset: disabled [ 572.341269][T11765] Rebooting in 86400 seconds..