last executing test programs: 5.257743361s ago: executing program 0 (id=1753): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x72cd) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x40800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x100, 0x2, 0x2, 0x6, 0x81}, 0x14) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x40010, r0, 0x59c3c000) r2 = accept4(r0, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400}]}, 0x68}}, 0x8010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x154, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc93}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x30}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x154}}, 0x4004040) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000005c0)=0x6) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000600)={0x10000002}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000015}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$netrom(r2, &(0x7f0000000780)=""/60, 0x3c, 0x40000000, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x841) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x80010, r1, 0xc4d6d000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4024010}, 0x40000) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000a00)) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9, 0x4010, 0xffffffffffffffff, 0xc44d2000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a40), 0x428000, 0x0) ioctl$PPPIOCGIDLE64(r7, 0x8010743f, &(0x7f0000000a80)) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x4004000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r7, 0xe86f8000) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc1, 0x44}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "0742df1b3ba2143c541460c9c5845c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "367f16344204"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x8001) bind$tipc(r2, &(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x3}}, 0x10) 5.093851078s ago: executing program 0 (id=1756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x64}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002c80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4040}, 0x44) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r4, 0x72b}, 0x14}}, 0x0) (async) socket(0x0, 0xf0eac29a797e73a0, 0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@any, 0x8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4.841017528s ago: executing program 0 (id=1759): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r5, r3, 0x4, r3}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r7 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x62}, 0x94) 4.294500175s ago: executing program 0 (id=1764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000001a0001000000000000000000816b2826d14e7a760700000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000580)=[{0x30, 0x9, 0x0, 0xfffff028}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) write$tun(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/4046], 0xfce) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fe8000000000000000000000000000bbfc02000000000000000000000000000000000000020000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r5], 0x1bc}}, 0x0) 3.506595903s ago: executing program 0 (id=1770): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6c010000170001000000000000000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac14140000000000000000000000000000000000000000000200002008000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000b86b6e00"], 0x16c}}, 0x4000000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', r2, r4, 0x3, 0x5, 0x2}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0xbc, r5, 0xb227bc6527e504c2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TESTDATA={0x66, 0x45, "564761eee75fcad122ec426bc241d81a4c1248e5e9fa4c88c3f196949204ec4ed92b8113d112017c8388100dda12a47b17cb9f19777f86f17b04d12da88b5b0e1ecd05bc7fdd058ffc5c7fcf8a17aa7dd418998f0824158b6e4a75c850657eb2c106"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "379afe8a4437c3a3928e425a98b1946b6df89ec2af38b7d574bd626a"}, @NL80211_ATTR_TESTDATA={0x16, 0x45, "0123256bb40c2525f2e9ca03f830aac407ab"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000081}, 0x80c0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r7}, &(0x7f0000000300), &(0x7f0000004040)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) 3.238853306s ago: executing program 0 (id=1773): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000440)=0x9, 0x12) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r8, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) r9 = socket(0x22, 0x2, 0x1) accept4$inet(r9, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f666973682900000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020600) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) socket$inet6(0xa, 0x80002, 0x88) 2.417230311s ago: executing program 2 (id=1781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20008006}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@setlink={0x58, 0x13, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2, 0x8010}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xd7}, @IFLA_WEIGHT={0x8}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "75d29ce565fa5d8a8198a8e237004e6b"}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1c4b4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}]}, 0x58}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x17}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2ee2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, &(0x7f0000000340)={0x2, 0x0, @local}, &(0x7f0000000380)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FILS_KEK={0xd, 0xf2, "6b050381abe506afea"}, @NL80211_ATTR_FILS_KEK={0x33, 0xf2, "1af241b3e4929d7c64c4e5f0368b198b335ce62abe47b38114fc3ae046acc89c801f27e75db418df744794b9442cd7"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0xa73ff5db226a742f) socketpair(0xf, 0xa, 0x9da, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x4, 0x39, 0x50, 0x3, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x40, 0x1, 0x74}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000006c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000740)={@dev, 0x0}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_newaddr={0x60, 0x14, 0x200, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x2, 0x8, 0x7f}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x0, 0x8, 0x81}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000900)={'gretap0\x00', r9, 0x40, 0x8, 0x0, 0x2, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x66, 0x0, 0x7, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x15, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback, @remote, @multicast1, @multicast1]}, @generic={0x86, 0x12, "96848e0d48ae1c822166ae4ff2129bd0"}, @cipso={0x86, 0x3a, 0x3, [{0x5, 0xc, "fccd2a39a09155f7ce71"}, {0x6, 0xd, "ad76f0d94b55aa6390bebe"}, {0x5, 0xa, "c4a24150afdcebbe"}, {0x0, 0xb, "fb3438259ede71b83e"}, {0x1, 0x6, "3ff30ee7"}]}, @generic={0x88, 0x9, "dc967c97253eff"}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x8, [{@local, 0x40}]}, @noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0x1, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@RTM_NEWMDB={0xf8, 0x54, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x3, 0x1, {@in6_addr=@mcast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x3, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x0, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x1, 0x4, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x1, {@in6_addr=@empty, 0x86dd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040004}, 0x20008000) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000001180)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c80)={0x4bc, 0x0, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x1}, 0xa, 0x2, 0xa, 0xfffc, 0x25, 'syz0\x00', "13275cd16aa74666b62aeac92b0642303319d9cadc99970fe37a98a829957df7", "60551585a4a054cc01098e9c6f7d877dfd786b497c41b835abf8cb6fa9bda7c0", [{0x6, 0xffff, {0x2, 0x7}}, {0x7f, 0xa, {0x3, 0x7}}, {0x8, 0x7, {0x1, 0x2}}, {0x3, 0x3, {0x0, 0x9}}, {0x2, 0x7, {0x1, 0x1}}, {0x1, 0x6, {0x1, 0x8}}, {0x7, 0x8000, {0x3, 0xff}}, {0x7, 0x6, {0x0, 0x8000}}, {0x7ff, 0x1, {0x0, 0x4}}, {0x0, 0x0, {0x2}}, {0x1000, 0x1, {0x1}}, {0x1, 0x5, {0x1, 0xff}}, {0x2, 0x8001, {0x1, 0xff}}, {0xffff, 0xfffc, {0x1, 0xff}}, {0x8, 0x0, {0x1}}, {0x7, 0x80, {0x0, 0xfffff434}}, {0xc, 0x2, {0x2, 0x5}}, {0x2, 0x7, {0x1, 0x4}}, {0x2, 0x5, {0x2, 0xac}}, {0x7, 0xab, {0x3, 0x4}}, {0x2, 0x1000, {0x1, 0x7f8a}}, {0x8001, 0x6, {0x2}}, {0x74b, 0x1, {0xb6d47a74bee5e74b, 0x6}}, {0x5, 0x4, {0x2, 0xa}}, {0x81, 0x6, {0x3, 0xc5}}, {0x10, 0xc8, {0x0, 0xff}}, {0x8, 0xdb37, {0x2}}, {0xffff, 0x38, {0x0, 0x400}}, {0x1, 0x6, {0x0, 0x10000}}, {0x9, 0x4, {0x0, 0x2}}, {0x5, 0x5, {0x1, 0x5f09}}, {0x3, 0x1000, {0x3, 0x40}}, {0x3, 0x4, {0x0, 0xff}}, {0x2, 0x5, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0xfffff801}}, {0x2, 0x7528}, {0x8, 0x7f, {0x3, 0x7}}, {0x5, 0x8, {0x3, 0x6}}, {0xd7, 0x1, {0x3, 0x8}}, {0x100, 0xfa4f, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x7fff}, 0x1, 0xff, 0x3, 0x882a, 0xe, 'syz1\x00', "84981c2d4882736f83cf6b1698d4d386219ac9f6c586663702d312e8753338f3", "1944ba897ee6a9be7874a091220ae45dd8c477538ebfe4b4bbf6ceb824d21f1b", [{0x0, 0xf8ce, {0x1, 0x9}}, {0x7000, 0x0, {0x0, 0x8}}, {0x4, 0xe0b, {0x0, 0x7fffffff}}, {0x7, 0x6, {0x2, 0x80000001}}, {0x8, 0x100, {0x3, 0x5}}, {0x101, 0x1000, {0x3}}, {0x9d78, 0x9, {0x2, 0x1}}, {0x4, 0x7, {0x1, 0x1}}, {0x5, 0xed, {0x1, 0x1000}}, {0x73, 0x200, {0x3, 0xe8}}, {0x6, 0x2, {0x0, 0x1}}, {0x8, 0xfff, {0x0, 0x9}}, {0xfff7, 0xe6, {0x1}}, {0x7ff, 0x101, {0x1, 0xd98}}, {0x0, 0x5, {0x0, 0x1}}, {0x10, 0x0, {0x0, 0x12}}, {0x4, 0x3, {0x3, 0x44}}, {0x0, 0x1c00, {0x0, 0x7}}, {0x8, 0x6, {0x2, 0xb736}}, {0x101, 0x5, {0x1, 0x3}}, {0xaa, 0x1, {0x3, 0x2}}, {0x6, 0xca0, {0x3, 0x4}}, {0x0, 0x8, {0x1, 0x52}}, {0x24, 0x2, {0x3, 0x6}}, {0x2, 0x401, {0x3, 0x5}}, {0x0, 0x0, {0x2, 0xfffffff8}}, {0x3, 0xffff, {0x3, 0x2}}, {0x6, 0x7907, {0x1, 0x6}}, {0x0, 0x9, {0x2}}, {0x40, 0x8000, {0x0, 0x6}}, {0x1, 0xff7b}, {0xfe00, 0x8001, {0x0, 0x7}}, {0x2, 0x1ff, {0x1, 0x1}}, {0x5, 0x1728, {0x3}}, {0x9778, 0x9, {0x2, 0x8000}}, {0xc, 0x6, {0x0, 0x1ff}}, {0x40, 0x10, {0x0, 0xb7a}}, {0x9f57, 0xf0, {0x1, 0x5}}, {0x5, 0x7, {0x0, 0x2}}, {0x4b50, 0x0, {0x0, 0x80}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20044084) sendmsg$NFT_BATCH(r7, &(0x7f0000002400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000023c0)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0xb00, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x45, 0x6, "003aa4f8e65d0863bf339b6595a2beaafa6ff7d1b0fd42a09e5e6a39d23ab7ffa16ba887f2901a10561f715c0a7e2d1799cd654721ebe8825ee48a72f824f2d021"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x114, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xe8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x222b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x29, 0xc, "822cb35e79ff073240ea4a709dd5d20ecdea2739cbc1101ec4b2f531427699c0ca562ed511"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9fe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELRULE={0x148, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "e98590c0e60b6a6b46d9480fb5e5d27202784c5ddf9a4d3b980e2ed0d6f1b89efc563cea060dc25618a5b89e00bb5ba8ec4c18114d50057965670c2d0ce48607b7c9d85013f6a3a3bb25579457db3fd04ae8fc0586909ea57901eebdc00fdb8fb29822d5414392b61df95defea7ce2a42fdcf13549c4663959367b1a7cf55ba7b344c2c6f89e4ed289e7b73d5e7ccc85e1704fa9af358c201c50b41bab6c87794679037da733d1d900815f7e6f75ac968ccdb1d214d4f258a9"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x168, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "eb1f8dc2412486fddf17fd987e4ef337b42a557419bce81a30285dbbcd248098a3cf376084436952d25fc34dd9626211861fc9aa281d0b8ebf5b104e301052d686dcaed06344236051b2eca53d2cc5c0b6061be7b031eda1095aa509f753bea1604cf0dd5a2d0c311e872ad8eb43ddd466a23cc600d18ebcd4575513318b9a7008aa1a6bbf5450d21282f791442c51cf754f15d4042860e07013b3af682a4d171f6ec27a8154f0023a4224ce7ababc023f32"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "3508300102b2d7226ef1348b0f1d2b1a5e02e13551c28e09c0cffaa443b1b2a47356d9b03418ce8f8d8a4ef00cdb20923ce581b281f94a5c4bae655ac9341e0c75ee7dbb77824bb655cffad23c54161d491f3e1c79c6571c28e7d3c9525b7562eb9daa44de4dc18395"}]}, @NFT_MSG_NEWSET={0xb48, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x2cc, 0x12, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x234, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x224, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x68, 0x3, "ce51c1d043076dd3dee9f14b905867ba455a3d60fd30910c5a290854b786e0baad267e54be1a29226d00c4062b31adaa139a6ebdb82644111306c9ae2236b0285258e51cad1f5e9bb56b3809b651fdf45f8441b3c0383a9f4d9dac765886a4fd1d1426b4"}, @NFTA_MATCH_INFO={0x9e, 0x3, "829b1b6caabf01843b3ff48b8342eaae5a1880ee10b0583885b5ae55105bbce153ca89d8c731bca00278793076f2714f0d34c31ad85739fbf5a68c5e471b6e8d18d70ad5024a2963288bdac219eca1bcef60b1e618eca47f5f8c722bfd061cffeab0a5fd6ea49cbd498cba072d5113dd46521525e492217bbbb8622885e537e3dbf1d11e854c2764d301996d71c10481c67661de5074324c0f24"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_INFO={0xf4, 0x3, "0d32418a545c4fb4e369f48450aeba75f93212b4ececccada92daa5d07f6d4a300cc2b033b67e7f1c4d0e9b2df811cb0e319e18a01fb64dbdcaef24bb06b2bbb4ddebb795ed4cf97f463296287b66c0b6ef1d9db940057564b8395f0026821cc15faf4f55d7582dee5b780be19bcee225a3c892319e1593a388dd0c4028f48f071f5a337c912f2f2c50783f146ed1693bfe7678e2f30e9300e741cecd16a5f99f4f89c12e7cbdce421d6370dc852fc85247ebd5b066a5ff6e1d82981cd01ef3b3ec7c3468de3b9370fe4d6301425dc30a2c87711823d66590879e6bd818390ee2a8a20791a838c75663405b5bdaaa6c7"}, @NFTA_MATCH_NAME={0x8, 0x1, 'cpu\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_EXPR={0x7b0, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x7a4, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x2ec, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xef, 0x1, "6c796ec751a7c2f298964d54a6b2fd41223ee3998deb458b65ab44579e4b44ba82ce6bedfab560a25b136c071bd9ac5a79f777ad1506128f6eb33fef14a437e8843daf55b9c4178ef4032ee531b13f5ac9a1643210f3bca0ce4b7e320ce667c0022b0e9b68f8008c6aa27dab1850284ef25779990678b364621632b9958e4c18df9e5359ace418d2a0d08aa8e0fc95b9266f3996e44b221a6e694fa26f5936cab4cba83859fe2ec0610dab342bb3ae294da3d87619ec3883aa01ddffa0087f36c8c5e4c10909757d500b78576bab9e164f5abf8a6aa98e2f9ad30e6cf59988a945e47726b9f3d5a9be8056"}, @NFTA_DATA_VALUE={0xb8, 0x1, "ae32a62df4234be406f0e9a81080bedc14eed069b6271beeaedb4da324dba29cd7a429142f623b506d66e54809dc60c9d9abee087ec4212065039aa222e135bcebf03803f5aa5500d0964aedd35a6a7336e59907528f36a84f0d7a28a175fceb14859fc6af684e5806f520aa393431a0b7b8f7f2f75b4ad0ff35af40800253926c8aa88f60951274367e62cdef8836174554febd85360e6bcc75299b6db7cde6e18e8f9873a75f5f8389c1b7c4d3c5cd4b4b6a39"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xab, 0x1, "dae49a219b5fb964e7f749a0436662aa37030af91fbbe0028b37c023dd6d06a94aaf5fb9e5f77ffa739fecf5879f85d604818a047b3a681c6ea24ca336f408bbf01fa96faadf655e1a6451be00612af3dbd382408a9c346c463e0219b1f8d96d74416b106b8641a1cd36341b76ba75d9fa087f96796efd121d7a996cb1fd5058aadce3b0b008cf9893c01819304a9d495ef8b4d5e1f9d0ec3c92bb82df983f41ac1a1683627f8d"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x254, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "1f5ad3c48f637189495890b372c3aeabbb60915019f6cac5c06abc9f886bd3c0a1de906d08f640a679d5573fb67ab0a669ac36d040a9baf3405324f95db1041de817"}, @NFTA_DATA_VALUE={0x6d, 0x1, "c99b54d5225809b302f3da6baa38e5d5f4b9d222480ad3fc312a000c2326762978ed99d6bb0a9d90fc8cc19ec404e90fac0875752f021743f694a1536087a70ed900450b8a71ca8446c667460d549681504ee25ce662b8ac012b62253806b42eef8767b9a83e222ab8"}, @NFTA_DATA_VALUE={0xc8, 0x1, "f26e4b8ba3a5af0844301a7358c3a759a426f9aff9f6dbbaf76f13365d7b084603c1bc2c2b6e96e4bc381328fabb9405bdf4d024e42c42ce41509135fdf7bdfe5ba259ae13f4a728bf541f297054b9401d90b5cb1d5c92663caeaa0263242576e6c0c8ba5da2fafac5f1105f4ed54f0535923693570d4038baa12f6e28e1b056a02a03970e0389407ef2b5176f7c02de589e0ffdcfe19da54f5544ae3d8ac00b904e63bcef34dbbdf0aa4b941dd10de21cd8feb2f1dd290c5e33f24edd7a29d0c0d9d7a7"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_DATA={0x248, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "6ebd65b8c2f2f93d1b41b62f6aa2b3b5069dc0e8da3cfdd20c3382589247f4a3d2d9c2032fa08c0d3c2a28f5d876cc170029ea10683b943bec16093053dddd7adb7c228bfafe948c2fc7706210072ae6b7bb601ce8acfe22d904c51534d1cc49bb131fcd3abb3e9aa2f2ddd3796fdeeb844cb219ce0e4629c53940c3fcc587e4dc5e1e1c6f264a8b2c2e8ea19a30c5b42fb2b7fd28b4017ca130e0e07fa25c8e869d7066aa6a992bd75af32ad18dbca8353b7cde35f924a8e8980433eda4f9a4cdd586d56e80d63fef12dca7b3b22ee27ac7d9e0652fa5e624134099471f49c78e6f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}, @NFTA_SET_USERDATA={0xa5, 0xd, 0x1, 0x0, "15a95cf1e2b2b39b7b180ef8dabc63546ec32452e3888e0b37453d0ce0ac44354939fe592fc65716cc689de60dab34548a9f6fe49d75ff851e256ff57e358aba1bf4710e272f7cd9197785eb31680e53ce9c456254eb45db1a807c7051ab0f7cc05ec281f4c4d4953e03c45f2c4e8de3cd746224fbc8d2b506fcf4c7738af357c728028040db186a5ac09aab3f06c099fa01cb1b6e86a35124f1e16080f268548e"}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10a4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) ioctl$BTRFS_IOC_LOGICAL_INO(r8, 0xc0389424, &(0x7f00000024c0)={0x3b4bd71e, 0x50, '\x00', 0x1, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x20, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8100) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002600)={0x1d, r9}, 0x10) 2.248617344s ago: executing program 2 (id=1785): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @mcast2}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) ioctl(r2, 0x8b29, &(0x7f0000000040)) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 2.01223815s ago: executing program 2 (id=1787): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, 'S'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, 'S'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) 1.808256635s ago: executing program 3 (id=1791): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002b000b00000000ff0f00000007000000040003000c00018006000000e948ef000c00020007000100"], 0x30}}, 0x4000) 1.398089596s ago: executing program 2 (id=1792): setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x5, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000010405148000000200000000000000020500010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4000084) 1.396686361s ago: executing program 2 (id=1794): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) write$tun(r1, &(0x7f0000000440)={@val={0x0, 0x6000}, @void, @mpls={[{0x0, 0x0, 0x1}, {0x6}, {0x40, 0x0, 0x1}, {0xd, 0x0, 0x1}], @ipv4=@udp={{0x22, 0x4, 0x3, 0x3c, 0x10c, 0x67, 0x0, 0x5, 0x11, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x34, 0x3, [{0x5, 0xd, "312124ed3da2cbdab65555"}, {0x0, 0xb, "2798aec9f4febc0b50"}, {0x5, 0x5, "48df27"}, {0x0, 0x2}, {0x7, 0xf, "5266b9e7abf7e7fdc34f8dee20"}]}, @rr={0x7, 0x27, 0x73, [@empty, @remote, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010102, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x18, 0x0, 0x1, [0x5, 0x1, 0x5484, 0x0, 0x6]}]}}, {0x4e23, 0x4e22, 0x84, 0x0, @gue={{0x2, 0x1, 0x0, 0x4}, "7214d6abfd3d59783417e30428480a659c8983822eb59aa8e29a3db63b8b97ce1dd884e0ba592bee2e60806219a27d8bc627da78987199c1cd85d11705b892de5e37056ff7e27faea3b807e678904041250aff811a01e2442d510e4d84796ac0fb6a9b3b3fa48783b08f769a96c7b663d0946ffb"}}}}}, 0x120) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.396292352s ago: executing program 3 (id=1795): unshare(0x2a020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) write(r1, &(0x7f0000000340)="13001f040d5700f9", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000180)=0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYBLOB="a7be009849f943ae8fa914a24c9417001b1cd92217572c02c8438646354613ec44a8281a875853e5b4336acf444e07e3856d4c3a71db9c6f427017f5f385da91bc14c2e4d1b214ee3236ebcf470538bdf1cc5e66a75d7b39fd27c5634d2eb25345766b69c9175fe5f223e3a17c77528485652f9d7fd35437caec7f6280afa7836fd8e5434843b060210d45f0d590e921ec77c8a27ad4d0a612a9803c813c299d8bd3ec0f25b66fab295eee", @ANYRESDEC=r2, @ANYRES16=r4, @ANYRES8=0x0], 0x44}}, 0x8000) socket$rds(0x15, 0x5, 0x0) 1.393949249s ago: executing program 3 (id=1797): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000001440)=""/31, 0x1f, 0x10000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x0, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad958500000001000000", @ANYBLOB="0000000000000000b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.393755538s ago: executing program 1 (id=1798): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000000)) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff85000000b500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.333681979s ago: executing program 1 (id=1799): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000000000000005cad42108008202000000"], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @rand_addr=0x64010100}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x40040) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async, rerun: 32) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x9) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESHEX=r8], 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x44004) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x2, @multicast2}}}, 0x88) 1.244176289s ago: executing program 4 (id=1800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af80001000000bfa100000000000007010000b8ffffffb702100000144ab0488446c11b061992d134549b83fa342a3544a7d80d14fcae525a125f7e79b6b752c895e1551b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000002580)=[{{&(0x7f0000000a40)={0xa, 0x4e23, 0x80000001, @local, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000808000600"], 0x18}}], 0x1, 0x8080) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000200)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1, 0x0, 0x3}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) close(0xffffffffffffffff) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r6], 0x38}}, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc4) (async, rerun: 32) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbb450000380000000000019078ac1e0001ac1437aa03049078120c183f25f4000000000003000100007f000001ffffffff696600000000e1ff"], 0x0) socket$key(0xf, 0x3, 0x2) 1.224862725s ago: executing program 4 (id=1801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000d40)={r3, 0x6, 0xa7c8, 0x1}) close(r1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f00000003c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r11, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r11, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) 1.165182137s ago: executing program 2 (id=1802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x6, @local, 0xb}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000440)={0x80, 0x20, 0x7f, 0x40, 0x13, 0x1, 0x9a, 0xbe, 0xac, 0x0, 0x10, 0x8, 0x2, 0x3}, 0xe) 638.053748ms ago: executing program 4 (id=1803): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000200), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000000c0)=""/231, &(0x7f0000000040)=0xe7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4048001) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 568.477895ms ago: executing program 1 (id=1804): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x90}, 0xc8c5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7}, {0xb, 0xa}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) 562.762173ms ago: executing program 3 (id=1805): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x4c004) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x20010, 0xffffffffffffffff, 0x2c2b4000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4040890) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x380, 0x700, 0x2, 0xffffaab3, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x14, 0x6e, 0x0, 0x7, [0x8673, 0x1, 0x8000, 0x3]}, @timestamp_addr={0x44, 0x14, 0x54, 0x1, 0x3, [{@empty, 0x5}, {@remote, 0x6}]}, @ra={0x94, 0x4}]}}}}}) recvfrom$packet(r2, &(0x7f0000000040)=""/143, 0x8f, 0x1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x3}, 0x14) (async, rerun: 32) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x400c000) (rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 483.910328ms ago: executing program 4 (id=1806): r0 = socket$kcm(0x10, 0x2, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_mpls={0x68, 0x1b, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x7, 0x1, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xe, 0x6, "d68634066113614f88e6"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x4}], 0x10}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 348.378322ms ago: executing program 1 (id=1807): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x9b40, 0x40}) 287.725453ms ago: executing program 4 (id=1808): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r1 = socket$inet(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000100)=r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x80fe, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x74, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0x10000}, @in6={0xa, 0xf801, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xdb}]}, &(0x7f0000000280)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020d90c1af8ff00000000bfa100000500000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000140)=0x2, 0x8) setsockopt$inet_buf(r1, 0x0, 0x4c, &(0x7f0000000040)="228497ce98cb658f12e59f5b804ca60787ea105029109ec2f72c95b9", 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2d, 0x10000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c051}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) 261.796792ms ago: executing program 3 (id=1809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.sectors\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm64\x00'}, 0x58) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) listen(r5, 0x5) (async, rerun: 32) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3f}, @void, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x67}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x0) read$rfkill(r4, &(0x7f0000000000), 0x8) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) 168.25684ms ago: executing program 1 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) 111.460096ms ago: executing program 3 (id=1811): sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f1367ac91d0acf502b69838335373d70f37bbc143ce065adb600b801e4e069a2c476177e78324912c6038f3930606d3379a0bd"], 0x14}, 0x1, 0x40030000000000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x3ff, 0x2, 0xfffffc31, 0x7, 0x4a, 0xbcf}, &(0x7f00000002c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={r5, 0x7fff}, 0x8) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140), 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f1367ac91d0acf502b69838335373d70f37bbc143ce065adb600b801e4e069a2c476177e78324912c6038f3930606d3379a0bd"], 0x14}, 0x1, 0x40030000000000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x3ff, 0x2, 0xfffffc31, 0x7, 0x4a, 0xbcf}, &(0x7f00000002c0)=0x9c) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={r5, 0x7fff}, 0x8) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140), 0x10) (async) 80.307933ms ago: executing program 4 (id=1812): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}}, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) connect$phonet_pipe(r1, 0x0, 0x0) (async) connect$phonet_pipe(r1, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 0s ago: executing program 1 (id=1813): readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x3) socket$kcm(0x2, 0xa, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="ffffffffffffffff000000f00000000000000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='tegra_dma_complete_cb\x00', r6, 0x0, 0x2}, 0x18) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000680)="87", 0x1}], 0x1, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) listen(0xffffffffffffffff, 0x4) kernel console output (not intermixed with test programs): T5867] veth0_vlan: entered promiscuous mode [ 100.188441][ T5867] veth1_vlan: entered promiscuous mode [ 100.362502][ T5878] veth0_vlan: entered promiscuous mode [ 100.383121][ T5867] veth0_macvtap: entered promiscuous mode [ 100.448787][ T5867] veth1_macvtap: entered promiscuous mode [ 100.460151][ T5878] veth1_vlan: entered promiscuous mode [ 100.563236][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.587000][ T5870] Bluetooth: hci4: command tx timeout [ 100.592484][ T5870] Bluetooth: hci2: command tx timeout [ 100.602624][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.622888][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.652435][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.663347][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.672305][ T5870] Bluetooth: hci3: command tx timeout [ 100.672352][ T5870] Bluetooth: hci0: command tx timeout [ 100.678369][ T5883] Bluetooth: hci1: command tx timeout [ 100.694587][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.727263][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.734350][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.758602][ T5878] veth0_macvtap: entered promiscuous mode [ 100.773118][ T5878] veth1_macvtap: entered promiscuous mode [ 100.828659][ T5874] veth0_vlan: entered promiscuous mode [ 100.850720][ T5874] veth1_vlan: entered promiscuous mode [ 100.868536][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.947029][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.963541][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.970130][ T5873] veth0_vlan: entered promiscuous mode [ 100.980356][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.047968][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.057781][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.087134][ T196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.098294][ T5874] veth0_macvtap: entered promiscuous mode [ 101.115546][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.126913][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.132143][ T5873] veth1_vlan: entered promiscuous mode [ 101.134777][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.158673][ T5866] veth0_vlan: entered promiscuous mode [ 101.165305][ T5874] veth1_macvtap: entered promiscuous mode [ 101.210470][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.252530][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.271179][ T5866] veth1_vlan: entered promiscuous mode [ 101.315345][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.331583][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.364436][ T5873] veth0_macvtap: entered promiscuous mode [ 101.365571][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.372489][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.420455][ T5873] veth1_macvtap: entered promiscuous mode [ 101.429401][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.443887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.454559][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.597941][ T5866] veth0_macvtap: entered promiscuous mode [ 101.607869][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.621458][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.632303][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.665925][ T5866] veth1_macvtap: entered promiscuous mode [ 101.691909][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.745462][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.763022][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.825518][ T5983] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 101.833601][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6'. [ 101.877594][ T1336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.897661][ T1336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.913162][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.985875][ T1336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.997813][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.007522][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.015481][ T1336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.050078][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.112154][ T1336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.126073][ T5988] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3'. [ 102.190788][ T1336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.229755][ T1336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.488526][ T1336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.605518][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.619055][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.633850][ T5994] wg1 speed is unknown, defaulting to 1000 [ 102.656914][ T5994] wg1 speed is unknown, defaulting to 1000 [ 102.670459][ T51] Bluetooth: hci2: command tx timeout [ 102.677096][ T51] Bluetooth: hci4: command tx timeout [ 102.683927][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 102.730596][ T5994] wg1 speed is unknown, defaulting to 1000 [ 102.747999][ T51] Bluetooth: hci1: command tx timeout [ 102.753509][ T51] Bluetooth: hci3: command tx timeout [ 102.757168][ T5883] Bluetooth: hci0: command tx timeout [ 102.772929][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.805462][ T5994] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.821814][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.855584][ T5994] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.912058][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.958899][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.985344][ T5994] wg1 speed is unknown, defaulting to 1000 [ 103.076382][ T5994] wg1 speed is unknown, defaulting to 1000 [ 103.084284][ T5994] wg1 speed is unknown, defaulting to 1000 [ 103.112827][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.135335][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.234665][ T6002] batman_adv: batadv0: Adding interface: vxlan0 [ 103.248320][ T6004] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 103.262403][ T6002] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.263979][ T6004] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 103.305421][ T6002] batman_adv: batadv0: Interface activated: vxlan0 [ 103.317205][ T5994] wg1 speed is unknown, defaulting to 1000 [ 103.319827][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.343085][ T6002] Zero length message leads to an empty skb [ 103.371110][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.391394][ T6007] IPVS: set_ctl: invalid protocol: 8 172.20.20.34:20003 [ 103.401687][ T5994] wg1 speed is unknown, defaulting to 1000 [ 103.411582][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.431513][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.594415][ T6014] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 103.698094][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.953864][ T6023] vlan2: entered allmulticast mode [ 103.966748][ T6023] veth1: entered allmulticast mode [ 104.278795][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 104.684536][ T6046] trusted_key: syz.0.17 sent an empty control message without MSG_MORE. [ 104.721388][ T6034] wg1 speed is unknown, defaulting to 1000 [ 105.023689][ T6046] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 105.813660][ T6059] wg1 speed is unknown, defaulting to 1000 [ 105.922304][ T6058] wg1 speed is unknown, defaulting to 1000 [ 106.361329][ T6072] wg1 speed is unknown, defaulting to 1000 [ 106.763612][ T6077] netlink: 'syz.3.23': attribute type 6 has an invalid length. [ 106.872899][ T6089] block nbd0: server does not support multiple connections per device. [ 106.904850][ T6089] block nbd0: shutting down sockets [ 107.307536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.550717][ T6096] netlink: 3 bytes leftover after parsing attributes in process `syz.2.32'. [ 107.583048][ T6096] batadv1: entered promiscuous mode [ 107.618145][ T6096] batadv1: entered allmulticast mode [ 107.705977][ T6101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.32'. [ 108.496965][ T6116] tipc: Started in network mode [ 108.502023][ T6116] tipc: Node identity c63f71e533d2, cluster identity 4711 [ 108.568175][ T6116] tipc: Enabled bearer , priority 0 [ 108.603601][ T6120] syzkaller0: entered promiscuous mode [ 108.629182][ T6120] syzkaller0: entered allmulticast mode [ 108.743915][ T6116] tipc: Resetting bearer [ 108.791601][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 108.840884][ T6115] tipc: Resetting bearer [ 108.874415][ T6115] tipc: Disabling bearer [ 108.912063][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 108.936582][ T6131] !: renamed from dummy0 (while UP) [ 109.161071][ T6137] netlink: 'syz.0.43': attribute type 9 has an invalid length. [ 109.237164][ T6137] netlink: 'syz.0.43': attribute type 6 has an invalid length. [ 109.256211][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.308329][ T6140] netlink: 'syz.3.44': attribute type 12 has an invalid length. [ 109.329380][ T6140] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 109.371204][ T6140] netlink: 148 bytes leftover after parsing attributes in process `syz.3.44'. [ 109.418707][ T6140] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 109.522721][ T6143] netlink: 'syz.3.44': attribute type 12 has an invalid length. [ 109.546386][ T6143] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 109.576968][ T6143] netlink: 148 bytes leftover after parsing attributes in process `syz.3.44'. [ 109.608185][ T6143] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 110.039073][ T6161] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 110.311372][ T6164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.579716][ T6164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.750358][ T6164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.985921][ T6164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.427912][ T1115] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.446617][ T6177] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.475647][ T6213] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 111.537057][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.52'. [ 111.537705][ T6171] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.606996][ T1115] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.622020][ T6217] netlink: 64 bytes leftover after parsing attributes in process `syz.3.53'. [ 111.904300][ T6223] wg1 speed is unknown, defaulting to 1000 [ 111.950325][ T5870] Bluetooth: hci3: command 0x0401 tx timeout [ 112.687761][ T6241] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.988945][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.997527][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.403231][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.483710][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.620788][ T6290] netlink: 'syz.3.71': attribute type 2 has an invalid length. [ 114.633028][ T6290] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 114.658695][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 114.902598][ T1148] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.943711][ T1148] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.986987][ T1148] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.999478][ T6186] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.068317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.160389][ T6296] openvswitch: netlink: Multiple metadata blocks provided [ 115.381401][ T6302] nbd: couldn't find device at index 536870912 [ 115.778242][ T5231] udevd[5231]: worker [5857] terminated by signal 33 (Unknown signal 33) [ 115.804718][ T5231] udevd[5231]: worker [5857] failed while handling '/devices/virtual/block/loop3' [ 116.996635][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 117.401099][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 117.411198][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.94'. [ 117.739978][ T6381] netlink: 'syz.2.98': attribute type 22 has an invalid length. [ 117.802765][ T6377] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 117.875551][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 117.961204][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 118.243596][ T6374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.476625][ T6374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.616872][ T6374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.848616][ T6374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.987600][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 119.120000][ T1148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.136410][ T1148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.193900][ T6166] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.235152][ T6177] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.248532][ T6421] sch_fq: defrate 0 ignored. [ 119.419376][ T6433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.114'. [ 119.428889][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 119.567266][ T6439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.799618][ T6454] mac80211_hwsim hwsim10 ªªªªª": renamed from wlan0 [ 119.894725][ T6456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.120'. [ 119.907250][ T6456] openvswitch: netlink: Flow key attr not present in new flow. [ 120.008103][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 120.200558][ T6471] bridge_slave_0: left allmulticast mode [ 120.223438][ T6471] bridge_slave_0: left promiscuous mode [ 120.242479][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.282469][ T6471] bridge_slave_1: left allmulticast mode [ 120.290992][ T6471] bridge_slave_1: left promiscuous mode [ 120.298877][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.309560][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'. [ 120.319877][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'. [ 120.320512][ T6471] bond0: (slave bond_slave_0): Releasing backup interface [ 120.345661][ T6471] bond0: (slave bond_slave_1): Releasing backup interface [ 120.371734][ T6471] team0: Port device team_slave_0 removed [ 120.383509][ T6471] team0: Port device team_slave_1 removed [ 120.394464][ T6471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.406964][ T6471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.632291][ T6492] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.131'. [ 120.644338][ T6491] sctp: [Deprecated]: syz.2.130 (pid 6491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.644338][ T6491] Use struct sctp_sack_info instead [ 120.663606][ T6491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.130'. [ 120.700469][ T6492] netlink: zone id is out of range [ 120.705694][ T6492] netlink: zone id is out of range [ 120.718160][ T6492] netlink: zone id is out of range [ 120.725218][ T6492] netlink: zone id is out of range [ 120.772190][ T6492] netlink: zone id is out of range [ 120.789413][ T6492] netlink: zone id is out of range [ 120.794694][ T6492] netlink: zone id is out of range [ 120.825520][ T6494] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 120.841566][ T6492] netlink: zone id is out of range [ 120.862832][ T6492] netlink: zone id is out of range [ 120.865736][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 120.884584][ T6492] netlink: zone id is out of range [ 120.897028][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 120.908106][ T6501] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 121.016858][ T6503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.131'. [ 121.031360][ T6498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.131'. [ 121.163076][ T6512] tipc: Started in network mode [ 121.196066][ T6512] tipc: Node identity 7acbc3643d2f, cluster identity 4711 [ 121.218385][ T6512] tipc: Enabled bearer , priority 0 [ 121.254524][ T6509] tipc: Disabling bearer [ 121.267453][ T6515] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.277075][ T6515] block nbd0: shutting down sockets [ 121.500658][ T6533] tipc: Enabling of bearer rejected, failed to enable media [ 121.555482][ T6538] ieee802154 phy1 wpan1: encryption failed: -22 [ 122.004026][ T6558] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 122.028378][ T6558] bridge1: entered allmulticast mode [ 122.079735][ T6564] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 122.117924][ T6564] bridge2: entered allmulticast mode [ 122.448735][ T6582] wg1 speed is unknown, defaulting to 1000 [ 123.038651][ T6604] team0: entered promiscuous mode [ 123.423038][ T6624] IPVS: Scheduler module ip_vs_sip not found [ 123.558993][ T6604] team0 (unregistering): left promiscuous mode [ 123.692774][ T6597] wg1 speed is unknown, defaulting to 1000 [ 124.910684][ T6680] netlink: 'syz.3.182': attribute type 5 has an invalid length. [ 125.388848][ T6697] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 125.420556][ T6697] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.571999][ T6705] wg1 speed is unknown, defaulting to 1000 [ 125.591207][ T6713] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 125.845113][ T6717] wg1 speed is unknown, defaulting to 1000 [ 126.164616][ T6736] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 126.212938][ T6736] __nla_validate_parse: 9 callbacks suppressed [ 126.212959][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 126.365439][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 126.380873][ T6177] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.409950][ T6177] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.438148][ T6751] netlink: 'syz.0.201': attribute type 8 has an invalid length. [ 126.446134][ T6177] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.463258][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 126.474820][ T6177] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.500282][ T6751] bond0: entered promiscuous mode [ 126.505637][ T6751] bond_slave_0: entered promiscuous mode [ 126.512546][ T6751] bond_slave_1: entered promiscuous mode [ 126.548643][ T6751] bond0: left promiscuous mode [ 126.554332][ T6751] bond_slave_0: left promiscuous mode [ 126.568699][ T6751] bond_slave_1: left promiscuous mode [ 126.603930][ T6755] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 126.614955][ T6755] netlink: 220 bytes leftover after parsing attributes in process `syz.1.204'. [ 126.629178][ T6755] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 126.644837][ T6762] tipc: Enabled bearer , priority 0 [ 126.652575][ T6762] syzkaller0: entered promiscuous mode [ 126.658717][ T6762] syzkaller0: entered allmulticast mode [ 126.719852][ T6763] tipc: Started in network mode [ 126.724795][ T6763] tipc: Node identity fa7698f3bcfa, cluster identity 4711 [ 126.737048][ T6763] tipc: Enabled bearer , priority 0 [ 126.766857][ T6762] tipc: Resetting bearer [ 126.780021][ T6763] syzkaller0: entered promiscuous mode [ 126.787974][ T6763] syzkaller0: entered allmulticast mode [ 126.799904][ T6760] tipc: Resetting bearer [ 126.831208][ T6760] tipc: Disabling bearer [ 126.968134][ T6761] tipc: Resetting bearer [ 127.005571][ T6761] tipc: Disabling bearer [ 127.112194][ T6784] syzkaller1: entered promiscuous mode [ 127.119507][ T6784] syzkaller1: entered allmulticast mode [ 127.191788][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 127.201028][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 127.289302][ T6792] gre1: entered allmulticast mode [ 127.824828][ T6808] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 127.874818][ T6808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.892197][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 128.808242][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 129.365090][ T6867] net_ratelimit: 3 callbacks suppressed [ 129.365111][ T6867] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 129.626630][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 129.788055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.031726][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 130.049614][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 130.232527][ T6897] tipc: New replicast peer: 255.255.255.255 [ 130.240448][ T6897] tipc: Enabled bearer , priority 10 [ 130.292801][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.311058][ T6900] netlink: 48 bytes leftover after parsing attributes in process `syz.4.242'. [ 130.334996][ T6897] wg1 speed is unknown, defaulting to 1000 [ 130.400541][ T6899] bond1: entered promiscuous mode [ 130.408103][ T6899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.423283][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.451513][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.460974][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.541289][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.789166][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.813484][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.859323][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.892706][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 130.947915][ T6899] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 131.234260][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.262818][ T6951] __nla_validate_parse: 65 callbacks suppressed [ 131.262840][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 131.328057][ T6955] FAULT_INJECTION: forcing a failure. [ 131.328057][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.367633][ T5961] tipc: Node number set to 4125979109 [ 131.369831][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.2.259 Not tainted syzkaller #0 PREEMPT(full) [ 131.369862][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.369887][ T6955] Call Trace: [ 131.369897][ T6955] [ 131.369907][ T6955] dump_stack_lvl+0x189/0x250 [ 131.369944][ T6955] ? __pfx____ratelimit+0x10/0x10 [ 131.369978][ T6955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.370007][ T6955] ? __pfx__printk+0x10/0x10 [ 131.370042][ T6955] ? __might_fault+0xb0/0x130 [ 131.370101][ T6955] should_fail_ex+0x414/0x560 [ 131.370138][ T6955] _copy_from_iter+0x1db/0x16f0 [ 131.370174][ T6955] ? policy_nodemask+0x27c/0x720 [ 131.370206][ T6955] ? __pfx__copy_from_iter+0x10/0x10 [ 131.370240][ T6955] ? set_page_refcounted+0xa0/0x1e0 [ 131.370272][ T6955] ? page_copy_sane+0x4e/0x280 [ 131.370298][ T6955] copy_page_from_iter+0xdd/0x170 [ 131.370328][ T6955] tun_get_user+0x1d7b/0x3e20 [ 131.370361][ T6955] ? tun_get_user+0x6f6/0x3e20 [ 131.370394][ T6955] ? aa_file_perm+0x44d/0x1550 [ 131.370419][ T6955] ? __pfx_tun_get_user+0x10/0x10 [ 131.370441][ T6955] ? _parse_integer_limit+0x1ae/0x1f0 [ 131.370487][ T6955] ? __lock_acquire+0xab9/0xd20 [ 131.370529][ T6955] ? ref_tracker_alloc+0x318/0x460 [ 131.370561][ T6955] ? __lock_acquire+0xab9/0xd20 [ 131.370598][ T6955] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.370638][ T6955] ? tun_get+0x1c/0x2f0 [ 131.370669][ T6955] ? tun_get+0x1c/0x2f0 [ 131.370690][ T6955] ? tun_get+0x1c/0x2f0 [ 131.370720][ T6955] tun_chr_write_iter+0x113/0x200 [ 131.370747][ T6955] vfs_write+0x5c9/0xb30 [ 131.370786][ T6955] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.370810][ T6955] ? __pfx_vfs_write+0x10/0x10 [ 131.370855][ T6955] ? __fget_files+0x2a/0x420 [ 131.370886][ T6955] ksys_write+0x145/0x250 [ 131.370922][ T6955] ? __pfx_ksys_write+0x10/0x10 [ 131.370960][ T6955] ? do_syscall_64+0xbe/0x3b0 [ 131.371000][ T6955] do_syscall_64+0xfa/0x3b0 [ 131.371035][ T6955] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.371068][ T6955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.371098][ T6955] ? clear_bhb_loop+0x60/0xb0 [ 131.371127][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.371151][ T6955] RIP: 0033:0x7f785e58d69f [ 131.371172][ T6955] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.371191][ T6955] RSP: 002b:00007f785f49e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.371221][ T6955] RAX: ffffffffffffffda RBX: 00007f785e7b5fa0 RCX: 00007f785e58d69f [ 131.371239][ T6955] RDX: 0000000000000052 RSI: 0000200000000300 RDI: 00000000000000c8 [ 131.371253][ T6955] RBP: 00007f785f49e090 R08: 0000000000000000 R09: 0000000000000000 [ 131.371268][ T6955] R10: 0000000000000052 R11: 0000000000000293 R12: 0000000000000001 [ 131.371281][ T6955] R13: 00007f785e7b6038 R14: 00007f785e7b5fa0 R15: 00007ffc57948698 [ 131.371318][ T6955] [ 131.740813][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 131.757215][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 131.779784][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 131.787842][ T6960] tipc: Started in network mode [ 131.793584][ T6960] tipc: Node identity 7, cluster identity 4711 [ 131.800940][ T6960] tipc: Node number set to 7 [ 131.930896][ T6964] wg1 speed is unknown, defaulting to 1000 [ 132.104408][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.112258][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.234573][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.250096][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.399974][ T6977] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 132.416080][ T6977] gre1: left allmulticast mode [ 132.432818][ T6980] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.475714][ T929] wg1 speed is unknown, defaulting to 1000 [ 132.510348][ T6177] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.522217][ T6177] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.532031][ T929] s: Port: 1 Link DOWN [ 132.578167][ T6177] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.588015][ T6177] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.623193][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.273'. [ 132.689966][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 132.785601][ T7007] bridge1: port 1(veth3) entered blocking state [ 132.808170][ T7007] bridge1: port 1(veth3) entered disabled state [ 132.825849][ T7007] veth3: entered allmulticast mode [ 132.834182][ T7007] veth3: entered promiscuous mode [ 133.006129][ T7021] erspan0: entered allmulticast mode [ 133.472941][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 133.482341][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 133.737391][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 133.741444][ T7060] wg1 speed is unknown, defaulting to 1000 [ 133.759531][ T7063] wg1 speed is unknown, defaulting to 1000 [ 134.737074][ T7096] netlink: 128 bytes leftover after parsing attributes in process `syz.2.300'. [ 135.277041][ T7122] block nbd0: server does not support multiple connections per device. [ 135.289447][ T7122] block nbd0: shutting down sockets [ 135.310835][ T7131] IPVS: set_ctl: invalid protocol: 33 172.30.0.1:20003 [ 135.571140][ T7142] raw_sendmsg: syz.3.312 forgot to set AF_INET. Fix it! [ 135.785787][ T7159] macsec1: entered promiscuous mode [ 135.792464][ T7159] macsec1: entered allmulticast mode [ 136.498900][ T7185] validate_nla: 59 callbacks suppressed [ 136.498921][ T7185] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 136.606628][ T7185] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 136.614336][ T7185] __nla_validate_parse: 7 callbacks suppressed [ 136.614354][ T7185] netlink: 192 bytes leftover after parsing attributes in process `syz.0.324'. [ 136.674828][ T7189] gretap1: entered promiscuous mode [ 136.674835][ T7185] NCSI netlink: No device for ifindex 0 [ 136.745075][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 136.780285][ T7200] netlink: 'syz.3.328': attribute type 39 has an invalid length. [ 136.796370][ T7189] gretap1: entered allmulticast mode [ 137.431201][ T7227] sctp: [Deprecated]: syz.2.331 (pid 7227) Use of int in max_burst socket option deprecated. [ 137.431201][ T7227] Use struct sctp_assoc_value instead [ 137.490171][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'. [ 137.690553][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.338'. [ 137.709844][ T7248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.338'. [ 138.122829][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.418095][ T7285] netlink: 6 bytes leftover after parsing attributes in process `syz.3.348'. [ 138.561053][ T7296] netlink: 156 bytes leftover after parsing attributes in process `syz.1.350'. [ 138.803407][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.356'. [ 139.481358][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.368'. [ 139.490551][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 139.805278][ T7358] hsr_slave_0: left promiscuous mode [ 139.812134][ T7358] hsr_slave_1: left promiscuous mode [ 140.389824][ T7376] wg1 speed is unknown, defaulting to 1000 [ 140.478162][ T7390] syz.0.379 (7390) used greatest stack depth: 16088 bytes left [ 141.228621][ T7440] netlink: 'syz.4.390': attribute type 14 has an invalid length. [ 141.738875][ T7449] __nla_validate_parse: 3 callbacks suppressed [ 141.740311][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 141.786764][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 141.803103][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 142.108711][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.116637][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.310819][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.327101][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.421724][ T7482] sock: sock_timestamping_bind_phc: sock not bind to device [ 142.473806][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 142.514932][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 142.529623][ T6171] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.566303][ T7484] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 142.574010][ T7484] netlink: 10 bytes leftover after parsing attributes in process `syz.4.403'. [ 142.578728][ T6171] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.610326][ T6171] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.621067][ T6171] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.677974][ T7484] nbd: socks must be embedded in a SOCK_ITEM attr [ 142.688335][ T7484] block nbd0: shutting down sockets [ 142.709707][ T7494] netlink: 'syz.3.404': attribute type 12 has an invalid length. [ 142.717562][ T7494] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 142.725325][ T7494] netlink: 148 bytes leftover after parsing attributes in process `syz.3.404'. [ 142.762361][ T7494] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 142.795811][ T7492] netlink: 'syz.3.404': attribute type 12 has an invalid length. [ 142.817529][ T7492] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 142.848788][ T7492] netlink: 148 bytes leftover after parsing attributes in process `syz.3.404'. [ 142.873150][ T7492] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 142.928076][ T5883] Bluetooth: hci4: link tx timeout [ 142.934479][ T5883] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.944702][ T5883] Bluetooth: hci4: link tx timeout [ 142.949957][ T5883] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.985468][ T7506] wg1 speed is unknown, defaulting to 1000 [ 143.373172][ T30] audit: type=1800 audit(1755785127.459:2): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.415" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=394 res=0 errno=0 [ 143.404379][ T30] audit: type=1804 audit(1755785127.459:3): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.415" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=394 res=1 errno=0 [ 143.665881][ T7555] tipc: Started in network mode [ 143.685999][ T7555] tipc: Node identity 262ddb3df83f, cluster identity 4711 [ 143.698094][ T7555] tipc: Enabled bearer , priority 0 [ 143.706155][ T7555] syzkaller0: entered promiscuous mode [ 143.712184][ T7555] syzkaller0: entered allmulticast mode [ 143.727464][ T7567] !: renamed from dummy0 [ 143.790369][ T7555] tipc: Resetting bearer [ 143.834606][ T7576] wg1 speed is unknown, defaulting to 1000 [ 144.085509][ T7551] tipc: Resetting bearer [ 144.117438][ T7551] tipc: Disabling bearer [ 144.427903][ T7610] Bluetooth: MGMT ver 1.23 [ 144.475562][ T7610] geneve2: entered promiscuous mode [ 144.486167][ T6166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.496021][ T6166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.531778][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 144.544803][ T6166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.554893][ T6166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.670369][ T7619] netlink: 200 bytes leftover after parsing attributes in process `syz.4.429'. [ 145.050713][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.079252][ T7633] tipc: Enabled bearer , priority 0 [ 145.087335][ T7633] syzkaller0: entered promiscuous mode [ 145.092853][ T7633] syzkaller0: entered allmulticast mode [ 145.169394][ T7633] tipc: Resetting bearer [ 145.270774][ T7629] tipc: Resetting bearer [ 145.321968][ T7629] tipc: Disabling bearer [ 145.345872][ T7648] (unnamed net_device) (uninitialized): down delay (65536) is not a multiple of miimon (100), value rounded to 65500 ms [ 145.393734][ T7648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.548375][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 145.676126][ T7670] wg1 speed is unknown, defaulting to 1000 [ 146.337154][ T7667] netlink: 'syz.0.446': attribute type 6 has an invalid length. [ 146.822769][ T7714] tipc: Enabled bearer , priority 0 [ 146.862669][ T7706] tipc: Resetting bearer [ 147.136719][ T7717] syzkaller0: entered promiscuous mode [ 147.144651][ T7717] syzkaller0: entered allmulticast mode [ 147.150999][ T7732] __nla_validate_parse: 3 callbacks suppressed [ 147.151028][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 147.170518][ T7732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.180234][ T7705] tipc: Resetting bearer [ 147.197348][ T7705] tipc: Disabling bearer [ 147.212566][ T7734] netlink: 'syz.0.465': attribute type 12 has an invalid length. [ 147.222681][ T7734] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 147.237496][ T7734] netlink: 148 bytes leftover after parsing attributes in process `syz.0.465'. [ 147.251172][ T7736] netlink: 148 bytes leftover after parsing attributes in process `syz.0.465'. [ 147.591460][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.468'. [ 147.954509][ T7772] validate_nla: 4 callbacks suppressed [ 147.954530][ T7772] netlink: 'syz.3.478': attribute type 12 has an invalid length. [ 147.968265][ T7772] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 147.977807][ T7772] netlink: 148 bytes leftover after parsing attributes in process `syz.3.478'. [ 147.998989][ T7772] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 148.012483][ T7772] netlink: 'syz.3.478': attribute type 12 has an invalid length. [ 148.022017][ T7772] netlink: 'syz.3.478': attribute type 29 has an invalid length. [ 148.030442][ T7772] netlink: 148 bytes leftover after parsing attributes in process `syz.3.478'. [ 148.041826][ T7772] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 148.553688][ T7796] netlink: 160 bytes leftover after parsing attributes in process `syz.1.485'. [ 148.568141][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 148.577746][ T7796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.830876][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 149.101831][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 149.722913][ T7855] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 149.732112][ T7855] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 149.784946][ T7858] pimreg: entered allmulticast mode [ 149.804845][ T7858] pimreg: left allmulticast mode [ 150.024589][ T7861] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 150.137450][ T7866] netlink: 'syz.3.506': attribute type 2 has an invalid length. [ 150.505449][ T7884] netlink: 'syz.3.513': attribute type 10 has an invalid length. [ 150.517588][ T7884] batman_adv: batadv0: Adding interface: netdevsim0 [ 150.531023][ T7884] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.561846][ T7884] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 150.761328][ T7891] tipc: Enabled bearer , priority 0 [ 150.773892][ T7891] syzkaller0: entered promiscuous mode [ 150.784385][ T7891] syzkaller0: entered allmulticast mode [ 150.848054][ T7891] tipc: Resetting bearer [ 150.858636][ T7890] tipc: Resetting bearer [ 150.881071][ T7890] tipc: Disabling bearer [ 151.261126][ T7920] tipc: Enabled bearer , priority 0 [ 151.273076][ T7920] syzkaller0: entered promiscuous mode [ 151.279012][ T7920] syzkaller0: entered allmulticast mode [ 151.337536][ T7920] tipc: Resetting bearer [ 151.358403][ T7920] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 151.375714][ T7925] wg1 speed is unknown, defaulting to 1000 [ 151.392364][ T7919] tipc: Resetting bearer [ 151.467669][ T7919] tipc: Disabling bearer [ 151.639901][ T7926] wg1 speed is unknown, defaulting to 1000 [ 152.216867][ T7942] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 152.302589][ T7942] bond1: entered promiscuous mode [ 152.308540][ T7942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.358360][ T7947] __nla_validate_parse: 11 callbacks suppressed [ 152.358381][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 152.610122][ T7950] IPv6: sit2: Disabled Multicast RS [ 152.914122][ T7961] netlink: 244 bytes leftover after parsing attributes in process `syz.3.537'. [ 153.000566][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 153.445084][ T7994] tipc: Enabling of bearer rejected, failed to enable media [ 153.879605][ T8024] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 153.907196][ T8024] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 154.395658][ T30] audit: type=1800 audit(1755785138.479:4): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.555" name="memory.events" dev="tmpfs" ino=628 res=0 errno=0 [ 155.475575][ T8068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.674474][ T8074] validate_nla: 1 callbacks suppressed [ 155.674621][ T8074] netlink: 'syz.0.569': attribute type 12 has an invalid length. [ 155.762158][ T8074] netlink: 'syz.0.569': attribute type 7 has an invalid length. [ 155.794462][ T8074] netlink: 'syz.0.569': attribute type 8 has an invalid length. [ 155.863996][ T8089] netlink: 256 bytes leftover after parsing attributes in process `syz.1.575'. [ 155.875595][ T8089] netlink: 56 bytes leftover after parsing attributes in process `syz.1.575'. [ 155.966799][ T8094] netlink: 'syz.1.577': attribute type 15 has an invalid length. [ 156.197190][ T8107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.204851][ T8107] bridge0: port 1(bond2) entered blocking state [ 156.211527][ T8107] bridge0: port 1(bond2) entered disabled state [ 156.219088][ T8107] bond2: entered allmulticast mode [ 156.234016][ T8107] bond2: entered promiscuous mode [ 156.426048][ T8118] ieee802154 phy1 wpan1: encryption failed: -22 [ 156.463993][ T8119] batadv1: entered promiscuous mode [ 156.478825][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 156.898504][ T8138] dummy0: mtu less than device minimum [ 156.907919][ T8140] dummy0: mtu less than device minimum [ 157.463349][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 157.875247][ T8167] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 157.909669][ T8167] team0: Failed to send options change via netlink (err -105) [ 157.934045][ T8167] team0: Port device dummy0 added [ 157.947021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.969319][ T8147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.986901][ T8147] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 158.132000][ T8147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.163866][ T8147] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 158.236541][ T8147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.256311][ T8147] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 158.328042][ T8147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.353125][ T8147] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 158.424637][ T8191] IPv6: Can't replace route, no match found [ 159.412942][ T8246] netlink: 10 bytes leftover after parsing attributes in process `syz.3.612'. [ 159.446881][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 160.140411][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.620'. [ 160.705147][ T8289] netlink: 68 bytes leftover after parsing attributes in process `syz.0.622'. [ 160.770117][ T30] audit: type=1800 audit(1755785144.859:5): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="memory.events" dev="tmpfs" ino=723 res=0 errno=0 [ 162.976456][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 163.247851][ T8355] sctp: [Deprecated]: syz.3.630 (pid 8355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.247851][ T8355] Use struct sctp_sack_info instead [ 163.829748][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 164.057740][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 164.071785][ T8385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.641'. [ 164.215566][ T8393] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 164.239052][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.642'. [ 164.264294][ T8393] !: entered promiscuous mode [ 164.282478][ T8393] !: entered allmulticast mode [ 164.335851][ T8393] bridge0: port 3(0!) entered blocking state [ 164.378897][ T8393] bridge0: port 3(0!) entered disabled state [ 164.555059][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 164.889418][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 164.963631][ T8417] tipc: Enabled bearer , priority 0 [ 165.016920][ T8417] syzkaller0: entered promiscuous mode [ 165.022459][ T8417] syzkaller0: entered allmulticast mode [ 165.073832][ T8425] nftables ruleset with unbound set [ 167.096922][ T8432] tipc: Enabled bearer , priority 0 [ 167.107425][ T8433] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 167.114971][ T8433] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 167.161787][ T8435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.649'. [ 167.189966][ T8417] tipc: Resetting bearer [ 167.237489][ T8417] tipc: Disabling bearer [ 167.269841][ T8415] wg1 speed is unknown, defaulting to 1000 [ 167.663870][ T8453] wg1 speed is unknown, defaulting to 1000 [ 167.977044][ T30] audit: type=1800 audit(1755785152.069:6): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.651" name="cgroup.controllers" dev="tmpfs" ino=739 res=0 errno=0 [ 168.063825][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.071703][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.217622][ T5961] tipc: Node number set to 1206174564 [ 168.439724][ T8466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.470283][ T8466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.612415][ T8466] batman_adv: batadv0: Interface deactivated: vxlan0 [ 168.628624][ T8466] bond1: left promiscuous mode [ 168.696473][ T196] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.746932][ T196] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.756616][ T196] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.787068][ T196] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.042561][ T1336] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.054572][ T1336] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.064134][ T1336] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.065363][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 169.079182][ T1336] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.317094][ T8526] sctp: [Deprecated]: syz.1.672 (pid 8526) Use of int in max_burst socket option. [ 169.317094][ T8526] Use struct sctp_assoc_value instead [ 169.359088][ T8525] wg1 speed is unknown, defaulting to 1000 [ 169.690864][ T8542] netlink: 80 bytes leftover after parsing attributes in process `syz.1.675'. [ 169.906924][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'. [ 170.144733][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 170.172239][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 170.264799][ T8559] netlink: 'syz.0.682': attribute type 16 has an invalid length. [ 170.280230][ T8559] netlink: 'syz.0.682': attribute type 17 has an invalid length. [ 170.403512][ T8559] IPv6: NLM_F_REPLACE set, but no existing node found! [ 170.434687][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.682'. [ 170.882689][ T8586] netlink: 'syz.2.691': attribute type 4 has an invalid length. [ 171.180871][ T8604] tipc: Enabled bearer , priority 0 [ 171.196754][ T8604] syzkaller0: entered promiscuous mode [ 171.202736][ T8604] syzkaller0: entered allmulticast mode [ 171.247324][ T8604] tipc: Resetting bearer [ 171.565761][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 171.584253][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 171.594432][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 171.655185][ T8620] netlink: 'syz.4.702': attribute type 12 has an invalid length. [ 171.663618][ T8620] netlink: 'syz.4.702': attribute type 29 has an invalid length. [ 171.672669][ T8620] netlink: 148 bytes leftover after parsing attributes in process `syz.4.702'. [ 171.682186][ T8620] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 171.691150][ T8620] netlink: 'syz.4.702': attribute type 12 has an invalid length. [ 171.699115][ T8620] netlink: 'syz.4.702': attribute type 29 has an invalid length. [ 171.721839][ T8620] netlink: 'syz.4.702': attribute type 1 has an invalid length. [ 171.810036][ T8626] Bluetooth: MGMT ver 1.23 [ 171.927699][ T8628] wg1 speed is unknown, defaulting to 1000 [ 172.072499][ T8643] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 172.646892][ T8662] !: left allmulticast mode [ 172.651577][ T8662] !: left promiscuous mode [ 172.689519][ T8662] bridge0: port 3(0!) entered disabled state [ 172.839592][ T8674] bond0: (slave gretap0): Opening slave failed [ 172.869001][ T8660] wg1 speed is unknown, defaulting to 1000 [ 173.287080][ T8690] nbd0: detected capacity change from 0 to 127 [ 173.293772][ T8686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.318367][ T5870] block nbd0: Receive control failed (result -32) [ 174.047262][ T8711] bridge_slave_0: left allmulticast mode [ 174.057929][ T8711] bridge_slave_0: left promiscuous mode [ 174.071882][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.157633][ T8711] bridge_slave_1: left allmulticast mode [ 174.163359][ T8711] bridge_slave_1: left promiscuous mode [ 174.217988][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.269428][ T8711] bond0: (slave bond_slave_0): Releasing backup interface [ 174.289430][ T8711] bond0: (slave bond_slave_1): Releasing backup interface [ 174.332807][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.343111][ T8711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.445496][ T8718] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 175.340711][ T8755] __nla_validate_parse: 4 callbacks suppressed [ 175.340730][ T8755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.741'. [ 175.772178][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.791285][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.826326][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.865129][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.957931][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 176.009300][ T8784] bridge0: port 3(erspan0) entered blocking state [ 176.016145][ T8784] bridge0: port 3(erspan0) entered disabled state [ 176.060655][ T8784] erspan0: entered allmulticast mode [ 176.101762][ T8784] erspan0: entered promiscuous mode [ 176.657508][ T8815] validate_nla: 4 callbacks suppressed [ 176.657543][ T8815] netlink: 'syz.0.755': attribute type 7 has an invalid length. [ 176.973690][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.981463][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.260415][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.310404][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.668368][ T196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.699144][ T196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.754416][ T8843] tc_dump_action: action bad kind [ 177.784402][ T196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.822939][ T196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.921200][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 178.222272][ T8870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.764'. [ 178.827405][ T8890] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 178.859331][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 179.067424][ T8905] netlink: 'syz.2.768': attribute type 12 has an invalid length. [ 179.076777][ T8905] netlink: 'syz.2.768': attribute type 29 has an invalid length. [ 179.084658][ T8905] netlink: 148 bytes leftover after parsing attributes in process `syz.2.768'. [ 179.096798][ T8905] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 179.147246][ T8905] netlink: 'syz.2.768': attribute type 12 has an invalid length. [ 179.186305][ T8905] netlink: 'syz.2.768': attribute type 29 has an invalid length. [ 179.194148][ T8905] netlink: 148 bytes leftover after parsing attributes in process `syz.2.768'. [ 179.246838][ T8905] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 179.324421][ T8913] wg1 speed is unknown, defaulting to 1000 [ 179.624375][ T8911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.888827][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 179.901824][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 180.283111][ T8968] netlink: 68 bytes leftover after parsing attributes in process `syz.1.791'. [ 180.593487][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 180.824539][ T8988] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 180.831307][ T8996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.801'. [ 180.842553][ T8988] netlink: 208 bytes leftover after parsing attributes in process `syz.3.799'. [ 180.873403][ T8998] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 181.055268][ T9009] netlink: 'syz.2.804': attribute type 12 has an invalid length. [ 181.067506][ T9009] netlink: 148 bytes leftover after parsing attributes in process `syz.2.804'. [ 181.078262][ T9009] netlink: 148 bytes leftover after parsing attributes in process `syz.2.804'. [ 181.178090][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'. [ 181.400073][ T9027] netlink: 14 bytes leftover after parsing attributes in process `syz.4.809'. [ 181.686107][ T9038] netlink: 256 bytes leftover after parsing attributes in process `syz.2.813'. [ 181.717438][ T9038] unsupported nlmsg_type 40 [ 181.754224][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 181.763730][ T9042] block nbd0: must specify backend [ 181.794341][ T9045] validate_nla: 5 callbacks suppressed [ 181.794433][ T9045] netlink: 'syz.4.816': attribute type 12 has an invalid length. [ 181.822048][ T9045] netlink: 'syz.4.816': attribute type 29 has an invalid length. [ 181.840273][ T9045] netlink: 148 bytes leftover after parsing attributes in process `syz.4.816'. [ 181.855639][ T9045] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 181.873398][ T9055] netlink: 'syz.4.816': attribute type 12 has an invalid length. [ 181.904864][ T9055] netlink: 'syz.4.816': attribute type 29 has an invalid length. [ 181.929622][ T9055] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 182.451096][ T9087] wg1 speed is unknown, defaulting to 1000 [ 182.511885][ T9088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.523766][ T9088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.534191][ T9088] bond0 (unregistering): Released all slaves [ 182.683306][ T9092] netlink: 'syz.3.831': attribute type 12 has an invalid length. [ 182.699679][ T9092] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 182.747118][ T9092] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 182.779423][ T9092] netlink: 'syz.3.831': attribute type 12 has an invalid length. [ 183.645663][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.682278][ T9148] bond0: (slave geneve2): making interface the new active one [ 183.692117][ T9148] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 183.703683][ T196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.716643][ T196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.744972][ T196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.762966][ T196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.653446][ T9200] macsec1: left promiscuous mode [ 184.658748][ T9200] macsec1: left allmulticast mode [ 184.676131][ T9200] bond1: left promiscuous mode [ 184.685604][ T9200] batadv1: left promiscuous mode [ 184.694556][ T9200] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 184.705455][ T9200] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 184.723909][ T1336] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.762553][ T1336] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.783799][ T1336] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.802846][ T1336] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.527904][ T1148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.542282][ T1148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.590553][ T1148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.611515][ T1148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.668943][ T9250] netlink: 'syz.1.878': attribute type 11 has an invalid length. [ 185.681793][ T9250] __nla_validate_parse: 90 callbacks suppressed [ 185.681814][ T9250] netlink: 244 bytes leftover after parsing attributes in process `syz.1.878'. [ 186.133560][ T9273] netlink: 148 bytes leftover after parsing attributes in process `syz.2.885'. [ 186.147806][ T9273] netlink: 59 bytes leftover after parsing attributes in process `syz.2.885'. [ 186.161133][ T9273] netlink: 148 bytes leftover after parsing attributes in process `syz.2.885'. [ 186.172770][ T9273] netlink: 59 bytes leftover after parsing attributes in process `syz.2.885'. [ 186.705848][ T9294] tap0: tun_chr_ioctl cmd 2147767521 [ 186.800199][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 187.103754][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.899'. [ 187.137504][ T9318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.316183][ T9332] tipc: Enabled bearer , priority 0 [ 187.355913][ T9332] syzkaller0: entered promiscuous mode [ 187.375792][ T9332] syzkaller0: entered allmulticast mode [ 187.393653][ T9325] tipc: Resetting bearer [ 187.429478][ T9325] tipc: Disabling bearer [ 187.542698][ T9345] sctp: [Deprecated]: syz.4.908 (pid 9345) Use of int in max_burst socket option. [ 187.542698][ T9345] Use struct sctp_assoc_value instead [ 187.559239][ T9343] validate_nla: 92 callbacks suppressed [ 187.559257][ T9343] netlink: 'syz.1.907': attribute type 11 has an invalid length. [ 187.711707][ T9350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.910'. [ 187.819106][ T9364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.886749][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.910'. [ 188.097792][ T9373] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 188.107478][ T9373] netlink: 144 bytes leftover after parsing attributes in process `syz.1.916'. [ 188.126033][ T9377] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 188.134172][ T9377] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 188.163263][ T9381] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 188.295065][ T9389] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003 [ 188.327901][ T9387] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 188.360109][ T9387] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 188.655673][ T196] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.698098][ T196] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.728993][ T196] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.747229][ T196] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.231541][ T9446] sctp: [Deprecated]: syz.0.943 (pid 9446) Use of int in max_burst socket option. [ 189.231541][ T9446] Use struct sctp_assoc_value instead [ 189.248820][ T9447] sctp: [Deprecated]: syz.0.943 (pid 9447) Use of int in max_burst socket option. [ 189.248820][ T9447] Use struct sctp_assoc_value instead [ 189.639289][ T9467] x_tables: ip_tables: udp match: only valid for protocol 17 [ 189.895063][ T9479] wg1 speed is unknown, defaulting to 1000 [ 190.222850][ T9498] netlink: 'syz.2.959': attribute type 3 has an invalid length. [ 191.118325][ T9525] erspan0: left allmulticast mode [ 191.142022][ T9525] erspan0: left promiscuous mode [ 191.151185][ T9525] bridge0: port 3(erspan0) entered disabled state [ 191.182120][ T9525] bridge_slave_1: left allmulticast mode [ 191.210209][ T9525] bridge_slave_1: left promiscuous mode [ 191.230220][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.303070][ T9525] bridge_slave_0: left allmulticast mode [ 191.309013][ T9525] bridge_slave_0: left promiscuous mode [ 191.315032][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.393627][ T10] IPVS: starting estimator thread 0... [ 191.477832][ T9547] tipc: Enabled bearer , priority 0 [ 191.508888][ T9543] wg1 speed is unknown, defaulting to 1000 [ 191.516437][ T9550] IPVS: using max 24 ests per chain, 57600 per kthread [ 191.603197][ T9547] tipc: Disabling bearer [ 192.058891][ T7806] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.107328][ T7806] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.136180][ T7806] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.192187][ T7806] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.312136][ T30] audit: type=1800 audit(1755785176.399:7): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.984" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1060 res=0 errno=0 [ 192.380761][ T30] audit: type=1800 audit(1755785176.399:8): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.984" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1060 res=0 errno=0 [ 192.579820][ T9598] wireguard0: entered promiscuous mode [ 192.585640][ T9598] wireguard0: entered allmulticast mode [ 192.640521][ T9606] vlan2: entered promiscuous mode [ 192.655928][ T9606] bond0: entered promiscuous mode [ 192.666060][ T9606] geneve2: entered promiscuous mode [ 192.687737][ T9606] vlan2: entered allmulticast mode [ 192.696317][ T9606] bond0: entered allmulticast mode [ 192.706972][ T9606] geneve2: entered allmulticast mode [ 192.716734][ T9611] __nla_validate_parse: 15 callbacks suppressed [ 192.723367][ T9611] netlink: 124 bytes leftover after parsing attributes in process `syz.2.990'. [ 192.785624][ T9616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.991'. [ 192.818652][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 193.190052][ T9635] Bluetooth: MGMT ver 1.23 [ 193.202701][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 193.223334][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 193.393747][ T9649] netlink: 'syz.4.1001': attribute type 12 has an invalid length. [ 193.425767][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 193.433966][ T9649] netlink: 'syz.4.1001': attribute type 29 has an invalid length. [ 193.456605][ T9649] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1001'. [ 193.484586][ T9649] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1001'. [ 193.520468][ T9656] netlink: 'syz.4.1001': attribute type 12 has an invalid length. [ 193.535153][ T9656] netlink: 'syz.4.1001': attribute type 29 has an invalid length. [ 193.543604][ T9656] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1001'. [ 193.554241][ T9656] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1001'. [ 193.705848][ T9666] netlink: 'syz.2.1009': attribute type 2 has an invalid length. [ 193.714560][ T9666] netlink: 'syz.2.1009': attribute type 2 has an invalid length. [ 193.885991][ T9678] bridge_slave_0: left allmulticast mode [ 193.913755][ T9678] bridge_slave_0: left promiscuous mode [ 193.941800][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.960368][ T9678] bridge_slave_1: left allmulticast mode [ 193.968917][ T9678] bridge_slave_1: left promiscuous mode [ 193.976588][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.992921][ T9678] team0: Port device team_slave_0 removed [ 194.004030][ T9678] team0: Port device team_slave_1 removed [ 194.016138][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.025115][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.025971][ T9683] netlink: 'syz.4.1008': attribute type 10 has an invalid length. [ 194.042051][ T9678] batman_adv: batadv0: Removing interface: vxlan0 [ 194.051719][ T9678] bond0: (slave geneve2): Releasing active interface [ 194.058560][ T9678] geneve2: left promiscuous mode [ 194.063970][ T9678] geneve2: left allmulticast mode [ 194.089954][ T6171] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.173322][ T9682] syzkaller0: entered promiscuous mode [ 194.179546][ T9682] syzkaller0: entered allmulticast mode [ 194.186907][ T6171] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.196048][ T6171] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.207787][ T6171] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.653256][ T9697] openvswitch: netlink: IPv4 tun info is not correct [ 196.343694][ T9705] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 196.366537][ T9705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 196.394948][ T9705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 196.727945][ T7806] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.797197][ T7806] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.863087][ T7806] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.889868][ T7806] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.932234][ T9800] __nla_validate_parse: 264 callbacks suppressed [ 197.932254][ T9800] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1044'. [ 198.043131][ T9823] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1049'. [ 198.057221][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 198.170802][ T9829] wg1 speed is unknown, defaulting to 1000 [ 198.622407][ T9843] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 199.005204][ T9868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.115110][ T7800] IPVS: starting estimator thread 0... [ 199.145836][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1063'. [ 199.232574][ T9879] IPVS: using max 25 ests per chain, 60000 per kthread [ 199.452968][ T9887] can: request_module (can-proto-0) failed. [ 199.784276][ T9908] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1073'. [ 199.794919][ T9910] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1073'. [ 200.025026][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1078'. [ 200.035965][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1078'. [ 200.058712][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 200.070561][ T9927] veth1: entered promiscuous mode [ 200.079585][ T9927] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 200.090627][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1075'. [ 200.105645][ T9927] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 200.159928][ T9936] netlink: 'syz.4.1078': attribute type 32 has an invalid length. [ 200.578624][ T9951] veth3: entered promiscuous mode [ 201.640144][ T9992] wg1 speed is unknown, defaulting to 1000 [ 202.045617][T10009] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 202.073296][T10009] NCSI netlink: No device for ifindex 1027085 [ 202.518651][T10021] syzkaller0: entered promiscuous mode [ 202.524311][T10021] syzkaller0: entered allmulticast mode [ 202.562723][T10028] netlink: 'syz.2.1108': attribute type 12 has an invalid length. [ 204.162453][T10043] __nla_validate_parse: 5 callbacks suppressed [ 204.162476][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1114'. [ 204.178609][T10043] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.887224][T10051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1118'. [ 204.928761][T10045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.979201][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 205.096558][T10055] bridge_slave_1: left allmulticast mode [ 205.102530][T10055] bridge_slave_1: left promiscuous mode [ 205.103780][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 205.118234][T10055] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.135778][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 205.253488][T10055] bridge_slave_0: left allmulticast mode [ 205.263739][T10055] bridge_slave_0: left promiscuous mode [ 205.286528][T10055] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.754815][T10068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 205.839925][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 205.880688][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 206.661955][T10129] FAULT_INJECTION: forcing a failure. [ 206.661955][T10129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.693931][T10129] CPU: 1 UID: 0 PID: 10129 Comm: syz.4.1136 Not tainted syzkaller #0 PREEMPT(full) [ 206.693961][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.693973][T10129] Call Trace: [ 206.693981][T10129] [ 206.693990][T10129] dump_stack_lvl+0x189/0x250 [ 206.694024][T10129] ? __pfx____ratelimit+0x10/0x10 [ 206.694055][T10129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.694081][T10129] ? __pfx__printk+0x10/0x10 [ 206.694112][T10129] ? __might_fault+0xb0/0x130 [ 206.694155][T10129] should_fail_ex+0x414/0x560 [ 206.694189][T10129] _copy_from_user+0x2d/0xb0 [ 206.694215][T10129] __sys_bpf+0x1ed/0x870 [ 206.694248][T10129] ? __pfx___sys_bpf+0x10/0x10 [ 206.694291][T10129] ? ksys_write+0x22a/0x250 [ 206.694323][T10129] ? __pfx_ksys_write+0x10/0x10 [ 206.694349][T10129] ? rcu_is_watching+0x15/0xb0 [ 206.694378][T10129] __x64_sys_bpf+0x7c/0x90 [ 206.694404][T10129] do_syscall_64+0xfa/0x3b0 [ 206.694434][T10129] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.694463][T10129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.694484][T10129] ? clear_bhb_loop+0x60/0xb0 [ 206.694510][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.694531][T10129] RIP: 0033:0x7fe5e998ebe9 [ 206.694551][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.694577][T10129] RSP: 002b:00007fe5ea8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.694598][T10129] RAX: ffffffffffffffda RBX: 00007fe5e9bb5fa0 RCX: 00007fe5e998ebe9 [ 206.694611][T10129] RDX: 0000000000000008 RSI: 0000200000000440 RDI: 000000000000001f [ 206.694622][T10129] RBP: 00007fe5ea8af090 R08: 0000000000000000 R09: 0000000000000000 [ 206.694632][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.694642][T10129] R13: 00007fe5e9bb6038 R14: 00007fe5e9bb5fa0 R15: 00007fff02886398 [ 206.694669][T10129] [ 206.922366][T10134] tipc: Enabling of bearer rejected, already enabled [ 206.931755][T10134] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 206.939339][T10134] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 206.954108][T10134] tipc: Resetting bearer [ 207.144427][T10144] netlink: 'syz.4.1141': attribute type 3 has an invalid length. [ 207.153247][T10144] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1141'. [ 207.625937][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.675360][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.806142][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 207.861096][T10181] openvswitch: netlink: Flow actions attr not present in new flow. [ 207.933146][T10179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1147'. [ 208.411973][T10183] wg1 speed is unknown, defaulting to 1000 [ 208.585339][T10188] FAULT_INJECTION: forcing a failure. [ 208.585339][T10188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.622941][T10188] CPU: 0 UID: 0 PID: 10188 Comm: syz.1.1151 Not tainted syzkaller #0 PREEMPT(full) [ 208.622971][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.622985][T10188] Call Trace: [ 208.622993][T10188] [ 208.623003][T10188] dump_stack_lvl+0x189/0x250 [ 208.623034][T10188] ? __pfx____ratelimit+0x10/0x10 [ 208.623062][T10188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.623085][T10188] ? __pfx__printk+0x10/0x10 [ 208.623115][T10188] ? __might_fault+0xb0/0x130 [ 208.623215][T10188] should_fail_ex+0x414/0x560 [ 208.623305][T10188] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 208.623338][T10188] ? __kasan_slab_free+0x5b/0x80 [ 208.623368][T10188] ? arch_do_signal_or_restart+0x9a/0x750 [ 208.623400][T10188] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 208.623440][T10188] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 208.623512][T10188] ? fpu__alloc_mathframe+0xad/0x130 [ 208.623547][T10188] get_sigframe+0x58d/0x7d0 [ 208.623586][T10188] ? __pfx_get_sigframe+0x10/0x10 [ 208.623616][T10188] ? kmem_cache_free+0x18f/0x400 [ 208.623659][T10188] x64_setup_rt_frame+0x15b/0xd40 [ 208.623698][T10188] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.623730][T10188] ? _raw_spin_unlock_irq+0x2e/0x50 [ 208.623757][T10188] ? get_signal+0x1151/0x1340 [ 208.623786][T10188] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 208.623829][T10188] arch_do_signal_or_restart+0x3d7/0x750 [ 208.623869][T10188] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 208.623920][T10188] ? exit_to_user_mode_loop+0x40/0x110 [ 208.623955][T10188] exit_to_user_mode_loop+0x75/0x110 [ 208.623986][T10188] do_syscall_64+0x2bd/0x3b0 [ 208.624017][T10188] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.624047][T10188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.624068][T10188] ? clear_bhb_loop+0x60/0xb0 [ 208.624093][T10188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.624114][T10188] RIP: 0033:0x7f37a858ebe9 [ 208.624134][T10188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.624151][T10188] RSP: 002b:00007f37a9446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.624174][T10188] RAX: fffffffffffffff2 RBX: 00007f37a87b5fa0 RCX: 00007f37a858ebe9 [ 208.624189][T10188] RDX: 0000000000000008 RSI: 0000200000000440 RDI: 000000000000001f [ 208.624202][T10188] RBP: 00007f37a9446090 R08: 0000000000000000 R09: 0000000000000000 [ 208.624215][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.624227][T10188] R13: 00007f37a87b6038 R14: 00007f37a87b5fa0 R15: 00007ffe78570518 [ 208.624262][T10188] [ 209.177005][T10198] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1153'. [ 209.360368][T10204] netlink: 'syz.3.1155': attribute type 322 has an invalid length. [ 209.369931][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 209.419745][T10204] netlink: 'syz.3.1155': attribute type 21 has an invalid length. [ 209.474372][T10209] vlan3: entered promiscuous mode [ 209.484780][T10209] bridge0: entered promiscuous mode [ 209.895684][T10235] : renamed from bond_slave_0 [ 210.113806][T10239] FAULT_INJECTION: forcing a failure. [ 210.113806][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.169187][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.4.1165 Not tainted syzkaller #0 PREEMPT(full) [ 210.169217][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.169230][T10239] Call Trace: [ 210.169238][T10239] [ 210.169247][T10239] dump_stack_lvl+0x189/0x250 [ 210.169279][T10239] ? __pfx____ratelimit+0x10/0x10 [ 210.169310][T10239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.169336][T10239] ? __pfx__printk+0x10/0x10 [ 210.169370][T10239] ? get_sigframe+0x596/0x7d0 [ 210.169410][T10239] should_fail_ex+0x414/0x560 [ 210.169443][T10239] _copy_to_user+0x31/0xb0 [ 210.169470][T10239] copy_siginfo_to_user+0x22/0xc0 [ 210.169494][T10239] x64_setup_rt_frame+0x776/0xd40 [ 210.169551][T10239] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 210.169594][T10239] arch_do_signal_or_restart+0x3d7/0x750 [ 210.169634][T10239] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 210.169685][T10239] ? exit_to_user_mode_loop+0x40/0x110 [ 210.169719][T10239] exit_to_user_mode_loop+0x75/0x110 [ 210.169751][T10239] do_syscall_64+0x2bd/0x3b0 [ 210.169784][T10239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.169804][T10239] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.169825][T10239] ? clear_bhb_loop+0x60/0xb0 [ 210.169851][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.169870][T10239] RIP: 0033:0x7fe5e998ebe9 [ 210.169888][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.169906][T10239] RSP: 002b:00007fe5ea8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.169927][T10239] RAX: fffffffffffffff2 RBX: 00007fe5e9bb5fa0 RCX: 00007fe5e998ebe9 [ 210.169942][T10239] RDX: 0000000000000008 RSI: 0000200000000440 RDI: 000000000000001f [ 210.169955][T10239] RBP: 00007fe5ea8af090 R08: 0000000000000000 R09: 0000000000000000 [ 210.169968][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.169979][T10239] R13: 00007fe5e9bb6038 R14: 00007fe5e9bb5fa0 R15: 00007fff02886398 [ 210.170013][T10239] [ 211.054546][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 211.139828][T10280] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 211.302932][T10285] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 211.377366][T10298] FAULT_INJECTION: forcing a failure. [ 211.377366][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.391838][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.2.1180 Not tainted syzkaller #0 PREEMPT(full) [ 211.391869][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.391883][T10298] Call Trace: [ 211.391892][T10298] [ 211.391902][T10298] dump_stack_lvl+0x189/0x250 [ 211.391935][T10298] ? __pfx____ratelimit+0x10/0x10 [ 211.391967][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.391994][T10298] ? __pfx__printk+0x10/0x10 [ 211.392025][T10298] ? __might_fault+0xb0/0x130 [ 211.392079][T10298] should_fail_ex+0x414/0x560 [ 211.392114][T10298] _copy_from_user+0x2d/0xb0 [ 211.392141][T10298] restore_altstack+0x9d/0x4b0 [ 211.392170][T10298] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 211.392202][T10298] ? __pfx_restore_altstack+0x10/0x10 [ 211.392237][T10298] ? _raw_spin_unlock_irq+0x23/0x50 [ 211.392264][T10298] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.392297][T10298] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 211.392335][T10298] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.392365][T10298] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 211.392396][T10298] ? _raw_spin_unlock_irq+0x2e/0x50 [ 211.392421][T10298] ? signal_setup_done+0x230/0x310 [ 211.392447][T10298] ? __lock_acquire+0xab9/0xd20 [ 211.392501][T10298] ? __task_pid_nr_ns+0x28/0x470 [ 211.392534][T10298] ? do_syscall_64+0xbe/0x3b0 [ 211.392569][T10298] do_syscall_64+0xfa/0x3b0 [ 211.392599][T10298] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.392628][T10298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.392649][T10298] ? clear_bhb_loop+0x60/0xb0 [ 211.392675][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.392695][T10298] RIP: 0033:0x7f785e52add9 [ 211.392714][T10298] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 211.392731][T10298] RSP: 002b:00007f785f49da80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 211.392753][T10298] RAX: ffffffffffffffda RBX: 00007f785e7b5fa0 RCX: 00007f785e52add9 [ 211.392768][T10298] RDX: 00007f785f49da80 RSI: 00007f785f49dbb0 RDI: 0000000000000021 [ 211.392782][T10298] RBP: 00007f785f49e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.392795][T10298] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 211.392807][T10298] R13: 00007f785e7b6038 R14: 00007f785e7b5fa0 R15: 00007ffc57948698 [ 211.392841][T10298] [ 211.703384][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 211.773591][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 211.791988][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.930983][T10317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.938397][T10317] IPv6: NLM_F_CREATE should be set when creating new route [ 212.284702][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 212.595851][T10351] syzkaller1: entered promiscuous mode [ 212.618836][T10351] syzkaller1: entered allmulticast mode [ 212.657496][T10350] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 213.127497][T10379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.192666][T10380] wg1 speed is unknown, defaulting to 1000 [ 213.331040][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 213.587680][ T30] audit: type=1800 audit(1755785197.679:9): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1208" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1240 res=0 errno=0 [ 213.671561][ T30] audit: type=1800 audit(1755785197.699:10): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1208" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1240 res=0 errno=0 [ 214.650246][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 215.194814][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 215.253085][T10465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.255860][T10462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.943607][T10489] netlink: 'syz.2.1229': attribute type 12 has an invalid length. [ 216.423384][T10500] wg1 speed is unknown, defaulting to 1000 [ 216.692611][T10507] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 216.743557][T10514] pim6reg: entered allmulticast mode [ 216.872447][T10506] pim6reg: left allmulticast mode [ 217.347707][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1239'. [ 217.386819][T10537] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.524163][T10540] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1242'. [ 217.561479][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 218.108276][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 218.397885][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 218.451386][T10588] netlink: 'syz.1.1256': attribute type 15 has an invalid length. [ 218.583723][T10593] veth7: entered promiscuous mode [ 218.601104][T10588] wg1 speed is unknown, defaulting to 1000 [ 218.948898][T10606] vlan0: entered promiscuous mode [ 218.982283][T10611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1263'. [ 219.148274][T10615] netlink: 'syz.0.1262': attribute type 3 has an invalid length. [ 219.153305][T10609] wg1 speed is unknown, defaulting to 1000 [ 219.200713][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 219.368525][T10622] netlink: 'syz.1.1265': attribute type 10 has an invalid length. [ 219.967577][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 220.026159][T10659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1276'. [ 220.456380][T10685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.463688][T10685] IPv6: NLM_F_CREATE should be set when creating new route [ 220.716947][T10695] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.811169][T10695] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.919354][T10695] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.998397][T10695] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.056593][T10715] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 221.062862][T10715] syzkaller1: linktype set to 6 [ 221.236093][ T7806] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.297974][ T7806] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.352938][ T7806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.388159][ T7806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.599520][T10740] Bluetooth: MGMT ver 1.23 [ 221.619682][T10740] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1300'. [ 222.103429][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1310'. [ 222.136508][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1310'. [ 222.199272][T10770] wg1 speed is unknown, defaulting to 1000 [ 222.248473][T10777] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1312'. [ 222.627815][T10794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 222.645021][T10794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1315'. [ 222.784887][T10794] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 222.804279][T10794] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.939188][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1316'. [ 222.954196][T10797] tipc: Invalid UDP bearer configuration [ 222.954264][T10797] tipc: Enabling of bearer rejected, failed to enable media [ 222.970243][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 223.090273][T10801] tipc: Enabled bearer , priority 0 [ 223.138050][T10804] syzkaller0: entered promiscuous mode [ 223.176364][T10804] syzkaller0: entered allmulticast mode [ 223.219741][T10801] tipc: Resetting bearer [ 223.296875][T10800] tipc: Resetting bearer [ 223.341773][T10800] tipc: Disabling bearer [ 223.446554][T10822] wg1 speed is unknown, defaulting to 1000 [ 223.546548][T10833] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 223.601696][T10831] tipc: Enabling of bearer rejected, failed to enable media [ 223.610789][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.633299][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.647080][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.655412][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.672188][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.694454][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.720666][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.736432][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 223.762422][T10836] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 225.201026][ T5944] IPVS: starting estimator thread 0... [ 225.314934][T10902] IPVS: using max 26 ests per chain, 62400 per kthread [ 225.447649][T10916] __nla_validate_parse: 90 callbacks suppressed [ 225.447673][T10916] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1350'. [ 225.511397][T10920] bridge0: port 1(macsec0) entered blocking state [ 225.526730][T10920] bridge0: port 1(macsec0) entered disabled state [ 225.543544][T10920] macsec0: entered allmulticast mode [ 225.553130][T10920] veth1_macvtap: entered allmulticast mode [ 225.571260][T10920] macsec0: entered promiscuous mode [ 225.586155][T10924] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1353'. [ 225.604828][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 225.616435][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 225.755492][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 225.777058][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 225.851273][T10943] nbd: must specify a size in bytes for the device [ 225.895725][T10944] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1356'. [ 226.255643][T10953] syzkaller1: entered promiscuous mode [ 226.265772][T10953] syzkaller1: entered allmulticast mode [ 226.723345][T10972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.737228][T10979] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 226.765430][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'. [ 226.824341][T10980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.837220][T10980] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 226.887420][T10980] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 227.565085][T11009] wg1 speed is unknown, defaulting to 1000 [ 228.192956][T11034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1380'. [ 228.206516][T11034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1380'. [ 228.320373][T11042] bridge5: entered promiscuous mode [ 228.335127][T11042] bridge5: entered allmulticast mode [ 228.796512][T11057] wg1 speed is unknown, defaulting to 1000 [ 229.321705][T11070] pim6reg1: entered promiscuous mode [ 229.327345][T11070] pim6reg1: entered allmulticast mode [ 230.089516][T11115] validate_nla: 83 callbacks suppressed [ 230.089538][T11115] netlink: 'syz.1.1397': attribute type 7 has an invalid length. [ 230.236449][T11112] netlink: 'syz.1.1397': attribute type 7 has an invalid length. [ 230.264854][T11114] 0ªX¹¦À: renamed from caif0 [ 230.318053][T11114] 0ªX¹¦À: entered allmulticast mode [ 230.338910][T11114] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 230.605811][T11126] __nla_validate_parse: 2 callbacks suppressed [ 230.605832][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 230.651210][T11124] wg1 speed is unknown, defaulting to 1000 [ 230.924336][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 230.940873][T11140] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 230.948734][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 231.200672][T11151] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1410'. [ 231.510912][T11160] wg1 speed is unknown, defaulting to 1000 [ 231.578542][T11166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1414'. [ 231.759923][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 231.769151][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 231.844199][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 231.988887][T11169] wg1 speed is unknown, defaulting to 1000 [ 232.262531][T11182] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 232.471771][T11185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.519434][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.533045][T11185] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.039510][T11202] wg1 speed is unknown, defaulting to 1000 [ 233.139880][T11229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.180609][T11206] wg1 speed is unknown, defaulting to 1000 [ 233.272949][T11225] syz_tun: entered allmulticast mode [ 233.453961][T11222] syzkaller0: entered promiscuous mode [ 233.468923][T11222] syzkaller0: entered allmulticast mode [ 233.540964][T11224] wg1 speed is unknown, defaulting to 1000 [ 233.571081][T11237] tipc: Enabled bearer , priority 0 [ 233.585197][T11199] netlink: 'syz.0.1420': attribute type 6 has an invalid length. [ 233.587567][T11237] syzkaller0: entered promiscuous mode [ 233.602787][T11237] syzkaller0: entered allmulticast mode [ 233.788076][T11237] tipc: Resetting bearer [ 233.880594][T11236] tipc: Resetting bearer [ 233.904680][T11236] tipc: Disabling bearer [ 234.049628][T11244] syzkaller0: entered promiscuous mode [ 234.056803][T11244] syzkaller0: entered allmulticast mode [ 234.418401][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 234.574134][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 236.120941][T11290] __nla_validate_parse: 2 callbacks suppressed [ 236.120964][T11290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1440'. [ 236.305882][T11304] netlink: 'syz.3.1444': attribute type 9 has an invalid length. [ 236.389513][T11307] netlink: 'syz.3.1444': attribute type 30 has an invalid length. [ 236.415524][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 237.082288][T11340] netlink: zone id is out of range [ 237.089432][T11340] netlink: zone id is out of range [ 237.126365][T11340] netlink: zone id is out of range [ 237.177931][T11340] netlink: zone id is out of range [ 237.183608][T11340] netlink: zone id is out of range [ 237.211005][T11340] netlink: zone id is out of range [ 237.216473][T11340] netlink: zone id is out of range [ 237.240749][T11340] netlink: zone id is out of range [ 237.292097][T11345] netlink: 'syz.3.1457': attribute type 3 has an invalid length. [ 237.453857][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 237.489385][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 237.524309][T11348] netlink: 'syz.1.1458': attribute type 18 has an invalid length. [ 237.680845][T11362] netlink: 'syz.2.1464': attribute type 26 has an invalid length. [ 237.690536][T11362] net_ratelimit: 12 callbacks suppressed [ 237.690556][T11362] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 237.717408][T11364] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 237.857584][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 238.169760][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1470'. [ 238.223297][T11377] wg1 speed is unknown, defaulting to 1000 [ 238.412605][T11393] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.1471'. [ 238.831922][T11423] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 239.001393][T11428] tipc: Enabling of bearer rejected, already enabled [ 239.174518][T11432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1485'. [ 239.190557][T11442] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1486'. [ 239.268891][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 239.396134][T11453] erspan0: left allmulticast mode [ 239.406120][T11453] 0ªX¹¦À: left allmulticast mode [ 239.422756][T11453] vlan0: left promiscuous mode [ 239.434870][T11453] tipc: Resetting bearer [ 239.450947][T11453] syzkaller0: left promiscuous mode [ 239.456757][T11453] syzkaller0: left allmulticast mode [ 239.475742][T11453] bridge1: left allmulticast mode [ 239.484912][T11453] bridge2: left allmulticast mode [ 239.491065][T11453] gretap1: left promiscuous mode [ 239.496916][T11453] gretap1: left allmulticast mode [ 239.520095][T11453] bridge5: left promiscuous mode [ 239.525378][T11453] bridge5: left allmulticast mode [ 239.751382][T11464] team0: Port device dummy0 removed [ 239.767209][T11464] bond0: (slave bond_slave_0): Releasing backup interface [ 239.791281][T11464] bond0: (slave bond_slave_1): Releasing backup interface [ 239.811661][T11464] team0: Port device team_slave_0 removed [ 239.823949][T11464] team0: Port device team_slave_1 removed [ 239.832165][T11464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.842821][T11464] batman_adv: batadv0: Removing interface: netdevsim0 [ 239.855099][T11464] veth3: left allmulticast mode [ 239.861922][T11464] veth3: left promiscuous mode [ 239.867609][T11464] bridge1: port 1(veth3) entered disabled state [ 239.880534][T11464] bond3: (slave ip6gretap1): Releasing backup interface [ 239.995319][T11464] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 240.571574][T11500] IPVS: persistence engine module ip_vs_pe_ not found [ 240.878987][T11518] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 240.972788][T11521] tipc: Enabled bearer , priority 0 [ 240.983221][T11521] syzkaller0: entered promiscuous mode [ 240.990470][T11521] syzkaller0: entered allmulticast mode [ 241.002237][T11521] tipc: Resetting bearer [ 241.153343][T11521] tipc: Resetting bearer [ 241.202629][T11521] tipc: Disabling bearer [ 241.231938][T11528] tipc: Enabling of bearer rejected, already enabled [ 241.248814][T11528] __nla_validate_parse: 2 callbacks suppressed [ 241.248833][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 241.680496][T11548] ipvlan3: entered promiscuous mode [ 241.712531][T11550] netlink: 'syz.2.1521': attribute type 10 has an invalid length. [ 241.720947][T11552] vlan0: entered promiscuous mode [ 241.761805][T11550] team0: Failed to send options change via netlink (err -105) [ 241.772112][T11550] team0: Port device dummy0 added [ 241.784753][T11555] tipc: Enabling of bearer rejected, already enabled [ 242.265968][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1530'. [ 242.599612][T11595] veth1_macvtap: left allmulticast mode [ 242.613653][T11595] vlan2: left promiscuous mode [ 242.619030][T11595] bond0: left promiscuous mode [ 242.624220][T11595] vlan2: left allmulticast mode [ 242.630049][T11595] bond0: left allmulticast mode [ 242.646744][T11595] veth7: left promiscuous mode [ 243.504688][T11607] wg1 speed is unknown, defaulting to 1000 [ 244.294667][T11638] wg1 speed is unknown, defaulting to 1000 [ 244.331102][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1547'. [ 244.341023][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1547'. [ 245.379157][T11649] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1549'. [ 245.497832][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 245.529346][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 245.575026][ T1148] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.575127][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 245.604826][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 245.606325][ T1148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.641583][ T1148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.668368][ T1148] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.692710][T11659] tipc: Enabling of bearer rejected, already enabled [ 245.779011][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 245.836696][T11668] tipc: Enabled bearer , priority 0 [ 245.855083][T11668] syzkaller0: entered promiscuous mode [ 245.878568][T11668] syzkaller0: entered allmulticast mode [ 246.009354][T11668] tipc: Resetting bearer [ 246.015354][T11668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.023843][T11668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.044390][T11666] tipc: Resetting bearer [ 246.083817][T11666] tipc: Disabling bearer [ 246.205187][T11685] netlink: 'syz.4.1560': attribute type 2 has an invalid length. [ 246.682717][T11713] __nla_validate_parse: 1 callbacks suppressed [ 246.682739][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 246.726887][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 246.930620][T11722] netlink: 'syz.1.1569': attribute type 2 has an invalid length. [ 246.942004][T11722] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 246.952385][T11722] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1569'. [ 246.967992][T11720] netlink: 'syz.2.1568': attribute type 13 has an invalid length. [ 246.996347][T11720] netlink: 'syz.2.1568': attribute type 17 has an invalid length. [ 247.254655][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.302417][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.318709][T11740] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 247.446491][T11720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.759475][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 247.841626][T11761] team0: Port device dummy0 removed [ 247.884167][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 247.920302][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 247.945655][T11772] netlink: 'syz.3.1576': attribute type 5 has an invalid length. [ 248.104506][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1579'. [ 248.213946][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 248.397542][T11790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1583'. [ 248.406725][T11790] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1583'. [ 248.601958][T11804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.903354][T11804] bond3 (unregistering): Released all slaves [ 249.460529][T11847] netlink: 'syz.3.1596': attribute type 5 has an invalid length. [ 250.781739][T11847] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 251.701182][T11907] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 251.702009][T11906] IPVS: stopping backup sync thread 11907 ... [ 251.791157][T11909] __nla_validate_parse: 4 callbacks suppressed [ 251.791179][T11909] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1609'. [ 251.920118][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1609'. [ 251.965921][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1609'. [ 252.038969][T11915] tipc: Enabling of bearer rejected, already enabled [ 252.400165][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 252.432068][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 252.770904][T11947] netlink: zone id is out of range [ 252.775870][T11943] wg1 speed is unknown, defaulting to 1000 [ 252.800901][T11947] netlink: zone id is out of range [ 252.834434][T11954] netlink: del zone limit has 4 unknown bytes [ 252.853243][T11947] netlink: zone id is out of range [ 252.858628][T11930] wg1 speed is unknown, defaulting to 1000 [ 252.948665][T11947] netlink: zone id is out of range [ 253.027750][T11947] netlink: zone id is out of range [ 253.081876][T11965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 253.214955][T11947] netlink: set zone limit has 4 unknown bytes [ 253.282816][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.502496][T11979] tipc: Enabled bearer , priority 0 [ 253.685970][T11976] tipc: Resetting bearer [ 253.850607][T11981] syzkaller0: entered promiscuous mode [ 253.856153][T11981] syzkaller0: entered allmulticast mode [ 253.996712][T11974] tipc: Resetting bearer [ 254.158737][T11974] tipc: Disabling bearer [ 254.312762][T12007] wg1 speed is unknown, defaulting to 1000 [ 254.436958][T12012] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1633'. [ 254.469486][T12012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1633'. [ 254.515559][T12012] lo speed is unknown, defaulting to 1000 [ 254.539002][T12012] lo speed is unknown, defaulting to 1000 [ 254.683785][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 254.743739][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 254.755959][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.782577][T12019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.832326][T12012] lo speed is unknown, defaulting to 1000 [ 255.085944][T12028] team0: Port device sit1 added [ 255.228142][T12038] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 255.238156][ T6191] bond0: (slave bond_slave_0): interface is now down [ 255.256605][ T6191] bond0: (slave bond_slave_1): interface is now down [ 255.263630][ T6191] bond0: (slave wlan1): interface is now down [ 255.307809][ T6171] bond0: (slave bond_slave_0): interface is now down [ 255.339978][ T6171] bond0: (slave bond_slave_1): interface is now down [ 255.360813][ T6171] bond0: (slave wlan1): interface is now down [ 255.397188][ T7806] bond0: (slave bond_slave_0): interface is now down [ 255.417655][ T7806] bond0: (slave bond_slave_1): interface is now down [ 255.429121][ T7806] bond0: (slave wlan1): interface is now down [ 255.455277][ T7806] bond0: now running without any active interface! [ 255.750172][T12012] infiniband syz0: set active [ 255.783657][T12012] infiniband syz0: added lo [ 255.794875][T12012] syz0: rxe_create_cq: returned err = -12 [ 255.806708][T12012] infiniband syz0: Couldn't create ib_mad CQ [ 255.813101][T12012] infiniband syz0: Couldn't open port 1 [ 255.820595][ T8824] lo speed is unknown, defaulting to 1000 [ 255.914756][T12012] RDS/IB: syz0: added [ 255.919996][T12012] smc: adding ib device syz0 with port count 1 [ 255.928221][T12012] smc: ib device syz0 port 1 has pnetid [ 255.985928][T12012] lo speed is unknown, defaulting to 1000 [ 256.004805][ T5944] lo speed is unknown, defaulting to 1000 [ 256.501139][T12088] tipc: Enabling of bearer rejected, already enabled [ 256.543804][T12012] lo speed is unknown, defaulting to 1000 [ 256.949963][T12105] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 257.230642][T12103] vlan0: left promiscuous mode [ 257.249349][T12012] lo speed is unknown, defaulting to 1000 [ 257.422341][T12110] lo: entered allmulticast mode [ 257.443745][T12110] dvmrp8: entered allmulticast mode [ 257.453169][T12110] lo: left allmulticast mode [ 257.462048][T12110] dvmrp8: left allmulticast mode [ 257.581689][T12012] lo speed is unknown, defaulting to 1000 [ 257.761622][T12012] lo speed is unknown, defaulting to 1000 [ 257.964376][T12119] __nla_validate_parse: 6 callbacks suppressed [ 257.964399][T12119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1660'. [ 258.025296][T12012] lo speed is unknown, defaulting to 1000 [ 258.041410][T12121] macvtap1: entered allmulticast mode [ 258.050670][T12121] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 258.060813][T12121] batman_adv: batadv0: Adding interface: macvtap1 [ 258.070435][T12121] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.097994][T12122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 258.102256][T12121] batman_adv: batadv0: Interface activated: macvtap1 [ 258.121771][T12122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1661'. [ 258.131314][T12122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 258.145904][T12122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 258.345272][T12012] lo speed is unknown, defaulting to 1000 [ 258.434457][T12130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1663'. [ 258.449815][T12130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1663'. [ 258.548164][T12012] lo speed is unknown, defaulting to 1000 [ 258.726988][T12012] lo speed is unknown, defaulting to 1000 [ 258.905952][T12087] wg1 speed is unknown, defaulting to 1000 [ 258.918893][T12113] wg1 speed is unknown, defaulting to 1000 [ 258.989367][T12126] wg1 speed is unknown, defaulting to 1000 [ 260.302503][T12144] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 260.310879][T12144] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 260.349305][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1667'. [ 261.561626][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 261.573267][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 262.234793][T12215] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 262.825180][T12234] syzkaller0: entered promiscuous mode [ 262.831235][T12234] syzkaller0: entered allmulticast mode [ 262.849705][T12234] tipc: Enabled bearer , priority 0 [ 262.883790][T12233] tipc: Resetting bearer [ 263.321076][ T8837] IPVS: starting estimator thread 0... [ 263.448051][T12273] IPVS: using max 27 ests per chain, 64800 per kthread [ 263.910068][ T1211] tipc: Node number set to 1183619315 [ 264.684740][T12233] tipc: Disabling bearer [ 264.833685][T12279] openvswitch: netlink: Missing key (keys=40, expected=80) [ 264.902648][T12287] __nla_validate_parse: 2 callbacks suppressed [ 264.902670][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1702'. [ 264.936853][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1702'. [ 265.034280][T12297] wg1 speed is unknown, defaulting to 1000 [ 265.043032][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'. [ 265.047608][T12297] lo speed is unknown, defaulting to 1000 [ 265.232785][T12299] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.275816][T12304] wg1 speed is unknown, defaulting to 1000 [ 265.439648][T12304] lo speed is unknown, defaulting to 1000 [ 265.687214][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'. [ 265.961366][T12321] macvtap1: entered promiscuous mode [ 265.977230][T12321] erspan0: entered promiscuous mode [ 265.993091][T12321] macvtap1: entered allmulticast mode [ 266.007630][T12321] erspan0: entered allmulticast mode [ 266.033265][T12322] macvtap1: left promiscuous mode [ 266.046323][T12322] erspan0: left promiscuous mode [ 266.073763][T12322] macvtap1: left allmulticast mode [ 266.116321][T12322] erspan0: left allmulticast mode [ 266.257919][T12329] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1711'. [ 266.569643][T12341] IPVS: length: 123 != 8 [ 266.812687][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 266.852079][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 267.107388][T12360] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1718'. [ 267.185043][T12363] ip6gre2: entered allmulticast mode [ 267.263680][T12367] dvmrp0: entered allmulticast mode [ 267.318035][T12370] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1721'. [ 267.541048][T12384] netlink: 'syz.2.1725': attribute type 39 has an invalid length. [ 268.070887][T12395] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20002 [ 268.280882][T12405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1732'. [ 268.387649][T12405] bond4: entered promiscuous mode [ 268.392911][T12405] bond4: entered allmulticast mode [ 268.399720][T12405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.613173][T12427] netlink: 'syz.1.1736': attribute type 2 has an invalid length. [ 268.818127][T12437] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 269.338092][T12410] geneve2: left promiscuous mode [ 269.567872][T12410] batman_adv: batadv0: Interface deactivated: macvtap1 [ 269.598010][T12410] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 269.627479][T12410] macvtap1: left allmulticast mode [ 269.668242][T12412] wg1 speed is unknown, defaulting to 1000 [ 269.696021][T12412] lo speed is unknown, defaulting to 1000 [ 269.804535][T12438] batadv1: entered promiscuous mode [ 269.822747][T12438] batadv1: entered allmulticast mode [ 269.971767][T12459] netlink: 'syz.3.1739': attribute type 7 has an invalid length. [ 269.991162][T12459] netlink: 'syz.3.1739': attribute type 8 has an invalid length. [ 270.023003][ T6189] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.043987][ T6189] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.071549][ T6191] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.099470][ T6191] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.172904][T12466] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 270.190176][T12457] : entered promiscuous mode [ 270.204068][T12440] wg1 speed is unknown, defaulting to 1000 [ 270.219150][ T6191] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.258614][ T6191] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.282507][T12466] __nla_validate_parse: 5 callbacks suppressed [ 270.282529][T12466] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1740'. [ 270.291421][ T6191] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.386489][ T6191] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.653422][T12440] lo speed is unknown, defaulting to 1000 [ 270.836860][T12476] vlan2: entered allmulticast mode [ 270.842065][T12476] veth1: entered allmulticast mode [ 272.269704][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 272.295830][T12519] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 272.339166][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 272.422572][T12528] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1758'. [ 272.483289][T12528] netlink: 'syz.4.1758': attribute type 4 has an invalid length. [ 273.009600][T12541] dvmrp1: entered allmulticast mode [ 273.036107][T12549] bond0: entered promiscuous mode [ 273.060117][T12549] batadv0: entered promiscuous mode [ 273.102110][T12549] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 273.157835][T12549] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 273.206266][T12549] hsr1: entered allmulticast mode [ 273.231699][T12549] bond0: entered allmulticast mode [ 273.251996][T12549] batadv0: entered allmulticast mode [ 273.279883][T12549] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 273.312466][T12557] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1764'. [ 273.325370][T12559] sctp: [Deprecated]: syz.3.1766 (pid 12559) Use of int in maxseg socket option. [ 273.325370][T12559] Use struct sctp_assoc_value instead [ 273.334509][T12549] bond0: left promiscuous mode [ 273.353896][T12549] batadv0: left promiscuous mode [ 273.441777][T12556] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 273.456981][T12556] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 273.487351][T12561] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551104) [ 273.507055][T12561] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 273.518072][T12553] syzkaller1: entered promiscuous mode [ 273.523592][T12553] syzkaller1: entered allmulticast mode [ 273.687196][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1767'. [ 273.692661][T12573] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 273.783309][T12577] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 273.914111][T12579] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1770'. [ 274.182259][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 274.477259][T12602] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1776'. [ 274.862619][T12591] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 275.133159][T12626] netlink: 'syz.3.1784': attribute type 10 has an invalid length. [ 275.149150][T12626] bond0: (slave team0): refused to change device type [ 275.382651][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 275.402807][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1788'. [ 275.502089][T12648] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 275.512187][T12648] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 275.644323][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 275.686590][T12657] syzkaller0: entered promiscuous mode [ 275.692170][T12657] syzkaller0: entered allmulticast mode [ 275.705660][T12654] macsec0: left allmulticast mode [ 275.718839][T12654] macsec0: left promiscuous mode [ 275.724678][T12654] bridge0: port 1(macsec0) entered disabled state [ 275.736088][T12660] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1796'. [ 275.884176][T12661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.915238][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'. [ 276.013551][T12671] netlink: 'syz.1.1799': attribute type 4 has an invalid length. [ 276.062979][ T6084] lo speed is unknown, defaulting to 1000 [ 276.086438][ T6084] syz0: Port: 1 Link DOWN [ 276.111996][ T6084] lo speed is unknown, defaulting to 1000 [ 276.237980][T12681] wg1 speed is unknown, defaulting to 1000 [ 276.260188][T12681] lo speed is unknown, defaulting to 1000 [ 276.311214][T12678] netlink: 'syz.1.1799': attribute type 4 has an invalid length. [ 276.330968][T12683] syzkaller0: entered promiscuous mode [ 276.336845][T12683] syzkaller0: entered allmulticast mode [ 276.580910][ T6084] lo speed is unknown, defaulting to 1000 [ 276.587129][ T6084] syz0: Port: 1 Link ACTIVE [ 276.596473][ T5930] lo speed is unknown, defaulting to 1000 [ 276.836732][T12690] netlink: 'syz.1.1804': attribute type 8 has an invalid length. [ 277.432372][T12724] [ 277.434767][T12724] ====================================================== [ 277.441817][T12724] WARNING: possible circular locking dependency detected [ 277.448968][T12724] syzkaller #0 Not tainted [ 277.453405][T12724] ------------------------------------------------------ [ 277.460612][T12724] syz.1.1813/12724 is trying to acquire lock: [ 277.466698][T12724] ffffffff8f68d2f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 277.476329][T12724] [ 277.476329][T12724] but task is already holding lock: [ 277.483831][T12724] ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 277.493543][T12724] [ 277.493543][T12724] which lock already depends on the new lock. [ 277.493543][T12724] [ 277.503975][T12724] [ 277.503975][T12724] the existing dependency chain (in reverse order) is: [ 277.513097][T12724] [ 277.513097][T12724] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 277.521046][T12724] lock_acquire+0x120/0x360 [ 277.526132][T12724] _raw_spin_lock_bh+0x36/0x50 [ 277.531449][T12724] nr_rt_ioctl+0x390/0xd50 [ 277.536421][T12724] sock_do_ioctl+0xd9/0x300 [ 277.541478][T12724] sock_ioctl+0x576/0x790 [ 277.546364][T12724] __se_sys_ioctl+0xf9/0x170 [ 277.551506][T12724] do_syscall_64+0xfa/0x3b0 [ 277.556571][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.563032][T12724] [ 277.563032][T12724] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 277.571066][T12724] lock_acquire+0x120/0x360 [ 277.576388][T12724] _raw_spin_lock_bh+0x36/0x50 [ 277.581878][T12724] nr_rt_ioctl+0x193/0xd50 [ 277.586904][T12724] sock_do_ioctl+0xd9/0x300 [ 277.591963][T12724] sock_ioctl+0x576/0x790 [ 277.596874][T12724] __se_sys_ioctl+0xf9/0x170 [ 277.602015][T12724] do_syscall_64+0xfa/0x3b0 [ 277.607253][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.613705][T12724] [ 277.613705][T12724] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 277.621877][T12724] validate_chain+0xb9b/0x2140 [ 277.627210][T12724] __lock_acquire+0xab9/0xd20 [ 277.632552][T12724] lock_acquire+0x120/0x360 [ 277.637654][T12724] _raw_spin_lock_bh+0x36/0x50 [ 277.642979][T12724] nr_rt_device_down+0xa9/0x720 [ 277.648400][T12724] nr_device_event+0x137/0x150 [ 277.653720][T12724] notifier_call_chain+0x1b3/0x3e0 [ 277.659474][T12724] __dev_notify_flags+0x18d/0x2e0 [ 277.665046][T12724] netif_change_flags+0xe8/0x1a0 [ 277.670549][T12724] dev_change_flags+0x130/0x260 [ 277.676046][T12724] dev_ioctl+0x7b4/0x1150 [ 277.681285][T12724] sock_do_ioctl+0x22c/0x300 [ 277.686427][T12724] sock_ioctl+0x576/0x790 [ 277.691313][T12724] __se_sys_ioctl+0xf9/0x170 [ 277.696458][T12724] do_syscall_64+0xfa/0x3b0 [ 277.701518][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.708052][T12724] [ 277.708052][T12724] other info that might help us debug this: [ 277.708052][T12724] [ 277.718302][T12724] Chain exists of: [ 277.718302][T12724] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 277.718302][T12724] [ 277.732168][T12724] Possible unsafe locking scenario: [ 277.732168][T12724] [ 277.739647][T12724] CPU0 CPU1 [ 277.745130][T12724] ---- ---- [ 277.750520][T12724] lock(nr_neigh_list_lock); [ 277.755328][T12724] lock(&nr_node->node_lock); [ 277.762648][T12724] lock(nr_neigh_list_lock); [ 277.769898][T12724] lock(nr_node_list_lock); [ 277.774540][T12724] [ 277.774540][T12724] *** DEADLOCK *** [ 277.774540][T12724] [ 277.782708][T12724] 2 locks held by syz.1.1813/12724: [ 277.787932][T12724] #0: ffffffff8f537c48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 277.796808][T12724] #1: ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 277.806988][T12724] [ 277.806988][T12724] stack backtrace: [ 277.812904][T12724] CPU: 0 UID: 0 PID: 12724 Comm: syz.1.1813 Not tainted syzkaller #0 PREEMPT(full) [ 277.812932][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.812959][T12724] Call Trace: [ 277.812968][T12724] [ 277.812977][T12724] dump_stack_lvl+0x189/0x250 [ 277.813010][T12724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.813037][T12724] ? __pfx__printk+0x10/0x10 [ 277.813068][T12724] ? print_lock_name+0xde/0x100 [ 277.813100][T12724] print_circular_bug+0x2ee/0x310 [ 277.813126][T12724] check_noncircular+0x134/0x160 [ 277.813153][T12724] validate_chain+0xb9b/0x2140 [ 277.813180][T12724] ? rt6_disable_ip+0x6b3/0x720 [ 277.813208][T12724] ? __queue_work+0xc56/0xfb0 [ 277.813233][T12724] ? __lock_acquire+0xab9/0xd20 [ 277.813265][T12724] __lock_acquire+0xab9/0xd20 [ 277.813301][T12724] ? nr_rt_device_down+0xa9/0x720 [ 277.813326][T12724] lock_acquire+0x120/0x360 [ 277.813356][T12724] ? nr_rt_device_down+0xa9/0x720 [ 277.813390][T12724] ? nr_rt_device_down+0xa9/0x720 [ 277.813416][T12724] _raw_spin_lock_bh+0x36/0x50 [ 277.813443][T12724] ? nr_rt_device_down+0xa9/0x720 [ 277.813470][T12724] nr_rt_device_down+0xa9/0x720 [ 277.813498][T12724] ? do_raw_spin_unlock+0x122/0x240 [ 277.813527][T12724] nr_device_event+0x137/0x150 [ 277.813552][T12724] notifier_call_chain+0x1b3/0x3e0 [ 277.813579][T12724] __dev_notify_flags+0x18d/0x2e0 [ 277.813602][T12724] ? __pfx___dev_notify_flags+0x10/0x10 [ 277.813622][T12724] ? __dev_change_flags+0x4cc/0x6d0 [ 277.813646][T12724] ? __pfx___dev_change_flags+0x10/0x10 [ 277.813667][T12724] ? full_name_hash+0x92/0xe0 [ 277.813692][T12724] netif_change_flags+0xe8/0x1a0 [ 277.813716][T12724] dev_change_flags+0x130/0x260 [ 277.813752][T12724] dev_ioctl+0x7b4/0x1150 [ 277.813784][T12724] sock_do_ioctl+0x22c/0x300 [ 277.813821][T12724] ? __pfx_sock_do_ioctl+0x10/0x10 [ 277.813847][T12724] ? __lock_acquire+0xab9/0xd20 [ 277.813888][T12724] sock_ioctl+0x576/0x790 [ 277.813914][T12724] ? __pfx_sock_ioctl+0x10/0x10 [ 277.813939][T12724] ? __fget_files+0x2a/0x420 [ 277.813955][T12724] ? __fget_files+0x3a0/0x420 [ 277.813973][T12724] ? __fget_files+0x2a/0x420 [ 277.813993][T12724] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.814020][T12724] ? __pfx_sock_ioctl+0x10/0x10 [ 277.814044][T12724] __se_sys_ioctl+0xf9/0x170 [ 277.814072][T12724] do_syscall_64+0xfa/0x3b0 [ 277.814104][T12724] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.814133][T12724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.814154][T12724] ? clear_bhb_loop+0x60/0xb0 [ 277.814179][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.814200][T12724] RIP: 0033:0x7f37a858ebe9 [ 277.814221][T12724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.814240][T12724] RSP: 002b:00007f37a9425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.814264][T12724] RAX: ffffffffffffffda RBX: 00007f37a87b6090 RCX: 00007f37a858ebe9 [ 277.814280][T12724] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 277.814294][T12724] RBP: 00007f37a8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.814308][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.814321][T12724] R13: 00007f37a87b6128 R14: 00007f37a87b6090 R15: 00007ffe78570518 [ 277.814347][T12724]