last executing test programs: 2m52.410121311s ago: executing program 1 (id=728): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m52.135557605s ago: executing program 1 (id=732): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140d, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8010) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@remote}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 2m51.48745561s ago: executing program 1 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) 2m51.128233496s ago: executing program 4 (id=741): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x5e20, @local}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 2m50.929754945s ago: executing program 4 (id=742): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m49.651004456s ago: executing program 4 (id=744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r6, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 2m49.606680401s ago: executing program 1 (id=746): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421"], 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2m48.677912208s ago: executing program 4 (id=750): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r7, 0x12}, 0x10) listen(r4, 0xfffffffd) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 2m48.182392072s ago: executing program 1 (id=752): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept(r1, &(0x7f0000000080)=@caif=@dgm, &(0x7f0000000000)=0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) sendmsg$NL80211_CMD_SET_WOWLAN(r2, 0x0, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) epoll_create(0x7fff) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m48.045187001s ago: executing program 4 (id=753): unshare(0x6a040000) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket(0x25, 0x5, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 2m47.766600829s ago: executing program 1 (id=754): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010005000500070000000000080009000300000014002000ff000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25020000000500050002000000080002000500000028000680080006fc0500000005000200040000001400040000000000000000000000ffc6ffe00000010c00068008000700", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40041) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0203000084000000080000a3270000af00000010e50bff2a304ed28366aedc4243882d0c260f3395d76bf42f599d1a04", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f14b9a02dbd7000fddbdf210d0045006f70615f766e696300000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) 2m47.211457324s ago: executing program 32 (id=754): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010005000500070000000000080009000300000014002000ff000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25020000000500050002000000080002000500000028000680080006fc0500000005000200040000001400040000000000000000000000ffc6ffe00000010c00068008000700", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40041) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0203000084000000080000a3270000af00000010e50bff2a304ed28366aedc4243882d0c260f3395d76bf42f599d1a04", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f14b9a02dbd7000fddbdf210d0045006f70615f766e696300000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) 2m47.205698021s ago: executing program 4 (id=758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000001580)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff2}, {0x2, 0x7}, {0x0, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008050}, 0x40004) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff7c1, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x7f, &(0x7f0000000540)=""/127, 0x40f00, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='f2fs_write_begin\x00', r4, 0x0, 0x6}, 0x18) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100000000180000000000000000", @ANYRES32=r6, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r6, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) bind$alg(r8, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a6503b80000000000f80000", @ANYRES32, @ANYBLOB="8ac2fc8a900144695a26b5f4e5570104aee77463c2babbfcc6c090230d04712d9d34e4c8247cd3784cc8f949491bfad762fe4d7ef69534ada05e3e462ddc711652ea885b75742201cc0c7b88cc02b7a72d0bdc87f8eca72b8382fbe6e5837727be6d719c81ecf35218f73d16639c788e381115e47b5750fd94318152ae4e9b72e3905eaee722", @ANYRES64=0x0], 0x20) accept4(r9, 0x0, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0x0) 2m47.203646069s ago: executing program 33 (id=758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000001580)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff2}, {0x2, 0x7}, {0x0, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008050}, 0x40004) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff7c1, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x7f, &(0x7f0000000540)=""/127, 0x40f00, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='f2fs_write_begin\x00', r4, 0x0, 0x6}, 0x18) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100000000180000000000000000", @ANYRES32=r6, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r6, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) bind$alg(r8, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a6503b80000000000f80000", @ANYRES32, @ANYBLOB="8ac2fc8a900144695a26b5f4e5570104aee77463c2babbfcc6c090230d04712d9d34e4c8247cd3784cc8f949491bfad762fe4d7ef69534ada05e3e462ddc711652ea885b75742201cc0c7b88cc02b7a72d0bdc87f8eca72b8382fbe6e5837727be6d719c81ecf35218f73d16639c788e381115e47b5750fd94318152ae4e9b72e3905eaee722", @ANYRES64=0x0], 0x20) accept4(r9, 0x0, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0x0) 4.395384408s ago: executing program 6 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0012800b000100626174617cccd364760000140002800d1001004241544d0000002000"/47], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r3, 0xffffffffffffffff, 0x2, 0x100000000000003) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.748876471s ago: executing program 5 (id=1743): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r4 = accept4(r0, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd0000001000010003080800414900400604", 0x56}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4042854}, 0x14) 3.428351569s ago: executing program 6 (id=1744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 3.231225859s ago: executing program 2 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x0, 0xfffffffe}, 0x10}}, 0x0) clock_gettime(0x9, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250c000000180001801400020076657468305f746f5f626f5d444d82a5f932bd0c77b80a8a1850556e640000000c0003800800038004000180"], 0x38}}, 0x0) 2.958783506s ago: executing program 2 (id=1747): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x30, r0, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x48004) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) 2.843452966s ago: executing program 5 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1c0011800b0001006578746a647200000c0002800800064000000002140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000205000640"], 0xc8}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0xb15e, 0x2}, 0x50) socket(0x1e, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a0104000000000000000001f1000008000a40000000000900020073797a30000000000900010073797a30000000000800054000000016500000000c00000800044000005889fc42010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd5ad26115453baa910be00000140000001000010000000000000000000000000a"], 0xd4}}, 0x0) 2.791836669s ago: executing program 2 (id=1751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.550624971s ago: executing program 5 (id=1752): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="b301916c88b830ac1d513d80506c351315b67509c34a558231904eb8a11147fe7558f28ca0899c1a5890b62ee3aa9a0422ba2a2f4ec31322fc8591ad4e877a21182a3c4bab1850e1dcbaacae38d6d322a52d56af07a854ff9f844a84f126cb9c29a9a0978ce84f464911cc7c97d7", 0x6e}, {&(0x7f00000007c0)="36a0840825fc8b8f4f7258145d450741b0e950e36c29b1c990ae6ad8ab57268928110f23887b986409c8178a48489b7a08f23eeb72033d58d2ff81ac59e41c6a88af8b65d734bf13b83dbce37757f39cb1bc8780e8817c7d4a16cd7cb212fe82d883aafb9501bc7dcab0206eeb7adcfdd6576699baafaf6227a42a940988b680b7a3e5cddbc34e00f4e91324bbeb6ff91233570c29cb513d434e5fe1de30bc9f5ccc0f6fe01bb23e91a892698bd22d373563d6bd2da010310a98d90a184793f6748b8b4117c732a01bf65b24801395f054a6732170fdd07bbee2b5e468370e3c50a63e8381e4b3710da8f9a4a9c7d4b79634097cf430792f3f2408d774b2012c3382fd601ced639d3b778d52a802328e785eae8fa77367f3ec224d331762832041ae1480b37bd144650c97abf4e8292f6afbfd084127962d6135c6afb2709ce58005c2aeec979131931d60e2c57b96c4ec6bbfa441a96cb38139530120346b082380d345e96724de6d46941ae8464ea450b87e14c9d5e20bcda9f8f6ec670965e2917e071392ceb4a4f795d4824aeb318e59856d4ae102f434b7eeaf89e02c9561b34de136b8b647215dbd296d41faef9b901f4cad84b1c9185a1d934bec6e4563b6cc4b96d944fa601172f0e1a02343ea0f6c530a584f6073f3ac1d67c60b84a51bf8cb873ca9d5f0605b5184d6eb10cebc2ef6b32e0205ae8df966dabcdd8b2d9ff853d176620a7ef8c61a1e72285a1fc02387fd3646f454695b38ecad25edb9a7ac72a3ca6fed849a71d4ae387aad5c8d5a2cd095588cf113446e7e178e56861a02a55d40c71b77e526ec7a4f9a46861891aafd32e1a3fe10b437bbbc35cd647074e5a1cc38bc25da4eb04628761cf17464406e9b30b48cd71e40710fcf77b560db078f613aebd3e534403e87e21158207df00b51eba1b326a3eeb99eb574e019bf5ca209f4ba31f19a65067c7dde52e8333663b336015eefda6f3c6bc3d272468bb54e69027b7a39c8080e27ea459cc94f87fb463b6c9e8ba57c799820dae6d0dc47165858434987176808d6c01eb8fd272296d879ed244f413982407548dcdd2b0f12666c94ad40f7853907f412ee035d25f4e2a76da25703de62b2689ce5ab023b4f30d662ebaf8edc4b829d79932dc81d6f73462dcf397fd90cbd75ca539a10db1184066635ebb7ed3552ce248b8f96f6d6d670073f80bc9a9f7c7bcec98478ad9860d01c1b8b625d39ee4aae2b13001c5809bf25df720e6512c948b7ca06f418bb40e095c0238212289a3f3972b3691c2f268e9b209a95e6b1da6d62171ace69889d827fbe1308696a4f63a1e0a0be00050ebc76f485f2bb9a7284a05f252d1c9d8791a447f209c3b58a10148bf15a558a3074d025722fb570178dccd71bd1631ac9fae063345f28c764c9ae346c3d2729194c8dfa3836a048356b21d106df5edb4d209b4ae179ae7a7c2f11d8fc29d893c32f85efcad44372a84c57c9ba4ff4fe39dd087e1547e47f85f653ab52ff0c939e904a5598ccf5a2570643958bf850591849368d2a8b03b0f7cd43868291c3091489b4f42e5291aa13ddfbc484e3686d38e1eeff059bdb0dc7d69a8fec0b76e4df55248676c44e0a5edb0455d885a3e6c8f644bf5047bc9e8d77a4442432c5ad14ccd1a90591012ab7f1c5537559c65df6420681478710354c21f37aa9c5cc9c6a40808f734bc426a01cc81254855fcc3ecbe250423639e3108e7614c3659cb8cd3b1d7b65327bd38502c57566f9eab6c51c48b55ab36e3d5228e5ed540cddb4056bae07072319c77cd9aac8f3c8e0301ed37e7f959d3d1dc614be0a043c4211114e7e8a2551b51a3e4fa25764b17842963fa9bfb8d3e26b5cede92118424b3a3aa57c9423929cd0ee56e0d8dcab54db74dda8a48405da8cbba0e934d62199bc5d16b8c3de515f72e276020193768d35ed70ec62cb07d8b6bd4766e21d3c39b4de4bea9de546f61e9eadfbbfe2be82f4fcf9d051ee5d0f39f07a05c0a72713dc5a6aead6f244aa6e788fd6c1da9ab670a51d75944cc79f61ab0e6d99c003033051d8ee9a3a79bf863c44f8b136215f2db5b0bec3ca29d9e11313f02570baa209dfa9a592defb1e8b042911ba1b6136451b04ea270ceae4f89da6ed76d081459ef538bb80e0df37aad583b5834a46b3b0", 0x605}], 0x2, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300), 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 2.453712692s ago: executing program 6 (id=1753): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 2.335406721s ago: executing program 6 (id=1754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 2.036959398s ago: executing program 0 (id=1755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = epoll_create1(0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x3, 0xffff519b, 0x19, @private0, @empty, 0x20, 0x8, 0x4d, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000006c0)='GPL\x00', 0x4, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.005466617s ago: executing program 3 (id=1756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r2}, 0x38) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)=',', 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000006c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r9, r7, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000050a245d5d51d185545000028fffe00000002907800000000ffffffff11009078e0000002000000024062d13c0000000048eb71e3"], 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000002c0)={'netdevsim0\x00', 0xb5}) 1.925864311s ago: executing program 0 (id=1757): syz_emit_ethernet(0x9e, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x13, 0x0, [{0x6, 0xb, "5e000000ff00000000"}, {0x0, 0x2}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0x3, '!'}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x8, "02ca0948fdf4"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0xfffffffe, 0x0]}]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xd0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xc) write(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x32600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@bridge_newneigh={0x48, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_FLAGS_EXT={0x8}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LINK_NETNSID={0x8}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 1.607374658s ago: executing program 0 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x0, 0xfffffffe}, 0x10}}, 0x0) clock_gettime(0x9, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250c000000180001801400020076657468305f746f5f626f5d444d82a5f932bd0c77b80a8a1850556e640000000c0003800800038004000180"], 0x38}}, 0x0) 1.560093111s ago: executing program 3 (id=1759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "6ef6aaaeab409e59", "b6b8e7e85887dfc2e4ffb9968b22583f", "4d800012", "5257a0fefe42c4e4"}, 0x28) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f00000000c0)=0x6e) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x6, 0x7ff, 0x6, 0x0, 0x0, [{{r5}, 0x1}, {{r1}, 0x1}, {{r1}, 0x23}, {{r0}, 0x200}, {{r1}}, {{r6}, 0x6}]}) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0xfd5e, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.550585469s ago: executing program 2 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x10, 0x80003, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.437890435s ago: executing program 0 (id=1761): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x30, r0, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x48004) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) 1.387408007s ago: executing program 5 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1c0011800b0001006578746a647200000c0002800800064000000002140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000205000640"], 0xc8}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0xb15e, 0x2}, 0x50) socket(0x1e, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a0104000000000000000001f1000008000a40000000000900020073797a30000000000900010073797a30000000000800054000000016500000000c00000800044000005889fc42010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd5ad26115453baa910be00000140000001000010000000000000000000000000a"], 0xd4}}, 0x0) 1.265017333s ago: executing program 6 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newtaction={0x8c0, 0x30, 0xffff, 0x3, 0x0, {}, [{0x8ac, 0x1, [@m_police={0x8a8, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x5, 0x3, 0x10000000, 0x7, 0x7, 0x3, 0x3, 0x200000, 0x3, 0x5, 0x3, 0x1, 0x0, 0xffffff00, 0x1a02, 0x8, 0x7, 0xffffff3d, 0x3, 0xc505, 0x7, 0x1, 0xd, 0xb, 0x8, 0x5, 0x9, 0x0, 0x200, 0x400, 0x39ea5ce, 0x8, 0x8, 0x80000000, 0x5ea, 0x6, 0x81, 0x1, 0x6, 0xfffffffc, 0x200, 0x7, 0x6, 0x8, 0x8, 0x2, 0x6bc, 0x80000000, 0x9, 0x8, 0xf092, 0x4, 0x401, 0x8000, 0xa, 0x7, 0x4ef0df0, 0x10, 0x2, 0xfffff29c, 0x2, 0x4, 0x4, 0x0, 0x2, 0x3ff, 0xe, 0x4f, 0x4, 0x6, 0x1000, 0x0, 0x4, 0x5, 0x51ea99d2, 0x65, 0x4, 0x2, 0xe, 0x9, 0x3ff, 0x5, 0x8, 0xffffb32d, 0x117a, 0x7, 0x0, 0xfffffff9, 0x10, 0x2, 0x7, 0x5, 0x5, 0x100, 0x8, 0x81, 0x78, 0x10, 0x3, 0x3, 0x2, 0x4, 0x2, 0x100, 0x1, 0x96, 0x80000000, 0x6e, 0x9, 0x4, 0x9, 0x0, 0x7, 0xfffffff7, 0x9, 0x3, 0xaf, 0x665310ef, 0xe06, 0x0, 0x9, 0x3, 0xfffffffa, 0x9, 0x3, 0xfffffff9, 0x0, 0x8, 0x1, 0x5, 0xd2f0, 0x4, 0x5, 0x8001, 0x3b, 0x2911, 0x5, 0x7, 0x4, 0x39, 0x1, 0x7, 0x81, 0xfffffc00, 0x5, 0xf79, 0x7, 0x364, 0x4, 0x5, 0x4, 0x1ff, 0xfffffff0, 0xa1d03f6, 0x7, 0x6ff, 0x7, 0x8, 0x0, 0xe212, 0x3, 0x6f016751, 0x8, 0x4, 0x6, 0x9, 0x8, 0x5, 0xfff, 0xf27b, 0x7, 0x4, 0x3, 0x401, 0x5, 0x1, 0x3, 0x9, 0x7, 0x64babf3b, 0x599e, 0xffffff18, 0xe, 0x1, 0x5899, 0x6, 0x0, 0xe, 0x3ae, 0x6, 0x81, 0x1000, 0x0, 0xc3, 0x5, 0xfffffff8, 0x8, 0xd, 0x0, 0x1ff, 0x1, 0x80, 0x9, 0x5, 0x6, 0x101, 0x3b75c3b5, 0x7, 0x8, 0xb87, 0x9, 0x2, 0x5, 0xffffffff, 0x9, 0x1, 0x8, 0x1, 0xa, 0x6, 0x1a, 0x400, 0x7fff, 0x21, 0x101, 0x8, 0x4, 0x0, 0x3, 0x6, 0x8, 0x10000, 0x6, 0x7, 0x6, 0x5, 0x1, 0x9, 0x6, 0xffffffff, 0xa3, 0x1b, 0x7f, 0x4, 0xc3, 0x9, 0x1000, 0x7fff, 0xa55b, 0x101, 0x6, 0x401, 0x1, 0x8, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7ff, 0x1, 0x5, {0xd, 0x2, 0x8, 0x5, 0x1, 0x8000}, {0x3e, 0x2, 0x0, 0x2, 0x8, 0x34}, 0x4, 0x3, 0x2}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x1000, 0x8, 0x1, 0x8, 0xd, 0x3, 0x1, 0x8, 0x793, 0x3, 0x5, 0x101, 0x7ff, 0x81, 0x7fff, 0x2c39, 0xff, 0x15, 0x7b, 0x5, 0x7, 0x7400, 0x401, 0x1ff, 0x1, 0x7fffffff, 0xd5ea, 0x2, 0x80, 0x2, 0x0, 0x4, 0x6, 0xffff, 0x396, 0x3, 0x7, 0x101, 0x173, 0xfffff928, 0x6, 0x7, 0x0, 0xca7e, 0x0, 0x0, 0x200, 0x1000, 0x8, 0xdcd6, 0x6, 0xfffff020, 0xfffeffff, 0xfffffff9, 0x1, 0x2c78, 0x4, 0x7, 0x24c133a5, 0x8, 0x800, 0x7, 0x7, 0x7, 0x80000000, 0x5, 0x800, 0x8, 0xffffffff, 0x9, 0x80000000, 0x7, 0x5d, 0x9, 0x4, 0x7fffffff, 0x5, 0x6, 0x400, 0x6, 0x3, 0x28, 0x8, 0x500000, 0xce, 0x8, 0xb8d9, 0x7, 0x4, 0x1a, 0xaa9, 0x5cd, 0x1, 0x80000000, 0x7, 0x89, 0x9, 0x5, 0x2, 0x10001, 0x8, 0x1ff, 0x5, 0x7, 0x400, 0x7, 0x9, 0x81, 0x9, 0x3, 0x3, 0x8, 0x3ff, 0x6, 0x5, 0x7, 0xf977, 0x8, 0x8, 0x5, 0x80000000, 0x230dd407, 0x80, 0x8001, 0x6, 0x7, 0x2, 0x2, 0xdb5, 0x80, 0x7, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x4, 0x9, 0x4, 0x7970, 0x6, 0x40000, 0x9, 0x6a4b, 0x0, 0xfffffffc, 0x8, 0x9, 0xc790, 0xffffffff, 0x9, 0xb1, 0x8, 0xf, 0xd, 0xd, 0x1, 0x9, 0xa2e5, 0x0, 0x20000000, 0x10001, 0xc42, 0x5, 0x4, 0x6, 0xff, 0x9, 0xd, 0x200, 0x81d4, 0x5, 0x73d, 0x7, 0x8, 0x200, 0x4, 0x8, 0x4295, 0xfff, 0x1000, 0x784, 0x3, 0x7, 0x6, 0x7, 0x57, 0x3, 0xfbe, 0x7, 0xd, 0x703, 0x2, 0xdc, 0x3, 0x7fffffff, 0x8, 0x81, 0x3, 0x9, 0x9648, 0xf160, 0x0, 0x8, 0x1, 0x5002, 0x1, 0xb3, 0xfff, 0x800, 0x8001, 0x4, 0x2, 0x1ff, 0x55, 0x3, 0x0, 0x0, 0xff, 0xed, 0x7, 0x0, 0x1, 0x1, 0x3, 0x3, 0xfffffffd, 0x9, 0x447, 0x8, 0x0, 0x1, 0x2, 0x2, 0x7, 0x6, 0x2f6, 0xffffffff, 0x7, 0x3, 0x4, 0x1ff, 0x86bd, 0x8, 0x4, 0x100, 0x7, 0x6, 0x7fffffff, 0x80000000, 0x2, 0x2, 0x7, 0x4]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x8c0}}, 0x8044) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'rose0\x00', {0x2, 0x4e21, @local}}) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x40}, 0x24004800) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x5, @private2, 0x6}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r6, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, 0x0, &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100"], 0x20}}, 0x0) unshare(0x6a040000) 1.260501444s ago: executing program 0 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0012800b000100626174617cccd364760000140002800d1001004241544d0000002000"/47], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r4, r5, 0x2, 0x100000000000003) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000020000000900010073797a3000000000400000000c0a01020000000000000000010000000900020073797a32000000001400038010000080080006400000000004000b800900010073797a30000000001400000010000100000000000be967ba83937d805900f100000000000a"], 0x88}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x4000000) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.195414124s ago: executing program 3 (id=1765): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r5 = accept4(r0, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_SET(r5, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'ip6_vti0\x00', {'ip6gre0\x00'}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, r6}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4042854}, 0x14) 1.000525473s ago: executing program 5 (id=1766): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0xfffffffffffffe45) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r5, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 672.782737ms ago: executing program 2 (id=1767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = epoll_create1(0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x3, 0xffff519b, 0x19, @private0, @empty, 0x20, 0x8, 0x4d, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000006c0)='GPL\x00', 0x4, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 624.002369ms ago: executing program 2 (id=1768): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write(r4, &(0x7f0000003300)="ac", 0x1) write(r2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 339.037578ms ago: executing program 6 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 281.057011ms ago: executing program 0 (id=1770): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$isdn_base(0x22, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="8000000001020104000000000000000002000000240002801400018008000100"], 0x80}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x4004884) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x42020000) 271.601498ms ago: executing program 3 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x0, 0xfffffffe}, 0x10}}, 0x0) clock_gettime(0x9, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250c000000180001801400020076657468305f746f5f626f5d444d82a5f932bd0c77b80a8a1850556e640000000c0003800800038004000180"], 0x38}}, 0x0) 138.099072ms ago: executing program 3 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f00000000c0)=0x6e) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x6, 0x7ff, 0x6, 0x0, 0x0, [{{r5}, 0x1}, {{r1}, 0x1}, {{r1}, 0x23}, {{r0}, 0x200}, {{r1}}, {{r6}, 0x6}]}) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) 36.745704ms ago: executing program 5 (id=1773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 0s ago: executing program 3 (id=1774): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x30, r0, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x48004) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) kernel console output (not intermixed with test programs): : unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.897684][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 170.909750][ T2899] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.048567][ T8154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.346046][ T8168] syzkaller0: entered promiscuous mode [ 171.370170][ T8168] syzkaller0: entered allmulticast mode [ 171.412991][ T8165] lo speed is unknown, defaulting to 1000 [ 173.499996][ T8171] lo speed is unknown, defaulting to 1000 [ 173.500027][ T8165] wg1 speed is unknown, defaulting to 1000 [ 173.538634][ T8207] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 173.656895][ T8213] netlink: 64 bytes leftover after parsing attributes in process `syz.3.532'. [ 173.920947][ T8206] lo speed is unknown, defaulting to 1000 [ 173.929096][ T8171] wg1 speed is unknown, defaulting to 1000 [ 174.008795][ T8222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.534'. [ 174.218468][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.535'. [ 174.246783][ T8224] xt_CT: No such helper "netbios-ns" [ 174.396865][ T8219] lo speed is unknown, defaulting to 1000 [ 174.396893][ T8206] wg1 speed is unknown, defaulting to 1000 [ 174.420511][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 174.726035][ T8236] lo speed is unknown, defaulting to 1000 [ 174.726305][ T8219] wg1 speed is unknown, defaulting to 1000 [ 175.087289][ T8246] v: renamed from veth1_vlan [ 175.544359][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.608660][ T8236] wg1 speed is unknown, defaulting to 1000 [ 175.614868][ T8253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.539'. [ 175.636835][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.714273][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.166354][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.191866][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.218116][ T8284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.239995][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.543'. [ 176.295720][ T8284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.353183][ T5492] v: left promiscuous mode [ 176.495145][ T8291] netlink: 64 bytes leftover after parsing attributes in process `syz.4.545'. [ 176.701380][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 176.707629][ T8293] lo speed is unknown, defaulting to 1000 [ 176.992022][ T8298] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.001395][ T8319] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 177.056616][ T5836] block nbd64: NBD_DISCONNECT [ 177.139949][ T8319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.252453][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 177.337302][ T8326] bond4: (slave ip6gretap1): making interface the new active one [ 177.427773][ T8326] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 177.653442][ T8329] veth9: entered promiscuous mode [ 177.679680][ T8329] bond4: (slave veth9): Enslaving as an active interface with a down link [ 177.714856][ T8319] erspan0: entered allmulticast mode [ 177.755932][ T8319] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 177.799730][ T8334] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 177.873395][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 177.887863][ T8293] wg1 speed is unknown, defaulting to 1000 [ 177.913203][ T8344] macvtap2: entered promiscuous mode [ 177.939686][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 177.942031][ T8344] ip6gretap0: entered promiscuous mode [ 177.958284][ T8344] macvtap2: entered allmulticast mode [ 177.963672][ T8344] ip6gretap0: entered allmulticast mode [ 177.972152][ T8339] ip6gretap0: left allmulticast mode [ 177.978081][ T8339] ip6gretap0: left promiscuous mode [ 178.215793][ T8358] netlink: 'syz.2.554': attribute type 13 has an invalid length. [ 178.223627][ T8358] netlink: 'syz.2.554': attribute type 17 has an invalid length. [ 178.241925][ T8355] tipc: Enabled bearer , priority 0 [ 178.309219][ T8358] erspan0: left allmulticast mode [ 178.337612][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.349373][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.392978][ T8358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.418055][ T8355] syzkaller0: entered promiscuous mode [ 178.423882][ T8355] syzkaller0: entered allmulticast mode [ 178.478349][ T8352] tipc: Resetting bearer [ 178.484358][ T5909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.559788][ T8352] tipc: Disabling bearer [ 178.695005][ T5909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.769979][ T8358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.771743][ T8360] lo speed is unknown, defaulting to 1000 [ 178.985461][ T8376] lo: left promiscuous mode [ 179.002595][ T8376] tunl0: left promiscuous mode [ 179.052275][ T8376] gre0: left promiscuous mode [ 179.085645][ T8376] gretap0: left promiscuous mode [ 179.099138][ T8376] erspan0: left promiscuous mode [ 179.107113][ T8376] ip_vti0: left promiscuous mode [ 179.135557][ T8376] ip6_vti0: left promiscuous mode [ 179.141256][ T10] lo speed is unknown, defaulting to 1000 [ 179.147145][ T10] syz2: Port: 1 Link DOWN [ 179.152061][ T10] lo speed is unknown, defaulting to 1000 [ 179.317401][ T8360] wg1 speed is unknown, defaulting to 1000 [ 179.324825][ T8378] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 179.721372][ T8385] syzkaller0: entered promiscuous mode [ 179.727194][ T8385] syzkaller0: entered allmulticast mode [ 179.837438][ T8394] lo speed is unknown, defaulting to 1000 [ 181.429555][ T8394] wg1 speed is unknown, defaulting to 1000 [ 181.436464][ T8403] netlink: 'syz.0.566': attribute type 15 has an invalid length. [ 181.516553][ T8413] netlink: 'syz.2.568': attribute type 3 has an invalid length. [ 181.550799][ T8415] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 181.554438][ T8413] netlink: 64 bytes leftover after parsing attributes in process `syz.2.568'. [ 181.590893][ T8413] block nbd0: not configured, cannot reconfigure [ 181.752500][ T8420] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 181.897561][ T8427] netlink: 'syz.1.571': attribute type 11 has an invalid length. [ 181.917077][ T8427] netlink: 'syz.1.571': attribute type 11 has an invalid length. [ 181.937120][ T8427] netlink: 224 bytes leftover after parsing attributes in process `syz.1.571'. [ 181.958066][ T8415] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.968076][ T36] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 182.098373][ T8425] veth11: entered promiscuous mode [ 182.110298][ T8419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.128679][ T60] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 182.153884][ T8425] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 182.282608][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 182.353411][ T8433] netlink: 64 bytes leftover after parsing attributes in process `syz.1.574'. [ 182.362610][ T8433] block nbd0: not configured, cannot reconfigure [ 182.569321][ T8442] netlink: 'syz.0.578': attribute type 11 has an invalid length. [ 182.604808][ T8442] netlink: 224 bytes leftover after parsing attributes in process `syz.0.578'. [ 182.747230][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 182.779306][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 182.997134][ T8452] lo speed is unknown, defaulting to 1000 [ 183.239007][ T8460] netlink: 'syz.3.582': attribute type 15 has an invalid length. [ 183.294442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.419297][ T8452] wg1 speed is unknown, defaulting to 1000 [ 183.922784][ T8478] dvmrp6: left allmulticast mode [ 184.117841][ T8486] syzkaller0: entered promiscuous mode [ 184.138468][ T8486] syzkaller0: entered allmulticast mode [ 184.280280][ T8489] netlink: 100 bytes leftover after parsing attributes in process `syz.3.590'. [ 184.505291][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 184.627360][ T8501] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 185.512843][ T8512] lo speed is unknown, defaulting to 1000 [ 185.580528][ T8514] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 185.620816][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.658539][ T8514] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.755978][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 186.153170][ T8527] netlink: 'syz.3.597': attribute type 3 has an invalid length. [ 186.326617][ T8512] wg1 speed is unknown, defaulting to 1000 [ 186.581121][ T8543] __nla_validate_parse: 2 callbacks suppressed [ 186.581137][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 186.616854][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 186.636686][ T8544] ip6gretap0: entered promiscuous mode [ 186.642605][ T8544] macvtap0: entered promiscuous mode [ 186.658317][ T8544] macvtap0: entered allmulticast mode [ 186.664202][ T8544] ip6gretap0: entered allmulticast mode [ 186.673016][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 186.684675][ T8548] netlink: 584 bytes leftover after parsing attributes in process `syz.2.599'. [ 187.171515][ T8547] ip6gretap0: left allmulticast mode [ 187.178172][ T8547] ip6gretap0: left promiscuous mode [ 187.342106][ T8546] lo speed is unknown, defaulting to 1000 [ 187.745066][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.754908][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.767993][ T8561] netlink: 'syz.0.603': attribute type 11 has an invalid length. [ 187.805927][ T8561] netlink: 'syz.0.603': attribute type 11 has an invalid length. [ 187.834949][ T8561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.603'. [ 187.888132][ T8546] wg1 speed is unknown, defaulting to 1000 [ 188.000105][ T8557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.148567][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 188.193573][ T8569] syzkaller0: entered promiscuous mode [ 188.199489][ T8569] syzkaller0: entered allmulticast mode [ 190.411054][ T8599] netlink: 6 bytes leftover after parsing attributes in process `syz.3.611'. [ 190.474551][ T8599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.508572][ T8598] netlink: 'syz.2.610': attribute type 15 has an invalid length. [ 190.767555][ T8610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.613'. [ 191.097540][ T8622] pim6reg: entered allmulticast mode [ 191.152783][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'. [ 191.186979][ T8629] lo speed is unknown, defaulting to 1000 [ 191.187330][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 191.306826][ T8625] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.588168][ T8637] __nla_validate_parse: 11 callbacks suppressed [ 191.588184][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.616331][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.627172][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.635162][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.646942][ T8637] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.663210][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.681970][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.693302][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.736808][ T8637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.875015][ T8649] syzkaller0: entered promiscuous mode [ 191.880617][ T8649] syzkaller0: entered allmulticast mode [ 193.370737][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 193.895724][ T8629] wg1 speed is unknown, defaulting to 1000 [ 193.896790][ T8642] lo speed is unknown, defaulting to 1000 [ 194.183037][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.273775][ T8666] lo speed is unknown, defaulting to 1000 [ 194.417633][ T8642] wg1 speed is unknown, defaulting to 1000 [ 194.451996][ T8666] wg1 speed is unknown, defaulting to 1000 [ 194.663955][ T8686] netlink: 'syz.3.629': attribute type 12 has an invalid length. [ 194.675615][ T8686] netlink: 'syz.3.629': attribute type 29 has an invalid length. [ 194.683387][ T8686] netlink: 148 bytes leftover after parsing attributes in process `syz.3.629'. [ 194.824290][ T8689] netlink: 'syz.3.630': attribute type 39 has an invalid length. [ 195.020581][ T8691] netlink: 'syz.2.631': attribute type 10 has an invalid length. [ 195.033288][ T8691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.631'. [ 195.078429][ T8691] batadv_slave_1: entered promiscuous mode [ 195.115627][ T8691] bridge0: port 1(batadv_slave_1) entered blocking state [ 195.185294][ T8691] bridge0: port 1(batadv_slave_1) entered disabled state [ 195.254373][ T8691] batadv_slave_1: entered allmulticast mode [ 195.696181][ T8705] netlink: 64 bytes leftover after parsing attributes in process `syz.3.636'. [ 195.791708][ T8704] lo speed is unknown, defaulting to 1000 [ 196.254407][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.261780][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 196.261849][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 196.373764][ T8726] netlink: 'syz.0.641': attribute type 13 has an invalid length. [ 196.390015][ T8726] netlink: 'syz.0.641': attribute type 17 has an invalid length. [ 196.716701][ T8726] erspan0: left allmulticast mode [ 196.947384][ T8726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.031592][ T8704] wg1 speed is unknown, defaulting to 1000 [ 197.032572][ T8732] lo speed is unknown, defaulting to 1000 [ 197.426887][ T8742] netlink: 104 bytes leftover after parsing attributes in process `syz.0.644'. [ 197.461704][ T8732] wg1 speed is unknown, defaulting to 1000 [ 197.469817][ T8742] tipc: Enabling of bearer rejected, failed to enable media [ 197.561916][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 197.780778][ T8749] netlink: 64 bytes leftover after parsing attributes in process `syz.4.647'. [ 197.815453][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 197.989396][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 198.075919][ T8754] bridge_slave_1: left allmulticast mode [ 198.081601][ T8754] bridge_slave_1: left promiscuous mode [ 198.156404][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.220242][ T8756] netlink: 104 bytes leftover after parsing attributes in process `syz.2.645'. [ 198.299111][ T8754] bridge_slave_0: left allmulticast mode [ 198.313760][ T8754] bridge_slave_0: left promiscuous mode [ 198.326361][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.453454][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 198.842829][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.653'. [ 198.882356][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.653'. [ 199.037388][ T8786] netlink: 64 bytes leftover after parsing attributes in process `syz.3.658'. [ 199.072499][ T8779] lo speed is unknown, defaulting to 1000 [ 199.228529][ T8789] tipc: Resetting bearer [ 199.252651][ T8789] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 199.610507][ T8787] lo speed is unknown, defaulting to 1000 [ 199.611467][ T8779] wg1 speed is unknown, defaulting to 1000 [ 199.742532][ T8794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.981914][ T8787] wg1 speed is unknown, defaulting to 1000 [ 200.952402][ T8837] siw: device registration error -23 [ 200.987932][ T8837] lo speed is unknown, defaulting to 1000 [ 201.168544][ T8842] IPVS: Scheduler module ip_vs_sip not found [ 201.297439][ T8842] IPVS: fo: FWM 3 0x00000003 - no destination available [ 201.474796][ T8856] lo speed is unknown, defaulting to 1000 [ 201.992306][ T8856] wg1 speed is unknown, defaulting to 1000 [ 202.316184][ T8888] lo speed is unknown, defaulting to 1000 [ 202.778814][ T8888] wg1 speed is unknown, defaulting to 1000 [ 203.018872][ T8900] lo speed is unknown, defaulting to 1000 [ 203.309216][ T8912] tipc: Enabled bearer , priority 0 [ 203.369693][ T8909] syzkaller0: entered promiscuous mode [ 203.375548][ T8909] syzkaller0: entered allmulticast mode [ 203.381730][ T8909] tipc: Resetting bearer [ 203.654813][ T8907] tipc: Resetting bearer [ 204.365730][ T918] tipc: Node number set to 537110724 [ 205.013552][ T8907] tipc: Disabling bearer [ 205.021999][ T8904] lo speed is unknown, defaulting to 1000 [ 205.022032][ T8900] wg1 speed is unknown, defaulting to 1000 [ 205.381891][ T8904] wg1 speed is unknown, defaulting to 1000 [ 205.470347][ T8928] netlink: 'syz.2.698': attribute type 3 has an invalid length. [ 205.482788][ T8921] __nla_validate_parse: 5 callbacks suppressed [ 205.482803][ T8921] netlink: 584 bytes leftover after parsing attributes in process `syz.3.697'. [ 205.722735][ T8928] dvmrp0: entered allmulticast mode [ 205.870525][ T8937] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'. [ 205.881130][ T8937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.974359][ T8940] netlink: 64 bytes leftover after parsing attributes in process `syz.2.702'. [ 206.228499][ T8944] lo speed is unknown, defaulting to 1000 [ 206.241050][ T8944] lo speed is unknown, defaulting to 1000 [ 206.249281][ T8947] tipc: Enabled bearer , priority 0 [ 206.258192][ T8947] syzkaller0: entered promiscuous mode [ 206.265459][ T8947] syzkaller0: entered allmulticast mode [ 206.272960][ T8944] lo speed is unknown, defaulting to 1000 [ 206.321204][ T8947] tipc: Resetting bearer [ 206.332853][ T8944] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 206.423894][ T8944] lo speed is unknown, defaulting to 1000 [ 206.449145][ T8955] lo speed is unknown, defaulting to 1000 [ 206.476251][ T8944] lo speed is unknown, defaulting to 1000 [ 206.524974][ T8944] lo speed is unknown, defaulting to 1000 [ 206.533058][ T8944] lo speed is unknown, defaulting to 1000 [ 206.540884][ T8944] lo speed is unknown, defaulting to 1000 [ 206.556414][ T8944] lo speed is unknown, defaulting to 1000 [ 206.689713][ T8946] tipc: Resetting bearer [ 206.762422][ T8946] tipc: Disabling bearer [ 207.399894][ T8971] lo speed is unknown, defaulting to 1000 [ 207.425904][ T8955] wg1 speed is unknown, defaulting to 1000 [ 207.713927][ T8983] tipc: Failed to remove unknown binding: 66,1,1/0:966894800/966894802 [ 207.780051][ T8971] wg1 speed is unknown, defaulting to 1000 [ 207.803228][ T8971] lo speed is unknown, defaulting to 1000 [ 208.064396][ T8984] lo speed is unknown, defaulting to 1000 [ 208.585936][ T8988] lo speed is unknown, defaulting to 1000 [ 208.641798][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.716'. [ 208.864372][ T9007] ip6tnl0: Caught tx_queue_len zero misconfig [ 208.972724][ T8984] wg1 speed is unknown, defaulting to 1000 [ 209.003106][ T8988] wg1 speed is unknown, defaulting to 1000 [ 209.011565][ T8984] lo speed is unknown, defaulting to 1000 [ 209.059265][ T8988] lo speed is unknown, defaulting to 1000 [ 209.144796][ T9011] wg1: entered promiscuous mode [ 209.155595][ T9011] wg1: entered allmulticast mode [ 209.507402][ T9013] syzkaller0: entered promiscuous mode [ 209.513177][ T9013] syzkaller0: entered allmulticast mode [ 210.999342][ T9031] vlan2: entered promiscuous mode [ 211.010134][ T9031] team0: entered promiscuous mode [ 211.053025][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 211.220941][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.4.729'. [ 211.240870][ T9053] netlink: 'syz.3.730': attribute type 13 has an invalid length. [ 211.284661][ T60] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.320748][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.370072][ T60] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.388559][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.454804][ T3450] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.484365][ T3450] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.496609][ T9061] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 211.497231][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 211.529025][ T3450] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.542001][ T3450] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.611318][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.734'. [ 211.641278][ T9069] trusted_key: syz.4.733 sent an empty control message without MSG_MORE. [ 211.670590][ T9066] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 211.692221][ T9066] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 211.703028][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 211.748397][ T9061] bond4: (slave gretap1): making interface the new active one [ 211.757285][ T9061] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 211.773232][ T9064] lo speed is unknown, defaulting to 1000 [ 211.786055][ T9073] macvlan2: entered promiscuous mode [ 211.791356][ T9073] macvlan2: entered allmulticast mode [ 211.799917][ T9073] bond4: entered promiscuous mode [ 211.805758][ T9073] gretap1: entered promiscuous mode [ 211.812010][ T9073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.824624][ T9073] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 211.857327][ T9073] bond4: left promiscuous mode [ 211.865824][ T9073] gretap1: left promiscuous mode [ 211.885724][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.935623][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 211.955139][ T9073] syz.1.732 (9073) used greatest stack depth: 17936 bytes left [ 211.958472][ T9077] netlink: 'syz.0.736': attribute type 10 has an invalid length. [ 212.054879][ T9064] wg1 speed is unknown, defaulting to 1000 [ 212.062615][ T9064] lo speed is unknown, defaulting to 1000 [ 212.157507][ T9079] syzkaller0: entered promiscuous mode [ 212.163123][ T9079] syzkaller0: entered allmulticast mode [ 212.205253][ T9083] lo speed is unknown, defaulting to 1000 [ 212.309829][ T9060] syz.4.733 (9060) used greatest stack depth: 17408 bytes left [ 213.192434][ T9105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.743'. [ 213.841660][ T9083] wg1 speed is unknown, defaulting to 1000 [ 213.923318][ T9083] lo speed is unknown, defaulting to 1000 [ 213.927570][ T9087] lo speed is unknown, defaulting to 1000 [ 214.145474][ T9118] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 214.169763][ T9118] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.179473][ T9118] bond0: (slave team0): Enslaving as an active interface with an up link [ 214.220603][ T9118] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 214.529356][ T9087] wg1 speed is unknown, defaulting to 1000 [ 214.542859][ T9087] lo speed is unknown, defaulting to 1000 [ 215.134827][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'. [ 215.519316][ T30] audit: type=1800 audit(1762497949.704:2): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.751" name="memory.events" dev="tmpfs" ino=898 res=0 errno=0 [ 215.861116][ T9142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.755'. [ 216.414773][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 216.481843][ T9149] lo speed is unknown, defaulting to 1000 [ 216.542933][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.606740][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.676387][ T6462] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 216.731522][ T50] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 217.098570][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 217.212177][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.220290][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.230863][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.240211][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.247694][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.258605][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.269204][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.278911][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.289042][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.296278][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.379037][ T3450] bond1 (unregistering): (slave bridge1): Releasing active interface [ 217.566400][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.577743][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.597170][ T3450] bond0 (unregistering): Released all slaves [ 217.693475][ T3450] bond1 (unregistering): Released all slaves [ 217.710201][ T9149] wg1 speed is unknown, defaulting to 1000 [ 217.718954][ T9149] lo speed is unknown, defaulting to 1000 [ 217.862459][ T9162] lo speed is unknown, defaulting to 1000 [ 217.878868][ T3450] tipc: Left network mode [ 218.185489][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 218.486510][ T9186] vlan2: entered promiscuous mode [ 218.493195][ T9186] bond0: entered promiscuous mode [ 218.499224][ T9186] team0: entered promiscuous mode [ 218.581415][ T9191] batadv_slave_0: entered promiscuous mode [ 218.602749][ T9194] netlink: 64 bytes leftover after parsing attributes in process `syz.3.767'. [ 218.623058][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 218.633824][ T9163] lo speed is unknown, defaulting to 1000 [ 218.830075][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'. [ 218.881336][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 218.917087][ T9211] Bluetooth: MGMT ver 1.23 [ 219.127003][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 219.227735][ T9163] wg1 speed is unknown, defaulting to 1000 [ 219.245046][ T9163] lo speed is unknown, defaulting to 1000 [ 219.245407][ T9162] wg1 speed is unknown, defaulting to 1000 [ 219.280297][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 219.362199][ T9162] lo speed is unknown, defaulting to 1000 [ 219.374428][ T5830] Bluetooth: hci0: command tx timeout [ 219.374566][ T5831] Bluetooth: hci1: command tx timeout [ 219.460042][ T9227] No such timeout policy "syz1" [ 219.485522][ T9224] lo speed is unknown, defaulting to 1000 [ 219.832654][ T9240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.775'. [ 219.932239][ T9224] wg1 speed is unknown, defaulting to 1000 [ 220.078243][ T9224] lo speed is unknown, defaulting to 1000 [ 220.168837][ T3450] hsr_slave_0: left promiscuous mode [ 220.187935][ T3450] hsr_slave_1: left promiscuous mode [ 220.199391][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.214141][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.558943][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 220.592048][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 221.330032][ T9269] wg1: entered promiscuous mode [ 221.336436][ T9269] wg1: entered allmulticast mode [ 221.384403][ T918] wg1 speed is unknown, defaulting to 1000 [ 221.394709][ T918] syz0: Port: 1 Link ACTIVE [ 221.395137][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 221.455684][ T5831] Bluetooth: hci1: command tx timeout [ 221.455697][ T5830] Bluetooth: hci0: command tx timeout [ 221.602601][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 221.672342][ T3450] IPVS: stop unused estimator thread 0... [ 221.789887][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.807843][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.820354][ T9162] bridge_slave_0: entered allmulticast mode [ 221.832900][ T9162] bridge_slave_0: entered promiscuous mode [ 221.847447][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.874201][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.881540][ T9162] bridge_slave_1: entered allmulticast mode [ 221.906254][ T9162] bridge_slave_1: entered promiscuous mode [ 222.168652][ T9282] syzkaller1: entered promiscuous mode [ 222.179935][ T9282] syzkaller1: entered allmulticast mode [ 222.210653][ T9306] __nla_validate_parse: 2 callbacks suppressed [ 222.210669][ T9306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.785'. [ 222.261055][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.282505][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.487991][ T9162] team0: Port device team_slave_0 added [ 222.499743][ T9303] lo speed is unknown, defaulting to 1000 [ 222.506463][ T9162] team0: Port device team_slave_1 added [ 222.549317][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.561661][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.588390][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.618019][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.625200][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.652029][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.706119][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.733418][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.748126][ T9163] bridge_slave_0: entered allmulticast mode [ 222.755945][ T9163] bridge_slave_0: entered promiscuous mode [ 222.772193][ T9303] wg1 speed is unknown, defaulting to 1000 [ 223.025692][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.034306][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.051789][ T9163] bridge_slave_1: entered allmulticast mode [ 223.084944][ T9163] bridge_slave_1: entered promiscuous mode [ 223.092932][ T9303] lo speed is unknown, defaulting to 1000 [ 223.231912][ T9162] hsr_slave_0: entered promiscuous mode [ 223.243587][ T9162] hsr_slave_1: entered promiscuous mode [ 223.250301][ T9162] debugfs: 'hsr0' already exists in 'hsr' [ 223.256319][ T9162] Cannot create hsr debugfs directory [ 223.351716][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.409288][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.534122][ T5830] Bluetooth: hci0: command tx timeout [ 223.534648][ T5831] Bluetooth: hci1: command tx timeout [ 223.637697][ T9163] team0: Port device team_slave_0 added [ 223.655256][ T9163] team0: Port device team_slave_1 added [ 224.021322][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.039232][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.077416][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.087943][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'. [ 224.129093][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.136465][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.162769][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.183715][ T9336] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 224.237708][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 224.437476][ T9163] hsr_slave_0: entered promiscuous mode [ 224.449163][ T9163] hsr_slave_1: entered promiscuous mode [ 224.456160][ T9163] debugfs: 'hsr0' already exists in 'hsr' [ 224.462033][ T9163] Cannot create hsr debugfs directory [ 224.468745][ T9343] lo speed is unknown, defaulting to 1000 [ 224.476309][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 224.519017][ T9351] tipc: Failed to remove unknown binding: 66,1,1/0:220482218/220482220 [ 224.532425][ T9351] tipc: Failed to remove unknown binding: 66,1,1/0:220482218/220482220 [ 224.544643][ T9351] tipc: Failed to remove unknown binding: 66,1,1/0:220482218/220482220 [ 224.621164][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 224.662966][ T9353] bond2 (unregistering): Released all slaves [ 224.728001][ T9343] wg1 speed is unknown, defaulting to 1000 [ 224.728020][ T9162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.791905][ T9343] lo speed is unknown, defaulting to 1000 [ 224.792311][ T9162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.882679][ T9362] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 224.899783][ T9362] netlink: 224 bytes leftover after parsing attributes in process `syz.3.793'. [ 224.913788][ T9162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.938284][ T9162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.464620][ T9387] netlink: 156 bytes leftover after parsing attributes in process `syz.3.796'. [ 225.616850][ T5831] Bluetooth: hci1: command tx timeout [ 225.624263][ T5831] Bluetooth: hci0: command tx timeout [ 225.935991][ T9163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.025353][ T9163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.046957][ T9163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.076018][ T9163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.139997][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.241363][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.305079][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.312276][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.381094][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.388267][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.590945][ T9413] xt_TCPMSS: Only works on TCP SYN packets [ 226.711603][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.716204][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 226.736769][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.773306][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.780515][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.825684][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.832875][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.098352][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.260431][ T9427] syzkaller0: entered promiscuous mode [ 227.267027][ T9427] syzkaller0: entered allmulticast mode [ 228.023214][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 228.912988][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.972022][ T9468] vlan2: entered promiscuous mode [ 228.986916][ T9468] vlan2: entered allmulticast mode [ 229.002290][ T9468] hsr_slave_1: entered allmulticast mode [ 229.039766][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 229.191479][ T9475] lo speed is unknown, defaulting to 1000 [ 229.318585][ T9162] veth0_vlan: entered promiscuous mode [ 229.366168][ T9162] veth1_vlan: entered promiscuous mode [ 229.471901][ T9162] veth0_macvtap: entered promiscuous mode [ 229.497798][ T9162] veth1_macvtap: entered promiscuous mode [ 229.572794][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.615286][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.642119][ T9478] lo speed is unknown, defaulting to 1000 [ 229.658520][ T9475] wg1 speed is unknown, defaulting to 1000 [ 229.671750][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.681738][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.701084][ T9475] lo speed is unknown, defaulting to 1000 [ 229.707934][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.728002][ T9163] veth0_vlan: entered promiscuous mode [ 229.739680][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.788327][ T9163] veth1_vlan: entered promiscuous mode [ 229.968424][ T9163] veth0_macvtap: entered promiscuous mode [ 230.007425][ T9163] veth1_macvtap: entered promiscuous mode [ 230.036454][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.058980][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.069872][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.100331][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.108048][ T9478] wg1 speed is unknown, defaulting to 1000 [ 230.132507][ T9478] lo speed is unknown, defaulting to 1000 [ 230.139134][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.158672][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.178602][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.204587][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.255412][ T3002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.290869][ T3002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.549996][ T9497] lo speed is unknown, defaulting to 1000 [ 230.608007][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.622680][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.757769][ T6462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.775826][ T6462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.100163][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 231.114954][ T9497] wg1 speed is unknown, defaulting to 1000 [ 231.115142][ T9500] lo speed is unknown, defaulting to 1000 [ 231.122412][ T9497] lo speed is unknown, defaulting to 1000 [ 231.349273][ T9524] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 231.390670][ T9524] bond2: (slave erspan0): Releasing active interface [ 231.424146][ T9524] ip6gretap2: entered promiscuous mode [ 231.478143][ T9524] bond0: (slave team0): Releasing backup interface [ 231.526593][ T9532] netlink: 'syz.2.815': attribute type 10 has an invalid length. [ 231.549769][ T9524] team0: left promiscuous mode [ 231.588147][ T9524] batadv_slave_1: left allmulticast mode [ 231.594008][ T9524] bridge0: port 1(batadv_slave_1) entered disabled state [ 231.631684][ T9524] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.768605][ T9532] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 231.780307][ T9532] bond0: (slave wlan1): refused to change device type [ 232.025276][ T9500] wg1 speed is unknown, defaulting to 1000 [ 232.042886][ T9500] lo speed is unknown, defaulting to 1000 [ 232.568429][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 232.724090][ T9552] lo speed is unknown, defaulting to 1000 [ 232.996192][ T9559] netlink: 156 bytes leftover after parsing attributes in process `syz.5.820'. [ 233.067334][ T9557] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.150561][ T9562] vlan0: entered promiscuous mode [ 233.184305][ T9562] vlan0: entered allmulticast mode [ 233.193626][ T9562] hsr_slave_1: entered allmulticast mode [ 233.217358][ T9552] wg1 speed is unknown, defaulting to 1000 [ 233.240497][ T9557] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.265472][ T9552] lo speed is unknown, defaulting to 1000 [ 233.301983][ T9569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.348030][ T9557] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.388604][ T9573] No such timeout policy "syz1" [ 233.423139][ T9572] lo speed is unknown, defaulting to 1000 [ 233.470424][ T9557] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.665785][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 233.712840][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.737124][ T3450] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.763857][ T3450] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.787167][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.826716][ T9572] wg1 speed is unknown, defaulting to 1000 [ 233.854001][ T9572] lo speed is unknown, defaulting to 1000 [ 234.453003][ T9592] lo speed is unknown, defaulting to 1000 [ 234.545027][ T9593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 235.014743][ T9592] wg1 speed is unknown, defaulting to 1000 [ 235.044198][ T9592] lo speed is unknown, defaulting to 1000 [ 235.109092][ T9614] netlink: 44 bytes leftover after parsing attributes in process `syz.6.834'. [ 236.323249][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 237.822499][ T9672] syzkaller0: entered promiscuous mode [ 237.838351][ T9672] syzkaller0: entered allmulticast mode [ 237.915565][ T9677] netlink: 64 bytes leftover after parsing attributes in process `syz.2.843'. [ 238.225080][ T9688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.846'. [ 238.283619][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 239.718459][ T9681] lo speed is unknown, defaulting to 1000 [ 240.436859][ T9687] lo speed is unknown, defaulting to 1000 [ 240.446390][ T9681] wg1 speed is unknown, defaulting to 1000 [ 240.471128][ T9681] lo speed is unknown, defaulting to 1000 [ 241.042644][ T9732] syzkaller0: entered promiscuous mode [ 241.074146][ T9732] syzkaller0: entered allmulticast mode [ 241.091657][ T9687] wg1 speed is unknown, defaulting to 1000 [ 241.095030][ T9694] lo speed is unknown, defaulting to 1000 [ 241.964321][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.854'. [ 242.684590][ T9687] lo speed is unknown, defaulting to 1000 [ 242.684624][ T9713] lo speed is unknown, defaulting to 1000 [ 242.690394][ T9694] wg1 speed is unknown, defaulting to 1000 [ 242.702373][ T3002] ip6gretap2: left promiscuous mode [ 242.731982][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.854'. [ 242.924214][ T9759] netlink: 6 bytes leftover after parsing attributes in process `syz.5.855'. [ 242.972269][ T9759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.151815][ T9713] wg1 speed is unknown, defaulting to 1000 [ 243.182724][ T9694] lo speed is unknown, defaulting to 1000 [ 243.352761][ T9713] lo speed is unknown, defaulting to 1000 [ 244.210376][ T9782] lo speed is unknown, defaulting to 1000 [ 244.458858][ T9793] syzkaller0: entered promiscuous mode [ 244.496695][ T9793] syzkaller0: entered allmulticast mode [ 244.884900][ T9782] wg1 speed is unknown, defaulting to 1000 [ 245.533836][ T9829] netlink: 'syz.0.863': attribute type 13 has an invalid length. [ 246.526701][ T9782] lo speed is unknown, defaulting to 1000 [ 246.551494][ T9827] netlink: 240 bytes leftover after parsing attributes in process `syz.0.863'. [ 247.009294][ T6707] lo speed is unknown, defaulting to 1000 [ 247.018342][ T6707] syz1: Port: 1 Link DOWN [ 247.028583][ T3450] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.060331][ T3450] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.101513][ T3450] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.120932][ T3450] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.415106][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 248.243216][ T9866] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 248.834351][ T9876] netlink: 240 bytes leftover after parsing attributes in process `syz.6.871'. [ 249.018343][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 249.451369][ T9882] bridge_slave_1: left allmulticast mode [ 249.494133][ T9882] bridge_slave_1: left promiscuous mode [ 249.500788][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.550295][ T9882] bridge_slave_0: left allmulticast mode [ 249.573012][ T9882] bridge_slave_0: left promiscuous mode [ 249.584288][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.965061][ T9894] netlink: 6 bytes leftover after parsing attributes in process `syz.2.877'. [ 249.975976][ T9894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.002225][ T9883] lo speed is unknown, defaulting to 1000 [ 250.200046][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.880'. [ 250.209003][ T9901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.224566][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.286072][ T9901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.302092][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.932246][ T9883] wg1 speed is unknown, defaulting to 1000 [ 250.960088][ T9883] lo speed is unknown, defaulting to 1000 [ 251.026636][ T9917] netlink: 36 bytes leftover after parsing attributes in process `syz.5.884'. [ 251.365432][ T9921] lo speed is unknown, defaulting to 1000 [ 251.519704][ T9928] netlink: 'syz.6.887': attribute type 16 has an invalid length. [ 251.532021][ T9928] netlink: 'syz.6.887': attribute type 17 has an invalid length. [ 251.696844][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.704819][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.841999][ T9928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.917270][ T9928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.117497][ T9921] wg1 speed is unknown, defaulting to 1000 [ 252.117515][ T3002] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.176307][ T9941] xt_TCPMSS: Only works on TCP SYN packets [ 252.201602][ T3002] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.223948][ T3002] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.244162][ T2899] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.289490][ T9921] lo speed is unknown, defaulting to 1000 [ 252.306060][ T9936] smc: removing ib device syz2 [ 252.312114][ T9932] wg1 speed is unknown, defaulting to 1000 [ 252.320004][ T9932] lo speed is unknown, defaulting to 1000 [ 252.404589][ T9938] siw: device registration error -23 [ 252.562425][ T9947] netlink: 6 bytes leftover after parsing attributes in process `syz.6.890'. [ 252.571559][ T9947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.927215][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.892'. [ 253.040774][ T9958] netlink: 'syz.3.893': attribute type 13 has an invalid length. [ 253.063945][ T9958] netlink: 'syz.3.893': attribute type 17 has an invalid length. [ 253.073303][ T9959] netlink: 'syz.0.894': attribute type 13 has an invalid length. [ 253.084904][ T9955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.092990][ T9959] netlink: 'syz.0.894': attribute type 17 has an invalid length. [ 253.115635][ T9955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.255922][ T9958] sit0: left promiscuous mode [ 253.262217][ T9958] ip6tnl0: left promiscuous mode [ 253.268917][ T9958] ip6gre0: left promiscuous mode [ 253.275616][ T9958] syz_tun: left promiscuous mode [ 253.290789][ T9958] ip6gretap0: left promiscuous mode [ 253.298670][ T9958] bridge0: left promiscuous mode [ 253.305454][ T9958] bond0: left promiscuous mode [ 253.310448][ T9958] bond_slave_0: left promiscuous mode [ 253.317328][ T9958] bond_slave_1: left promiscuous mode [ 253.323123][ T9958] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 253.333010][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.342165][ T9958] team0: left promiscuous mode [ 253.347658][ T9958] team_slave_0: left promiscuous mode [ 253.353374][ T9958] team_slave_1: left promiscuous mode [ 253.361390][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.369374][ T9958] nlmon0: left promiscuous mode [ 253.378162][ T9958] caif0: left promiscuous mode [ 253.383242][ T9958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.490585][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.501809][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.518159][ T9959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.542026][ T5832] lo speed is unknown, defaulting to 1000 [ 253.564253][ T5832] syz1: Port: 1 Link ACTIVE [ 253.675799][ T9962] wg1 speed is unknown, defaulting to 1000 [ 253.716898][ T9963] wg1 speed is unknown, defaulting to 1000 [ 253.726264][ T9962] lo speed is unknown, defaulting to 1000 [ 253.823884][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.917409][ T9963] lo speed is unknown, defaulting to 1000 [ 254.122470][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.898'. [ 254.132752][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.898'. [ 254.488097][ T9981] IPVS: length: 185 != 8 [ 254.501089][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.6.899'. [ 255.487633][ T9995] netlink: 'syz.0.902': attribute type 11 has an invalid length. [ 255.527896][ T9995] netlink: 224 bytes leftover after parsing attributes in process `syz.0.902'. [ 255.595161][ T9996] netlink: 6 bytes leftover after parsing attributes in process `syz.3.903'. [ 255.604635][ T9996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.622840][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.975001][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 256.078745][T10012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.907'. [ 256.307251][T10008] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 256.326355][T10008] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 256.571304][T10011] wg1 speed is unknown, defaulting to 1000 [ 256.587204][T10011] lo speed is unknown, defaulting to 1000 [ 256.730566][T10020] syzkaller0: entered promiscuous mode [ 256.744508][T10020] syzkaller0: entered allmulticast mode [ 256.783261][ T3450] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.806353][ T3450] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.873234][ T3450] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.906472][ T3450] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.931230][T10024] wg1 speed is unknown, defaulting to 1000 [ 257.055560][T10031] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 257.066901][T10024] lo speed is unknown, defaulting to 1000 [ 257.078926][T10030] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 257.509479][T10030] wg1 speed is unknown, defaulting to 1000 [ 257.548857][T10030] lo speed is unknown, defaulting to 1000 [ 257.556908][T10026] wg1 speed is unknown, defaulting to 1000 [ 257.572879][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.914'. [ 257.580878][T10026] lo speed is unknown, defaulting to 1000 [ 257.651165][T10038] IPVS: Scheduler module ip_vs_sip not found [ 257.824410][T10047] netlink: 6 bytes leftover after parsing attributes in process `syz.2.915'. [ 257.858585][T10047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.298382][T10063] netlink: 'syz.2.916': attribute type 4 has an invalid length. [ 258.812137][T10080] wg1 speed is unknown, defaulting to 1000 [ 258.938009][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'. [ 258.964623][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.923'. [ 258.975209][T10080] lo speed is unknown, defaulting to 1000 [ 259.082737][T10085] wg1 speed is unknown, defaulting to 1000 [ 259.147327][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.924'. [ 259.184193][T10085] lo speed is unknown, defaulting to 1000 [ 259.270680][T10088] wg1 speed is unknown, defaulting to 1000 [ 259.348966][T10088] lo speed is unknown, defaulting to 1000 [ 259.460697][T10099] netlink: 14 bytes leftover after parsing attributes in process `syz.2.926'. [ 259.559759][T10102] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 259.573795][T10102] bond1 (unregistering): Released all slaves [ 259.621113][T10106] netlink: 84 bytes leftover after parsing attributes in process `syz.5.925'. [ 259.762601][T10099] bond0 (unregistering): Released all slaves [ 259.873749][T10109] netlink: 6 bytes leftover after parsing attributes in process `syz.0.927'. [ 259.886774][T10109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.604879][T10127] netlink: 'syz.2.932': attribute type 39 has an invalid length. [ 260.786915][T10130] pim6reg: entered allmulticast mode [ 260.873966][T10132] wg1 speed is unknown, defaulting to 1000 [ 261.240203][T10132] lo speed is unknown, defaulting to 1000 [ 261.453017][T10146] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 261.660613][T10152] netlink: 6 bytes leftover after parsing attributes in process `syz.2.940'. [ 261.672054][T10152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.781687][T10149] wg1 speed is unknown, defaulting to 1000 [ 261.789903][T10149] lo speed is unknown, defaulting to 1000 [ 262.049900][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 262.399494][T10165] wg1 speed is unknown, defaulting to 1000 [ 262.417029][T10165] lo speed is unknown, defaulting to 1000 [ 262.672485][T10177] __nla_validate_parse: 2 callbacks suppressed [ 262.672500][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 262.700116][T10177] netlink: 'syz.0.945': attribute type 30 has an invalid length. [ 262.805475][ T3450] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.816620][ T3450] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.853374][ T3450] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.868338][T10173] wg1 speed is unknown, defaulting to 1000 [ 262.879411][T10173] lo speed is unknown, defaulting to 1000 [ 262.880667][ T3450] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.054750][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 263.279124][T10201] netlink: 64 bytes leftover after parsing attributes in process `syz.6.952'. [ 263.303716][T10195] netlink: 'syz.0.958': attribute type 3 has an invalid length. [ 263.346736][T10195] syz_tun: entered allmulticast mode [ 263.372439][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 263.421632][T10195] siw: device registration error -23 [ 263.504685][T10195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.723149][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.950'. [ 263.755772][T10203] wg1 speed is unknown, defaulting to 1000 [ 263.772502][T10194] syz_tun: left allmulticast mode [ 263.782949][T10203] lo speed is unknown, defaulting to 1000 [ 263.869160][T10207] wg1 speed is unknown, defaulting to 1000 [ 263.912931][T10207] lo speed is unknown, defaulting to 1000 [ 264.309167][T10226] wg1 speed is unknown, defaulting to 1000 [ 264.320115][T10226] lo speed is unknown, defaulting to 1000 [ 264.630317][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 265.168621][T10257] wg1 speed is unknown, defaulting to 1000 [ 265.288560][T10257] lo speed is unknown, defaulting to 1000 [ 265.295058][T10262] wg1 speed is unknown, defaulting to 1000 [ 265.327604][T10270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.964'. [ 265.336624][T10262] lo speed is unknown, defaulting to 1000 [ 265.686872][T10275] pim6reg: entered allmulticast mode [ 265.698414][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.965'. [ 265.855134][T10278] xt_limit: Overflow, try lower: 271964/0 [ 265.947193][T10278] netlink: 25 bytes leftover after parsing attributes in process `syz.0.966'. [ 266.136623][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 266.149975][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 266.172571][ T10] lo speed is unknown, defaulting to 1000 [ 266.179022][ T10] syz1: Port: 1 Link DOWN [ 266.333918][T10291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.452498][T10294] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 266.714448][ T30] audit: type=1800 audit(1762498000.904:3): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.969" name="memory.events" dev="tmpfs" ino=1164 res=0 errno=0 [ 266.967725][T10301] wg1 speed is unknown, defaulting to 1000 [ 267.003701][T10301] lo speed is unknown, defaulting to 1000 [ 267.393771][T10311] wg1 speed is unknown, defaulting to 1000 [ 267.469878][T10311] lo speed is unknown, defaulting to 1000 [ 267.583814][T10320] team0: entered promiscuous mode [ 267.642790][T10320] team_slave_0: entered promiscuous mode [ 267.659205][T10320] team_slave_1: entered promiscuous mode [ 267.672831][T10320] bond0: entered promiscuous mode [ 267.678698][T10320] bond_slave_0: entered promiscuous mode [ 267.699030][T10320] bond_slave_1: entered promiscuous mode [ 267.717460][T10320] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 267.738496][T10320] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 267.815877][T10320] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 267.914812][T10320] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 268.000062][T10345] __nla_validate_parse: 3 callbacks suppressed [ 268.000080][T10345] netlink: 156 bytes leftover after parsing attributes in process `syz.0.983'. [ 268.080267][T10339] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.172263][T10314] wg1 speed is unknown, defaulting to 1000 [ 268.207768][T10339] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.313105][T10314] lo speed is unknown, defaulting to 1000 [ 268.415198][T10339] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.496676][ T5831] Bluetooth: hci0: command tx timeout [ 268.540828][T10324] wg1 speed is unknown, defaulting to 1000 [ 268.582953][T10339] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.687887][T10324] lo speed is unknown, defaulting to 1000 [ 268.725838][T10361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.985'. [ 269.003184][T10356] wg1 speed is unknown, defaulting to 1000 [ 269.019800][T10356] lo speed is unknown, defaulting to 1000 [ 269.036178][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.122461][ T3450] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.162586][ T3450] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.239872][ T6462] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.753565][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 270.341398][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 270.763895][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 270.773685][T10437] netlink: 'syz.2.998': attribute type 5 has an invalid length. [ 270.829705][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 271.236533][T10437] geneve2: entered promiscuous mode [ 271.243378][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 271.259146][T10437] geneve2: entered allmulticast mode [ 271.279514][T10421] wg1 speed is unknown, defaulting to 1000 [ 271.314543][ T6462] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 271.342324][ T3002] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 271.368858][T10421] lo speed is unknown, defaulting to 1000 [ 271.466107][ T3002] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 271.488251][ T3002] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 271.517443][T10441] wg1 speed is unknown, defaulting to 1000 [ 271.518967][T10447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1000'. [ 271.525471][T10441] lo speed is unknown, defaulting to 1000 [ 271.604727][T10449] netlink: 'syz.5.1001': attribute type 8 has an invalid length. [ 271.651635][T10448] wg1 speed is unknown, defaulting to 1000 [ 271.695546][T10448] lo speed is unknown, defaulting to 1000 [ 271.702562][T10449] wg1 speed is unknown, defaulting to 1000 [ 271.729212][T10449] lo speed is unknown, defaulting to 1000 [ 272.673742][T10469] wg1 speed is unknown, defaulting to 1000 [ 272.693972][T10469] lo speed is unknown, defaulting to 1000 [ 273.052001][T10482] wg1 speed is unknown, defaulting to 1000 [ 273.098043][T10482] lo speed is unknown, defaulting to 1000 [ 273.111651][T10470] wg1 speed is unknown, defaulting to 1000 [ 273.166273][T10470] lo speed is unknown, defaulting to 1000 [ 274.020946][T10504] netlink: 'syz.3.1012': attribute type 39 has an invalid length. [ 275.403682][T10519] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1017'. [ 276.137000][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1021'. [ 276.208321][T10531] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 276.226609][T10532] netlink: 'syz.3.1023': attribute type 2 has an invalid length. [ 276.245545][T10532] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 276.272652][T10532] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1023'. [ 276.390664][T10540] netlink: 'syz.6.1021': attribute type 3 has an invalid length. [ 276.419620][T10540] netlink: 'syz.6.1021': attribute type 1 has an invalid length. [ 276.489093][T10540] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1021'. [ 276.689113][T10548] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1025'. [ 276.837703][T10551] netlink: 'syz.3.1026': attribute type 39 has an invalid length. [ 278.070233][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 278.081129][T10592] netlink: 'syz.5.1036': attribute type 2 has an invalid length. [ 278.220102][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 278.375211][T10609] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1040'. [ 278.535385][T10611] wg1 speed is unknown, defaulting to 1000 [ 278.546830][T10611] lo speed is unknown, defaulting to 1000 [ 278.665738][T10614] tipc: Enabled bearer , priority 0 [ 278.699028][T10614] syzkaller0: entered promiscuous mode [ 278.705404][T10614] syzkaller0: entered allmulticast mode [ 278.790632][T10614] tipc: Resetting bearer [ 278.802184][T10613] tipc: Resetting bearer [ 278.830712][T10613] tipc: Disabling bearer [ 279.078721][T10632] wg1 speed is unknown, defaulting to 1000 [ 279.091979][T10632] lo speed is unknown, defaulting to 1000 [ 279.569319][T10648] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1052'. [ 279.634226][T10642] wg1 speed is unknown, defaulting to 1000 [ 279.687283][T10651] wg1 speed is unknown, defaulting to 1000 [ 279.704598][T10642] lo speed is unknown, defaulting to 1000 [ 279.788925][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'. [ 279.810127][T10651] lo speed is unknown, defaulting to 1000 [ 280.083070][T10633] wg1 speed is unknown, defaulting to 1000 [ 280.198870][T10633] lo speed is unknown, defaulting to 1000 [ 280.431905][T10643] wg1 speed is unknown, defaulting to 1000 [ 280.449374][T10643] lo speed is unknown, defaulting to 1000 [ 281.100230][T10689] __nla_validate_parse: 2 callbacks suppressed [ 281.100247][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1073'. [ 281.360265][T10693] wg1 speed is unknown, defaulting to 1000 [ 281.375762][T10693] lo speed is unknown, defaulting to 1000 [ 281.488996][T10698] wg1 speed is unknown, defaulting to 1000 [ 281.518332][T10698] lo speed is unknown, defaulting to 1000 [ 281.868638][T10709] Bluetooth: MGMT ver 1.23 [ 281.979507][T10711] syzkaller0: entered promiscuous mode [ 281.987146][T10711] syzkaller0: entered allmulticast mode [ 283.229118][T10734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1077'. [ 283.323822][T10739] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1076'. [ 284.609347][T10742] netlink: 'syz.6.1076': attribute type 29 has an invalid length. [ 284.691168][T10732] wg1 speed is unknown, defaulting to 1000 [ 284.744954][T10755] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1079'. [ 284.757482][T10750] wg1 speed is unknown, defaulting to 1000 [ 284.766782][T10732] lo speed is unknown, defaulting to 1000 [ 284.775368][T10750] lo speed is unknown, defaulting to 1000 [ 284.805521][T10759] netlink: 'syz.0.1080': attribute type 2 has an invalid length. [ 284.853061][T10762] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1081'. [ 285.090330][T10768] netlink: 'syz.5.1082': attribute type 16 has an invalid length. [ 285.109187][T10768] netlink: 'syz.5.1082': attribute type 17 has an invalid length. [ 285.146832][T10768] IPv6: NLM_F_REPLACE set, but no existing node found! [ 285.352903][T10771] wg1 speed is unknown, defaulting to 1000 [ 285.360717][T10771] lo speed is unknown, defaulting to 1000 [ 285.641708][T10772] wg1 speed is unknown, defaulting to 1000 [ 285.683236][T10772] lo speed is unknown, defaulting to 1000 [ 285.898427][T10778] wg1 speed is unknown, defaulting to 1000 [ 285.907298][T10778] lo speed is unknown, defaulting to 1000 [ 286.184607][T10789] syz.6.1086 (10789) used obsolete PPPIOCDETACH ioctl [ 286.494871][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1090'. [ 286.925839][T10807] veth0: entered promiscuous mode [ 286.931985][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 286.985934][T10807] veth0 (unregistering): left promiscuous mode [ 287.019523][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1095'. [ 287.147151][T10812] wg1 speed is unknown, defaulting to 1000 [ 287.512422][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1098'. [ 287.529097][T10812] lo speed is unknown, defaulting to 1000 [ 287.534222][T10827] wg1 speed is unknown, defaulting to 1000 [ 287.609639][T10827] lo speed is unknown, defaulting to 1000 [ 287.680807][T10834] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1099'. [ 287.689955][T10834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.901938][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 287.914391][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 288.059229][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 288.309737][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 288.451065][T10856] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1104'. [ 288.557076][T10863] siw: device registration error -23 [ 288.568322][T10863] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 288.617975][T10863] xt_TCPMSS: Only works on TCP SYN packets [ 288.921797][T10870] wg1 speed is unknown, defaulting to 1000 [ 288.979071][T10871] wg1 speed is unknown, defaulting to 1000 [ 288.981081][T10870] lo speed is unknown, defaulting to 1000 [ 289.018639][T10871] lo speed is unknown, defaulting to 1000 [ 289.070067][T10877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.111035][T10866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.261207][T10879] netlink: 'syz.2.1106': attribute type 3 has an invalid length. [ 289.262862][T10880] wg1 speed is unknown, defaulting to 1000 [ 289.355079][T10880] lo speed is unknown, defaulting to 1000 [ 289.879621][T10904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.892785][T10904] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.939370][T10904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.852535][T10922] syzkaller0: entered promiscuous mode [ 290.877325][T10922] syzkaller0: entered allmulticast mode [ 292.287922][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.448042][T10962] __nla_validate_parse: 10 callbacks suppressed [ 292.448059][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 292.642932][T10973] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1128'. [ 292.686095][T10976] netlink: 'syz.6.1129': attribute type 6 has an invalid length. [ 292.833627][T10982] wg1 speed is unknown, defaulting to 1000 [ 292.846052][T10982] lo speed is unknown, defaulting to 1000 [ 292.879749][T10984] veth0: entered promiscuous mode [ 293.028867][T10982] netlink: 'syz.6.1131': attribute type 16 has an invalid length. [ 293.037255][T10982] netlink: 'syz.6.1131': attribute type 17 has an invalid length. [ 293.051859][T10982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.081729][T10984] veth0: left promiscuous mode [ 293.780032][T11002] syzkaller0: entered promiscuous mode [ 293.841549][T11002] syzkaller0: entered allmulticast mode [ 295.601318][T11039] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1143'. [ 295.625997][T11039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.723005][T11023] wg1 speed is unknown, defaulting to 1000 [ 295.759657][T11023] lo speed is unknown, defaulting to 1000 [ 295.872588][T11049] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1147'. [ 295.889210][T11051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1148'. [ 296.642821][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.983740][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1152'. [ 297.072137][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1152'. [ 297.139419][T11076] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 297.510319][T11092] syzkaller0: entered promiscuous mode [ 297.516816][T11092] syzkaller0: entered allmulticast mode [ 297.597429][T11100] Bluetooth: MGMT ver 1.23 [ 297.622145][T11095] syzkaller0: entered promiscuous mode [ 297.634232][T11095] syzkaller0: entered allmulticast mode [ 297.775188][T11105] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1161'. [ 297.783462][T11106] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1160'. [ 297.786967][T11103] wg1 speed is unknown, defaulting to 1000 [ 297.801806][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1160'. [ 297.807916][T11103] lo speed is unknown, defaulting to 1000 [ 297.828835][ T5831] Bluetooth: hci1: link tx timeout [ 297.834954][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 297.844302][ T5831] Bluetooth: hci1: link tx timeout [ 297.849506][ T5831] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 297.858262][ T5831] Bluetooth: hci1: link tx timeout [ 297.863467][ T5831] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 297.873219][ T5831] Bluetooth: hci1: link tx timeout [ 297.878652][ T5831] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.008191][T11111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1162'. [ 299.944601][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 300.444337][T11143] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1167'. [ 301.509081][T11128] wg1 speed is unknown, defaulting to 1000 [ 301.585135][T11128] lo speed is unknown, defaulting to 1000 [ 301.656509][T11147] netlink: 'syz.6.1168': attribute type 3 has an invalid length. [ 301.693728][T11147] syz_tun: entered allmulticast mode [ 301.708174][T11147] siw: device registration error -23 [ 301.809675][ T3002] bond0: (slave bond_slave_0): interface is now down [ 301.819531][T11147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.826590][ T3002] bond0: (slave bond_slave_1): interface is now down [ 301.839889][T11147] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.856621][ T3450] bond0: (slave bond_slave_0): interface is now down [ 301.863485][ T3450] bond0: (slave bond_slave_1): interface is now down [ 301.873044][T11147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.904106][ T3450] bond0: (slave bond_slave_0): interface is now down [ 301.914361][ T3450] bond0: (slave bond_slave_1): interface is now down [ 301.954099][ T3450] bond0: (slave bond_slave_0): interface is now down [ 301.960792][ T3450] bond0: (slave bond_slave_1): interface is now down [ 301.989712][T11146] syz_tun: left allmulticast mode [ 302.005030][ T3450] bond0: (slave bond_slave_0): interface is now down [ 302.012255][T11154] wg1 speed is unknown, defaulting to 1000 [ 302.014021][ T3450] bond0: (slave bond_slave_1): interface is now down [ 302.020316][T11154] lo speed is unknown, defaulting to 1000 [ 302.050321][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 302.144357][ T3450] bond0: (slave bond_slave_0): interface is now down [ 302.151069][ T3450] bond0: (slave bond_slave_1): interface is now down [ 302.184703][ T3450] bond0: now running without any active interface! [ 302.311001][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1170'. [ 302.333138][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 302.384794][T11166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1171'. [ 302.438082][T11163] netlink: 'syz.2.1171': attribute type 3 has an invalid length. [ 302.447356][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'. [ 302.623551][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1172'. [ 302.702154][T11177] veth0: entered promiscuous mode [ 302.721686][T11173] wg1 speed is unknown, defaulting to 1000 [ 302.756365][T11178] wg1 speed is unknown, defaulting to 1000 [ 302.762473][T11173] lo speed is unknown, defaulting to 1000 [ 302.793414][T11178] lo speed is unknown, defaulting to 1000 [ 302.842734][T11183] netlink: 'syz.3.1174': attribute type 16 has an invalid length. [ 302.936540][T11183] netlink: 'syz.3.1174': attribute type 17 has an invalid length. [ 303.039572][T11183] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.077682][T11183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.313859][T11177] veth0: left promiscuous mode [ 303.600206][T11203] wg1 speed is unknown, defaulting to 1000 [ 303.608271][T11203] lo speed is unknown, defaulting to 1000 [ 304.129776][T11211] batadv_slave_0: mtu less than device minimum [ 304.569156][T11225] __nla_validate_parse: 1 callbacks suppressed [ 304.569173][T11225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1183'. [ 304.828161][T11237] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1185'. [ 304.960619][T11233] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 305.077022][T11243] netlink: 'syz.5.1187': attribute type 1 has an invalid length. [ 305.087452][T11238] wg1 speed is unknown, defaulting to 1000 [ 305.098937][T11243] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1187'. [ 305.102997][T11238] lo speed is unknown, defaulting to 1000 [ 305.131263][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1187'. [ 305.161622][T11243] NCSI netlink: No device for ifindex 0 [ 305.239516][T11246] gretap0: entered promiscuous mode [ 305.251100][T11246] macsec1: entered promiscuous mode [ 305.285778][T11246] macsec1: entered allmulticast mode [ 305.291090][T11246] gretap0: entered allmulticast mode [ 305.335420][T11246] gretap0: left allmulticast mode [ 305.352171][T11246] gretap0: left promiscuous mode [ 305.606996][T11233] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 305.699375][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1188'. [ 305.765003][T11252] wg1 speed is unknown, defaulting to 1000 [ 305.787666][T11233] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 305.825461][T11252] lo speed is unknown, defaulting to 1000 [ 305.917962][T11258] wg1 speed is unknown, defaulting to 1000 [ 305.949068][T11261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1191'. [ 305.967885][T11233] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 306.078479][T11258] lo speed is unknown, defaulting to 1000 [ 306.371330][T11275] wg1 speed is unknown, defaulting to 1000 [ 306.397852][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 306.505680][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 306.529716][ T6462] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 306.540258][T11275] lo speed is unknown, defaulting to 1000 [ 306.600969][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 306.650561][ T6462] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 306.885360][T11289] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1197'. [ 306.981173][T11295] geneve3: entered promiscuous mode [ 307.015863][ T60] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56685 - 0 [ 307.027737][ T60] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56685 - 0 [ 307.036154][ T60] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56685 - 0 [ 307.326274][ T60] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56685 - 0 [ 307.950925][T11312] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1202'. [ 307.999064][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1202'. [ 308.355876][T11321] netlink: 'syz.3.1205': attribute type 3 has an invalid length. [ 308.383488][T11321] syz_tun: entered allmulticast mode [ 308.396810][T11321] siw: device registration error -23 [ 308.428236][T11321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.474816][T11319] syz_tun: left allmulticast mode [ 308.843163][T11339] wg1 speed is unknown, defaulting to 1000 [ 308.854115][T11339] lo speed is unknown, defaulting to 1000 [ 308.956518][T11345] wg1 speed is unknown, defaulting to 1000 [ 308.964178][T11345] lo speed is unknown, defaulting to 1000 [ 309.600937][T11358] wg1 speed is unknown, defaulting to 1000 [ 309.617704][T11358] lo speed is unknown, defaulting to 1000 [ 309.775287][T11366] __nla_validate_parse: 7 callbacks suppressed [ 309.775305][T11366] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1217'. [ 309.824623][T11370] IPVS: set_ctl: invalid protocol: 11146 0.0.0.0:20000 [ 309.836006][T11364] team_slave_0 (unregistering): left promiscuous mode [ 309.849076][T11364] team0: Port device team_slave_0 removed [ 309.890206][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 309.902481][T11377] netlink: 'syz.6.1218': attribute type 4 has an invalid length. [ 310.120840][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 310.153329][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1223'. [ 310.166304][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 310.178773][T11387] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1221'. [ 310.197740][T11385] wg1 speed is unknown, defaulting to 1000 [ 310.295491][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'. [ 310.309412][T11385] lo speed is unknown, defaulting to 1000 [ 310.511008][T11390] wg1 speed is unknown, defaulting to 1000 [ 310.533009][T11390] lo speed is unknown, defaulting to 1000 [ 310.562555][T11394] wg1 speed is unknown, defaulting to 1000 [ 310.588725][T11397] wg1 speed is unknown, defaulting to 1000 [ 310.608544][T11394] lo speed is unknown, defaulting to 1000 [ 310.635864][T11397] lo speed is unknown, defaulting to 1000 [ 310.800815][T11404] wg1 speed is unknown, defaulting to 1000 [ 310.829364][T11404] lo speed is unknown, defaulting to 1000 [ 310.853196][T11411] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 310.864457][T11411] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1228'. [ 311.110263][T11419] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 311.122036][T11419] ip6t_rpfilter: unknown options [ 311.573217][T11426] wg1 speed is unknown, defaulting to 1000 [ 311.582909][T11426] lo speed is unknown, defaulting to 1000 [ 312.172376][T11457] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 312.214638][T11457] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56685 - 0 [ 312.286153][T11463] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1236'. [ 312.395554][T11457] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 312.434026][T11457] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56685 - 0 [ 312.682866][T11457] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 312.720763][T11457] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56685 - 0 [ 312.843742][T11457] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 312.874709][T11457] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56685 - 0 [ 313.049863][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 56685 - 0 [ 313.075679][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 313.088646][T11481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.165175][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 56685 - 0 [ 313.173468][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 313.203807][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 56685 - 0 [ 313.243706][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 313.268869][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 56685 - 0 [ 313.304144][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 313.321695][T11473] netlink: 'syz.6.1240': attribute type 3 has an invalid length. [ 313.396669][T11481] netlink: 'syz.6.1240': attribute type 5 has an invalid length. [ 313.438638][T11492] netlink: 'syz.5.1242': attribute type 39 has an invalid length. [ 313.518592][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1243'. [ 313.680315][T11496] wg1 speed is unknown, defaulting to 1000 [ 313.836688][T11496] lo speed is unknown, defaulting to 1000 [ 314.601456][T11518] netlink: 'syz.2.1248': attribute type 6 has an invalid length. [ 314.692911][T11521] syzkaller0: entered promiscuous mode [ 314.705513][T11521] syzkaller0: entered allmulticast mode [ 314.839559][ T30] audit: type=1800 audit(1762498049.014:4): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="cgroup.controllers" dev="tmpfs" ino=521 res=0 errno=0 [ 315.373101][T11533] __nla_validate_parse: 3 callbacks suppressed [ 315.373118][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1252'. [ 315.524561][T11536] netlink: 'syz.6.1252': attribute type 72 has an invalid length. [ 315.532769][T11536] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1252'. [ 315.598377][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.616127][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.728043][T11535] wg1 speed is unknown, defaulting to 1000 [ 316.767011][T11535] lo speed is unknown, defaulting to 1000 [ 316.897027][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 316.914875][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1255'. [ 317.080772][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 317.883669][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 318.176656][T11563] netlink: 'syz.2.1258': attribute type 11 has an invalid length. [ 318.546197][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 318.588933][T11584] sctp: [Deprecated]: syz.6.1261 (pid 11584) Use of int in max_burst socket option. [ 318.588933][T11584] Use struct sctp_assoc_value instead [ 318.629075][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1261'. [ 318.967131][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 319.863003][T11621] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 319.890662][T11621] netlink: 'syz.0.1272': attribute type 3 has an invalid length. [ 319.911135][T11621] netlink: 'syz.0.1272': attribute type 2 has an invalid length. [ 319.965547][T11621] netlink: 'syz.0.1272': attribute type 3 has an invalid length. [ 319.989075][T11621] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1272'. [ 320.226690][T11634] wg1 speed is unknown, defaulting to 1000 [ 320.246280][T11634] lo speed is unknown, defaulting to 1000 [ 321.040688][T11651] __nla_validate_parse: 1 callbacks suppressed [ 321.040705][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'. [ 321.080436][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1280'. [ 321.103832][T11647] wg1 speed is unknown, defaulting to 1000 [ 321.123944][T11647] lo speed is unknown, defaulting to 1000 [ 321.326911][T11667] netlink: 'syz.6.1282': attribute type 1 has an invalid length. [ 321.387927][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'. [ 321.446965][T11667] netlink: 'syz.6.1282': attribute type 20 has an invalid length. [ 321.581761][T11677] wg1 speed is unknown, defaulting to 1000 [ 321.623113][T11677] lo speed is unknown, defaulting to 1000 [ 321.640389][T11679] wg1 speed is unknown, defaulting to 1000 [ 321.644698][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 321.668235][T11683] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1286'. [ 321.693395][T11679] lo speed is unknown, defaulting to 1000 [ 322.225664][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 322.226048][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 322.316850][T11703] wg1 speed is unknown, defaulting to 1000 [ 322.342689][T11703] lo speed is unknown, defaulting to 1000 [ 322.387839][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 322.548201][T11708] netlink: 'syz.5.1285': attribute type 6 has an invalid length. [ 323.088953][T11731] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1298'. [ 323.285496][T11738] netlink: 'syz.3.1299': attribute type 8 has an invalid length. [ 323.336853][T11736] wg1 speed is unknown, defaulting to 1000 [ 323.376269][T11736] lo speed is unknown, defaulting to 1000 [ 323.478773][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 323.536223][T11741] wg1 speed is unknown, defaulting to 1000 [ 323.651502][T11741] lo speed is unknown, defaulting to 1000 [ 323.934813][T11765] hsr_slave_0: left promiscuous mode [ 324.123118][T11777] netlink: 'syz.0.1311': attribute type 10 has an invalid length. [ 324.651609][T11796] wg1 speed is unknown, defaulting to 1000 [ 324.676844][T11796] lo speed is unknown, defaulting to 1000 [ 324.766149][T11801] netlink: 'syz.6.1317': attribute type 39 has an invalid length. [ 325.120252][T11811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.189401][T11811] bond0: (slave rose0): Enslaving as an active interface with an up link [ 325.802986][T11837] wg1 speed is unknown, defaulting to 1000 [ 325.844557][T11837] lo speed is unknown, defaulting to 1000 [ 326.460237][T11863] netlink: 'syz.6.1330': attribute type 39 has an invalid length. [ 326.746603][T11879] __nla_validate_parse: 12 callbacks suppressed [ 326.746621][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 326.906328][ T60] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.934675][ T60] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.953280][ T60] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.979086][ T50] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.049455][T11843] wg1 speed is unknown, defaulting to 1000 [ 327.080639][T11843] lo speed is unknown, defaulting to 1000 [ 327.136447][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 327.309335][T11893] pim6reg: entered allmulticast mode [ 327.315390][T11896] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1338'. [ 327.718621][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1341'. [ 327.862087][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 327.928740][T11926] pim6reg1: entered promiscuous mode [ 327.978603][T11926] pim6reg1: entered allmulticast mode [ 328.261150][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 328.574849][T11942] wg1 speed is unknown, defaulting to 1000 [ 328.591603][T11942] lo speed is unknown, defaulting to 1000 [ 329.081692][T11972] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1352'. [ 329.107270][T11971] netlink: 'syz.6.1353': attribute type 39 has an invalid length. [ 329.239002][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1354'. [ 329.330882][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'. [ 329.355872][T11982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 329.513625][T11982] bond6: option primary_reselect: invalid value (255) [ 329.542298][T11982] bond6 (unregistering): Released all slaves [ 329.845605][T11996] netlink: 'syz.2.1358': attribute type 21 has an invalid length. [ 329.853525][T11996] netlink: 'syz.2.1358': attribute type 5 has an invalid length. [ 330.150184][T12013] team0: Port device team_slave_0 removed [ 330.735769][T12021] netlink: 'syz.6.1364': attribute type 39 has an invalid length. [ 331.013926][T12033] rdma_rxe: rxe_newlink: failed to add lo [ 331.136221][T12042] vlan2: entered promiscuous mode [ 331.141382][T12042] bond0: entered promiscuous mode [ 331.146654][T12042] bond_slave_0: entered promiscuous mode [ 331.152637][T12042] bond_slave_1: entered promiscuous mode [ 331.179339][T12044] netlink: 'syz.3.1371': attribute type 54 has an invalid length. [ 331.193765][T12042] netlink: 'syz.6.1373': attribute type 14 has an invalid length. [ 331.299409][T12046] netlink: 'syz.6.1376': attribute type 39 has an invalid length. [ 331.329836][T12049] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 331.337864][T12050] wg1 speed is unknown, defaulting to 1000 [ 331.346559][T12050] lo speed is unknown, defaulting to 1000 [ 331.360536][T12049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.461244][T12059] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 331.475176][T12059] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 331.495783][T12051] wg1 speed is unknown, defaulting to 1000 [ 331.513201][T12051] lo speed is unknown, defaulting to 1000 [ 331.858110][T12069] wg1 speed is unknown, defaulting to 1000 [ 331.869982][T12069] lo speed is unknown, defaulting to 1000 [ 331.903452][T12075] __nla_validate_parse: 6 callbacks suppressed [ 331.903469][T12075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1379'. [ 332.110625][T12078] tipc: Enabled bearer , priority 0 [ 332.123659][T12075] wg1 speed is unknown, defaulting to 1000 [ 332.134275][T12078] tipc: Resetting bearer [ 332.151641][T12075] lo speed is unknown, defaulting to 1000 [ 332.609422][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 333.595667][T12078] tipc: Disabling bearer [ 333.644971][T12107] netlink: 'syz.3.1387': attribute type 39 has an invalid length. [ 333.648473][T12106] wg1 speed is unknown, defaulting to 1000 [ 333.741206][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 333.820138][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1391'. [ 333.830740][T12106] lo speed is unknown, defaulting to 1000 [ 333.868219][T12120] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1386'. [ 334.076657][T12110] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.098015][T12118] bond6: (slave macvlan2): Error -22 calling dev_set_mtu [ 334.610182][T12141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.617912][T12141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 334.659825][T12142] wg1 speed is unknown, defaulting to 1000 [ 334.729577][T12142] lo speed is unknown, defaulting to 1000 [ 335.137358][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 335.677445][T12166] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.687834][T12166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.716691][T12170] netlink: 'syz.2.1400': attribute type 39 has an invalid length. [ 336.489350][T12198] netlink: 'syz.2.1407': attribute type 11 has an invalid length. [ 336.543133][T12198] netlink: 'syz.2.1407': attribute type 11 has an invalid length. [ 336.566396][T12198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1407'. [ 336.993023][T12191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.083474][T12207] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1411'. [ 337.561932][T12217] wg1 speed is unknown, defaulting to 1000 [ 337.595156][T12217] lo speed is unknown, defaulting to 1000 [ 337.711221][T12222] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1415'. [ 337.720778][T12222] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1415'. [ 337.765975][T12222] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1415'. [ 337.839857][T12229] wg1 speed is unknown, defaulting to 1000 [ 337.856080][T12229] lo speed is unknown, defaulting to 1000 [ 337.858018][T12222] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1415'. [ 339.700374][T12279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1425'. [ 339.732759][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 339.781790][T12282] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1426'. [ 339.845778][T12282] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1426'. [ 340.027467][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 340.133554][T12290] wg1 speed is unknown, defaulting to 1000 [ 340.154917][T12290] lo speed is unknown, defaulting to 1000 [ 340.469014][T12306] tipc: Started in network mode [ 340.475861][T12306] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 340.499144][T12306] tipc: Enabling of bearer rejected, failed to enable media [ 340.566890][T12306] bridge1: entered promiscuous mode [ 340.584258][T12306] bridge1: entered allmulticast mode [ 340.596301][T12306] team0: Port device bridge1 added [ 340.853894][T12323] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 341.106866][T12330] netlink: 'syz.2.1436': attribute type 39 has an invalid length. [ 341.396568][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.411898][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.419377][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.454370][T12345] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 341.461059][T12349] xt_TCPMSS: Only works on TCP SYN packets [ 341.491364][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.499828][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.508637][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.518286][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.527216][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.535807][T12345] wg1 speed is unknown, defaulting to 1000 [ 341.610563][T12355] wg1 speed is unknown, defaulting to 1000 [ 341.672078][T12355] lo speed is unknown, defaulting to 1000 [ 341.710178][T12355] wg1 speed is unknown, defaulting to 1000 [ 342.067136][T12370] wg1 speed is unknown, defaulting to 1000 [ 342.075763][T12370] lo speed is unknown, defaulting to 1000 [ 342.083192][T12370] wg1 speed is unknown, defaulting to 1000 [ 342.208769][T12373] __nla_validate_parse: 6 callbacks suppressed [ 342.208784][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1448'. [ 342.350344][T12377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.469361][T12381] netlink: 'syz.6.1451': attribute type 39 has an invalid length. [ 342.529409][T12382] netlink: 'syz.3.1450': attribute type 12 has an invalid length. [ 342.895434][T12402] wg1 speed is unknown, defaulting to 1000 [ 342.931954][T12402] lo speed is unknown, defaulting to 1000 [ 342.960030][T12402] wg1 speed is unknown, defaulting to 1000 [ 343.863205][T12426] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1461'. [ 344.122547][T12428] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1460'. [ 344.172760][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 344.538973][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 344.560151][T12441] wg1 speed is unknown, defaulting to 1000 [ 344.598270][T12441] lo speed is unknown, defaulting to 1000 [ 344.642371][T12441] wg1 speed is unknown, defaulting to 1000 [ 344.780372][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1464'. [ 344.805847][T12453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1465'. [ 344.961999][T12465] block nbd0: Unsupported socket: should be TCP or UNIX. [ 345.970623][T12506] wg1 speed is unknown, defaulting to 1000 [ 345.984373][T12506] lo speed is unknown, defaulting to 1000 [ 345.991909][T12506] wg1 speed is unknown, defaulting to 1000 [ 346.354980][T12516] wg1 speed is unknown, defaulting to 1000 [ 346.363167][T12516] lo speed is unknown, defaulting to 1000 [ 346.371388][T12516] wg1 speed is unknown, defaulting to 1000 [ 346.412274][T12518] netlink: 'syz.2.1476': attribute type 4 has an invalid length. [ 346.460147][T12517] wg1 speed is unknown, defaulting to 1000 [ 346.471865][T12517] lo speed is unknown, defaulting to 1000 [ 346.480653][T12517] wg1 speed is unknown, defaulting to 1000 [ 346.715603][T12530] wg1 speed is unknown, defaulting to 1000 [ 346.724663][T12530] lo speed is unknown, defaulting to 1000 [ 346.732271][T12530] wg1 speed is unknown, defaulting to 1000 [ 346.983525][T12530] wg1 speed is unknown, defaulting to 1000 [ 346.991361][T12530] lo speed is unknown, defaulting to 1000 [ 346.999412][T12530] wg1 speed is unknown, defaulting to 1000 [ 347.278467][T12543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1480'. [ 347.376398][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 348.048641][T12567] bridge_slave_0: left allmulticast mode [ 348.057767][T12567] bridge_slave_0: left promiscuous mode [ 348.063655][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.080094][T12567] bridge_slave_1: left allmulticast mode [ 348.097206][T12567] bridge_slave_1: left promiscuous mode [ 348.106746][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.127391][T12567] bond0: (slave bond_slave_0): Releasing backup interface [ 348.140794][T12567] bond_slave_0: left promiscuous mode [ 348.155011][T12567] bond0: (slave bond_slave_1): Releasing backup interface [ 348.185291][T12567] bond_slave_1: left promiscuous mode [ 348.206109][T12567] team0: Port device team_slave_1 removed [ 348.221477][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1487'. [ 348.223587][T12567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.263739][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'. [ 348.276133][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1487'. [ 348.383014][T12579] wg1 speed is unknown, defaulting to 1000 [ 348.487811][T12579] lo speed is unknown, defaulting to 1000 [ 348.535998][T12579] wg1 speed is unknown, defaulting to 1000 [ 348.831934][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1493'. [ 349.424495][T12618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1495'. [ 351.203827][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1502'. [ 351.256189][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 351.269381][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1502'. [ 352.191149][T12694] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 352.234711][T12694] bond7: entered promiscuous mode [ 352.240719][T12694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.298327][T12694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.305967][T12694] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 352.317676][T12694] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 352.352853][T12694] bond7: (slave gre2): making interface the new active one [ 352.366786][T12694] gre2: entered promiscuous mode [ 352.421298][T12694] bond7: (slave gre2): Enslaving as an active interface with an up link [ 352.471012][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.480997][T12702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.690248][T12711] __nla_validate_parse: 2 callbacks suppressed [ 352.690266][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1518'. [ 352.817266][T12708] geneve3: entered promiscuous mode [ 352.830467][T12708] geneve3: entered allmulticast mode [ 352.843219][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 34061 - 0 [ 352.851652][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 46164 - 0 [ 352.860195][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 34061 - 0 [ 352.868848][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 46164 - 0 [ 352.881681][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 34061 - 0 [ 352.883696][T12724] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1522'. [ 352.905464][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 46164 - 0 [ 352.916857][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 34061 - 0 [ 352.926278][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 46164 - 0 [ 353.848506][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 354.091861][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.099941][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.408808][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 354.872574][T12786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1538'. [ 355.634937][T12811] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34061 - 0 [ 355.645964][T12811] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 46164 - 0 [ 355.701393][T12812] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1547'. [ 355.743459][T12811] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34061 - 0 [ 355.764820][T12811] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 46164 - 0 [ 355.831657][T12811] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34061 - 0 [ 355.841803][T12811] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 46164 - 0 [ 355.898571][T12811] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 34061 - 0 [ 355.908936][T12811] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 46164 - 0 [ 356.069112][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 46164 - 0 [ 356.078177][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 34061 - 0 [ 356.138598][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 46164 - 0 [ 356.150813][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 34061 - 0 [ 356.185830][T12813] wg1 speed is unknown, defaulting to 1000 [ 356.207129][T12813] lo speed is unknown, defaulting to 1000 [ 356.207603][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 46164 - 0 [ 356.225533][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 34061 - 0 [ 356.249129][T12813] wg1 speed is unknown, defaulting to 1000 [ 356.266669][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 46164 - 0 [ 356.275374][ T50] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 34061 - 0 [ 356.282713][T12825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1552'. [ 357.053369][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.085198][T12849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.101074][ T5832] lo speed is unknown, defaulting to 1000 [ 357.107458][ T5832] syz1: Port: 1 Link ACTIVE [ 357.832726][T12865] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1564'. [ 357.844568][T12869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 358.381921][T12886] wg1 speed is unknown, defaulting to 1000 [ 358.435106][T12886] lo speed is unknown, defaulting to 1000 [ 358.515756][T12886] wg1 speed is unknown, defaulting to 1000 [ 359.450392][T12909] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.573313][T12917] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1578'. [ 359.636817][T12917] vlan2: entered allmulticast mode [ 359.656255][T12917] erspan0: entered allmulticast mode [ 360.384348][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1587'. [ 360.608037][T12957] netlink: 'syz.0.1589': attribute type 12 has an invalid length. [ 360.615274][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1591'. [ 360.660677][T12957] netlink: 'syz.0.1589': attribute type 4 has an invalid length. [ 360.692712][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 360.696590][ T6443] lo speed is unknown, defaulting to 1000 [ 360.730458][ T6443] syz1: Port: 1 Link DOWN [ 360.795206][T12950] wg1 speed is unknown, defaulting to 1000 [ 360.809995][T12950] lo speed is unknown, defaulting to 1000 [ 360.819527][T12950] wg1 speed is unknown, defaulting to 1000 [ 362.398784][T13011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1603'. [ 363.250205][T13042] wg1 speed is unknown, defaulting to 1000 [ 363.292948][T13042] lo speed is unknown, defaulting to 1000 [ 363.345133][T13042] wg1 speed is unknown, defaulting to 1000 [ 364.007991][T13042] wg1 speed is unknown, defaulting to 1000 [ 364.044252][T13063] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 46164 - 0 [ 364.089383][T13063] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 34061 - 0 [ 364.098625][T13065] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1615'. [ 364.294130][T13042] lo speed is unknown, defaulting to 1000 [ 364.302525][T13042] wg1 speed is unknown, defaulting to 1000 [ 364.325465][T13063] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 46164 - 0 [ 364.336743][T13063] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 34061 - 0 [ 364.435268][T13063] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 46164 - 0 [ 364.449209][T13063] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 34061 - 0 [ 364.545361][T13063] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 46164 - 0 [ 364.575297][T13063] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 34061 - 0 [ 364.575664][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 364.895523][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 46164 - 0 [ 364.916597][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 34061 - 0 [ 364.955077][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 46164 - 0 [ 364.984047][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 34061 - 0 [ 365.017205][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 46164 - 0 [ 365.038010][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 34061 - 0 [ 365.066847][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 46164 - 0 [ 365.094555][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 34061 - 0 [ 365.620055][T13102] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1626'. [ 365.882612][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1631'. [ 365.916737][T13118] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 365.970987][T13117] wg1 speed is unknown, defaulting to 1000 [ 365.996833][T13117] lo speed is unknown, defaulting to 1000 [ 366.006763][T13117] wg1 speed is unknown, defaulting to 1000 [ 366.430001][T13127] syzkaller0: entered promiscuous mode [ 366.444514][T13127] syzkaller0: entered allmulticast mode [ 367.052939][T13148] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 368.037434][T13136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.329190][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1642'. [ 370.020529][T13194] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56685 - 0 [ 370.031073][T13194] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 370.088423][T13206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.119347][T13194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56685 - 0 [ 370.138404][T13194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 370.214057][T13194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56685 - 0 [ 370.223900][T13194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 370.270739][T13194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56685 - 0 [ 370.281234][T13194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 370.419644][ T3002] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 56685 - 0 [ 370.429219][ T3002] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 370.438760][T13216] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1655'. [ 370.452361][ T6462] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 56685 - 0 [ 370.460941][ T6462] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 370.493025][ T3002] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 56685 - 0 [ 370.501542][ T3002] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 370.520824][ T6462] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 56685 - 0 [ 370.530604][ T6462] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 370.642652][T13218] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1656'. [ 370.819805][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 371.037942][T13239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.036145][T13268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.159375][T13274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1672'. [ 372.291681][T13285] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 372.385901][T13285] gretap1: entered promiscuous mode [ 372.435388][T13285] netlink: 'syz.6.1674': attribute type 10 has an invalid length. [ 372.832047][T13296] netlink: 'syz.6.1676': attribute type 33 has an invalid length. [ 372.840187][T13296] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1676'. [ 372.901449][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 373.156200][T13302] wg1 speed is unknown, defaulting to 1000 [ 373.176391][T13302] lo speed is unknown, defaulting to 1000 [ 373.195239][T13302] wg1 speed is unknown, defaulting to 1000 [ 373.451309][T13318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1684'. [ 373.632984][T13329] netlink: 'syz.5.1687': attribute type 12 has an invalid length. [ 373.643896][T13329] netlink: 'syz.5.1687': attribute type 4 has an invalid length. [ 373.806411][T13332] netlink: 'syz.2.1688': attribute type 13 has an invalid length. [ 373.892381][ T60] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 56685 - 0 [ 373.901806][ T60] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.910717][ T60] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 56685 - 0 [ 373.919563][ T60] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.928261][ T60] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 56685 - 0 [ 373.937808][ T60] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.946477][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 56685 - 0 [ 373.957548][ T60] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 374.170029][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.183445][T13340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.486683][T13348] netlink: 'syz.0.1694': attribute type 3 has an invalid length. [ 374.943255][T13364] wg1 speed is unknown, defaulting to 1000 [ 374.979198][T13364] lo speed is unknown, defaulting to 1000 [ 374.999417][T13373] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1700'. [ 375.047124][T13364] wg1 speed is unknown, defaulting to 1000 [ 375.083547][T13377] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1701'. [ 375.241357][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1702'. [ 375.399459][T13373] wg1 speed is unknown, defaulting to 1000 [ 375.440872][T13373] lo speed is unknown, defaulting to 1000 [ 375.457308][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 375.531577][T13373] wg1 speed is unknown, defaulting to 1000 [ 375.689664][T13390] wg1 speed is unknown, defaulting to 1000 [ 375.712226][T13390] lo speed is unknown, defaulting to 1000 [ 375.768559][T13390] wg1 speed is unknown, defaulting to 1000 [ 375.871594][T13402] __nla_validate_parse: 1 callbacks suppressed [ 375.871609][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1708'. [ 376.164953][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 376.192498][T13418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.272840][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 376.459649][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 376.499800][T13423] wg1 speed is unknown, defaulting to 1000 [ 376.526871][T13423] lo speed is unknown, defaulting to 1000 [ 376.561958][T13423] wg1 speed is unknown, defaulting to 1000 [ 376.699363][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1716'. [ 376.731039][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 376.896107][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 377.106031][T13442] wg1 speed is unknown, defaulting to 1000 [ 377.137284][T13442] lo speed is unknown, defaulting to 1000 [ 377.169244][T13442] wg1 speed is unknown, defaulting to 1000 [ 377.216977][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1720'. [ 377.758981][T13464] wg1 speed is unknown, defaulting to 1000 [ 377.787016][T13468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1724'. [ 377.792005][T13464] lo speed is unknown, defaulting to 1000 [ 377.814095][T13468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1724'. [ 377.856529][T13464] wg1 speed is unknown, defaulting to 1000 [ 378.504231][T13488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.478066][T13536] wg1 speed is unknown, defaulting to 1000 [ 379.486384][T13536] lo speed is unknown, defaulting to 1000 [ 379.493758][T13536] wg1 speed is unknown, defaulting to 1000 [ 381.098184][T13588] wg1 speed is unknown, defaulting to 1000 [ 381.125812][T13588] lo speed is unknown, defaulting to 1000 [ 381.175297][T13588] wg1 speed is unknown, defaulting to 1000 [ 381.732169][T13603] "syz.3.1756" (13603) uses obsolete ecb(arc4) skcipher [ 381.743921][T13588] wg1 speed is unknown, defaulting to 1000 [ 381.753507][T13588] lo speed is unknown, defaulting to 1000 [ 381.768294][T13588] wg1 speed is unknown, defaulting to 1000 [ 382.358934][T13642] __nla_validate_parse: 10 callbacks suppressed [ 382.358951][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1764'. [ 382.419803][T13644] wg1 speed is unknown, defaulting to 1000 [ 382.432491][T13644] lo speed is unknown, defaulting to 1000 [ 382.440613][T13644] wg1 speed is unknown, defaulting to 1000 [ 383.339570][T13665] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1770'. [ 383.349599][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 383.361696][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 383.496844][T13671] wg1 speed is unknown, defaulting to 1000 [ 383.504677][T13671] lo speed is unknown, defaulting to 1000 [ 383.512128][T13671] wg1 speed is unknown, defaulting to 1000 [ 383.624315][ C0] ------------[ cut here ]------------ [ 383.630134][ C0] ODEBUG: free active (active state 0) object: ffff88805b0b4c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 383.643525][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 383.652791][ C0] Modules linked in: [ 383.656946][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 383.665903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.676020][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 383.681846][ C0] Code: 4c 89 ff e8 67 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 17 3e ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 383.701500][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 383.707598][ C0] RAX: 98fb001257684f00 RBX: dffffc0000000000 RCX: ffffffff8dc95200 [ 383.715609][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 383.723583][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 383.731569][ C0] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a395360 [ 383.739564][ C0] R13: ffffffff8bbf1280 R14: ffff88805b0b4c90 R15: ffffffff8b6cf7a0 [ 383.741122][T13673] wg1 speed is unknown, defaulting to 1000 [ 383.747555][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 383.747597][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.747612][ C0] CR2: 0000000000000000 CR3: 000000007b37e000 CR4: 00000000003526f0 [ 383.747630][ C0] Call Trace: [ 383.747639][ C0] [ 383.747653][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 383.777807][T13673] lo speed is unknown, defaulting to 1000 [ 383.780207][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 383.780243][ C0] kfree+0x115/0x6d0 [ 383.785191][T13673] wg1 speed is unknown, defaulting to 1000 [ 383.788619][ C0] rose_timer_expiry+0x4cb/0x600 [ 383.788659][ C0] call_timer_fn+0x17e/0x5f0 [ 383.818644][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.824139][ C0] ? call_timer_fn+0xbe/0x5f0 [ 383.828827][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 383.833983][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.839202][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.844453][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.849932][ C0] __run_timer_base+0x61a/0x860 [ 383.854835][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 383.860229][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 383.866540][ C0] run_timer_softirq+0xb7/0x180 [ 383.871411][ C0] handle_softirqs+0x286/0x870 [ 383.876216][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 383.880998][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 383.886320][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 383.891539][ C0] __irq_exit_rcu+0xca/0x1f0 [ 383.896160][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 383.901394][ C0] irq_exit_rcu+0x9/0x30 [ 383.905664][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 383.911317][ C0] [ 383.914272][ C0] [ 383.917212][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.923196][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 383.928929][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 a1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 383.948552][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 383.954627][ C0] RAX: 98fb001257684f00 RBX: ffffffff81967bf7 RCX: 98fb001257684f00 [ 383.962599][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e901 RDI: ffffffff8bbf0760 [ 383.970585][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 383.978579][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce570 [ 383.986565][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 383.994553][ C0] ? do_idle+0x1e7/0x510 [ 383.998786][ C0] default_idle+0x13/0x20 [ 384.003099][ C0] default_idle_call+0x73/0xb0 [ 384.007875][ C0] do_idle+0x1e7/0x510 [ 384.011959][ C0] ? __pfx_do_idle+0x10/0x10 [ 384.016576][ C0] cpu_startup_entry+0x44/0x60 [ 384.021343][ C0] rest_init+0x2de/0x300 [ 384.025598][ C0] start_kernel+0x3ae/0x410 [ 384.030112][ C0] x86_64_start_reservations+0x24/0x30 [ 384.035587][ C0] x86_64_start_kernel+0x143/0x1c0 [ 384.040714][ C0] common_startup_64+0x13e/0x147 [ 384.045684][ C0] [ 384.048707][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.055970][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 384.064883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.074929][ C0] Call Trace: [ 384.078206][ C0] [ 384.081038][ C0] dump_stack_lvl+0x99/0x250 [ 384.085615][ C0] ? __asan_memcpy+0x40/0x70 [ 384.090189][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.095373][ C0] ? __pfx__printk+0x10/0x10 [ 384.099957][ C0] vpanic+0x237/0x6d0 [ 384.103926][ C0] ? __pfx_vpanic+0x10/0x10 [ 384.108429][ C0] panic+0xb9/0xc0 [ 384.112143][ C0] ? __pfx_panic+0x10/0x10 [ 384.116554][ C0] __warn+0x31b/0x4b0 [ 384.120520][ C0] ? debug_print_object+0x16b/0x1e0 [ 384.125711][ C0] ? debug_print_object+0x16b/0x1e0 [ 384.130921][ C0] report_bug+0x2be/0x4f0 [ 384.135268][ C0] ? debug_print_object+0x16b/0x1e0 [ 384.140481][ C0] ? debug_print_object+0x16b/0x1e0 [ 384.145698][ C0] ? debug_print_object+0x16d/0x1e0 [ 384.150918][ C0] handle_bug+0x84/0x160 [ 384.155167][ C0] exc_invalid_op+0x1a/0x50 [ 384.159673][ C0] asm_exc_invalid_op+0x1a/0x20 [ 384.164517][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 384.170328][ C0] Code: 4c 89 ff e8 67 e4 92 fd 4d 8b 0f 48 c7 c7 00 11 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 1a 49 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 17 3e ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 384.189918][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 384.195973][ C0] RAX: 98fb001257684f00 RBX: dffffc0000000000 RCX: ffffffff8dc95200 [ 384.203928][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 384.211895][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 384.219850][ C0] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffffffff8a395360 [ 384.227810][ C0] R13: ffffffff8bbf1280 R14: ffff88805b0b4c90 R15: ffffffff8b6cf7a0 [ 384.235772][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 384.241409][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 384.246959][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 384.252055][ C0] kfree+0x115/0x6d0 [ 384.255941][ C0] rose_timer_expiry+0x4cb/0x600 [ 384.260870][ C0] call_timer_fn+0x17e/0x5f0 [ 384.265439][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 384.270883][ C0] ? call_timer_fn+0xbe/0x5f0 [ 384.275542][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 384.280643][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.285829][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.291016][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 384.296461][ C0] __run_timer_base+0x61a/0x860 [ 384.301315][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 384.306672][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 384.312914][ C0] run_timer_softirq+0xb7/0x180 [ 384.317752][ C0] handle_softirqs+0x286/0x870 [ 384.322505][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 384.327254][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 384.332525][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 384.337710][ C0] __irq_exit_rcu+0xca/0x1f0 [ 384.342287][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 384.347474][ C0] irq_exit_rcu+0x9/0x30 [ 384.351699][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 384.357322][ C0] [ 384.360237][ C0] [ 384.363149][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.369109][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 384.374816][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 a1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 384.394405][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 384.400457][ C0] RAX: 98fb001257684f00 RBX: ffffffff81967bf7 RCX: 98fb001257684f00 [ 384.408411][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e901 RDI: ffffffff8bbf0760 [ 384.416365][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 384.424318][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce570 [ 384.432271][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 384.440228][ C0] ? do_idle+0x1e7/0x510 [ 384.444465][ C0] default_idle+0x13/0x20 [ 384.448779][ C0] default_idle_call+0x73/0xb0 [ 384.453525][ C0] do_idle+0x1e7/0x510 [ 384.457582][ C0] ? __pfx_do_idle+0x10/0x10 [ 384.462165][ C0] cpu_startup_entry+0x44/0x60 [ 384.466910][ C0] rest_init+0x2de/0x300 [ 384.471137][ C0] start_kernel+0x3ae/0x410 [ 384.475626][ C0] x86_64_start_reservations+0x24/0x30 [ 384.481073][ C0] x86_64_start_kernel+0x143/0x1c0 [ 384.486169][ C0] common_startup_64+0x13e/0x147 [ 384.491104][ C0] [ 384.494348][ C0] Kernel Offset: disabled [ 384.498654][ C0] Rebooting in 86400 seconds..